Security Directory

H

healthadvisor.ch GmbH

healthadvisor.ch

65

HealthAdvisor.ch GmbH is a Swiss-based company providing modular practice management software tailored for therapists, coaches, and complementary medicine practitioners. Founded in 2013, the company positions itself as a niche SaaS provider with a strong emphasis on compliance, data security, and user-friendly solutions. Their software supports billing according to Swiss Tarif 590 and offers features like online appointment booking and 2-factor authentication, hosted securely in Switzerland with ISO 27001 certification. Technically, the website is built on WordPress with a modern theme and plugins supporting SEO, testimonials, and layered sliders. The infrastructure is hosted in Switzerland with a focus on security and privacy, reflected in the cookie consent mechanism and comprehensive privacy policy. Performance is moderate with good mobile optimization and basic accessibility. Security posture is strong with HTTPS enforced, ISO 27001 hosting, and secure authentication options. However, some security headers could be improved, and no explicit incident response or vulnerability disclosure information is found. Privacy compliance is robust with GDPR-aligned policies and cookie management. Overall, the website and business demonstrate high professionalism, trustworthiness, and a clear focus on their target market. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen their security and compliance stance.

M

Materiel-velo.com

materiel-velo.com

64

Materiel-velo.com is a French e-commerce retailer specializing in bicycles, mountain bikes, electric bikes, and related accessories and clothing. The company targets cycling enthusiasts and outdoor sports consumers primarily in France and neighboring countries. The website offers a broad catalog of products with a focus on competitive pricing and fast delivery within 24 to 48 hours. Technically, the site is built on the PrestaShop CMS platform, enhanced with modern search capabilities via Algolia and marketing automation through Connectif. The infrastructure supports a responsive and performant user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. However, the absence of WHOIS domain registration data reduces transparency and trust from a domain legitimacy perspective. Overall, the site presents a professional and trustworthy e-commerce platform with room for improvement in domain registration transparency and published security policies.

Dieter Gölsdorf's website serves as a comprehensive personal and professional history archive focusing on guitar design and related music industry stories spanning from 1964 to the present. The site targets guitar enthusiasts and music professionals interested in the legacy and contributions of Dieter Gölsdorf, featuring detailed narratives, publications, and multimedia content. The business model appears to be centered on personal branding and historical documentation rather than direct commercial sales. Technically, the website employs a straightforward tech stack with jQuery and custom CSS, hosted on kasserver.com. The site is moderately optimized for performance and mobile use but lacks advanced CMS or modern frameworks. SEO and accessibility are basic but functional. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which lowers its security posture and privacy compliance. No contact information or incident response channels are provided, limiting user trust and support capabilities. The site content is safe and suitable for general audiences, with no adult or explicit material. Overall, the website is a well-maintained personal archive with good content quality and moderate technical implementation. Security and privacy compliance improvements are recommended to enhance trust and user protection.

The website schema.press currently presents a robot challenge screen that acts as a security gate, likely a WAF or anti-bot mechanism, preventing direct access to the actual site content. This challenge page uses a JavaScript-based proof-of-work CAPTCHA and instructs users to enable cookies, indicating a focus on mitigating automated access or abuse. Due to this blocking, no business-specific content, policies, or contact information are accessible for analysis. The site is hosted behind Amazon CloudFront CDN, leveraging cloud infrastructure for content delivery and security. From a technical perspective, the page employs modern JavaScript features such as Web Workers and cryptographic hashing to implement the CAPTCHA challenge. However, no SEO, accessibility, or privacy compliance features are present on this page, and no security headers or SSL configuration details are visible in the provided data. The lack of visible business or security policies and contact information limits the ability to assess compliance or trustworthiness. Security posture is moderate in terms of challenge implementation but lacks transparency and visible best practices such as security headers or incident response contacts. The blocking mechanism itself reduces risk from automated threats but also prevents legitimate users and analysts from accessing the site content. Overall, the site cannot be fully evaluated due to this access restriction. Strategically, the site owners should consider providing accessible policy pages and contact information post-challenge to improve trust and compliance. Enhancing security headers and SSL reporting would also strengthen the security posture. Until the challenge is bypassed or removed, the site remains partially inaccessible, limiting business and security assessments.

ThemeSphere is a small technology business specializing in premium WordPress themes and plugins, targeting both beginners and professional website developers. The company has an established market presence with over 31,000 buyers and a high positive rating on the Envato marketplace. Their business model revolves around digital product sales via a third-party marketplace and direct customer support. Technically, the website is built on WordPress with a custom theme, uses modern web standards, and is hosted with reputable DNS providers. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

K

Kuppel Basel / Stiftung Kuppel

kuppel-basel.ch

45

Kuppel Basel is a small cultural event venue located in Basel, Switzerland, specializing in concerts, parties, and various cultural events. The website serves as a platform to showcase upcoming events, provide ticketing links, and share organizational information. The business targets a general audience interested in local cultural and nightlife activities. The market position is that of a local cultural hub with a focus on live music and community events. Technically, the website employs modern JavaScript libraries and tracking technologies including Google Tag Manager, Facebook Pixel, and TikTok Analytics. The site is mobile optimized with good navigation and design quality. However, there is room for improvement in accessibility and security headers implementation. Performance is moderate, and SEO practices are adequately addressed through meta tags. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks important security headers and published security policies. There is no visible privacy or cookie policy, which impacts GDPR compliance negatively. The extensive use of third-party tracking scripts without a consent mechanism raises privacy concerns. No incident response or vulnerability disclosure information is provided. Overall, the website is professionally presented and trustworthy for its business purpose but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

B

Badhuesli Kultur

badhues.li

61

Badhuesli Kultur is a small cultural venue and community space based in Basel, Switzerland, focusing on local and international music acts, dance, theater, and workshops. The website serves as a hub for the local music scene, offering rehearsal rooms and event hosting. The business model centers on cultural event facilitation and community engagement. Technically, the website is built on the Wix platform, utilizing standard Wix scripts and polyfills, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

T

the bird’s eye jazz club Basel

birdseye.ch

55

The bird’s eye jazz club Basel is a small, culturally significant jazz venue in Switzerland, offering a rich program of live jazz concerts, workshops, and related merchandise sales. The website effectively targets jazz enthusiasts and cultural event attendees with detailed event information, artist profiles, and audio samples, positioning itself as a trusted local institution with international reach. Technically, the site uses a custom PHP-based CMS with standard web technologies and a lightbox library for enhanced user experience. Mobile optimization and navigation are good, though some accessibility and SEO improvements are possible. Security posture is moderate with HTTPS assumed but lacking explicit security headers and cookie consent mechanisms. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and content-rich, though it would benefit from enhanced privacy and security disclosures.

F

Freizeitzentrum Landauer

landauer.ch

67

Freizeitzentrum Landauer is a community leisure center based in Riehen, Switzerland, providing a wide range of indoor and outdoor activities, event hosting, and social spaces for children, youth, and adults. The website reflects a local government or non-profit operated facility focused on community engagement and cultural activities. The digital infrastructure is built on Drupal 10 with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the website's community focus, indicating legitimacy and trustworthiness.

D

Don Bosco Basel GmbH

donboscobasel.ch

48

Don Bosco Basel GmbH operates a music and cultural center in Basel, Switzerland, serving as a hub for various local cultural institutions including orchestras and choirs. The organization provides rehearsal spaces and hosts concerts and cultural events, positioning itself as an important non-profit cultural venue in the region. The website is built on TYPO3 CMS and employs modern web technologies such as Google Tag Manager and Google Fonts, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience of cultural organizations and the general public interested in music and culture. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although the absence of security headers and cookie consent mechanisms suggests room for improvement. Overall, the website reflects a professional and trustworthy presence aligned with the organization's mission and local cultural ecosystem.

M

Museum Tinguely Basel

tinguely.ch

74

Museum Tinguely Basel is a cultural institution dedicated to the largest collection of kinetic works by Jean Tinguely. The museum offers a variety of services including exhibitions, events, guided tours, workshops, and digital multimedia content. It targets a broad audience including families, schools, and art enthusiasts, positioning itself as a leading museum in Basel, Switzerland. The website reflects a professional and well-structured digital presence with comprehensive event listings and visitor information. Technically, the site uses modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for consent management, likely built on Adobe Experience Manager CMS. The site is mobile optimized, accessible, and SEO friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-maintained, supporting the museum's mission and visitor engagement.

B

BOSS Corporation

boss.info

70

BOSS Corporation operates a comprehensive global website showcasing its world-leading product lineup of guitar effects processors, multi-effects, loop stations, and related audio equipment. The brand is well-established in the music technology industry, targeting musicians and audio professionals worldwide. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Kentico CMS, Adobe Analytics, and OneTrust for privacy compliance. Security posture is solid with HTTPS enforced and a vulnerability disclosure policy publicly available, though explicit security headers could be improved. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy given its strong brand presence and professional content. Overall, the site demonstrates a mature digital infrastructure with moderate user tracking balanced by privacy mechanisms.

Dissenter GmbH is a Swiss-based small technology company specializing in the creation of web applications, interactive exhibits, apps, and print design services. Founded in 2006 and currently led by experienced professionals, the company serves a diverse clientele including government entities and well-known corporations. Their service offerings span web design, app development, interactive POS solutions, and print media, positioning them as a niche provider in the digital and classical communication space. Technically, the website employs modern web technologies such as HTML5, CSS, JavaScript, and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation, though it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage but missing explicit security headers and incident response information. Overall, the domain registration data aligns well with the company's claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

R

Roland Corporation

roland.com

76

Roland Corporation operates a comprehensive global website showcasing its leadership in manufacturing and distributing electronic musical instruments and related audio equipment. The company targets musicians, producers, and audio professionals with a broad product portfolio including keyboards, synthesizers, guitars, percussion, and digital recording tools. The website demonstrates a mature digital presence with rich multimedia content, clear navigation, and integration of modern web technologies such as Adobe Analytics and OneTrust for privacy compliance. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contact details could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the evident legitimacy of the brand and its digital assets. Overall, the site reflects a professional, enterprise-grade digital footprint aligned with Roland's market position.

Ausstellungsraum Klingental operates as a cultural exhibition space in Switzerland, focusing on hosting art exhibitions and providing free consultations for cultural workers. The website presents a clear schedule of upcoming events and exhibitions, targeting artists, cultural professionals, and the general public interested in contemporary art. The business model appears to be non-profit or cultural institution-oriented, with a local/regional market position. Technically, the website is built using Vue.js with deferred JavaScript loading, indicating a modern frontend framework usage. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Hosting details and CMS are not explicitly identified. From a security perspective, the website lacks visible security headers, privacy policies, cookie consent mechanisms, and contact information for security or data protection concerns. No analytics or tracking scripts were detected, which reduces privacy risks but also indicates limited data-driven insights. The absence of HTTPS enforcement details and security best practices lowers the security posture. Overall, the website is functional and professionally designed for its cultural purpose but requires improvements in privacy compliance, security hardening, and contact transparency to enhance trust and regulatory adherence.

B

Basics09

basics09.de

38

Basics09 is a Berlin-based design agency specializing in transmedia concepts primarily serving the art, culture, design, science, and education sectors. The company offers services including visual identity, campaigns, strategy, publication, exhibition graphics, and website design. Their market position is that of a niche, small-sized agency with a professional and consistent brand presence. The website reflects a high level of digital maturity with modern technologies such as Alpine.js, lazy loading, and embedded Vimeo videos, delivering excellent user experience and mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though lacking explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

B

BKK24

bkk24.de

60

BKK24 operates as a statutory health insurance provider in Germany, offering a wide range of healthcare services with a focus on comprehensive coverage and customer support. The website positions itself as a reliable and accessible insurer with nationwide presence and 24/7 service availability. The business model centers on statutory health insurance, targeting insured individuals and employers within Germany. The website content is professionally presented, consistent with the healthcare industry standards, and compliant with GDPR regulations. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap for responsive design and user interaction. Cookiebot is integrated for cookie consent management, reflecting a mature approach to privacy compliance. Hosting is managed via kasserver.com, with secure HTTPS connections and moderate performance. SEO and accessibility are adequately addressed, though some improvements in accessibility could be beneficial. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Analytics usage is moderate, primarily via self-hosted Matomo and etracker, with clear data retention policies. Overall, BKK24's website demonstrates a solid digital presence with good privacy and security practices aligned with its business sector. Strategic enhancements in security headers, incident response disclosure, and accessibility would further strengthen its posture. The site is trustworthy, professional, and suitable for its target audience.

The website 'Bewegen.Integrieren.Fördern' serves as a crowdfunding platform operated by the Niedersächsische Lotto-Sport-Stiftung, focusing on supporting sports projects within Lower Saxony, Germany. It provides a digital venue for local sports clubs and initiatives to raise funds, featuring project listings with progress tracking and community engagement features. The platform leverages modern web technologies including React and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Technically, the platform is built on a proprietary or custom CMS with integration of third-party services such as Google Analytics (with IP anonymization) and Eye-Able accessibility scripts. Hosting and DNS are managed via DomainControl (GoDaddy), and the site uses HTTPS with a good SSL configuration. However, there is a lack of visible HTTP security headers which could be improved to enhance security posture. From a security perspective, the site demonstrates good baseline practices including encrypted connections and user consent for cookies. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally maintained. Strategically, the platform is positioned as a regional niche crowdfunding service for non-profit sports projects, supported by a lottery sports foundation. It targets sports clubs and community members in Lower Saxony, providing a valuable service to facilitate funding and engagement. The business model is straightforward, relying on project hosting and donation facilitation. The site’s digital maturity is moderate with room for technical and security enhancements to further strengthen trust and compliance.

M

Mutualease

mutualease-cml.com

68

Mutualease is a French financial services brand specializing in leasing and financing professional equipment, operating under the Crédit Mutuel Leasing umbrella. The company targets a broad audience including constructors, distributors, private enterprises, and public sector actors, offering tailored leasing solutions such as credit-bail and operational leasing. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and commitments, including partnerships with reputable entities like the European Investment Fund. Technically, the site uses modern web technologies and integrates Piano Analytics for audience measurement, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is generally good with HTTPS enforced and a published vulnerability disclosure policy, though explicit security headers and incident response contacts are not visible. The absence of WHOIS data for the domain is a notable concern, suggesting possible registration anomalies, but the overall digital presence and branding indicate a legitimate business. Strategic recommendations include enhancing security headers, publishing explicit security policies, and resolving WHOIS inconsistencies to improve trust and compliance.

W

WBA | Bauhaus Weiterbildungsakademie Weimar e.V.

wba-weimar.de

43

WBA | Bauhaus Weiterbildungsakademie Weimar e.V. is a specialized educational institution affiliated with the Bauhaus-Universität Weimar, offering over 25 years of experience in professional development through part-time studies, seminars, workshops, and conferences primarily in the construction and architecture sectors. Their offerings include master’s programs, certificate courses, inhouse training, and language courses tailored for professionals. The website reflects a well-established niche player with a clear academic and practical orientation, targeting professionals and students seeking continuing education in related fields. Technically, the website uses a mix of JavaScript libraries including jQuery and TinyMCE, hosted on Keymachine servers, and employs a consent management platform to comply with GDPR requirements. The site is mobile-optimized with moderate performance and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

F

firma.de

firma.de

65

firma.de is a German-based digital platform specializing in company formation and business services, targeting entrepreneurs and startups. The website offers a comprehensive suite of services including various legal forms of company formation, bookkeeping, payroll, tax consulting, and legal advice. With over 25,000 firm foundations supported, firma.de holds a strong market position as a trusted partner for business founders in Germany. The platform emphasizes ease of use, transparency, and expert support throughout the business lifecycle. Technically, the website leverages modern web technologies such as Google Tag Manager, Stripe for payments, and AWS Cloudfront for content delivery, ensuring fast and responsive user experience across devices. Security posture is good with HTTPS enforced and secure third-party integrations, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy but lacks a cookie consent mechanism. Overall, firma.de presents a professional, trustworthy, and user-friendly platform with a solid business model and digital maturity.

D

dorsa + 820 Architektur AG

dorsa-820.com

52

dorsa + 820 Architektur AG is a small Swiss architecture firm with a minimalist online presence hosted on the Cargo Collective platform. The website primarily serves as a portfolio and contact point, providing essential contact details and links to partner sites. The technical infrastructure is modern and secure with HTTPS enabled, but lacks advanced security headers and privacy policies. The domain is newly registered, which aligns with a potentially new or rebranded business. Overall, the site is functional but basic in content and compliance.

F

Feratel Medien Technologien GmbH

feratel.de

67

Feratel Medien Technologien GmbH is a medium-sized technology company specializing in comprehensive tourism marketing and data management solutions. The company operates multiple country-specific domains, indicating a strong international presence in the tourism sector. Their business model focuses on providing B2B software and services tailored to tourism marketing, upselling, service, data strategies, communication, and interfaces. The website content is professionally presented, targeting tourism industry stakeholders and marketing professionals. Technically, the site is built on TYPO3 CMS, integrates Cookiebot for GDPR-compliant cookie management, and uses Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with detailed cookie policies and consent mechanisms. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

F

Feratel

feratel.fr

67

Feratel is a medium-sized technology company specializing in providing comprehensive, customized tourism marketing and data management solutions. The company has a strong market presence in France and other European countries, supported by multiple regional domains and multilingual content. Their business model focuses on B2B services targeting tourism industry professionals and destination managers. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the website is built on TYPO3 CMS and integrates modern cookie consent management via Cookiebot, ensuring GDPR compliance. The use of HTTPS and inclusion of detailed cookie categories demonstrate a commitment to privacy and security. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found, indicating room for improvement in security posture. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but the absence of WHOIS data limits full domain trust assessment. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and granular user consent options. Overall, the website and business appear legitimate and professional, with a good balance of content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clear contact information for incident response to further strengthen trust and security.

F

feratel media technologies AG

feratel.at

67

Feratel media technologies AG is a specialized provider of digital destination management and marketing solutions primarily serving the tourism industry. The company offers a comprehensive suite of services including marketing, upselling, service, data strategies, and communication tailored to enhance digital tourism experiences. Positioned as a key player in Austria and surrounding markets, Feratel targets tourism stakeholders and destination managers with B2B digital solutions. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party tools such as Cookiebot and Google Tag Manager to manage consent and analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are absent. Overall, the site demonstrates good compliance with GDPR through detailed privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

familienplanung.de

65

familienplanung.de is an authoritative German government-backed health information portal operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). It provides comprehensive, scientifically grounded information on pregnancy, childbirth, contraception, fertility, and related counseling services. The site targets pregnant women, couples planning families, and individuals facing pregnancy conflicts. The portal offers educational content, online tests, and access to counseling resources, positioning itself as a trusted public health resource in Germany. Technically, the website is built on TYPO3 CMS, uses Matomo analytics with strong privacy protections, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for family planning information.

T

Thurgau 360 Grad

thurgau360.ch

37

Thurgau 360 Grad is a small regional business specializing in providing virtual 360-degree tours and interactive digital marketing solutions for the tourism sector and local businesses in the Thurgau region of Switzerland. The website is professionally designed using WordPress and integrates various plugins to deliver rich multimedia content and interactive experiences. The company positions itself as a niche player offering innovative destination marketing tools to municipalities, hospitality providers, and tourist attractions. Technically, the site employs modern web technologies including Google Maps API, reCAPTCHA, and SEO plugins, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks comprehensive security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy page but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

O

OCHSNER SPORT

ochsnersport.ch

67

OCHSNER SPORT is a prominent Swiss sports retail company operating a comprehensive e-commerce platform offering over 30,000 sports articles and top brands. The website targets sports enthusiasts in Switzerland, providing a broad range of sportswear and equipment with value-added services such as free shipping and free in-store returns. The business model is focused on online retail complemented by physical stores, positioning itself as a leading player in the Swiss sports retail market. Technically, the website leverages modern web technologies including Vue.js and Nuxt.js frameworks, styled with Tailwind CSS, and integrates marketing and analytics tools such as Google Tag Manager and Dynamic Yield. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit security policies. Cookie consent is managed via a consent manager, indicating some privacy compliance efforts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable security posture but with opportunities for enhancement. Overall, the website is professional and trustworthy with a strong business presence. However, it would benefit from publishing clear privacy and terms of service policies and implementing additional security headers to strengthen its security and compliance posture.

Wissenschaft aktuell is a German media company specializing in delivering up-to-date news and articles on science, research, and technology. Operated by Scientec Internet Applications + Media GmbH, the website targets a general audience interested in scientific developments, offering press agency services, newsletters, and RSS feeds. The site maintains a professional presentation with consistent branding and a clear focus on scientific content. Technically, the website uses a custom CMS (onTEAM), standard web technologies, and monetizes via Google Adsense and Google Funding Choices. While the site is accessible and uses HTTPS, it lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page. No direct company contact emails or phone numbers are publicly listed, but a contact form is available. Overall, the site is trustworthy and well-positioned within its niche media segment.

D

Disney+

disneyplus.com

66

Disney+ is a leading global streaming platform operated by The Walt Disney Company, offering a wide range of family-friendly content including movies, series, and original productions from Disney, Marvel, Pixar, Star Wars, National Geographic, and Hulu. The website targets a general audience with a subscription-based business model and strong market positioning in the media industry. The platform is optimized for multiple devices and regions, including Finland as indicated by the localized content. Technically, the site leverages modern web technologies such as React and is hosted on AWS with CDN support for high performance and availability. Security posture is strong with HTTPS, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

F

F11 - The One-Stop-Platform For Digital Advertising

f11-ads.com

56

The website www.factor-eleven.com appears to be a Wix-hosted site with standard Wix scripts and polyfills. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is provided, which diminishes business credibility. Technically, the site uses modern JavaScript polyfills and Wix platform technologies but lacks advanced security headers and practices. Overall, the security posture is weak, and the site does not demonstrate GDPR compliance or incident response readiness. The content quality and business information are minimal, limiting the ability to assess the company's market position or services. Strategic recommendations include verifying domain registration, implementing privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

B

Börsenvereinsgruppe

boersenvereinsgruppe.de

57

The Börsenvereinsgruppe website serves as the digital presence for a key organization supporting the German book industry. It provides comprehensive information about the group's mission to foster cultural, economic, and legal frameworks for the book market, alongside education and event services. The site targets professionals, career entrants, apprentices, and students interested in the book sector. Technically, the website employs modern web technologies including Bootstrap and FontAwesome, is hosted by Anexia, and features responsive design and accessibility considerations. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and headers. The domain registration is consistent and trustworthy, with no privacy protection masking ownership, aligning well with the organization's transparency. Overall, the site is professional, content-rich, and trustworthy, supporting the group's role as a central industry stakeholder.

M

MVB GmbH

isni-service.de

59

MVB GmbH operates as an official ISNI agency providing services to uniquely identify authors and creators in the book trade, enhancing product visibility. The company holds a strong market position within the German media and publishing sector, offering key services such as ISNI search and registration, metadata management, and related book trade solutions. The website reflects a professional and consistent brand image targeting publishers, authors, and book trade professionals. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Tag Manager and CookieFirst for consent management. Hosting is managed via Anexia, indicated by the nameservers. The site is mobile optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy and professionally maintained with a high legitimacy score. Strategic improvements include implementing security headers, publishing a security policy, and adding a security.txt file to enhance transparency and incident response readiness.

R

robin-shop.com

robin-shop.com

65

robin-shop.com is a German-based e-commerce business specializing in sustainable, handmade headwear products such as stirnbänder, mützen, and caps. The company positions itself as the only cap manufacturer in Germany, producing unique items in their Allgäu manufactory. The website targets environmentally conscious consumers seeking high-quality, locally made fashion accessories. Technically, the site is built on the Shopify platform using the Broadcast theme, leveraging modern JavaScript libraries and consent management tools to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security policies are published. Marketing and analytics are implemented via trusted services such as Google Analytics, Klaviyo, and Facebook Pixel, with user consent mechanisms in place. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Z

Zammad

zammad.com

75

Zammad is a medium-sized technology company founded in 2012, specializing in open source helpdesk and ticketing software designed to streamline customer service operations. The company positions itself as a provider of powerful yet user-friendly solutions that integrate multiple communication channels and offer extensive features such as multilingual support, automation, and various integrations. Their market presence is supported by strong branding, customer testimonials, and a focus on digital sovereignty. Technically, the website demonstrates a modern and responsive design with fast performance and good SEO practices. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. Security-wise, the site enforces HTTPS and employs domain transfer protections, but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in cookie consent and security transparency are recommended.

The website 'Bloggers Unite' hosted at xperta.es is a basic WordPress blog platform primarily serving general audiences with blog content. The site currently contains minimal content, including the default 'Hello world!' post, indicating it may be newly established or under development. The business model appears to be content publishing with no evident commercial or transactional services. Technical infrastructure is based on WordPress CMS with standard web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate mobile optimization and basic SEO but lacks advanced technical or security features. Security posture is minimal with no detected security headers or policies, and the site lacks privacy, cookie, or terms of service documentation. The domain registration is privacy protected, which is common for small personal blogs but limits trust signals. Overall, the site scores low to moderate on content quality, security, and privacy compliance, reflecting a basic web presence without professional or business-grade features.

D

Deutscher Tennis Bund

mypadel.de

75

mypadel.de is an official platform dedicated to the sport of Padel in Germany, operated under the Deutscher Tennis Bund. It provides comprehensive information including news, club and coach directories, event details, and partner information, serving players, coaches, clubs, and partners. The website is professionally designed with consistent branding and clear navigation, targeting the German Padel community. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates third-party services for analytics, advertising, and cookie consent management. Security posture is strong with HTTPS enforced and secure form implementations, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with official federation backing and partner endorsements.

D

DOSB New Media GmbH

sporteurope.tv

8

The website sporteurope.tv is operated by DOSB New Media GmbH, a German media company founded in 2018. It appears to be a sports media platform targeting European sports fans, particularly German-speaking audiences. The business model focuses on sports streaming and content delivery, positioning itself as a niche regional sports media provider. The technical infrastructure uses modern frontend technologies such as Bootstrap and Font Awesome, with moderate performance and good mobile optimization. However, the website lacks visible privacy and cookie policies, contact information, and security headers, indicating gaps in privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the domain registration details are consistent and legitimate. Overall, the website presents a basic but functional digital presence with room for improvement in security and compliance.

D

Deutscher Tennis Bund (DTB)

tennis.de

11

tennis.de is the official digital platform for tennis in Germany, operated under the Deutscher Tennis Bund (DTB). It serves as a centralized hub for tennis players, clubs, fans, and stakeholders, offering services such as player profiles, tournament and league searches, training offers, news, and licensing for ranked players. The platform is well-positioned as the authoritative source for tennis-related activities in Germany, leveraging partnerships with major tennis equipment brands and regional tennis federations. Technically, the website is built on Adobe Experience Manager, hosted on Adobe's cloud infrastructure, and integrates modern JavaScript frameworks and advertising technologies. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is solid with HTTPS and secure form handling, though it lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is evident. Overall, tennis.de is a professional, trustworthy, and comprehensive platform for the German tennis community.

SailingAdmin is a specialized software platform developed primarily for the administration of sailors and officials affiliated with Swiss Sailing. It provides member data management and regatta registration functionalities, partially accessible to clubs and classes. The platform emphasizes data privacy and confidentiality, allowing members to control their personal data visibility and usage. The website reflects a niche market position focused on Swiss Sailing's community with a small-scale business model and a consistent brand presence. Technically, the site uses standard web technologies including Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate, with no explicit security headers detected and no visible vulnerabilities, but lacking advanced security policies or incident response information. Privacy compliance is partially met with a privacy policy present but missing cookie consent mechanisms and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with a legitimate domain registration consistent with the business history and location.

W

World Sailing

sailing.org

10

World Sailing is the official international governing body for the sport of sailing, providing comprehensive information on sailors, international regattas, events, boat classes, member federations, and rankings across multiple sailing disciplines including fleet racing, match racing, para sailing, and e-sailing. The organization serves a global audience of sailing enthusiasts, athletes, and affiliated federations, positioning itself as the authoritative source for sailing governance and event information worldwide. The website reflects a medium-sized, professional non-profit entity with consistent branding and good content quality. Technically, the website employs modern web technologies such as Vue.js and is hosted on a CDN infrastructure (Amazon CloudFront), ensuring moderate to good performance and mobile optimization. The presence of Google Tag Manager indicates active analytics and marketing tracking, although privacy compliance measures such as cookie consent and privacy policies are not evident in the provided content. From a security perspective, the site enforces HTTPS and follows some best practices but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or suspicious elements were detected in the content. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature, and does not raise immediate concerns. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy compliance and security header implementation are recommended to enhance trust and regulatory adherence.

P

Peter Frisch GmbH

frisch-homepage.de

8

Peter Frisch GmbH is a small local business based in München, Germany, with an online presence hosted on the Wix platform. The website provides basic contact information including a phone number and physical address but lacks detailed business descriptions or service listings. The technical infrastructure is standard for Wix-hosted sites, utilizing Wix's Thunderbolt framework and common web technologies such as JavaScript and JSON-LD for structured data. Mobile optimization appears adequate, but SEO and accessibility features are basic. Security posture is moderate with HTTPS implied but no explicit security headers or policies found. Privacy and cookie policies are absent, indicating potential compliance gaps. Overall, the site is functional but could benefit from enhanced content, security, and compliance features to improve trust and professionalism.

J

juris GmbH

landesrecht-mv.de

10

The website 'Landesrecht Mecklenburg-Vorpommern' is an official legal information portal operated by juris GmbH in cooperation with the Justice Ministry of Mecklenburg-Vorpommern, Germany. It provides free access to consolidated state laws, administrative regulations, and court decisions, targeting citizens and legal professionals. The business model focuses on public service and legal transparency, positioning itself as a trusted government resource. Technically, the site uses modern web technologies including React and Webpack, with a CMS platform (jportal) tailored for legal content management. The site is mobile-optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

L

Landesregierung Mecklenburg-Vorpommern

regierung-mv.de

10

The website www.regierung-mv.de is the official government portal for the state of Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information hub for the state's government activities, ministries, press releases, and public services. The portal targets citizens, media, and stakeholders interested in regional governance and public affairs. It offers rich content including ministerial information, news, events, and accessibility features such as content in sign language and easy language. Technically, the site uses standard web technologies with a likely custom CMS, providing good mobile optimization and accessibility. Security-wise, it implements cookie consent mechanisms and uses HTTPS, but lacks explicit security headers and incident response information. The WHOIS data aligns with the official government entity, confirming legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical security headers.

T

Telia Company

teliacompany.com

76

Telia Company is a leading telecommunications provider operating primarily in the Nordic and Baltic regions. The company offers a broad range of connectivity and digital services targeting both consumer and enterprise customers. Their market position is strong, supported by a consistent brand presence and a focus on sustainability and corporate governance. The website reflects a mature digital presence with modern technologies and a professional design. The technical infrastructure is built on React and modern web standards, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of publicly available WHOIS data suggests privacy protection, which is common for large enterprises. Overall, the website and company demonstrate a high level of professionalism and trustworthiness.

Native is a specialized insurance brokerage focused on digital assets and the crypto-native ecosystem. They leverage decades of experience to provide bespoke insurance and risk management solutions tailored for onchain and offchain risks, integrating traditional insurance with blockchain technology. Their services include onchain capital insurance, smart contract-based policy execution, and crypto-denominated policies, positioning them as a niche player bridging legacy insurance and web3 innovation. Technically, the website is built on modern frameworks such as Next.js and React, with content managed likely via Contentful CMS. The site demonstrates good design and mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is moderate with no visible security headers or explicit SSL details in the provided data, and privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are visible, limiting direct communication channels. Overall, the site is professional and safe but would benefit from enhanced security practices and compliance transparency.

S

Stadt Wetzikon

wetzikon.ch

67

The website www.wetzikon.ch is the official municipal portal for the city of Wetzikon in the Zürcher Oberland region of Switzerland. It provides comprehensive information about the city, including tourism, culture, events, and local services. The site targets residents, visitors, and local businesses, serving as a central information hub. The business model is that of a government municipal service, with a medium-sized scope and a focus on public service and community engagement. Technically, the website is built using the Weblication® CMS platform, indicating a professional and structured content management approach. The site uses modern web technologies including Font Awesome icons and JavaScript, and it is optimized for mobile devices with good accessibility features. Performance is moderate, with room for improvement in loading speed and technical optimizations. From a security perspective, the site uses HTTPS with a strict referrer policy, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy or cookie policy, nor any incident response or vulnerability disclosure information, which are areas for improvement. No vulnerabilities or suspicious patterns were detected in the provided data. Overall, the website is trustworthy and professional, with a strong business credibility score. However, it would benefit from enhanced privacy compliance, improved security headers, and explicit policies to better align with GDPR and modern security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response contacts to improve transparency and security posture.

N

Naturpark Sternberger Seenland

naturpark-sternberger-seenland.de

52

Naturpark Sternberger Seenland operates as a regional nature park authority and tourism promoter in Mecklenburg-Vorpommern, Germany. The website provides comprehensive information about the park's natural features, events, and educational offerings, targeting nature enthusiasts, families, and tourists. The business model is non-profit, focusing on environmental education and regional promotion. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries like Leaflet for maps, and integrates Matomo for analytics, reflecting a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management in place, though security headers and explicit security policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though contact information is primarily via forms rather than direct emails or phone numbers.

N

Nationalparkamt Vorpommern

nationalpark-jasmund.de

49

Nationalpark Jasmund is a German national park website representing the smallest national park in Germany, renowned for its ancient beech forests designated as UNESCO World Heritage. The site serves as an informational and educational platform targeting nature enthusiasts, visitors, and volunteers, offering details on the park's natural features, events, and conservation efforts. The business operates within the government and non-profit sectors, focusing on environmental preservation and public engagement. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics with user consent, and embeds multimedia content responsibly. Security posture is solid with HTTPS and consent mechanisms, though it lacks some advanced security headers and formal security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no detected adult or questionable content.

N

Nationalpark Vorpommersche Boddenlandschaft

nationalpark-vorpommersche-boddenlandschaft.de

49

The website www.nationalpark-vorpommersche-boddenlandschaft.de serves as the official digital presence for the Nationalpark Vorpommersche Boddenlandschaft, the third largest national park in Germany. It provides comprehensive information about the park's natural environment, history, visitor guidelines, events, and educational programs. The site targets nature enthusiasts, visitors, and educational groups, offering detailed content in German with English language support. The business model is primarily informational and educational, supported by government or non-profit funding, with a strong emphasis on conservation and public engagement. Technically, the website is built on TYPO3 CMS, a mature open-source content management system, and employs Matomo for analytics, ensuring privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is adequate with HTTPS enforced and a consent management platform in place, though it lacks some advanced security headers and explicit security policies. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. However, the absence of a published security policy or incident response contact is a minor gap. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The overall risk profile is low, with recommendations focusing on enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and resilience.