High-risk security reports

Ö

ÖFT - Österr. Fachverband für Turnen

oeft.at

49

Turnsport Austria is the official Austrian federation representing approximately 450 gymnastics clubs with over 90,000 members across various disciplines including artistic gymnastics, rhythmic gymnastics, trampoline, sport aerobics, and more. The organization serves both grassroots and elite sports communities, providing event organization, training, and certification services. The website reflects a well-maintained digital presence with comprehensive event calendars, news updates, and social media integration, targeting athletes, coaches, clubs, and sports enthusiasts in Austria. Technically, the site uses a custom CMS by Internetkonzepte.at, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and is mobile responsive with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating stable and accessible infrastructure. Overall, the site demonstrates a mature digital footprint appropriate for a national sports federation.

A

ASKÖ WAT Wien

askoewat.wien

42

ASKÖ WAT Wien is a well-established regional sports association based in Vienna, Austria, operating under the umbrella of the ASKÖ Bundesorganisation. The organization focuses on providing diverse sports programs, supporting sports clubs, and promoting health and fitness activities for a broad audience including athletes, clubs, and the general public. Their website reflects a professional and community-oriented approach with clear navigation and relevant content. Technically, the site uses a mix of established JavaScript libraries and a proprietary CMS, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and active content. Overall, the site is trustworthy and serves its community well, though enhancements in privacy compliance and security hardening are recommended.

A

ASKÖ Tirol

askoe-tirol.at

40

ASKÖ Tirol is a well-established regional sports association based in Innsbruck, Austria, dedicated to promoting diverse sports activities, health, and fitness programs within the Tirol region. The organization supports local sports clubs, organizes championships, and offers educational courses and community events. The website reflects a professional and community-focused business model with a strong regional presence and partnership ecosystem anchored by the ASKÖ Bundesorganisation. Technically, the website uses a traditional CMS platform with modern JavaScript libraries and is mobile-optimized, though there is room for improvement in security headers and incident response transparency. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security policies or vulnerability disclosure mechanisms. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement, making it a reliable resource for its target audience.

A

ASKÖ Salzburg

askoe-salzburg.at

47

ASKÖ Salzburg is a well-established regional non-profit sports association based in Salzburg, Austria, focused on promoting diverse sports activities, supporting local sports clubs, and providing training and community programs. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to sports enthusiasts and community members in the region. Technically, the site uses a modern JavaScript stack including jQuery and FontAwesome, built on the Internetkonzepte.at CMS platform, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response disclosures. Overall, the site is trustworthy, GDPR compliant, and provides comprehensive contact information and partner links.

A

ASKÖ Niederösterreich

askoenoe.at

48

ASKÖ Niederösterreich is a well-established regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Lower Austria. The organization offers a variety of projects, training programs, and community services aimed at athletes, sports clubs, and enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and several UI libraries, running on a custom CMS by Internetkonzepte.at. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy and cookie policies are implemented with GDPR compliance, and social media integration is active, primarily via Facebook. From a security perspective, the site uses HTTPS and has basic security best practices in place, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business entity. Overall, the website presents a low-risk profile with a solid foundation for business credibility and user trust. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance the security posture and compliance maturity.

A

ASKÖ Kärnten

askoe-kaernten.at

47

ASKÖ Kärnten is a well-established regional sports association based in Kärnten, Austria, focused on promoting diverse sports activities, fitness programs, and supporting local sports clubs. The organization targets sports enthusiasts and community members, providing events, courses, and youth development initiatives. The website reflects a professional and consistent brand presence with clear navigation and relevant content in German. Technically, the site uses a custom CMS (Internetkonzepte.at CMS) with common JavaScript libraries and social media integration, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and incident response disclosures. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

F

Fonds de dotation 16H24

16h24.org

46

The Fonds de dotation 16H24 is a French non-profit foundation dedicated to supporting young people placed in foster care or social assistance to become autonomous between the ages of 16 and 24. The foundation operates under the aegis of Fondation Caritas and focuses on funding projects that help these youths overcome social and economic challenges. The website is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. It is hosted by OVH sas, a reputable provider, and uses HTTPS with a good SSL configuration. Security measures include the use of hCaptcha on forms and domain status protections, though DNSSEC is not enabled and security headers are lacking. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance statements or detailed cookie policies. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and well-positioned within its niche non-profit sector.

P

Photoclimat

photoclimat.com

48

Photoclimat is a French non-profit organization that organizes environmental and social photography biennales and exhibitions, primarily in Paris and surrounding regions. The website serves as a platform to promote these cultural events, providing information about upcoming biennales, exhibitions, and opportunities to support or volunteer. The business model is focused on cultural promotion and public engagement through free outdoor exhibitions. Technically, the website is built on WordPress with a modern theme and several plugins for galleries, forms, and analytics. The site is mobile-optimized and uses Google Analytics for visitor tracking. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Contact information is not explicitly provided on the analyzed pages, which may impact user trust. Overall, the website is professional and relevant to its niche but would benefit from enhanced privacy and security practices.

The website at wearesista.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered with Gandi SAS since 2018 and is valid until 2026, indicating a legitimate registration history. However, the lack of accessible content, absence of privacy, cookie, and terms of service policies, and no contact information severely limit the ability to assess the business or its services. Technically, the site lacks DNSSEC and security headers, and no SSL/TLS details are available from the content provided. Overall, the website appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user experience and low trustworthiness.

R

Radio Munot Club

radiomunotclub.ch

32

Radio Munot Club is a non-profit organization supporting the local radio station Radio Munot in Schaffhausen, Switzerland. The club finances investments and supports the training of the radio team, fostering local media presence. The website is well-structured, professionally designed, and provides relevant content for its target audience of members and supporters. Technically, it is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security headers, but lacks explicit security policies and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting a legitimate local media support organization.

W

webEdition e.V.

webedition.org

47

webEdition e.V. operates the website www.webedition.org, offering an open source web application framework and content management system established since 2001. The platform targets developers, agencies, and content editors seeking scalable and flexible CMS solutions with full control over code. The business model is community-driven, supported by a partner network and licensing variants. The website is professionally designed, content-rich, and well-structured, primarily in German, reflecting a mature and active technology project. Technically, the site uses the webEdition CMS platform with PHP, MySQL, JavaScript, Bootstrap, and jQuery, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, though some CSP directives allow 'unsafe-inline' scripts, which could be improved. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent modal, and GDPR adherence. However, WHOIS data is unavailable or malformed, limiting domain trust verification. Overall, the site demonstrates high professionalism and trustworthiness with minor areas for security enhancement.

Contenthub is a specialized platform serving the Jubla scout community by providing content elements, blogs, and detailed instructions to assist in website management and migration. The platform targets scout group administrators and offers a niche service focused on content reuse and website support. Technically, the website is built on Neos CMS with modern web technologies, hosted likely behind Cloudflare, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Sven Röhler

roehler.ch

26

The website roehler.ch serves as a personal and professional wiki and documentation platform managed by Sven Röhler, focusing on IT solutions and services primarily for small and medium enterprises (KMU) and private users in Switzerland. The site provides extensive technical content, guides, and links related to Linux, Windows, programming, and IT infrastructure. The market position is niche and local, with a focus on knowledge sharing and IT consultancy. Technically, the site is built on CMSimple 5.12 with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic, with no HTTPS enforcement or security headers detected, and no published privacy or cookie policies, which are critical gaps. No contact information or incident response channels are provided, limiting user trust and compliance. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and professional contact transparency to enhance trust and compliance.

C

CMSimple

cmsimple.org

44

CMSimple.org is the official website for CMSimple, an open source PHP-based content management system that uniquely operates without requiring a database. Founded in 2004 and based in Germany, CMSimple targets users seeking a lightweight, provider-independent CMS solution. The website offers extensive documentation, plugins, templates, and community support, positioning itself as a niche player in the CMS market. The business model revolves around open source distribution supplemented by partner services and sponsorships. Technically, the site uses PHP, JavaScript, and CSS with a focus on simplicity and responsiveness. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks some advanced accessibility features.

A

Aliena

aliena.ch

49

Aliena is a Basel-based non-profit organization dedicated to supporting women involved in the sex industry, including those currently active, former workers, and those seeking professional reorientation. The organization focuses on improving living and working conditions, advocating for rights, and combating social exclusion and stigmatization. Their services include information dissemination, language courses, meeting points, and comprehensive support for integration and personal challenges. The website is multilingual, professionally designed, and provides clear contact information, reflecting a focused social service mission. Technically, the website is built on WordPress with several plugins enhancing functionality such as multilingual support (WPML), email obfuscation, and interactive sliders. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is properly implemented, and email addresses are protected against scraping. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the security posture is adequate for the organization's scope but lacks formal policies and incident response details. The domain uses privacy protection, which is justified given the sensitive nature of the services. No adult explicit content is present, making the site safe for general audiences. Strategic recommendations include implementing security headers, publishing comprehensive privacy and cookie policies, and adding incident response contacts to enhance trust and compliance.

The website e-lir.ch serves as an online historical lexicon focused on the Romansh-speaking region and the history of Graubünden, Switzerland. It provides access to approximately 3200 articles including biographies, geographic, thematic, and family history entries. The project is editorially completed as of 2012 and is linked to the official Swiss historical lexicon project (HLS/DHS). The target audience includes researchers, historians, and cultural enthusiasts interested in regional history and languages. The business model is non-commercial, likely supported by cultural or governmental institutions. Technically, the website is built with basic HTML, CSS, and JavaScript without modern CMS or frameworks. The site shows moderate performance but lacks mobile optimization and advanced accessibility features. SEO is basic with meta tags present but no structured data or Open Graph tags detected. No analytics or tracking technologies are used, indicating a privacy-respecting approach. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the content. Forms have basic JavaScript validation but no advanced security measures like CSRF tokens. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a trustworthy, niche cultural resource with good business credibility but basic technical and security implementations. Strategic improvements in security headers, HTTPS verification, and privacy compliance would enhance its posture and user trust.

P

PubliReno GmbH

publireno.ch

48

PubliReno GmbH is a small Swiss company specializing in the retail of regional books and publications primarily from the canton of Graubünden. Their online presence is a WordPress-based e-commerce platform using WooCommerce and Elementor, offering a catalog of over 500 titles from various local publishers. The website is professionally designed with good navigation and mobile optimization, targeting readers interested in regional literature. Technically, the site uses modern web technologies but lacks some advanced security headers and GDPR cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA integration but could be improved by publishing security policies and enhancing privacy compliance. Overall, the business appears legitimate with consistent WHOIS data and clear contact information, though privacy and security policies should be enhanced to meet higher compliance standards.

K

Kloster Werthenstein

kloster-werthenstein.ch

46

Kloster Werthenstein is a Swiss cultural and spiritual site offering visitors a place to experience tradition, history, and spirituality. The website serves as an informational platform highlighting the monastery's history, events, pilgrimage services, and natural surroundings. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and tracking tools such as Google Analytics, Facebook Pixel, and Pinterest Tag. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and professionally presented but would benefit from enhanced privacy and security disclosures.

K

Kirchgemeinde Thomas

thomaskirche.ch

46

Thomaskirche is a small, non-profit religious community based in Basel-Stadt, Switzerland, affiliated with the Evangelisch-reformierte Landeskirche Basel-Stadt. The website serves as an information hub for community events, religious services, youth programs, and social engagement projects. It targets local community members and churchgoers, providing schedules, contact information, and event details. Technically, the site is built on WordPress using the Divi theme, with standard web technologies such as FontAwesome and Google Fonts. The site is moderately performant, mobile-optimized, and SEO-friendly, with good content quality and clear navigation. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

B

Bayerischer Turnverband e. V.

btv-turnen.de

47

Bayerischer Turnverband e. V. is a regional non-profit sports association focused on gymnastics, fitness, and health sports in Bavaria, Germany. The website serves as an information hub for educational programs, events, and youth activities, positioning itself as a key player in the regional sports education sector. The technical infrastructure includes modern JavaScript libraries such as Swiper.js and Fancybox, with privacy-conscious analytics via Matomo and a cookie consent mechanism from Consentmanager.net. The site is well-structured, mobile-optimized, and provides rich content relevant to its audience. Security posture is moderate with HTTPS implied but no explicit security headers detected. Privacy compliance is basic, lacking a visible privacy policy or terms of service. Overall, the domain appears legitimate and consistent with the organization's mission, though WHOIS data is minimal. Strategic improvements include publishing comprehensive privacy and security policies and enhancing security headers.

A

Allgemeiner Sportverband Österreich

asvoe.at

49

The Allgemeiner Sportverband Österreich (ASVÖ) is a large, well-established non-profit sports federation in Austria representing over 5,500 member clubs across more than 120 sports. The organization focuses on promoting sports participation, health, and community engagement through diverse programs, education, and support services for sports clubs and individuals. The website reflects a professional and comprehensive digital presence built on WordPress with modern UIkit framework and includes essential features such as GDPR-compliant privacy and cookie policies, multiple social media integrations, and a service platform for clubs. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website demonstrates a mature digital infrastructure and a trustworthy business profile.

Ö

ÖFT - Österr. Fachverband für Turnen

turnsport.at

49

Turnsport Austria is the official Austrian gymnastics federation representing approximately 450 clubs and over 90,000 members across multiple gymnastics disciplines. The organization serves both grassroots and elite sports communities, providing event organization, trainer licensing, and promoting safe sport and anti-doping initiatives. The website is well-structured, professionally designed, and provides comprehensive information and news relevant to its audience. Technically, the site uses a modern tech stack including jQuery, Font Awesome, and Owl Carousel, and is built on the Internetkonzepte.at CMS platform. It is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are lacking. Privacy compliance is strong with a clear privacy and cookie policy and consent mechanism. Overall, the site is trustworthy and credible, reflecting a mature non-profit sports federation.

Schröter Technologie GmbH & Co. KG is an internationally recognized manufacturer specializing in thermal equipment for the food industry, including solutions for smoking, cooking, steaming, and drying. The company positions itself as a leader in precision, quality, and innovation within its sector. The website is built on TYPO3 CMS, indicating a mature digital infrastructure with modern technologies such as Google reCAPTCHA and Google Tag Manager integrated for security and analytics purposes. However, the absence of explicit privacy policies and contact information on the visible HTML content suggests areas for improvement in transparency and compliance. Security posture is moderate, with HTTPS usage and bot protection in place, but lacking visible security headers and formal incident response details. Overall, the website is professional and trustworthy, serving a general audience in the manufacturing sector without any adult or questionable content.

G

Gebrüder Lödige Maschinenbau GmbH

loedige.de

42

Gebrüder Lödige Maschinenbau GmbH is a well-established German manufacturer specializing in industrial mixing and processing machinery, with a history dating back to 1938. The company positions itself as an international market leader offering tailored system solutions, engineering services, and customer support primarily targeting industrial clients across sectors such as pharmaceuticals, chemicals, food, and environmental technology. Their website reflects a professional and consistent brand image, leveraging TYPO3 CMS and modern web technologies to provide a user-friendly experience. The presence of a cookie consent mechanism and Google Tag Manager indicates a moderate level of digital maturity and compliance awareness. Security posture is solid with HTTPS enabled and no blocking mechanisms detected, though explicit security headers and incident response information are lacking. Overall, the site demonstrates good business credibility and technical implementation, though privacy policy and terms of service documentation could be improved to enhance compliance and user trust.

T

TMC Live GmbH

tmc-live.de

40

TMC Live GmbH is a German full-service event agency specializing in the conception, planning, and execution of B2B events including hybrid and digital formats. The company positions itself as a creative and reliable partner focused on sustainable and emotionally engaging event experiences. Their market presence is supported by a professional website showcasing extensive services, client testimonials, and references, indicating a solid reputation in the event management sector. Technically, the website uses modern frameworks such as Alpine.js and Swiper.js, is built on October CMS, and is hosted on agenturserver infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not found. Overall, the website reflects a mature digital presence with strong business credibility and compliance with privacy regulations.

T

TMC Amplio GmbH

tmc-brandwork.de

43

TMC Brandwork, operated by TMC Amplio GmbH, is a German branding agency specializing in brand strategy, communication, and creative production for both B2B and B2C clients. The company positions itself as a provider of tailored solutions to strengthen brands with a professional portfolio and notable client references. The website reflects a strong market presence with consistent branding and clear contact points, including a named CEO and company email. Technically, the site uses modern web technologies such as Alpine.js and Tailwind CSS, hosted on a provider indicated by the nameservers. The site is mobile-optimized, fast-loading, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

TMC Amlio GmbH

tmc-amplio.de

40

TMC Amlio GmbH operates the website tmc-amplio.de as a digital consulting and agency partner focused on driving digital growth for businesses. Their service offerings include digital strategy, user experience design, online marketing with CRM integration, and web development including API services. The company positions itself as a technology-driven yet human-centric partner for digital transformation, targeting businesses seeking to amplify their brand digitally. The website is professionally designed using the Astro framework, with good mobile optimization and clear navigation, reflecting a moderate level of digital maturity. The technical infrastructure includes modern JavaScript modules and a cookie consent mechanism via CookieFirst, hosted on servers indicated by agenturserver nameservers.

T

TMC GmbH

tmc-gmbh.de

38

TMC GmbH is a medium-sized marketing agency based in Germany, specializing in creating emotional brand experiences across digital and analog environments. The company operates multiple specialized agencies under its group, including Amplio®, TMC Brandwork, and TMC Live, offering services such as marketing consulting, brand development, event management, and video production. The website reflects a strong market position as the largest marketing agency in the Ostwestfalen-Lippe region, targeting businesses seeking comprehensive marketing solutions. Technically, the website is built on a modern stack including OctoberCMS, JavaScript libraries like jQuery and Vime.js for video playback, and integrates Google Tag Manager and CookieFirst for analytics and consent management. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and documented security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with a legitimate business domain, with no privacy protection or suspicious patterns. Overall, the website demonstrates a high level of professionalism, good security posture, and compliance with privacy regulations, making it a trustworthy digital presence for the company.

The domain www.natgeofe.com appears to be unregistered or inactive as indicated by the WHOIS query returning no match and absence of registrar or registrant information. The website content is inaccessible, returning only a minimal HTML page with the message 'Invalid request', suggesting it is either blocked by a web application firewall or the domain is not currently hosting active content. Due to the lack of accessible content, no metadata, business information, or technical details could be extracted. The absence of HTTPS and security headers further indicates a poor security posture. Overall, the domain and website do not present any credible business presence or digital maturity at this time.

Claire & George's website is minimalistic and currently serves primarily as a frontend shell with a loading spinner and no visible business content or contact information. The site uses modern web technologies, likely Angular, and integrates Google Analytics and Google Maps APIs, indicating some level of digital maturity. However, the lack of visible content, privacy policies, and contact details limits its effectiveness and trustworthiness. Security posture is weak due to missing security headers and no visible incident response or data protection information. Overall, the site presents a low-risk profile but also low transparency and professionalism, suggesting it may be under development or poorly maintained.

The website www.moebel-martin.de is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the site's content. As a result, no business-specific information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security infrastructure, indicating an intent to mitigate automated access or attacks. However, this also prevents a full assessment of the site's content, technical implementation, and compliance posture. The WHOIS data is limited but shows standard ISP nameservers, suggesting legitimate hosting without privacy protection. Overall, the lack of accessible content and business information limits the ability to evaluate the company's market position, services, or security maturity.

L

Leuchtenmarkt

leuchtenmarkt.de

49

Leuchtenmarkt is a well-established German e-commerce retailer specializing in LED lighting products including LED Einbaustrahler, sets, and accessories. With over 30 years of experience, it holds a strong market position as a trusted provider in the residential lighting sector. The website offers a professional shopping experience with detailed product information, customer reviews, and a modern digital infrastructure. Technically, the site is built on the Shopware platform, leveraging Google Analytics, Google Tag Manager, Matomo, and reCAPTCHA for analytics and security. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS and bot protection, though explicit security headers could be enhanced. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally managed, with no signs of blocking or suspicious activity.

A

Ambu

ambu.de

49

Ambu is a well-established company specializing in the development and manufacturing of innovative single-use medical devices for clinical and preclinical applications. Their product portfolio includes disposable endoscopes, ventilation bags, laryngeal masks, and electrodes for cardiology and neurology, targeting healthcare professionals and institutions. The website reflects a professional and consistent brand presence, with clear focus on healthcare industry needs. Technically, the site uses a modern CMS (Dynamicweb 9), integrates with multiple reputable third-party services for analytics and marketing, and employs a comprehensive cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and session management via secure cookies, although explicit security headers and incident response information are lacking. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations, supporting Ambu's market position as a key player in disposable medical products.

É

Éditions Finitude

finitude.fr

46

Éditions Finitude is a French literary publishing company presenting its catalog and publishing activities through a professionally designed WordPress website using the Divi theme. The site targets French-speaking readers and literary enthusiasts, offering book publishing services and literary content. The technical infrastructure includes WooCommerce for e-commerce and analytics tools such as Google Analytics and Matomo, indicating a moderate level of digital maturity. Security posture is good with HTTPS and security headers implemented, but lacks visible privacy and cookie policies, as well as contact information for security incidents. The absence of WHOIS data limits domain trust assessment, suggesting the domain may be new or privacy protected, which slightly reduces overall trust. Strategic recommendations include adding comprehensive privacy and cookie policies, improving contact transparency, and implementing a vulnerability disclosure mechanism to enhance security and compliance.

A

Amedia Kreativ

amediakreativ.no

45

Amedia Kreativ is a Norwegian creative service provider established in 2018, offering consulting and production services primarily targeting a general audience in the media sector. The website is built on WordPress using the Divi theme and integrates modern analytics tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. The site is well-designed with good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website presents a professional image but would benefit from enhanced privacy and security measures to improve trust and compliance.

B

Bullsgroup.com

bullsgroup.com

44

Bullsgroup.com is a content creation and editorial services website that emphasizes unique and engaging content, claiming a business history dating back to 1929. The website is built on WordPress using the Astra theme and incorporates SEO best practices via the Yoast SEO plugin. It employs Matomo analytics for user tracking and includes a cookie consent mechanism, indicating some level of privacy compliance. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and a valid domain registration, though improvements such as enabling DNSSEC and adding security headers are recommended. The absence of explicit privacy policies, terms of service, and contact information limits full compliance and trustworthiness assessment. Overall, the website presents a professional front with room for enhanced security and compliance documentation.

The website for EXEC Software Team GmbH is currently minimalistic, containing only a basic HTML page with a title and a single image. There is no substantive business description, contact information, or policy documentation available. The lack of content and metadata indicates the site may be under construction or serves as a placeholder. Technically, the site does not demonstrate modern web practices such as HTTPS enforcement, security headers, or SEO optimization. Security posture is weak due to absence of HTTPS and security policies, and no incident response or vulnerability disclosure information is provided. Overall, the site presents a low-risk profile due to minimal content but lacks professionalism and trust signals, which could impact business credibility.

The website frankfurtforward.com currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered with INWX GmbH since 2018, consistent with a German origin, but no detailed business or contact information is available on the landing page. The site uses outdated CMS versions (Joomla 1.5 and WordPress 2.5) as indicated by meta tags, which poses significant security risks. The only external link points to bitninja.io, a security service provider, suggesting some level of security monitoring. Overall, the website lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present, limiting trust and credibility assessment.

M

Mittner & Partner

mittner-partner.ch

47

Mittner & Partner is a well-established Swiss financial services firm specializing in fiduciary services, auditing, tax consulting, and business advisory primarily serving clients in Chur, Zurich, the Eastern Switzerland region, and Liechtenstein. With over 30 years of experience, the company positions itself as a trusted partner for both corporate and private clients, emphasizing professional and competent service delivery. The website reflects a focused business model with clear service offerings and regional expertise, supported by memberships in relevant professional associations.

N

Nauti-wave

nauti-wave.fr

46

Nauti-wave is a French e-commerce retailer specializing in nautical sports equipment including swimwear, diving gear, and accessories. The website offers a broad selection of products from multiple well-known brands, targeting French and European customers interested in water sports. The business is relatively new, founded in 2022, and positions itself as a niche player with competitive pricing and fast delivery options. Technically, the website is built on modern frameworks such as SvelteKit, uses Cloudflare for DNS and CDN, and integrates standard analytics and marketing tools like Google Analytics and Trustpilot for customer reviews. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS enforced, appropriate security headers, and domain registration protections. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, there is no dedicated security policy or incident response page, which could be improved. Overall, the website is professional, trustworthy, and well-suited for its retail business model.

H

Handball-Store : Site numéro 1 du handball en ligne

handball-store.fr

37

Handball-Store.fr is a specialized e-commerce platform focused on retailing handball-related equipment, including shoes, clothing, balls, and protective gear. Established in 2009, it holds a strong market position in France as a leading online handball store. The website offers a comprehensive catalog with detailed navigation and supports multiple languages, indicating a mature digital presence. Technically, the site leverages a Magento-based CMS (OpenMage), uses Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo. The site is served over HTTPS with good security headers, reflecting a solid security posture. However, it lacks explicit privacy and terms of service pages and does not provide direct contact information, which are areas for improvement in compliance and user trust. Overall, the website is professional, functional, and secure, but could enhance privacy transparency and user support channels.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

invitu

invitu.ch

43

invitu.ch is a Swiss-based online platform specializing in stylish and quick event invitations for private, corporate, and public events. The website offers a user-friendly interface with various event categories and customizable invitation templates, targeting individuals and companies in Switzerland. The business operates as a small-sized entity focusing on digital event invitation services with a clear market niche. Technically, the site employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and user behavior tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The website is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some advanced security policies and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is legitimate and trustworthy with room for improvement in privacy and security documentation.

G

Grafik Design Katja Saenze

grafik-art.ch

47

Grafik Design Katja Saenze is a small, professional graphic design agency based in Aargau, Switzerland, specializing in comprehensive visual branding services including logo creation, corporate identity, and web design. The website demonstrates a strong market position locally with over 20 years of experience and a portfolio of more than 1000 projects. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, providing clear contact information and social media presence.

H

Hamburger Sportjugend

hamburger-sportjugend.de

44

Hamburger Sportjugend is a well-established non-profit organization dedicated to youth sports in Hamburg, representing over 220,000 athletes. The website provides comprehensive information about their services including education, voluntary services, funding, and prevention of sexualized violence. Their market position is strong within the Hamburg sports community, supported by partnerships and a clear digital presence. Technically, the website is built on WordPress with Elementor, offering good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve by publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

R

Rheinischer Sparkassen- und Giroverband

rsgv.de

48

The Rheinischer Sparkassen- und Giroverband (RSGV) is a regional financial association based in Düsseldorf, Germany, representing 27 Sparkassen in the Rheinland region. It provides advisory services and represents the interests of its member savings banks, aligning with the Deutscher Sparkassen- und Giroverband. The website reflects a professional and consistent brand image, targeting financial institutions and the public. The business model focuses on regional financial collaboration and policy coordination. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response contacts are absent. WHOIS data confirms domain legitimacy and consistency with the organization's claims. Overall, the site is trustworthy and well-maintained, supporting the organization's credibility and digital presence.

S

Sportjugend Nordrhein-Westfalen

sportjugend.nrw

47

Sportjugend Nordrhein-Westfalen is a regional youth sports organization affiliated with the Landessportbund Nordrhein-Westfalen, focusing on youth engagement, sports education, volunteer services, and community programs in the German state of North Rhine-Westphalia. The website serves as a comprehensive portal for information on various youth sports initiatives, qualification programs, and events, targeting young people, sports clubs, and volunteers. Technically, the site is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager, Google Analytics, and accessibility tools like ReadSpeaker. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism aligned with GDPR requirements. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is typical and justified for a non-profit organization. Overall, the website demonstrates a mature digital presence with good content quality and compliance, supporting its role as a trusted regional youth sports entity.

L

Landessportbund Nordrhein-Westfalen e.V.

lsb-nrw.de

46

The Landessportbund Nordrhein-Westfalen e.V. is a large, non-profit regional sports umbrella organization serving the state of North Rhine-Westphalia, Germany. It provides a broad range of sports programs, information, and funding opportunities for sports clubs and individuals. The website is professionally designed, well-structured, and targets sports organizations and enthusiasts within NRW. The technical infrastructure is based on TYPO3 CMS with integration of modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns given the website's professional nature and content. Overall, the site demonstrates a strong commitment to privacy compliance and user experience.

L

Landessportbund Hessen e.V.

landessportbund-hessen.de

45

Landessportbund Hessen e.V. is a large non-profit organization serving as the umbrella sports federation for over 7,300 member clubs in the German state of Hessen. The organization provides a broad range of services including sports development, education and licensing, club management, infrastructure support, and communication. Their website is built on TYPO3 CMS and integrates accessibility tools and privacy-respecting analytics, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and GDPR compliant with clear contact information and social media presence, supporting strong stakeholder engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and hosting are consistent with the organization's identity, indicating a trustworthy online presence.