Security Directory

N

Nagel Haus

nagelhaus.de

41

Nagel Haus is a small regional architecture and home building company based in Germany, specializing in custom, solidly built, and turnkey single-family homes. Their business model emphasizes regional craftsmanship, customer customization, and the use of quality materials sourced locally. The website reflects a professional and consistent brand image, targeting private home buyers seeking personalized housing solutions. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted on kasserver.com. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy and compliant with GDPR requirements.

Z

Zoovu

zoovu.com

71

Zoovu is a technology company specializing in AI-powered search and product discovery solutions aimed at personalizing online ecommerce experiences. Their platform offers services such as AI search, merchandising, and product recommendations to drive ecommerce growth. The company appears to target ecommerce businesses and online retailers with a B2B SaaS business model. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools, including HubSpot, Google Analytics, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and domain protections in place, though improvements can be made by enabling DNSSEC and publishing security policies. Overall, the website is professional, well-branded, and trustworthy, with no signs of blocking or WAF interference.

T

Terminland GmbH

terminland.de

59

Terminland GmbH is a well-established German company specializing in online appointment booking solutions, serving a broad range of industries such as healthcare, automotive, legal, and beauty services. The company positions itself as a market leader in Germany with over 15,000 deployed appointment plans and more than 90 million booked appointments. Their platform offers 24/7 online booking capabilities, enhancing customer satisfaction and operational efficiency for service providers. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions tailored to their target B2B audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and FontAwesome, hosted securely in German data centers operated by Equinix. The site is mobile-optimized and accessible, with good SEO practices and performance. Google Tag Manager and Google Analytics are used for tracking, with a GDPR-compliant cookie consent mechanism in place. However, explicit security headers are not visibly declared, and no dedicated security or incident response policies are published. From a security perspective, the site uses TLS encryption and is hosted in a reputable carrier-neutral data center, ensuring good baseline security. The absence of explicit security headers and vulnerability disclosure policies suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Terminland GmbH demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its business domain. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen trust and security maturity.

P

PickEngine by KNAPP

pickengine.com

60

PickEngine by KNAPP is a professional B2B website offering an advanced automatic warehouse system designed for rapid deployment and high throughput in fulfillment operations. The company leverages proven shuttle technology and intelligent software to optimize warehouse processes, targeting businesses seeking scalable and ergonomic automation solutions. The website is well-structured, multilingual, and optimized for SEO and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the professional presentation and strong brand association with KNAPP AG. Overall, the site demonstrates a robust business and technical foundation with room for enhanced transparency in security and contact information.

K

KNAPP

kisoft-connect.com

61

KiSoft connect is a partner program operated by KNAPP, a recognized technology company specializing in logistics software solutions. The program enables selected partners to market, sell, and implement KiSoft software products, supported by training and certification. The website presents a professional and well-structured digital presence, emphasizing partnership benefits and software portfolio. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit incident response policies could enhance protection. WHOIS data is incomplete or missing, which raises some concerns about domain registration legitimacy; however, the strong brand association with KNAPP mitigates this risk. Overall, the site is trustworthy, compliant with GDPR, and well-positioned for its business objectives.

G

Gigerlas Lössel

gigerlas-loessel.de

47

Gigerlas Lössel is a traditional hospitality business based in Germany, specializing in Bavarian cuisine such as grilled chicken (Gigerla), Haxn, and homemade sausages. Established since 1927, the company has a strong local presence and participates in regional festivals like the Nürnberger Volksfest and Frühlingsfest. Their website reflects a well-maintained digital presence with clear branding and customer engagement features including online reservations and event information. The target audience is general public and festival attendees seeking authentic traditional food experiences. Technically, the website is built on WordPress using popular plugins and frameworks such as Bootstrap, Visual Composer, Slider Revolution, and Contact Form 7. The site is mobile optimized and includes GDPR-compliant cookie consent mechanisms via the Complianz plugin. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS with IP anonymization for Google Analytics and includes a cookie consent banner. However, it lacks advanced security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is adequate but could be improved with additional headers and formal policies. The website is trustworthy with clear contact information, consistent branding, and no suspicious content. The domain WHOIS data is partially consistent with the business claims, showing stable name servers but limited registrant details. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

S

Sportson International Oy

babolat.com

60

Sportson International Oy operates a Finnish e-commerce platform specializing in tennis, padel, and badminton sports equipment and apparel. Founded in 1982 and based in Kaarina, Finland, the company represents well-known brands such as Babolat and Fila. The website targets both retail consumers and B2B customers, offering a comprehensive product range with fast delivery and free shipping over a threshold. Technically, the site employs modern web technologies including jQuery, Google reCAPTCHA, and Google Analytics, ensuring a functional and user-friendly experience with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, though improvements are recommended in cookie consent and security headers. Overall, the website presents a professional and trustworthy digital presence aligned with its business operations and market position.

B

Banf Werbung GmbH

banf-werbung.de

42

Banf Werbung GmbH is a German advertising company specializing in sports sponsoring and advertising technology services. It operates as part of the Banf Crossmedia Group and targets businesses and sports organizations seeking advertising solutions. The website is built on WordPress using Elementor, featuring a modern design with good mobile optimization and basic accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and explicit security policies. No direct contact emails or phone numbers are visible on the homepage, but social media presence is established on LinkedIn, Facebook, and Instagram. Overall, the site is professional and trustworthy with room for security and compliance improvements.

V

Verein Jakobsweg.ch

jakobswegplus.ch

65

The website jakobswegplus.ch represents a non-profit initiative by Verein Jakobsweg.ch to provide a wheelchair-accessible pilgrimage route across Switzerland from Konstanz to Genf. The project is positioned as a niche service targeting wheelchair users interested in spiritual and cultural pilgrimage experiences. The site is built on the Jimdo CMS platform, leveraging standard web technologies and third-party widgets for enhanced functionality. It demonstrates good digital maturity with mobile responsiveness, cookie consent mechanisms, and clear contact information. Security posture is adequate with HTTPS enforced and cookie management in place, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy and professionally presented, supporting its mission effectively.

C

Camino Europe Team

camino-europe.eu

63

Camino Europe is a specialized informational website dedicated to providing comprehensive resources about pilgrimage routes, particularly the Camino de Santiago and other cultural trails across Europe. The site targets pilgrims, hikers, and cultural enthusiasts, offering GPS data, downloadable PDFs, news updates, and accommodation registration services. The business operates primarily in German with multilingual support, positioning itself as a niche resource in the European pilgrimage community. Technically, the website is built on Silverstripe CMS 4.13 and integrates modern mapping technologies such as Leaflet.js and Mapbox GL, alongside Google Custom Search Engine for enhanced search capabilities. The site is hosted under a reputable registrar (GANDI) and uses HTTPS, ensuring secure data transmission. Performance and mobile optimization are moderate to good, with a clear navigation structure and consistent branding. From a security perspective, the site enforces HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, indicating room for improvement in security governance. No exposed sensitive data or vulnerabilities were detected in the provided content. Overall, Camino Europe presents a trustworthy and professional resource with good content quality and business credibility. However, enhancements in privacy compliance, security headers, and contact transparency would strengthen its security posture and regulatory adherence.

G

GlobalSign, GMO Internet Group, Inc.

globalsign.com

73

GlobalSign, a subsidiary of GMO Internet Group, Inc., is a leading provider of digital certificate and identity management solutions globally. Their website showcases expertise in automated, scalable digital certificates including SSL/TLS, managed PKI, IoT security, authentication, and email security services. The company targets enterprise and business customers requiring robust digital identity and security solutions. The site is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website leverages Concrete CMS, jQuery, Bootstrap, and integrates advanced analytics and marketing tools such as Google Analytics, Piwik Pro, Microsoft Clarity, and Cookiebot for consent management. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible in the HTML source and could be improved. From a security perspective, the site demonstrates good practices including encrypted connections, cookie consent, and ISO 27001 certification. The absence of a security.txt file and clear incident response contacts are gaps that could be addressed to enhance transparency and readiness. The WHOIS data is unavailable or protected, which is common for security companies but slightly reduces domain registration transparency. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively communicates its business offerings and maintains a strong security posture with room for minor improvements. The risk level is low, and the site is suitable for enterprise clients seeking digital security solutions.

M

MitgliederBenefits

mitglieder-benefits.de

52

MitgliederBenefits operates a specialized shopping portal targeting clubs and associations in Germany, offering members and employees access to exclusive discounts and cashback offers from over 300 brands and 1,800 partners. The platform is positioned as a cost-free benefit solution for non-profit organizations, enhancing member engagement and community spirit. Technically, the website is built on WordPress with the Divi theme and leverages several plugins for SEO, GDPR compliance, and user interaction. Hosting is via Amazon AWS, ensuring reliable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. The site lacks explicit terms of service and incident response policies, which could be areas for enhancement. Overall, the website presents a professional and trustworthy front for its niche market.

R

RBA Revistas

rbarevistas.com

58

RBA Revistas is a prominent Spanish media publishing company specializing in magazines, including well-known brands such as National Geographic España, Lecturas, Saber Vivir, and El Mueble. The website serves as a corporate portal providing information about its magazine portfolio and links to individual magazine sites. The business targets Spanish-speaking audiences interested in lifestyle, culture, health, and entertainment magazines. The company operates within the media sector and is part of the larger RBA Grupo. The website demonstrates a professional design with consistent branding and good content quality.

R

RBA

rbacoleccionables.com

67

The website tienda.rba.es/coleccionables is an e-commerce platform operated by RBA, a well-known Spanish publisher and retailer specializing in collectibles and magazines. The site offers subscription-based and direct sales of collectible series, targeting a general Spanish-speaking audience. The business model focuses on engaging customers through exclusive offers and gifts tied to subscriptions, positioning itself as a reputable player in the collectibles market in Spain. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates various third-party services including Google Tag Manager, New Relic for monitoring, and consent management via Didomi and Indigitall SDKs. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates monitoring tools to detect issues. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website presents a professional and trustworthy online presence with moderate to good scores in content quality, technical implementation, security posture, privacy compliance, and business credibility. The lack of WHOIS data limits full domain legitimacy verification, but the site’s content and structure support its authenticity.

K

KNAPP AG

knapp.com

78

KNAPP AG is a leading enterprise specializing in logistics automation technology, software, and services, with a global presence and a workforce of approximately 8,300 employees. The company offers innovative solutions including robotics, AI, warehouse management systems, and consulting services tailored to various industries such as healthcare, fashion, retail, and food retail. Their market position is strong, supported by a broad network of 49 locations worldwide and recognition such as the Best Product 2025 award for their AeroBot storage robot. Technically, the website is built on a modern WordPress platform enhanced with premium SEO and user experience plugins, ensuring fast performance, mobile optimization, and accessibility. The site employs advanced cookie consent mechanisms and integrates analytics tools like Matomo, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent tools to comply with privacy regulations. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registrant data is a concern but does not detract significantly from the overall trustworthiness given the professional site presentation. Overall, KNAPP AG's website demonstrates a high level of professionalism, technical sophistication, and compliance with privacy standards, making it a reliable digital presence for their business. Strategic improvements in security header implementation and publishing a dedicated security policy could further enhance their security posture.

R

Radio Bielefeld

radiobielefeld.de

44

Radio Bielefeld is a regional German radio station offering a mix of local news, music, podcasts, and community engagement. The website serves as a digital platform to complement its broadcasting services, featuring news articles, program schedules, and advertising opportunities. The station holds a recognized certification (Radiosiegel) indicating trustworthiness in the media sector. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates multiple third-party services for analytics, advertising, and user consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, compliant with GDPR, and safe for general audiences.

S

Stadtsportbund Bielefeld e.V.

sportbund-bielefeld.de

50

Stadtsportbund Bielefeld e.V. is a medium-sized non-profit organization dedicated to promoting sports and community engagement in Bielefeld, Germany. The website serves as an information hub for sports clubs, youth programs, educational initiatives, and community sports activities. It positions itself as a local leader in sports promotion with a clear focus on inclusivity and education. The site uses TYPO3 CMS and integrates modern web technologies such as Bootstrap, jQuery, and Google Analytics to provide a responsive and accessible user experience. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-aligned with its mission to support sports in the Bielefeld community.

The website represents the Sportamt Stadt Graz, a municipal government entity providing an online platform for booking district sports fields in Graz, Austria. It offers a structured multi-step booking process including service selection, appointment scheduling, user data input, and payment options. The platform is designed primarily for local residents and sports teams, facilitating fair and organized access to public sports facilities. The business model is a public service, leveraging a third-party SaaS platform (eTermin) for appointment management. Technically, the website employs standard web technologies such as jQuery and SVG for UI elements, with a responsive design suitable for mobile devices. The site includes privacy and cookie policies linked to official city resources, indicating compliance with GDPR. However, no advanced security headers or explicit SSL configuration details were found in the provided data, suggesting room for security enhancements. From a security perspective, the platform shows good practices like encrypted data transmission and user authentication mechanisms. The absence of WHOIS data for the domain www.etermin.net raises questions about domain registration legitimacy, though the website content and contact details align with a legitimate municipal service. No critical vulnerabilities or adult content were detected. Overall, the website is a functional, government-backed service with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, domain registration transparency, and enhanced security audits are recommended to strengthen trust and resilience.

M

Museum Huelsmann

museumhuelsmann.de

53

Museum Huelsmann is a cultural institution located in Bielefeld, Germany, specializing in applied arts with a diverse collection displayed in a historic villa. The museum offers exhibitions, special events, workshops, and an online ticketshop, positioning itself as a young but quality art museum in Germany. The website is professionally designed with clear navigation and content relevant to its audience, primarily German-speaking visitors interested in art and culture. Technically, the site uses standard web technologies such as jQuery and Fancybox, hosted with DomainControl (GoDaddy), and employs HTTPS for secure communication. The cookie consent mechanism is implemented, supporting GDPR compliance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, safe, and well-maintained, with room for improvements in mobile optimization and security best practices.

K

Kulturkreis Senne e.V.

kulturkreis-senne.de

39

Kulturkreis Senne e.V. is a local non-profit cultural organization serving the Senne district in Bielefeld, Germany. The organization offers a diverse cultural program including events such as multimedia shows, concerts, and literary gatherings. The website serves as an information hub for upcoming events, ticket sales, and community engagement, targeting local residents and culture enthusiasts. The business model focuses on community cultural enrichment rather than commercial profit. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It uses common plugins such as Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is well addressed with a cookie consent banner and a GDPR-compliant privacy policy. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good content quality and technical implementation. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance trust and resilience.

K

Kommunales Integrationszentrum Bielefeld

interkulturelles-bielefeld.de

39

Kommunales Integrationszentrum Bielefeld is a government entity focused on supporting integration of newcomers, refugees, and immigrants in the city of Bielefeld, Germany. The website offers multilingual information, counseling services, and resources covering housing, education, health, language learning, and employment. It is positioned as a trusted local public service with official backing from city and state ministries. Technically, the site is built on WordPress with modern frontend libraries such as Bootstrap and jQuery, optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

A

ASVÖ Landesverband Wien

asvoewien.at

44

ASVÖ Landesverband Wien is a regional non-profit sports association dedicated to promoting and supporting over 400 member sports clubs in Vienna. The organization focuses on broad-based and health-oriented sports activities, providing services such as club management support, health sports programs, and access to sports facilities. The website reflects a well-established entity with a strong community presence and a clear mission to foster sports participation across diverse demographics in Vienna. Technically, the site is built on WordPress with modern UIkit framework and includes essential features such as responsive design, accessibility, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

T

Turnverband Mittelrhein e.V.

tvm.org

33

Turnverband Mittelrhein e.V. is a prominent sports association in Rheinland-Pfalz, Germany, focusing on gymnastics, fitness, and health sports across all age groups. The organization offers a broad range of services including trainer education, event organization, and sports promotion. Their website serves as an information hub with event listings, news updates, and a newsletter subscription, targeting sports clubs, trainers, and enthusiasts. Technically, the site is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enforced and email cloaking implemented, but lacks advanced security headers and a formal vulnerability disclosure mechanism. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-maintained, though improvements in security and privacy compliance are recommended.

O

Olympiastützpunkt Hessen im Landessportbund Hessen e.V.

osph.de

47

Olympiastützpunkt Hessen is a regional elite sports support center operating under the Landessportbund Hessen e.V., focusing on athlete development, sports medicine, physiotherapy, and career dual support in Hessen, Germany. The website serves athletes, sports professionals, and governmental partners with comprehensive information and services. The organization holds a strong market position within the regional sports ecosystem, supported by partnerships with federal and state ministries and sports bodies. Technically, the website is built on TYPO3 CMS with standard web technologies like jQuery and HTML5. It demonstrates moderate performance and good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. The site is well-structured, professionally designed, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but could improve by implementing security headers and publishing explicit security policies. Privacy compliance is good with a comprehensive privacy policy linked, though cookie consent is missing. WHOIS data aligns well with the website's claims, indicating legitimacy and consistency. Overall, the website is trustworthy and professional with minor areas for security and privacy enhancement. Strategic improvements in security headers, cookie consent, and incident response transparency would strengthen its posture and compliance.

T

Tidenhub Digital GmbH

website-tutor.com

65

Website Tutor, operated by Tidenhub Digital GmbH, is a specialized freelance service provider focusing on WordPress development and SEO optimization primarily for small businesses and freelancers in Germany. The website presents a professional and well-structured digital presence with clear service offerings including WordPress website creation, training, and SEO consulting. The business leverages modern WordPress technologies and SEO best practices to position itself as a niche expert in the German market. The domain age and registration details align well with the business history, supporting credibility.

G

Greenified

greenified.se

44

Greenified is a Swedish-based circular furniture marketplace operated under the Input interiör brand, focusing on sustainable buying, selling, and renting of furniture. The company targets environmentally conscious businesses and individuals seeking cost-effective and eco-friendly furniture solutions. Their offerings include a digital inventory system and reconditioning services, positioning them as a niche player in the sustainable retail sector. The website is professionally designed, mobile-optimized, and incorporates modern e-commerce and content management technologies such as WordPress and WooCommerce. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and cookie management, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and stability.

I

Instituto de Turismo de la Región de Murcia

murciaturistica.es

50

The website www.turismoregiondemurcia.es serves as the official tourism portal for the Costa Cálida region in Murcia, Spain. It is operated by the Instituto de Turismo de la Región de Murcia and provides comprehensive information on tourism activities, accommodations, events, and cultural experiences. The site targets tourists and visitors interested in exploring the Murcia region, offering multilingual support and booking functionalities. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper, and integrates multiple tracking and analytics tools such as Google Analytics, Facebook Pixel, and Adform. The website is well-designed with good mobile optimization and clear navigation, reflecting a professional and trustworthy government tourism platform. Security-wise, the site uses HTTPS and secure external scripts but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to access restrictions, limiting domain trust verification, but the official branding and content quality support legitimacy. Overall, the site is a reliable and informative resource for tourism in Murcia with moderate technical and security maturity.

B

Bytebetrieb GmbH & Co KG

bytebetrieb.com

62

Bytebetrieb GmbH & Co KG is a small, established internet agency based in Stuttgart, Germany, specializing in web design, programming, consulting, and online marketing services. With over 21 years of experience and a certified Google Partner status, the company offers comprehensive digital solutions including websites, online shops, product configurators, and mobile apps. Their target audience primarily consists of businesses and organizations seeking professional digital presence and marketing support. The website is built on TYPO3 CMS and integrates modern technologies such as WordPress, Magento, Shopware, and Google Maps API, reflecting a mature technical infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are absent. The missing WHOIS data for the domain introduces some trust concerns, but the overall professional presentation and clear contact information mitigate this risk. Strategic recommendations include enhancing security headers, publishing security policies, and regular vulnerability audits to strengthen trust and compliance.

P

Pour Bien Vieillir

pourbienvieillir.fr

57

Pour Bien Vieillir is a French government-affiliated platform dedicated to providing seniors and retirees with comprehensive resources on retirement preparation, health maintenance, social engagement, and home adaptation. The website is positioned as a trusted public health and retirement information portal, supported by official retirement funds and Santé publique France. It offers a wide range of services including prevention activities, educational content, and professional resources for senior care providers. Technically, the site is built on WordPress with modern frameworks like Bootstrap and enhanced by SEO and performance plugins such as Yoast SEO and Rocket Loader. The site demonstrates good mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS and manages cookie consent effectively but lacks some advanced security headers and explicit security policies. No WHOIS data is publicly available, likely due to privacy protection, but the site’s legitimacy is supported by its official partnerships and professional presentation. Overall, the platform is a high-quality, trustworthy resource for its target audience with room for minor security and transparency improvements.

The website freiwilligendiensteimsport.nrw is a regional non-profit platform operated by Landessportbund NRW e.V., focused on facilitating volunteer placements in sports organizations within North Rhine-Westphalia, Germany. It targets young people seeking opportunities in the Bundesfreiwilligendienst (BFD) and Freiwilliges Soziales Jahr (FSJ) programs. The platform offers user registration, profile management, and direct application to available positions, positioning itself as a key regional resource for sports volunteer services. Technically, the site employs a modern but basic tech stack including jQuery, Bootstrap, and ASP.NET MVC framework. The design is professional and content-rich with good navigation and mobile responsiveness at a basic level. Performance is moderate, and SEO and accessibility features are present but could be improved. Hosting details are limited but the domain is registered with United Domains AG and uses secure HTTPS connections. From a security perspective, the site demonstrates some good practices such as HTTPS usage and anti-CSRF tokens in forms. However, it lacks DNSSEC, explicit security headers, and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is published, which limits transparency. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professionally managed with a clear business purpose. Strategic improvements in security headers, cookie consent, and published policies would enhance compliance and user trust. The domain registration details align well with the business, supporting legitimacy and credibility.

H

Hessische Turnjugend im Hessischen Turnverband e.V.

landeskinderturnfest.de

64

The website www.landeskinderturnfest.de represents the 11th Hessian Landeskinderturnfest 2026, a regional children's gymnastics event organized by the Hessische Turnjugend im Hessischen Turnverband e.V. The site serves as an information hub for the event, targeting children, families, and sports enthusiasts in Germany. It provides event details, news updates, and contact information, positioning itself as a trusted source for community engagement in sports activities. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Bootstrap, and integrates privacy-conscious tools like Cookiebot for consent management and Matomo for analytics. The site demonstrates good mobile optimization and accessibility features, ensuring a positive user experience across devices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and incident response information, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for its audience.

The Institut für aktuelle Kunst im Saarland operates as a specialized research and cultural institution affiliated with the Hochschule der Bildenden Künste Saar. It focuses on collecting and disseminating data about contemporary artworks and artists, serving an audience of researchers, students, and the interested public. The website reflects a small but professional organization with a clear mission in the art and cultural sector. Technically, the site employs modern JavaScript libraries such as jQuery, Foundation, and Splide.js, and integrates a newsletter service via Mailjet, indicating a moderate level of digital maturity. The hosting provider is Manitu, a known German hosting company, supporting the site's regional focus. Security posture is solid with HTTPS enforced and some basic anti-content copying measures, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy, well-branded, and professionally maintained, though improvements in privacy and security documentation would enhance compliance and user trust.

L

Linking Tourism and Conservation e.V. (Ö.T.E.-LT&C e.V.)

ltandc.org

63

Linking Tourism and Conservation e.V. (Ö.T.E.-LT&C e.V.) is a small non-profit organization focused on promoting sustainable tourism and conservation efforts primarily in Europe. The website serves as an information hub showcasing projects, publications, news, and membership opportunities. The organization targets environmental groups, tourism professionals, and the general public interested in sustainable development. Technically, the site is built on a Verwaltungsportal CMS platform using common JavaScript libraries like jQuery and Slick Carousel, with good mobile optimization and accessibility features. Security posture is moderate with cookie consent implemented but lacking visible security headers and unknown SSL configuration. The WHOIS data is incomplete and malformed, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but could improve security and transparency.

M

MJ Marketing LTD.

nfi.at

52

NFI Gesundheits Magazin is a small, professional online health magazine focused on alternative medicine, superfoods, supplements, healing mushrooms, and healing stones, targeting German-speaking health-conscious audiences in Austria and Germany. The website is built on WordPress with modern technologies including Yoast SEO Premium and Elementor, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking some security headers and published policies. Privacy compliance is partial with a comprehensive privacy policy but no cookie consent mechanism. Business credibility is strong with clear company information and contact details. Overall, the site is trustworthy and well-positioned in its niche.

G

GSTC - Global Sustainable Tourism Council

gstcouncil.org

54

The Global Sustainable Tourism Council (GSTC) operates as an international non-profit organization focused on managing global standards for sustainable travel and tourism. It serves as the accreditation body for sustainable tourism certification, providing standards, certification accreditation, training programs, and membership services. The website targets a broad audience including hotels, tour operators, destinations, business travelers, certification bodies, consultants, and travelers. The organization is positioned as a key authority in sustainable tourism with a professional and comprehensive digital presence. Technically, the website is built on WordPress using the Avada theme framework, enhanced with multilingual support via WPML, and optimized for SEO with Yoast SEO Premium. It employs modern technologies including Google Tag Manager, LinkedIn Insight, and CookieYes for cookie consent management. The site is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and integrates bot management services from Akamai and Cloudflare. The cookie consent mechanism is robust, offering detailed categories and user customization. However, the absence of a publicly accessible privacy policy, explicit contact information, and a vulnerability disclosure policy are notable gaps. WHOIS data is unavailable or privacy protected, which is common for non-profit organizations but limits domain trust analysis. Overall, the website presents a low-risk profile with strong professionalism and security posture but would benefit from enhanced transparency in privacy and contact disclosures to improve compliance and trustworthiness.

H

HessenChemie

hessenchemie.de

56

HessenChemie is a regional industry association serving the chemical, pharmaceutical, and plastics processing sectors in Hessen, Germany. The organization provides a range of services including industry representation, publications, training, and events targeted at member companies and stakeholders. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern frontend technologies to deliver content effectively. The target audience includes industry professionals, trainees, and member companies within Hessen's chemical industry. The business model centers on membership services and industry advocacy. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly. Hosting appears to be managed by a professional provider with consistent DNS records. Cookie consent mechanisms are implemented with opt-in features, supporting GDPR compliance. The login form includes security measures such as CSRF tokens. From a security perspective, the site uses HTTPS and secure forms but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The site could improve by adding security headers and a vulnerability disclosure policy. Overall, the security posture is solid but could be enhanced with formal documentation and transparency. The website is trustworthy, with clear contact options, active social media presence, and consistent branding. No adult or questionable content is present. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing security headers to strengthen trust and compliance.

W

Winkgen Medical Systems GmbH & Co. KG

winkgen.de

51

Winkgen Medical Systems GmbH & Co. KG is a specialized German company founded in 1986, focusing on pharmaceutical process technology, particularly radiopharmacy laboratories, clean room technology, and software development for laboratory and nuclear medicine. The company maintains a strong market position with nearly four decades of experience and trusted customer relationships. Their website reflects a professional B2B service provider model targeting pharmaceutical and healthcare technology sectors. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and user interaction, hosted on NSHost servers. The site is well-optimized for mobile and SEO, with good content quality and clear navigation. Security posture is solid with HTTPS, cookie consent, and CAPTCHA protections, though some HTTP security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business focus.

A

Aeiforia GmbH

aeiforia.de

57

Aeiforia GmbH is a specialized consulting and training firm serving the financial services sector, particularly insurers, building societies, and fund providers focused on private and occupational pension products. The company offers a broad range of services including product development, actuarial consulting, process optimization, legal and tax advisory, IT systems consulting, sales and organizational support, as well as training and coaching. Aeiforia also provides contract management services specifically for Riester pension products, positioning itself as a niche expert in the pension market in Germany. Technically, the website is built on Joomla CMS and employs modern JavaScript libraries such as jQuery and nocaptcha for form security. The site is hosted on a reputable DNS provider (DomainControl by GoDaddy) and uses HTTPS with a good SSL configuration. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, Aeiforia GmbH presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic improvements in security headers and incident response transparency would enhance their security posture and trust further.

K

KULA Institute

kula-institute.com

42

KULA Institute is a newly established educational organization based in Germany, specializing in a 2-year training program for psychedelic facilitators. The institute targets therapists, coaches, and individuals interested in supporting transformative processes through psychedelics. The website is professionally designed, well-structured, and provides comprehensive information about the training, faculty, and related resources such as blogs and podcasts. Technically, the site is built on WordPress with Elementor and uses modern web technologies and cookie consent management tools. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is safe for general audiences and does not contain adult or explicit content.

H

Heitech Service GmbH

lausitz-hosting.de

46

Lausitz-Hosting, operated by Heitech Service GmbH, is a regional and national internet service provider specializing in web hosting, domain registration, email services, and SSL certificates. The company emphasizes personal customer service and caters to a diverse clientele including small and medium enterprises, large industrial companies, municipalities, and associations primarily in Germany. Their market position is strengthened by a focus on regional identity and trusted certifications such as ISO/IEC 27001 and ITIL frameworks. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Slick Carousel, hosted on servers associated with Heitech. The site is mobile-optimized and presents a professional design with clear navigation. Performance is moderate, with room for improvement in accessibility and SEO optimization. Security posture is solid with HTTPS enforced and hosting in a certified Tier 3 data center, though security headers and incident response details are lacking. From a security and compliance perspective, the site demonstrates adherence to recognized standards and provides privacy and cookie policies, albeit without explicit consent mechanisms. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy and security.txt file suggests an area for enhancement. Overall, the risk profile is low with recommendations to strengthen security headers and privacy compliance. Strategically, Lausitz-Hosting is well-positioned in its niche with a clear business model and trusted service offerings. The website supports business credibility through customer references and certifications, though it could benefit from enhanced transparency in security incident handling and privacy consent.

H

Haus der Diakonie

haus-der-diakonie.ch

47

Haus der Diakonie is a non-profit community project based in Switzerland focused on repurposing the Kirchgemeindehaus Wipkingen into a center for diaconal social services and community engagement. The website serves as an informational platform for the project, showcasing testimonials, project updates, and contact information. Technically, the site is built on WordPress with common plugins and frameworks, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and vulnerability disclosure. Overall, the site is trustworthy and professionally presented, though it could improve privacy and security transparency.

TonSPuR.org is a niche website dedicated to providing spiritual care and audio content for police and rescue personnel, primarily in the German-speaking region of Switzerland. The site serves as a resource especially during pandemic-related event cancellations, offering an archive of audio contributions. The business model is non-commercial and focused on community support rather than profit. The website is built on WordPress, utilizing common plugins such as Podlove Podcasting and standard web fonts, hosted by Hostpoint AG. The technical infrastructure is moderate with good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and DNSSEC. No privacy or cookie policies are present, indicating compliance gaps. Contact information is minimal, limiting direct communication channels. Overall, the site is functional and serves its intended audience but requires improvements in privacy, security, and transparency to enhance trust and compliance.

S

Skat Foundation

skat-foundation.ch

49

Skat Foundation is a Swiss non-profit organization dedicated to development cooperation and sustainable development initiatives. The website presents a professional image with a focus on international development services, capacity building, and advisory roles. The target audience includes development professionals, donors, and partner organizations. The business model is typical for a non-profit foundation operating in the international cooperation sector. Technically, the website is built on WordPress using the Divi theme, with standard plugins for multilingual support and cookie consent management. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place; however, there is room for improvement in security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness.

T

Treezor

treezor.com

76

Treezor is a European leader in Banking-as-a-Service, providing a comprehensive modular platform that enables fintechs and large businesses to embed financial services seamlessly into their customer journeys. The company offers a wide range of services including core banking, payment issuing and acquiring, SEPA payments, KYC/KYB compliance, and credit solutions. Their market position is strong within Europe, supported by a professional website with rich content, multilingual support, and visible trust indicators such as PCI DSS certification and client success stories. Technically, the website is built on WordPress with modern tools like WPBakery, jQuery, and Swiper.js, and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and PCI DSS certification, but lacks some security headers and explicit incident response contact information. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional presentation and business legitimacy mitigate this risk. No blocking or WAF challenges were detected, allowing full content analysis. Overall, the site demonstrates a mature digital presence with good security and compliance practices, suitable for its fintech audience. Recommendations include enhancing security headers, publishing an incident response policy, adding vulnerability disclosure mechanisms, and improving accessibility to further strengthen trust and compliance.

M

Mosaiq

mosaiq.ch

51

Mosaiq is a Swiss-based full-service marketing and communication agency specializing in integrated brand success. The company offers a broad range of services including consulting, content marketing, creative design, online marketing, and web development. Positioned as a trusted partner for small and medium-sized enterprises in the Mittelland region, Mosaiq emphasizes comprehensive brand identity and multi-channel communication strategies. The website reflects a professional and modern digital presence with strong branding consistency and client testimonials that reinforce trust. Technically, the website is built on WordPress with UIkit framework and leverages modern tools such as Google Tag Manager, Microsoft Clarity, and Brevo for marketing automation. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and use of Google reCAPTCHA, although some security headers could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, there is no explicit security policy or incident response information publicly available. Overall, the website and domain registration data indicate a legitimate and trustworthy business with a strong online presence. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security and trust.

G

Gotthilf Benz Turngerätefabrik GmbH + Co. KG

benz-sport.at

50

Firma Benz Turn- und Sportgeräte Gesellschaft m.b.H operates a professional e-commerce platform specializing in sports equipment, targeting a broad audience primarily in Austria and German-speaking regions. The company offers a wide range of products including balls, gymnastics equipment, fitness and strength training gear, team sports accessories, martial arts supplies, and swimming products. The website is well-structured, leveraging the PrestaShop CMS platform, and provides clear contact information and localized content. The presence of multiple country-specific domains indicates a regional market focus with multilingual support. Technically, the website employs modern web technologies such as jQuery, Nivo Slider for image slideshows, and Google reCAPTCHA for form security. The site is served over HTTPS with a good SSL configuration, ensuring secure data transmission. Cookie consent mechanisms are implemented to comply with GDPR requirements, although an explicit privacy policy page was not found in the provided content. The site demonstrates good mobile optimization and SEO practices, contributing to a positive user experience. From a security perspective, the website benefits from HTTPS and CAPTCHA protections but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure statements. The absence of WHOIS registrant data reduces transparency but does not necessarily indicate malicious intent. Overall, the site maintains a solid security posture with room for improvement in policy disclosures and header implementations. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and enhancing WHOIS transparency to build greater trust. These steps will strengthen compliance, security posture, and user confidence in the platform.

M

Medyum Şehrazat Hoca

medyum-sehrazat-hoca.de

63

Medyum Şehrazat Hoca operates as a small-scale spiritual and occult service provider primarily targeting Turkish-speaking individuals in Germany and Europe. The website presents a professional and consistent brand image, offering a range of services including love spells, tarot readings, horoscope analysis, and spiritual protection. The business leverages testimonials and direct contact channels to build trust with its audience. Technically, the website uses common frontend frameworks such as Bootstrap and jQuery, with Cookiebot integrated for cookie consent management. While the site is mobile-optimized and user-friendly, it lacks advanced security headers and explicit incident response policies. Overall, the security posture is moderate with room for improvement in formalizing security and privacy policies. The domain registration data aligns with the website's claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and improving incident response readiness.

M

maxFlite

maxflite.de

53

maxFlite is a German-based e-commerce retailer specializing in aviation-themed garden wind decorations, targeting garden enthusiasts and aviation fans. The website presents a professional and consistent brand image with a clear product focus on windmills and garden decor shaped like airplanes, cars, and animals. The business operates primarily in the retail sector with a niche market position and has been active since at least 2019. The website leverages WordPress and WooCommerce platforms with popular plugins for SEO, marketing, and analytics, indicating a moderate level of digital maturity.

D

Digt AG

digt.ch

61

Digt AG is a Swiss-based company specializing in community building, brand creation, and product promotion within the e-commerce sector. Their website presents a professional and modern digital presence, targeting businesses seeking to grow their communities, create brands, and promote products in the Swiss market. The company appears to be relatively new, founded around 2021, with a clear focus on service provision in e-commerce and brand distribution. Technically, the website is built on WordPress with a solid tech stack including Bootstrap, jQuery, and SEO tools like Yoast. It is mobile-optimized and uses Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit policies, which could be improved. Overall, the site is trustworthy and professional, with minor gaps in privacy compliance and security transparency.

S

Schweizer Agrarmedien AG

agrarmedien.ch

67

Schweizer Agrarmedien AG is the largest agricultural specialized publishing company in Switzerland, offering a portfolio of print and digital media products including newspapers, magazines, and online marketplaces focused on agriculture, nature, and environment. Their target audience includes farming families, animal and nature enthusiasts, and professionals in the Swiss agricultural sector. The company maintains a strong market position with multiple well-known media brands and digital platforms. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Matomo, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally managed, with room for improvement in security and privacy transparency.