Security Directory

H

Heilpädagogische Schule Turbenthal

hps-turbenthal.ch

47

Heilpädagogische Schule Turbenthal is a specialized day school located in Turbenthal, Switzerland, providing educational services to children and youth with special learning and life needs. The institution offers a range of services including therapies, lunch programs, school social work, and parent forums, positioning itself as a local leader in special education. The website is professionally designed using WordPress with a focus on accessibility and clear navigation, targeting families and stakeholders in the education sector. Technical infrastructure leverages common WordPress plugins and frameworks, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site demonstrates a trustworthy and compliant digital presence suitable for its educational mission.

S

Sans Papiers Anlaufstelle Basel

sans-papiers-basel.ch

46

Sans Papiers Anlaufstelle Basel is a small non-profit organization dedicated to supporting undocumented migrants in Basel, Switzerland. The website serves as an information and advocacy platform offering consultations, campaigns, and community engagement. It targets undocumented migrants and supporters interested in migration and human rights. The organization is positioned locally with a clear mission and regularly updated content. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Matomo for privacy-respecting analytics. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no cookie consent mechanism is implemented. WHOIS data aligns with the organization's Basel location and mission, supporting legitimacy. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and security policies.

D

Der Holzring GmbH

holzring-lieferanten.de

44

Der Holzring GmbH operates a specialized network platform focused on enhancing collaboration between its shareholders and suppliers in the wood industry. The company offers services such as market analyses, framework agreements, sales promotion, and competence transfer to optimize processes and foster growth. The website reflects a professional and consistent brand presence targeting business partners and suppliers within Germany. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-structured, and compliant, supporting the company's business credibility and digital maturity.

L

Leyendecker bastelstube GmbH & Co. KG

leyendecker-bastelstube.de

51

Leyendecker bastelstube GmbH & Co. KG is a well-established retail business specializing in arts, crafts, and hobby supplies, serving the Trier and Luxembourg regions. With over 61 years of operation, the company offers a broad product range both in-store and online, complemented by services such as an Abhol-Service and event hosting. The website reflects a professional and consistent brand image, targeting creative hobbyists and local customers. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a leading local retailer in its niche.

I

Input interior

inputinterior.dk

46

Input interior is a leading independent interior design and furnishing group operating across the Nordic region, specializing in tailored solutions for offices, hospitality, education, and care sectors. The company emphasizes sustainability and offers a broad product range supported by multiple regional websites and active social media engagement. The website demonstrates a mature digital presence with multilingual support and comprehensive content showcasing projects, news, and services. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are not publicly documented. The absence of WHOIS data limits domain trust verification, but the professional presentation and business transparency mitigate concerns. Overall, Input interior presents a credible and well-established business with a strong online footprint.

I

Input interior

inputinterior.se

47

Input interiör is a leading independent interior design group in the Nordic region, specializing in tailored interior solutions for offices, hospitality, education, and healthcare sectors. The company operates multiple showrooms and offers a broad product range with a strong emphasis on sustainability and functionality. Their market position is strong, supported by certifications and a professional digital presence. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for performance, SEO, and mobile responsiveness. The use of Google Tag Manager and reCAPTCHA indicates a mature digital infrastructure. Security practices are good with HTTPS and cookie consent mechanisms, though some HTTP security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Contact information is clearly presented, enhancing business credibility. Overall, the website and business present a low risk profile with strong trust indicators. The missing WHOIS data for the subdomain is not a significant concern given the overall professionalism and transparency of the site. Strategic recommendations include enhancing HTTP security headers and publishing a vulnerability disclosure policy.

Y

YellowMap AG

yellowmap.de

54

YellowMap AG operates a comprehensive local business directory platform for Germany, offering over 5 million listings including companies, services, maps, events, and more. The website targets general users seeking local business information and related services such as hotels, pharmacies, and restaurants. The platform is well-established with visible partnerships and affiliate programs enhancing its market position. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Slick Carousel, and integrates Piwik analytics for user tracking. The site is mobile-optimized with good SEO and accessibility basics. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

Z

ZeroDocs.com

zerodocs.com

60

ZeroDocs.com is a specialized service provider focused on developing architectural specifications and sustainability documentation for building product manufacturers. Established in 2010, the company targets architects and building product brands, offering 3-part specifications, environmental product declarations, and free downloadable specifications. The website demonstrates a professional market position supported by client testimonials and a clear business model centered on specification writing services. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, supported by Cloudflare DNS and Google Analytics for performance and tracking. Security posture is adequate with HTTPS enabled and domain registration protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained, serving a niche market effectively.

H

Holzwerk - Ballonteam

luftrebellen.de

44

Holzwerk - Ballonteam operates a specialized balloon flight service based in Celle, Germany, offering scenic balloon rides over local and regional landmarks. Established since 2011, the company maintains a small but professional presence with a focus on personalized customer experience and event participation. Their website reflects a well-structured, content-rich platform with clear business information and active social media engagement. Technically, the site is built on WordPress with modern plugins and SEO optimization, delivering moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the business demonstrates credibility and trustworthiness with clear contact channels and consistent branding.

K

Klasse2000

klasse2000.de

55

Klasse2000 is a German non-profit educational program focused on health promotion, violence prevention, and addiction prevention for primary and special schools. The website serves as an information hub for schools, teachers, parents, and sponsors, offering program details, downloadable materials, and access to a digital learning platform called KLARO Labor. The organization has a strong market position with over 4,900 sponsors and is certified with the DZI Spenden-Siegel, indicating transparent and trustworthy donation management. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism via CookieFirst, reflecting a moderate level of digital maturity. However, explicit privacy policies and terms of service are not found in the provided content, and security headers are not detected, suggesting room for improvement in security posture. Overall, the website is professional, well-branded, and user-friendly, targeting educators and parents in Germany.

V

Vieser Oy

vieser.fi

58

Vieser Oy is a Finnish manufacturing company specializing in floor drains, with a market presence dating back to 1973. The company targets construction professionals and consumers primarily in Finland and the Nordic region. Their website reflects a mature digital presence built on WordPress and WooCommerce, supporting e-commerce and multilingual content. The technical infrastructure is modern and includes standard industry tools such as Google Analytics and Cookie Information for privacy compliance. Security posture is solid with HTTPS enforced and standard security headers, though there is room for improvement in CSP implementation and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's established market position.

C

Creative Europe Desk Austria

creativeeurope.at

10

Creative Europe Austria is an official Austrian government portal providing comprehensive information and advisory services related to the EU's Creative Europe 2021-2027 funding program. The site targets cultural and creative sectors, offering guidance on funding opportunities across media, culture, and cross-sectoral projects. It is operated under the Bundesministerium für Wohnen, Kunst, Kultur, Medien und Sport (BMWKMS), positioning it as a trusted source for EU cultural funding in Austria. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Rocksolid Slider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with GDPR-aligned cookie management and anonymized analytics via Matomo. Overall, the site demonstrates a professional and trustworthy presence with no detected vulnerabilities or suspicious elements.

K

Urlaub in Kitzbühel, Tirol buchen | Wandern, Skifahren & mehr

kitzbuehel.com

58

The website www.kitzbuehel.com serves as a comprehensive tourism portal for the Kitzbühel region in Tirol, Austria. It provides information on year-round alpine activities including hiking and skiing, accommodation options, and local events. The site targets tourists and travelers seeking alpine vacation experiences. Technically, the site is built on TYPO3 CMS and integrates modern web technologies including Cookiebot for consent management, Google Tag Manager, Matomo analytics, and Facebook Pixel for marketing and tracking. The presence of a chat widget enhances user engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are not explicitly found. Privacy compliance is good with cookie consent and GDPR-related mechanisms, but no explicit privacy policy or terms of service pages were detected in the provided content. WHOIS data for the domain is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the professional nature of the site. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

E

echo medienhaus

echo.at

44

echo medienhaus is a medium-sized Austrian media company specializing in print and digital media, event management, and agency services. The website reflects a professional media house with a consistent brand presence and a diversified portfolio of media and event partners. The technical infrastructure is based on WordPress CMS using the Enfold theme and Avia framework, with moderate performance and good mobile optimization. Google Analytics is used for visitor tracking with a cookie consent mechanism implemented. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced compliance and security documentation.

M

MaxFun Sports GmbH

maxfunsports.com

46

MaxFun Sports GmbH operates a leading Austrian running sports platform focused on providing comprehensive content, event registration, race results, multimedia, and community engagement for runners and sports enthusiasts primarily in Austria and German-speaking regions. The website is well-structured, content-rich, and professionally designed, offering a broad range of services including news, training plans, and event calendars. The platform integrates modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, and employs a custom CMS likely based on the Yii framework. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism implemented via CookieFirst. Security posture is good with HTTPS and CSRF protections, though some security headers are missing and no explicit security policy or incident response information is provided. The domain WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active business presence. Overall, the website scores well on content quality, technical implementation, and privacy compliance but is penalized for the lack of verifiable domain registration data.

C

C.A. SEYDEL SÖHNE

seydel1847.de

60

C.A. SEYDEL SÖHNE is a historic German manufacturer specializing in handmade harmonicas since 1847. The company operates a professional e-commerce platform showcasing a wide range of harmonicas, accessories, and related services including workshops and virtual tours. Their market position is that of a niche leader with a strong heritage brand in the musical instrument manufacturing sector. The website is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a cookie consent mechanism and privacy policy. Technically, the site uses the ePages platform with Dojo Toolkit and jQuery, supported by Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with good user experience and trust indicators.

R

Ri-Velo

ri-velo.it

53

Ri-Velo is a regional innovative network based in Veneto, Italy, focused on logistics, supply chain, and sustainability projects. The organization integrates companies, institutions, and universities to foster innovation in logistics 4.0 and eco-sustainability. The website positions Ri-Velo as a key player in the regional logistics innovation ecosystem, supported by recognized certifications such as the ECEI Bronze Label. The target audience includes businesses and organizations involved in logistics and supply chain within the Veneto region. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, WPML for multilingual support, and Google Tag Manager for analytics. Security measures include HTTPS, Google reCAPTCHA on contact forms, and GDPR-compliant cookie consent mechanisms. However, some security headers are missing, and no explicit security or incident response policies are published. Overall, the website is professional, well-structured, and trustworthy, with good content quality and compliance with privacy regulations.

B

Bundes-Sport GmbH

bundes-sport-gmbh.at

61

Bundes-Sport GmbH is a non-profit organization established in 2018 by the Republic of Austria to promote and manage funding for sports associations, organizations, and institutions under the Austrian Federal Sports Promotion Act 2017. The company plays a key role in supporting both elite and grassroots sports in Austria, providing funding allocation, control, and evaluation services. The website reflects a professional and government-affiliated entity with clear communication and comprehensive information about its mission and services. Technically, the site is built on WordPress with modern plugins like Elementor and Slider Revolution, offering a good user experience with mobile optimization and cookie consent mechanisms. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence aligned with its official and public service role.

E

EXPO-BOOK

expo-book.com

45

EXPO-BOOK is an international exhibition portal and social network established in 2012, offering a comprehensive platform for exhibitions, companies, tenders, jobs, and communities related to the exhibition industry. The website targets exhibitors, visitors, and professionals seeking information and networking opportunities in the exhibition sector. It maintains a large database of exhibitions, companies, and members, positioning itself as a significant player in the international exhibition market. Technically, the website employs a custom CMS with a technology stack including jQuery, jQuery UI, Google Translate integration, and Yandex Metrika for analytics. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. Hosting and domain registration are managed through RU-CENTER with privacy protection enabled. From a security perspective, the site uses HTTPS and has domain transfer protection but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No explicit security or incident response policies are published, and cookie consent mechanisms are absent, indicating partial compliance with privacy regulations. The site does not expose sensitive data or use vulnerable libraries visibly. Overall, the website is professionally designed and functional with a moderate security posture and basic privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would enhance trust and compliance. The domain's long age and stable registration support the site's legitimacy, with no suspicious indicators detected.

A

Advantour

advantour.com

52

Advantour is a specialized boutique tour operator focusing on private and group tours along the Silk Road, Central Asia, and the Caucasus regions. Established in 2001, the company offers authentic, custom-made travel experiences emphasizing safety, comfort, and expert local partnerships. The website reflects a strong market position with clear branding, rich content, and a professional presentation targeting culturally curious travelers interested in niche destinations. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Yandex Metrika. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is primarily via a web form, with no direct emails or phone numbers visible. Overall, the site is trustworthy, professional, and safe for general audiences.

Т

ТОО One Media Press

weproject.media

51

Weproject.media is a lifestyle media outlet focused on people and culture in Central Asia, primarily Kazakhstan. It positions itself as a unique regional media source without politics or religion, targeting a broad audience interested in positive lifestyle content. The company behind the site is ТОО One Media Press, based in Astana, Kazakhstan. The website offers articles, news, and advertising services, supported by active social media channels and subscription options. Technically, the site uses Bitrix CMS, jQuery, and integrates multiple analytics and marketing tools such as Google Analytics, Yandex Metrika, Facebook Pixel, and SendPulse. The site is mobile-optimized with good navigation and professional design. Security-wise, HTTPS is enforced, but explicit security headers are missing, and privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

C

Comydo (Uniberry GmbH)

comydo.com

69

Comydo, operated by Uniberry GmbH, is a technology company specializing in cloud-based access control solutions that transform QR codes and vehicle license plates into digital keys. Founded in 2019 and based in Germany, Comydo targets B2B customers including operators, integrators, and various industry sectors such as real estate, retail, tourism, and sports facilities. Their platform offers plug & play hardware and API integrations to simplify and modernize access management. The website is professionally designed using WordPress and modern plugins, optimized for SEO and mobile devices, and demonstrates a moderate level of digital maturity.

B

Bundeszahnärztekammer - Arbeitsgemeinschaft der Deutschen Zahnärztekammern e.V. (BZÄK)

bzaek.de

49

The Bundeszahnärztekammer (BZÄK) is the professional association representing all dentists in Germany. The website serves as an authoritative platform providing information, guidelines, and resources for dental professionals, patients, and the press. It maintains a strong national presence as the official body for dental health policy and professional standards. The site offers comprehensive content including press releases, prevention information, legal and regulatory guidance, and educational materials. The target audience includes dentists, dental teams, patients, and media representatives.

M

Marionette.js

marionettejs.com

55

Marionette.js is an established open source JavaScript framework designed to simplify Backbone.js application development by providing robust views, layouts, and architecture solutions. The website positions Marionette as a developer-focused tool with a strong community presence, including GitHub, Gitter chat, and Twitter. It offers documentation, screencasts, and a Chrome extension for developer tooling. The business model revolves around open source software with community contributions and paid educational content. Technically, the site uses Backbone.js, Marionette.js, and integrates analytics and translation services. The site is well-structured, mobile-optimized, and provides good user experience, though it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the site is trustworthy and professional, targeting developers in the technology sector.

U

US Green Building Council California

usgbc-ca.org

60

US Green Building Council California (USGBC-CA) is a non-profit organization dedicated to advancing sustainability, green building, climate resilience, and environmental justice across California. The organization provides advocacy, education, certification programs, and networking opportunities to sustainability professionals and advocates. Their market position is that of a regional leader in sustainability initiatives, with a focus on transforming the built environment in California. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and NitroPack for performance optimization. Social media integration and structured data enhance their digital presence. Security posture is good with HTTPS enabled and domain protections in place, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is currently weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and well-positioned to serve its target audience, but should enhance privacy and security disclosures to improve compliance and user trust.

H

HMC Architects

hmcarchitects.com

55

HMC Architects is a well-established, employee-owned architecture firm founded in 2002, specializing in healthcare, education, and civic space design. The company emphasizes community impact and sustainability through its 'Design For Good' philosophy. The website reflects a professional and consistent brand image with a focus on employee ownership and community service. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and offers a good user experience with clear navigation. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and longevity of the business.

S

Stadtkino Basel

stadtkinobasel.ch

49

Stadtkino Basel operates as a cultural cinema venue in Basel, Switzerland, offering a diverse program of film screenings, special series, and events. The website reflects a well-established regional cinema with a focus on community engagement and cultural enrichment. The business model centers on ticket sales, memberships, and hosting film-related events, targeting general audiences and film enthusiasts. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website uses a modest tech stack including jQuery and Lightbox.js, with Google Fonts for typography. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No major CMS is detected, suggesting a custom or lightweight platform. Security-wise, HTTPS is enforced, but security headers are lacking, and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a privacy policy and terms of service, but cookie consent mechanisms are absent. Overall, the security posture is adequate but could be enhanced by implementing security headers, vulnerability disclosure policies, and cookie consent. The domain registration data aligns well with the business identity, supporting legitimacy. No suspicious or malicious indicators were found. The website content is safe for general audiences, with no adult or explicit material detected.

B

BOOKANDPLAY GmbH

bookandplay.de

10

BOOKANDPLAY GmbH operates a specialized online platform focused on tennis court booking and sports facility management primarily in Germany. The website offers a comprehensive booking system for tennis players and clubs, including features such as access control, video surveillance, and automated lighting control to enhance facility management. The platform serves a large user base with over 467,000 members and nearly 30 million bookings, indicating a strong market presence in the niche of sports facility management. Technically, the website employs modern web technologies including Bootstrap and jQuery, with good mobile optimization and accessibility features such as the Eye-Able assistive technology. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. The WHOIS data is consistent with the business claims, showing professional hosting and no privacy protection, supporting legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

The Institut für Sport- und Bewegungsmedizin e.V. is a specialized healthcare and educational institution affiliated with the University of Hamburg. It offers a range of sports medicine and diagnostic services targeting amateur and professional athletes, health-conscious individuals, and sports teams. The organization leverages scientific methods and university resources to provide high-quality diagnostics, training planning, and preventive care. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website is built on a CMS platform provided by Verwaltungsportal.de, utilizing common web technologies such as jQuery, Bootstrap, and NivoSlider. The site is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. Hosting and resource delivery appear stable, though performance is moderate. From a security perspective, the site implements basic best practices including cookie consent and no visible sensitive data exposure. However, no advanced security headers or explicit security policies are present. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the professional website content. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website presents a trustworthy and professional front for the institution, but the lack of WHOIS data and absence of explicit security policies suggest areas for improvement in transparency and security posture.

S

Stiftung Leistungssport Hamburg

stiftung-leistungssport.de

10

Stiftung Leistungssport Hamburg is a non-profit foundation established in 2002 by the Hamburg Chamber of Commerce to sustainably support performance sports in Hamburg. The foundation focuses on talent management, youth promotion, and securing elite sports through its TEAM HAMBURG project. The website serves as an information and networking platform for athletes, sports organizations, and supporters. Technically, the site is built on WordPress with WooCommerce and membership plugins, employing modern JavaScript libraries and a responsive design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and well-positioned in its niche.

T

Transports Brevet

brevet.fr

49

Transports Brevet is a well-established French transportation company specializing in the logistics and transport of fresh and frozen products nationwide. Founded in 1966, it operates multiple logistics platforms and offers professional transport and storage services tailored to business clients. The website reflects a medium-sized enterprise with a clear focus on transportation and logistics within France. Technically, the site is built on Joomla CMS with modern front-end libraries such as Bootstrap and jQuery, and it includes Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS registration data is a notable gap, limiting domain trust verification. Overall, the website is functional, professional, and safe for general audiences, but could improve in security transparency and compliance documentation.

G

Groupe Sobotram

sobotram.fr

52

Groupe Sobotram is a well-established French transport and logistics company specializing in general goods and hazardous materials transport, operating both nationally and internationally. Founded in 1953 and acquired by Groupe Blondel in 2023, it maintains strategic locations including a SEVESO high-threshold site. The website reflects a professional business presence with clear service offerings and subsidiary information. Technically, the site uses modern web technologies such as Bootstrap, Mapbox GL JS, and Vimeo API, providing a good user experience with mobile optimization and structured navigation. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

T

Transports Baudouin

transports-baudouin.fr

46

Transports Baudouin is a medium-sized French transportation and logistics company established in 2017, offering a wide range of freight and vehicle rental services across France and 45 European countries. The company maintains a professional and consistent online presence with a well-structured Drupal 9 website, providing detailed service information and customer testimonials. The technical infrastructure is modern and includes standard analytics and cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is adequate with HTTPS and cookie consent, though improvements in HTTP security headers and incident response disclosures are recommended. Overall, the website is trustworthy, compliant with GDPR, and serves its business audience effectively.

G

Groupe Bernardi

bernardi-logistique.fr

45

Groupe Bernardi is a well-established French transportation and logistics company founded in 1961, specializing in national and international freight transport, storage, and distribution services. The company leverages its membership in the ASTRE network to extend its market reach and offers a variety of services including palletized freight, bulk transport, and logistics solutions. Their digital presence includes an online booking platform and client portals, reflecting a moderate level of digital maturity. Technically, the website is built on the SPIP CMS with modern web technologies such as Bootstrap and JavaScript libraries. It features responsive design and good SEO practices, although some accessibility features could be improved. The site uses HTTPS and includes GDPR-compliant cookie consent mechanisms, indicating attention to privacy and security. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy image with solid business credibility and compliance. Strategic improvements in security headers and incident response transparency would further enhance their security posture.

A

AVANZINI

avasped.it

46

Avanzini is a well-established Italian logistics and transportation company with over 30 years of experience, primarily serving clients in Italy and across Europe. The company offers comprehensive transport and integrated logistics solutions, including specialized services for wine, beer, and alcoholic products. Their market position is strong in Verona, supported by multiple operational sites and a significant volume of shipments and warehouse space. Technically, the website employs modern JavaScript libraries and frameworks, ensuring a good user experience with mobile optimization and basic accessibility. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the website reflects a professional and trustworthy business with clear contact information and certifications that enhance credibility.

A

Allied Express Cargo S.L.

allied-express.com

45

Allied Express Cargo S.L. is a Spanish logistics and transportation company founded in 2000, providing national and international distribution, customs clearance, and supply chain management services. The company is a member of Grupo ASTRE, which enhances its market position and service network. The website reflects a professional business with clear service offerings targeted at businesses requiring logistics solutions. Technically, the site is built on WordPress with common plugins and uses Google Analytics for tracking. The site is mobile optimized and has good design and navigation, though SEO and accessibility are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit incident response or vulnerability disclosure policies are present. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. Overall, the domain age and WHOIS data support the legitimacy of the business. Strategic improvements in security and privacy compliance would enhance trust and resilience.

T

Transports Allemand

transports-allemand.fr

46

Transports Allemand is a well-established French transportation and logistics company specializing in road freight, storage, and freight forwarding services. Founded in 1942, it operates primarily in the regional, national, and international transport sectors and is a member of the ASTRE European transport group. The company emphasizes reliability, rapid delivery, and sustainable practices, including a fully Euro 6 compliant vehicle fleet and an ongoing RSE commitment. Their website reflects a professional business presence with clear service offerings and contact information. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH, and incorporates modern web technologies including Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the company's history and business claims, supporting legitimacy. The site complies with GDPR through cookie consent and privacy policy presence. No WAF or blocking mechanisms were detected, allowing full content access. Strategically, the company should enhance its security transparency by publishing security policies and incident response contacts, improve accessibility, and maintain regular audits of third-party scripts. These steps will strengthen trust and compliance in an increasingly regulated environment.

I

Inside Groupement Flo

inside-flo.fr

42

Inside Groupement Flo operates a secure login portal likely intended for members or employees, providing controlled access to internal services. The website is minimalistic, focusing on authentication without public-facing content or detailed business descriptions. The technical infrastructure uses the Foundation CSS framework and jQuery library, hosted via OVH, a reputable provider. Mobile optimization and accessibility are basic but functional. Security posture shows some positive practices such as CSRF token implementation in the login form; however, the absence of visible security headers and privacy policies indicates room for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is moderately secure but lacks transparency and compliance documentation.

A

Anaveo

anaveo.fr

65

Anaveo is a leading French company specializing in intelligent electronic security solutions, offering a comprehensive range of services including video surveillance, access control, intrusion detection, fire safety, and unified security platforms. The company targets various sectors such as retail, industry, healthcare, hospitality, and urban mobility, positioning itself as a key player in the French security technology market. Their business model focuses on delivering innovative, integrated security applications and smart business tools to enhance safety and operational efficiency for enterprises. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO, with advanced analytics and tracking tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and Rollbar for error monitoring. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security measures include HTTPS, reCAPTCHA, and cookie consent management, although explicit security headers and policies could be improved. From a security posture perspective, the site shows good practices with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration details and explicit privacy and security policies slightly reduce trustworthiness. The site holds APSAD certifications, reinforcing its credibility in the security industry. Overall, Anaveo presents a professional, trustworthy online presence with strong business credibility and technical maturity. To enhance security and compliance, it is recommended to publish clear privacy and security policies, improve WHOIS transparency, and implement additional security headers. These steps will further solidify trust and regulatory compliance, supporting Anaveo's market leadership and customer confidence.

B

Berner

berner.com

63

Berner is a well-established manufacturer specializing in air curtains and air doors, serving commercial and industrial markets primarily in the United States. The company positions itself as a leading North American manufacturer with a focus on energy savings, indoor air quality, and sustainable solutions. Their website reflects a mature digital presence with comprehensive product information, technical support, and customer engagement tools. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as Google Tag Manager, Hotjar, and Adobe Analytics. Security posture is strong with HTTPS enforced and a robust cookie consent mechanism, although some security headers could be improved. Privacy compliance is well addressed with clear policies and granular cookie controls. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, supported by consistent WHOIS data and domain age.

W

WiiSmile

wiismile.com

59

WiiSmile is a French company founded in 2017 that provides externalized employee committee services tailored for small and medium enterprises (TPE & PME). Their business model focuses on enhancing employee benefits and quality of life by aggregating offers typically found in larger company committees. The website positions WiiSmile as a niche player offering meal vouchers, gift checks, team building, and other employee engagement services. The target audience is primarily small business owners and their employees in France. The company maintains a professional online presence with clear branding and trust signals such as embedded Google and Trustpilot reviews.

L

LaGaSaGa

lagasaga.de

35

LaGaSaGa is a German cultural storytelling project centered around the character Nennia, the guardian of the Süntelbuchen forests near Bad Nenndorf. The website promotes stories, podcasts, and cultural events related to the Landesgartenschau 2026 in Bad Nenndorf. The site is built on WordPress with modern SEO and multimedia integration, including podcasts on Spotify and embedded YouTube videos. The technical infrastructure is solid, hosted on kasserver.com with HTTPS enabled and uses popular plugins like Yoast SEO and WPBakery Page Builder. Security posture is good with no obvious vulnerabilities or exposed sensitive data, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is professional, trustworthy, and well-branded but should improve compliance and security documentation.

O

O‘zbekiston Avtomobil Biznesi Uyushmasi

abauzbekistan.uz

47

O‘zbekiston Avtomobil Biznesi Uyushmasi is a national non-profit association uniting automotive manufacturers, component producers, distributors, and dealers in Uzbekistan. The organization aims to develop the automotive industry, promote standards, support export and localization, and represent member interests. The website is professionally designed, content-rich, and targets industry stakeholders and partners. Technically, it uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent mechanism and privacy policy present. Overall, the domain registration aligns well with the business founding date, supporting legitimacy.

B

Bundesverband BioEnergie e.V. (BBE)

fachverband-holzenergie.de

48

Fachverband Holzenergie is a German industry association dedicated to promoting sustainable wood energy usage. It operates under the umbrella of Bundesverband BioEnergie e.V. (BBE) and provides advocacy, publications, events, and working groups to support the wood energy sector. The website is professionally designed, content-rich, and targets industry stakeholders, policymakers, and environmental advocates. The association holds a solid market position within Germany's renewable energy landscape, focusing on sustainable forestry and climate protection through wood energy. Technically, the website is built on the Concrete5 CMS platform, utilizing modern JavaScript libraries such as jQuery and LayerSlider for interactive content. The site is mobile-optimized with good navigation and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. Analytics are handled via Matomo, emphasizing privacy compliance with cookie opt-in. Overall, the website presents a trustworthy and professional front for the Fachverband Holzenergie association. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security posture and compliance. The domain WHOIS data is minimal but consistent with the website's German focus, supporting legitimacy. No WAF or blocking mechanisms interfere with content access.

K

KoreaWho

koreawho.com

62

KoreaWho is a specialized media platform providing detailed biographical profiles and news about influential leaders in the Korean economy. The website targets business professionals, investors, and researchers interested in Korean corporate leadership. It offers a searchable database of profiles and news articles focusing on executives across various sectors including energy, finance, manufacturing, and transportation. The platform positions itself as a niche authoritative source for Korean business leadership information. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and Google Fonts. It is mobile-optimized with good SEO practices and moderate performance. The site uses HTTPS and integrates analytics tools like Google Analytics and Naver Analytics, indicating a moderate level of digital maturity. From a security perspective, the site enforces HTTPS but lacks comprehensive security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance or cookie consent. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy front with quality content and good user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Security and privacy practices could be improved to enhance compliance and trustworthiness.

The website bpforum.net serves as the official platform for the 2025 Business Post Finance Forum held in Hanoi, Vietnam, focusing on expanding Korea-ASEAN financial cooperation. Hosted by the Korean media company 비즈니스포스트, the site targets financial professionals, policymakers, and investors interested in ASEAN and Vietnamese financial markets. The business model centers on organizing specialized finance forums to facilitate networking and knowledge sharing. The site content is primarily in Korean with professional event details, speaker introductions, and partner information, reflecting a focused niche audience. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Owl Carousel, and Animate.css, hosted on AWS infrastructure. The site is mobile-optimized with good navigation and design quality, though SEO and accessibility features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical setup. From a security perspective, the domain uses clientTransferProhibited status but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. The absence of privacy and cookie policies indicates compliance gaps, especially under GDPR. No incident response or vulnerability disclosure information is provided. WHOIS data is transparent and consistent with the business, supporting legitimacy. Overall, the site is professionally presented and credible for its business purpose but would benefit from improved security practices and privacy compliance to strengthen trust and regulatory adherence.

V

Verein Vertrauensstelle Kunst und Kultur

vertrauensstelle.at

48

The Verein Vertrauensstelle Kunst und Kultur operates as an independent trust center providing confidential, professional advice and support for individuals affected by abuse of power, harassment, and violence within the arts and culture sector in Austria. The organization also promotes sustainable cultural change through prevention initiatives. Their market position is that of a specialized non-profit entity serving a niche audience within the cultural sector. The website is well-structured, professionally designed, and fully accessible with clear navigation and mobile optimization. Technically, it is built on WordPress with modern plugins and privacy-conscious analytics (Matomo) implemented. Security posture is strong with HTTPS enforced and privacy policies aligned with GDPR requirements, although some security headers and explicit incident response contacts are missing. Overall, the domain registration and WHOIS data are consistent with the organization's claims, supporting legitimacy and trustworthiness.

S

sports4everybody

kitz-extremechallenge.com

49

The website www.kitz-extremechallenge.com represents the World Extreme Run Challenge (WERC), an extreme sports event organized by the non-profit association sports4everybody. The event is held on the famous Kitzbühel Streif ski slope and aims to challenge participants with an up-and-down mountain run. The business model is non-profit, focusing on community engagement and supporting Austrian sports talents. The website content is professionally presented in German, with clear navigation and relevant event information. The site is supported by multiple reputable partners and sponsors, enhancing its credibility. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as jQuery and Owl Carousel. It employs Matomo analytics for user tracking with privacy considerations. The site is mobile-optimized and performs moderately well. However, no CMS or hosting provider details are explicitly detected. Security posture is good with HTTPS enforced and secure form handling, but lacks some security headers and incident response information. From a security and compliance perspective, the site includes a privacy policy and cookie consent mechanism compliant with GDPR. Contact information is clearly provided, but no terms of service or security policy documents are found. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy despite the professional website presence. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is a credible and professional platform for the WERC event but should address WHOIS transparency and enhance security headers and policies to improve trust and compliance.

S

Stiftung Ehrenkodex

ehrenkodex.ch

64

Stiftung Ehrenkodex operates as a Swiss nonprofit foundation providing a certification and quality seal for nonprofit organizations with Christian values. Their service focuses on ensuring transparency, ethical governance, and effective use of donations. The organization is well-positioned in the Swiss nonprofit sector, leveraging academic models from the University of Basel to underpin their certification process. Their website reflects a professional and trustworthy image, targeting nonprofit organizations and donors seeking assurance of ethical practices. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Tag Manager for analytics and Finsweet Cookie Consent for privacy compliance. The site is mobile-optimized, fast-loading, and accessible, with clear navigation and comprehensive content. Security measures such as HTTPS and standard security headers are in place, though explicit security policies and incident response information are not publicly detailed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well-handled with a clear privacy policy and cookie consent mechanism. Contact information is transparent and includes multiple channels, enhancing business credibility. Overall, the site scores highly on content quality, technical implementation, security, privacy, and business credibility, making it a reliable and professional digital presence for the foundation. Strategically, the foundation should consider publishing explicit security and incident response policies to further enhance trust and compliance. Additionally, implementing a vulnerability disclosure policy and security.txt file would align with best practices. These steps would strengthen their security posture and demonstrate commitment to transparency and user protection.

B

Bundes-Sport GmbH

austrian-sports.at

61

Bundes-Sport GmbH is a government-affiliated non-profit organization in Austria, established in 2018 to promote and manage funding for sports associations and institutions under the Bundes-Sportförderungsgesetz 2017. The organization plays a pivotal role in supporting both elite and grassroots sports through funding allocation, control, and evaluation. The website reflects a professional and consistent brand presence, targeting sports entities and stakeholders within Austria. Technically, the site is built on WordPress with modern plugins like Elementor and Revolution Slider, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the site demonstrates a mature digital presence suitable for its governmental and non-profit role.