Security Directory

D

Datatrans

datatrans.com

61

Datatrans is a Swiss-based payment solutions provider offering a flexible and customizable payment platform tailored for companies demanding advanced payment capabilities. The website presents a professional image with consistent branding and a clear focus on payment services, targeting business clients. The technical infrastructure leverages modern web technologies including Vue.js, and integrates reputable analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and CSRF protection, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, supporting trustworthiness and business credibility.

The website bonnespratiquestms.fr is a specialized platform focused on the prevention of musculoskeletal disorders (TMS) among cordistes, professionals working at heights using ropes. It is supported by OPPBTP and partners such as France Travaux sur Cordes, providing practical fiches, resources, and tools to improve occupational health and safety in the construction sector in France. The platform targets cordistes and safety professionals, offering educational content and prevention best practices. Technically, the site uses modern JavaScript libraries, Google Tag Manager, reCAPTCHA v3, and a consent management platform (Didomi), hosted on GANDI infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. The WHOIS data shows an anomalous future domain creation date, which reduces trust from a domain registration perspective but does not detract from the professional content and partner associations. Overall, the site is a credible resource in its niche with room for improvement in transparency and security documentation.

1

1&1 Telecom GmbH

1und1.de

72

1&1 Telecom GmbH is a major telecommunications provider in Germany offering a comprehensive range of internet and mobile telephony services. The company operates under the umbrella of United Internet AG and has a strong market presence with a focus on private and business customers. Their website reflects a professional and modern digital presence, leveraging advanced web technologies and a robust content management system (Neos CMS). The site is well-optimized for mobile devices and provides clear navigation and comprehensive service information. Security-wise, the website enforces HTTPS, employs secure form handling, and integrates reputable third-party analytics and marketing tools. Privacy compliance is well addressed with detailed policies and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting the company's enterprise-level stature in the telecommunications sector.

The website amzcon.de presents itself as a German-language deal aggregator offering discounted products across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. The business model appears to be affiliate marketing, leveraging Amazon product links to generate revenue. The domain is currently marked as for sale, and WHOIS data indicates the domain is unregistered or expired, which raises concerns about the legitimacy and continuity of the business. Technically, the site uses modern HTML5, CSS3, and JavaScript with Google Fonts integration and basic client-side search functionality. However, there is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Security best practices such as delayed activation of affiliate links to prevent bot clicks are observed, but overall security posture is weak due to missing HTTPS and security headers. The site contains no adult or explicit content and targets general consumers looking for deals. Overall, the site is functional but lacks critical trust and compliance elements, and the domain status undermines its credibility.

pretixstatus.com serves as the official system status page for the pretix event ticketing platform, providing real-time operational status updates. The website is minimalistic, focusing on clear communication of system uptime and support contact information. The business operates in the technology sector, specifically targeting event organizers requiring ticketing solutions. The domain is newly registered in early 2024, consistent with a dedicated status subdomain for the pretix platform. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with no detected CMS or complex frameworks. Hosting is likely provided by IONOS SE, the domain registrar. The site is mobile optimized with good navigation clarity but lacks advanced SEO and accessibility features. No analytics or advertising scripts are present, indicating a privacy-conscious approach. From a security perspective, the domain uses HTTPS (implied by modern web standards though SSL details are not explicit), has domain transfer protection enabled, but lacks DNSSEC and security headers. No forms or user input fields reduce attack surface. The absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, pretixstatus.com is a trustworthy and professional status page with a good baseline security posture and privacy compliance. Strategic enhancements in security headers, DNSSEC, and published security policies would strengthen its resilience and user trust.

V

Venueless

venueless.org

69

Venueless is a technology company founded in 2020 that provides a SaaS platform for hosting digital, hybrid, and on-site events. Their platform supports live streaming, workshop rooms with chat, integrated scheduling, and a kiosk mode for hybrid events. The company targets event organizers and conference planners seeking versatile and scalable event solutions. The website demonstrates a strong market position with ISO 27001 certification and GDPR compliance, supported by client testimonials and open source transparency. Technically, the website uses modern web technologies including Bootstrap, FontAwesome, and Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, well-structured, and performs moderately well. Hosting and domain registration are consistent and reputable, with no blocking or WAF interference detected. From a security perspective, Venueless shows maturity with ISO 27001 certification and GDPR compliance. HTTPS is enforced, forms are protected with CSRF tokens, and no obvious vulnerabilities or exposed sensitive data were found. However, DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. Incident response contact details and vulnerability disclosure mechanisms are not publicly available. Overall, Venueless presents a trustworthy, professional, and secure digital event platform with good privacy practices. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing incident response contacts to further enhance security and compliance posture.

P

pretix

pretix.cloud

72

pretix is a technology company specializing in event ticketing software, offering a comprehensive platform that includes online ticket shops, box office solutions, and various event management tools. The company targets event organizers across multiple sectors such as conferences, festivals, concerts, and exhibitions. With over 1000 customers and ISO 27001 certification, pretix holds a strong market position as a secure and privacy-focused ticketing solution provider. The website reflects a professional and consistent brand image with clear navigation and extensive product offerings. Technically, pretix employs modern web technologies including Matomo analytics for privacy-conscious tracking, SVG graphics for UI, and a REST API for extensibility. The site is well-optimized for performance and mobile devices, providing a good user experience. Security-wise, pretix demonstrates strong practices with HTTPS enforcement and ISO certification, though it lacks some security headers and a public vulnerability disclosure policy. Contact information is clearly presented, supporting business credibility. Overall, pretix presents a trustworthy and mature digital presence with minor areas for compliance and security enhancement.

R

rami.io GmbH

rami.io

65

rami.io GmbH is a small German software development company founded in 2013 by Raphael Michel, specializing in bespoke software projects and notably the pretix ticketing solution. The company is undergoing a rebranding to pretix GmbH in July 2025, reflecting its strategic focus on the ticketing market. The website content is professional, well-structured, and targeted at businesses and organizations requiring software and ticketing solutions. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is moderate with domain transfer protections but missing DNSSEC and security headers. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though no explicit security or incident response policies are published. Overall, the domain registration data aligns well with the website claims, supporting legitimacy and trustworthiness.

C

Carbon GmbH

carbon.ag

50

Carbon GmbH is a specialized company focused on innovative automotive body repair solutions, particularly the CBR-System for efficient exterior bodywork repairs. Established in 2002 and based in Germany, the company targets automotive repair professionals and businesses, positioning itself as a niche expert in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and clear business information. Technically, the site is built on WordPress with Elementor and integrates modern analytics and security tools such as Google Analytics, Matomo, and Wordfence, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and security headers, though DNSSEC is not enabled and no public security policy or incident response information is available. Privacy compliance is well addressed with comprehensive cookie and privacy policies and active consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with the company's business claims.

J

Jotform Inc.

jotform.co

66

Jotform Inc. is a well-established technology company specializing in online form building and related productivity tools. Founded in 2006 and headquartered in San Francisco, it serves a global audience with a comprehensive SaaS platform that includes form creation, surveys, e-signatures, PDF editing, and AI-powered agents. The company has a strong market presence with over 30 million users and a consistent brand identity. Technically, the website demonstrates modern web development practices, including the use of JavaScript frameworks, lazy loading, and structured data for SEO. It is optimized for performance, mobile responsiveness, and accessibility, with robust security measures such as HTTPS and security headers in place. The integration of Google Tag Manager and analytics indicates mature digital marketing and user tracking capabilities. From a security perspective, the site follows best practices with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, Jotform presents a low-risk profile with a professional online presence, strong business credibility, and a secure technical foundation. The absence of WHOIS data is noted but does not detract significantly from the trustworthiness given the company's established reputation and transparent contact information.

W

WasSchBer CORE – ERP für Gebäudereinigung & Facility

wasschber.de

58

WasSchBer CORE is a specialized ERP software solution tailored for the building cleaning and facility management sector in Germany. The website presents a professional business offering flexible, automated, and practical ERP tools designed to improve operational efficiency and customer satisfaction for small to medium-sized cleaning service providers. The market positioning is niche, focusing on digital process optimization within the German cleaning industry. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on UI-DNS infrastructure. Mobile optimization and SEO appear adequate, though accessibility features are basic. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and trust. Overall, the domain and website appear legitimate but would benefit from enhanced security and compliance disclosures.

N

Nexaro

nexaro.com

71

Nexaro operates as a specialized provider of professional vacuum robots designed for commercial use, including individual units and fleet management solutions. The company emphasizes TÜV certification and targets commercial sectors such as hospitality, public sector, and office cleaning. Their digital presence is built on the Shopify platform, integrating advanced marketing and analytics tools, and employing a robust consent management system to ensure GDPR compliance. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is strong with HTTPS enforcement and domain transfer locks, though there is room for improvement in DNSSEC and explicit security policies. Overall, Nexaro presents a credible and trustworthy business with a mature digital infrastructure.

J

Johannes Kiehl KG

kiehl-group.com

64

Johannes Kiehl KG is a well-established company with over 120 years of experience specializing in innovative and environmentally friendly cleaning products. Their product portfolio includes high-quality detergents for professional building cleaning and car wash sectors. The company emphasizes sustainability and environmental protection while delivering effective hygiene solutions. The website targets professional cleaning businesses, hospitals, nursing homes, and car wash operators, positioning itself as a trusted and environmentally conscious market player. Technically, the website is built on a modern CMS platform (likely eZ Platform) with JavaScript frameworks and libraries such as Flickity for carousels and Matomo for analytics. The site is mobile optimized, has good SEO practices, and integrates privacy-compliant cookie consent mechanisms. The presence of CAPTCHA and CSRF tokens on login forms indicates attention to security in user interactions. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in/out options. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern, slightly reducing trustworthiness, though the website content and business information appear professional and consistent. Overall, the website presents a professional and trustworthy front for the company, with good technical and privacy compliance. Strategic improvements include publishing security policies, enhancing security headers, and clarifying domain registration details to improve trust and compliance.

M

Messe Friedrichshafen GmbH

cleanpro-expo.de

64

The CLEAN PRO EXPO website represents a professional trade fair platform organized by Messe Friedrichshafen GmbH, focusing on cleaning technologies and facility management for the DACH region and neighboring markets. The site effectively communicates the event's purpose, target audience, and key services, positioning itself as an innovative marketplace launching in 2026. Technically, the website employs modern web technologies including Bootstrap, Algolia Autocomplete, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy, professional, and compliant with privacy standards, though explicit privacy and terms of service pages were not found in the provided content.

W

Weser-Ems Halle Oldenburg GmbH & Co. KG

motorradshow-oldenburg.de

62

MOTORRAD SHOW Oldenburg is a well-established regional motorcycle trade fair organized by Weser-Ems Halle Oldenburg GmbH & Co. KG, targeting motorcycle enthusiasts and industry stakeholders in the Oldenburg region of Germany. The event showcases new motorcycle models, accessories, and offers an engaging program including contests and social spaces. The website is professionally designed with good content quality and consistent branding, supporting a positive market position as a leading regional event. Technically, the site uses modern web technologies and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy and terms policies. Overall, the site is trustworthy and functional but could improve compliance and security transparency.

Suicide Monkeys is a small German-based e-commerce business specializing in streetwear clothing and accessories targeted at adrenaline junkies and extreme sports enthusiasts. The website is built on the Shopify platform using the Dawn theme, integrating modern payment methods such as Shopify Payments, PayPal, and Apple Pay. The business has a clear niche market and a growing community presence, with a focus on robust and simple fashion styles. Technically, the website is well-implemented with good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS and bot protection via hCaptcha, though explicit security headers and incident response policies are absent. Privacy compliance is basic with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site is professional and trustworthy but could improve in transparency and compliance areas.

D

daisys-diner.click

daisys-diner.click

62

The website daisys-diner.click serves as a branded short domain landing page associated with the Rebrandly URL shortening service. It does not provide any direct business information, contact details, or user engagement content beyond redirecting users to Rebrandly's main site. The domain WHOIS data is suspicious due to a creation date set in the future (June 2025), which undermines trust and legitimacy. The site uses minimal technical infrastructure with basic HTML, CSS, and JavaScript, and lacks modern security features such as DNSSEC or security headers. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating low compliance with privacy and security best practices.

D

DELTA PARTS

deltaparts.de

46

DELTA PARTS is a German manufacturer and retailer specializing in high-quality custom motorcycle parts produced using advanced CNC milling and laser technology. The company targets motorcycle enthusiasts and retailers seeking premium components such as license plate holders, fuel caps, lighting, and accessories. Their market position is that of a specialized manufacturer with a focus on quality and German engineering. The website is built on WordPress with Elementor, featuring modern design and multilingual support via GTranslate. Technical infrastructure is solid with HTTPS enabled and use of SEO plugins, though performance is moderate. Security posture is adequate but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

T

Toni-Garten und Landschaftsbau

toni-garten-und-landschaftsbau.de

49

Toni-Garten und Landschaftsbau is a small, local landscaping and garden care business based in Delmenhorst, Germany. The company offers a range of services including hedge trimming, lawn mowing, and complete garden redesigns, emphasizing quality workmanship and customer satisfaction. Their website is professionally designed with clear navigation and provides comprehensive contact options including phone numbers, email, physical address, and a secure contact form with CAPTCHA. Social media presence on Facebook and Instagram supports their local marketing efforts. Technically, the website is built using the MyWebsite NOW platform, employing modern web standards such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. Hosting is managed via UI-DNS name servers, indicating a professional DNS setup. Privacy compliance is addressed through a GDPR-compliant privacy policy and cookie consent banner, although no explicit security policy or incident response information is provided. Security posture is moderate, with secure form handling and consent mechanisms in place, but lacking visible security headers and detailed security documentation. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's business claims, supporting legitimacy. Overall, the site presents a trustworthy and professional image suitable for its local service market. Recommendations include enhancing security headers, verifying SSL/TLS configurations, adding explicit security and incident response policies, and improving accessibility features to strengthen compliance and user trust.

G

Google LLC

fuenfkommasechs.de

73

This website is a consent management page for YouTube, a service operated by Google LLC. It facilitates user consent for data processing and cookie usage in compliance with privacy regulations such as GDPR. The site is part of the youtube.com domain, which is a well-established and reputable platform in the online video streaming industry. The page is technically sophisticated, leveraging modern web technologies and Google’s cloud infrastructure to deliver a fast, responsive, and accessible user experience. Security is robust, with HTTPS enforced and multiple security headers present, reflecting Google's strong security posture. However, explicit privacy and cookie policy links are not directly present on this subdomain page, which slightly impacts privacy compliance scoring. Overall, the site is trustworthy, professional, and safe for general audiences.

M

MyVeyron

myveyron.com

52

MyVeyron is a niche luxury automotive experience provider based in France, specializing in offering exceptional driving experiences with the Bugatti Grand Sport Vitesse in the Alsace region. The website presents a professional and consistent brand image, targeting car enthusiasts and luxury experience seekers. Technically, the site is built on WordPress using the Divi theme and WooCommerce, with integrations such as Google Tag Manager and Mailchimp for analytics and marketing. Hosting is managed via Scaleway SAS with DNS hosted on o2switch.net. Security posture is moderate, with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic, with a cookie policy and consent mechanism present but no visible privacy policy or terms of service. Contact information is not explicitly provided on the site, which may impact user trust. Overall, the site is functional and well-designed but could improve in security and compliance documentation.

M

My Classic Automobile

myclassicautomobile.com

58

My Classic Automobile is a small French business specializing in the rental of classic and supercars such as Ferrari, Lamborghini, and Bugatti, primarily serving the Alsace region including Mulhouse. The company targets customers seeking luxury and vintage car experiences for weddings, track baptisms, wine route tours, and gifting. The website is professionally designed using the Wix platform, featuring bilingual support (French and English) and structured data to enhance search visibility. Technical infrastructure relies on Wix's hosting and JavaScript libraries, with some client-side security hardening scripts in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enforced but lacks explicit security headers and visible privacy or cookie policies. Overall, the site presents a trustworthy front for its niche market but would benefit from improved compliance and transparency.

V

Vivaticket

tickeasy.com

58

Vivaticket operates as an online ticketing platform primarily serving the French market, offering services related to event ticket sales and management. The website is professionally branded and uses modern web technologies including Google Tag Manager and Cookiebot for consent management, indicating a moderate level of digital maturity. However, the absence of visible privacy policies, terms of service, and contact information on the provided HTML content suggests gaps in transparency and user trust facilitation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible incident response contacts. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. Strategic improvements in compliance documentation, security headers, and public contact information are recommended to enhance credibility and user confidence.

I

INNOPERFORM GmbH

innoperform.de

52

INNOPERFORM GmbH is a German-based company specializing in the development, manufacturing, and marketing of innovative products with unique selling propositions. The company collaborates closely with inventors and creative individuals to transform product ideas into market-ready innovations. Recognized by the Saxon Innovation Award in 2019, INNOPERFORM has established itself as a trusted partner in product innovation and manufacturing, focusing on metal and plastic products. Their business model includes product development, manufacturing, and sales, targeting inventors and businesses seeking innovative solutions. Technically, the website is built on a modern stack including Bootstrap and Shopware CMS, hosted by Schlund Technologies. It employs multiple advertising and analytics platforms such as Google Analytics 4, Google Ads, Meta Ads, and others, indicating a mature digital marketing approach. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and business-focused with good content quality and technical implementation. Strategic improvements in privacy compliance and security policy transparency would enhance its security posture and regulatory adherence.

A

Auer Weber

auer-weber.de

49

Auer Weber is an established international architecture firm based in Germany with offices in Stuttgart and Munich. The company employs approximately 150 staff and has a strong portfolio of projects and awards, positioning itself as a reputable player in the architecture and real estate sector. Their website reflects a professional image with multilingual support and showcases their key projects and news updates. Technically, the website is built on TYPO3 CMS, leveraging JavaScript libraries such as jQuery and Flowplayer, and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and does not expose sensitive data, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a privacy and cookie policy present, though no active cookie consent mechanism is detected. Overall, the website is trustworthy and professional but could improve in security and compliance transparency.

T

The Chemours Company

chemours.com

54

The Chemours Company is a global leader in industrial and specialty chemical products, serving sectors such as energy, manufacturing, and technology. Their website reflects a mature enterprise with a strong market position and a focus on sustainability and innovation. The company offers a broad portfolio of brands and products including Teflon™, Ti-Pure™, Opteon™, and others, targeting industrial clients, investors, and potential employees worldwide. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Microsoft Application Insights for analytics, indicating a digitally mature infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. From a security perspective, the site enforces HTTPS and uses secure analytics tools but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data slightly reduces trust but is mitigated by the professional presentation and consistent branding. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include publishing explicit security headers, a security policy, and incident response contacts to enhance trust and compliance.

B

BITZER

bitzer.de

60

BITZER is a leading enterprise specializing in refrigeration, air conditioning, and heat pump technology, serving industrial and commercial sectors globally. The company positions itself as a market leader with a professional and internationally oriented website. The technical infrastructure includes modern JavaScript libraries and consent management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied and consent mechanisms in place, but lacks explicit security headers and published security policies. Overall, the website is trustworthy and professionally maintained but could improve privacy and security transparency.

E

ebm-papst

ebmpapst.com

69

ebm-papst is a globally recognized leader in the manufacturing and engineering of energy-saving fans and ventilation solutions. The company offers an extensive product range with approximately 20,000 products and provides custom engineering support through a large team of engineers and technicians. Their market position as a world market leader is supported by a professional and well-structured website that targets industrial and commercial customers worldwide, with multilingual and regional adaptations.

B

Bauverlag

profil-buchhandlung.de

47

Profil-Buchhandlung is a specialized e-commerce platform operated by Bauverlag, focusing on providing technical books and data products related to construction, civil engineering, and architecture. The website offers a range of products including online access, print books, and data packages for the BGL BAUGERÄTELISTE, a key resource in the construction industry. The target audience includes professionals and students in the construction sector. The business maintains a consistent and professional online presence with clear contact and legal information, supporting its niche market position. Technically, the website is built on the SELLTEC CMS system and integrates modern tools such as Google Tag Manager and Usercentrics for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around security policies could further enhance trust and security posture.

F

FOAMGLAS®

foamglas.com

75

FOAMGLAS® is a specialized manufacturer of cellular glass thermal insulation products, targeting building owners, specifiers, and construction professionals. The company positions itself as a leader in energy-efficient and sustainable building materials, with a focus on long-term performance and financial efficiency. The website is multilingual and professionally designed, reflecting a mature digital presence. The technical infrastructure includes modern web technologies such as Bootstrap, Google Tag Manager, Adobe Launch, and Visual Website Optimizer, indicating a commitment to performance optimization and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. The WHOIS data is missing or indicates the domain may not be registered, which is a concern for domain legitimacy and should be monitored. Overall, the website is professional and trustworthy, but improvements in transparency around security and domain registration are recommended.

M

Mitsubishi Electric Living Environment Systems

mitsubishi-les.com

68

Mitsubishi Electric Living Environment Systems (LES) is a division of Mitsubishi Electric, specializing in manufacturing and distributing advanced HVAC solutions including climate control, heating, ventilation, and cooling systems. The company has a strong market presence in Germany since 1991, offering a wide range of products and services tailored to professional installers, commercial customers, planners, and private consumers. Their business model combines product sales, rental services, training, and digital customer portals, positioning them as a comprehensive HVAC solutions provider. The website reflects a mature digital presence with professional design, multilingual support, and extensive product and service information.

F

FUNKE Mediengruppe

westfalenpost.de

65

The website www.wp.de is a regional German news portal operated by FUNKE Mediengruppe, focusing on delivering news and stories from the Westfalen region. It offers a mix of free content supported by advertising and subscription-based ad-free reading options, including e-paper and podcasts. The site targets German-speaking residents interested in local news and events. Technically, the site employs a modern JavaScript-based stack with multiple third-party integrations for consent management, advertising, analytics, and marketing automation. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses consent management for GDPR compliance, and includes adblock detection, but lacks publicly visible dedicated security or incident response policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with moderate user tracking and advertising transparency.

V

Vogel Communications Group

kfz-betrieb.de

76

The website www.kfz-betrieb.vogel.de is a professional German automotive trade magazine operated by the Vogel Communications Group. It provides current news, expert information, and industry insights focused on automobile trade, management, aftersales, vehicle technology, and professional development within the automotive sector. The target audience includes automotive industry professionals, car dealers, service technicians, and business managers. The business model centers on media publishing with subscription services, e-papers, newsletters, dossiers, and events. The site is well-branded and consistent, reflecting a strong market position in the German automotive media landscape. Technically, the website employs modern web technologies including JavaScript, jQuery, Google Tag Manager, Google Publisher Tags for advertising, and a GDPR-compliant consent management platform. The site is responsive and optimized for mobile devices, with good SEO practices and moderate performance. Hosting appears to be managed via Deutsche Telekom DNS infrastructure, indicating a stable and reliable environment. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. However, explicit security headers are not detected in the provided content, and no public security or incident response policies are found. There are no visible vulnerabilities or exposed sensitive data. Advertising and analytics are implemented with transparency and user consent. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though it could improve by publishing explicit privacy policies, terms of service, and security policies. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the business identity, supporting legitimacy.

KABINETT Verlag is a small German media publishing company with a focus on motor journalism and related media content. The website kabinett-online.de is currently under maintenance and provides detailed contact information and company background but lacks privacy, cookie, and security policies. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, hosted on servers indicated by the nameservers. No advanced CMS or analytics tools are detected. Security posture is moderate but could be improved by implementing HTTPS, security headers, and privacy compliance measures. Overall, the website presents a legitimate and consistent business presence but requires modernization and enhanced security and privacy practices to meet current standards.

Automuseum Dr. Carl Benz is a specialized museum located in Ladenburg, Germany, dedicated to the history of mobility and automotive heritage. It operates in a niche cultural sector, offering exhibitions, special events, and educational programs focused on automotive history. The museum targets a broad audience including local visitors, tourists, automotive enthusiasts, and school groups. It maintains a strong regional presence and is an official partner of the Mercedes-Benz Museum Stuttgart, enhancing its credibility and market position. Technically, the website is built using a classic web stack with jQuery and Bootstrap, providing a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices, with clear navigation and professional design. Hosting appears to be via a common provider (likely GoDaddy), and no CMS is detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic but present, with a privacy policy page and cookie consent managed via a popup. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low, with no critical vulnerabilities or suspicious content detected. Strategic recommendations include enhancing security headers, formalizing incident response contacts, and improving privacy transparency. The website demonstrates good business credibility and technical implementation for a small cultural institution.

Nordic Nest is an established online retailer specializing in Scandinavian interior design products, offering a wide range of furniture, lighting, tableware, and home accessories from over 250 Scandinavian brands. The website is professionally designed with good content quality and clear navigation, targeting consumers worldwide interested in Scandinavian design. Technically, the site uses modern technologies such as Google Tag Manager and a comprehensive cookie consent mechanism to ensure GDPR compliance. Security posture is strong with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. The absence of WHOIS data and contact information slightly reduces business credibility but does not negate the overall legitimacy of the site. The site is safe for general audiences with no adult content detected.

Q

Q4 Inc.

q4inc.com

74

Q4 Inc. is a leading enterprise provider of investor relations software and services, offering a comprehensive CRM platform tailored for capital markets professionals. Their platform integrates AI-powered tools such as the IRO Agent™, alongside IR websites, earnings event management, and engagement analytics, positioning them as a market leader in IR operations. The company targets investor relations professionals and agencies, delivering a B2B SaaS model with a strong emphasis on innovation and user experience. Technically, the website is built on a custom ASP.NET framework, leveraging modern JavaScript libraries and extensive third-party marketing and analytics integrations. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforcement and Content-Security-Policy headers, though additional headers could enhance protection. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR. However, the absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, Q4 Inc. presents a professional, secure, and user-friendly digital presence suitable for its enterprise clientele.

S

Seeberger GmbH

seeberger.fi

63

Seeberger GmbH operates a professionally designed e-commerce website targeting the Finnish market, selling a wide range of natural and high-quality snack products including nuts, dried fruits, and coffee. The website is built on the Shopify platform, leveraging modern web technologies and content delivery networks to ensure fast and responsive user experience. The brand has a long history dating back to 1844, and the domain registration is consistent with the company's identity and operations. Security posture is strong with HTTPS enforced and standard security headers in place, although explicit security and incident response policies are not publicly detailed. Privacy compliance is well addressed with visible privacy and cookie policies including consent mechanisms. Overall, the website presents a trustworthy and professional online retail presence.

S

Seeberger

seeberger.cz

10

Seeberger.cz is an e-commerce website representing the Seeberger brand, a well-established company in the snack food industry since 1844. The website offers a wide range of natural and premium snack products including nuts, dried fruits, mixes, coffee, and related items, targeting Czech consumers. The site is part of a broader multinational presence with multiple language-specific domains. Technically, the site is built on the Shopify platform, leveraging modern web technologies and standard e-commerce features. It demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and captcha protections, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies. Overall, the website is professional, trustworthy, and suitable for general audiences with no adult or explicit content.

S

Seeberger

seeberger-snacks.ch

68

Seeberger is a well-established premium snack brand operating an e-commerce platform primarily targeting the Swiss market with multi-language support for neighboring countries. The website offers a broad range of natural snack products including nuts, dried fruits, and coffee. The business model focuses on direct online retail with a professional and consistent brand presentation. Technically, the site is built on Shopify, leveraging modern web technologies and optimized for performance and mobile use. Security posture is strong with HTTPS, security headers, and form protections, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional online retail experience.

S

Seeberger

seeberger.fr

58

Seeberger.fr is a French e-commerce website specializing in the sale of natural and high-quality snacks. The company operates a well-structured online store powered by Shopify, targeting French-speaking consumers interested in healthy snack options. The website features multiple product categories, promotional offers, and regional adaptations, indicating a mature market presence. Technically, the site leverages modern web technologies including Shopify's platform, Google reCAPTCHA, and hCaptcha for security, and is optimized for mobile and SEO. Security posture is strong with HTTPS enforced and bot protection mechanisms in place, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

S

Seeberger

seeberger-snacks.com

65

Seeberger is a well-established German snack company with a long history dating back to 1844. The website serves as an e-commerce platform offering a wide range of natural and premium quality snacks including nuts, dried fruits, nut butters, and coffee products. The site targets general consumers looking for healthy and tasty snack options. Technically, the site is built on Shopify, leveraging modern web technologies and third-party integrations such as Trusted Shops and Hello Charles for marketing and trust signals. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS, hCaptcha for forms, and no visible vulnerabilities, although DNSSEC is not enabled and some compliance features like cookie consent are missing. Overall, the domain registration is legitimate though the domain is newly created, likely reflecting a recent launch or rebranding of the online shop. Strategic improvements include enhancing privacy compliance with cookie consent, publishing terms of service and security policies, and enabling DNSSEC for DNS security.

P

pretix

pretix.eu

59

pretix is a technology company specializing in online ticket sales and event management software. Their platform offers a comprehensive suite of services including customizable ticket shops, box office solutions, marketing tools, direct payment integrations, and hardware rental. With over 1000 customers, pretix is positioned as a reliable and flexible solution for a wide range of events such as conferences, festivals, and exhibitions. The company emphasizes privacy and security, holding ISO 27001 certification, which enhances trust among its users. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, pretix employs modern web technologies including JavaScript and SVG graphics, and uses Matomo for privacy-conscious analytics. The site is hosted with a reputable registrar and uses HTTPS with strong SSL configuration. While security headers are not explicitly visible in the HTML, the overall security posture is strong, supported by ISO certification and a focus on privacy. However, the absence of a cookie consent mechanism and public vulnerability disclosure pages are areas for improvement. From a security perspective, pretix demonstrates maturity with encrypted communications, no exposed sensitive data, and adherence to recognized security frameworks. The lack of incident response contact details and vulnerability disclosure reduces transparency but does not indicate immediate risk. Overall, pretix presents a low-risk profile with a solid security foundation. Strategically, pretix should enhance compliance by implementing cookie consent mechanisms and publishing vulnerability disclosure information. Adding incident response contacts would improve trust and readiness. These steps will strengthen their security culture and regulatory compliance, supporting continued growth and customer confidence.

Ö

Österreichischer Alpenverein

alpenverein.at

72

The Österreichischer Alpenverein is a well-established non-profit organization dedicated to alpine sports, nature conservation, and community engagement in Austria. The website serves as a comprehensive portal for members and the public, offering information on membership benefits, mountain huts, environmental initiatives, and educational programs. It maintains a strong market position as Austria's leading alpine association with a large member base and extensive regional presence. Technically, the website employs standard web technologies including JavaScript, jQuery, and Matomo analytics, with a focus on accessibility and mobile optimization. The site is well-structured, professionally designed, and provides clear navigation and relevant content. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site uses HTTPS and implements cookie consent but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the website demonstrates a strong security posture, high content quality, and good privacy compliance, making it a trustworthy and professional digital presence for the Österreichischer Alpenverein.

C

September 15 - 17, 2026 | CLEAN PRO EXPO

cleanpro-expo.com

64

CLEAN PRO EXPO is a newly launched trade fair scheduled for September 2026, focusing on professional cleaning and facility management in southern Germany and neighboring regions. The website presents a professional and well-structured platform aimed at exhibitors and visitors in the cleaning industry, highlighting future trends such as robotics, digitalization, and sustainability. The business model centers on organizing and hosting trade fairs to facilitate industry networking and product showcasing. Technically, the site uses modern web technologies including Bootstrap and Algolia for search, with a consent management platform (Usercentrics) implemented for privacy compliance. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response information are lacking. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is content-rich and professionally presented but would benefit from clearer privacy, contact, and security disclosures.

H

Hengst Filtration

hengst.shop

51

Hengst Filtration operates a professional e-commerce platform focused on filtration products and personal protective equipment, targeting industrial and commercial customers primarily in Germany. The company is a large, family-owned manufacturer with a global presence, emphasizing sustainability and innovation. The website is built on the Shopware platform with a modern theme, integrating standard marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site reflects a mature digital presence aligned with the company's business model and market position.

R

Red Chili

redchiliclimbing.com

66

Red Chili is a specialized e-commerce business focused on climbing shoes, clothing, and accessories, targeting climbers primarily in the European Union. The company has an established online presence since 2008, offering a well-structured website with clear product categories and climbing guides. Technically, the site uses modern web technologies including Google Tag Manager and CookieFirst for consent management, hosted via Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and domain transfer protections, although DNSSEC is not enabled. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the business demonstrates a high level of professionalism and trustworthiness with no critical security or compliance issues detected.

Apotek Hjärtat AB operates as a leading pharmacy retailer in Sweden, offering both online and physical store services. The company provides prescription and non-prescription medicines, health and wellness products, and a customer loyalty program. The website reflects a mature digital presence with a modern e-commerce platform, Contentful CMS, and integration of analytics and consent management tools. The technical infrastructure is robust, leveraging Microsoft Azure hosting and advanced monitoring tools. Security posture is strong with HTTPS enforcement and certifications from Swedish regulatory authorities. Privacy policies and cookie consent mechanisms indicate good compliance with GDPR. Overall, the website demonstrates high professionalism and trustworthiness, supporting Apotek Hjärtat's market position as a trusted healthcare retailer.

The website storochliten.se is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to its content. The domain is registered since 2001 and uses Cloudflare for DNS and security services, indicating a mature technical infrastructure. However, no business-related content, contact information, or policies are visible on the landing page, limiting the ability to assess the company's market position or services. The security posture benefits from HTTPS and Cloudflare's WAF, but lacks visible security headers and published policies. Overall, the site presents a low trust profile due to lack of accessible content and transparency.

S

Svensk Hälsokost

svenskhalsokost.se

66

Svensk Hälsokost operates as a Swedish online retailer specializing in health and wellness products, including supplements, natural oils, beauty, and lifestyle items. The website is professionally designed with a clear navigation structure and comprehensive content tailored to consumers interested in health and well-being. The business model is e-commerce retail, targeting the Swedish market with a medium-sized operation. The site integrates multiple third-party services for analytics, advertising, and customer reviews, indicating a mature digital infrastructure. Technically, the website employs modern JavaScript libraries and tracking technologies such as Google Analytics, Bing Ads, Facebook Pixel, and Yotpo for reviews. The site is mobile-optimized and uses HTTPS, ensuring secure data transmission. However, some security best practices like security headers are not visibly implemented, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and detailed privacy policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the exact domain queried suggests the domain may be a subdomain or alias, which slightly reduces trust but does not indicate malicious intent. Overall, Svensk Hälsokost presents a trustworthy and professional online retail platform with good privacy and security practices. Strategic improvements in security headers and public security policies would enhance its security posture and trustworthiness.