Security Directory

S

Skiclub 1906 Oberstdorf e.V.

skiclub-oberstdorf.de

55

Skiclub 1906 Oberstdorf e.V. is a well-established non-profit sports club based in Germany, focused on promoting skiing and supporting athletes. The website reflects a mature digital presence with regularly updated content, event information, and athlete profiles. The club has a strong community orientation and historical significance dating back to 1906. Technically, the site uses modern JavaScript libraries and a CMS platform (Tramino), with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and serves its target audience effectively.

M

M&G plc

mandg.com

76

M&G plc is a well-established international leader in savings and investments, serving over five million customers globally. The company offers a broad range of financial services including savings products, investment management, and institutional client services. Their website reflects a mature business with a strong market position in the finance sector, targeting investors, intermediaries, and private clients. The presence of multiple regional and partner sites indicates a significant international footprint. Technically, the website is built on a modern stack including Sitecore CMS, jQuery, Bootstrap, and Google Tag Manager, hosted likely via Akamai CDN. The site demonstrates good performance, mobile optimization, and accessibility standards. SEO practices are well implemented with comprehensive meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms with opt-in for performance cookies. However, some security headers are missing, and no public incident response or vulnerability disclosure information is found. The WHOIS data is unavailable or protected, which is common for large enterprises but reduces transparency. Overall, the security posture is solid but could be improved with additional headers and published security policies. The overall risk assessment is low, with the website presenting a professional, trustworthy front for a major financial institution. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and improving transparency around registrant data where possible.

igus® ApS is a well-established manufacturer and developer of high-performance polymer products including energy chains, flexible cables, maintenance-free bearings, and linear systems. The company operates a professional and comprehensive website targeting industrial customers, engineers, and manufacturers primarily in Denmark but with a global presence through multiple country-specific domains. The site offers extensive product information, configurators, CAD data, and digital services, reflecting a mature digital infrastructure. Technically, the website uses modern JavaScript libraries, analytics tools, and secure HTTPS protocols, ensuring good performance and user experience. Security posture is strong with appropriate headers and no visible vulnerabilities, although public security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a high level of business credibility.

The website www.nordic-oberstdorf.de serves as the official platform for the FIS Nordic Combined World Cup event held in Oberstdorf, Germany. It provides comprehensive information about the event, including news, results, media coverage, and service details for participants and fans. The site is positioned as a regional event organizer with strong ties to international sports federations and local partners. The business model focuses on event promotion, sponsorship management, and media dissemination targeting winter sports enthusiasts and stakeholders. Technically, the website is built on the Tramino CMS platform and employs modern JavaScript libraries such as jQuery, RequireJS, and Slick Carousel for dynamic content and user experience enhancements. It uses HTTPS with a valid SSL configuration and integrates Google Analytics with a consent-based mechanism, reflecting a mature digital infrastructure. Mobile optimization and SEO practices are well implemented, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and provides a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but does not raise suspicion, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen its security posture and user inclusivity.

S

Skisport- und Veranstaltungs GmbH

tour-de-ski.info

56

The website tour-de-ski.info serves as the official digital presence for the Coop FIS Tour de Ski event held in Oberstdorf, Germany. It provides comprehensive information about the event schedule, results, media coverage, sponsors, and local organizers. The business behind the site is Skisport- und Veranstaltungs GmbH, a German company established in 2006, which aligns with the domain age and content. The site targets sports enthusiasts, media professionals, sponsors, and the local community interested in Nordic skiing competitions. Technically, the website is built on the Tramino CMS platform and utilizes modern JavaScript libraries such as jQuery, Slick Carousel, and RequireJS. It is hosted on infrastructure likely provided by Speedkom, with content delivered via CDN services. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and accessibility. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks visible security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its posture. The site demonstrates good privacy compliance and business credibility, making it a reliable source for event information.

AF Hausbau is a well-established regional construction company in Germany specializing in turnkey solid houses with a strong emphasis on customer collaboration and customized solutions. The company operates multiple subsidiaries covering residential, commercial, and engineering construction sectors, reflecting a diversified construction group. The website is built on the Contao CMS platform and uses modern JavaScript libraries to provide a responsive and user-friendly experience. While the site is well-structured and professionally designed, it lacks visible direct contact details such as phone numbers or emails on the main pages, relying primarily on contact forms. Security posture is solid with HTTPS and secure forms, but could be improved by adding security headers and explicit privacy consent mechanisms. No blocking or WAF challenges were detected, allowing full content access and analysis.

S

Skiclub Oberstdorf Veranstaltungs GmbH

skifliegen-oberstdorf.com

58

The website www.skifliegen-oberstdorf.com represents the official online presence for the FIS Ski Flying World Championship 2026 held in Oberstdorf, Germany. Operated by Skiclub Oberstdorf Veranstaltungs GmbH, the site provides comprehensive event information, ticketing details, news updates, and media resources targeting ski flying enthusiasts and winter sports fans. The business operates in the hospitality and event organization sector with a focus on niche winter sports events, leveraging partnerships with regional and international sponsors. The website demonstrates a professional and consistent brand image with clear navigation and relevant content.

T

Tramino

tramino.de

57

Tramino is a small German technology company specializing in web-based software solutions for the tourism industry. Founded in 2008 and based in Oberstdorf, Germany, the company offers a broad portfolio of products including content management systems, reservation and hotel management software, digital signage, customer loyalty programs, and event booking systems. Their market position is that of a regional specialist with a strong focus on tourism-related digital services. The website is professionally designed, mobile-optimized, and provides clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and asynchronous loading to ensure good performance and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers and explicit security policies are missing. Overall, the website and business present a trustworthy and professional image suitable for their target audience.

U

Universität Stuttgart

uni-stuttgart.de

62

The Universität Stuttgart is a leading technical university in Germany with a strong international reputation. The website reflects its mission to integrate engineering, natural sciences, humanities, and social sciences through top-tier research and education. The site targets prospective students, current students, researchers, entrepreneurs, employees, alumni, and media professionals, offering comprehensive information on study programs, research initiatives, and technology transfer. The university operates a large-scale digital presence with consistent branding and professional content quality. Technically, the website employs modern JavaScript libraries such as Bootstrap, jQuery UI, Fancybox, and Tippy.js, alongside Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS backend. Performance is moderate, with asynchronous script loading enhancing user experience. Security posture is solid with HTTPS enforced and standard security headers likely in place, though explicit Content-Security-Policy headers and incident response contacts are absent. Privacy compliance is good, with a comprehensive privacy policy and GDPR adherence, but lacks a visible cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and well-maintained, supporting the university's stature. Strategic improvements include implementing a cookie consent banner, publishing a security policy and incident response contacts, and enhancing security headers to further strengthen the security posture.

A

Aptos, LLC

aptos.com

63

Aptos, LLC operates a professional and comprehensive website focused on providing unified commerce solutions to retail businesses globally. The company positions itself as a leader in retail technology, offering a broad suite of services including point of sale, order management, merchandising, analytics, and cloud services. The website demonstrates a mature digital presence with extensive client testimonials, major retail brand partnerships, and a strong marketing infrastructure. Technically, the website employs modern web technologies and integrates multiple marketing and analytics tools such as Google Tag Manager, Marketo, Algolia, and Adobe Experience Platform. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers and explicit policies are missing. The WHOIS data is notably absent, which raises concerns about domain registration transparency. Despite this, the website's professional content, trust signals, and comprehensive privacy and cookie policies indicate a legitimate and trustworthy business. However, the lack of direct contact emails or phone numbers and absence of a published security policy or incident response contacts suggest areas for improvement. Overall, the website scores well on content quality, technical implementation, and security posture, with minor penalties for missing WHOIS data and security policy transparency. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

B

BREITACHKLAMMVEREIN eG

breitachklamm.com

59

Breitachklamm is a tourism-focused organization operating the deepest rock gorge in Central Europe, located in Oberstdorf, Germany. The website provides comprehensive information about the natural attraction, including visitor information, seasonal highlights, guided tours, events, and online ticketing. The organization positions itself as a popular regional destination with a focus on nature experiences and family-friendly outdoor activities. The website is professionally designed with consistent branding and clear navigation, targeting tourists and nature enthusiasts. Technically, the website uses a modern technology stack including jQuery, RequireJS, and a proprietary CMS (Tramino). It is hosted likely on AWS S3 infrastructure, with good mobile optimization and moderate performance. The site implements cookie consent mechanisms and integrates a chatbot for visitor interaction. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, explicit security headers are not detected, and there is no published incident response or vulnerability disclosure information. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not directly impact the website's operational security. Overall, the website is a trustworthy and professional digital presence for a regional tourism entity, with room for improvement in security best practices and domain registration transparency.

S

Sportstätten Oberstdorf

nordic-zentrum-oberstdorf.de

54

Nordic Zentrum Oberstdorf is a modern, well-established outdoor and winter sports center located in the Allgäu region of Germany. It serves a diverse audience including professional athletes, families, and outdoor enthusiasts by providing world-class training facilities, event hosting, and recreational activities such as Nordic skiing, laser biathlon, and hiking. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a strong focus on user experience. Technically, the site leverages modern JavaScript libraries and a specialized CMS platform (Tramino), with good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data align well with the business, indicating legitimacy and trustworthiness.

Eissportzentrum Oberstdorf is a regional ice sports facility located in Oberstdorf, Germany, serving ice skating enthusiasts, sports clubs, schools, and professional athletes. It operates as an ISU Center of Excellence offering ice skating, ice hockey, curling, figure skating training, and hosting various events and camps. The website reflects a well-maintained digital presence with clear navigation, good content quality, and consistent branding. Technically, it uses modern JavaScript libraries and a specialized CMS platform (Tramino), hosted on Speedkom nameservers, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though explicit security policies and incident response information are not published. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

S

Skiclub Oberstdorf Veranstaltungs GmbH

orlen-arena.de

54

The ORLEN Arena Oberstdorf Allgäu website represents a well-established sports and event venue specializing in ski jumping and Nordic sports tourism. The company, Skiclub Oberstdorf Veranstaltungs GmbH, offers a variety of services including arena tours, guided visits, event hosting, gastronomy, and training facilities. The site targets winter sports enthusiasts, tourists, and event organizers, positioning itself as a recognized regional hub with international relevance in winter sports. The business model revolves around facility management, event hosting, and merchandising, supported by an online booking system and fan shop. Technically, the website is built on the Tramino CMS platform, utilizing modern JavaScript libraries such as jQuery, Fancybox, and Slick Carousel. It is hosted on managed IP infrastructure with good mobile optimization and SEO practices. The site employs HTTPS with a solid SSL configuration and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Google Analytics is used for visitor tracking with appropriate consent controls. From a security perspective, the website demonstrates good practices including secure session cookies and no visible exposure of sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of advanced security headers suggests room for improvement. Overall, the security posture is solid but could be enhanced with additional measures. The overall risk assessment is low, with no critical vulnerabilities or compliance gaps detected. Strategic recommendations include implementing additional security headers, publishing a security policy and incident response contacts, auditing third-party scripts regularly, enhancing accessibility, and considering a security.txt file for vulnerability reporting. These steps will strengthen trust and security culture while maintaining compliance and operational excellence.

S

Sportstätten Oberstdorf

skiflugschanze-oberstdorf.de

54

Skiflugschanze Oberstdorf operates one of Germany's largest ski flying hills, offering visitors unique experiences including guided tours, events, and virtual reality. The website reflects a medium-sized tourism business with a clear market position in the hospitality and sports sector. Technically, the site uses modern JavaScript libraries and a specialized CMS (Tramino), hosted with Amazon S3 for static assets, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the website is professional, accessible, and compliant with GDPR, providing clear contact information and social media presence.

A

Association for Advancing Automation

automate.org

67

The Association for Advancing Automation (A3) operates as a leading industry association focused on advancing automation technologies including robotics, vision, motion control, and artificial intelligence. The organization provides a comprehensive hub of information, certifications, events, market intelligence, and advocacy services targeted at industrial automation professionals and businesses. Their market position is strong within the automation sector, supported by a professional website that promotes key industry certifications and upcoming events. Technically, the website employs a modern tech stack with JavaScript libraries, Google Analytics, and marketing tools, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a credible and trustworthy organization with a medium-sized business footprint in the United States.

P

Papoo Software & Media GmbH

beyond-cookiebanner.de

49

The website beyond-cookiebanner.de/login is a login portal for CCM19, a cookie consent management software product developed by Papoo Software & Media GmbH, a German technology company. The site targets businesses and website operators who require tools to manage cookie consent in compliance with privacy regulations. The platform supports multiple languages, indicating an international user base. The business model appears to be software licensing or SaaS focused on privacy compliance solutions. Technically, the site uses a modern JavaScript stack including jQuery and jQuery UI, with custom scripts for UI and form handling. The site is moderately optimized for mobile and accessibility but lacks advanced SEO metadata and structured data. Performance is moderate with no evident critical technical issues. However, no CMS or hosting provider details are discernible from the data. From a security perspective, the site uses HTTPS and secure form submission methods but lacks visible security headers and explicit privacy or cookie policies on the login page. There is no evidence of vulnerability disclosures or incident response contacts. The absence of contact information and policies reduces privacy compliance confidence. No WAF or blocking mechanisms were detected, and the domain WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website is professionally designed and functional but would benefit from enhanced privacy compliance documentation, improved security headers, and visible contact information to increase trust and regulatory adherence.

L

LIBREC AG

librec.ch

62

LIBREC AG is a Swiss-based company specializing in lithium-ion battery recycling, positioning itself as Europe's leading partner in this sector. The company offers high recovery rates, closed-loop recycling, and flexible business models including material purchasing and toll processing. Their website reflects a professional and consistent brand image targeting businesses involved in battery recycling and materials recovery. The site is multilingual and provides clear contact information and social media presence, enhancing trust and accessibility. Technically, the website is built on Django CMS with modern JavaScript libraries such as jQuery, Selectize.js, and custom Soulclick UI components. Hosting appears to be on Exoscale, a reputable cloud provider. The site is mobile-optimized with moderate performance and basic accessibility features. SEO is basic but present with proper meta tags and Open Graph data. Security posture is adequate with HTTPS enforced and secure form handling including CSRF tokens. However, explicit security headers are not visible in the provided data, and no incident response or security policy information is published. Privacy compliance is good with a clear privacy and cookie policy and consent mechanism. No vulnerability disclosures or security.txt files are found. Overall, the website is trustworthy and professional with a solid business focus. Recommendations include enhancing security headers, publishing incident response and security policies, and improving accessibility and SEO for better compliance and user experience.

L

Leibniz Universität Hannover

uni-hannover.de

60

Leibniz Universität Hannover is a prominent technical university in Germany, offering a broad spectrum of academic disciplines and research opportunities. The website reflects a mature digital presence with comprehensive content targeting students, researchers, faculty, alumni, and press. The university maintains a strong market position with recognized excellence clusters and international partnerships. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates Matomo analytics for user tracking. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness.

D

Deutsche Gesellschaft für Endokrinologie (DGE)

endokrinologie.net

55

The Deutsche Gesellschaft für Endokrinologie (DGE) website serves as the official online presence of a prominent German scientific society dedicated to endocrinology. It provides comprehensive information for medical professionals, researchers, and patients about hormone-related diseases, scientific research, education, and public communication. The site is well-structured, professionally designed, and offers rich content including news, events, and resources. Technically, the website is built on the Contao CMS platform and utilizes common JavaScript libraries for UI and media handling, delivering a good user experience with mobile optimization and accessibility features. Security-wise, the site employs cookie consent mechanisms and privacy policies aligned with GDPR, but lacks visible advanced security headers and explicit incident response or vulnerability disclosure information. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance and content. Overall, the website is a credible and valuable resource in the healthcare non-profit sector, but domain registration verification is recommended to ensure trustworthiness.

T

Tramino

tramino.net

57

Tramino is a specialized software development company founded in 2008 and based in Oberstdorf, Germany. It focuses on creating web-based software solutions primarily for the tourism sector, including content management systems, reservation and hotel management software, accreditation systems, and digital signage solutions. The company serves a niche market of tourism businesses, destinations, and event organizers, maintaining a strong regional presence with hundreds of customers. Their offerings include both standard and customized software products, supported by a professional website with clear product descriptions and contact options. Technically, the website employs a modern tech stack including jQuery, RequireJS, and Google Tag Manager, with assets hosted on Amazon S3. The site is mobile-optimized, accessible, and SEO-friendly, featuring a comprehensive cookie consent mechanism that complies with GDPR requirements. Performance is moderate with asynchronous script loading and lazy loading of images. From a security perspective, the site uses HTTPS and implements cookie consent controls effectively. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, indicating legitimacy. Overall, Tramino presents a professional, trustworthy online presence with strong business credibility and good privacy compliance. Strategic enhancements in security policies and headers could further strengthen their security posture and trustworthiness.

C

Creditreform Rating AG

creditreform-rating.de

45

Creditreform Rating AG is a reputable European credit rating agency established in 2000 and operating under the Creditreform Group. The company specializes in credit risk assessments and offers a broad range of rating services to investors, creditors, and issuers. It is registered under the EU Rating Regulation and supervised by ESMA, ensuring regulatory compliance and market trust. The website reflects a professional and consistent brand image, targeting financial institutions and market participants seeking reliable credit ratings. Technically, the site uses Contao CMS with jQuery and Swipe.js for interactive elements, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. Overall, the site is trustworthy, GDPR compliant, and provides clear contact channels.

The European Platform of Transport Sciences (EPTS Foundation e.V.) operates as a non-profit organization dedicated to advancing transport sciences across Europe. Their website highlights key activities such as organizing the European Transport Congress and publishing the open-access European Transport Studies journal in collaboration with Elsevier. The target audience primarily consists of transport scientists, academics, and professionals interested in sustainable mobility and transport research. The organization positions itself as a reputable platform fostering scientific discourse and collaboration in the transport sector. Technically, the website is built on the Contao Open Source CMS and leverages several JavaScript libraries including jQuery, jQuery UI, MediaElement.js, Colorbox, and Swipe.js to enhance user experience. The site is moderately optimized for mobile devices and presents a clear navigation structure. However, some SEO and accessibility features could be improved. The website uses HTTPS as indicated by the base URL, but lacks visible security headers which could enhance its security posture. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, it lacks a cookie consent mechanism and visible security policies such as incident response or vulnerability disclosure. The WHOIS data is not publicly available due to EURid privacy policies, but this is typical for European domains and does not raise immediate concerns. Overall, the site demonstrates a moderate security posture with room for improvement in compliance and transparency. The overall risk assessment is low, with recommendations focusing on enhancing security headers, implementing cookie consent for GDPR compliance, publishing clear security policies, and improving accessibility and SEO. These steps would strengthen trust and compliance while supporting the organization's mission in transport sciences.

W

Well BP

wellbp.com

68

Well BP is a newly founded digital consulting agency specializing in custom software development, digital product creation, and digital marketing services. The company positions itself as a trusted partner offering flexible engagement models and comprehensive digital solutions across various industries. Their website is professionally designed using WordPress and integrates modern technologies such as Google Maps API and advanced WordPress plugins. The technical infrastructure is solid with Cloudflare DNS and HTTPS enabled, though there is room for improvement in security headers and privacy compliance. The security posture is moderate with no critical vulnerabilities detected but lacks published security policies and cookie consent mechanisms. Overall, the website is safe, professional, and trustworthy, targeting businesses seeking digital transformation services.

W

Weiterbildung in Baden-Württemberg

fortbildung-bw.de

59

Weiterbildung in Baden-Württemberg operates a professional and comprehensive online portal dedicated to continuing education and training opportunities within the Baden-Württemberg region of Germany. The platform leverages advanced AI-driven recommendation systems to provide personalized course suggestions, supported by a large database of educational offerings. The website targets individuals seeking to enhance their skills and knowledge through lifelong learning, positioning itself as a key regional educational resource. The portal maintains a consistent brand identity aligned with regional government standards and offers a user-friendly experience with clear navigation and search capabilities. Technically, the website is built on WordPress using the Avada theme and incorporates a variety of modern web technologies including jQuery, jQuery UI, and several plugins for GDPR compliance, analytics, and user interaction. The use of Matomo analytics reflects a privacy-conscious approach to user data collection. The site is mobile-optimized and accessible, with good SEO practices implemented through meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms to comply with GDPR. While basic security headers are present, there is room for improvement by adding advanced headers such as Content-Security-Policy and HSTS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy or incident response contact suggests an area for enhancement. Overall, the website demonstrates a strong commitment to privacy, user experience, and educational service delivery. The domain registration data aligns with the website's purpose, supporting its legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and themes to mitigate risks.

K

Kozmo Shop

kozmoshop.ba

39

Kozmo Shop is a regional e-commerce retailer specializing in cosmetics, makeup, hair care, maternity, fitness, and wellness products primarily serving Bosnia and Herzegovina. The website is professionally designed using the OpenCart platform with the Journal2 theme, featuring a broad product catalog and multiple brand partnerships. The technical infrastructure includes modern JavaScript libraries and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented; however, the absence of security headers and limited contact information represent areas for improvement. No privacy policy or terms of service pages were detected, which may impact compliance and user trust. Overall, the site is accessible without WAF or blocking mechanisms and presents safe content suitable for general audiences.

The website 'Wasser-Risiko-Check' is a public service platform operated by Stadtentwässerungsbetriebe Köln, aimed at providing residents and building owners in selected municipalities of North Rhine-Westphalia with an online tool to assess flood risks related to heavy rain, high water, and groundwater. The platform offers an interactive map, a questionnaire, and downloadable PDF forms to help users understand their building's vulnerability and potential protective measures. The project is publicly funded and cooperates with multiple local municipalities, positioning itself as a niche governmental risk advisory service. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, OpenLayers for mapping, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized and provides a user-friendly interface with clear navigation. However, no CMS or advanced frameworks were detected, and hosting appears to be managed via generic servers. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and integrates consent management, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is well addressed with clear privacy and cookie policies. Business credibility is supported by clear branding, contact email, and governmental cooperation, though no phone contacts or social media links are provided. Overall, the website is a trustworthy, well-structured public service tool with good content quality and privacy compliance. Security posture is adequate but could be enhanced by adding security headers and incident response information. The domain WHOIS data is minimal but not suspicious, consistent with a public service project. Strategic recommendations include improving security headers, adding terms of service, and enhancing transparency around security policies.

V

Verbraucherzentrale

fakeshop-finder.de

60

Verbraucherzentrale.de operates as a leading German consumer protection organization providing educational resources and tools such as the Fakeshop-Finder to help consumers identify fraudulent online shops. The website is well-structured, professionally designed, and targets German consumers seeking trustworthy information on online shopping safety. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates Matomo analytics for user tracking while maintaining GDPR compliance through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is minimal but the strong branding and government affiliation support legitimacy. Overall, the site is a trustworthy, high-quality resource for consumer protection.

R

Reach PLC

mirrorpix.com

69

Mirrorpix is a well-established photographic archive and picture library operated by MGN Ltd, a subsidiary of Reach PLC, one of the UK's largest commercial national and regional news publishers. The website offers extensive photographic collections from major newspapers such as the Daily Mirror and Daily Express, targeting media professionals, researchers, and enthusiasts. The business model centers on licensing archival images, providing historical newspaper access, and partnering with print and digital platforms to monetize content. Technically, the website employs a modern JavaScript stack including jQuery, Dropzone, Leaflet, and JWPlayer, hosted on Amazon AWS infrastructure. It integrates third-party services like Cookiebot for cookie consent management and SmartFrame for image sharing, reflecting a moderate level of digital maturity. The site is moderately optimized for performance and mobile use, with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No incident response or security policy information is publicly available, indicating an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies linked to the parent company’s comprehensive resources. Overall, Mirrorpix presents a professional and trustworthy online presence with a strong business foundation. Strategic improvements in security hardening and transparency around security policies would further enhance its risk posture and stakeholder confidence.

M

Main-Tauber-Kreis

main-tauber-kreis.de

60

Main-Tauber-Kreis operates as a regional governmental authority in Germany, providing a broad range of public services including administrative support, social welfare, environmental management, and economic development. The website serves as a comprehensive portal for residents and businesses in the district, offering access to news, events, service information, and contact channels. The organization positions itself as a trusted public service provider with a clear focus on citizen engagement and regional development. Technically, the website is built on the ikiss CMS platform and leverages several JavaScript libraries such as jQuery, Flexslider, and Mustache.js to deliver a responsive and user-friendly experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, although there is room for improvement in security headers and performance tuning. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent, which could be enhanced to improve transparency and trust. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and secure environment. Overall, the website reflects a mature digital presence for a governmental entity, balancing usability, compliance, and security. Strategic improvements in security headers and incident response communication would further strengthen its posture.

L

Landkreis Calw

kreis-calw.de

61

Landkreis Calw operates as a local government authority in Germany, providing a broad range of public services including administration, education, economic development, and cultural activities. The website serves residents and businesses in the Calw district with online services, contact information, and news updates. The site is well-structured and professionally designed, targeting a general audience with clear navigation and relevant content. Technically, the site uses legacy JavaScript libraries such as jQuery 1.11.3, alongside accessibility tools like ReadSpeaker, indicating moderate digital maturity. Security posture is adequate but could be improved by updating libraries and implementing security headers. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy, reflecting GDPR awareness. Overall, the site is trustworthy and functional, though some modernization and enhanced security practices are recommended.

L

LW Medien GmbH

jobs-regional.de

64

Jobs-regional.de is a German regional job portal operated by LW Medien GmbH, offering job listings, employer job posting services, and a comprehensive Ausbildungsguide for career guidance. The website targets job seekers and employers within regional German markets, providing localized job search capabilities and career resources. The business model centers on connecting local job seekers with employers, supported by paid job postings. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security documentation and contact transparency could enhance trust further.

H

Hypeddit

hypeddit.com

68

Hypeddit is a well-established SaaS platform founded in 2014 that provides comprehensive music promotion tools including AI-powered ads, smart links, download gates, and fan engagement features. The platform targets musicians and artists seeking to grow their audience and increase streams across major music platforms like Spotify, SoundCloud, and YouTube. Hypeddit has a strong market presence with over 100,000 artists using its services and is recognized by reputable media outlets. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple third-party marketing and analytics tools including Facebook SDK, Google Tag Manager, Hotjar, and Zendesk for support. The site is hosted by Bluehost and uses HTTPS with a good SSL configuration, although security headers like Content-Security-Policy are currently commented out and could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Business credibility is high, supported by testimonials, media logos, and transparent WHOIS data. Overall, Hypeddit demonstrates a mature digital infrastructure and a professional online presence.

L

LEWIATAN HOLDING S.A.

mojlewiatan.pl

59

Mój Lewiatan is a loyalty program website operated by Lewiatan Holding S.A., a large retail company in Poland. The platform enables customers to register physical or virtual loyalty cards, collect points from purchases, and redeem them for shopping vouchers. The website is well-branded, consistent with the parent company, and targets retail customers in Poland. The business model focuses on customer retention and engagement through rewards and special offers. Technically, the site uses a combination of established frontend libraries such as jQuery, Bootstrap 3, Vue.js, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is provided by home.pl, a reputable Polish hosting provider. Security posture is adequate with HTTPS enforced and reCAPTCHA integration, but could be improved by enabling DNSSEC and adding more security headers. No critical vulnerabilities or suspicious domains were detected. Privacy and cookie policies are present and GDPR compliant. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

R

Real Farmers Markets

realfarmersmarketco.com

53

Real Farmers Markets is a community-focused organization operating farmers markets in East Boulder County, Colorado, promoting fresh, local, and natural foods from local farms and artisan vendors. The website serves as an informational and engagement platform for local residents, vendors, and sponsors, highlighting market schedules, vendor opportunities, and community events. The business model centers on supporting local agriculture and family businesses with a non-profit or community orientation. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO, Contact Form 7, and Mailchimp integration. Hosting is provided by GreenGeeks, and the site uses HTTPS with a moderate performance profile. Mobile optimization and SEO are adequately addressed, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and explicit security headers, which are recommended to enhance protection. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. Contact information is primarily via forms, with no direct emails or phone numbers publicly listed. The domain registration is consistent and transparent, supporting legitimacy. Overall, the website is functional and trustworthy for its community purpose but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

K

Kontex Trade International s.r.o.

pujcka7.cz

59

Pujcka7.cz is an online financial services provider specializing in fast, non-bank microloans up to 20,000 Kč for customers in the Czech Republic. The company, Kontex Trade International s.r.o., offers a streamlined digital loan application process with minimal paperwork and quick approval times, positioning itself as a convenient alternative to traditional banking loans. The website features detailed loan calculators, customer testimonials, and loyalty programs to enhance customer engagement and trust. Technically, the website employs a modern technology stack including PHP backend, jQuery UI for interactive elements, and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, Facebook Pixel, and Yandex Metrika. The site is HTTPS secured and provides a comprehensive cookie consent mechanism compliant with GDPR requirements. However, no explicit security headers were detected in the HTML content, suggesting potential improvements in server-side security configurations. From a security perspective, the site demonstrates good practices with encrypted connections and user consent for tracking, but lacks visible incident response or security policy documentation. The absence of WHOIS registration data is a notable transparency concern, impacting overall trustworthiness. The site does not contain any adult or inappropriate content and targets a general audience seeking financial services. Overall, Pujcka7.cz presents a professional and functional online lending platform with room for improvement in transparency and security hardening. Strategic recommendations include enhancing WHOIS data visibility, implementing security headers, and publishing clear security and incident response policies to bolster user trust and compliance.

C

Půjčka za pár kliků - CreditGO.cz

creditgo.cz

58

CreditGO.cz is an online lending platform targeting Czech consumers seeking quick and convenient loans, including payday and non-bank loans. The website presents a professional and consistent brand image with a clear focus on financial services. The technical infrastructure leverages modern web technologies such as Bootstrap, jQuery UI, and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Yandex Metrika. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance. However, the absence of publicly available WHOIS data and registrant information raises concerns about domain registration transparency. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit privacy policies. Overall, the website is functional and professionally presented but would benefit from enhanced transparency and security documentation.

K

Kreisverwaltung Neuwied

kreis-neuwied.de

63

Kreisverwaltung Neuwied operates as the official local government authority for the Neuwied district in Germany, providing a wide range of public services including citizen support, administrative information, and local news. The website serves residents and businesses with accessible resources such as forms, announcements, and contact points. The digital infrastructure is built on a mature technology stack including jQuery and a proprietary CMS (IONAS3), with responsive design and accessibility features enhancing user experience. Security posture is solid with HTTPS enforced and privacy mechanisms like cookie consent implemented, though some security headers could be improved. Overall, the site reflects a trustworthy and professional government portal with moderate tracking via Google Analytics and clear privacy compliance.

The website kreis-altenkirchen.de serves as the official digital portal for the Landkreis Altenkirchen district administration in Germany. It provides a range of citizen services, political and administrative information, public announcements, and cultural resources targeted primarily at local residents and stakeholders. The site is structured with clear navigation and includes essential contact information, making it a reliable source for district-related information. From a technical perspective, the website employs a traditional web stack with HTML, CSS, and JavaScript, including libraries such as jQuery 1.7.1, jQuery UI, Mustache.js, and Highslide JS. While functional, the use of outdated JavaScript libraries and a basic design indicate moderate digital maturity. Accessibility and mobile optimization are present but could be improved for a better user experience. Security posture is moderate; the site uses cookie consent mechanisms and Matomo analytics with privacy considerations. However, the absence of modern security headers and the use of outdated libraries present potential vulnerabilities. No explicit security or incident response policies are publicly available, which could be enhanced to improve trust and compliance. Overall, the website is trustworthy and serves its government function well but would benefit from technical modernization and enhanced security practices to align with current standards and regulations.

A

Aventus Group Sp. z o.o.

niewielkapozyczka.pl

64

Niewielkapozyczka.pl is an online financial service platform operated by Aventus Group Sp. z o.o., specializing in short-term consumer loans up to 8000 PLN with a focus on fast, simple, and affordable lending. The website provides detailed loan conditions, legal disclosures, and cooperative relationships with loan providers Tusumi Sp. z o.o. and Arena Finance Sp. z o.o., positioning itself as a transparent intermediary in the Polish online lending market. The platform targets Polish consumers seeking quick financial solutions with promotional offers such as zero-interest first loans. Technically, the website employs modern front-end technologies including Bootstrap and jQuery UI, integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager, and implements cookie consent via Cookiebot. The site is mobile-optimized with good navigation and SEO practices, though no CMS or hosting provider is explicitly identified. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and uses standard tracking scripts responsibly with user consent. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data confirms domain legitimacy and consistency with the business entity. Overall, the website presents a professional and trustworthy online lending service with good compliance to privacy and financial regulations. Strategic enhancements in security policies and headers would further strengthen its security posture and user trust.

H

Hütten + Tesch Versicherungsmakler GmbH

campingplatz-versicherungen.de

50

Hütten + Tesch Versicherungsmakler GmbH operates a specialized insurance brokerage service focused on camping site operators in Germany. The company leverages over 30 years of professional experience to provide tailored insurance products including liability, building, electronics, and mobile home insurance. The website positions the company as a trusted specialist and official partner of the Bundesverband der Campingwirtschaft in Deutschland e.V., reinforcing its market credibility within the camping industry niche. Technically, the website is built on the Contao Open Source CMS platform, utilizing common JavaScript libraries such as jQuery and Font Awesome for UI enhancements. The site is mobile optimized and demonstrates good SEO practices with appropriate meta tags and structured navigation. Hosting appears to be provided by 1&1 IONOS, inferred from nameserver data. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. No cookie consent mechanism is present, which is a GDPR compliance gap. No tracking or advertising scripts are detected, indicating minimal user tracking. Contact information is available but no direct email addresses are exposed on the site. Overall, the website is professional, trustworthy, and well-targeted to its audience. However, improvements in security headers, privacy compliance (cookie consent), and transparency around incident response would strengthen its security posture and regulatory adherence.

V

VIA SMS PL Sp. z o.o.

viasms.pl

60

VIA SMS PL Sp. z o.o. operates as a Polish branch of the international VIA SMS Group, specializing in providing fast, short-term online loans (chwilówki) primarily to Polish consumers aged 20 to 72. The company leverages digital technologies to offer quick loan decisions, transparent terms, and easy online application processes. It holds a stable market position supported by industry memberships and positive customer feedback. Technically, the website employs modern JavaScript libraries, integrates multiple marketing and analytics tools, and provides a mobile-optimized user experience. Security practices include HTTPS enforcement and data protection policies, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, but the absence of WHOIS data slightly reduces domain trustworthiness.

I

IFN VIACONTO MINICREDIT S.A

viaconto.ro

60

VIACONTO is a Romanian online microcredit lending platform offering rapid credit decisions and fast money transfers to customers aged 20 to 70. The company operates under IFN VIACONTO MINICREDIT S.A and is part of the larger VIA SMS Group, which has subsidiaries across several European countries. The website provides a loan calculator, detailed loan terms, and clear contact information, targeting individuals seeking quick and convenient online loans. Technically, the site uses a modern JavaScript stack including jQuery, Google Tag Manager, Facebook Pixel, and Microsoft Clarity, with good mobile optimization and HTTPS security. However, no explicit security policy or incident response information is provided, and WHOIS data is privacy protected as per Romanian ROTLD policies. Overall, the site demonstrates a good balance of business credibility and technical implementation with moderate privacy compliance.

C

Camping de Hondsrug

hondsrug.nl

41

Camping de Hondsrug is a well-established 4-star camping and holiday accommodation provider located in Drenthe, Netherlands. The company offers a variety of camping pitches and rental accommodations including chalets, bungalows, tents, and unique Sheddies, targeting families and tourists seeking a quality holiday experience. The website reflects a strong regional market position with good content quality and consistent branding. Technically, the site uses a modern stack with popular JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile optimized and SEO friendly, though some external resources are loaded over HTTP which poses a minor security risk. Security posture is moderate with HTTPS enforced but lacking explicit security headers and visible security policies. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and suitable for its target audience.

Z

Zone Media OÜ

onlinekasiinod.ee

53

The website onlinekasiinod.ee is an Estonian-language informational portal focused on online casinos in Estonia for the year 2025. Operated by Zone Media OÜ, the site provides casino reviews, rankings, and bonus offers targeting Estonian online gambling enthusiasts. The business model appears to be affiliate marketing or informational services within the gambling niche. Technically, the site is built on WordPress using the Blocksy theme, hosted behind Cloudflare DNS, and employs standard web technologies such as jQuery UI. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with no detected security headers or published security policies, and privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is provided, which limits user trust and compliance. Overall, the domain registration data is consistent and legitimate, supporting the site's credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

S

SIA VIA SMS

viasms.lv

54

SIA VIA SMS operates the website www.viasms.lv, providing fast online consumer loans up to 5,000 euros targeted primarily at Latvian customers. The company holds a special license issued by PTAC, confirming its legitimacy in the Latvian financial sector. The website offers a loan calculator, flexible repayment options, and clear instructions for registration and loan application. The parent company is VIA SMS GROUP, which operates subsidiaries in multiple countries. Technically, the website uses a custom CMS with jQuery and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-positioned in the Latvian online lending market.

G

GroeneZaken

groenezaken.com

50

GroeneZaken is a Dutch online platform dedicated to sustainable businesses and the green economy. It serves as a network hub providing daily news, blogs, event promotions, partner listings, and services aimed at companies and individuals interested in sustainability. The platform targets sustainable enterprises and stakeholders within the Netherlands, positioning itself as a niche but important player in the sustainability sector. Key services include news dissemination, event marketing, and business networking with a focus on environmental topics.

T

Take Back The Tech!

takebackthetech.net

38

Take Back The Tech! is a well-established non-profit campaign founded in 2006, dedicated to empowering women and girls to take control of technology to end gender-based violence. The website serves as an educational and advocacy platform offering resources, campaigns, and community engagement tools. It targets activists, women, and communities concerned with technology-facilitated violence. Technically, the site is built on Drupal 9 with modern web technologies, providing a responsive and accessible user experience. However, some technical aspects such as DNSSEC and security headers could be improved to enhance security. The security posture is moderate with domain management practices that prevent unauthorized changes but lacks published security policies or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is credible and trustworthy, with a clear mission and consistent branding, but could benefit from enhanced security and privacy practices.

I

Internet Society Switzerland Chapter

isoc.ch

30

The Internet Society Switzerland Chapter (ISOC-CH) is a small, non-profit organization founded in 2012 and based in Zurich, Switzerland. It operates as a recognized chapter of the global Internet Society, focusing on advocacy, education, and multi-stakeholder participation in Internet development within the Swiss context. The organization targets academic, professional, business, and private Internet users, providing services related to privacy, network trust, Internet standards, digital sovereignty, and policy regulation. The website reflects a professional and consistent brand image with good content quality and clear navigation.

Robert Schröder GmbH & Co. KG is a well-established German manufacturing company specializing in precision turned parts and quality tools, with a history dating back to 1947. The company focuses on complex machining and cold forming parts, serving industrial clients with a reputation for quality, supported by TÜV certification. The website is built on an older TYPO3 CMS platform and uses jQuery libraries, indicating a moderately mature technical infrastructure. While the site is functional and professionally designed, it shows signs of aging technology and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks modern security headers and explicit incident response policies. Overall, the website is trustworthy and compliant with GDPR, but could benefit from technical modernization and enhanced security practices.