Medium-risk security reports

Direct-Volley.pl is a specialized e-commerce website focused on retailing volleyball equipment and accessories primarily targeting Polish and European customers. The site offers a wide range of products including shoes, textiles, balls, protective gear, and club equipment, emphasizing fast delivery and competitive pricing. The business appears to be recently established in 2023, supported by consistent domain registration data and DNSSEC-enabled domain security. Technically, the website is built on the OpenMage CMS platform, a Magento fork, which is a mature and widely used e-commerce solution. The site integrates modern marketing and analytics tools such as Google Analytics, Google Ads, Facebook Pixel, and Actito marketing automation. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS, uses DNSSEC, and implements GDPR-compliant cookie consent mechanisms. However, it lacks publicly accessible privacy policy and terms of service pages, which are critical for full compliance and user trust. No critical vulnerabilities or WAF blocking were detected, but the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the website presents a professional and trustworthy e-commerce platform with moderate risk. Strategic improvements in privacy documentation, contact transparency, and security disclosures would enhance compliance and user confidence.

Direct-Volley is a specialized e-commerce retailer focused on volleyball equipment and accessories, primarily serving the Portuguese market with multilingual support for other European countries. The website offers a wide range of products including shoes, clothing, balls, protections, and club equipment, positioning itself as the number one online volleyball store in its niche. The business model is retail e-commerce with emphasis on fast delivery and competitive pricing. Technically, the website is built on the OpenMage platform (a Magento fork), utilizing modern web technologies and integrating Google Analytics, Google Ads, and marketing automation tools. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, but lacks some advanced security headers and publicly disclosed security policies. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks explicit privacy and terms of service documentation. Overall, the website is professional and trustworthy, though improvements in transparency and security documentation are recommended.

Veoxa is a French-based performance marketing platform specializing in affiliate marketing and programmatic advertising. Established in 2007, it connects advertisers with a premium network of publishers to generate performance-based transactions. The company emphasizes results-driven marketing, offering dedicated account management and media buying services. The website is professionally designed using WordPress and related technologies, hosted on AWS infrastructure, and integrates well-known affiliate partners such as Kwanko, Awin, and Tradedoubler. While the site is accessible and well-structured, it lacks some advanced privacy and security features such as cookie consent mechanisms and security headers. No direct contact emails or phone numbers are provided, with communication primarily via contact forms. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

The domain www.natgeofe.com appears to be unregistered or inactive as indicated by the WHOIS query returning no match and absence of registrar or registrant information. The website content is inaccessible, returning only a minimal HTML page with the message 'Invalid request', suggesting it is either blocked by a web application firewall or the domain is not currently hosting active content. Due to the lack of accessible content, no metadata, business information, or technical details could be extracted. The absence of HTTPS and security headers further indicates a poor security posture. Overall, the domain and website do not present any credible business presence or digital maturity at this time.

Arosa Tourismus Genossenschaft operates the website arosalenzerheide.swiss, promoting the Arosa and Lenzerheide ski areas in Switzerland. The site targets tourists and winter sports enthusiasts, offering information about regional activities and attractions. The business is positioned as a regional tourism leader in Graubünden, Switzerland, with a medium-sized cooperative structure founded in 2015. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery UI, and Cookiebot for cookie consent management. The site is served over HTTPS with a valid SSL certificate, but lacks some security headers and explicit privacy and terms of service documents. Security posture is moderate with room for improvement in headers and incident response contact information. Overall, the website is professional and trustworthy, but could enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

Ginto is a Swiss non-profit organization providing a comprehensive platform for information about the accessibility of locations across Switzerland. The website offers tools such as a web map and a mobile app to find, record, and share accessibility data. The platform targets individuals seeking accessibility information and those willing to contribute data, positioning itself as a leading resource in this niche. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with multilingual support in German, French, and English. Security-wise, the site uses HTTPS and secure forms but lacks explicit security headers and published security policies, which could be improved. WHOIS data is unavailable due to privacy or query failure, which slightly impacts trust but is understandable for a privacy-conscious non-profit. Overall, the site is professional, functional, and trustworthy with room for enhanced security and privacy transparency.

TCR Store is a newly launched e-commerce website specializing in official racing merchandise, apparel, and collectibles related to TCR racing. The site targets racing enthusiasts and fans looking to purchase premium branded merchandise. The business operates on the Squarespace platform, leveraging its hosting and content management capabilities. The website demonstrates good design quality, mobile optimization, and clear navigation, providing a professional shopping experience. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide explicit contact information, which may impact user trust and regulatory compliance. Security posture is adequate with HTTPS and HSTS enabled, but DNSSEC is not configured, and additional security headers are missing. Overall, the site is functional and trustworthy for e-commerce but requires improvements in privacy compliance and security best practices.

Gesellschaft für Energie- und Gebäudemanagement Bonn mbH (EGM) is a regional energy service provider and subsidiary of Stadtwerke Bonn, specializing in sustainable energy solutions and contracting services for buildings in the Bonn/Rhein-Sieg area. Their offerings include planning, financing, construction, and operation of energy systems for residential, commercial, and public sector clients such as hospitals and schools. The website is built on TYPO3 CMS, featuring modern web technologies and good SEO and accessibility practices. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site reflects a professional and trustworthy business with clear contact channels and integration within a larger energy group.

Bonn-Netz GmbH operates as a regional energy network operator responsible for electricity and natural gas distribution within the Bonn city area. The company provides essential infrastructure services including network connections, metering, energy feed-in management, and supports electromobility infrastructure. Their website targets private households, businesses, installers, and market partners, offering comprehensive information and online portals to facilitate customer interactions. Technically, the website is built on TYPO3 CMS with Yoast SEO integration, hosted on a local provider indicated by the nameservers. The site is mobile-optimized, accessible, and employs modern web technologies. Cookie consent is implemented with user choice, and Google Analytics is used for moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence for a medium-sized utility company. Strategic improvements in security headers, incident response transparency, and legal completeness (terms of service) would enhance their security posture and compliance.

SWB Regional is a regional public utility company specializing in modern and environmentally friendly drinking water supply services within the Eifel-Ahr region of Germany. It operates as part of the Stadtwerke Bonn group, serving approximately 30,000 customers and supporting local municipalities. The website provides comprehensive online customer services including contract management and information dissemination, targeting residential and commercial customers in the region. The company maintains a solid market position as a trusted regional utility provider with strong group affiliation.

Stadtwerke Bonn operates as a regional public utility company in Germany, providing energy and transportation services. Their website, swb-karriere.de, serves as a comprehensive career portal targeting students, apprentices, professionals, and job seekers interested in joining the company. The portal offers detailed information on job openings, training programs, and employee testimonials, positioning the company as an attractive employer in the regional market. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and a cookie consent framework to ensure GDPR compliance. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though it lacks explicit security headers and a public security policy or incident response contact. Overall, the website demonstrates a strong security posture with room for improvement in transparency and security best practices. The domain registration data aligns well with the company's business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clear incident response contacts to further strengthen trust and compliance.

Wingflow AG is a specialized technology company focused on providing customized high performance microfluidic systems. Established in 2012 and based in Switzerland, the company targets businesses and researchers requiring advanced microfluidic solutions. The website reflects a professional and consistent brand presence with clear descriptions of their core offerings. Technically, the site is built on WordPress using Elementor and optimized with Rank Math SEO, indicating a moderate level of digital maturity. Analytics are implemented via Yandex Metrika, but no Google Analytics or other major trackers are present. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is functional and professional but would benefit from enhanced security and privacy disclosures.

Herzog Transporte AG is a small transportation and logistics company based in Switzerland. The website serves as a basic informational platform presenting the company's services, employee information, job openings, and contact options. The business appears to target local businesses and individuals requiring transport services. The site uses a simple technical stack including Bootstrap 3 and jQuery 3.2.1, with content that is minimal but functional and navigable. However, the website lacks critical compliance and security features such as privacy and cookie policies, security headers, and visible contact information, which limits trust and user confidence. No advanced tracking or analytics tools are detected, indicating a minimal data collection approach. Overall, the site is safe and appropriate for general audiences but requires improvements in security and compliance to enhance credibility and user trust.

BenefitWorld is an Austrian cashback and discount platform offering users cashback and savings across approximately 800 partner webshops, with a strong focus on travel and shopping. The website is built on Drupal 9 and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook SDK, and Mailchimp. The platform demonstrates a good level of digital maturity with mobile optimization and a professional design. Security posture is solid with HTTPS enforced, reputable SSL certificates, and security headers, although there is room for improvement in cookie consent mechanisms and published security policies. Overall, the site is trustworthy and well-positioned in the Austrian e-commerce cashback market.

The website cashbackonline.at is a cashback and discount platform affiliated with Bank Austria, targeting primarily Austrian customers interested in online shopping and travel deals. It offers cashback incentives across a wide range of partner shops and travel services, positioning itself as a value-added service for Bank Austria customers. The platform is built on Drupal 9 and employs modern web technologies including Google Tag Manager and Owl Carousel for enhanced user experience. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in cookie consent mechanisms and incident response transparency. The absence of WHOIS data limits domain trust assessment, but the website's branding and certifications indicate a legitimate and professional operation.

The website www.moebel-martin.de is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the site's content. As a result, no business-specific information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security infrastructure, indicating an intent to mitigate automated access or attacks. However, this also prevents a full assessment of the site's content, technical implementation, and compliance posture. The WHOIS data is limited but shows standard ISP nameservers, suggesting legitimate hosting without privacy protection. Overall, the lack of accessible content and business information limits the ability to evaluate the company's market position, services, or security maturity.

Creative SHOPPING GmbH is a German-based technology company specializing in premium advantage and cashback solutions, operating over 120 shopping portals including the well-known GETMORE cashback portal. The company targets businesses seeking to enhance customer and employee loyalty through white-label and custom SaaS platforms. Their market position is strong, supported by awards and a minority investment by ProSiebenSat.1 Media SE. Technically, the website employs modern web technologies, including Google Analytics with privacy features and reCAPTCHA for form security, reflecting a mature digital infrastructure. Security posture is good with HTTPS and form protections, though some security headers and explicit policies are missing. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and privacy policies. No critical vulnerabilities or suspicious content were detected.

laprinta.de is a well-established German e-commerce website specializing in promotional products and advertising gifts, operated by KM-Werbemittel GmbH since 1988. The site offers a broad product range including office supplies, USB and tech gadgets, bags, food and beverages, sustainable items, sports and leisure products, seasonal goods, and more. It targets businesses and organizations seeking customized promotional merchandise, positioning itself as a trusted specialist with over 30 years of market presence. The website features professional design, clear navigation, and consistent branding, supporting a positive user experience.

TransPak AG is a well-established German packaging supplier with over 50 years of experience, serving business customers across Germany, Austria, and Switzerland. The company offers a broad range of over 40,000 packaging products and related services including logistics, eProcurement, and packaging machine support. Their market position is strong, supported by multiple physical locations and certifications such as ISO 9001 and 14001. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is robust with HTTPS, security headers, and secure forms, though incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

KabelScheune operates a professional e-commerce platform specializing in network technology, electrical materials, multimedia, and cable management products primarily targeting both private and business customers in Germany. The website demonstrates a solid market position as a specialized retailer with a comprehensive product catalog and clear navigation structure. Technically, the site is built on the OXID eShop CMS platform, employs modern web technologies including responsive design and SVG icons, and integrates analytics and consent management tools to comply with GDPR requirements. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or adult content.

SEFE Energy GmbH is a prominent European energy supplier specializing in delivering natural gas, hydrogen, and digital infrastructure solutions to industrial and municipal clients across Germany, Belgium, and the Netherlands. As part of the SEFE Group, owned by the German federal government, the company serves over 50,000 customers and emphasizes sustainability and energy transition through investments in clean energy and hydrogen ecosystems. The website reflects a mature digital presence with comprehensive product information, customer portals, and multilingual support. Technically, the site leverages modern web technologies including Umbraco CMS, Vue.js, and integrates analytics and marketing tools such as Google Tag Manager and Trustpilot widgets. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some enhancements in security headers and explicit incident response policies could improve resilience. Overall, SEFE Energy presents a trustworthy and professional online presence aligned with its market position as a leading energy provider in Europe.

MITSUBISHI MOTORS Germany operates a professional website showcasing their automotive models, services, and offers with a focus on modern mobility including electric and plug-in hybrid vehicles. The site targets German automotive consumers and provides detailed navigation for models and services. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes comprehensive cookie consent and analytics integration. Security posture is good with HTTPS and cookie consent but lacks explicit security policies or vulnerability disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

e-mobil BW GmbH operates the Cluster Elektromobilität Süd-West, a regional network focused on advancing electromobility and digitalization in the energy and transportation sectors. The cluster facilitates collaboration among companies, research institutions, and stakeholders to accelerate innovation and market development in Baden-Württemberg and surrounding regions. Their services include project coordination, working groups, internationalization support, and educational initiatives, positioning them as a key player in the regional electromobility ecosystem. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. The site is well-structured, SEO-optimized, and provides a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business identity, supporting legitimacy. Overall, the website demonstrates a strong business credibility and technical maturity with minor areas for improvement in security transparency and contact information. The risk profile is low, and the site effectively supports the cluster's mission and stakeholder engagement.

Bodensee Energie is a regional energy provider in Germany offering electricity and gas services with a focus on certified eco-friendly energy. The website targets residential and commercial customers in the Bodensee region, emphasizing competitive pricing and customer service excellence. The digital infrastructure includes modern web technologies such as jQuery, Google Tag Manager, and an advanced accessibility tool by digi·access GmbH, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive cookie policy and GDPR adherence. Overall, the website is professional, accessible, and trustworthy, supporting the company's market position as a reliable regional energy supplier.

The website www.madeindesign.de is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. As a result, no direct insights into the company's business model, services, or contact details can be derived from the provided HTML content. The site appears to be protected by Cloudflare's security infrastructure, indicating an intent to mitigate automated threats or abuse. However, this also limits the ability to perform a full security and compliance analysis. The domain WHOIS data shows privacy protection and Cloudflare name servers, which is common for legitimate businesses but reduces transparency. Overall, the website's digital presence is currently blocked, resulting in a low AI score and limited visibility into its operations or security posture.

United Kiosk AG operates a well-established German e-commerce platform specializing in digital and print magazine and newspaper subscriptions. With over 25 years in the market, it offers a vast catalog of more than 5,000 titles, serving a broad audience interested in diverse topics. The company emphasizes sustainability, fair practices, and trusted certifications, positioning itself as a reliable and culturally significant media provider in Germany. The website's design is professional, consistent, and optimized for mobile devices, providing an excellent user experience with clear navigation and relevant content.

The website goldstandard.org is currently inaccessible, serving a 504 maintenance error page with minimal HTML content. This prevents extraction of any meaningful business, security, or compliance information from the site itself. The domain is long-established since 2002, registered with Network Solutions, LLC, and uses Cloudflare DNS services. The lack of privacy protection in WHOIS data and clientTransferProhibited status indicate legitimate domain management practices. Due to the maintenance status, no metadata, structured data, contact information, or policies are available for analysis. The security posture cannot be assessed from the site content, but the domain registration details suggest a stable and legitimate entity. Overall, the site is temporarily unavailable, limiting the ability to perform a full security and compliance evaluation.

Gabriele Capelli Editore is a small Italian publishing house specializing in novels, essays, poetry, and cultural literary content. The website serves as a platform to showcase their catalog, authors, and events, targeting readers and literary enthusiasts. The business model revolves around publishing and distributing literary works, including digital ebooks and physical books, with a focus on quality and cultural relevance. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, supported by common libraries such as jQuery and Jetpack. The site is hosted on WordPress.com infrastructure, ensuring reliable uptime and moderate performance. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a comprehensive cookie consent mechanism via Iubenda, demonstrating GDPR compliance. However, it lacks advanced security headers and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a niche publishing business, with good privacy compliance and moderate technical maturity. Strategic improvements in security headers and incident response transparency could enhance its security posture further.

Éditions Finitude is a French literary publishing company presenting its catalog and publishing activities through a professionally designed WordPress website using the Divi theme. The site targets French-speaking readers and literary enthusiasts, offering book publishing services and literary content. The technical infrastructure includes WooCommerce for e-commerce and analytics tools such as Google Analytics and Matomo, indicating a moderate level of digital maturity. Security posture is good with HTTPS and security headers implemented, but lacks visible privacy and cookie policies, as well as contact information for security incidents. The absence of WHOIS data limits domain trust assessment, suggesting the domain may be new or privacy protected, which slightly reduces overall trust. Strategic recommendations include adding comprehensive privacy and cookie policies, improving contact transparency, and implementing a vulnerability disclosure mechanism to enhance security and compliance.

Help – Hilfe zur Selbsthilfe e.V. is a well-established German non-profit humanitarian organization founded in 1981, dedicated to providing emergency aid and sustainable development support worldwide. The organization focuses on empowering people through self-help initiatives and immediate relief in crisis regions such as Ukraine, Gaza, Afghanistan, and others. It maintains a strong market position supported by recognized certifications and memberships in reputable aid coalitions. The website reflects a professional and trustworthy image with comprehensive content and clear calls to action for donations and support. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like Swiper.js and Usercentrics for consent management. It is hosted on servers indicated by the domain's nameservers, with good mobile optimization and SEO practices. The site uses HTTPS and Google Tag Manager for analytics, with a privacy-first approach evident in cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses consent management but lacks explicit security policy pages or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity, showing a consistent and legitimate domain registration. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure framework to enhance transparency and trust further.

Kilkaya is a specialized analytics and personalization platform targeting publishers and media companies. Founded in 2020, it offers services such as informed personalization, A/B testing, automated frontpages, subscription analytics, API access, and real-time notifications. The website presents a professional and consistent brand image with clear service offerings and reputable client logos, positioning Kilkaya as a niche player in the media analytics space. Technically, the site is built on Craft CMS, hosted on Hetzner infrastructure, and uses modern JavaScript and SVG technologies. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

Doffin.no is an official Norwegian government website operated by the Direktoratet for forvaltning og økonomistyring (DFØ). It serves as a comprehensive database for public procurement announcements, enabling public sector entities and suppliers to access procurement data to improve transparency and decision-making. The platform holds a strong market position as the national official source for public procurement information in Norway, targeting government agencies and suppliers. The website is well-branded, consistent, and professionally designed with a focus on usability and accessibility. Technically, the site leverages modern web technologies including React and Matomo analytics, ensuring a responsive and accessible user experience. The site is served over HTTPS with appropriate security headers, reflecting a good security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are areas for improvement to enhance privacy compliance and transparency. Security-wise, the platform demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The absence of a vulnerability disclosure policy and incident response contact reduces transparency but does not indicate immediate risk. Overall, the site is trustworthy and secure for its intended audience. The overall risk assessment is low, with recommendations focusing on improving privacy compliance by implementing cookie consent, publishing security policies, and adding terms of service. These steps will strengthen user trust and regulatory adherence while maintaining the platform's role as a critical government service.

Bitburger Braugruppe is a well-established German brewing group specializing in the production and distribution of alcoholic beverages, primarily beer. The company targets adult consumers and business partners, emphasizing responsible alcohol consumption and compliance with legal age restrictions. The website reflects a professional and consistent brand image, with clear navigation and relevant content for its audience. Technically, the site is built on TYPO3 CMS and employs OneTrust for GDPR-compliant cookie consent management. Hosting appears to be managed by a reputable provider, Deutsche Telekom, based on nameserver data. Security posture is solid with HTTPS enforced and age verification implemented, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but no explicit terms of service or security policies were found. Overall, the website demonstrates a mature digital presence with good business credibility and moderate technical sophistication.

The website www.bynder.com is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to any actual site content. No metadata, structured data, or business-related information is available for analysis. The WHOIS query returned no registration data, indicating the domain may not be registered or WHOIS data is unavailable. This severely limits the ability to assess the business, technical infrastructure, or security posture. The presence of Cloudflare as a security provider indicates some level of protection, but without access to the site content, no further evaluation is possible.

IngenCO2.dk operates the CO2-neutral website certification platform, www.co2neutralwebsite.de, providing brands and website owners with a service to offset their websites' carbon footprint by supporting global CO2 reduction projects certified by the Gold Standard. The platform is well-positioned in the sustainability market with over 32,000 websites certified, trusted by notable partners and audited by BDO for CO2 compensation accuracy. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting environmentally conscious businesses and organizations. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Analytics and Tag Manager for analytics, and uses Cloudflare for DNS and likely CDN services, ensuring fast and secure delivery. Security posture is strong with HTTPS enforced and bot protection via Google reCAPTCHA, though explicit security headers and incident response policies could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

The website bewerbung-fahrdienst-swb.de serves as a recruitment portal for SWB Bus und Bahn, a subsidiary of Stadtwerke Bonn, focusing on hiring bus and tram drivers in the Bonn region. The company operates a large public transportation network with extensive services and a significant workforce. The site provides detailed information about the business, job requirements, and links to application portals, reflecting a well-established municipal transport operator. Technically, the site uses standard web technologies with external font hosting and JavaScript for UI and cookie management. The site is mobile-optimized and presents a professional user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. No vulnerabilities or tracking scripts were detected in the provided content. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity. Strategic improvements could focus on enhancing security headers, publishing incident response information, and adding vulnerability disclosure mechanisms.

SWB Konzern - Stadtwerke-Bonn is a large regional utility and transportation company serving Bonn, Germany, providing essential services such as electricity, natural gas, water, district heating, and public transport. The company emphasizes sustainability and climate neutrality, reflected in its projects and communications. The website is built on TYPO3 CMS and integrates modern technologies like Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Stadtwerke Bonn (SWB) is a large regional utility provider based in Germany, offering a comprehensive range of services including energy supply (electricity and gas), water, public transportation, waste management, and district heating. The company positions itself as a top local supplier with a strong commitment to sustainability and climate protection, targeting a broad audience including residential customers and families. Their business model integrates multiple utility and mobility services under the SWB brand, supported by several related domains and subsidiaries. Technically, the website is built on the TYPO3 CMS platform, employs modern web technologies such as JavaScript and Owl Carousel, and is hosted on reputable German infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a good user experience and professional design. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks publicly visible security policies and incident response contacts, which could be improved. Overall, the website demonstrates a mature digital presence with strong privacy compliance and trustworthy business credibility.

Brinkhaus / Ferchow is a small creative agency specializing in web design, advertising, and online marketing services primarily targeting clients in Oldenburg, Rastede, and surrounding regions in Germany. The website is built on WordPress using Elementor and jQuery, reflecting a moderate level of technical maturity with good mobile optimization and a professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website presents a professional image but could improve compliance and security transparency.

The website for EXEC Software Team GmbH is currently minimalistic, containing only a basic HTML page with a title and a single image. There is no substantive business description, contact information, or policy documentation available. The lack of content and metadata indicates the site may be under construction or serves as a placeholder. Technically, the site does not demonstrate modern web practices such as HTTPS enforcement, security headers, or SEO optimization. Security posture is weak due to absence of HTTPS and security policies, and no incident response or vulnerability disclosure information is provided. Overall, the site presents a low-risk profile due to minimal content but lacks professionalism and trust signals, which could impact business credibility.

The website frankfurtforward.com currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered with INWX GmbH since 2018, consistent with a German origin, but no detailed business or contact information is available on the landing page. The site uses outdated CMS versions (Joomla 1.5 and WordPress 2.5) as indicated by meta tags, which poses significant security risks. The only external link points to bitninja.io, a security service provider, suggesting some level of security monitoring. Overall, the website lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present, limiting trust and credibility assessment.

Campana & Schott is a large international management and technology consulting firm headquartered in Germany, with over 600 employees across Europe and the USA. The company specializes in digital transformation, project and change management, Microsoft technologies, and IT strategy consulting. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting business clients undergoing significant organizational and technological changes. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates consent management via Usercentrics, indicating attention to privacy compliance. Security posture is good with HTTPS and consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing trust slightly, but the overall professional presentation and market position support legitimacy. No adult or questionable content is present, and the site is fully accessible without WAF blocking.

The website www.eschborn.de serves as the official municipal portal for the city administration of Eschborn, Germany. It provides a comprehensive range of online services and information targeted at citizens, businesses, and visitors. The site is well-branded and includes extensive accessibility features to support diverse user needs. The content is primarily in German with multi-language support available through an integrated accessibility tool. The business model is focused on public service delivery and community engagement, positioning the city government as a trusted local authority. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including Bootstrap and jQuery. Analytics are managed via Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the official nature of the site, showing consistent domain registration and hosting. Overall, the website presents a professional and trustworthy digital presence for the Eschborn city administration. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance compliance and security posture further.

Hofheimer Wohnungsbau GmbH (HWB) is a regional real estate company focused on socially responsible housing and city development in Hofheim am Taunus, Germany. The company offers a broad range of services including residential construction, social management, property management, and community engagement. Their market position is that of a trusted local housing provider with a strong emphasis on social responsibility and sustainability, supported by published annual and sustainability reports. Technically, the website employs a moderate technology stack with jQuery and several UI libraries, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's mission and audience.

Museum für Gestaltung Zürich is a leading Swiss museum specializing in design and visual communication, operating across three locations in Zurich. It is affiliated with the Zurich University of the Arts and supported by prominent cultural and corporate entities. The museum offers exhibitions, educational programs, publications, and an online shop, targeting a broad audience including groups, schools, families, and accessible audiences. The website reflects a mature digital presence with modern technologies such as Nuxt.js and Vue.js, and integrates Matomo analytics for user tracking. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and explicit security policies. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

The Liechtensteinische Wirtschaftsprüfer-Vereinigung (WPV) is a professional association representing auditors in Liechtenstein. It serves as the official body organizing the profession, providing education, setting ethical standards, and liaising with regulatory authorities such as the FMA. The website is targeted at auditors, auditing firms, and financial market participants within Liechtenstein, offering information about membership, organizational structure, professional standards, and contact details. The WPV holds a recognized position within the Liechtenstein financial and regulatory ecosystem.

The website lucabrunoni.com serves as the official online presence of Swiss author Luca Brunoni, showcasing his literary works, biography, and multimedia content related to his novels. The site targets readers interested in contemporary literature, particularly French and Italian-speaking audiences. The business model centers on personal branding and book promotion, with a niche market position in the literary domain. Technically, the site is built on the Adobe Portfolio platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, Google Analytics, and Adobe Typekit fonts. The site demonstrates good mobile optimization and moderate performance but lacks advanced accessibility features and comprehensive SEO optimization. Security-wise, the site benefits from HTTPS encryption and uses sandboxed iframes for embedded content, but it lacks important security headers and DNSSEC is not enabled, which could be improved to enhance security posture. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms, which poses compliance risks under GDPR. The site does not provide explicit contact information or incident response channels, limiting business credibility and user trust. Overall, the website is professional and functional but would benefit from enhanced security, privacy compliance, and contact transparency to improve trust and regulatory adherence.

Spezial Tourenwagen Trophy (STT) is a well-established German motorsport racing series founded in 1986, catering to both professional and amateur racing drivers. The website serves as a central hub for news, event schedules, race results, and media galleries related to the racing series. It maintains a professional and consistent brand presence with a focus on delivering relevant content to motorsport enthusiasts. Technically, the site employs modern web technologies including HTTPS, JavaScript, and cookie consent management tools, hosted on resellerinterface.de infrastructure. The site demonstrates good digital maturity with moderate performance and mobile optimization. Security-wise, the website enforces HTTPS and includes a comprehensive cookie consent mechanism, but lacks some advanced security headers and formal security policies. Privacy compliance is strong with GDPR-aligned cookie management and a detailed privacy policy. Overall, the site is trustworthy, professionally maintained, and serves its niche audience effectively.

The website www.24hseries.com serves as an informational platform dedicated to endurance racing events, targeting motorsport enthusiasts and fans of endurance series. It provides race updates, championship details, galleries, and newsletters, positioning itself as a niche sports event information site. The technical infrastructure includes modern JavaScript libraries such as jQuery and a cookie consent management system (Cookiebot), indicating a moderate level of digital maturity. The site is accessible over HTTPS and implements basic security practices such as CSRF token usage and cookie consent banners. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Additionally, the lack of privacy policy, terms of service, and contact information limits the site's compliance and trustworthiness. Overall, the site is functional and professionally designed but requires improvements in legal disclosures and security headers to enhance its security posture and compliance.