Security Directory

C

Culligan Česká republika

culligan.cz

57

Culligan Česká republika operates as a regional provider of high-capacity water dispensing solutions, targeting businesses and organizations within the Czech Republic. Their offerings include water dispensers connected to water mains, integrated dispensers, soda bars, and accessories tailored for sectors such as hospitality, healthcare, education, and manufacturing. The website reflects a professional business model focused on B2B sales and service, with clear branding and consistent messaging. Technically, the website is built on WordPress with modern frameworks like Bootstrap and utilizes various analytics and marketing tools including Piwik PRO, Google Tag Manager, and OneTrust for cookie consent. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with a well-structured navigation system. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers such as CSP or X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the overall security posture is solid. Overall, the website presents a trustworthy and professional digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and WHOIS transparency would further enhance trust and security.

К

Кълиган България

culligan.bg

55

Culligan България is a reputable provider of filtered drinking water solutions for both business and residential customers in Bulgaria. The company offers a range of products including water dispensers, built-in filtration systems, and water softeners, supported by professional service and a one-month free test offer. The website reflects a strong market position as part of the international Culligan brand, targeting local Bulgarian audiences with clear, relevant content and consistent branding. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses industry-standard tools like Google Tag Manager, Piwik PRO analytics, and OneTrust for cookie consent management. The site is mobile-optimized, SEO-friendly, and employs HTTPS with appropriate security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with moderate tracking and marketing tools in use. Strategic improvements in security policy publication and accessibility could further strengthen its posture.

C

Culligan Nederland

culligan.nl

61

Culligan Nederland is a reputable provider of water dispensers and related services in the Netherlands, targeting both business and consumer markets. Their offerings include waterleiding- and flessenkoelers, water bottle delivery, and accessories, positioning them as a key player in the water dispenser industry within the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, all operating under GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures such as reCAPTCHA, although a dedicated security policy and incident response information are absent. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and business credibility, though there is room for improvement in transparency around security policies and incident handling.

C

Culligan Austria GmbH

culligan.at

62

Culligan Austria GmbH operates a professional website offering water dispensers and related services for both businesses and households in Austria. The company is positioned as a reputable provider with a broad customer base, leveraging a comprehensive service model that includes rental and maintenance of water dispensers. The website reflects a mature digital presence with modern technologies such as WordPress CMS, Bootstrap framework, and integrated marketing and analytics tools including HubSpot, Hotjar, and Piwik Pro. Privacy compliance is well addressed with a detailed privacy policy and a robust cookie consent mechanism powered by Cookiebot. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be enhanced for better protection. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

W

WATERROWER | NOHRD GmbH

nohrd.com

69

WATERROWER | NOHRD GmbH operates a professional e-commerce website specializing in premium fitness equipment designed with sustainability and aesthetics in mind. The company targets fitness enthusiasts and gym/home users seeking high-quality, beautifully crafted products. The website is well-structured, mobile-optimized, and uses modern technologies such as Magento, RequireJS, and Google Tag Manager to deliver a smooth user experience. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is generally strong with HTTPS enforced and bot protection via FriendlyCaptcha, though the absence of certain security headers and lack of public WHOIS data slightly reduce trust. Overall, the site reflects a mature digital presence suitable for a medium-sized retail business.

R

Rent.Group

rent.group

48

Rent.Group is a large European company specializing in the rental and facilitation of temporary ownership and circular use of furniture and equipment for events, trade fairs, and offices. They position themselves as a leader in the circular and sharing economy with a strong network of 30 locations and over 6 million items. Their website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and frameworks such as Bootstrap, jQuery, and GSAP, and integrates analytics and tracking tools like Microsoft Clarity and Metricool. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA on forms, and implements cookie consent mechanisms, though it lacks explicit security policies and some security headers. Overall, the site is trustworthy and well-maintained with no signs of blocking or WAF interference.

Y

Yonex

yonex.com

10

Yonex is a globally recognized leader in the manufacturing and retail of sports equipment, specializing in badminton, tennis, and golf products. Their website serves as a comprehensive e-commerce platform showcasing a wide range of racquets, strings, clubs, apparel, footwear, and accessories. The brand emphasizes technology-driven innovation to enhance athletic performance. The site targets sports enthusiasts and professional athletes, offering a seamless shopping experience with clear navigation and professional design. Technically, the website is built on the Magento platform, leveraging modern web technologies such as RequireJS, jQuery, and Bootstrap. It integrates advanced analytics and monitoring tools including Google Analytics, Google Tag Manager, and New Relic Browser for performance and user behavior insights. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers like Content Security Policy and Strict-Transport-Security. While no critical vulnerabilities were detected, the absence of explicit security policy and incident response pages suggests room for improvement in transparency and readiness. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Yonex's website reflects a mature digital presence with strong business credibility and technical infrastructure. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include publishing security and incident response information, enhancing contact transparency, and maintaining regular security audits to uphold trust and compliance.

B

Betway Group

betwaygroup.com

51

Betway Group, founded in 2006 and operating under the parent company Super Group | SGHC Ltd, is a leading global online sports betting and iGaming operator. The company maintains a strong international presence with offices across Europe, Africa, and the Americas, and operates multiple brands including Jackpot City. The website reflects a professional corporate identity with clear business descriptions and a focus on responsible gaming. Technically, the site is built on WordPress with modern frameworks and uses Cloudflare DNS services, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is partially addressed with privacy and cookie policies present, but lacks explicit cookie consent mechanisms and incident response details. Overall, the site demonstrates high business credibility and trustworthy digital presence.

K

Kloster Leiden Christi

kapuzinerinnenkloster.ch

10

Der Klosterladen is a small Swiss-based e-commerce and physical retail business operated by Kloster Leiden Christi, specializing in natural health products, cosmetics, and religious devotional items. The website is well-structured, primarily in German, and targets customers interested in traditional monastic remedies and religious goods. The business model combines online sales with a physical store, offering a niche market presence. Technically, the site uses the PepperShop platform with modern libraries such as jQuery and Bootstrap, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and incident response policies are missing. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content.

E

eDreams ODIGEO

edreamsodigeo.com

69

eDreams ODIGEO operates as a leading global travel subscription platform and one of Europe's largest e-commerce businesses, offering a suite of travel brands including eDreams, Opodo, and Liligo. The company targets travel consumers and investors, providing subscription-based travel booking services and maintaining a strong investor relations presence. The website reflects a mature digital infrastructure built on WordPress with modern front-end technologies, optimized for mobile and SEO. Security posture is strong with HTTPS, security headers, and ISO 27001 certification, though public vulnerability disclosure and incident response contacts are not evident. Overall, the site is professional, trustworthy, and well-maintained, but the absence of WHOIS data introduces a minor trust concern.

S

Schwäbischer Turnerbund (STB) e.V.

turngala.de

47

TurnGala is a well-established annual gymnastics and acrobatics show organized by the Schwäbischer Turnerbund (STB) and Badischer Turnerbund in Germany. The event features international and regional artists performing a mix of gymnastics, acrobatics, dance, comedy, and entertainment, targeting families and sports enthusiasts across Baden-Württemberg. The website serves as a comprehensive platform for event information, ticket sales, news updates, and partner engagement. Technically, the site is built on TYPO3 CMS with modern frontend libraries such as Bootstrap and jQuery, and integrates Usercentrics for GDPR-compliant consent management and Matomo for analytics. The site is hosted on kundenserver.de and demonstrates moderate performance with good mobile optimization and SEO practices. Security-wise, HTTPS is enforced, and consent mechanisms are in place, though some security headers could be improved and no explicit security policy or incident response information is published. Overall, the domain registration and hosting details align well with the business, indicating legitimacy and trustworthiness.

S

Schwäbischer Turnerbund (STB) e.V.

sportkongress-stuttgart.de

52

The Sportkongress Stuttgart website represents a well-established sports event organized by the Schwäbischer Turnerbund (STB) e.V., targeting sports professionals and enthusiasts with educational workshops, lectures, and networking opportunities. The site positions itself as a leading event in the organized sports sector in Stuttgart, Germany, offering comprehensive content and professional branding. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, hosted on Hetzner servers. It employs GDPR-compliant cookie consent management via Usercentrics and uses Matomo for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure forms with reCAPTCHA, though some security headers and explicit security policies are missing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with clear contact information and partner affiliations. The risk level is low, with recommendations focusing on enhancing security headers and publishing security policies to further strengthen trust and compliance.

S

Schwäbischer Turnerbund (STB) e.V.

kinderturn-kongress.de

50

The Kinderturn-Kongress website represents a specialized event platform focused on children's gymnastics, organized by the Schwäbischer Turnerbund (STB) e.V. The site provides event information, partner details, and resources for trainers and clubs involved in children's gymnastics in the Württemberg region of Germany. The business model centers on event organization and community support within the sports sector, targeting trainers and club representatives. The website is well-branded and consistent with its organizational partner STB, featuring clear contact channels and social media integration. Technically, the site is built on TYPO3 CMS with a modern tech stack including Bootstrap, jQuery, and ECharts for interactive content. Hosting is provided by Hetzner, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices. Privacy compliance is robust, leveraging Usercentrics for consent management and Matomo for analytics with cookie consent enforcement. From a security perspective, the site uses HTTPS and integrates reCAPTCHA with consent requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is good but could be improved by implementing security headers and publishing formal security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It serves its niche audience effectively with clear communication and a solid technical foundation. Strategic improvements in security transparency and accessibility could further enhance its maturity and trustworthiness.

L

Logo-Solution GmbH

4bowl.de

53

4bowl is a German-based SaaS provider specializing in online reservation and booking systems tailored for bowling centers and leisure facilities. The company, operated by Logo-Solution GmbH, offers a comprehensive platform that enables professional management of bookings and staff, accessible via multiple devices including PC, Mac, tablets, and smartphones. With over 200 centers relying on their system, 4bowl holds a strong market position in the hospitality and leisure sector in Germany and surrounding countries. The website is well-branded, professionally designed, and provides clear information about its services and customer base. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Tawk.to live chat. Hosting and DNS services are managed via Cloudflare, ensuring robust infrastructure and performance. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses Cloudflare for DNS and CDN services. It implements a cookie consent banner and maintains GDPR compliance with a privacy policy. However, it lacks visible security headers, an incident response policy, and a vulnerability disclosure mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, 4bowl presents a trustworthy and professional online presence with a solid technical foundation and good privacy practices. Strategic enhancements in security policies and compliance documentation would further strengthen its security posture and business credibility.

T

Time Service B.V.

getraceresults.com

49

RaceResults, operated by Time Service B.V., is a specialized online platform providing comprehensive motorsport race results, live timing, and race tracking services. The website hosts an extensive database of event results timed with RSTime software dating back to 2004, serving motorsport enthusiasts, event organizers, and racers globally. The platform leverages DotNetNuke CMS and integrates Google Analytics for user tracking. The business operates primarily in the transportation sector with a niche focus on motorsport timing services. The domain is well-established since 2016, aligning with the business's operational history.

K

Kelly Gesellschaft m.b.H

kelly.at

62

Kelly Gesellschaft m.b.H is a medium-sized Austrian company specializing in the production and distribution of popular salty snacks. It operates as part of the larger Intersnack Group, which has a broad international presence. The company emphasizes sustainability, healthier lifestyle products, and responsible supply chain management. The website reflects a professional corporate identity with consistent branding and a clear focus on its product offerings and sustainability initiatives. The target audience includes general consumers interested in snack foods and corporate responsibility. Technically, the website is built on TYPO3 CMS with modern frontend technologies, offering good mobile optimization and user experience. Security posture is solid with HTTPS and secure form handling, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

R

ROTE NASEN Clowndoctors

rotenasen.at

54

ROTE NASEN Clowndoctors is a well-established Austrian non-profit organization founded in 1994, dedicated to bringing laughter and joy to patients of all ages through professional clown visits. The organization operates with a strong international partnership with RED NOSES International and focuses on various target groups including children, adults, seniors, and people with special needs. Their business model relies heavily on donations, sponsorships, and community engagement programs such as the Emergency Smile and online clown visits. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and frameworks such as jQuery and Bootstrap. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, there is room for improvement in security headers and incident response disclosures. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and privacy standards. The presence of recognized certifications and clear donation information further enhances credibility. No critical security issues or content safety concerns were identified, making the site safe for general audiences. Strategically, the organization should focus on enhancing security headers, publishing vulnerability disclosure policies, and possibly providing more explicit incident response contacts to strengthen their security posture and trust further.

S

SPEEDWEEK.COM

speedweek.com

65

SPEEDWEEK.com is a German-language motorsport news website providing comprehensive coverage of various motorsport disciplines including Formula 1, MotoGP, Superbike, IDM, and DTM. The site targets motorsport enthusiasts primarily in German-speaking regions and offers news, videos, photo galleries, and editorial content. The website appears professionally designed with consistent branding and regular content updates, positioning it as a reputable media outlet in its niche. The affiliation with Red Bull Media House is implied through authentication and embedded content domains, suggesting a strong backing and market presence. Technically, the site uses modern web technologies such as Bootstrap, lazy loading, and third-party authentication via Auth0, indicating a mature digital infrastructure. However, some areas such as explicit privacy policy pages and security headers could be improved. Security posture is moderate with HTTPS usage and secure authentication but lacks visible security headers and explicit incident response information. Overall, the site is functional, trustworthy, and well-positioned but would benefit from enhanced transparency and security practices.

R

Roland Schmid Group

rsgroup.at

57

The Roland Schmid Group website presents a professional corporate presence focused on digitalization and innovation, led by owner Roland Schmid. The business appears to operate as an investment and holding entity with services including investments, sponsoring, and press relations. The website targets a German-speaking Austrian audience and maintains consistent branding and good content quality. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, incorporating modern web technologies and SEO best practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policies or incident response contacts are published. Overall, the site is trustworthy and compliant with GDPR cookie requirements but could improve transparency on security and contact details.

The website www.eeagrants.sk serves as the official Slovak government portal for the EEA and Norway Grants, providing comprehensive information on grant programs, calls for proposals, bilateral cooperation, and project results. It targets government agencies, NGOs, and the general public interested in funding opportunities and grant management. The site is operated by the Ministry of Investment, Regional Development and Informatization of the Slovak Republic, ensuring authoritative and trustworthy content. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and various UI libraries, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent management, and avoids exposing sensitive data, though it lacks some advanced security headers and a formal security policy. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.

The website www.unesco.sk represents the Slovak national commission for UNESCO, a specialized agency of the United Nations focused on education, science, culture, and communication. The site provides informative content about UNESCO's mission, history, and activities in Slovakia, targeting a general audience interested in cultural heritage and educational initiatives. The organization is well-established with a clear global mandate and recognized legitimacy. Technically, the website employs standard and modern web technologies including jQuery, Bootstrap, Font Awesome, and Google Maps API, hosted likely behind Cloudflare. The site is mobile responsive with moderate performance and basic SEO and accessibility features. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. Analytics are limited to Cloudflare Insights, indicating minimal user tracking. No forms or contact details are provided, limiting data collection and interaction. The WHOIS data aligns well with the website's claims, confirming legitimacy and consistent registration. Overall, the site is professionally presented and trustworthy but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user confidence and regulatory adherence.

E

Eglise MLK

eglisemlk.fr

54

Eglise MLK is a French non-profit religious organization focused on providing spiritual services, community engagement, and religious events. The website serves as a portal for church activities, donations, and community involvement, targeting French-speaking Christian audiences. The organization has an established domain since 2014, consistent with its operational history. Technically, the website is built on WordPress with common plugins and uses AWS for hosting static content. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

B

Bond

bond.org.uk

64

Bond is a UK-based non-profit organization that connects and champions a network of civil society organizations focused on eradicating global poverty, inequality, and injustice. The website demonstrates a strong market position within the international development sector, offering advocacy, events, job boards, training, and resources to its members. The organization is registered as a charity and company in England and Wales, reinforcing its legitimacy and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google Tag Manager. It is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. The site uses HTTPS with good SSL configuration and employs best practices such as secure forms and controlled script loading. From a security perspective, the site shows a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security policy transparency. The WHOIS data for the 'www.bond.org.uk' subdomain is unavailable due to domain naming rules, but the main domain 'bond.org.uk' is presumably authoritative and legitimate. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms.

P

Platforma rozvojových organizácií – Ambrela

ambrela.org

11

Platforma rozvojových organizácií – Ambrela is a Slovak non-profit umbrella organization representing nearly thirty development, humanitarian, and educational organizations. It serves as a coordinating platform for advocacy, capacity building, campaigns, and project implementation, with strong ties to EU and international donors. The website is professionally designed, content-rich, and well-maintained, reflecting its active role in the Slovak development sector. Technically, the site is built on WordPress with modern libraries and plugins, hosted on Websupport.sk, and optimized for mobile devices. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some advanced security headers are missing. Privacy and cookie policies are present and GDPR compliant with user consent mechanisms. Overall, the website is trustworthy and credible, with no signs of malicious activity or content safety concerns.

N

Nubassa Gewürzwerk GmbH

nubassa.de

51

Nubassa Gewürzwerk GmbH is a well-established German B2B company specializing in the supply of spices, marinades, and food technology solutions with a history spanning over 90 years. The company targets food manufacturers and retailers, offering high-quality products and customer service to facilitate consistent production standards. Their website reflects a professional and consistent brand image, supporting their market position as a reliable partner in the food manufacturing sector. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap and Font Awesome, and is hosted on German infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns with the company's German business identity, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for improvement in privacy and security transparency.

C

CCC Druck und Medien GmbH

muensterdruckt.de

47

CCC Druck und Medien GmbH operates an online and local print and media service shop based in Münster, Germany. The website offers a broad range of printing products and services targeting both business and private customers, including flyers, posters, thesis printing, and various print media. The company positions itself as a local trusted provider with personal consultation available on-site. Technically, the website uses a Bootstrap-based responsive design with jQuery and other JavaScript libraries, hosted on servers indicated by creolineserver.com nameservers. The site is moderately optimized for performance and mobile devices but lacks some advanced accessibility features. Security posture is moderate with HTTPS implied but no visible security headers and no published security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear contact information and consistent WHOIS data. Overall, the website is functional and professional but could improve in security and privacy compliance.

N

Netxp GmbH

netxp-verein.de

62

Netxp GmbH operates the website www.netxp-verein.de, providing specialized online software solutions for clubs and associations to manage memberships, finances, and communications efficiently. The company positions itself as a trusted provider with a focus on ease of use, multi-user access, and comprehensive club management features. The website is professionally designed, well-structured, and targets German-speaking clubs and associations. Technically, the site uses modern web technologies including jQuery, Bootstrap, and tracking tools such as Google Analytics and Facebook Pixel, hosted on Schlund Technologies infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

M

Mouvement des Flambeaux et des Claires Flammes

flambeaux.org

57

The Mouvement des Flambeaux et des Claires Flammes is a French non-profit scouting organization established in 1964, serving evangelical Protestant churches and open to all youth. The website reflects a well-established community-focused entity with clear educational and youth engagement objectives. Technically, the site is built on WordPress using standard plugins such as Yoast SEO and Contact Form 7, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and Cloudflare Turnstile captcha implemented, though additional security headers and explicit incident response policies are absent. The lack of WHOIS data limits domain trust analysis but the website content and affiliations support legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences.

L

lafree.ch - Site évangélique d'information

myfreelife.ch

50

Myfreelife.ch is a French-language evangelical Christian news and community website operated under the Fédération romande d’Églises évangéliques (FREE), targeting the Suisse romande evangelical community. The site provides news, portraits, spiritual reflections, and societal articles relevant to its audience. It maintains a consistent brand identity aligned with the federation and integrates social media channels for broader engagement. Technically, the site is built on Joomla CMS with the Helix3 template framework and uses common web technologies such as jQuery and Bootstrap. Google Analytics and Tag Manager are employed for user tracking. Security posture is adequate with HTTPS enabled and CSRF protections in forms, but lacks security headers and explicit privacy or cookie policies. Contact information and incident response details are not directly visible, which may impact user trust and compliance. Overall, the site is professionally presented, content-rich, and trustworthy within its niche, but could improve privacy compliance and security best practices.

L

Leasing Unterland GmbH

leasing-unterland.at

46

Leasing Unterland GmbH is a medium-sized Austrian real estate company specializing in the purchase, rental, leasing, and strategic development of real estate projects primarily in Austria. Established in the early 1980s, the company has evolved from leasing vehicles and properties to focusing on real estate investment and management, including ownership of several commercial properties such as retail centers. Their website reflects a professional and consistent brand presence, targeting investors, businesses, and private clients interested in Austrian real estate. The business model centers on long-term property management and development, positioning them as a reputable regional player in the real estate sector. Technically, the website is built on WordPress using modern plugins such as Slider Revolution and WPBakery Page Builder, with a moderate performance profile and good mobile optimization. The site uses HTTPS with a valid SSL certificate, but lacks some advanced security headers and explicit privacy or cookie consent mechanisms. Forms are minimal, primarily a search form, with no evident tracking or analytics services detected. The site is accessible without WAF or security challenges, indicating good availability. From a security perspective, the site demonstrates basic best practices such as HTTPS and use of a honeypot plugin for form protection. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. WHOIS data aligns well with the website's business claims, showing a consistent and legitimate registration in Austria, supporting the company's credibility. Overall, Leasing Unterland GmbH's website is a solid representation of a professional real estate business with good technical implementation and moderate security posture. Enhancements in privacy compliance, security headers, and transparency around data protection would further strengthen their digital trustworthiness.

S

STTA Consulting – Africa Sustainable Tourism Space

sttakenya.org

48

The website represents an organization likely operating in a community or non-profit sector, as indicated by the domain and content structure. The site is built on WordPress using Elementor and several plugins to enhance functionality, including Instagram feeds and quiz/survey makers. The technical infrastructure is moderate, with basic mobile optimization and standard CMS usage. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which could be improved. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user trust mechanisms. Overall, the site appears legitimate but underdeveloped in terms of content richness and security maturity.

S

Schwäbischer Turnerbund (STB) e.V.

stb.de

53

The Schwäbischer Turnerbund (STB) e.V. is a well-established non-profit sports federation based in Stuttgart, Germany, serving sports clubs, volunteers, and various age groups including children, youth, and seniors. The organization offers a broad range of services including education, event organization, fitness and health programs, and support for member clubs. Their market position is strong regionally within Baden-Württemberg, supported by a professional and content-rich website. The digital infrastructure is based on TYPO3 CMS with modern technologies and integrations such as Usercentrics for consent management and Matomo for analytics, hosted on a reputable provider (Hetzner).

W

Westfälischer Turnerbund e.V.

wtb.de

58

Westfälischer Turnerbund e.V. is a regional non-profit sports association based in Hamm, Germany, focused on gymnastics, sports education, and community sports events. The website serves as an information hub for members, athletes, and trainers, offering event details, educational programs, and membership services. It maintains a strong regional presence and partners with several related sports organizations and event platforms. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is good with HTTPS and CSRF protections, though some security headers like CSP could be improved. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and a named data protection officer. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious or adult content.

B

BBS

bbs.com

63

BBS is a reputable manufacturer specializing in automotive wheels with a strong motorsport heritage. Their website reflects a professional e-commerce platform built on Magento, targeting quality-conscious automotive enthusiasts globally. The technical infrastructure leverages modern JavaScript frameworks and includes tracking and consent management tools, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is functional, professional, and safe for general audiences.

B

BIEG Hessen GbR

bieg-hessen.de

11

BIEG Hessen GbR is a small, regionally focused service organization affiliated with the Industrie- und Handelskammern (IHKs) in Hessen, Germany. It provides free, neutral online marketing consulting, social media guidance, e-commerce support, and educational seminars primarily targeting small and medium-sized enterprises (SMEs) and member companies of the IHKs. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers are missing and no explicit security policy or incident response information is published. Overall, the domain registration aligns with the business claims, and no suspicious patterns or vulnerabilities were detected. The website is safe, trustworthy, and compliant with GDPR regulations.

K

KOVOS

kovos.ch

49

KOVOS is a Swiss non-profit organization representing Catholic religious communities, providing information and support for vocations, retreats, and monastic hospitality. The website serves as an informational platform targeting religious individuals and communities in Switzerland. Technically, the site is built on TYPO3 CMS with modern web technologies and includes tracking via Google Analytics and Tag Manager. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS and nonce usage but lacks visible security headers and published security or privacy policies. No forms or social media links were detected, limiting direct user engagement channels. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

S

Schweizer Bischofskonferenz

bischoefe.ch

48

The Schweizer Bischofskonferenz website serves as the official digital presence of the Swiss Bishops' Conference, providing comprehensive information about the Catholic Church's activities, leadership, and ethical services in Switzerland. The site targets church members, religious communities, and the general public interested in ecclesiastical matters. It offers news, documents, and partner links, positioning itself as a trusted non-profit religious institution with a medium organizational size. Technically, the website is built on WordPress 6.6.2, leveraging common plugins such as Contact Form 7 and Bootstrap for responsive design. The infrastructure supports moderate performance and good mobile optimization, with Google Tag Manager integrated for analytics. However, some accessibility features are basic, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. Nonetheless, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in transparency and security readiness. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy compliance measures and security best practices to strengthen user trust and regulatory adherence.

S

SÄLZER Security

saelzer-security.com

67

SÄLZER Security is a German-based manufacturer and installer specializing in high-security building products such as windows, doors, facades, and barriers designed to protect against burglary, shooting, fire, and explosions. With over 50 years of experience and more than 1,000 test certificates, the company holds a strong market position serving military, police, embassies, critical infrastructure, and private clients worldwide. The website is professionally designed using TYPO3 CMS and integrates modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not publicly visible. The absence of WHOIS registration data for the domain is a notable anomaly that slightly reduces trustworthiness. Overall, the website reflects a mature, professional business with good digital maturity and compliance practices.

A

ACO Pfuhler GmbH & Co. KG

aco-pfuhler.de

66

ACO Pfuhler GmbH & Co. KG is a specialized manufacturer of high-stability monolithic precast concrete slot drains and drainage components, serving construction and infrastructure sectors primarily in Germany. The company holds a leading market position in its niche, offering robust drainage solutions designed for large sealed surfaces and extreme conditions. Their website reflects a professional and consistent brand image with comprehensive product information and references. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and includes essential SEO and accessibility features. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

A

ACO Passavant Detego GmbH

aco-detego.de

67

ACO Passavant Detego GmbH is a specialized manufacturer within the ACO Group focusing on manhole covers, street and bridge drains, and technical covers. The company offers both standard and customized solutions, emphasizing safety and aesthetic integration for industrial and infrastructure clients. Their services extend beyond product development to include installation, maintenance, and repair, positioning them as a full-service provider in their niche market. The website reflects a professional and consistent brand image, targeting industrial and infrastructure sectors primarily in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Google Tag Manager. It features a responsive design with good SEO and accessibility practices. Cookie consent is managed through Klaro, indicating a mature approach to privacy compliance. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be enhanced and a formal security policy is absent. From a security perspective, the site shows good practices such as consent management and secure data handling in forms. However, the absence of explicit incident response contacts and security.txt files suggests areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and professionally maintained, suitable for its business purpose. Strategically, the company should consider enhancing security headers, publishing a security policy, and providing clear incident response contacts to strengthen trust and compliance. Continuous monitoring and technical optimizations will support sustained digital maturity and business credibility.

R

Römisch-katholischer Pastoralraum Möhlinbach

moehlinbach.ch

51

The Römisch-katholischer Pastoralraum Möhlinbach is a regional non-profit Catholic church organization serving multiple parishes in the Möhlinbach area of Switzerland. The website provides comprehensive information about its pastoral services, community offerings, and contact details for various parish offices. The organization targets local Catholic community members and offers services such as sacraments, social support, and youth programs. Technically, the website is built on TYPO3 CMS with modern front-end libraries like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its mission, though it could improve in privacy and security transparency.

M

Ministerium für Kinder, Jugend, Familie, Gleichstellung, Flucht und Integration des Landes Nordrhein-Westfalen

mkjfgfi.nrw

68

The website www.mkjfgfi.nrw is an official government portal for the Ministry of Children, Youth, Family, Equality, Flight and Integration of North Rhine-Westphalia, Germany. It provides comprehensive information and services related to social policies, family support, youth programs, integration efforts, and equality initiatives. The site targets residents and stakeholders in NRW, offering resources, official documents, and contact forms to facilitate public service delivery. Technically, the site is built on Drupal CMS with Bootstrap framework, ensuring a responsive and accessible user experience. The site employs modern web technologies and maintains good SEO and accessibility standards. No tracking or analytics scripts are present, reflecting a strong privacy posture. Security-wise, the site enforces HTTPS and uses cookie consent banners with clear categories. However, it lacks explicit security policy pages and incident response contacts, which could be improved. WHOIS data is privacy protected but consistent with official government use of the .nrw TLD, supporting legitimacy. Overall, the website demonstrates a mature digital presence with good content quality, privacy compliance, and security posture. Strategic recommendations include publishing security policies, incident response information, and enhancing security headers to further strengthen trust and compliance.

K

Kommunales Integrationszentrum Bielefeld

ki-bielefeld.de

40

Kommunales Integrationszentrum Bielefeld is a government-affiliated integration center serving the city of Bielefeld, Germany. It provides a broad range of services including integration support, educational counseling, anti-discrimination initiatives, and community event organization. The website reflects a strong local government presence with official branding and funding from regional ministries. The target audience includes migrants, refugees, local families, and educational institutions. The business model is public service oriented, funded by government bodies, and focused on social inclusion and integration. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, enhanced by accessibility features and mobile optimization. It uses custom analytics and complies with GDPR through cookie consent mechanisms. Hosting is provided by a German hosting provider consistent with the domain's nameservers. Performance is moderate with good SEO and structured data implementation. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, some security headers are not explicitly detected and there is no public security policy or incident response information. Privacy compliance is strong with clear privacy and cookie policies. Business credibility is high due to official contact information, government logos, and consistent branding. Overall, the website is trustworthy, professional, and well-maintained, serving its public service mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and security posture.

W

Wirtschaftsentwicklungsgesellschaft Bielefeld mbH

das-kommt-aus-bielefeld.de

45

Das kommt aus Bielefeld is a regional business network platform operated under the Wirtschaftsentwicklungsgesellschaft Bielefeld mbH, focused on connecting local companies, fostering knowledge exchange, and promoting the strengths of the Bielefeld economy. The website offers rich multimedia content, including videos, testimonials, and a magazine, targeting local businesses, professionals, students, and startups. The business model centers on networking, visibility, and collaborative growth within the regional economy. Technically, the website is built on WordPress with modern plugins and libraries such as jQuery, Bootstrap, and Borlabs Cookie for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, with room for optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact is noted as an area for improvement. Overall, the domain registration and DNS setup appear legitimate and consistent with the business's regional focus. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response information, and consider a vulnerability disclosure policy to further strengthen trust and compliance.

A

ACO GmbH

aco.de

68

ACO GmbH is a German-based company specializing in durable product systems for garden and landscape construction, civil engineering, and basement applications focused on rainwater management. Their solutions encompass rainwater collection, purification, storage, and reuse, supporting sustainable water cycles. The company positions itself as an expert in intelligent and future-oriented drainage systems, serving professional sectors such as construction, landscaping, and infrastructure. The website reflects a mature digital presence with comprehensive content, multi-level navigation, and integration of planning tools and product finders.

W

webXells GmbH

webxells.com

66

webXells GmbH is a German technology company specializing in advanced web solutions, information security, GIS, OSINT, and data integration services. Established in 2008, the company serves a niche market including government agencies and large enterprises, evidenced by client logos such as SAP, Google, and various Brandenburg state entities. Their service offerings include data management, drone data analysis, off-grid emergency communication, and LoRaWAN technologies, positioning them as a trusted provider in specialized technology sectors. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Leaflet.js for interactive maps, with a clean and professional design optimized for mobile devices. The domain is registered with INWX GmbH since 2008, consistent with the company's history, and the website demonstrates good SEO and accessibility practices. However, some security enhancements such as enabling DNSSEC and implementing HTTP security headers are recommended. From a security perspective, the site uses HTTPS and has a login form with password inputs, but lacks explicit security headers and a vulnerability disclosure policy. The privacy policy is comprehensive and GDPR compliant, reflecting a strong commitment to data protection. Contact information is clearly provided, including a designated data protection officer, enhancing trustworthiness. Overall, webXells GmbH presents a professional and credible online presence with a solid business foundation and good privacy compliance. Security posture is moderate with room for improvement in DNS and HTTP header configurations. The site is safe for general audiences with no adult or questionable content detected.

I

Institut für ökologische Wirtschaftsforschung (IÖW)

oekologisches-wirtschaften.de

10

Ökologisches Wirtschaften is a well-established German scientific journal focusing on social-ecological economic topics, bridging research and practical experience in politics and business. It serves a specialized audience interested in sustainable economic development and publishes issues with articles authored by experts. The website is powered by Open Journal Systems, a recognized platform for academic publishing, and is affiliated with reputable institutions such as the Institut für ökologische Wirtschaftsforschung (IÖW) and the oekom verlag publishing house. The content is professionally presented, with clear navigation and good mobile optimization. Technically, the site uses modern JavaScript libraries including jQuery, Bootstrap, and Popper.js, ensuring a responsive and interactive user experience. The hosting is managed via known providers with stable DNS configurations. Security posture is solid with HTTPS enforced and restricted access to subscriber-only PDFs, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. No signs of blocking or WAF interference were detected, allowing full content accessibility. Overall, the security posture is good but could be enhanced by implementing security headers, cookie consent, and publishing incident response contacts. The business credibility is high due to institutional affiliations and professional presentation. No vulnerabilities or suspicious patterns were found. Strategic recommendations include improving privacy compliance and security best practices to further strengthen trust and compliance.

C

Culligan Deutschland GmbH

culligan.de

11

Culligan Deutschland GmbH operates a professional website offering advanced water dispenser solutions primarily targeting business customers in Germany. The company provides a range of products including piped water dispensers, gallon water dispensers, water fittings, and accessories, supported by comprehensive service and maintenance offerings. The website demonstrates a strong market position with over 20,000 companies using their solutions daily. Technically, the site is built on WordPress with Bootstrap and integrates modern analytics and marketing tools such as Piwik PRO, Google Tag Manager, and Visual Website Optimizer, all managed with GDPR-compliant cookie consent. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating a trustworthy and legitimate online presence.

P

Party.Rent

partyrent.com

10

Party.Rent is a leading European rental company specializing in event equipment including furniture, tableware, and catering supplies. The company operates under the parent group Rent.Group and targets event planners, corporate clients, and private individuals across multiple European countries. Their website is professionally designed with a strong focus on user experience, multilingual support, and detailed product offerings. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and CSRF protections, though explicit security policies and headers could be improved. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.