Security Directory

G

GSTC - Global Sustainable Tourism Council

gstcouncil.org

54

The Global Sustainable Tourism Council (GSTC) operates as an international non-profit organization focused on managing global standards for sustainable travel and tourism. It serves as the accreditation body for sustainable tourism certification, providing standards, certification accreditation, training programs, and membership services. The website targets a broad audience including hotels, tour operators, destinations, business travelers, certification bodies, consultants, and travelers. The organization is positioned as a key authority in sustainable tourism with a professional and comprehensive digital presence. Technically, the website is built on WordPress using the Avada theme framework, enhanced with multilingual support via WPML, and optimized for SEO with Yoast SEO Premium. It employs modern technologies including Google Tag Manager, LinkedIn Insight, and CookieYes for cookie consent management. The site is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and integrates bot management services from Akamai and Cloudflare. The cookie consent mechanism is robust, offering detailed categories and user customization. However, the absence of a publicly accessible privacy policy, explicit contact information, and a vulnerability disclosure policy are notable gaps. WHOIS data is unavailable or privacy protected, which is common for non-profit organizations but limits domain trust analysis. Overall, the website presents a low-risk profile with strong professionalism and security posture but would benefit from enhanced transparency in privacy and contact disclosures to improve compliance and trustworthiness.

H

HessenChemie

hessenchemie.de

56

HessenChemie is a regional industry association serving the chemical, pharmaceutical, and plastics processing sectors in Hessen, Germany. The organization provides a range of services including industry representation, publications, training, and events targeted at member companies and stakeholders. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern frontend technologies to deliver content effectively. The target audience includes industry professionals, trainees, and member companies within Hessen's chemical industry. The business model centers on membership services and industry advocacy. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly. Hosting appears to be managed by a professional provider with consistent DNS records. Cookie consent mechanisms are implemented with opt-in features, supporting GDPR compliance. The login form includes security measures such as CSRF tokens. From a security perspective, the site uses HTTPS and secure forms but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The site could improve by adding security headers and a vulnerability disclosure policy. Overall, the security posture is solid but could be enhanced with formal documentation and transparency. The website is trustworthy, with clear contact options, active social media presence, and consistent branding. No adult or questionable content is present. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing security headers to strengthen trust and compliance.

E

Econocom Products & Solutions GmbH

energy-net.de

64

Energy Net, operating under Econocom Products & Solutions GmbH, is a well-established Apple reseller and digital transformation service provider targeting businesses and public institutions primarily in Germany and Europe. The company offers a broad portfolio of services including Apple Enterprise Services, collaboration solutions, device management, financing, and repair services. As part of the publicly listed Econocom Group, Energy Net benefits from a strong market position and extensive experience in technology and service delivery. The website reflects a professional and consistent brand image with clear service offerings and business information. Technically, the site is built on TYPO3 CMS with modern JavaScript modules and includes GDPR-compliant privacy and cookie policies with a consent mechanism. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit security policies are missing. Overall, the site is trustworthy, well-maintained, and business-focused.

H

Heitech Service GmbH

lausitz-hosting.de

46

Lausitz-Hosting, operated by Heitech Service GmbH, is a regional and national internet service provider specializing in web hosting, domain registration, email services, and SSL certificates. The company emphasizes personal customer service and caters to a diverse clientele including small and medium enterprises, large industrial companies, municipalities, and associations primarily in Germany. Their market position is strengthened by a focus on regional identity and trusted certifications such as ISO/IEC 27001 and ITIL frameworks. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Slick Carousel, hosted on servers associated with Heitech. The site is mobile-optimized and presents a professional design with clear navigation. Performance is moderate, with room for improvement in accessibility and SEO optimization. Security posture is solid with HTTPS enforced and hosting in a certified Tier 3 data center, though security headers and incident response details are lacking. From a security and compliance perspective, the site demonstrates adherence to recognized standards and provides privacy and cookie policies, albeit without explicit consent mechanisms. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy and security.txt file suggests an area for enhancement. Overall, the risk profile is low with recommendations to strengthen security headers and privacy compliance. Strategically, Lausitz-Hosting is well-positioned in its niche with a clear business model and trusted service offerings. The website supports business credibility through customer references and certifications, though it could benefit from enhanced transparency in security incident handling and privacy consent.

M

Medyum Şehrazat Hoca

medyum-sehrazat-hoca.de

63

Medyum Şehrazat Hoca operates as a small-scale spiritual and occult service provider primarily targeting Turkish-speaking individuals in Germany and Europe. The website presents a professional and consistent brand image, offering a range of services including love spells, tarot readings, horoscope analysis, and spiritual protection. The business leverages testimonials and direct contact channels to build trust with its audience. Technically, the website uses common frontend frameworks such as Bootstrap and jQuery, with Cookiebot integrated for cookie consent management. While the site is mobile-optimized and user-friendly, it lacks advanced security headers and explicit incident response policies. Overall, the security posture is moderate with room for improvement in formalizing security and privacy policies. The domain registration data aligns with the website's claims, indicating legitimacy. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and improving incident response readiness.

B

Britta Mackenrodt | Privatpraxis für Frauenheilkunde

frauenarzt-mackenrodt.de

63

Britta Mackenrodt operates a private gynecology and obstetrics practice in Köln, Germany, focusing on holistic and personalized women's healthcare. The website presents a professional image with clear descriptions of services such as bioidentical hormones, laser therapy, and preventive medicine. The practice targets female patients seeking advanced and empathetic gynecological care. Technically, the website uses modern web technologies including Bootstrap and Cookiebot for cookie consent management, hosted with DNS services from DomainControl. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are not detected and no explicit security or incident response policies are published. Overall, the website is trustworthy and compliant with GDPR, with clear contact information and no suspicious content.

D

Digt AG

digt.ch

61

Digt AG is a Swiss-based company specializing in community building, brand creation, and product promotion within the e-commerce sector. Their website presents a professional and modern digital presence, targeting businesses seeking to grow their communities, create brands, and promote products in the Swiss market. The company appears to be relatively new, founded around 2021, with a clear focus on service provision in e-commerce and brand distribution. Technically, the website is built on WordPress with a solid tech stack including Bootstrap, jQuery, and SEO tools like Yoast. It is mobile-optimized and uses Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit policies, which could be improved. Overall, the site is trustworthy and professional, with minor gaps in privacy compliance and security transparency.

S

Schweizer Agrarmedien AG

agrarmedien.ch

67

Schweizer Agrarmedien AG is the largest agricultural specialized publishing company in Switzerland, offering a portfolio of print and digital media products including newspapers, magazines, and online marketplaces focused on agriculture, nature, and environment. Their target audience includes farming families, animal and nature enthusiasts, and professionals in the Swiss agricultural sector. The company maintains a strong market position with multiple well-known media brands and digital platforms. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Matomo, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally managed, with room for improvement in security and privacy transparency.

A

Agirc-Arrco

agirc-arrco.fr

58

Agirc-Arrco is a French government-related organization managing supplementary pension schemes for private sector employees. The website provides information and services related to retirement and pension rights, targeting private individuals and retirees. The organization holds a leading position in the French pension market, offering key services such as pension management and online account access. Technically, the website is built on Drupal 11 with modern web technologies and is mobile-optimized, providing a good user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain ownership verification but does not detract from the site's professional appearance and trustworthiness. Overall, the site is safe, well-structured, and serves its audience effectively.

L

Leyendecker bastelstube GmbH & Co. KG

leyendecker-bastelstube.de

51

Leyendecker bastelstube GmbH & Co. KG is a well-established retail business specializing in arts, crafts, and hobby supplies, serving the Trier and Luxembourg regions. With over 61 years of operation, the company offers a broad product range both in-store and online, complemented by services such as an Abhol-Service and event hosting. The website reflects a professional and consistent brand image, targeting creative hobbyists and local customers. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a leading local retailer in its niche.

W

WOMEN'S EHF EURO 2024

catchthespirit2024.com

50

The website catchthespirit2024.com serves as the official digital platform for the Women’s EHF EURO 2024 Handball Championship, providing comprehensive event information including news, schedules, host city details, ticketing links, and multimedia content. It targets handball fans and event attendees, positioning itself as the authoritative source for the championship. The site leverages WordPress CMS with popular plugins such as Elementor and Yoast SEO, and integrates Cookiebot for GDPR-compliant cookie consent management. External partnerships for ticketing and merchandise are clearly linked, enhancing the user journey for event participation. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, with multilingual support via WPML. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is partial due to missing explicit privacy and terms of service pages. No direct contact information or incident response details are published, which could impact user trust and compliance. Overall, the website presents a professional and trustworthy front for the event, with good content quality and user experience. However, enhancing privacy disclosures, security headers, and contact transparency would strengthen compliance and security posture. The domain registration is consistent with the event timeline and shows no suspicious patterns, supporting legitimacy.

M

MaxFun Sports GmbH

maxfunsports.com

46

MaxFun Sports GmbH operates a leading Austrian running sports platform focused on providing comprehensive content, event registration, race results, multimedia, and community engagement for runners and sports enthusiasts primarily in Austria and German-speaking regions. The website is well-structured, content-rich, and professionally designed, offering a broad range of services including news, training plans, and event calendars. The platform integrates modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, and employs a custom CMS likely based on the Yii framework. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism implemented via CookieFirst. Security posture is good with HTTPS and CSRF protections, though some security headers are missing and no explicit security policy or incident response information is provided. The domain WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active business presence. Overall, the website scores well on content quality, technical implementation, and privacy compliance but is penalized for the lack of verifiable domain registration data.

A

Advantour

advantour.com

52

Advantour is a specialized boutique tour operator focusing on private and group tours along the Silk Road, Central Asia, and the Caucasus regions. Established in 2001, the company offers authentic, custom-made travel experiences emphasizing safety, comfort, and expert local partnerships. The website reflects a strong market position with clear branding, rich content, and a professional presentation targeting culturally curious travelers interested in niche destinations. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Yandex Metrika. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is primarily via a web form, with no direct emails or phone numbers visible. Overall, the site is trustworthy, professional, and safe for general audiences.

H

HMC Architects

hmcarchitects.com

55

HMC Architects is a well-established, employee-owned architecture firm founded in 2002, specializing in healthcare, education, and civic space design. The company emphasizes community impact and sustainability through its 'Design For Good' philosophy. The website reflects a professional and consistent brand image with a focus on employee ownership and community service. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and offers a good user experience with clear navigation. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and longevity of the business.

B

BOOKANDPLAY GmbH

bookandplay.de

10

BOOKANDPLAY GmbH operates a specialized online platform focused on tennis court booking and sports facility management primarily in Germany. The website offers a comprehensive booking system for tennis players and clubs, including features such as access control, video surveillance, and automated lighting control to enhance facility management. The platform serves a large user base with over 467,000 members and nearly 30 million bookings, indicating a strong market presence in the niche of sports facility management. Technically, the website employs modern web technologies including Bootstrap and jQuery, with good mobile optimization and accessibility features such as the Eye-Able assistive technology. Security posture is solid with HTTPS enforced and cookie consent implemented, though some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. The WHOIS data is consistent with the business claims, showing professional hosting and no privacy protection, supporting legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

D

Dunlop Sports

dunlopsports.com

50

Dunlop Sports operates a professional e-commerce website specializing in sports equipment and apparel, primarily for tennis, squash, padel, and table tennis. The company is an established player in the retail sports sector with a domain registered since 1995 and owned by PSI-Japan, Inc. The website targets sports enthusiasts and athletes, offering a broad range of products and engaging content such as news and stories. The digital infrastructure leverages modern web technologies including Bootstrap and Google Tag Manager, hosted behind Cloudflare DNS services, ensuring reliable performance and security. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. However, explicit security policies and incident response contacts are not published, indicating room for improvement in transparency and security maturity. Overall, the website presents a trustworthy and professional front with good content quality and user experience.

T

Transports Brevet

brevet.fr

49

Transports Brevet is a well-established French transportation company specializing in the logistics and transport of fresh and frozen products nationwide. Founded in 1966, it operates multiple logistics platforms and offers professional transport and storage services tailored to business clients. The website reflects a medium-sized enterprise with a clear focus on transportation and logistics within France. Technically, the site is built on Joomla CMS with modern front-end libraries such as Bootstrap and jQuery, and it includes Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS registration data is a notable gap, limiting domain trust verification. Overall, the website is functional, professional, and safe for general audiences, but could improve in security transparency and compliance documentation.

G

Groupe Sobotram

sobotram.fr

52

Groupe Sobotram is a well-established French transport and logistics company specializing in general goods and hazardous materials transport, operating both nationally and internationally. Founded in 1953 and acquired by Groupe Blondel in 2023, it maintains strategic locations including a SEVESO high-threshold site. The website reflects a professional business presence with clear service offerings and subsidiary information. Technically, the site uses modern web technologies such as Bootstrap, Mapbox GL JS, and Vimeo API, providing a good user experience with mobile optimization and structured navigation. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

G

Groupe Bernardi

bernardi-logistique.fr

45

Groupe Bernardi is a well-established French transportation and logistics company founded in 1961, specializing in national and international freight transport, storage, and distribution services. The company leverages its membership in the ASTRE network to extend its market reach and offers a variety of services including palletized freight, bulk transport, and logistics solutions. Their digital presence includes an online booking platform and client portals, reflecting a moderate level of digital maturity. Technically, the website is built on the SPIP CMS with modern web technologies such as Bootstrap and JavaScript libraries. It features responsive design and good SEO practices, although some accessibility features could be improved. The site uses HTTPS and includes GDPR-compliant cookie consent mechanisms, indicating attention to privacy and security. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, supporting the legitimacy of the domain and company. Overall, the website presents a professional and trustworthy image with solid business credibility and compliance. Strategic improvements in security headers and incident response transparency would further enhance their security posture.

A

AVANZINI

avasped.it

46

Avanzini is a well-established Italian logistics and transportation company with over 30 years of experience, primarily serving clients in Italy and across Europe. The company offers comprehensive transport and integrated logistics solutions, including specialized services for wine, beer, and alcoholic products. Their market position is strong in Verona, supported by multiple operational sites and a significant volume of shipments and warehouse space. Technically, the website employs modern JavaScript libraries and frameworks, ensuring a good user experience with mobile optimization and basic accessibility. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Overall, the website reflects a professional and trustworthy business with clear contact information and certifications that enhance credibility.

T

Transports Adam

transports-adam.com

58

Transports Adam is a French transport and logistics company based in Joinville, established in 1965. The company specializes in industrial road transport, exceptional transport, handling works, and storage services. The website presents a professional image with clear service offerings and contact options, including phone and social media. Technically, the site uses modern web technologies such as Bootstrap, Matomo analytics, and cookie consent management via tarteaucitron. The hosting is provided by OVH, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. Privacy policies and terms of service are not explicitly found, indicating room for compliance improvement.

B

Berner

berner.com

63

Berner is a well-established manufacturer specializing in air curtains and air doors, serving commercial and industrial markets primarily in the United States. The company positions itself as a leading North American manufacturer with a focus on energy savings, indoor air quality, and sustainable solutions. Their website reflects a mature digital presence with comprehensive product information, technical support, and customer engagement tools. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as Google Tag Manager, Hotjar, and Adobe Analytics. Security posture is strong with HTTPS enforced and a robust cookie consent mechanism, although some security headers could be improved. Privacy compliance is well addressed with clear policies and granular cookie controls. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, supported by consistent WHOIS data and domain age.

The website bpforum.net serves as the official platform for the 2025 Business Post Finance Forum held in Hanoi, Vietnam, focusing on expanding Korea-ASEAN financial cooperation. Hosted by the Korean media company 비즈니스포스트, the site targets financial professionals, policymakers, and investors interested in ASEAN and Vietnamese financial markets. The business model centers on organizing specialized finance forums to facilitate networking and knowledge sharing. The site content is primarily in Korean with professional event details, speaker introductions, and partner information, reflecting a focused niche audience. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Owl Carousel, and Animate.css, hosted on AWS infrastructure. The site is mobile-optimized with good navigation and design quality, though SEO and accessibility features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical setup. From a security perspective, the domain uses clientTransferProhibited status but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. The absence of privacy and cookie policies indicates compliance gaps, especially under GDPR. No incident response or vulnerability disclosure information is provided. WHOIS data is transparent and consistent with the business, supporting legitimacy. Overall, the site is professionally presented and credible for its business purpose but would benefit from improved security practices and privacy compliance to strengthen trust and regulatory adherence.

P

P3 DIGITAL / GROUP

p3digital.group

10

P3 DIGITAL / GROUP is a German media agency specializing in web development, video production, and recruiting services. The company offers a range of digital media solutions including multilingual web platforms, SEO-optimized websites, creative video content, and employer branding tools. Their market position is supported by a diverse client portfolio and professional online presence. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and includes SEO and GDPR compliance features. Security posture is solid with HTTPS enforced and cookie consent management implemented, though security headers could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a credible digital media service provider.

I

ITSG GmbH

itsg.de

62

ITSG GmbH is a medium-sized German company specializing in the development and operation of innovative IT applications for digital communication in the healthcare and social sectors. The company targets healthcare organizations and social service providers, offering specialized IT solutions to enhance digital communication. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and detailed privacy policies. No critical vulnerabilities or suspicious WHOIS data were found, indicating a trustworthy domain registration. Overall, the website presents a credible and professional digital presence aligned with its business focus.

E

Employer-Branding-Suite

employer-branding-suite.com

40

Employer-Branding-Suite.com is a German-based small business specializing in comprehensive employer branding solutions targeted at companies seeking to attract and engage talent, particularly SMEs. Their offerings include career websites, recruiting videos, photo impressions, video interviews, and social media packages. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and frameworks, ensuring a stable and maintainable infrastructure. Security posture is good with HTTPS, cookie consent, and spam protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site demonstrates high professionalism and trustworthiness with transparent business information and active customer engagement channels.

M

Ministerium für Wirtschaft, Arbeit und Tourismus Baden-Württemberg

gut-ausgebildet.de

57

gut-ausgebildet.de is an official educational and vocational training information portal supported by the Ministry of Economy, Labor and Tourism Baden-Württemberg. It serves as a comprehensive resource for students, trainees, parents, and educators in the Baden-Württemberg region, providing detailed information on apprenticeship opportunities, career guidance, and related initiatives such as Praktikumswoche and AzubiCardBW. The platform is well-positioned as a trusted government-backed source with strong partnerships across regional economic and labor organizations. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. The use of no-cookie YouTube embeds and a clear cookie consent mechanism reflects a commitment to privacy compliance. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns with the website's official nature, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, gut-ausgebildet.de presents a secure, professional, and trustworthy platform with excellent content quality and strong business credibility. Strategic improvements could include enhancing HTTP security headers and publishing explicit security and incident response policies to further strengthen security posture and user trust.

Jubla Interlaken is a well-established Swiss non-profit youth organization founded in 1946, providing community, recreational, and developmental activities for children and teenagers in the Interlaken region. The website effectively communicates its mission and services, targeting local youth and families with a clear focus on group activities, camps, and social events. The organization maintains a consistent brand presence and offers multimedia content to engage visitors. Technically, the website is built on WordPress using popular plugins and frameworks such as Elementor and Bootstrap, ensuring a modern and responsive design. While performance is moderate and mobile optimization is good, accessibility and SEO could be further improved. The site uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and explicit security policies. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent but lacks published security policies, incident response contacts, and security headers that would enhance protection. No critical vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's profile. Overall, Jubla Interlaken's website is a credible and professional platform for its non-profit activities, with room for improvement in security posture and privacy compliance to better protect users and enhance trust.

Jubla Shop is an e-commerce platform operated by Jungwacht Blauring Schweiz, a Swiss youth organization. The website offers a range of merchandise, promotional items, tools, and gift cards targeted primarily at members and supporters of the organization. The business operates in a niche retail market within Switzerland, focusing on branded fan articles and related products. The site is well-branded and consistent with the organization's identity, providing clear contact information and social media links to engage its community. Technically, the website is built on the Sylius e-commerce platform with Bootstrap and Font Awesome for UI components. It demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The site uses secure HTTPS connections and includes CSRF tokens in forms, but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. From a security perspective, the site shows a reasonable posture with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and lack of security headers represent compliance and security gaps. The WHOIS data aligns well with the business entity, indicating legitimacy and trustworthiness. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security hardening.

M

mediaspects Beratungsgesellschaft für neue Medien mbH

mediaspects.com

47

Mediaspects Beratungsgesellschaft für neue Medien mbH is a German technology company specializing in software development, telemedicine, online competence, consulting, and OEM development services. Established in 2005, the company targets business clients seeking digital media and healthcare technology solutions. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is minimal with a basic privacy policy and no cookie banner. Overall, the website presents a professional image with clear contact information and consistent branding, but could improve in privacy and security transparency.

W

websiteria GmbH

supcura.ch

48

Supcura, operated by websiteria GmbH, is a Swiss-based small technology company specializing in developing and customizing software applications for the healthcare sector. Their product suite includes several apps designed to optimize healthcare workflows such as rental management, scheduling, notifications, locating assets, and barcode scanning. The company targets healthcare providers seeking digital transformation solutions. The website presents a professional and consistent brand image with clear contact information and client references, positioning itself as a niche player in healthcare technology solutions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common plugins such as Yoast SEO and Tidio chat for marketing and customer engagement. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement in security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and well-maintained with no signs of malicious content or blocking mechanisms.

GUROM is a German online platform focused on mobility safety, providing tools for analyzing and preventing accidents on work, school, and business routes. The website targets individuals, companies, and educational institutions, offering tailored prevention measures based on comprehensive mobility hazard analysis. The platform is positioned as a niche service in transportation safety with partnerships from reputable organizations such as DVR and AUVA. Technically, the site is built on TYPO3 CMS with standard web technologies including jQuery and Bootstrap, and it implements HTTPS and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with no critical vulnerabilities detected, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, but lacks some advanced SEO and accessibility features.

H

HostGator | India

hostgator.in

75

HostGator India is a well-established web hosting provider offering a broad range of hosting services including shared, WordPress, cloud, VPS, dedicated servers, domain registration, and website security solutions. The company targets individuals and businesses in India seeking reliable and affordable hosting solutions. The website prominently announces an upcoming merger with BigRock, indicating strategic consolidation in the Indian hosting market. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google Analytics, and various marketing and tracking tools, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and well-positioned in the Indian hosting sector, though it could improve transparency around privacy and security policies.

I

IGT – Institut für Gebäudetechnologie GmbH

igt-institut.de

55

IGT – Institut für Gebäudetechnologie GmbH is an independent German institute specializing in consulting, training, and lectures focused on modern building technology, smart buildings, energy efficiency, and e-mobility. The company targets professionals and organizations seeking expertise in these areas, offering tailored services including inhouse and web-based training. Their market position is that of a niche expert institute with a clear focus on innovative building solutions. Technically, the website is built on WordPress 6.2.8, utilizing Bootstrap for responsive design and common plugins such as Contact Form 7 and Matomo for privacy-conscious analytics. Hosting is provided by rzone.de, a German hosting provider, and the site employs HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent banner. However, no explicit security headers were detected in the provided data, and there is no published security policy or incident response contact. The use of Matomo analytics indicates a privacy-aware approach. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve its security posture by implementing additional HTTP security headers and publishing security-related policies. The business information is clear and consistent with the domain registration data, supporting a legitimacy score of 80 out of 100.

X

XWiki SAS

xwiki.com

73

XWiki SAS is a well-established technology company specializing in open source knowledge management and collaboration software. With over 20 years of experience, it offers a range of standard and custom solutions including cloud hosting, support, and consulting services. The company serves a broad business audience, including large enterprises such as Amazon and Lenovo, positioning itself as a trusted provider in the enterprise wiki and collaboration market. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the XWiki platform with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain protection, and use of CAPTCHA, though explicit security policies and vulnerability disclosures are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high business credibility and technical maturity with moderate user tracking for analytics and marketing purposes.

T

Tennisverband Pfalz e.V.

tvpfalz.de

56

The Tennisverband Pfalz e.V. is a regional tennis association based in Kaiserslautern, Germany, serving tennis players, clubs, and enthusiasts in the Pfalz region. The website provides news, tournament information, training opportunities, and organizational details, positioning itself as a key regional sports entity. The business model is non-profit and community-focused, emphasizing sports development and engagement. Technically, the site is built on TYPO3 CMS with Bootstrap for responsive design and includes accessibility enhancements via eyeAble scripts. The hosting is provided by kundenserver.de, indicating a professional hosting environment. Security posture is moderate; HTTPS is implied, and secure login forms are present, but security headers and explicit security policies are lacking. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-structured but could improve in security and privacy transparency. Strategic recommendations include implementing security headers, cookie consent, and publishing security policies to enhance trust and compliance.

S

STEINBILD

steinbild-collection.com

55

STEINBILD is a German-based e-commerce retailer specializing in unique handcrafted natural stone wall art. Founded in 2023, the company targets consumers and business customers seeking exclusive design objects made from natural stone. The website is professionally designed, mobile-optimized, and offers a clear navigation structure including product categories, B2B dealer access, and personal design consultation services. Technically, the site is built on the Shopware platform, leveraging modern web technologies and integrating analytics and review widgets. Security posture is good with HTTPS, CSRF protection, and domain status locks, though improvements like DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the business presents a credible and trustworthy online presence with a niche market focus.

O

OWL Verkehr GmbH

teutoowl.de

57

OWL Verkehr GmbH operates as a regional public transportation service provider and information portal for the TeutoOWL network in Germany. The company offers a range of services including schedule information, ticket sales (such as Deutschlandticket, JobTickets, and SchülerTickets), subscription management, and mobility services like call-collect taxis and night buses. The website targets public transport users in the OWL region, providing comprehensive and accessible information to facilitate mobility. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and FontAwesome. It employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. The site is hosted on infrastructure associated with DomainControl, uses HTTPS with strong SSL configuration, and demonstrates good mobile optimization and accessibility. From a security perspective, the website enforces HTTPS and uses privacy-friendly analytics. However, it lacks explicit security policy documentation and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transportation entity. Overall, the site maintains a good security posture with room for improvement in transparency and security headers. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining regular security audits to sustain and improve the security posture.

E

Energieversum GmbH & Co. KG

energieversum.de

70

Energieversum GmbH & Co. KG is a German company specializing in photovoltaic and solar energy solutions, offering comprehensive all-inclusive packages for residential and commercial customers. The company is positioned as a reliable provider with a strong market presence, supported by its affiliation with the EnBW Group, one of Germany's largest energy companies. Their services include photovoltaic systems, energy storage, electric vehicle charging stations, heat pumps, and financing options, targeting customers seeking sustainable and cost-effective energy independence. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and integrates marketing and consent management tools like Google Tag Manager, Visual Website Optimizer, and Usercentrics CMP. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be managed via 1&1 IONOS, inferred from nameservers. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the security posture and compliance maturity.

S

Stadt Bielefeld

bielefeld.de

57

The website www.bielefeld.de is the official digital presence of the city of Bielefeld, Germany, serving as a comprehensive portal for municipal services, community information, city development, culture, and events. It targets residents, visitors, and businesses, providing a wide range of services including appointment scheduling, public announcements, and career opportunities. The site is well-positioned as the authoritative source for city-related information and services. Technically, the site is built on Drupal 10 with Bootstrap framework, hosted likely by Deutsche Telekom, and integrates privacy-conscious analytics via Matomo with cookies disabled and DoNotTrack respected. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows privacy best practices. However, it lacks explicit security policies or incident response information and could improve by adding additional security headers and a vulnerability disclosure policy. Overall, the security posture is solid but could be enhanced. The risk assessment is low given the official nature, absence of suspicious content, and good privacy compliance. Strategic recommendations include strengthening security headers, publishing security policies, and enhancing transparency around incident response and vulnerability disclosures.

R

RBA

rba.es

59

RBA is a leading Spanish media group specializing in the publication of magazines, books, and collectibles. The company operates multiple business divisions with dedicated websites and e-commerce platforms, serving a broad general audience interested in media and publishing products. The website presents a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are not explicitly detected and could be improved. WHOIS data is unavailable due to access restrictions from the Spanish domain registry, limiting full domain legitimacy assessment. Overall, the site is safe, compliant, and professionally maintained, with moderate user tracking and good privacy practices.

M

MITSUBISHI MOTORS

mitsubishi-motors.de

64

MITSUBISHI MOTORS Germany operates a professional website showcasing their automotive models, services, and offers with a focus on modern mobility including electric and plug-in hybrid vehicles. The site targets German automotive consumers and provides detailed navigation for models and services. The technical infrastructure is based on TYPO3 CMS with modern frontend technologies and includes comprehensive cookie consent and analytics integration. Security posture is good with HTTPS and cookie consent but lacks explicit security policies or vulnerability disclosures. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

E

e-mobil BW GmbH

emobil-sw.de

61

e-mobil BW GmbH operates the Cluster Elektromobilität Süd-West, a regional network focused on advancing electromobility and digitalization in the energy and transportation sectors. The cluster facilitates collaboration among companies, research institutions, and stakeholders to accelerate innovation and market development in Baden-Württemberg and surrounding regions. Their services include project coordination, working groups, internationalization support, and educational initiatives, positioning them as a key player in the regional electromobility ecosystem. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. The site is well-structured, SEO-optimized, and provides a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business identity, supporting legitimacy. Overall, the website demonstrates a strong business credibility and technical maturity with minor areas for improvement in security transparency and contact information. The risk profile is low, and the site effectively supports the cluster's mission and stakeholder engagement.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

invitu

invitu.ch

43

invitu.ch is a Swiss-based online platform specializing in stylish and quick event invitations for private, corporate, and public events. The website offers a user-friendly interface with various event categories and customizable invitation templates, targeting individuals and companies in Switzerland. The business operates as a small-sized entity focusing on digital event invitation services with a clear market niche. Technically, the site employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and user behavior tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The website is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some advanced security policies and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is legitimate and trustworthy with room for improvement in privacy and security documentation.

S

Sportjugend Nordrhein-Westfalen

sportjugend.nrw

47

Sportjugend Nordrhein-Westfalen is a regional youth sports organization affiliated with the Landessportbund Nordrhein-Westfalen, focusing on youth engagement, sports education, volunteer services, and community programs in the German state of North Rhine-Westphalia. The website serves as a comprehensive portal for information on various youth sports initiatives, qualification programs, and events, targeting young people, sports clubs, and volunteers. Technically, the site is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager, Google Analytics, and accessibility tools like ReadSpeaker. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism aligned with GDPR requirements. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is typical and justified for a non-profit organization. Overall, the website demonstrates a mature digital presence with good content quality and compliance, supporting its role as a trusted regional youth sports entity.

H

Hessischer Turnverband e.V.

htv-online.de

62

Hessischer Turnverband e.V. (HTV) is a regional non-profit sports federation dedicated to gymnastics and related sports in Hessen, Germany. The organization provides a broad range of services including competitions, training and certification for trainers and volunteers, club consulting, and events. The website serves as an information hub for members, clubs, and sports enthusiasts, emphasizing education, child welfare, and community engagement. HTV holds a strong market position as the authoritative body for turn sports in Hessen, supported by partnerships with related organizations and events. Technically, the website is built on TYPO3 CMS with a modern frontend leveraging Bootstrap and jQuery. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on reliable infrastructure with good mobile optimization and accessibility features. SEO and metadata are well implemented, supporting discoverability and user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics settings. While some standard security headers are not explicitly confirmed, no critical vulnerabilities or exposed sensitive data were detected. The privacy policy and cookie consent mechanisms are comprehensive and transparent, with clear contact details including a data protection officer. However, no explicit security policy or incident response information is published. Overall, HTV's website demonstrates a mature digital presence with strong compliance to privacy regulations and a solid security posture. The site effectively supports its business goals and community engagement while maintaining user trust. Strategic improvements in security headers and updating legacy libraries could further enhance its security and compliance standing.

K

Korbball in Bayern

korbball-bayern.de

38

The website 'Korbball in Bayern' serves as an informational platform dedicated to the sport of Korbball in the Bavaria region of Germany. It provides news, event updates, and community information targeted at Korbball players and enthusiasts. The site is built on Joomla CMS and incorporates modern web technologies such as jQuery and Bootstrap, with Usercentrics managing cookie consent and Facebook SDK integrated for social media features. Hosting is provided by a German hosting provider, agenturserver, as indicated by the nameservers. The website is accessible without any WAF or security challenges, indicating no blocking or content restrictions. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is partially addressed through the Usercentrics cookie consent mechanism; however, no dedicated privacy policy or terms of service pages were found. Contact information such as emails or phone numbers is absent, which limits direct communication channels for users or security incident reporting. Overall, the website presents a basic but functional digital presence for a niche regional sports community. The security posture is moderate but could be improved by implementing security headers, publishing privacy and security policies, and providing clear contact information. The content is safe for general audiences with no adult or explicit material detected.

L

Landessportbund Berlin

lsb-berlin.net

44

Landessportbund Berlin is a well-established non-profit organization dedicated to promoting and supporting sports activities and clubs in Berlin. The website serves as a comprehensive portal offering information on funding, training, programs, and child protection initiatives, targeting sports clubs, athletes, and the general public interested in sports. The organization holds a strong market position as a key regional sports umbrella body with extensive partnerships and community engagement. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and Font Awesome, hosted by Claranet. It incorporates accessibility tools such as eyeAble and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, well-structured, and performs moderately well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. While some security headers are not explicitly visible in the provided content, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published vulnerability disclosure or incident response contacts suggests areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, presenting minimal risk. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen security posture and trust.