Security Directory

N

NavVis GmbH

navvis.com

71

NavVis GmbH is a technology company specializing in advanced reality capture and digital twin solutions, serving industries such as surveying, construction, manufacturing, and process plants. The company offers a combination of hardware products like the NavVis MLX and VLX series, alongside software platforms such as NavVis IVION, enabling clients to capture, process, and access spatial data efficiently. NavVis positions itself as an innovative leader in handheld and wearable laser scanning technology with a strong B2B focus. Technically, the website is built on the HubSpot CMS platform, integrating modern analytics and marketing tools including Google Tag Manager, Matomo, Hotjar, and Usercentrics for privacy compliance. The site is well-optimized for SEO, mobile responsiveness, and accessibility, featuring structured data and comprehensive cookie consent mechanisms. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes standard security headers. Forms are protected with reCAPTCHA, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of explicit incident response contacts and vulnerability disclosure policies represents an area for improvement. Overall, the website demonstrates a high level of professionalism, technical maturity, and privacy compliance, though the lack of WHOIS transparency slightly impacts trustworthiness. Strategic recommendations include publishing terms of service, incident response information, and vulnerability disclosure details to enhance security posture and user trust.

M

Mercedes-Benz Trucks

mercedes-benz-trucks.com

66

Mercedes-Benz Trucks, a division of Daimler Truck AG, operates a professional and comprehensive website showcasing their transport solutions including electric trucks and related services. The website demonstrates a mature digital infrastructure with modern technologies such as Adobe Experience Manager, Usercentrics consent management, and Matomo analytics. The content is well-structured, visually appealing, and optimized for accessibility and SEO. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response information are not publicly detailed. The WHOIS data for the domain is missing or unavailable, which is unusual but does not detract from the evident legitimacy of the brand and website content. Overall, the site is trustworthy, professional, and well-maintained.

Thomas Built Buses is a well-established manufacturer specializing in school and commercial buses, including electric models. As a subsidiary of Daimler Truck North America LLC, it holds a strong market position with a comprehensive dealer network and a focus on safety and innovation. The website reflects a professional and consistent brand image, targeting school districts, transportation professionals, and parents. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for performance, SEO, and accessibility. Security posture is strong with HTTPS, CAPTCHA on forms, and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. Overall, the site is trustworthy, compliant with privacy regulations, and provides a positive user experience.

F

Freightliner

freightlinertrucks.com

63

Freightliner is a leading manufacturer of heavy-duty trucks, specializing in on-highway, vocational, electric, and natural gas trucks. The company operates as a division of Daimler Truck North America LLC, positioning itself as a major player in the transportation sector with a strong focus on innovation, reliability, and customer service. The website provides comprehensive product information, dealer locators, financing options, and driver training resources, targeting commercial fleet operators and vocational truck buyers. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates multiple marketing and analytics tools including Microsoft Application Insights, Google Tag Manager, and Usercentrics CMP for cookie consent management, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and use of consent management, though explicit security headers are not visible in the HTML. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual but the website's branding and content strongly support legitimacy. Overall, the site is professional, well-structured, and compliant with privacy regulations, making it a trustworthy digital presence for Freightliner.

M

Messe München GmbH

productronica.com

65

productronica.com is the official website for the world-leading trade fair for electronics development and manufacturing, organized by Messe München GmbH. The site provides comprehensive information about the event, including exhibitor directories, program highlights, and visitor services. It targets industry professionals and companies involved in electronics manufacturing technologies. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern JavaScript modules, cloud hosting, and a consent management platform to ensure compliance and performance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is robust, with clear privacy and cookie policies and a user consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness, supporting the event's global reputation.

C

CarStore AS

car-store.no

64

CarStore AS operates the Carstore.no website, a professional Norwegian platform specializing in the sale of quality-tested used cars from multiple brands. The company offers a comprehensive range of services including used car sales, trade-ins, financing, and warranty programs under Carstore Care. The website targets Norwegian consumers seeking a safe and straightforward used car buying experience. Technically, the site is built on modern frameworks such as React and Next.js, integrated with Sitecore CMS, and employs Google Tag Manager and Usercentrics for analytics and consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The WHOIS data shows an anomalous domain creation date in the future, which slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and external references. Overall, Carstore.no presents a trustworthy, professional, and user-friendly platform for used car transactions in Norway.

H

Hedin IT AB

carstore.fi

57

Carstore.fi is a Finnish online platform specializing in the sale of used cars, operated by Hedin IT AB, a Swedish company. The website offers a wide range of carefully selected used vehicles, including electric, hybrid, petrol, and diesel cars, targeting consumers in Finland seeking reliable and competitively priced automobiles. The business model focuses on retail sales, trade-ins, and additional services such as car maintenance and warranty through Carstore Care. The company has a solid market position as a specialist in used cars with a professional online presence and clear customer engagement channels. Technically, the website is built using modern web technologies including React and Next.js, hosted likely on Microsoft Azure infrastructure, and managed via Sitecore CMS. It employs Google Tag Manager and Usercentrics for analytics and consent management, ensuring compliance with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, uses standard security headers, and does not expose sensitive data. However, DNSSEC is not implemented, and there is no publicly available security policy or incident response information. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, carstore.fi demonstrates a high level of professionalism, security, and compliance suitable for its business domain. Strategic recommendations include implementing DNSSEC, publishing a dedicated security policy, and adding a vulnerability disclosure mechanism to further enhance trust and security posture.

M

MLP Finanzberatung SE

mlp-hamburg.de

69

MLP Finanzberatung SE operates a professional financial advisory website focused on the Hamburg region, offering a broad range of financial services including asset management, retirement planning, insurance, financing, and real estate investment. The site targets private customers, medical professionals, students, and corporate clients, positioning itself as a trusted partner in financial decision-making. The business model centers on personalized, networked financial consulting supported by an expert team. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and a GDPR-compliant cookie consent mechanism via Usercentrics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy are absent. Privacy compliance is strong with clear links to privacy and cookie policies. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear navigation and high-quality content.

5

50Hertz Transmission GmbH

50hertz.com

63

50Hertz Transmission GmbH operates as a leading transmission system operator in Germany, focusing on integrating renewable energy sources into the power grid and ensuring reliable electricity supply to approximately 18 million people in East Germany and Hamburg. The company maintains a professional and well-structured website that serves multiple stakeholders including partners, customers, investors, and the general public interested in energy transition. The business model centers on grid infrastructure development, system control, market facilitation, and customer services within the energy sector. The website content is relevant and well-organized, reflecting the company's market position and key services effectively. Technically, the website is built on ASP.NET WebForms with a modern front-end stack including jQuery, Kendo UI, and other JavaScript libraries. The site uses DNN CMS and integrates Usercentrics for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO optimization is basic but functional. The site is served over HTTPS with a good SSL configuration, though security headers are not explicitly detected. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating attention to privacy compliance. However, there is no published security policy or incident response contact, and no vulnerability disclosure or security.txt file is found. The absence of WHOIS data for the domain www.50hertz.com is a notable anomaly, potentially indicating domain registration issues or use of alternative domains. Overall, the security posture is solid but could be improved with enhanced transparency and security best practices. The overall risk assessment is moderate with a recommendation to improve domain registration transparency, publish security policies, implement security headers, and enhance accessibility and SEO. These steps will strengthen trust, compliance, and security culture, supporting the company's strategic goals in the energy sector.

H

Hofmann Recycling

hofmann-recycling.de

56

Hofmann Recycling is a small, regionally focused certified waste disposal and recycling company based in Zwickau, Germany. The company offers a broad range of services including waste collection, recycling, container rental, and disposal solutions. Their website reflects a professional and consistent brand image targeting both private and commercial customers in the local area. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a GDPR-compliant consent management platform. Analytics are implemented via Google Analytics 4 and Universal Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, though improvements in security transparency and contact information availability could enhance credibility further.

DKV Mobility is a well-established European B2B provider specializing in tank cards, toll services, and fleet management solutions. The company targets fleet operators and businesses with vehicle fleets, offering efficient and comprehensive mobility services across Europe. The website reflects a professional and consistent brand presence with a focus on user experience and compliance with privacy regulations such as GDPR. Technically, the site employs modern JavaScript frameworks including Preact and integrates Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registrant data and lack of explicit security policies or incident response information slightly reduce trustworthiness. Overall, the site is secure, privacy-compliant, and professionally maintained, suitable for its business audience.

H

Hofmann Metall GmbH

hofmann-metall.de

57

Hofmann Metall GmbH is a medium-sized German company specializing in metal recycling and resource recovery, with over 30 years of industry experience. The company operates multiple locations and offers services including metal scrap acceptance, container services, and certified recycling processes. Their market position is solid with certifications such as ISO 9001 and ISO 14001, reflecting a commitment to quality and environmental standards. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries, and integrates GDPR-compliant consent management and analytics tools. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, supporting a clear business model focused on sustainable metal recycling.

M

MLP SE

mlp-se.de

66

MLP SE operates as a financial services group in Germany, providing consulting and financial solutions to private customers, companies, and institutional investors. The website serves multiple audiences including press, investors, and career applicants, reflecting a mature and established market position. The company emphasizes transparency through detailed investor relations, corporate governance disclosures, and a corporate university for training and certification. Technically, the website uses modern tools such as Google Tag Manager and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

K

Kartago SK

kartagotours.sk

54

Kartago SK operates as a Slovak online travel agency specializing in holiday packages, last minute deals, euro weekend trips, and flight tickets. The website targets general consumers in Slovakia seeking travel services. The platform demonstrates a moderate level of digital maturity, utilizing modern technologies such as Vue.js, Google Tag Manager, Usercentrics for consent management, and Google reCAPTCHA for bot protection. Structured data and SEO meta tags are implemented to enhance search visibility. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and formal security policies are absent. Contact information is limited to a phone number, with no email or physical address found in the analyzed content. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Deutsche Bahn Stiftung gGmbH

deutschebahnstiftung.de

66

Deutsche Bahn Stiftung is a German non-profit foundation established in 2013 by Deutsche Bahn AG, focusing on education, integration, and volunteering to strengthen social cohesion. The website reflects a professional and consistent brand presence, offering detailed information about its mission, projects, and the DB Museum. Technically, the site uses CoreMedia CMS, integrates privacy-conscious tools like Usercentrics CMP and Matomo analytics, and enforces strong security practices including HTTPS and security headers. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR, serving a broad audience including volunteers, educational institutions, and the general public.

A

ATG Entertainment GmbH

atgtickets.de

68

ATG Entertainment GmbH operates a professional ticketing platform focused on musicals, concerts, and theater shows primarily in Germany. The company positions itself as a leading provider of live entertainment tickets, offering a wide range of shows and exclusive deals. The website is well-designed, mobile-optimized, and uses modern web technologies including Next.js and Vercel hosting, ensuring fast performance and good user experience. Security posture is solid with HTTPS and Cloudflare DNS, though some security headers and policies could be improved. Privacy compliance is supported by a Usercentrics cookie consent mechanism, but lacks explicit privacy and terms of service pages. Contact information is clearly provided, enhancing business credibility.

D

Dr. Oetker

oetker.fr

62

Dr. Oetker France operates a comprehensive website offering food products, recipes, and consumer engagement through newsletters and social media. The brand is well-established in the retail food sector with a strong market presence in France. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with cookie consent and privacy policies in French. Overall, the website is professional, trustworthy, and user-friendly, supporting Dr. Oetker's brand reputation.

H

H₂ercules Initiative

h2ercules.com

73

The H₂ercules initiative website represents a collaborative project focused on developing a hydrogen infrastructure network in Germany, involving major energy companies such as RWE and Open Grid Europe. The site provides detailed information about hydrogen production, import options, transport, storage, and consumption, targeting industrial stakeholders and policymakers. The digital infrastructure is built on Sitecore CMS with modern frontend technologies and includes GDPR-compliant privacy and cookie management. Security posture is good with HTTPS and consent management, though explicit security policies and incident response information are absent. The missing WHOIS data for the domain is a notable concern for domain legitimacy verification, but the professional content and partner associations support trustworthiness. Overall, the website is well-designed, informative, and serves as a credible platform for the hydrogen initiative.

The RWE Foundation website represents a corporate social responsibility initiative by RWE AG, a major energy company based in Germany. The foundation focuses on sustainable social change through funding charitable projects, supporting education, and providing humanitarian aid. The website is professionally designed, multilingual (German and English), and provides clear navigation to key sections such as funding principles, projects, application forms, and contact information. The presence of an annual report and CEO statement adds to the trustworthiness and transparency of the foundation. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Usercentrics for cookie consent management and Etracker for analytics, demonstrating compliance with GDPR and privacy best practices. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual but the website's professional presentation and corporate backing mitigate concerns. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security headers, publish a security policy and incident response contacts, and consider adding a vulnerability disclosure or security.txt file to improve trust and security culture.

R

RWE Turcas Güney Elektrik Üretim A.Ş.

rwe-turcas.com

64

RWE Turcas Güney Elektrik Üretim A.Ş. is a joint venture between the German utility RWE AG and Turkish energy company Turcas, operating a large, efficient, and environmentally friendly gas-fired combined-cycle power plant in Denizli, Turkey. The company holds a significant market position supplying approximately 1.2% of Turkey's electricity and operates from multiple locations including Ankara, Istanbul, and Denizli. The website presents a professional and comprehensive overview of the business, its mission, and its operations, targeting stakeholders in the energy sector and the general public. Technically, the website uses modern web technologies including JavaScript, CSS, SVG, and UIkit framework, with integration of Google Tag Manager and Usercentrics for consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and reduces overall trustworthiness. Despite this, the website content and branding align with a legitimate corporate entity. Overall, the site is professional, secure, and compliant with privacy regulations, but the lack of WHOIS data and explicit security policies suggests areas for improvement to enhance trust and security posture.

R

RWE AG

rwe.asia

68

RWE AG is a major European energy company with a growing presence in China, focusing on renewable energy, energy trading, and technical advisory services. The website highlights its subsidiaries, RWE Supply & Trading (Shanghai) Co. Ltd. and RWE Technology International GmbH, emphasizing their roles in energy infrastructure and trading within China. The company targets industrial, commercial, and public sector clients, leveraging its extensive experience and global footprint. Technically, the website employs modern web technologies including jQuery, UIKit, and Usercentrics CMP for privacy compliance, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with RWE's corporate identity.

E

Einhard-Verlag GmbH

kirchenzeitung-aachen.de

60

KirchenZeitung Aachen is a regional church newspaper serving the Diocese of Aachen, Germany. It provides weekly news and information about church activities, events, and community stories. The website is professionally designed, mobile-optimized, and integrates modern consent management and privacy-respecting analytics tools. It is affiliated with the Einhard-Verlag GmbH and the Diocese of Aachen, reflecting a strong organizational backing and trustworthiness. The content is primarily in German and targets the Catholic community and interested general public in the region. Technically, the site uses OpenCms as its CMS, Piwik PRO for analytics, and Usercentrics for cookie consent, indicating a mature digital infrastructure.

S

Urlaub in Sachsen-Anhalt zwischen Harz und Elbe: Sachsen Anhalt Tourismus

sachsen-anhalt-tourismus.de

40

The website sachsen-anhalt-tourismus.de serves as a regional tourism portal promoting the German state of Sachsen-Anhalt. It highlights cultural, natural, and historical attractions, targeting tourists interested in exploring the region. The site uses TYPO3 CMS and integrates modern frontend technologies including FontAwesome icons and a carousel library. Usercentrics is employed for cookie consent management, indicating attention to privacy compliance. However, no explicit privacy policy or terms of service pages were found in the provided content, and no direct contact information is visible, which may impact user trust and compliance completeness. The technical infrastructure appears solid with good mobile optimization and SEO practices, but security headers and detailed security policies are not evident. The WHOIS data is minimal but does not raise immediate concerns, though registrant details are sparse. Overall, the site is professional and content-rich, suitable for its tourism promotion purpose, but could improve transparency and security posture.

A

ACOND a.s.

acond.cz

61

ACOND a.s. is a leading Czech manufacturer specializing in heat pumps, air conditioning, and floor heating solutions. With over 12,000 installations, the company serves residential and commercial customers primarily in the Czech Republic and abroad. Their business model focuses on manufacturing, direct sales, installation, and servicing, supported by a strong partner network and comprehensive customer support. The website reflects a professional and trustworthy brand with clear communication of product offerings, warranties, and customer testimonials. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Adform. It employs a consent management platform (Usercentrics) to ensure GDPR compliance. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. From a security perspective, the site uses HTTPS and integrates consent mechanisms for privacy compliance. However, it lacks visible security headers and does not publish an incident response or vulnerability disclosure policy, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, but the overall digital footprint and business information suggest a legitimate and established entity. Overall, the website demonstrates a mature digital presence with strong content quality and privacy compliance, though it would benefit from enhanced security practices and transparent domain registration information.

Longines is a well-established Swiss luxury watch manufacturer with a rich heritage dating back to 1832. The website serves as the official German-language portal for the brand, offering customers a guided selection process for purchasing watches. The site is professionally designed, mobile-optimized, and integrates modern web technologies such as React and Next.js, ensuring a smooth user experience. Social media presence is strong with verified accounts across major platforms, reinforcing brand credibility. From a technical perspective, the website employs advanced monitoring and analytics tools including New Relic and Google Analytics, alongside a consent management platform for GDPR compliance. Security best practices are observed with HTTPS enforcement and appropriate security headers, contributing to a robust security posture. However, explicit links to privacy and cookie policies were not found in the provided content, indicating an area for improvement in transparency and compliance. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness from a domain registration perspective. Despite this, the overall professionalism, branding consistency, and technical maturity suggest the website is legitimate and trustworthy. No signs of content blocking or WAF challenges were detected, allowing full access to the site content. Overall, Longines' website demonstrates a high level of digital maturity and security readiness, with minor gaps in privacy policy visibility. Strategic recommendations include enhancing privacy disclosures, maintaining up-to-date security practices, and improving incident response visibility to further strengthen trust and compliance.

V

VAMED Care Holding Deutschland GmbH

vamed-gesundheit.de

52

VAMED Gesundheit Deutschland is a large healthcare provider specializing in rehabilitation, acute clinics, outpatient medical centers, and senior care facilities across Germany. The company operates multiple clinics and centers, offering a broad range of specialized rehabilitation services including neurological, cardiological, oncological, and post-COVID-19 rehabilitation. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting patients, healthcare professionals, and potential employees. Technically, the website is built on the TYPO3 CMS platform, hosted via Akamai CDN infrastructure, and incorporates modern web technologies including JavaScript and SVG graphics. The site is mobile-optimized, accessible, and SEO-friendly. GDPR compliance is addressed through a cookie consent mechanism powered by Usercentrics, and privacy policies are clearly linked. From a security perspective, the site enforces HTTPS and uses cookie consent tools but lacks explicit security headers and publicly disclosed incident response contacts or vulnerability disclosure policies. No vulnerabilities or sensitive data exposures were detected. WHOIS data aligns well with the business profile, indicating a legitimate and trustworthy domain registration. Overall, the website demonstrates a strong business credibility and technical maturity with room for improvement in security transparency and incident response readiness.

A

Anodur

anodur.fr

50

Anodur is a French company specializing in surface treatment of aluminum and titanium, including anodization and passivation services, with additional marking services such as digital printing and laser engraving. The company operates primarily in the manufacturing sector, targeting industrial clients requiring high-quality surface finishing and protective treatments. Their market position is strengthened by ISO 9001 certification and the recent acquisition of Delcros, expanding their capabilities and geographic reach. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Usercentrics for cookie consent, alongside Google Analytics for user tracking. The site is mobile-optimized with good SEO practices and a professional design, although some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks certain security headers which could enhance protection. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies and consent mechanisms. However, no explicit security policy or incident response contacts are provided, and WHOIS data is unavailable, which slightly reduces trust. No vulnerabilities or exposed sensitive data were detected. Overall, Anodur presents a trustworthy and professional online presence with minor areas for security and technical improvement. The lack of WHOIS transparency is a notable gap but does not outweigh the positive trust signals from certifications and contact transparency.

A

Alianza

alianza.com

58

Alianza operates as a cloud communications platform provider targeting service providers who are launching voice services or upgrading to next-generation solutions. The company positions itself as a cloud-native, carrier-grade platform designed to help service providers compete against OTT voice applications. The website is professionally designed, leveraging WordPress with modern plugins and technologies, and includes SEO and accessibility considerations. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. WHOIS data is unavailable, which reduces trust in domain legitimacy but the website content and branding suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and transparency.

E

EQUINET s.r.o.

jezdci.cz

46

Jezdci.cz is a Czech media platform specializing in equestrian sports, providing news, event schedules, live streaming information, and community engagement through fan clubs and applications. Operated by EQUINET s.r.o., the website serves a niche audience of equestrian enthusiasts primarily in the Czech Republic. The site demonstrates a solid market position within this specialized media sector, offering advertising opportunities and partnerships with related equestrian media entities. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and media presentation, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and consent management implemented, though there is room for improvement in security headers and explicit policy disclosures. The absence of WHOIS data is a notable concern for domain legitimacy, but the website content and business information appear professional and trustworthy. Overall, the site is a well-maintained media resource with moderate technical maturity and a good user experience.

W

WAREMA Renkhoff SE

warema-group.com

61

WAREMA Renkhoff SE operates as a leading manufacturer specializing in innovative sun protection and plastic engineering solutions. The company holds a strong market position in its sectors, offering a broad portfolio that includes sun and weather protection products as well as precision plastic components for automotive, medical, and sun protection industries. Their business model emphasizes innovation, partnership, and quality, targeting both B2B and end consumers. The website reflects a professional corporate presence with consistent branding and comprehensive content in German, supported by multiple subsidiary brands and active social media channels. Technically, the website employs modern web technologies including Google Tag Manager and a Usercentrics consent management platform, ensuring GDPR compliance and user privacy controls. The site is mobile-optimized with good SEO practices and moderate performance. However, some security best practices such as explicit security headers are not evident from the provided data. The absence of WHOIS registration details raises concerns about domain legitimacy, though the professional presentation and contact information mitigate some risk. From a security perspective, HTTPS is enforced and privacy policies are comprehensive, but the lack of visible security headers and incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a solid security posture but would benefit from enhanced transparency and security policy disclosures. Strategically, it is recommended to verify domain registration status, implement additional security headers, publish clear incident response contacts, and maintain rigorous privacy compliance to strengthen trust and resilience. The company’s digital maturity is good, supporting its market leadership and customer engagement effectively.

W

WAREMA Renkhoff SE

warema.com

66

WAREMA Renkhoff SE is a well-established manufacturer specializing in high-quality sun protection solutions such as awnings, blinds, roller shutters, and patio roofs. The company targets both private and business customers across multiple European countries, supported by dedicated portals and multilingual websites. Their market position is strong, supported by consistent branding and a comprehensive product offering. Technically, the website employs modern web technologies including StencilJS and a consent management platform, ensuring good performance, mobile optimization, and GDPR compliance. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given the professional presentation and extensive online presence. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations.

C

Carxpert Automotive

carxpert.ch

67

Carxpert Automotive operates a network of independent quality garages in Switzerland, offering comprehensive automotive services including consultation, diagnosis, maintenance, and repair for all vehicle brands. The website positions itself as a trusted network with ongoing partner additions and a focus on quality service. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern tools such as Google Tag Manager and Usercentrics for analytics and consent management. The site is multilingual and mobile-optimized, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in its market niche.

A

activeMind AG

activemind.de

70

activeMind AG is a German-based consulting and technology firm specializing in data protection, information security, and artificial intelligence. The company positions itself as a strong partner for businesses seeking expert guidance in these critical areas, leveraging certifications such as ISO 27001 to establish trust and credibility. Their website reflects a professional and modern digital presence, targeting business clients requiring compliance and security consulting services. The firm operates primarily in the technology sector with a medium-sized organizational footprint.

P

pso vertriebsprogramme GmbH

pso-vertrieb.de

37

pso vertriebsprogramme GmbH is a German-based company specializing in digital referral marketing and incentivization solutions, boasting over 20 years of experience and more than one million recommendations. The company targets businesses seeking to enhance customer acquisition and retention through innovative digital sales programs, including referral programs, sales partner solutions, and omnichannel sales strategies. Their market position is that of an established medium-sized B2B service provider with a strong reputation and a consistent brand presence. Technically, the website is built on WordPress using Elementor and Gravity Forms, optimized with WP Rocket for performance, and integrates Usercentrics for GDPR-compliant consent management. The use of Matomo analytics indicates a preference for privacy-conscious tracking. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs anti-spam measures, and monitors CSP violations, indicating a good security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the company. Strategic recommendations include enhancing security transparency, publishing a vulnerability disclosure policy, and continuing to maintain GDPR compliance and technical modernization.

P

pso vertriebsprogramme GmbH

pso-vertriebsprogramme.de

47

pso vertriebsprogramme GmbH is a German-based company specializing in digital referral and incentivization solutions with over 20 years of experience and more than one million recommendations. The company targets businesses seeking to enhance customer acquisition and retention through innovative digital sales programs, including referral programs, sales partner solutions, incentivization programs, and omnichannel sales strategies. Their market position is that of an established and trusted provider in the technology sector, supported by professional branding and client testimonials. Technically, the website is built on a modern WordPress platform using Elementor for design and Gravity Forms for data collection. Performance optimizations such as WP Rocket and lazy loading are implemented, and the site integrates a GDPR-compliant consent management platform (Usercentrics) and anti-spam measures (CleanTalk). Analytics are handled via a self-hosted Matomo instance, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs best practices like consent management and anti-spam plugins. However, explicit security headers are not clearly detected, and no formal security policy or incident response information is published. There are no visible vulnerabilities or exposed sensitive data. Overall, the security posture is good but could be improved with additional headers and formal policies. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing a security policy, adding vulnerability disclosure mechanisms, and improving accessibility compliance to further strengthen trust and compliance.

L

Liechtenstein Olympic Committee

olympic.li

66

The Liechtenstein Olympic Committee (LOC) operates as the national Olympic authority for Liechtenstein, focusing on athlete support, sports infrastructure development, and promotion of Olympic values. The website serves as an information hub for athletes, sports organizations, volunteers, and the general public interested in sports activities within Liechtenstein. It offers detailed navigation to various services, educational programs, and Olympic mission information, reflecting a well-structured non-profit organization with a clear mission. Technically, the website is built on the Concrete5 CMS platform, utilizing modern web technologies such as jQuery, Font Awesome, and integrates a GDPR-compliant consent management platform (Usercentrics). The site demonstrates good mobile optimization and moderate performance, with appropriate use of security headers and HTTPS encryption ensuring a secure browsing experience. From a security perspective, the site follows best practices including HTTPS enforcement and consent management for cookies. However, it lacks explicit privacy policy and terms of service pages, as well as incident response contact details, which are important for full compliance and transparency. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website presents a trustworthy and professional digital presence for the LOC, with recommendations to enhance privacy disclosures and incident response information to further strengthen compliance and user trust.

D

Die Johanniter

johanniter.de

71

Die Johanniter is a large, established non-profit organization in Germany focused on healthcare, social support, education, and volunteering. Their website offers comprehensive information about their services, including medical help, social assistance, child and youth programs, and fundraising opportunities. The organization targets a broad audience including individuals seeking care, volunteers, and donors. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Usercentrics for consent management, Google Tag Manager, Hotjar for analytics, and Yext Answers for search functionality. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is good with HTTPS and consent mechanisms in place, though explicit security headers and a published security policy are absent. WHOIS data is minimal but consistent with the organization's profile, showing no suspicious patterns. Overall, the website is trustworthy, professional, and compliant with privacy norms, though it lacks explicit privacy and terms of service pages in the provided content.

Ö

Österreichische Lotterien Gesellschaft m.b.H.

win2day.at

63

win2day.at is the official Austrian online gambling platform operated by Österreichische Lotterien Gesellschaft m.b.H., offering a comprehensive range of lottery, casino, poker, and sports betting services. The website targets adult users in Austria, providing licensed and regulated gambling products with a strong emphasis on trust and fair play. The platform is well-positioned as Austria's sole licensed online gambling operator, leveraging its state-backed legitimacy and broad product portfolio to maintain market dominance. Technically, the site employs modern web technologies including Web Components, JavaScript ES modules, and a custom Ace UI framework, ensuring a responsive and performant user experience across devices. Integration with Usercentrics CMP demonstrates commitment to GDPR compliance and user privacy management. The site is well-optimized for SEO and accessibility, with fast loading times and clear navigation. From a security perspective, win2day.at enforces HTTPS, uses nonce attributes for scripts, and implements cache control headers to protect content integrity. While explicit security policies and incident response contacts are not found in the provided content, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, win2day.at presents a professional, trustworthy, and secure online gambling platform with excellent content quality and technical implementation. Strategic improvements include publishing explicit privacy and security policies and enhancing transparency around incident response and vulnerability disclosures.

Q

Quickline AG

quickline.ch

62

Quickline AG is a well-established Swiss telecommunications provider offering a comprehensive range of services including Internet, TV, fixed-line telephony, and mobile communications. The company targets both private and business customers across Switzerland, emphasizing simplicity, flexibility, and competitive pricing. Their market position is reinforced by multiple industry awards and a strong customer service reputation. Technically, the website is built on modern frameworks such as Nuxt.js and uses a headless CMS (Storyblok), ensuring a fast, responsive, and accessible user experience. Privacy compliance is robust with clear policies and a consent management platform in place. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website reflects a professional and trustworthy business with a high level of digital maturity.

C

Cottages.com

cottages.com

70

Cottages.com is a well-established UK-based online platform specializing in self-catering holiday cottage bookings. With over 45 years of experience and a portfolio exceeding 18,000 properties, it serves a broad audience including families, couples, and pet owners. The company emphasizes customer satisfaction, demonstrated by its adherence to ABTA's Code of Conduct and excellent Trustpilot ratings. Technically, the website leverages modern frameworks such as Next.js and integrates advanced analytics and consent management tools, ensuring a robust digital presence. Security measures include HTTPS enforcement, reCAPTCHA Enterprise, and comprehensive privacy controls, although a dedicated security policy page is absent. Overall, cottages.com presents a professional, trustworthy, and user-friendly platform with strong market positioning in the UK holiday accommodation sector.

C

CARENETWORKER

carenetworker.com

65

CARENETWORKER is a German-based company specializing in networking and consulting services within the healthcare and social care market. Founded in 2020 and operating under the parent brand HILSE:KONZEPT, the company focuses on connecting industry players, service providers, and care institutions to foster innovation, market entry, and digital transformation. Their services include market development, pilot projects, product development, and cooperative business platform creation. The website is professionally designed, content-rich, and targets industry stakeholders, startups, and associations in the care sector. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies such as jQuery, service workers, and Usercentrics for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are consistent with the business location in Germany. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or suspicious activities were detected. Privacy compliance is well addressed with a clear privacy policy and GDPR opt-in on contact forms. Overall, CARENETWORKER presents a trustworthy and professional online presence with a solid business model in the healthcare networking space. Strategic improvements in security headers and incident response transparency would enhance their security posture and trustworthiness further.

D

dm drogerie markt s.r.o.

dm-udrzitelnabudoucnost.cz

61

The website 'Udržitelná budoucnost' serves as a dedicated platform for dm drogerie markt s.r.o. to communicate its sustainability initiatives and corporate responsibility efforts. It targets environmentally conscious consumers and stakeholders interested in the company's sustainable development. The site is well-branded, consistent, and provides rich content focused on sustainability topics, extending from their official sustainability reports. Technically, the site employs modern JavaScript frameworks and a consent management platform (Usercentrics) to handle cookie policies, indicating a moderate level of digital maturity. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS data, slightly diminish the overall trustworthiness. Security posture is adequate with HTTPS usage and consent management but lacks visible security headers and detailed incident response information. Overall, the site is professional, safe, and well-structured but could improve transparency and security practices.

Staatliche Toto-Lotto GmbH Baden-Württemberg operates www.lotto-bw.de as the official state-licensed lottery provider for Baden-Württemberg, Germany. The website offers a variety of lottery games including Lotto 6 aus 49, Eurojackpot, GlücksSpirale, Keno, Toto, and instant tickets. It targets adult users (18+) interested in legal and secure lottery gaming. The company holds a strong market position as a government entity with a large user base. Technically, the website employs modern JavaScript frameworks, Google reCAPTCHA Enterprise for bot protection, and Usercentrics for GDPR-compliant consent management. Hosting appears to be with Deutsche Telekom, ensuring reliable infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

Z

Zalando SE

zalando.ch

52

Zalando.ch is a leading Swiss e-commerce platform specializing in fashion, shoes, and accessories for women, men, and children. It operates as part of the larger Zalando SE group, a major European online fashion retailer. The website offers a broad assortment of products with a focus on user experience, fast and free shipping, and easy returns. The platform targets general consumers in the German-speaking market, providing a comprehensive and professional shopping experience.

A

ABOUT YOU GmbH

aboutyou.at

69

ABOUT YOU GmbH operates a leading online fashion retail platform offering products from over 2,000 top brands, primarily targeting fashion consumers in Austria and Europe. The website demonstrates a strong market position with a comprehensive e-commerce business model focused on personalized shopping experiences. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and robust monitoring through Datadog, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a high level of business credibility and user trust.

Z

Zalando SE

zalando.at

47

Zalando SE operates a leading European online fashion retail platform, targeting consumers primarily in Austria and German-speaking countries. The website offers a broad assortment of shoes, clothing, accessories, and beauty products with a strong focus on user experience, free shipping, and returns. The brand is well-established with a significant market presence and a comprehensive e-commerce business model. Technically, the site leverages modern web technologies including React and RequireJS, with a strong emphasis on performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and consent management via Usercentrics. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

S

Schwäbischer Turnerbund (STB) e.V.

turngala.de

47

TurnGala is a well-established annual gymnastics and acrobatics show organized by the Schwäbischer Turnerbund (STB) and Badischer Turnerbund in Germany. The event features international and regional artists performing a mix of gymnastics, acrobatics, dance, comedy, and entertainment, targeting families and sports enthusiasts across Baden-Württemberg. The website serves as a comprehensive platform for event information, ticket sales, news updates, and partner engagement. Technically, the site is built on TYPO3 CMS with modern frontend libraries such as Bootstrap and jQuery, and integrates Usercentrics for GDPR-compliant consent management and Matomo for analytics. The site is hosted on kundenserver.de and demonstrates moderate performance with good mobile optimization and SEO practices. Security-wise, HTTPS is enforced, and consent mechanisms are in place, though some security headers could be improved and no explicit security policy or incident response information is published. Overall, the domain registration and hosting details align well with the business, indicating legitimacy and trustworthiness.

S

Schwäbischer Turnerbund (STB) e.V.

sportkongress-stuttgart.de

52

The Sportkongress Stuttgart website represents a well-established sports event organized by the Schwäbischer Turnerbund (STB) e.V., targeting sports professionals and enthusiasts with educational workshops, lectures, and networking opportunities. The site positions itself as a leading event in the organized sports sector in Stuttgart, Germany, offering comprehensive content and professional branding. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, hosted on Hetzner servers. It employs GDPR-compliant cookie consent management via Usercentrics and uses Matomo for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure forms with reCAPTCHA, though some security headers and explicit security policies are missing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with clear contact information and partner affiliations. The risk level is low, with recommendations focusing on enhancing security headers and publishing security policies to further strengthen trust and compliance.

S

Schwäbischer Turnerbund (STB) e.V.

kinderturn-kongress.de

50

The Kinderturn-Kongress website represents a specialized event platform focused on children's gymnastics, organized by the Schwäbischer Turnerbund (STB) e.V. The site provides event information, partner details, and resources for trainers and clubs involved in children's gymnastics in the Württemberg region of Germany. The business model centers on event organization and community support within the sports sector, targeting trainers and club representatives. The website is well-branded and consistent with its organizational partner STB, featuring clear contact channels and social media integration. Technically, the site is built on TYPO3 CMS with a modern tech stack including Bootstrap, jQuery, and ECharts for interactive content. Hosting is provided by Hetzner, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices. Privacy compliance is robust, leveraging Usercentrics for consent management and Matomo for analytics with cookie consent enforcement. From a security perspective, the site uses HTTPS and integrates reCAPTCHA with consent requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is good but could be improved by implementing security headers and publishing formal security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It serves its niche audience effectively with clear communication and a solid technical foundation. Strategic improvements in security transparency and accessibility could further enhance its maturity and trustworthiness.