Security Directory

xmlteam GmbH & Co KG operates in the transportation sector, providing specialized software solutions for the cruise and travel industry. Their flagship product, CruiseCompass, is accessible online without requiring software downloads and integrates with various mid-office systems used by travel agencies. The company targets travel professionals and agencies seeking efficient cruise management tools. The website is currently under maintenance but provides clear access points to their services and support. Technically, the website employs modern frameworks such as Bootstrap 5.1.3 and is hosted on Hetzner servers, indicating a reliable infrastructure. The site uses HTTPS, ensuring secure communication, but lacks advanced security headers and cookie consent mechanisms. The design and content quality are basic but functional, with room for improvements in accessibility and SEO. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited maturity in security governance. No tracking or analytics scripts were detected, indicating minimal user data collection. Overall, the website and domain appear legitimate and consistent with the business profile. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance posture.

D

Classic Lineage 2 Drop & Spoil Database

dropspoil.com

52

Dropspoil.com is a specialized online database dedicated to providing comprehensive drop and spoil information for the classic Lineage 2 MMORPG, covering chronicles from C1 to High Five. It serves a niche audience of classic server players and nostalgic gamers seeking detailed and accurate game data. The website operates primarily as an informational resource supported by advertising revenue, with no direct commercial transactions evident. Technically, the site employs standard web technologies including HTML, CSS, JavaScript, Google Fonts, Google Adsense, and Google Analytics. It features a cookie consent mechanism compliant with GDPR, ensuring user privacy preferences are respected. However, the absence of WHOIS registration data for the domain (likely a subdomain) and lack of security headers indicate areas for improvement in security posture. Overall, the site provides good content quality and user experience but could enhance trust and security by adding explicit contact details, security policies, and technical safeguards.

P

PMfun.com

pmfun.com

52

PMfun.com is a niche gaming resource website dedicated to providing comprehensive tools and databases for Lineage 2 players, including drop and spoil calculators, NPC drop rates, farming strategies, and quest walkthroughs. The site targets the Lineage 2 gaming community and offers a variety of content to enhance gameplay experience. Technically, the site uses standard web technologies with Google Fonts, Google Analytics, and Google Adsense for monetization and tracking. Privacy compliance is addressed with a cookie consent mechanism and GDPR-aligned policies. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and content-rich website suggests operational stability. Overall, the site is functional and serves its audience well but would benefit from improved transparency and security practices.

M

Maze Creative

mazecreative.co.uk

61

Maze Creative is a small, remote creative agency specializing in branding and digital product design, operating studios in London and Valencia. The company offers a comprehensive range of services including creative direction, brand identity, UI/UX design, and no-code development. Their market position is that of a specialized boutique agency focused on long-term client relationships and delivering high-quality creative solutions. Technically, the website is built on modern web technologies including Webflow CMS, uses Google Analytics for visitor insights, and implements Google reCAPTCHA for bot protection. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies are not publicly documented. The absence of WHOIS data for the exact domain queried introduces some uncertainty regarding domain registration legitimacy, but the website content and client testimonials strongly indicate a legitimate business. Privacy compliance is partial, with cookie consent present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy with room for improvement in transparency and security documentation.

The website sitemaphosting4.com serves as a hosting platform for sitemaps created by the PRO-Sitemaps.com service. It offers sitemap hosting and generation services including various sitemap types and automatic updates, targeting webmasters and site owners who require easy sitemap management without installing software. The site is simple and informational, with basic design and limited technical sophistication. The domain is registered since 2020 with a reputable registrar and uses Cloudflare DNS, indicating a stable technical foundation. However, the absence of DNSSEC, visible HTTPS confirmation, and security headers suggests room for security improvements. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which impacts compliance and trust. Overall, the site is functional for its niche but lacks comprehensive security and privacy practices.

B

BGtop.net

bgtop.net

45

BGtop.net operates as a Bulgarian web directory and ranking platform, providing a catalog of Bulgarian websites ranked by user votes. Established in 2002, it holds a strong market position as a popular resource for Bulgarian internet users seeking categorized website listings. The platform offers services such as site addition, editing, and statistical insights, targeting website owners and general users interested in Bulgarian web content. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Adsense for monetization, and Google Analytics for traffic analysis. Hosting appears to be managed via sureserver.com nameservers with domain registration through eNom, LLC. The website demonstrates basic mobile optimization and accessibility with moderate performance and good SEO practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. Overall, the site is safe for general audiences with no adult content detected. The domain age and registration details support the legitimacy and stability of the service.

V

VGN Medien Holding GmbH

vgn.at

72

VGN Medien Holding GmbH is Austria's leading magazine publisher, established in 1992 with a strong portfolio of print and digital media brands. The company targets the Austrian population with content spanning politics, society, lifestyle, business, and entertainment. Their business model integrates traditional publishing with digital innovation and content marketing services, positioning them as a market leader in the Austrian media sector. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and OneTrust for cookie consent, ensuring a compliant and user-friendly experience. The site is mobile-optimized and SEO-conscious, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy pages and incident response contacts, which are recommended for enhanced transparency and readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with no detected critical vulnerabilities or suspicious content.

R

Reformierte Kirche Kanton Luzern

reflu.ch

62

The website www.reflu.ch serves as the official online presence of the Reformed Church of the Canton of Luzern, Switzerland. It provides information about church services, pastoral care, community events, and regional church congregations. The site targets local German-speaking community members seeking spiritual support and church-related activities. The business model is non-profit and government-affiliated, focusing on community and religious services. The website is well-branded and consistent with the church's identity, featuring event calendars and news updates that demonstrate active engagement with its audience. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates tracking pixels from TikTok, Facebook, and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and explicit incident response contacts reduces the overall security maturity. From a security and compliance perspective, the site does not present critical vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's claims, showing consistent registrant information appropriate for a regional church organization. No WAF or blocking mechanisms were detected, allowing full content access. The site does not contain any adult or NSFW content, making it safe for general audiences. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy compliance measures and improved security headers. Adding clear contact information for security incidents and a vulnerability disclosure policy would further strengthen trust and compliance.

F

Freaking Dad

freaking-dad.de

56

Freaking Dad is a German-language podcast platform focused on fatherhood, parenting, and family life, targeting parents with a special emphasis on fathers. The website hosts podcast episodes, blog content, and engages audiences via multiple social media channels. The business operates as a small media entity with a niche market position, leveraging LetsCast.fm for podcast hosting and distribution. The content is professionally presented with consistent branding and good quality, appealing to a general audience interested in parenting and related lifestyle topics. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Podlove Web Player for podcast playback. It uses Turbolinks for navigation and Tailwind CSS for styling. Hosting is via LetsCast.fm and domain DNS is managed through rzone.de. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no explicit security headers were detected, and there is no published security policy or incident response information. Privacy compliance is partial, with a privacy policy linked to the podcast host but no cookie consent mechanism on the main site. Contact information is available via email and a contact form with anti-spam measures. Overall, the website is safe, professional, and trustworthy for its intended audience. It does not contain adult or explicit content. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve compliance and trust.

A

Associazione svizzera delle organizzazioni giovanili (SAJV)

congedogiovanile.ch

53

The website congedogiovanile.ch serves as an informational platform dedicated to promoting and explaining the youth leave rights (congedo giovanile) in Switzerland. It targets young employees and apprentices under 30 engaged in volunteer activities within cultural, sports, or social organizations. The site provides downloadable forms, informational brochures, legislative references, and a chatbot for user assistance. The organization behind the site is the Swiss Association of Youth Organizations (SAJV), positioning itself as a trusted non-profit resource in this niche. Technically, the site is built on a Redaxo CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI components. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies and does not expose security headers, which are areas for improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the site is legitimate, safe, and serves its informational purpose effectively but would benefit from enhanced security and privacy compliance measures.

S

SIWECOS

siwecos.de

46

SIWECOS is a German-based service focused on providing website security checks and CMS security analysis primarily targeting small and medium-sized enterprises (KMU). The platform offers an online security scanner, a security seal, and support resources to help website operators identify and remediate security vulnerabilities. The website is professionally designed, bilingual (German and English), and supported by reputable partners including government and academic institutions. Technically, the site is built on Joomla CMS, hosted by Hetzner, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some improvements are recommended such as adding security headers and cookie consent mechanisms. Overall, the domain and hosting information align with the business claims, indicating legitimacy and trustworthiness.

The Wasser- und Bodenverband "Untere Tollense / Mittlere Peene" is a regional government-related organization based in Jarmen, Germany, focused on water and soil management. Their website provides comprehensive information about their tasks, organizational structure, and current activities, targeting local stakeholders and the public interested in environmental and water management issues. The site is professionally designed with clear navigation and relevant content, reflecting a small-sized public service entity. Technically, the website is built on TYPO3 CMS 6.2 with common web technologies such as Bootstrap, jQuery, and Font Awesome. While the site is mobile-optimized and performs moderately well, it uses an outdated CMS version which may pose security risks. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is trustworthy and serves its informational purpose effectively but would benefit from modernization and enhanced security and privacy practices.

M

MS Management-Service GmbH

ms-agrarversicherungen.de

60

MS Management-Service GmbH is a specialized insurance broker based in Gießen, Germany, focusing on agricultural and private insurance products. Their offerings include liability insurance, building insurance, crop damage coverage, and services for seasonal workers, among others. The company targets agricultural businesses and private clients within Germany, positioning itself as a niche regional broker with a comprehensive portfolio tailored to the agricultural sector. Technically, the website is built on the cm Homepage-Baukasten CMS platform, hosted via transmit.de, and employs modern web technologies including HTTPS, JavaScript, and FriendlyCaptcha for form protection. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO and technical implementation are adequate but could benefit from enhancements such as improved security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses captcha mechanisms to prevent spam. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a small insurance brokerage firm. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust further.

S

Sozialversicherung für Landwirtschaft, Forsten und Gartenbau (SVLFG)

svlfg.de

65

The SVLFG website represents the Sozialversicherung für Landwirtschaft, Forsten und Gartenbau, a German government social insurance institution focused on agricultural, forestry, and horticultural sectors. The organization provides statutory insurance services including accident insurance, pension schemes, health and nursing care insurance, and prevention programs. The website is professionally designed, well-structured, and targets a broad audience including farmers, employers, employees, medical professionals, and related institutions. It offers comprehensive information and digital services tailored to its sector. Technically, the website is built on the Scrivito CMS platform, utilizing modern web technologies such as JavaScript and CSS. It includes accessibility features, mobile optimization, and SEO best practices. The site uses HTTPS with strong SSL configuration and security headers, ensuring secure communication. Tracking is implemented via etracker, with a cookie consent mechanism in place, reflecting good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, which could be improved to enhance transparency and trust. The WHOIS data aligns with the website's claims, indicating a legitimate and consistent domain registration. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional digital presence for a government social insurance entity.

S

Sparstopp

sparstoppjugend.ch

9

Sparstopp is a Swiss non-profit advocacy website dedicated to opposing government budget cuts in youth and child promotion programs. The site serves as a mobilization platform for youth organizations and civil society, providing information, petitions, and calls to action. The website is well-designed with good content quality and clear navigation, targeting Swiss youth organizations and the general public concerned with youth funding. Technically, it uses modern front-end libraries such as Swiper.js and FontAwesome and is likely built on the REDAXO CMS. However, the site lacks key privacy and cookie policies, security headers, and explicit contact information, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

Faktor Journalisten AG is a Swiss-based small enterprise specializing in communication, technical journalism, and graphic design with a focus on sustainability, architecture, construction, and energy sectors. The company also operates a subsidiary publishing house, Faktor Verlag, which produces educational materials for professionals in planning and construction. The website is professionally designed with clear navigation and relevant content targeting industry professionals. Technically, the site uses standard web technologies with good mobile optimization and SEO practices but lacks advanced frameworks or CMS indications. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie information present but no explicit consent mechanism. Overall, the site is trustworthy and well-positioned within its niche.

S

skyPixX GmbH

skypixx.ch

47

skyPixX GmbH is a Swiss-based small business specializing in graphic design and advertising technology services. Their offerings include direct printing, vehicle wrapping, signage, interior design, milling and cutting, POS displays, illuminated advertising, privacy and sun protection films, and logistics/montage services. The company targets local businesses and organizations seeking professional advertising and design solutions. The website presents a professional and consistent brand image with clear contact information and multimedia content such as videos and maps to enhance user engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, Google Analytics, Google Maps API, Video.js, Lightbox2, and Typekit fonts. The site is mobile optimized with good navigation and user experience, although accessibility features are basic. Performance is moderate with no critical errors or broken elements detected. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks visible security headers such as Content-Security-Policy and Strict-Transport-Security, and no security or incident response policies are published. The absence of privacy and cookie policies and consent mechanisms indicates compliance gaps with GDPR and related regulations. Google Analytics is used without visible user consent, which may pose privacy compliance risks. Overall, the website is safe, professional, and business-focused with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and cookie consent would enhance trust and regulatory compliance.

L

Landeswasserverbandstag Brandenburg e.V.

lwt-brandenburg.de

47

The Landeswasserverbandstag Brandenburg e.V. (LWT) is a regional non-profit organization serving as the umbrella association for public water management entities in Brandenburg, Germany. The website provides information about the organization's mission, events, and member services, targeting stakeholders in water supply, wastewater management, and water body maintenance. The site is built on Joomla CMS with Yootheme and UIkit frameworks, offering a responsive and well-structured user experience. Technical infrastructure is modern and adequate for the organization's needs, hosted on a regional provider with secure HTTPS connections. Security posture is solid with HTTPS and CSRF protections, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the website is professional, trustworthy, and safe, with no signs of malicious content or blocking mechanisms.

U

Universität Liechtenstein

uni.li

10

Universität Liechtenstein is a regional higher education institution in Liechtenstein offering a range of academic programs including bachelor's, master's, doctoral, and continuing education courses primarily in architecture, business, finance, law, and information systems. The university also engages in research and knowledge transfer activities, targeting students, researchers, and professionals seeking further education. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site is built on Drupal 10 CMS, uses Matomo analytics with privacy-conscious configurations, and is served over HTTPS with good mobile optimization and accessibility features. Security posture is generally strong with encrypted connections and privacy-aware analytics, though it lacks some security headers and explicit privacy and cookie policies. Overall, the domain registration details align well with the university's identity, indicating legitimacy and trustworthiness.

Deutsche Telekom AG operates the website www.telekom.de, providing a comprehensive range of telecommunications services including mobile telephony, fixed-line, internet, TV, and fiber optic solutions. The website targets both private and business customers in Germany, positioning itself as a leading telecommunications provider with a strong market presence. The business model revolves around offering bundled and individual telecom services with a focus on digital innovation and customer convenience. Technically, the website employs modern web technologies such as React, Dynatrace for monitoring, and Tealium for tag management, ensuring a responsive, accessible, and SEO-optimized user experience. The infrastructure appears robust, with fast performance and mobile optimization, hosted likely on proprietary or Telekom-controlled infrastructure. From a security perspective, the site enforces HTTPS, uses security monitoring tools, and implements GDPR-compliant consent mechanisms. However, explicit security policies and vulnerability disclosure information are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital presence for Deutsche Telekom AG. Strategic recommendations include publishing detailed security policies, enhancing visible security headers, and providing a vulnerability disclosure channel to further strengthen security posture.

L

Liechtensteinische Landesverwaltung

statistikportal.li

57

The website www.statistikportal.li is the official statistics portal of the Liechtensteinische Landesverwaltung (Liechtenstein Government Administration). It provides comprehensive statistical data, indicators, and reports covering a wide range of topics including population, economy, social issues, environment, and sustainable development. The portal targets the general public, researchers, government officials, and businesses interested in official Liechtenstein statistics. The business model is a government-operated public service offering open access to data and information, positioning itself as the authoritative source for national statistics in Liechtenstein. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, and SVG graphics. It uses Matomo analytics with an opt-out mechanism, indicating a moderate level of user tracking balanced with privacy considerations. The site appears to be built on the Pimcore CMS platform, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with a well-structured navigation system facilitating user experience. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the site lacks visible privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for compliance and security transparency. Overall, the website is a trustworthy and professional government portal with high business credibility and a solid security posture. The main areas for improvement include publishing comprehensive privacy and cookie policies with consent mechanisms, providing clear security incident contacts, and establishing a vulnerability disclosure process to enhance compliance and user trust.

M

Meyer Sound

meyersound.com

47

Meyer Sound is a well-established company founded in 1979 specializing in the design and manufacture of professional audio equipment, particularly loudspeakers and sound systems. The company targets professional audio engineers, event production companies, and venues, positioning itself as a leader in the professional audio technology sector. The website reflects a professional and consistent brand image with good content quality and relevant business information. Technically, the site uses modern web technologies including WordPress CMS, Google Fonts, and Font Awesome Pro icons, hosted via a CDN for performance. However, mobile optimization and accessibility are basic and could be improved. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data is consistent with the business history, enhancing trustworthiness.

S

Ski amadé

skiamade.com

64

Ski amadé is a prominent winter tourism website promoting skiing and snowboarding holidays in Austria, specifically in the Salzburg and Styria regions. The site offers extensive information about winter activities, slopes, and related services, targeting winter sports enthusiasts and tourists. The website is professionally designed with excellent content quality and mobile optimization, providing a positive user experience. Technically, it uses modern web technologies including Bootstrap and JavaScript, with good SEO and accessibility practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are not evident in the provided data. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance of the website. Overall, the site is reliable for its business purpose but would benefit from improved transparency in domain registration and enhanced security headers.

E

enercity AG

enercity.com

65

enercity AG is a major municipal energy provider in Germany, serving approximately one million customers with electricity, heat, and drinking water. The company also offers services related to electromobility, decentralized energy generation, energy efficiency, telecommunications, and smart infrastructure, emphasizing sustainability and climate neutrality. The website reflects a mature digital presence with comprehensive content, clear navigation, and a strong focus on corporate responsibility and investor relations. Technically, the site employs modern web technologies, including JavaScript and cookie consent management via consentmanager.net, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is missing or inaccessible, which is unusual but does not detract significantly from the site's legitimacy given the rich content and social media presence. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

TELTA Citynetz GmbH

telta.de

60

TELTA Citynetz GmbH is a regional telecommunications and IT service provider based in Germany, specializing in high-speed fiber internet, telephone, TV, and webhosting services primarily targeting private and business customers in the Eberswalde region. The company operates under the EWE Konzern umbrella, indicating a solid corporate backing. Their website reflects a professional and consistent brand presence with clear service offerings and customer support channels. Technically, the site is built on TYPO3 CMS with Bootstrap, providing a modern and responsive user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and published security policies. The domain WHOIS data is limited due to DENIC privacy policies but shows consistent nameservers and domain status, supporting legitimacy. Overall, TELTA Citynetz GmbH demonstrates a mature digital presence with good compliance and trust indicators.

A

Amt Crivitz

amt-crivitz.de

51

Amt Crivitz operates as a local government administrative service provider in Germany, offering a broad range of citizen services including online appointment booking, access to official documents, and information on local governance, economic development, education, and cultural activities. The website targets residents and businesses within the Amt Crivitz region and serves as a comprehensive portal for municipal information and services. The business model is typical of a public sector entity focused on community service and local administration. Technically, the website is built using standard web technologies such as HTML5, CSS, and JavaScript, likely managed via a custom or proprietary CMS. The site demonstrates good mobile optimization, accessibility, and SEO practices, though no advanced frameworks or analytics tools are detected. Performance is moderate, with a clear and consistent navigation structure enhancing user experience. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is generally good with a comprehensive privacy policy present, but the absence of a cookie consent mechanism is a notable gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in security headers, cookie consent, and transparency around security policies would enhance the security posture and compliance standing of the site.

B

Bauhaus-Archiv GmbH

bauhaus-shop.de

70

Bauhaus-Shop is an e-commerce platform operated by Bauhaus-Archiv GmbH, offering design products associated with the Bauhaus-Archiv Museum in Berlin. The website targets general consumers interested in Bauhaus design merchandise, positioning itself as a niche cultural museum shop. The business model focuses on online retail through a Shopify-based storefront, leveraging Shopify's infrastructure and payment systems. The site is professionally branded and consistent with the museum's identity, providing a good user experience and clear navigation.

W

Wirtschaftskammer Oberösterreich

wkooe.at

10

Wirtschaftskammer Oberösterreich (WKOÖ) is the regional chamber of commerce for Upper Austria, providing a wide range of services, information, and consulting to entrepreneurs and business owners in the region. The website serves as an official portal offering news, events, legal and financial guidance, and access to various business support services. It is part of the larger Austrian WKO network, positioning itself as a key regional business support entity. Technically, the website is built on a modern stack with responsive design, accessibility considerations, and uses a CMS likely based on Gentics. It integrates Google Tag Manager and a custom chatbot for enhanced user interaction. The site is well-optimized for SEO and mobile devices, with good performance and structured navigation. From a security perspective, the site enforces HTTPS and includes some security headers, though it lacks explicit published security policies, vulnerability disclosure, or incident response contacts. Privacy compliance is partially implemented with cookie consent mechanisms but lacks a clearly accessible privacy policy page. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is professional, trustworthy, and serves its business audience well, but could improve transparency and compliance by publishing detailed privacy, terms, and security-related documents.

S

Sharp

sharp.eu

78

Sharp Europe is a well-established technology company specializing in secure, sustainable, and smart workplace technology solutions. Their offerings include multifunction printers, managed IT services, audio visual equipment, and cybersecurity solutions targeted primarily at SMBs and enterprises across Europe. The website demonstrates a strong market position with comprehensive service coverage and a professional digital presence. Technically, the site is built on Drupal CMS with modern web standards, optimized for mobile and SEO, and integrates Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain is privacy protected but consistent with a legitimate business entity. The site is safe for general audiences and shows high professionalism and trustworthiness.

W

Württembergischer Tennis-Bund e.V.

wtb-tennis.de

57

The Württembergischer Tennis-Bund e.V. is a large, well-established regional tennis association in Germany, serving as the second largest within the German Tennis Federation. The organization provides a comprehensive range of tennis-related services including competition management, training and education for coaches and referees, youth development, and media relations. Their website reflects a professional and content-rich platform targeting tennis players, clubs, and enthusiasts in the Württemberg region. Technically, the site is built on the TYPO3 CMS with Bootstrap for responsive design, delivering good performance and accessibility. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy, though a cookie consent mechanism is present. Overall, the domain and website present a trustworthy and professional image with strong social media integration and active content updates.

A

AZ Zeno

azzeno.be

10

AZ Zeno is a well-established regional hospital in Belgium with multiple campuses serving patients, visitors, and healthcare professionals. The website provides comprehensive information about medical services, departments, and patient care, reflecting a strong market position in the healthcare sector. The digital infrastructure uses modern web technologies including JavaScript frameworks, SVG graphics, and integrates popular analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS implied and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, but could improve in privacy and security transparency.

D

Dewaele Vastgoeddiensten

dewaele.com

9

Dewaele Vastgoeddiensten is a prominent Belgian real estate company specializing in residential, luxury, and commercial properties. The company offers a comprehensive range of services including buying, selling, renting, investing, property management, and advisory services. The website is multilingual, targeting Dutch, French, and English-speaking audiences, reflecting a broad market reach within Belgium. The presence of multiple subsidiary brands under the Dewaele umbrella indicates a diversified and well-established market position. Technically, the website employs modern web technologies such as JavaScript frameworks (likely Alpine.js), Google Tag Manager for analytics, and Imgix for image delivery. The site is mobile-optimized and features a professional design with clear navigation, enhancing user experience. However, some technical improvements could be made, such as adding explicit security headers and improving accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, indicating a baseline security posture and some privacy compliance. However, the absence of a visible privacy policy, terms of service, and WHOIS data raises concerns about transparency and domain legitimacy. No critical vulnerabilities were detected in the provided content, but the lack of security headers and incident response information suggests room for improvement. Overall, the website presents a professional and trustworthy front for a large real estate business, but the missing WHOIS data and privacy documentation reduce the confidence level. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

S

Small Luxury Hotels of the World

myslh.com

58

Small Luxury Hotels of the World operates the mySLH portal as a member login platform for its luxury hospitality services. The website serves as an access point for registered users to manage bookings and membership details. The domain is well-established since 2008, indicating a mature business presence in the luxury hotel sector. The technical infrastructure includes Umbraco CMS and modern JavaScript libraries, with hosting DNS managed via Cloudflare. The site is moderately optimized for mobile and performance but lacks comprehensive SEO and accessibility features. From a security perspective, the website employs basic best practices such as clientTransferProhibited domain status and anti-forgery tokens in forms. However, it lacks DNSSEC, explicit security headers, and published privacy or cookie policies, which are critical for compliance and trust. Google Analytics and Tag Manager are used for user tracking, but no cookie consent mechanism is evident, indicating potential GDPR compliance gaps. Overall, the website is functional and consistent with the brand but requires improvements in privacy compliance, security hardening, and transparency to enhance user trust and regulatory adherence. No adult or explicit content is present, making it safe for general audiences.

E

EKO-PUNKT

eko-punkt.de

65

EKO-PUNKT is a German-based competence center specializing in sustainable packaging management, including packaging licensing, circular contracting, ecodesign, and recycled material delivery. The company operates under the REMONDIS Group umbrella, a well-established waste management conglomerate. Their website reflects a professional and business-focused approach, targeting companies needing compliance and sustainability solutions in packaging. The digital infrastructure is built on TYPO3 CMS, integrating modern tools like Cookiebot for consent management and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

C

Café Konditorei Reichenau

cafe-konditorei-reichenau.at

53

Café Konditorei Reichenau is a small hospitality business located in Reichenau an der Rax, Austria, specializing in pastries, cakes, breakfast, and savory snacks. The website reflects a local café with a historical reputation and seasonal event focus, targeting tourists, hikers, and local visitors. The business model centers on retail and on-site dining with options for pre-ordering specialty cakes. Technically, the website uses standard web technologies with moderate performance and good mobile optimization but lacks advanced frameworks or CMS identification. Security posture is adequate with HTTPS enforced but lacks security headers and explicit security policies. Privacy compliance is good with a visible cookie consent mechanism and privacy policy. Contact information is clear and professional, enhancing business credibility. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.

The website alixon-web.ch presents a small technology business offering a modular web management platform primarily targeting organizations and businesses needing address management, event scheduling, website content editing, and communication tools. The platform uses a proprietary CMS with Ext JS for UI components and provides multiple portal options for different user groups. The site is primarily in German and hosted on subdomains related to alixon-web. Technically, the site uses HTTPS for login forms but lacks visible security headers and privacy policies, indicating room for improvement in security and compliance. No contact emails or phone numbers are provided, which may affect user trust and support accessibility. Overall, the site is functional with basic content and moderate technical implementation but lacks comprehensive privacy and security measures.

Niederoesterreich.at is the official tourism and travel portal for the Lower Austria region, operated by Niederösterreich-Werbung GmbH. The website offers comprehensive travel information, accommodation booking, event calendars, and cultural and natural experience guides targeting tourists interested in exploring the region around Vienna. It holds a strong market position as a government-supported regional tourism authority with consistent branding and a professional online presence. Technically, the website employs modern web technologies including JavaScript, Matomo analytics with privacy-conscious configurations, and Google Tag Manager. The site is mobile-optimized and features good SEO practices, though some security headers could be improved. The site uses HTTPS with good SSL configuration, and disables cookies in analytics to enhance privacy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-respecting analytics. However, it lacks a visible cookie consent mechanism and some security headers like Content-Security-Policy and X-Frame-Options are missing, which are recommended for enhanced protection. No vulnerabilities or suspicious activities were detected. Overall, the website is safe, professional, and trustworthy, with no adult or explicit content. The WHOIS data aligns well with the website's identity, confirming legitimacy. Strategic recommendations include implementing a cookie consent banner, adding missing security headers, and enhancing accessibility features to further improve compliance and security posture.

The website www.wieneralpen.at serves as a comprehensive regional tourism portal for the Wiener Alpen area in Lower Austria, Austria. It provides detailed information on hiking, cultural events, accommodation, and travel tips, targeting tourists interested in outdoor and cultural activities. The site is well-branded and consistent with regional tourism authorities, offering a good user experience with clear navigation and multilingual support. Technically, it employs modern web technologies including JavaScript frameworks, Vimeo video integration, Google Tag Manager, Matomo analytics with privacy-conscious configurations, and Cookiebot for cookie consent management. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though explicit security policies and incident response contacts are not published. The site does not expose sensitive data or use vulnerable libraries. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is trustworthy, professional, and safe for general audiences.

M

Ministerium für Kultus, Jugend und Sport Baden-Württemberg

km-bw.de

67

The website km.baden-wuerttemberg.de is the official portal for the Ministry of Education, Youth and Sports of Baden-Württemberg, Germany. It serves as a comprehensive information hub for education policies, youth programs, sports initiatives, cultural affairs, and public services related to schooling and early childhood education in the region. The site targets citizens, students, parents, and educators within Baden-Württemberg, providing official government content and resources. The business model is public service and information dissemination as part of the regional government infrastructure. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo analytics with a user consent mechanism, reflecting a privacy-conscious approach. The site uses modern web technologies including responsive design, SVG icons, and asynchronous JavaScript loading. Hosting appears to be managed by Baden-Württemberg state infrastructure, ensuring reliability and compliance with government standards. From a security perspective, the site enforces HTTPS and uses cookie consent for analytics. While some standard security headers are present, there is room for improvement by adding additional headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the official nature of the site, showing consistent domain registration and name servers. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It provides a safe and accessible user experience with clear navigation and relevant content. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

A

APISUMM A. Schuler

apisumm.ch

10

APISUMM A. Schuler is a small Swiss retail business specializing in the production and sale of high-quality Swiss honey, bee cosmetics, and health supplements derived from bee products such as Propolis and Gelée Royal. The company operates an e-commerce platform targeting health-conscious consumers and regional customers in Switzerland. The website presents a professional and consistent brand image with clear navigation and product offerings. Technically, the site is built on the Shopware platform, employs modern web technologies, and integrates security features such as HTTPS, CSRF tokens, and Google reCAPTCHA. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit security policies and incident response information. Overall, the website is trustworthy, secure, and well-suited for its business model.

R

Recisio

tencymusic.fr

67

Tency Music is a professional music licensing platform offering a large catalog of over 80,000 high-quality covers, instrumentals, stems, and karaoke tracks for sync and commercial use. The company targets media producers, advertisers, app developers, and video creators, providing fast licensing with a 48-hour response guarantee and tailored music solutions. The website is well-designed, mobile-optimized, and features notable clients such as Netflix, Amazon Prime, and Universal Music France, indicating a strong market position within the media industry. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, hosted on a CDN associated with its parent company, Recisio. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional site and business information mitigate some risk. Overall, the site is trustworthy and functional but should improve privacy compliance and security disclosures.

A

adidas

adidas.fi

11

adidas.fi is the official Finnish e-commerce website for adidas, a globally recognized sportswear and equipment brand. The site offers a comprehensive range of sports apparel and equipment tailored to various sports such as swimming, football, and running. The website targets sports enthusiasts and general consumers in Finland, leveraging a strong brand presence and a well-established market position as a leader in the retail sportswear industry. The business model focuses on direct online sales, supported by extensive customer service and account management features. Technically, the website employs modern web technologies including React and Next.js frameworks, ensuring a fast, responsive, and accessible user experience. Hosting and CDN services appear to be provided by Akamai, contributing to excellent performance and global reach. The site is well-optimized for SEO and mobile devices, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, adidas.fi demonstrates a strong posture with enforced HTTPS, robust security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. However, explicit incident response and vulnerability disclosure policies are not publicly found, suggesting areas for improvement. Overall, adidas.fi is a professional, secure, and trustworthy e-commerce platform with a high level of digital maturity. Strategic recommendations include enhancing transparency around security policies, publishing a vulnerability disclosure framework, and maintaining continuous security audits to uphold the strong security posture.

F

flamme rouge gmbh

flammerouge.com

46

flamme rouge gmbh is a small media agency based in Berlin, Germany, specializing in developing sophisticated media for web and print. They offer consulting services to optimize content, design, and technical aspects of communication strategies for their clients. The website is professionally designed with clear contact information and a focus on business clients seeking media and communication services. Technically, the site uses basic HTML and CSS without advanced frameworks or CMS detected. There is no evidence of analytics or tracking technologies, indicating a minimalistic technical footprint. Security posture is weak due to lack of HTTPS information and missing security headers. The absence of WHOIS registration data is a significant concern, reducing trust in domain legitimacy. Overall, the site is functional and professional but requires improvements in security and compliance to enhance trustworthiness.

The website represents the Pirelli Foundation's cultural and historical initiative celebrating 150 years of Pirelli's industrial and innovative legacy. It serves as a corporate branding and heritage platform, targeting a general audience interested in Pirelli's history and innovation. The site is well-structured with clear navigation and multilingual support (Italian and English). Technically, it employs modern web technologies including Google Tag Manager for analytics and cookie consent management, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are not visible in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and aligns with Pirelli's corporate identity.

R

RaiseNow

raisenow.com

74

RaiseNow is a professional fundraising and payment platform targeting nonprofits, clubs, and changemakers globally. The company offers a SaaS model with tools for donation collection, payment processing, community engagement, CRM integration, and campaign management. The website is well-designed, mobile-optimized, and uses modern technologies such as HubSpot CMS and Google Analytics. Privacy and cookie compliance are well addressed with visible policies and consent mechanisms. However, the absence of WHOIS data and lack of explicit security and incident response policies slightly reduce trustworthiness. Overall, the platform appears mature and reliable for its target audience.

Transkribus is a mature AI-powered platform specializing in the transcription, recognition, and analysis of historical documents. Operated by the cooperative READ-COOP SCE, it serves a broad audience including researchers, archivists, and educational institutions. The platform offers advanced AI text recognition, custom model training, and collaborative tools, positioning itself as a leader in the niche of historical document digitization. Technically, the website leverages modern frameworks such as Next.js and React, with strong performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, GDPR compliance, and consent management, although explicit security policies and incident response details are not publicly disclosed. Overall, the platform demonstrates high professionalism, trustworthiness, and a strong community-driven business model.

C

charicomm.de is available for purchase - Sedo.com

charicomm.de

71

The website is a domain sales landing page hosted by Sedo.com, a well-established domain marketplace with over 26 years of experience. The page offers the domain charicomm.de for sale at 699 EUR, highlighting services such as free transfer, personal assistance, and multiple payment options. The target audience is domain buyers and investors. The business model is domain brokerage and marketplace services, with a strong market position supported by high monthly domain transfer volumes. Technically, the site uses modern web technologies including JavaScript ES modules and Cloudflare DNS/CDN services. The site is mobile optimized with good design and basic accessibility features. Performance is moderate, and SEO is basic but functional. The SSL configuration is good with HTTPS enforced, but DNSSEC is not enabled, representing a minor security gap. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks published privacy policies, terms of service, security policies, and incident response contacts, which are important for compliance and trust. Contact information is clearly provided with a verified company email and phone number. No suspicious or malicious content was detected, and the content is safe for general audiences. Overall, the domain and website appear legitimate and trustworthy, with room for improvement in privacy compliance and security policy transparency. The AI overall score is 77, reflecting a good but not perfect security and compliance posture.

G

GT World Challenge Asia Powered by AWS

gt-world-challenge-asia.com

47

GT World Challenge Asia Powered by AWS is a professional motorsports racing series website focused on GT3 and GT4 racing events across Asia. The site offers comprehensive event information, live streaming, news, standings, and multimedia content targeting motorsports fans and participants. The website is well-branded and linked to the reputable SRO Motorsports Group, indicating a strong market position within the niche motorsports sector. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with good mobile optimization and SEO practices. However, the use of an outdated jQuery version and lack of visible security headers suggest areas for improvement in security posture. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no terms of service or explicit incident response contacts are found. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the professional content and official partnerships support legitimacy. Overall, the website is functional, professional, and trustworthy with moderate technical and security maturity.

S

SRO Motorsports Group

gt-world-challenge-europe.com

68

GT World Challenge Europe Powered by AWS is a professionally managed motorsport racing series website operated by SRO Motorsports Group. The site offers comprehensive live streaming, live timing, news, and media content focused on GT3 racing events across Europe. It targets motorsport fans, teams, media, and sponsors, positioning itself as a leading platform in the European GT racing market with strong partnerships including AWS and Pirelli. The website is well-branded, content-rich, and provides a seamless user experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies hosted likely on AWS infrastructure, ensuring reliable performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

S

SRO Motorsports Group

intercontinentalgtchallenge.com

57

Intercontinental GT Challenge is a globally recognized motorsports media and event platform focused on the GT3 racing series. It provides fans and stakeholders with live streaming, live timing, news, video highlights, and photo galleries related to international GT3 events. The website is professionally designed with consistent branding and targets motorsports enthusiasts worldwide. The business operates under the SRO Motorsports Group umbrella, a well-established entity in the motorsports sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted likely on AWS infrastructure. It features good mobile optimization, accessibility, and SEO practices. However, no explicit CMS or advanced frameworks were detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, DNSSEC is not enabled and security headers are not evident, which could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. No incident response or security policy pages were found. Overall, the website presents a low-risk profile with high professionalism and trustworthiness. Strategic improvements in security headers, DNSSEC, and incident response transparency would further enhance its security posture and compliance.