Security Directory

G

GEDLICH Racing

gt-winter-series.com

45

GEDLICH Racing operates the GT Winter Series, a premier motorsport racing series held in Southern Europe, focusing on GT cars competing across multiple events annually. The website presents a professional and comprehensive platform for event information, registration, media, and partner engagement. The business targets motorsport teams, drivers, and enthusiasts, positioning itself as a key player in European winter racing events with strong partnerships and a clear class structure. Technically, the site is built on WordPress with modern libraries like jQuery and Swiper.js, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and advanced security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting a medium-sized business in the transportation sector.

G

GEDLICH Racing

summer-series.org

44

GEDLICH Racing operates the Summer Series 2026, a new GT racing series in Europe targeting professional and amateur racers with GT3, GT4, TCR, and single-make cars. The website is well-structured, content-rich, and professionally designed, reflecting a focused business model on motorsport event organization. The technical infrastructure is based on WordPress with modern JavaScript libraries and SEO optimizations, hosted by IONOS SE. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, and no visible cookie consent or privacy compliance mechanisms. The domain registration is recent but consistent with the business launch timeline, indicating legitimacy. Overall, the site presents a credible and professional front for the racing series with room for improvement in security and privacy compliance.

G

GEDLICH Racing

winter-series.com

45

Winter Series by GEDLICH Racing is a specialized motorsport event organizer focusing on winter racing series across Europe, primarily in Portugal and Spain. The company offers multiple racing series including GT Winter Series, GT4 Winter Series, Prototype Winter Series, and Formula Winter Series, targeting professional and amateur racing drivers as well as motorsport enthusiasts. The business is relatively new, founded in 2023, and positions itself as a niche leader in winter motorsport racing events. The website is professionally designed, content-rich, and provides comprehensive information about events, registration, media, and logistics.

E

entwickeln+gestalten

entwickelnundgestalten.de

47

entwickeln+gestalten is a small, specialized digital agency focused on supporting civil society organizations in Germany with digital transformation, political communication, and process optimization. Their key services include website development, consulting, Nextcloud integration, and CiviCRM solutions. The company positions itself as a trusted partner for progressive actors aiming for social development and justice. Technically, the website is built on Drupal 7 with common JavaScript libraries for UI enhancements, hosted on agenturserver infrastructure. The site is mobile-optimized and provides good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and the CMS version is outdated, which poses some risk. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional, serving a niche non-profit sector audience effectively.

R

ReturnGO

returngo.ai

68

ReturnGO is a technology company founded in 2020, specializing in providing a SaaS platform for sustainable returns and exchanges management targeted at e-commerce businesses and retailers. Their platform offers self-service portals to streamline product returns, warranty claims, exchanges, tracking, and shipping, aiming to increase revenue and customer retention. The company positions itself as a niche provider in the returns management market with a professional and consistent brand presence. Technically, the website is built on WordPress using the Divi theme, integrated with HubSpot for marketing and analytics, and hosted behind Cloudflare DNS. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. Security posture is adequate with HTTPS and domain transfer lock, but lacks DNSSEC and some HTTP security headers. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service on the homepage. Overall, the website is professional and trustworthy with moderate risk exposure due to missing privacy and security disclosures.

L

Leasing Unterland GmbH

leasing-unterland.at

46

Leasing Unterland GmbH is a medium-sized Austrian real estate company specializing in the purchase, rental, leasing, and strategic development of real estate projects primarily in Austria. Established in the early 1980s, the company has evolved from leasing vehicles and properties to focusing on real estate investment and management, including ownership of several commercial properties such as retail centers. Their website reflects a professional and consistent brand presence, targeting investors, businesses, and private clients interested in Austrian real estate. The business model centers on long-term property management and development, positioning them as a reputable regional player in the real estate sector. Technically, the website is built on WordPress using modern plugins such as Slider Revolution and WPBakery Page Builder, with a moderate performance profile and good mobile optimization. The site uses HTTPS with a valid SSL certificate, but lacks some advanced security headers and explicit privacy or cookie consent mechanisms. Forms are minimal, primarily a search form, with no evident tracking or analytics services detected. The site is accessible without WAF or security challenges, indicating good availability. From a security perspective, the site demonstrates basic best practices such as HTTPS and use of a honeypot plugin for form protection. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. WHOIS data aligns well with the website's business claims, showing a consistent and legitimate registration in Austria, supporting the company's credibility. Overall, Leasing Unterland GmbH's website is a solid representation of a professional real estate business with good technical implementation and moderate security posture. Enhancements in privacy compliance, security headers, and transparency around data protection would further strengthen their digital trustworthiness.

W

WERK Bowling Billard Events Parndorf

werkbowling.at

51

WERK Bowling Billard Events Parndorf is a local hospitality and entertainment business based in Parndorf, Austria, offering bowling, billiards, snooker, restaurant, bar, and event hosting services. The website reflects a well-established business founded around 2015, with a clear market position as a regional entertainment center. The company targets general audiences seeking leisure and event experiences. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities and uses modern SEO and cookie consent plugins, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Overall, the site is professional, compliant with GDPR, and trustworthy, with room for improvement in security header implementation and incident response transparency.

F

Fédération Adventiste de la Suisse romande et du Tessin

adventiste.ch

57

Adventiste.ch serves as the official digital presence of the Fédération Adventiste de la Suisse romande et du Tessin, providing religious, community, and ministry information to the French-speaking Adventist population in Switzerland and Ticino. The website offers comprehensive content including church locations, pastoral contacts, event announcements, and newsletters, positioning itself as a trusted regional hub for the Adventist community. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Calendarize It, ensuring good SEO and event management capabilities. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the site demonstrates a solid security posture and compliance with privacy standards through links to comprehensive privacy policies. The domain registration details align well with the organization's identity, supporting high legitimacy and trustworthiness.

E

Eglise @home

athomic.ch

56

The website athomic.ch represents a small Swiss non-profit religious movement named Eglise @home, focused on organic multiplication of disciples and house churches in the Suisse Romande region. The site provides detailed information about their vision, values, paradigms, regional teams, and contact options. The business model is community and mission-driven without commercial intent. Technically, the site is built on custom HTML/CSS/JS with common libraries like jQuery and Owl Carousel, showing moderate performance and good mobile optimization. Security posture is limited, with no visible HTTPS enforcement or security headers, and no published privacy or cookie policies, indicating compliance gaps. Contact is available via a form and physical address, but no direct company emails or phone numbers are provided. Overall, the site is trustworthy and consistent with the organization's claims, but improvements in security and privacy compliance are recommended.

The website la-porte-ouverte.ch is currently suspended, displaying a message in both French and English instructing visitors to contact support via the email [email protected]. There is no active business content, no privacy or cookie policies, and no interactive elements such as forms or social media links. The technical infrastructure appears minimal, with only a CSS stylesheet loaded from an external domain (apanel.swisscenter.com). No security headers or SSL configuration details are evident from the provided data. The site lacks basic compliance documentation and trust indicators, which significantly impacts its credibility and security posture. From a technical perspective, the site uses basic CSS styling but lacks modern frameworks, CMS, or analytics tools. Performance and accessibility cannot be fully assessed but are likely poor given the minimal content and basic mobile optimization. No evidence of tracking or advertising technologies was found. Security-wise, the absence of HTTPS information, security headers, and incident response contacts indicates a low security maturity level. The suspension notice suggests operational or compliance issues that may affect business continuity and trustworthiness. No vulnerabilities or malicious content were detected, but the lack of security best practices is a concern. Overall, the site scores low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include restoring active content, implementing HTTPS and security headers, publishing privacy and cookie policies, and improving contact and incident response information to enhance trust and compliance.

Y

Y - Culte Louange

ycultelouange.com

56

The website 'Y - Culte Louange' is a French-language religious community platform hosted on the Wix platform. It provides services such as event agendas, sermons, forums, and contact options for its community members. The site is designed with a consistent branding approach and offers a good user experience with clear navigation and mobile optimization. Technically, it leverages Wix's Thunderbolt framework and standard web technologies, ensuring moderate performance and basic accessibility. Security-wise, the site benefits from HTTPS but lacks advanced security headers and formal privacy or incident response policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trust. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and verifying domain registration to improve credibility and compliance.

E

Eglise Evangélique de Réveil L’Escale

eery.ch

52

Eglise Evangélique de Réveil L’Escale is a small non-profit evangelical church based in Yverdon-les-Bains, Switzerland. The website serves as an informational portal for church activities, youth programs, social actions, and community events. It targets local Christian community members and those interested in evangelical worship and fellowship. The church emphasizes living in communion with Jesus Christ and offers various services including Sunday worship, youth groups, and room rentals. Technically, the website is built on Drupal 7 with standard web technologies such as jQuery and FontAwesome. It uses HTTPS and external trusted resources, indicating a basic but sound technical infrastructure. The site is moderately optimized for mobile devices and has a clear navigation structure, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide a privacy or cookie policy, which are compliance gaps especially under GDPR. No incident response or security policy information is available. There is minimal user tracking and no advertising, which reduces privacy risks but also indicates limited marketing sophistication. Overall, the website is trustworthy and professional for its purpose but would benefit from improved privacy compliance and enhanced security practices to better protect users and meet regulatory requirements.

E

Eglise Evangélique Connexion

egliseconnexion.ch

62

Eglise Evangélique Connexion is a small non-profit evangelical church based in Montagny-près-Yverdon, Switzerland. The website serves as a community portal for families and individuals interested in contemporary biblical teachings. The organization focuses on religious services and community engagement without commercial activities. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, with standard Wix scripts and styles. It is mobile optimized and uses HTTPS, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and formal privacy or cookie policies. No forms or analytics tools are present, indicating minimal data collection and tracking. Overall, the website is legitimate and trustworthy but could improve in privacy compliance and security best practices.

É

Église évangélique Béthel

ebyv.ch

52

Église évangélique Béthel is a small, local evangelical church based in Yverdon-les-Bains, Switzerland. The organization focuses on religious services and community engagement centered on the authority of the Bible and the teachings of Jesus Christ. The website serves as a portal for information about the church, its programs, and media such as photos and videos. The pastor is identified as Serge Viret, reinforcing the community and leadership structure. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript with a slider library for image display. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation. However, it lacks advanced technical frameworks or CMS indications.

H

Heilsarmee Schweiz

armeedusalut.ch

48

The website armeedusalut.ch represents Heilsarmee Schweiz, a Swiss non-profit humanitarian organization focused on social aid, housing assistance, and community support. The site targets the general public, especially vulnerable populations and donors, providing information, resources, and calls to action for donations and volunteering. The organization holds recognized certifications such as ZEWO, enhancing its trustworthiness. Technically, the site is built on WordPress with modern plugins for multilingual support, consent management, and analytics integration. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though additional HTTP security headers and published security policies would improve it further. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and well-maintained, serving its humanitarian mission effectively.

R

Start Reiskorn | Reiskorn

reiskorn.at

56

The website www.reiskorn.at is a small business site hosted on the Wix platform, targeting an Austrian audience. The site appears to be in German language and uses standard Wix technologies including JavaScript, CSS, and Wix's proprietary scripts. The business description and detailed services are not clearly extractable from the provided HTML content, indicating minimal content presence or content loading dynamically beyond the provided snapshot. The technical infrastructure is typical for Wix-hosted sites, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and some cookie handling scripts, but lacks explicit security headers and publicly disclosed security policies. Privacy compliance is weak due to absence of visible privacy or cookie policies and consent mechanisms. Business credibility is moderate but limited by lack of visible contact information and trust indicators. Overall, the site is functional but would benefit from enhanced content, privacy disclosures, and security best practices.

A

A&G KG

ox-parndorf.at

40

OX Steaks & Grill Parndorf is a small hospitality business located in Austria, specializing in premium steak and grill dining experiences. The company offers a variety of high-quality food options including steaks, burgers, fish dishes, and Mediterranean appetizers. They maintain a strong market position as a top dining location in Parndorf, supported by a loyalty app and online gift voucher sales. The website is built on TYPO3 CMS and integrates modern front-end libraries and tracking tools such as Google Analytics and Facebook Pixel, with privacy-conscious configurations like IP anonymization and cookie consent mechanisms. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and incident response disclosures. Overall, the website is professional, user-friendly, and compliant with GDPR requirements, reflecting a trustworthy and credible business presence.

The Schweizerische Pfingstmission (SPM) operates as a Swiss non-profit umbrella organization for autonomous Christian churches, focusing on promoting biblical values, youth work, and global mission projects. Their website reflects a clear organizational mission with accessible contact information and multilingual support (German and Italian). The site is built on a WordPress platform with modern UIkit styling and integrates multimedia content such as videos and image sliders to engage visitors. Technically, the infrastructure is stable with standard web technologies and moderate performance. Security posture is adequate with HTTPS enforced and secure login mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, serving its community effectively.

B

Brigade des Flambeaux

flambeaux.ch

10

Brigade des Flambeaux is a well-established non-profit scouting organization based in the French-speaking region of Switzerland, with over 60 years of history. It focuses on youth development through scouting activities, leader training, and community events, supported by a network of regional and international scouting partners. The website reflects a professional and consistent brand image targeting youth, leaders, and volunteers. Technically, the site is built on WordPress with Elementor and uses privacy-conscious analytics (Matomo). While HTTPS is properly implemented, the site lacks some security headers and shows a minor plugin misconfiguration error. Privacy and cookie policies are present and GDPR compliant, but no terms of service or explicit security policies are published. Overall, the site is accessible, safe, and trustworthy with room for security and compliance improvements.

The Action Commune d’Evangélisation d’Yverdon-les-Bains (ACEY) is a small non-profit association established in 1988 to foster collaboration among evangelical churches and Christian groups in the Yverdon-les-Bains region of Switzerland. The organization facilitates joint worship services, prayer weeks, evangelization projects, and regional interfaith relations. The website serves as an informational hub for member churches, providing contact details, event information, and links to affiliated churches. Technically, the site is built on WordPress using the Elementor page builder and Astra theme, employing modern web technologies and offering good mobile responsiveness. Security posture is basic with HTTPS enabled but lacking advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its community well but would benefit from enhanced security and privacy practices.

L

lafree.ch - Site évangélique d'information

lafree.info

48

lafree.info is a French-language evangelical Christian news and information website affiliated with the Fédération romande d'Églises évangéliques (FREE). It serves a niche audience of French-speaking evangelical Christians primarily in Switzerland, offering news, opinions, event information, and resources related to evangelical faith and community life. The site is well-branded and consistent with its religious mission, providing quality content authored by recognized contributors within the community. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and uses Google Analytics for traffic monitoring. While HTTPS is enabled, the site lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. No direct contact emails or phone numbers are found on the analyzed page, which may affect user trust and compliance. The WHOIS data is privacy protected, which is common and justified for this type of non-profit religious media entity. Overall, the site is professional, trustworthy, and safe for general audiences.

L

lafree.ch - Site évangélique d'information

lafree.ch

9

lafree.ch is a French-language evangelical information website primarily serving the French-speaking evangelical Christian community in Switzerland. It functions as a portal and redirection page to a network of affiliated sites offering news, cultural content, biblical education, church resources, and youth commission information. The website is built on Joomla CMS using modern front-end frameworks and integrates Google Analytics for visitor tracking. The design is professional and consistent with the organization's branding, targeting a niche religious audience. However, the site lacks visible privacy and cookie policies, contact emails, and security headers, which are areas for improvement. The domain uses privacy protection for WHOIS data, which is justified given the non-profit religious nature of the organization.

J

JUNE - Online Marketing Cloud

juneapp.com

68

JUNE - Online Marketing Cloud is a German-based SaaS company founded in 2016, providing comprehensive online marketing solutions including email marketing, landing pages, workflow automation, and WhatsApp communication. The company targets businesses and marketers seeking flexible, no-code marketing tools. With over 1000 users and ISO 27001 certification, JUNE holds a reputable market position supported by strong branding and client trust signals. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, domain transfer protection, and certification, although DNSSEC is not enabled and explicit privacy and terms pages are missing. Overall, the site demonstrates a high level of business credibility and technical competence.

The website icefat.org is currently inaccessible beyond a security challenge page that performs browser verification before granting access. This indicates the presence of a Web Application Firewall (WAF) or anti-bot protection mechanism, which blocks direct content access. Due to this, no business-related content, contact information, or policies are available for analysis. The domain is long-standing, registered since 1999 with Network Solutions, LLC, and is not privacy protected, which suggests legitimacy. However, the lack of accessible content and absence of HTTPS or security headers reduces trust and usability. The technical infrastructure appears minimal, with DNS parking name servers and no visible CMS or frameworks. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is absent. Overall, the site is not currently usable for end users or analysis beyond the WAF challenge.

A

ARTIM

artim.org

61

ARTIM is a consortium of premier fine art logistics companies established in 2001, serving leading museums, galleries, auction houses, dealers, and private collectors worldwide. The website presents a professional image consistent with its business focus on specialized transportation and handling of fine art. The technical infrastructure is based on the Wix platform, leveraging Wix Thunderbolt framework and standard JavaScript polyfills, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and some JavaScript hardening, but lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for such consortium websites. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

S

Smith Optics

smithoptics.com

9

Smith Optics operates a professional e-commerce website specializing in eyewear products including sunglasses, prescription glasses, goggles, helmets, apparel, and accessories. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing and analytics tools such as Klaviyo, Yotpo, and Cookiebot. The site demonstrates good design quality, mobile optimization, and accessibility, providing a positive user experience for its target audience of outdoor enthusiasts and consumers seeking performance and lifestyle eyewear. However, the absence of publicly accessible WHOIS data and missing explicit privacy and terms of service pages reduce transparency and privacy compliance confidence. Security posture is strong with HTTPS enforced and cookie consent implemented, but there is room for improvement in publishing security policies and contact information. Overall, the website is credible and functional but would benefit from enhanced compliance and transparency measures.

B

blackcrows

black-crows.com

73

Black Crows operates a professional e-commerce website specializing in skis and outerwear, targeting winter sports enthusiasts. The company presents a strong market position as a niche premium brand with a comprehensive product range including skis, poles, apparel, and accessories. The website is built on the Shopify platform, leveraging modern technologies such as Alpine.js and Tailwind CSS, and integrates multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Klaviyo. The site demonstrates excellent design quality, mobile optimization, and user experience, with clear navigation and consistent branding. Security posture is strong with HTTPS enforcement, security headers, and secure payment integrations, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. WHOIS data aligns with the business claims, indicating legitimacy and transparency. Overall, the website is a secure, professional, and trustworthy platform for Black Crows' e-commerce operations.

B

BIPEM GmbH & Co. KG

baerchen.de

58

Bärchen.de is a well-established German brand operated by BIPEM GmbH & Co. KG, specializing in child-friendly food products such as Bärchen-Wurst and fruit spreads. The website serves families with children by providing product information, recipes, nutrition advice, and creative activities. The brand has a strong market presence with over 27 years of history and maintains consistent branding and trust indicators including privacy policies and social media engagement. Technically, the site is built on WordPress with a moderate tech stack including jQuery, Matomo Analytics, Facebook Pixel, and Pinterest Tag. Hosting appears to be with Deutsche Telekom, supporting good performance and mobile optimization. Security posture is solid with HTTPS enforced and consent management implemented, though security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Sage

sage.com

72

Sage is a well-established enterprise software company specializing in AI-powered business management solutions including accounting, payroll, HR, and ERP software. The website demonstrates a strong market position with a comprehensive product portfolio targeting businesses of all sizes, from sole traders to large enterprises. The digital infrastructure is modern, leveraging Sitecore CMS, RequireJS, and advanced monitoring tools like New Relic and SpeedCurve, ensuring fast performance and excellent user experience. Security posture is robust with HTTPS enforcement, multiple security headers, and ISO 27001 certification, although explicit incident response contacts and vulnerability disclosure policies are not publicly evident. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a high level of business credibility.

E

ECOTRANS

destinet.eu

51

The website destinet.eu operates as a knowledge networking portal dedicated to sustainable and responsible tourism. It serves as a platform connecting various stakeholders including businesses, certification bodies, destination administrations, and NGOs. The portal offers resources such as courses, publications, a market place, and news updates, positioning itself as a key player in the sustainable tourism ecosystem. The business model is non-profit and focuses on collaboration and information dissemination to promote sustainability in tourism. Technically, the site uses a Naaya CMS platform with a tech stack including jQuery, Google Analytics, Google Tag Manager, and Slick Carousel. The site is mobile optimized and has good SEO practices, though some technical debt exists with the use of an older jQuery version. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks advanced headers like CSP and a cookie consent mechanism. WHOIS data indicates consistent and legitimate domain registration without privacy protection, aligning with the website's business purpose. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

The website www.kinderblick.org operates as an adult-themed Chinese manga reading platform, focusing on BL and erotic comics. It offers free online access to a large collection of manga with features such as search, rankings, and updates. The platform targets mature audiences interested in adult manga content, leveraging common web technologies like jQuery, Swiper.js, and CryptoJS for functionality and user experience. However, the site lacks critical compliance elements such as privacy and cookie policies, contact information, and security best practices. The WHOIS data is unavailable or malformed, which raises concerns about the legitimacy and transparency of the domain ownership. Overall, the site provides niche content but falls short in security posture and regulatory compliance.

S

STTA Consulting – Africa Sustainable Tourism Space

sttakenya.org

48

The website represents an organization likely operating in a community or non-profit sector, as indicated by the domain and content structure. The site is built on WordPress using Elementor and several plugins to enhance functionality, including Instagram feeds and quiz/survey makers. The technical infrastructure is moderate, with basic mobile optimization and standard CMS usage. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which could be improved. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user trust mechanisms. Overall, the site appears legitimate but underdeveloped in terms of content richness and security maturity.

Klima-Kollekte gGmbH is a German non-profit organization focused on facilitating climate protection through voluntary contributions to certified climate projects, primarily in the Global South. The organization offers services including emission accounting, financing of climate projects, consulting, and educational resources. Their business model emphasizes transparency, compliance with the Paris Agreement, and fostering global climate justice. The website targets environmentally conscious companies, organizations, and individuals seeking to offset their carbon footprint responsibly. Technically, the website is built on TYPO3 CMS with modern web technologies such as jQuery, Slick Carousel, and Featherlight Lightbox. It integrates consent management via Consentmanager.net and uses Google Tag Manager and Matomo (Piwik) for analytics. Hosting is managed through DomainControl nameservers, indicating professional domain management. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, and no formal security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance with GDPR-aligned policies. Overall, Klima-Kollekte presents a trustworthy and professional online presence with strong business credibility and transparency. The security posture is solid but could be enhanced by adding explicit security headers and formalizing security policies. The website is safe, free from adult or questionable content, and well-suited for its target audience.

F

fairunterwegs

fairunterwegs.org

57

fairunterwegs is a Swiss non-profit organization dedicated to promoting fair and sustainable tourism. The website provides educational content, tips, and resources aimed at consumers interested in environmentally friendly and socially responsible travel. Positioned as a niche player in the sustainable tourism sector, fairunterwegs leverages digital channels and social media to engage its target audience. The organization was founded in 2003 and operates primarily within Switzerland. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Google reCAPTCHA, and Cookiebot for consent management. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Hosting and DNS services are provided by reputable providers, though DNSSEC is not enabled, representing a minor security enhancement opportunity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, additional security headers could be implemented to strengthen the security posture. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and trustworthy domain. Overall, fairunterwegs presents a professional and trustworthy online presence with a focus on privacy compliance and user consent. Strategic recommendations include enabling DNSSEC, publishing a formal privacy policy and terms of service, and enhancing security headers to improve resilience against web threats.

R

Roundtable Human Rights in Tourism

humanrights-in-tourism.net

48

The Roundtable Human Rights in Tourism is a well-established non-profit association based in Germany, focused on promoting human rights within the tourism industry. It serves as a multi-stakeholder platform offering networking, training, impact assessments, and knowledge sharing to tourism companies and related stakeholders. The organization is recognized for its credibility and international reach, supporting companies in implementing human rights due diligence aligned with UN guidelines. Technically, the website is built on Drupal 10, uses Matomo for analytics, and incorporates modern front-end libraries, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS enforced, though some security headers are missing and privacy compliance could be improved by adding explicit policies and consent mechanisms. The domain WHOIS data is missing or inaccessible, which is unusual and slightly reduces trust, but the professional content and clear contact information support legitimacy. Overall, the website is professional, content-rich, and trustworthy, serving an important role in the human rights and tourism sector.

V

Verein ehemaliger Schüler und Freunde der Sebastian-Kneipp-Schule Bad Wörishofen e.V.

ves-kneippschule.de

50

VES Kneippschule is a non-profit association based in Germany focused on providing continuing education and training in physiotherapy. The organization targets physiotherapists, masseurs, and other medical auxiliary professionals, including former students and friends of the Sebastian-Kneipp-Schule. Their offerings include specialized courses, symposia, and membership services. The website reflects a niche regional educational provider with a clear business model centered on professional development in healthcare. Technically, the website is built on TYPO3 CMS, utilizing modern web technologies such as Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good navigation and SEO practices. Hosting appears to be managed via your-server.de, with no detected WAF or blocking mechanisms. Performance is moderate with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, explicit security headers like CSP and X-Frame-Options are not detected, and no formal security policy or incident response information is published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The risk profile is low, with recommendations to enhance security headers and publish security policies to improve transparency and resilience.

S

Schwäbischer Turnerbund (STB) e.V.

stb.de

53

The Schwäbischer Turnerbund (STB) e.V. is a well-established non-profit sports federation based in Stuttgart, Germany, serving sports clubs, volunteers, and various age groups including children, youth, and seniors. The organization offers a broad range of services including education, event organization, fitness and health programs, and support for member clubs. Their market position is strong regionally within Baden-Württemberg, supported by a professional and content-rich website. The digital infrastructure is based on TYPO3 CMS with modern technologies and integrations such as Usercentrics for consent management and Matomo for analytics, hosted on a reputable provider (Hetzner).

R

Rheinhessischer Turnerbund e.V.

rhtb.de

45

Rheinhessischer Turnerbund e.V. is a regional non-profit sports association based in Germany, specializing in gymnastics, fitness, health, and educational services for sports clubs and communities in the Rheinhessen region. The website serves as a comprehensive portal for event information, educational programs, and club services, targeting sports enthusiasts, families, and regional sports organizations. The organization maintains a consistent brand presence and partners with several regional sponsors and service providers. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party services such as SiteSearch360 for search functionality and CookieConsent2 for privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie banner, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy digital presence for the Rheinhessischer Turnerbund e.V., with recommendations to enhance security headers and incident response transparency to further strengthen its security posture.

W

Westfälischer Turnerbund e.V.

wtb.de

58

Westfälischer Turnerbund e.V. is a regional non-profit sports association based in Hamm, Germany, focused on gymnastics, sports education, and community sports events. The website serves as an information hub for members, athletes, and trainers, offering event details, educational programs, and membership services. It maintains a strong regional presence and partners with several related sports organizations and event platforms. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is good with HTTPS and CSRF protections, though some security headers like CSP could be improved. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and a named data protection officer. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious or adult content.

R

Rheinischer Turnerbund e.V.

rtb.de

58

Rheinischer Turnerbund e.V. (RTB) is a regional non-profit sports federation based in Germany, focusing on supporting sports clubs and promoting gymnastics and physical education in the Rhineland region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and hosting services, with moderate performance and good mobile optimization. The site includes basic structured data for business identification but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

G

GEDLICH Racing GmbH

gedlich-racing.com

54

GEDLICH Racing GmbH is a specialized motorsport event organizer based in Germany, offering a range of services including trackdays, race tests, Nordschleifentraining, coaching, and business events. The company targets motorsport enthusiasts from beginners to professionals and operates both in Germany and Southern Europe. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with modern libraries and plugins, hosted by IONOS SE, and employs privacy-conscious analytics tools like Matomo alongside Google Analytics and Meta Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

D

Deutscher Motor Sport Bund e.V.

dmsb.de

54

The Deutscher Motor Sport Bund e.V. (DMSB) is the national governing body for motorsport in Germany, serving as a non-profit federation overseeing various motorsport disciplines. The website reflects a professional and well-structured digital presence, built on the TYPO3 CMS platform, with a focus on accessibility as evidenced by the integrated accessibility tool. The site targets German motorsport participants and enthusiasts, providing regulatory information, licensing, and event support services. Technically, the site employs modern web standards and includes Google Analytics for user tracking, though it lacks explicit cookie consent mechanisms and privacy policy disclosures. Security posture is adequate with HTTPS enforced, but could be improved by adding security headers and formal security policies. Overall, the domain and website appear legitimate and consistent with the organization's mission, though WHOIS data is minimal.

C

CCC Druck und Medien

ccc-ms.de

10

CCC Druck und Medien is a small, local business based in Münster, Germany, specializing in digital printing, repro/CAD printing, advertising technology, and presentation systems. The company targets businesses and individuals in the Münster area seeking professional printing and media services. Their market position is that of a local specialist with a comprehensive service offering and an online presence including an online shop partner site. Technically, the website is built on WordPress using standard and modern libraries such as Bootstrap and jQuery, with moderate performance and good mobile optimization. The site includes a comprehensive cookie consent mechanism compliant with GDPR, indicating a good level of privacy compliance. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-structured, with clear navigation and relevant content. No critical security or compliance issues were detected.

B

BBS

bbs.com

63

BBS is a reputable manufacturer specializing in automotive wheels with a strong motorsport heritage. Their website reflects a professional e-commerce platform built on Magento, targeting quality-conscious automotive enthusiasts globally. The technical infrastructure leverages modern JavaScript frameworks and includes tracking and consent management tools, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is functional, professional, and safe for general audiences.

A

auto-rennsport.de

auto-rennsport.de

45

auto-rennsport.de is a specialized German online media publication focused on national motorsport news, event coverage, and related content. The website targets motorsport enthusiasts primarily in Germany and German-speaking regions, offering news articles, photo galleries, and an online shop. The business operates as a small media outlet with a niche focus, founded around 2020. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and WPBakery Page Builder, hosted on German servers (kasserver.com). The site demonstrates good SEO practices, mobile optimization, and basic accessibility. Security posture is moderate, with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and a formal security policy or vulnerability disclosure. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences with no adult or questionable material. WHOIS data is minimal but consistent with the business profile, showing no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security headers and transparency could enhance its posture.

F

FRICKE Transporte GmbH

fricke-transporte.de

47

FRICKE Transporte GmbH is a family-owned logistics and transport company based in Germany, operating in its fourth generation. The company offers a range of services including freight forwarding, vehicle washing, vehicle workshop services, and vehicle inspections. Their market position is that of a trusted local and international logistics provider with a focus on reliable and tailored transport solutions. The website is built on WordPress with Elementor and integrates a modern cookie consent mechanism via Usercentrics, reflecting a moderate level of digital maturity. The technical infrastructure is solid with HTTPS enforced and a clean, professional design that supports good user experience and mobile optimization. Security posture is generally strong with no visible vulnerabilities or exposed sensitive data, although the absence of security headers and a security policy page suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR, with clear contact information and social media presence enhancing credibility.

J

JODEXNIS Versicherungsmakler GmbH

clickvers.de

10

ClickVers.de is an established German online insurance brokerage platform operated by JODEXNIS Versicherungsmakler GmbH, founded in 1952. The company offers a wide range of insurance products including liability, accident, vehicle, household, and specialized insurance categories. The website is professionally designed with clear navigation and good SEO practices, targeting a broad audience seeking insurance solutions in Germany. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and employs cookie consent mechanisms to comply with GDPR. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though additional security headers could enhance protection. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

G

Graewe

graewe.de

60

Graewe is a manufacturing company specializing in screws, bolts, and turned parts, positioning itself as a reliable European partner in the industrial sector. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix hosting and scripts. While the site presents professional and relevant content for its target industrial audience, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response contacts. The security posture is basic with HTTPS enabled but missing advanced security headers. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures to improve trust and regulatory adherence.

H

H & R

h-r.com

10

H & R is a German manufacturing company specializing in automotive suspension components, leveraging technology transfer from international motorsport to develop innovative products for series vehicles. The website presents a professional and comprehensive digital presence with detailed product categories, service information, and multilingual support. The technical infrastructure is based on WordPress with modern JavaScript frameworks and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and branding indicate a credible business. Overall, the site is well-structured and trustworthy for its target audience.