Security Directory

V

Virgin Money Australia

virginmoney.com.au

71

Virgin Money Australia is a prominent financial services provider offering a wide range of products including everyday banking accounts, credit cards, home loans, superannuation, and various insurance products. The website reflects a mature digital presence with a focus on customer rewards and comprehensive financial solutions tailored for the Australian market. The brand is well established with consistent navigation and professional design, targeting retail consumers and businesses in Australia. Technically, the site leverages Adobe Experience Manager as its CMS, integrates multiple analytics and marketing tools such as Google Tag Manager, Amplitude, Adobe Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag, indicating a sophisticated approach to user tracking and marketing optimization. Hosting is supported by Akamai CDN infrastructure, enhancing performance and availability. Security posture is solid with HTTPS enforced and no visible sensitive data exposure; however, the absence of DNSSEC and some security headers suggests room for improvement. Privacy compliance is moderate due to missing explicit privacy and cookie policies in the provided content. Overall, the website is professional, trustworthy, and well-positioned in the Australian financial services sector.

T

Turn2us

turn2us.org.uk

77

Turn2us is a UK-based national charity dedicated to providing information and support to individuals facing financial insecurity. The organization helps people access benefits and charitable grants, positioning itself as a trusted resource in the non-profit sector. The website reflects a professional and user-friendly design, with clear navigation and comprehensive content tailored to its target audience. Technically, the site employs modern JavaScript frameworks, integrates third-party services such as Stripe for payments, Google Analytics for tracking, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms with granular controls, but lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Overall, the website is safe, trustworthy, and compliant with GDPR, though improvements in security transparency and WHOIS data clarity are advised.

The website hymans-digital.co.uk is currently inaccessible due to a Cloudflare 523 error indicating that the origin web server is unreachable. This prevents access to any substantive content or business information. The domain is registered with Easyspace Ltd since 2021, which aligns with a relatively new digital business, but no further company details or contact information are available on the landing page. The technical infrastructure relies on Cloudflare as a CDN and security provider, but the origin server connectivity issue severely impacts availability and user experience. Security posture is weak due to lack of visible security headers and absence of HTTPS confirmation. Privacy and compliance policies are not present, and no forms or data collection mechanisms are detected. Overall, the site is currently non-functional and lacks trust and credibility indicators.

V

Virgin Money

virginmoney.com

74

Virgin Money UK is a well-established financial services provider offering a broad range of personal and business banking products including current accounts, credit cards, mortgages, savings, investments, pensions, and insurance. The website demonstrates a strong market position supported by multiple industry awards and a clear focus on customer service and financial wellbeing. The target audience is UK-based individuals and businesses seeking banking and financial products. The business model centers on retail and business banking with a digital-first approach complemented by physical branches and community engagement.

W

Woosmap

woosmap.com

64

Woosmap is a technology company specializing in location intelligence solutions, offering a suite of APIs and services that transform location data into actionable insights. Their platform supports a wide range of industries including retail, e-commerce, logistics, hospitality, finance, and government sectors. The company positions itself as a privacy-conscious provider with GDPR-compliant solutions, catering primarily to developers and enterprises seeking scalable geolocation services. The website showcases strong branding, client testimonials, and detailed product offerings, reflecting a mature market presence.

S

SEFE Energy UK

sefe-energy.co.uk

60

SEFE Energy UK is a reputable business energy supplier operating primarily in the UK market, offering a broad range of gas, electricity, and renewable energy products tailored to business customers. The company is part of the larger SEFE Group, which has a strong European presence and a focus on decarbonisation and sustainable energy solutions. Their website reflects a professional and modern digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern web technologies including Umbraco CMS, Vue.js components, and integrates multiple analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is unavailable due to a registry error indicating the domain name is invalid, which is a concern for domain legitimacy but the website content and business information are credible and consistent with a legitimate energy supplier. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with minor penalties for WHOIS inconsistencies and missing security policy disclosures.

N

Nationale Dienststelle Missbrauch im kirchlichen Kontext

missbrauch-kath-info.ch

49

The website www.missbrauch-kath-info.ch serves as a dedicated platform for the scientific research and transparent processing of sexual abuse cases within the Catholic Church in Switzerland. It is a non-profit initiative backed by major Swiss Catholic organizations such as the Schweizer Bischofskonferenz (SBK), Römisch-Katholische Zentralkonferenz (RKZ), and Katholische Ordensgemeinschaften der Schweiz (KOVOS). The site provides information on ongoing research projects, church measures, support for victims, and updates on the state of processing abuse cases. The target audience includes victims, church authorities, researchers, and the general public interested in this sensitive topic. The business model is non-commercial, focusing on social responsibility and transparency.

S

Swiss Patient Access Pilot

spap.health

50

Swiss Patient Access Pilot (SPAP) is a healthcare-focused program initiated by the Swiss Society for Medical Oncology (SGMO) to facilitate patient access to selected oncology medicines that are medically necessary but rejected by health insurance. The program is supported by pharmaceutical companies such as Roche, Astra Zeneca, and iQone, positioning it as a niche but important healthcare access initiative within Switzerland. The website provides information primarily in German with multilingual support, targeting patients and healthcare professionals seeking exceptional reimbursement pathways for oncology drugs. Technically, the website is built on WordPress CMS, utilizing the Yoast SEO plugin for optimization and the UIkit framework for UI components. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. No major performance issues are evident, and the site is fully accessible without WAF or security challenges. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and published incident response or security policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected. WHOIS data is unavailable, likely due to privacy protection, which is justifiable given the healthcare context. Overall, the site presents a professional and trustworthy front for a specialized healthcare program, with moderate technical maturity and a solid security baseline. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance compliance and trust.

A

APOMEDICA Pharmazeutische Produkte

magnesium-sport.at

45

The website magnesium-sport.at represents APOMEDICA Pharmazeutische Produkte's brand Dr. Böhm® Magnesium Sport®, specializing in mineral supplements tailored for sports and active lifestyles. The site targets athletes and fitness enthusiasts in Austria, emphasizing product quality, doping-free certification, and exclusive pharmacy distribution. The business holds a solid niche position in the healthcare supplement market with a focus on magnesium and potassium products that support muscle function and recovery. Technically, the website is built on WordPress with the Avada theme and uses common plugins such as Revolution Slider and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and delivers moderate performance. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and uses an older jQuery version, which could be improved. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. The site integrates social media channels and maintains trust through doping-free certifications and transparent product information. Overall, the website is professional, trustworthy, and well-suited for its target audience, though security enhancements and explicit incident response policies could further strengthen its posture.

2

2024 kerschbaumer group I Website by Kings & Cake Werbeagentur

kerschbaumer-trophies.at

56

Kerschbaumer Trophies is a specialized Austrian e-commerce retailer offering a wide range of trophies, medals, and personalized awards with engraving and printing services. The company targets sports clubs, associations, and individuals seeking customized trophies, positioning itself as a niche market leader in Austria. The website demonstrates a professional design with clear navigation and mobile optimization, leveraging modern web technologies such as jQuery, Bootstrap, and lazy loading for performance. Security posture is solid with HTTPS enforced and secure login forms, though it lacks explicit privacy and cookie policies, security headers, and incident response information, indicating areas for compliance improvement. WHOIS data confirms the legitimacy of the domain and business alignment. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

E

Erste Bank

erste.at

63

Erste Bank is a leading Austrian financial institution offering comprehensive retail banking services including checking accounts, savings, loans, investments, and insurance. The website targets private customers in Austria, providing modern digital banking solutions and extensive product information. The site demonstrates a mature digital infrastructure with responsive design, modern JavaScript frameworks, and structured data for SEO. Security posture is strong with HTTPS and secure coding practices, though explicit privacy and cookie policies are not evident in the provided content. Overall, Erste Bank's website reflects a professional, trustworthy, and user-friendly platform aligned with its market position.

S

Swiss Society of Hematology

sgh-ssh.ch

10

The Swiss Society of Hematology (SGH SSH) is a professional organization dedicated to representing hematologists in Switzerland. It provides postgraduate and continuous education, supports clinical and laboratory hematology professionals, and organizes key events such as the Swiss Oncology and Hematology Congress. The society targets medical professionals and researchers in hematology, offering membership services and educational resources. The website is built on a modern WordPress platform with a professional design and clear navigation, reflecting a mature digital presence. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a comprehensive cookie consent mechanism, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a strong security posture with room for improvement in security headers and public policy disclosures. The domain registration data aligns well with the organization's identity, supporting its legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

S

Schweizerische Gesellschaft für Medizinische Onkologie

sgmo.ch

66

The Swiss Society of Medical Oncology (SGMO) operates as a professional association and scientific society dedicated to medical oncologists in Switzerland. The organization focuses on promoting oncology science, regulating training and continuing education, representing professional interests, and fostering networking within the medical community. The website is multilingual, professionally designed, and provides comprehensive information about the society's mission, events, and membership. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although formal security policies and incident response contacts are not publicly disclosed. Privacy compliance is strong, with clear cookie consent mechanisms and a detailed privacy policy. Overall, the site reflects a trustworthy and professional entity with a clear focus on healthcare professionals in Switzerland.

O

Home | OeGHO

oegho.at

47

The website www.oegho.at represents a professional organization likely related to the medical or scientific community in Austria, as indicated by the site title 'OeGHO' and the use of TYPO3 CMS. The site uses modern frontend technologies such as Bootstrap 4.3.1 and is structured with responsive design principles, providing a good user experience and navigation clarity. However, the lack of visible privacy, cookie, and terms of service policies indicates incomplete compliance with modern privacy standards. The absence of contact information and security headers suggests room for improvement in transparency and security posture. WHOIS data could not be retrieved due to quota limits on the NIC.AT WHOIS server, limiting the ability to fully verify domain legitimacy. Overall, the site appears legitimate and safe but would benefit from enhanced privacy and security measures.

R

Römisch-katholischer Pastoralraum Möhlinbach

moehlinbach.ch

51

The Römisch-katholischer Pastoralraum Möhlinbach is a regional non-profit Catholic church organization serving multiple parishes in the Möhlinbach area of Switzerland. The website provides comprehensive information about its pastoral services, community offerings, and contact details for various parish offices. The organization targets local Catholic community members and offers services such as sacraments, social support, and youth programs. Technically, the website is built on TYPO3 CMS with modern front-end libraries like Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with its mission, though it could improve in privacy and security transparency.

S

Streck Transportges. mbH | Streck Transport AG

streck-transport.com

10

Streck Transport operates as a transportation and logistics service provider with presence in Germany and Switzerland. The website acts as a portal linking to their regional sites, targeting business clients seeking transport solutions. The company appears to be a medium-sized regional player in the transportation sector. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Matomo analytics configured for privacy compliance. The site is mobile optimized and well-structured, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed security policies are absent. WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, but could improve transparency and security documentation.

E

Elektro Lichtin AG

elektrolichtin.ch

48

Elektro Lichtin AG is a small regional electrical services company based in Möhlin, Switzerland, specializing in electrical installations, lighting, safety systems, network infrastructure, and household appliances. The website is primarily in German and targets local customers seeking professional electrical services. The business model focuses on service provision with a clear physical presence and contact information. The company maintains a moderate market position as a trusted local provider. Technically, the website uses standard HTML5 and CSS with JavaScript enhancements, including Google Analytics with IP anonymization and a cookie consent banner, indicating basic digital maturity and privacy awareness. The site is moderately optimized for mobile and accessibility but lacks advanced frameworks or CMS indications. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS (assumed from external Google Analytics scripts loaded over HTTPS), but no explicit security headers were detected in the provided data. The presence of cookie consent and anonymized analytics is positive, but the absence of published security policies or incident response information suggests room for improvement. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and safe for general audiences. The risk level is low, but strategic improvements in security headers, incident response transparency, and privacy policy detail would enhance compliance and trust.

M

Gestalten und verkaufen mit Print-on-Demand | Spreadshop

myspreadshop.ch

59

The website myspreadshop.ch serves as a landing page for a print-on-demand merchandise platform affiliated with Spreadshop and Spreadshirt. It targets individuals and small businesses interested in creating and selling custom merchandise online. The business model is based on enabling users to open their own merchandise shops with no upfront cost, leveraging print-on-demand fulfillment services. The site is positioned within the e-commerce sector and appears to serve primarily the Swiss and German-speaking markets. Technically, the site is simple, using standard HTML and CSS with web fonts, and is moderately optimized for mobile devices. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts in the provided content. Security posture is weak due to absence of visible security headers, privacy policies, and contact information, which impacts compliance and trust. The domain uses privacy protection, which is common and justified for this business type. Overall, the site is functional but minimalistic, with room for improvement in security, privacy, and user engagement features.

H

hajk

hajk.ch

73

hajk.ch is a Swiss e-commerce retailer specializing in outdoor equipment, clothing, and camping gear, officially affiliated with the Pfadibewegung Schweiz (Swiss scouting movement). The website targets outdoor enthusiasts and scouts in Switzerland, offering high-quality and sustainable products. The business model is retail-focused, leveraging a Magento-based platform with a modern Hyvä frontend theme. The site demonstrates a good level of digital maturity with integrated analytics, cookie consent, and user tracking mechanisms. Security posture is solid with HTTPS, CSRF protections, and deferred script loading, though explicit privacy and terms policies are not found in the provided content. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

G

Gemeinde Therwil

therwil.ch

67

Gemeinde Therwil operates as the official municipal government website for the community of Therwil in Switzerland. It provides residents and visitors with comprehensive information about local administration, education, social services, public safety, events, and waste management. The website serves as a digital portal for accessing municipal services, announcements, and contact information, positioning itself as a trusted local government resource. Technically, the site is built on the Weblication CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with video content delivered via Video.js. The site demonstrates good mobile optimization and clear navigation, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector role effectively.

The Ehemaligenverein Jungwacht Therwil is a small Swiss non-profit organization dedicated to connecting former leaders and members of the Jungwacht Therwil youth group. The website serves as an informational portal to promote membership, share memories, and provide access to a summer camp archive. The organization is community-focused with a clear founding date and transparent contact information via email. Technically, the website is simple, built with basic HTML and CSS, and integrates Facebook social plugins for community engagement. However, it lacks advanced CMS, security headers, and privacy or cookie policies, indicating room for improvement in compliance and security. The security posture is basic with no visible vulnerabilities but missing standard security best practices. Overall, the site is safe, trustworthy, and serves its niche audience well but would benefit from enhanced privacy compliance and security hardening.

S

Schulsport Burgdorf

schulsport-burgdorf.ch

64

Schulsport Burgdorf is a local educational initiative providing voluntary school sports courses for students in Burgdorf, Switzerland. The website serves as an information and registration portal for 17 different sports courses aimed at students from 1st to 9th grade. The organization positions itself as a bridge between mandatory school sports and club sports, focusing on inclusivity and beginner-friendly offerings. The business model is non-commercial and community-focused, targeting local school children and their families. Technically, the website is built on the Weblication CMS platform, utilizing jQuery and etracker for analytics. The site is well-structured with good mobile optimization and basic accessibility features. Performance is moderate, and SEO practices are adequately implemented. The site uses HTTPS and includes a cookie consent banner, indicating attention to privacy compliance. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies or incident response documentation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing no privacy protection or suspicious registration details, supporting the legitimacy of the domain. Overall, Schulsport Burgdorf presents a trustworthy, well-maintained online presence for a small educational sports initiative. Strategic improvements could include enhancing security headers, publishing security policies, and expanding privacy documentation to further strengthen compliance and trust.

The website smith-nephewonline.com currently serves a 404 error page indicating that the content is missing or the page never existed. There is no visible business information, contact details, or policies on the site. The domain is registered since 2013 with a reputable registrar, suggesting the domain is legitimate but the website is either under maintenance or abandoned. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript, and no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. No privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the site is non-functional and lacks trust and professionalism.

A

Axiom Building Services Ltd.

axiombs.co.uk

51

Axiom Building Services Ltd is a well-established UK-based company specializing in mechanical and electrical design, installation, and maintenance services primarily targeting the commercial and industrial sectors across the South West and Midlands regions. Founded in 2006, the company has a strong market presence supported by multiple industry certifications and a professional digital footprint. Their website reflects a mature business with clear branding, comprehensive service descriptions, and active social media engagement. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and content management capabilities. The site is mobile-optimized and includes performance-enhancing features like lazy loading images and asynchronous script loading. Google Tag Manager is used for analytics, indicating a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were found, suggesting a solid but improvable security posture. Overall, the website and business demonstrate a high level of professionalism and trustworthiness with minor recommendations for enhancing security headers and publishing formal security policies to further strengthen compliance and risk management.

D

Direct Independent Financial Consultants (IFC) Ltd.

direct-ifc.co.uk

52

Direct Independent Financial Consultants (IFC) Ltd. is a well-established UK-based independent financial advisory firm founded in 1995, offering a broad range of personal and corporate financial planning services. The company holds FCA regulation and emphasizes tailored financial solutions including protection, retirement, investment, and tax planning. The website reflects a professional and trustworthy presence with comprehensive service descriptions and clear contact information. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WPBakery, providing good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site demonstrates a mature digital presence aligned with industry standards and regulatory compliance.

F

Freizeit- und Kulturzentrum Neue Schmiede

neue-schmiede.de

40

Neue Schmiede is a well-established non-profit leisure and cultural center located in Bethel, Bielefeld, Germany. It offers a broad range of inclusive services including gastronomy, cultural events, event spaces, leisure and travel programs, and employment opportunities for people with disabilities. The organization is affiliated with the v. Bodelschwinghsche Stiftungen Bethel, enhancing its credibility and community integration. The website reflects a strong commitment to accessibility and inclusion, supported by dedicated accessibility widgets and partnerships with recognized social organizations.

B

Bielefeld barrierefrei erleben!

bielefeld-barrierefrei.de

37

Bielefeld barrierefrei erleben! is a specialized non-profit website dedicated to providing comprehensive information about barrier-free and accessible locations in Bielefeld, Germany. The site targets individuals with mobility, visual, or hearing impairments, as well as the general public interested in accessibility. It offers detailed listings of buildings, rooms, and venues with accessibility features, supporting inclusive participation in cultural, educational, and recreational activities. The website is built on WordPress, leveraging common plugins and modern frontend libraries like Swiper.js, and is hosted on kasserver.com. It demonstrates good technical maturity with mobile optimization, accessibility features, and SEO best practices. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though security headers are not explicitly detected. However, the site lacks published privacy and cookie policies, which impacts GDPR compliance and privacy posture. Contact information is not explicitly found, limiting direct communication channels. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and clearer contact details.

S

SEFE

sefe.eu

68

SEFE is a European energy company focused on securing reliable energy supply through trading, sales, infrastructure, and services across gas, power, and hydrogen sectors. The company positions itself as a key player in enhancing energy security and accelerating the transition to a low-carbon future in Europe. Their website reflects a professional and comprehensive digital presence with detailed sections on company strategy, sustainability, portfolio, and career opportunities. Technically, the website employs modern web technologies including ES6 JavaScript modules, jQuery, and integrates a GDPR-compliant cookie management platform (Usercentrics). Google Tag Manager is used for analytics and tracking, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and shows evidence of good security practices, although explicit security headers are not fully visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were found. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations.

S

SEFE Energy

sefe-energy.fr

51

SEFE Energy is a professional natural gas supplier targeting businesses and professionals in France. It offers tailored energy contracts, energy transition services including carbon compensation and audits, and emphasizes customer service quality. The company is part of the larger SEFE Group, an international energy enterprise owned by the German federal government, with sister sites in the UK, Netherlands, and Germany. The website is well-structured, professionally designed, and provides comprehensive information about its offerings and corporate values. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools such as Matomo, Google Tag Manager, and Hotjar, alongside a cookie consent mechanism via Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, with no detected blocking or WAF interference. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The WHOIS data is not publicly available due to AFNIC privacy policies, but the domain is active and updated recently, consistent with a legitimate business. Contact information is clear, including a company email and physical address. Privacy and cookie policies are present and GDPR compliant. No adult or questionable content is found, making the site safe for general audiences. Overall, SEFE Energy demonstrates a mature digital presence with strong business credibility and a solid security baseline, though it could enhance transparency around security policies and incident response.

S

SEFE Energy NL

sefe-energy.nl

66

SEFE Energy NL is a specialized energy supplier focused on providing business customers in the Netherlands with gas and electricity solutions, including green energy options. The company positions itself as a customer-centric and sustainability-conscious partner with over 12 years of experience. Their digital presence is modern and professional, leveraging Umbraco CMS, Vue.js, and multiple analytics and marketing tools to deliver a responsive and user-friendly website. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, SEFE Energy NL demonstrates a mature digital infrastructure and a trustworthy market position in the energy sector.

S

StoP – Stadtteile ohne Partnergewalt e.V.

stop-partnergewalt.org

62

StoP – Stadtteile ohne Partnergewalt e.V. is a German non-profit organization dedicated to preventing partner violence through community-based initiatives at the neighborhood level. The website serves as an informational and engagement platform, highlighting local chapters across multiple German cities and Austria, and providing resources and educational content. The organization targets community members, victims, and supporters of violence prevention, positioning itself as a grassroots social project with a clear mission and active local presence. Technically, the website is built on WordPress using the Elementor page builder, with common web technologies such as jQuery and Swiper.js for interactive elements. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent with the organization's profile, with no privacy protection on WHOIS data, indicating transparency. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit public security policies. Cookie consent is implemented via a WordPress plugin, supporting GDPR compliance to some extent. No incident response or vulnerability disclosure information is publicly available, representing an area for improvement. Overall, the website is trustworthy and professional, with good content quality and clear navigation. However, the absence of a privacy policy and security headers slightly reduces compliance and security posture scores. The site is safe for general audiences, with no adult or explicit content detected.

W

Wolters Kluwer Kft.

complex.hu

70

Wolters Kluwer Kft. operates a professional e-commerce platform (shop.wolterskluwer.hu) focused on legal, tax, accounting, and administrative products and services in Hungary. The company is a leading LegalTech and publishing provider offering databases, software, books, journals, and professional training primarily targeting legal and tax professionals as well as government bodies. The website demonstrates a mature digital presence with clear navigation, professional branding, and a comprehensive product catalog. Technically, the site uses modern web technologies including Bootstrap, Google Tag Manager, and Eloqua forms, with asynchronous script loading and HTTPS enforced, indicating a solid infrastructure. However, there is room for improvement in privacy compliance disclosures and security headers implementation. Security posture is good with no visible vulnerabilities or exposed sensitive data, but the absence of explicit privacy and cookie policies and incident response information reduces compliance confidence. Overall, the website is trustworthy and professionally managed, reflecting the reputation of its parent company, Wolters Kluwer.

H

Hydrogen Germany

hydrogen-germany.de

58

Hydrogen Germany is a leading German economic alliance focused on promoting clean energy through hydrogen technologies. The organization serves as a platform uniting companies and associations across the hydrogen value chain to accelerate Germany's transformation into a hydrogen economy. The website presents comprehensive information about hydrogen production, transport, and application, targeting industry stakeholders and policymakers. Technically, the site is built on WordPress, uses modern JavaScript libraries, and is hosted with Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible source for hydrogen industry information in Germany.

P

Pforzemer Mess

pforzemer-mess.de

61

Pforzemer Mess is a local event organizer hosting an annual fair in Pforzheim, Germany, with the 2025 event scheduled from June 13 to June 22. The website provides detailed information about the event's attractions and schedule, targeting families and general audiences. The site is built on WordPress using the Avada theme and incorporates SEO and accessibility features, including multilingual support and cookie consent mechanisms. Technically, the site is well-structured with moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and privacy compliance evident, though some security headers and explicit policies could be improved. Overall, the website is trustworthy, professional, and serves its purpose effectively.

F

Familie Krug

krug.de

40

The website www.krug.de represents a personal or family homepage for the Krug family, primarily featuring a simple welcome message and contact information. The site lacks commercial or business-oriented content, focusing instead on providing basic information about the family. The technical infrastructure is modest, utilizing Bootstrap 4 and jQuery for frontend presentation, hosted on a domain managed via GoDaddy's nameservers. There is no evidence of advanced CMS or backend technologies, and the site does not employ analytics, advertising, or tracking tools, indicating a low level of digital maturity. From a security perspective, the website does not demonstrate strong security posture. There is no visible enforcement of HTTPS or presence of security headers, and no privacy or cookie policies are provided, which may raise compliance concerns under GDPR for European users. The contact information is clearly presented, but no incident response or vulnerability disclosure mechanisms are in place. The WHOIS data aligns with the website content, showing a registrant named Thomas Krug, consistent with the family theme, and no privacy protection is used. Overall, the website is safe and family-friendly, with no adult or questionable content detected. However, the lack of security best practices and privacy compliance measures suggests room for improvement. The site is suitable for its apparent purpose as a personal family page but would require significant enhancements to meet business or regulatory standards. Strategic recommendations include implementing HTTPS with proper security headers, adding privacy and cookie policies to comply with GDPR, and establishing basic security and incident response protocols to enhance trust and compliance.

T

Tucher Privatbrauerei

tucher-privatbrauerei.de

67

Tucher Privatbrauerei is a historic German brewery established in 1672, specializing in the production and distribution of premium beer products primarily targeted at mature audiences. The company maintains a strong market position as a national premium beer manufacturer with a focus on craftsmanship, reliability, and tradition. Their website reflects this heritage with professional design, clear navigation, and content emphasizing their brand values and product range. The site includes age verification to comply with alcohol advertising regulations and links to responsible drinking campaigns, underscoring their commitment to social responsibility. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Usercentrics for consent management, ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were detected, and accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement. From a security perspective, the site shows good compliance with privacy regulations and responsible data handling, but lacks explicit incident response contacts and security.txt files. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, supporting a high trustworthiness rating. Overall, the website presents a professional and trustworthy digital presence for Tucher Privatbrauerei, with strong compliance and security foundations. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility to further strengthen their security posture and user trust.

T

Tucher

tucher.de

64

Tucher is a historic German brewery established in 1855, specializing in the production and promotion of traditional beers such as Weizenbier and Rotbier. The website reflects a mature, professional brand targeting adult consumers with a focus on cultural heritage and responsible alcohol consumption. The company maintains a moderate digital presence with social media integration and offers brewery tours and engagement initiatives. Technically, the website employs modern JavaScript libraries and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. Overall, the site is well-structured, mobile-optimized, and trustworthy, with no signs of blocking or WAF interference.

S

Sportson International Oy

sportson.fi

60

Sportson International Oy operates a Finnish e-commerce platform specializing in tennis, padel, and badminton sports equipment and apparel. Founded in 1982, the company has established itself as a leading sports wholesale and retail business in Finland, representing notable brands such as Babolat and Fila. The website serves both B2C and B2B customers, offering a comprehensive product range with fast delivery and free shipping over certain order values. Technically, the website employs modern web technologies including jQuery, Google reCAPTCHA for form security, FontAwesome icons, Google Fonts, and integrates Klarna for payment processing. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with good SSL configuration and employs reCAPTCHA to protect forms from abuse. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no visible cookie consent mechanism is present, which are areas for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR as evidenced by a comprehensive privacy policy. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers and privacy consent would enhance the security posture and compliance further.

S

Sportson International Oy

babolat.fi

59

Babolat.fi is an established Finnish e-commerce retailer specializing in tennis, padel, and badminton equipment and apparel. Operated by Sportson International Oy, founded in 1982, the website serves Finnish sports enthusiasts with a direct import business model focusing on Babolat and Fila brands. The site offers a comprehensive product range with fast delivery and free shipping over a threshold, targeting both amateur and professional players. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Google reCAPTCHA for spam protection. It is well-optimized for mobile and accessibility, with good SEO practices and structured data enhancing search visibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy, but lacks an explicit cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in the Finnish sports retail market.

M

Mad Mimi

madmimi.com

66

Mad Mimi was a SaaS email marketing platform founded in 2006, offering services such as HTML email newsletters, subscriber growth, and email list management. The service was retired as of August 30, 2024, with GoDaddy consolidating its email marketing offerings under GoDaddy Digital Marketing. The website content reflects this transition and directs users to GoDaddy's new platform. Technically, the site uses modern JavaScript libraries, Google reCAPTCHA for bot protection, and is hosted via GoDaddy and Cloudfront CDN. However, DNSSEC is not enabled, and no explicit security headers are present, indicating room for security improvements. Privacy compliance is basic, with a cookie consent banner but no visible privacy policy or terms of service on the homepage. Overall, the site is functional but minimal, reflecting the retirement status of the service.

A

Allianz Lebensversicherungs-Aktiengesellschaft

chemie-verbandsrahmenvertrag.de

60

The website www.chemie-verbandsrahmenvertrag.de serves as an informational and service platform for the Chemie-Verbandsrahmenvertrag, a tariff-based pension scheme for employers and employees in the chemical industry in Germany. Operated under the Allianz Lebensversicherungs-Aktiengesellschaft brand, it provides detailed information about membership, offers, administration, and support services. The site targets chemical industry companies and their workforce, offering tools such as an offer calculator and online login services. The business model focuses on facilitating pension scheme participation and management within the chemical sector, supported by industry partners BAVC and IG BCE. Technically, the website is built on the ecomas CMS platform, utilizing standard web technologies including JavaScript and CSS. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR. No major security vulnerabilities or exposed sensitive data were detected, though formal security policies and incident response contacts are not published. From a security perspective, the site maintains a solid posture with encrypted connections and privacy compliance. However, it lacks explicit security policy documentation and vulnerability disclosure mechanisms, which could be improved. The WHOIS data is minimal but consistent with the business purpose, and no WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic recommendations include enhancing published security policies, adding incident response contacts, and implementing security.txt for vulnerability reporting to further strengthen trust and compliance.

I

IG BCE (Industriegewerkschaft Bergbau, Chemie, Energie)

igbce.de

60

The IGBCE website represents a major German trade union focused on the mining, chemical, and energy sectors. It provides comprehensive information for employees about collective bargaining, tariff policies, education, and member services. The site is professionally designed with consistent branding and rich content targeted at union members and stakeholders in Germany. Technically, the site uses CoreMedia CMS, modern JavaScript libraries, and includes bot protection via Friendly Captcha. Analytics are implemented with Etracker, respecting user privacy and cookie consent. Security posture is good with HTTPS and consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is trustworthy and well-maintained, serving a large membership base effectively.

V

Virgin Money UK

virginmoneygiving.com

73

Virgin Money UK is a well-established financial services provider in the United Kingdom, offering a broad range of banking, savings, mortgages, investments, and insurance products. The Virgin Money Giving platform, which supported charity fundraising for over 12 years and raised more than £1 billion, was closed in November 2021. The website reflects a professional and consistent brand presence with comprehensive information about the closure and guidance for users. Technically, the site uses modern web technologies including jQuery, Adobe DTM, Evidon consent management, and Visual Website Optimizer, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS, Content Security Policy, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The lack of WHOIS data for the subdomain reduces domain registration trust signals but does not detract from the overall legitimacy of the brand. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts.

D

Deep Blue Watches

deepbluewatches.com

61

Deep Blue Watches operates an e-commerce website specializing in dive watches and related accessories, targeting professional divers, military personnel, and watch enthusiasts. The company claims to have been established since 2007, positioning itself as a niche market leader with a focus on precision and durability. The website offers a range of products, customer service options, watch registration, and financing, supported by active social media channels. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various tracking and marketing tools, hosted likely on Turbify with Cloudflare services. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS, CAPTCHA protections, and secure checkout domains, though some security headers and policies are missing. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. The WHOIS data is missing, raising concerns about domain legitimacy and consistency with the claimed business history. Overall, the site is functional and trustworthy from a user perspective but would benefit from improved transparency and security documentation.

The website at othree.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. This prevents direct access to the actual business content, limiting the ability to analyze the company's services, policies, or contact information. The domain is registered with 20i Ltd, a reputable UK registrar, since 2000, suggesting a well-established presence. The technical infrastructure uses modern frontend technologies such as Bootstrap 5.3.3 and integrates Google reCAPTCHA for security. However, no privacy, cookie, or terms of service policies are visible, and no contact or business information is presented on this page. Security headers and SSL/TLS configuration details are not discernible from the provided content. Overall, the site demonstrates basic security practices but lacks transparency and accessible content for comprehensive evaluation.

JJ-CCR aps is a specialized Danish company manufacturing the JJ-CCR rebreather, a rugged and versatile diving apparatus designed for demanding environments such as wreck and cave diving. The company serves a niche market including military units, exploration teams, and professional divers worldwide. Their website reflects a professional and focused business with clear offerings in manufacturing, training, and service support. The company maintains a global network of instructors and service centers, emphasizing safety and reliability. Technically, the website is built on WordPress with WooCommerce, employing modern plugins and tools such as Google Analytics and reCAPTCHA to enhance user experience and security. The site is hosted by One.com and uses HTTPS, though DNSSEC is not enabled. Security posture is solid but could be improved with additional headers and published policies. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

D

Dive Damai

dive-damai.com

57

Dive Damai operates a luxury liveaboard diving service in Indonesia, targeting scuba diving enthusiasts seeking premium travel experiences. The website provides detailed information about their trips, destinations, itineraries, and schedules, positioning itself as a niche player in the hospitality sector focused on diving tourism. The business appears small but professional, with clear contact information and a consistent brand presentation. Technically, the website is built on the Wix platform, leveraging modern web technologies and delivering a good user experience with mobile optimization. However, the site lacks advanced security headers and privacy compliance features, which are important for protecting user data and building trust. From a security perspective, HTTPS is enabled, but the absence of WHOIS registration data raises concerns about domain legitimacy. No privacy or cookie policies were found, and no incident response or security contact information is provided. These gaps suggest room for improvement in compliance and security posture. Overall, the site is functional and professional but would benefit from enhanced security practices, privacy compliance, and verification of domain registration to improve trustworthiness and reduce risk.

H

HoliThemes

holithemes.com

56

HoliThemes is a technology company specializing in WordPress plugins, notably a WhatsApp integration plugin with over 600,000 active installations. The company operates a professional website built on WordPress using modern themes and optimization plugins, targeting website owners and digital marketers seeking to enhance their web presence. Their market position is that of a niche but well-established plugin provider with a clear focus on digital product sales and web technologies. The website demonstrates a mature technical infrastructure with good performance, SEO, and mobile optimization, leveraging tools like WP Rocket and Rank Math SEO. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though it lacks advanced security headers and published security policies. Privacy compliance is addressed with a cookie consent mechanism and privacy policy, but incident response and vulnerability disclosure information are absent. Overall, the site is trustworthy, professional, and well-maintained, with room for improvement in security transparency and formal policies.

M

Ministerium für Kinder, Jugend, Familie, Gleichstellung, Flucht und Integration des Landes Nordrhein-Westfalen

mkjfgfi.nrw

68

The website www.mkjfgfi.nrw is an official government portal for the Ministry of Children, Youth, Family, Equality, Flight and Integration of North Rhine-Westphalia, Germany. It provides comprehensive information and services related to social policies, family support, youth programs, integration efforts, and equality initiatives. The site targets residents and stakeholders in NRW, offering resources, official documents, and contact forms to facilitate public service delivery. Technically, the site is built on Drupal CMS with Bootstrap framework, ensuring a responsive and accessible user experience. The site employs modern web technologies and maintains good SEO and accessibility standards. No tracking or analytics scripts are present, reflecting a strong privacy posture. Security-wise, the site enforces HTTPS and uses cookie consent banners with clear categories. However, it lacks explicit security policy pages and incident response contacts, which could be improved. WHOIS data is privacy protected but consistent with official government use of the .nrw TLD, supporting legitimacy. Overall, the website demonstrates a mature digital presence with good content quality, privacy compliance, and security posture. Strategic recommendations include publishing security policies, incident response information, and enhancing security headers to further strengthen trust and compliance.

K

Kommunales Integrationszentrum Bielefeld

ki-bielefeld.de

40

Kommunales Integrationszentrum Bielefeld is a government-affiliated integration center serving the city of Bielefeld, Germany. It provides a broad range of services including integration support, educational counseling, anti-discrimination initiatives, and community event organization. The website reflects a strong local government presence with official branding and funding from regional ministries. The target audience includes migrants, refugees, local families, and educational institutions. The business model is public service oriented, funded by government bodies, and focused on social inclusion and integration. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, enhanced by accessibility features and mobile optimization. It uses custom analytics and complies with GDPR through cookie consent mechanisms. Hosting is provided by a German hosting provider consistent with the domain's nameservers. Performance is moderate with good SEO and structured data implementation. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, some security headers are not explicitly detected and there is no public security policy or incident response information. Privacy compliance is strong with clear privacy and cookie policies. Business credibility is high due to official contact information, government logos, and consistent branding. Overall, the website is trustworthy, professional, and well-maintained, serving its public service mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and security posture.