Security Directory

C

CLICKDOC - Arzttermine online buchen & Gesundheits-Apps

clickdoc.de

48

Clickdoc.de is an established German online platform specializing in healthcare appointment booking and health app discovery. The website targets patients and healthcare users in Germany, offering services such as booking appointments with general practitioners, gynecologists, dentists, and more. The platform leverages modern web technologies including Angular and integrates marketing and analytics tools like Google Tag Manager and Qualtrics. The site demonstrates moderate technical maturity with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy and cookie policies. No contact or security incident information is provided, which limits transparency and user trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve user confidence and regulatory adherence.

P

plazy GmbH

plazy.travel

59

plazy GmbH operates a German-based travel platform offering personally curated travel tips and guides, primarily targeting travelers interested in Germany and worldwide destinations. The platform leverages expert journalist insights and provides content via a website and a podcast named 'places to go'. The company positions itself as a niche player in the hospitality sector, emphasizing 'lazy planning' for travel enthusiasts. Technically, the website is built on modern frameworks such as Angular and Ionic, with good mobile optimization and accessibility features. Analytics are handled via Matomo, respecting user privacy with a cookie consent mechanism. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit security policies or vulnerability disclosures are published. The WHOIS data is privacy protected or unavailable, which is typical for small businesses, but the website content and business information appear consistent and professional. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

B

Bielefeld Marketing GmbH

bielefeld-convention.de

57

Bielefeld Marketing GmbH operates the Bielefeld Convention website to promote the city of Bielefeld as a prime location for congresses, conferences, and events. The organization targets event planners and businesses seeking professional event services and locations in central Germany. The website offers detailed information about the location, services, partners, and contact persons, supported by a newsletter subscription and active social media presence. Technically, the site is built on Drupal CMS with Bootstrap framework, employing modern analytics and marketing tools such as Matomo and Facebook Pixel. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the organization.

B

Bielefeld Marketing GmbH

bielefeld-gutschein.de

46

Bielefeld Marketing GmbH operates the Bielefeld Gutschein website, offering a local city voucher system designed to promote and support the retail, gastronomy, and service sectors within Bielefeld, Germany. The voucher acts as a prepaid payment method accepted by numerous local businesses, fostering community engagement and economic activity in the city center. The website targets local residents and visitors who wish to support local businesses or gift experiences within the city. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring a good user experience and SEO optimization. Privacy compliance is well addressed with GDPR-compliant cookie consent and a comprehensive privacy policy. Security posture is solid with HTTPS and privacy-conscious analytics (Matomo), though some security headers could be improved. The WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trust but does not outweigh the legitimate business presence and content quality. Overall, the website is professional, secure, and well-positioned to serve its local community purpose.

B

Bielefeld Marketing GmbH

bielefeld-marketing.de

50

Bielefeld Marketing GmbH is a municipal marketing organization dedicated to promoting the city of Bielefeld as a vibrant place for living, tourism, events, and business. The company manages popular city events, tourism services, marketing campaigns, and brand management, positioning itself as a best-practice example in city marketing within Germany. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the website is built on Drupal CMS with modern front-end frameworks like Bootstrap and integrates analytics tools such as Matomo and Facebook Pixel. The site is mobile-optimized, accessible, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. Overall, the website and organization demonstrate a mature digital infrastructure and trustworthy business presence. The lack of explicit incident response or vulnerability disclosure policies is a minor gap. The site is safe for general audiences and does not contain any adult or questionable content.

Z

Zoovu

zoovu.com

71

Zoovu is a technology company specializing in AI-powered search and product discovery solutions aimed at personalizing online ecommerce experiences. Their platform offers services such as AI search, merchandising, and product recommendations to drive ecommerce growth. The company appears to target ecommerce businesses and online retailers with a B2B SaaS business model. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools, including HubSpot, Google Analytics, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and domain protections in place, though improvements can be made by enabling DNSSEC and publishing security policies. Overall, the website is professional, well-branded, and trustworthy, with no signs of blocking or WAF interference.

T

Terminland GmbH

terminland.de

59

Terminland GmbH is a well-established German company specializing in online appointment booking solutions, serving a broad range of industries such as healthcare, automotive, legal, and beauty services. The company positions itself as a market leader in Germany with over 15,000 deployed appointment plans and more than 90 million booked appointments. Their platform offers 24/7 online booking capabilities, enhancing customer satisfaction and operational efficiency for service providers. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions tailored to their target B2B audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and FontAwesome, hosted securely in German data centers operated by Equinix. The site is mobile-optimized and accessible, with good SEO practices and performance. Google Tag Manager and Google Analytics are used for tracking, with a GDPR-compliant cookie consent mechanism in place. However, explicit security headers are not visibly declared, and no dedicated security or incident response policies are published. From a security perspective, the site uses TLS encryption and is hosted in a reputable carrier-neutral data center, ensuring good baseline security. The absence of explicit security headers and vulnerability disclosure policies suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Terminland GmbH demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its business domain. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen trust and security maturity.

M

moBiel GmbH

mobiel.de

43

moBiel GmbH is the primary public transportation operator in Bielefeld, Germany, managing the StadtBahn and majority of bus lines. The company offers comprehensive mobility services including ticketing, timetable information, and sharing options such as bike and carsharing. The website is professionally designed, well-structured, and optimized for mobile users, reflecting a mature digital presence. Technically, it leverages TYPO3 CMS and Angular framework, with integrated consent management and tracking tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, moBiel demonstrates a trustworthy and credible business with clear contact channels and compliance with GDPR. Strategic recommendations include publishing security policies and enhancing security header configurations.

S

Stadtwerke Bielefeld

stadtwerke-bielefeld.de

52

Stadtwerke Bielefeld is a regional utility company providing energy, gas, water, and district heating services to the Bielefeld region in Germany. The website presents a comprehensive offering of services tailored to both private and business customers, including energy tariffs, heating solutions, water supply, and energy consulting. The company maintains a strong regional presence with a clear focus on customer service and sustainability. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and includes GDPR-compliant cookie consent mechanisms. However, explicit privacy policy and terms of service documents were not found in the provided content, which is a gap in compliance and transparency. Security posture is moderate with HTTPS usage and consent management but lacks visible security headers and incident response contact information. Overall, the website is professional, well-structured, and trustworthy, but could improve in privacy and security documentation to enhance compliance and user trust.

P

PickEngine by KNAPP

pickengine.com

60

PickEngine by KNAPP is a professional B2B website offering an advanced automatic warehouse system designed for rapid deployment and high throughput in fulfillment operations. The company leverages proven shuttle technology and intelligent software to optimize warehouse processes, targeting businesses seeking scalable and ergonomic automation solutions. The website is well-structured, multilingual, and optimized for SEO and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the professional presentation and strong brand association with KNAPP AG. Overall, the site demonstrates a robust business and technical foundation with room for enhanced transparency in security and contact information.

K

KNAPP

kisoft-connect.com

61

KiSoft connect is a partner program operated by KNAPP, a recognized technology company specializing in logistics software solutions. The program enables selected partners to market, sell, and implement KiSoft software products, supported by training and certification. The website presents a professional and well-structured digital presence, emphasizing partnership benefits and software portfolio. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit incident response policies could enhance protection. WHOIS data is incomplete or missing, which raises some concerns about domain registration legitimacy; however, the strong brand association with KNAPP mitigates this risk. Overall, the site is trustworthy, compliant with GDPR, and well-positioned for its business objectives.

R

RBA Revistas S.A.

cuerpomente.com

65

Cuerpomente.com is a Spanish-language wellness media website focused on nutrition, psychology, and healthy living. It operates under the RBA Revistas S.A. group, offering editorial content, online courses, and subscription services. The website demonstrates a mature digital infrastructure with modern advertising and consent management technologies, including integration with Google Tag Manager, Didomi, and multiple ad networks. The site is well-branded and professionally designed, targeting Spanish-speaking wellness enthusiasts. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, which raises some concerns but the website content and branding strongly indicate legitimacy. Privacy policy and terms of service pages were not explicitly found in the provided HTML snapshot, suggesting room for compliance improvement.

S

Saber Vivir · La web de referencia en salud

sabervivirtv.com

62

Saber Vivir is a well-established Spanish health and wellness media website providing updated and practical information on exercise, nutrition, and healthy living. It operates under the RBA group, a recognized media company, offering both digital and print magazine subscriptions. The website demonstrates a mature digital infrastructure with integration of modern advertising networks, consent management tools, and analytics services. The content is professionally curated, targeting a general audience interested in health and lifestyle topics. Security posture is solid with HTTPS and consent frameworks in place, though explicit privacy and terms policies are not clearly found in the analyzed content. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given its association with RBA. Overall, the site is a credible and authoritative source in its domain with room for improvement in transparency and contact information.

R

RBA Revistas S.A.

semana.es

65

Semana.es is a well-established Spanish online magazine specializing in celebrity news, lifestyle, fashion, wellness, and royal family coverage. It operates under the RBA Grupo umbrella, a recognized media group in Spain. The website offers rich, up-to-date content targeting Spanish-speaking audiences interested in entertainment and lifestyle. The business model relies heavily on advertising revenue complemented by subscription services. Technically, the site uses a modern stack including ASP.NET, various advertising and tracking SDKs, and a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is restricted by Red.es policies, which is typical for .es domains, and no direct contact information is publicly available on the homepage. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie consent requirements.

InStyle.es is a leading Spanish-language online magazine focused on celebrity fashion, beauty, and lifestyle content. It operates under the RBA Grupo, a reputable Spanish publishing house, and offers rich multimedia content including articles, videos, and newsletters. The website targets a general audience interested in fashion trends and celebrity news. Technically, the site uses a modern tech stack including ASP.NET, JWPlayer, Google Tag Manager, and multiple advertising and consent management platforms, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR consent mechanisms, although explicit privacy and terms of service pages are not clearly found in the provided content. The domain WHOIS data is restricted by Red.es policies, which is common for .es domains, limiting direct registrant verification but does not raise suspicion given the brand's market presence. Overall, the site is professional, content-rich, and well-integrated with advertising and tracking technologies, but could improve transparency in privacy and contact information.

C

Revista CLARA - Tendencias en moda, belleza, celebrities y bienestar

clara.es

63

The website clara.es is a well-established Spanish digital magazine focused on women's lifestyle topics including fashion, beauty, celebrities, and wellness. It operates under the RBA media group umbrella, offering rich editorial content and a subscription model for digital editions. The site demonstrates a mature technical infrastructure using ASP.NET, modern ad and analytics technologies, and a consent management platform to comply with privacy regulations. Security posture is good with HTTPS and standard best practices, though explicit privacy and terms of service pages were not detected in the provided content. WHOIS data is unavailable due to Red.es restrictions, but the website's branding and content align with a legitimate media entity. Overall, the site is professional, content-rich, and targets a general female audience interested in lifestyle topics.

R

RBA Revistas S.A.

lecturas.com

63

Lecturas.com is a well-established Spanish digital media platform specializing in celebrity news, royal family updates, lifestyle content including beauty, fashion, recipes, and horoscopes. The site targets Spanish-speaking audiences interested in entertainment and lifestyle news. Technically, the site is built on ASP.NET with a modern advertising and consent management infrastructure, including Prebid.js, Google Tag Manager, and Didomi for GDPR compliance. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable transparency gap but the site is linked to RBA Revistas S.A., a reputable media company. Overall, the site is professional, content-rich, and safe for general audiences.

R

RBA Revistas S.A.

arquitecturaydiseno.es

10

Arquitectura y Diseño is a Spanish media website specializing in architecture, design, decoration, and sustainability content. It serves a niche audience of design enthusiasts and professionals, offering editorial content supported by advertising and subscription models. The site is part of the RBA group, a recognized media company in Spain. Technically, the website employs modern JavaScript libraries, ad networks, and a consent management platform to ensure compliance with privacy regulations. The security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site presents a professional and trustworthy digital presence with good content quality and user experience.

E

El Mueble

elmueble.com

65

El Mueble is a leading Spanish media company specializing in home decoration, lifestyle, and related content. The website offers a rich variety of articles, recipes, and subscription-based premium content, targeting Spanish-speaking audiences interested in home decor and lifestyle. The business operates under the RBA Grupo umbrella, leveraging advertising and subscription revenue streams. Technically, the site uses a modern tech stack including ASP.NET, JavaScript libraries for ads and consent management, and integrates multiple ad networks and analytics tools. Security posture is good with HTTPS enforced and partial security headers, but could be improved with additional headers and published security policies. Privacy compliance is strong, with GDPR-consent mechanisms implemented via Didomi. The lack of WHOIS data is a concern and warrants further investigation, but the website content and branding strongly indicate a legitimate and professional operation.

S

SpeakUp

speakup.es

66

SpeakUp is a Spanish educational media brand specializing in English language learning through engaging articles, audio content, and subscription services. It operates under the RBA publishing group, offering both free and premium content to Spanish-speaking learners at various proficiency levels. The website demonstrates a mature digital presence with a modern tech stack including consent management and advertising frameworks. Security posture is good with HTTPS and GDPR compliance, though some security headers could be improved. The site is well-designed, mobile-optimized, and provides clear navigation and subscription options. WHOIS data is unavailable due to registry restrictions, but the brand's legitimacy is supported by consistent branding and parent company association.

B

Bergzeit GmbH

bergzeit.de

11

Bergzeit GmbH operates a well-established online and physical retail platform specializing in outdoor sports equipment and apparel, targeting enthusiasts of mountain sports such as climbing, hiking, skiing, and biking. Founded in 1999 and based in Germany, Bergzeit offers a comprehensive product catalog with over 50,000 items from major brands, supported by professional customer service and a second-hand marketplace. The company maintains a strong market position as a trusted retailer with certifications such as EMAS and Trusted Shops. Technically, the website employs modern JavaScript frameworks, integrates multiple payment providers, and uses Azure DNS for hosting, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, CSRF protections, and cookie consent mechanisms, although explicit security headers could be further confirmed. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, Bergzeit presents a professional, secure, and user-friendly platform with high trustworthiness and excellent content quality.

G

Gigerlas Lössel

gigerlas-loessel.de

47

Gigerlas Lössel is a traditional hospitality business based in Germany, specializing in Bavarian cuisine such as grilled chicken (Gigerla), Haxn, and homemade sausages. Established since 1927, the company has a strong local presence and participates in regional festivals like the Nürnberger Volksfest and Frühlingsfest. Their website reflects a well-maintained digital presence with clear branding and customer engagement features including online reservations and event information. The target audience is general public and festival attendees seeking authentic traditional food experiences. Technically, the website is built on WordPress using popular plugins and frameworks such as Bootstrap, Visual Composer, Slider Revolution, and Contact Form 7. The site is mobile optimized and includes GDPR-compliant cookie consent mechanisms via the Complianz plugin. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS with IP anonymization for Google Analytics and includes a cookie consent banner. However, it lacks advanced security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is adequate but could be improved with additional headers and formal policies. The website is trustworthy with clear contact information, consistent branding, and no suspicious content. The domain WHOIS data is partially consistent with the business claims, showing stable name servers but limited registrant details. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

S

Sportson International Oy

babolat.com

60

Sportson International Oy operates a Finnish e-commerce platform specializing in tennis, padel, and badminton sports equipment and apparel. Founded in 1982 and based in Kaarina, Finland, the company represents well-known brands such as Babolat and Fila. The website targets both retail consumers and B2B customers, offering a comprehensive product range with fast delivery and free shipping over a threshold. Technically, the site employs modern web technologies including jQuery, Google reCAPTCHA, and Google Analytics, ensuring a functional and user-friendly experience with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, though improvements are recommended in cookie consent and security headers. Overall, the website presents a professional and trustworthy digital presence aligned with its business operations and market position.

S

Sparkasse Kaiserslautern

sparkasse-kl.de

71

Sparkasse Kaiserslautern is a regional financial institution providing a broad range of banking and financial services including online banking, loans, insurance, investments, and real estate services. The website targets both private and corporate customers with a strong emphasis on accessibility and user-friendly digital services. The bank holds several awards recognizing its advisory quality and market position. Technically, the website is built on a modern stack likely powered by Adobe Experience Manager, with responsive design and good SEO and accessibility features. Security posture is strong with HTTPS, session management, and cookie consent mechanisms, although explicit security policies and vulnerability disclosure mechanisms are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

engelhorn

engelhorn.de

59

Engelhorn operates a professional German e-commerce platform specializing in fashion, sport, and luxury goods. The website offers a broad catalog of products with detailed navigation and category structures targeting general consumers interested in premium and sportswear brands. The business model is retail-focused with an emphasis on online sales and brand variety. Technically, the site leverages Salesforce Commerce Cloud, integrates multiple marketing and analytics tools such as Google Tag Manager, Emarsys Predict, and CQuotient, and employs fraud detection via ThreatMetrix. The site is mobile-optimized and SEO-friendly but could improve accessibility and performance optimizations. Security posture is solid with HTTPS, reCAPTCHA, and consent management but lacks explicit security headers and published security policies. Privacy compliance is basic with consent mechanisms but no visible privacy or cookie policies in the provided content. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.

S

Sparkassenverband Rheinland-Pfalz

sv-rlp.de

49

The Sparkassenverband Rheinland-Pfalz (SVRP) operates as a central umbrella organization and service provider for the savings banks (Sparkassen) and their municipal sponsors in the Rheinland-Pfalz region of Germany. The website reflects a professional, well-structured digital presence focused on providing information about the association's services, educational offerings via its Akademie, and news updates relevant to its stakeholders. The organization holds recognized certifications such as the 'audit berufundfamilie' and supports diversity initiatives, enhancing its trustworthiness and social responsibility profile. Technically, the site is built on TYPO3 CMS, employs modern web standards, and is optimized for accessibility and mobile devices, though performance is moderate. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and explicit incident response information. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is trustworthy, professional, and well-aligned with its business purpose.

B

Banf Crossmedia Group GmbH

banf-holz.de

64

Banf-Holz is a small German retail business specializing in handcrafted wooden products such as unique ballpoint pens and corkscrews. The company operates an e-commerce storefront powered by the ePages platform and actively participates in local exhibitions and cultural markets, targeting consumers interested in artisanal wooden goods. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses modern JavaScript frameworks and lazy loading for images, with embedded YouTube videos enhancing user engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is adequate with a cookie consent mechanism and GDPR-aligned privacy policy. Contact information and legal pages are clearly presented, supporting business credibility.

B

Banf Werbung GmbH

banf-werbung.de

42

Banf Werbung GmbH is a German advertising company specializing in sports sponsoring and advertising technology services. It operates as part of the Banf Crossmedia Group and targets businesses and sports organizations seeking advertising solutions. The website is built on WordPress using Elementor, featuring a modern design with good mobile optimization and basic accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and explicit security policies. No direct contact emails or phone numbers are visible on the homepage, but social media presence is established on LinkedIn, Facebook, and Instagram. Overall, the site is professional and trustworthy with room for security and compliance improvements.

V

Verein Jakobsweg.ch

jakobswegplus.ch

65

The website jakobswegplus.ch represents a non-profit initiative by Verein Jakobsweg.ch to provide a wheelchair-accessible pilgrimage route across Switzerland from Konstanz to Genf. The project is positioned as a niche service targeting wheelchair users interested in spiritual and cultural pilgrimage experiences. The site is built on the Jimdo CMS platform, leveraging standard web technologies and third-party widgets for enhanced functionality. It demonstrates good digital maturity with mobile responsiveness, cookie consent mechanisms, and clear contact information. Security posture is adequate with HTTPS enforced and cookie management in place, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy and professionally presented, supporting its mission effectively.

C

Camino Europe Team

camino-europe.eu

63

Camino Europe is a specialized informational website dedicated to providing comprehensive resources about pilgrimage routes, particularly the Camino de Santiago and other cultural trails across Europe. The site targets pilgrims, hikers, and cultural enthusiasts, offering GPS data, downloadable PDFs, news updates, and accommodation registration services. The business operates primarily in German with multilingual support, positioning itself as a niche resource in the European pilgrimage community. Technically, the website is built on Silverstripe CMS 4.13 and integrates modern mapping technologies such as Leaflet.js and Mapbox GL, alongside Google Custom Search Engine for enhanced search capabilities. The site is hosted under a reputable registrar (GANDI) and uses HTTPS, ensuring secure data transmission. Performance and mobile optimization are moderate to good, with a clear navigation structure and consistent branding. From a security perspective, the site enforces HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, indicating room for improvement in security governance. No exposed sensitive data or vulnerabilities were detected in the provided content. Overall, Camino Europe presents a trustworthy and professional resource with good content quality and business credibility. However, enhancements in privacy compliance, security headers, and contact transparency would strengthen its security posture and regulatory adherence.

The website baunetzprodukte.de is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, services, or technical infrastructure. The domain is active with name servers indicating French hosting or registration, but no registrant details or business information are publicly available. Due to the lack of accessible content, no privacy, cookie, or security policies can be evaluated. The security posture cannot be assessed beyond the fact that the site is blocked, which itself is a critical issue. Overall, the site appears to be either under maintenance, misconfigured, or intentionally restricted, resulting in a very low trust and usability score.

The website heinze.de is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, its services, or technical infrastructure. The domain is active with French-based name servers, but no registrant or company information is publicly available. Due to the lack of accessible content, no privacy, cookie, or security policies are found, and no contact information is available. The security posture cannot be assessed beyond the fact that the site is blocked, which itself is a significant operational limitation. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a very low trust and usability score.

H

Heinze GmbH

baunetz-maps.de

58

BauNetz Maps is a well-established interactive platform dedicated to showcasing contemporary architecture projects worldwide. Operated by Heinze GmbH, a subsidiary of Infopro Digital, the platform aggregates over 10,000 architectural projects and related content from multiple BauNetz services, including news, architect profiles, and educational resources. The website targets a broad audience interested in architecture, including professionals and enthusiasts, and offers additional services such as job listings in the architecture and construction sectors. Technically, the website employs modern web technologies including JavaScript frameworks (likely Vue.js), Google Maps API for geolocation and mapping, and Cloudflare CDN for performance and security. Consent management and analytics are handled via ConsentManager and Webtrekk respectively, ensuring compliance with privacy regulations. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility improvements could be made. From a security perspective, the site enforces HTTPS and uses Cloudflare for DDoS protection and content delivery. Cookie consent mechanisms are implemented, and no critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be enhanced, and the site lacks a public incident response or vulnerability disclosure policy. Overall, BauNetz Maps presents a professional, trustworthy, and content-rich platform with strong business credibility and compliance posture. Strategic improvements in security headers and incident response transparency would further strengthen its security maturity.

Baunetz Architekt*innen is a well-established German-language online platform dedicated to showcasing architectural firms, their projects, news, events, and job opportunities. The site serves a broad audience interested in architecture, including professionals and enthusiasts, positioning itself as a key resource within the German-speaking architecture community. The platform is part of the BauNetz network, which includes several related portals and services, enhancing its market presence and ecosystem. Technically, the website employs modern JavaScript frameworks, lazy loading, and a reputable cookie consent management system, ensuring a good user experience and compliance with privacy regulations. Security-wise, the site uses HTTPS and Cloudflare DNS, but lacks explicit security policies or incident response information, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or suspicious activity.

BauNetz interior|design is a specialized German media platform focusing on interior architecture, design, and related innovations. The website offers a rich content experience including projects, products, stories, dossiers, and news, targeting a broad audience interested in interior design. The platform is part of the BauNetz ecosystem, which includes several related portals, indicating a strong market presence in the architecture and design media sector. Technically, the site employs modern web technologies, including JavaScript ES6 modules, Vue.js framework elements, and performance optimizations such as lazy loading and responsive design. Hosting and DNS are managed via Cloudflare, providing security and performance benefits. Security posture is solid with HTTPS enforced and cookie consent managed via Consentmanager.net, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, trustworthy, and well-optimized for user experience.

BauNetz Wissen is a specialized German-language online portal providing comprehensive knowledge and resources related to architecture and construction technology. It targets professionals such as architects, planners, and engineers, offering thousands of articles, glossary terms, and building case studies. The website is well-established within its niche, supported by a strong partner network of reputable companies in the construction sector. Technically, the site employs modern web technologies including JavaScript frameworks, consent management tools, and analytics services like Hotjar and Google Tag Manager, all integrated with GDPR-compliant consent mechanisms. Hosting and security are enhanced by Cloudflare services, ensuring good performance and SSL encryption. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates high professionalism, excellent content quality, and strong trust indicators, making it a reliable resource in its industry.

H

Heinze GmbH

baunetz-campus.de

68

BauNetz CAMPUS is a specialized online platform operated by Heinze GmbH, targeting architecture students and academic communities in Germany. It offers a rich mix of architecture news, educational content, networking opportunities, podcasts, job listings, and competitions. The platform is well integrated with the broader BauNetz network, enhancing its market position as a niche educational media outlet. Technically, the website employs modern JavaScript modules, Vue.js framework elements, and uses Cloudflare for DNS and CDN services, ensuring good performance and availability. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and integrates analytics tools like Hotjar and Google Tag Manager responsibly. No critical vulnerabilities or suspicious patterns were detected. Overall, BauNetz CAMPUS demonstrates a mature digital presence with strong privacy and security practices, suitable for its educational audience.

G

Gas und Wasserstoff – Transformation zur Klimaneutralität

gas-h2.de

55

The website gas-h2.de represents a professional industry association focused on the gas and hydrogen energy sector in Germany. It serves as a platform to promote the transformation towards climate neutrality by providing information, publications, and partnership opportunities, notably with the Hydrogen Germany alliance. The site is built on TYPO3 CMS and employs modern web technologies including Font Awesome and Bootstrap, with privacy-conscious analytics via Matomo. The technical infrastructure is solid, hosted behind Cloudflare, ensuring good performance and security. However, the site lacks explicit privacy and cookie policies, contact information, and visible security headers, which are important for compliance and trust. A suspicious external script domain was detected, which should be reviewed for security implications. Overall, the site is credible and well-positioned in its market niche but would benefit from enhanced privacy compliance and security transparency.

S

SEFE Energy UK

sefe-energy.com

60

SEFE Energy UK is a reputable business energy supplier operating primarily in the UK and Europe, offering a broad portfolio of gas, electricity, and renewable energy products tailored to business needs. The company positions itself as a leading supplier with over 50,000 customers and a strong focus on decarbonisation and sustainability solutions. The website reflects a mature digital presence with modern technologies such as Vue.js and Umbraco CMS, integrated analytics platforms including Matomo and Microsoft Clarity, and a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforcement and cookie management, though some security headers could be improved. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which is unusual but the website content and business information strongly support legitimacy. Overall, the site demonstrates professionalism, trustworthiness, and a strong market position in the energy sector.

T

Timme Hosting

timmehosting.de

72

Timme Hosting is a German-based hosting provider specializing in high-performance nginx and NVMe SSD hosting solutions tailored for websites and online shops, including managed servers and cloud hosting. The company targets businesses and organizations requiring reliable, fast, and scalable hosting services, with a strong emphasis on shop hosting platforms such as Shopware, Magento, and WooCommerce. Their market position is solidified by over 20 years of experience and a broad customer base, supported by partnerships with recognized software providers. Technically, the website is built on Drupal CMS, employs modern technologies including Matomo analytics with consent mode, and demonstrates excellent mobile optimization and SEO practices. Security posture is good with HTTPS enforced and anti-bot measures on forms, though explicit security headers and a published security policy are absent. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR. Overall, the domain is legitimate and consistent with the business branding, though WHOIS data is limited due to DENIC privacy policies. The website scores highly on content quality, technical implementation, and business credibility, making it a trustworthy and professional hosting service provider.

G

GlobalSign, GMO Internet Group, Inc.

globalsign.com

73

GlobalSign, a subsidiary of GMO Internet Group, Inc., is a leading provider of digital certificate and identity management solutions globally. Their website showcases expertise in automated, scalable digital certificates including SSL/TLS, managed PKI, IoT security, authentication, and email security services. The company targets enterprise and business customers requiring robust digital identity and security solutions. The site is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website leverages Concrete CMS, jQuery, Bootstrap, and integrates advanced analytics and marketing tools such as Google Analytics, Piwik Pro, Microsoft Clarity, and Cookiebot for consent management. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible in the HTML source and could be improved. From a security perspective, the site demonstrates good practices including encrypted connections, cookie consent, and ISO 27001 certification. The absence of a security.txt file and clear incident response contacts are gaps that could be addressed to enhance transparency and readiness. The WHOIS data is unavailable or protected, which is common for security companies but slightly reduces domain registration transparency. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively communicates its business offerings and maintains a strong security posture with room for minor improvements. The risk level is low, and the site is suitable for enterprise clients seeking digital security solutions.

The Österreichisches E-Commerce-Gütezeichen website serves as a certification and trust-building platform for Austrian online shops, emphasizing legal compliance, consumer protection, and e-commerce best practices. Supported by key Austrian institutions such as the Wirtschaftskammer, Arbeiterkammer, and the Ministry for Digitalization and Economic Location, it holds a strong market position as a trusted certification authority since 2000. The site targets both online retailers seeking certification and consumers looking for secure shopping options. Technically, the website is built on TYPO3 CMS with privacy-respecting Matomo analytics, offering a modern and responsive user experience with good SEO and accessibility basics. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and explicit policies are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

C

Conversion Bear

conversionbear.com

66

Conversion Bear operates a SaaS e-commerce solution focused on Shopify merchants, offering Honeycomb Upsell Funnels to increase sales via pre- and post-purchase upsell funnels. The company positions itself as a market leader with over 90,000 customers globally and a strong emphasis on ROI and ease of use. Technically, the website is built on Webflow with integration of modern marketing and analytics tools such as Google Tag Manager, Hotjar, LinkedIn Ads, and Clearbit, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, user-friendly, and well-optimized for mobile and SEO, supporting a credible e-commerce SaaS business.

The website at ww1.asaplabs.io presents minimal accessible content, primarily consisting of an embedded iframe pointing to an external domain with obfuscated JavaScript and tracking pixels. There is no visible business information, contact details, or privacy-related policies on the site. The WHOIS data for the domain is malformed and provides no registrar, creation, or registrant information, which raises significant concerns about the legitimacy and transparency of the domain. Technically, the site lacks security headers and there is no confirmation of HTTPS usage, further diminishing trustworthiness. Overall, the site appears suspicious and potentially malicious, with a low security posture and poor compliance with privacy standards.

M

MitgliederBenefits

mitglieder-benefits.de

52

MitgliederBenefits operates a specialized shopping portal targeting clubs and associations in Germany, offering members and employees access to exclusive discounts and cashback offers from over 300 brands and 1,800 partners. The platform is positioned as a cost-free benefit solution for non-profit organizations, enhancing member engagement and community spirit. Technically, the website is built on WordPress with the Divi theme and leverages several plugins for SEO, GDPR compliance, and user interaction. Hosting is via Amazon AWS, ensuring reliable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. The site lacks explicit terms of service and incident response policies, which could be areas for enhancement. Overall, the website presents a professional and trustworthy front for its niche market.

N

NetZone AG

netzone.ch

78

NetZone AG is a Swiss-based hosting provider specializing in web hosting, email services, domain registration, managed vServers, SMS, and security solutions. The company positions itself as a pioneer in Swiss hosting with a strong emphasis on Swiss server location, high availability, and security features such as spam and malware filtering and application firewalls. The website reflects a professional and consistent brand image targeting businesses and individuals seeking reliable hosting services in Switzerland. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap 3.3.7 and jQuery 2.2.4, with integrations for Google reCAPTCHA and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and secure forms, but lacks explicit security headers and a published security policy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and SEO.

W

WSC

wsc.group

58

WSC Group is a specialized company in the motorsport industry, focusing on rule-making and service provision for car racing, particularly in Touring Car categories. Founded in 2014 and based in Switzerland, WSC has established itself as a key player by launching the TCR category and pioneering electric Touring Car racing with ETCR. The company also engages in SIM Racing competitions, reflecting a modern approach to motorsport. The website is professionally designed using Squarespace, with good content quality and clear navigation aimed at motorsport professionals and enthusiasts. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, ensuring a secure browsing experience. However, the absence of privacy and cookie policies, lack of explicit contact information, and unavailable WHOIS data reduce the overall trust and compliance posture. Strategic improvements in privacy compliance and transparency are recommended to enhance credibility and security.

R

RBA Brands

rbabrands.com

60

RBA Brands is a leading Spanish media company specializing in magazine publishing and digital content distribution. The website showcases a broad portfolio of magazine brands and emphasizes its market leadership in Spain. The technical infrastructure is based on ASP.NET WebForms with modern JavaScript libraries and integrates a comprehensive consent management platform to comply with GDPR regulations. The site uses multiple analytics and advertising services, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data for the domain is a concern but the professional presentation and content quality support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy standards, though contact and security policy transparency could be enhanced.

R

RBA

serienegra.es

66

RBA Libros is a well-established Spanish publishing group specializing in various literary genres, including the crime-focused 'Serie Negra' imprint. The website serves as a digital storefront and informational portal for their crime genre books, offering features such as book listings, author information, and newsletter subscriptions. The site is professionally designed with consistent branding and targets readers interested in crime novels, essays, and biographies. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, and lazy loading libraries, hosted partially on Microsoft Azure Blob Storage, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and GDPR-compliant consent management via Didomi, though security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust verification, but the website's content and external references strongly indicate legitimacy. Overall, the site presents a trustworthy and professional digital presence for RBA's crime literature segment.

R

RBA Revistas

rbarevistas.com

58

RBA Revistas is a prominent Spanish media publishing company specializing in magazines, including well-known brands such as National Geographic España, Lecturas, Saber Vivir, and El Mueble. The website serves as a corporate portal providing information about its magazine portfolio and links to individual magazine sites. The business targets Spanish-speaking audiences interested in lifestyle, culture, health, and entertainment magazines. The company operates within the media sector and is part of the larger RBA Grupo. The website demonstrates a professional design with consistent branding and good content quality.