Security Directory

The website www.oneclickreporting.com/1clickreporting/ serves as a login portal for one-click reporting services, likely provided by Bankhaus Metzler, a reputable German financial institution. The portal targets clients requiring secure access to financial reporting tools. The site is primarily in German with an English option, reflecting a professional and client-focused service. The business model centers on providing secure online access to financial data and reporting services, positioning itself as a specialized service platform within the finance sector. Technically, the site is built using JavaServer Faces (JSF) with PrimeFaces UI components, jQuery, and Font Awesome for styling and interactivity. The presence of Google Fonts indicates some attention to design aesthetics. The site shows moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. The cookie consent mechanism is implemented, indicating awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers such as Content-Security-Policy or HSTS in the provided HTML content. No contact information or incident response details are present on the login page, and WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy. However, the strong association with Bankhaus Metzler and links to their official domain for legal and privacy information mitigate some of these concerns. Overall, the site presents a professional and secure interface for its intended users but would benefit from enhanced security headers, improved transparency in contact and incident response information, and resolution of WHOIS data inconsistencies to strengthen trust and compliance.

The website familiennamenbuch.ch is an academic and historical resource operated by the Stiftung Historisches Lexikon der Schweiz (HLS). It provides a searchable online database of Swiss family names and citizenship data from 1962, serving genealogists, historians, and researchers interested in Swiss heritage. The site is positioned as a trusted, authoritative reference with a non-commercial, educational mission. Technically, the site uses standard HTML, CSS, and JavaScript with Matomo analytics for visitor tracking. The design is basic but functional, with multilingual support and clear navigation. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is published. Overall, the site is safe, trustworthy, and well-aligned with its academic purpose, though improvements in privacy compliance and security best practices are recommended.

The website at https://hls-dhs-dss.ch/ghh/ currently serves as a maintenance placeholder page for an XWiki service managed by an administrator named 'Skol'. The content is minimal, indicating temporary unavailability with a promise of improved performance upon return. There is no active business description, contact information, or policies presented on the site. The domain is Swiss (.ch), consistent with the French and English bilingual maintenance message, but uses privacy protection in WHOIS data limiting transparency. Technically, the site is very basic, consisting of static HTML and CSS with no advanced scripts or external resources detected. The CMS is identified as XWiki from the administrator's message. No security headers or SSL details are available from the provided data, and no forms or data collection mechanisms are present. The site lacks SEO optimization and accessibility features. From a security perspective, the absence of HTTPS information and security headers is a concern. No privacy or cookie policies are found, indicating non-compliance with GDPR and related regulations. No incident response or vulnerability disclosure information is available. The domain's privacy protection is common for small or administrative sites but reduces trustworthiness. No suspicious or malicious indicators are detected. Overall, the website is currently non-functional for end users and provides minimal information. The risk is moderate due to lack of security and compliance features, but no active threats or adult content are present. Strategic improvements should focus on enabling HTTPS, publishing privacy and cookie policies, adding contact and incident response information, and enhancing content quality and professionalism.

The website e-lir.ch serves as an online historical lexicon focused on the Romansh-speaking region and the history of Graubünden, Switzerland. It provides access to approximately 3200 articles including biographies, geographic, thematic, and family history entries. The project is editorially completed as of 2012 and is linked to the official Swiss historical lexicon project (HLS/DHS). The target audience includes researchers, historians, and cultural enthusiasts interested in regional history and languages. The business model is non-commercial, likely supported by cultural or governmental institutions. Technically, the website is built with basic HTML, CSS, and JavaScript without modern CMS or frameworks. The site shows moderate performance but lacks mobile optimization and advanced accessibility features. SEO is basic with meta tags present but no structured data or Open Graph tags detected. No analytics or tracking technologies are used, indicating a privacy-respecting approach. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the content. Forms have basic JavaScript validation but no advanced security measures like CSRF tokens. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a trustworthy, niche cultural resource with good business credibility but basic technical and security implementations. Strategic improvements in security headers, HTTPS verification, and privacy compliance would enhance its posture and user trust.

P

PubliReno GmbH

publireno.ch

48

PubliReno GmbH is a small Swiss company specializing in the retail of regional books and publications primarily from the canton of Graubünden. Their online presence is a WordPress-based e-commerce platform using WooCommerce and Elementor, offering a catalog of over 500 titles from various local publishers. The website is professionally designed with good navigation and mobile optimization, targeting readers interested in regional literature. Technically, the site uses modern web technologies but lacks some advanced security headers and GDPR cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA integration but could be improved by publishing security policies and enhancing privacy compliance. Overall, the business appears legitimate with consistent WHOIS data and clear contact information, though privacy and security policies should be enhanced to meet higher compliance standards.

S

Schwabe

schwabe.ch

61

Schwabe is an established Swiss academic publisher specializing in humanities and social sciences, offering a broad range of scholarly books, e-books, journals, and databases. The website targets academics, researchers, libraries, and authors, providing a professional platform for content discovery and purchase. The business model centers on publishing and distributing academic content with a focus on quality and scholarly relevance. The company maintains a consistent brand presence and good content quality, positioning itself as a reputable player in its niche market. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Algolia Search integrated within a Shopware CMS platform. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and loading speed. Privacy considerations are evident through cookie consent mechanisms and IP anonymization in analytics. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a good security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, Schwabe's website is professional, secure, and compliant with GDPR principles, though it could benefit from publishing more comprehensive security and legal policies. The risk level is low, with strategic recommendations focusing on improving transparency and accessibility to further strengthen user trust and regulatory compliance.

X

XWiki SAS

xwiki.com

73

XWiki SAS is a well-established technology company specializing in open source knowledge management and collaboration software. With over 20 years of experience, it offers a range of standard and custom solutions including cloud hosting, support, and consulting services. The company serves a broad business audience, including large enterprises such as Amazon and Lenovo, positioning itself as a trusted provider in the enterprise wiki and collaboration market. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the XWiki platform with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain protection, and use of CAPTCHA, though explicit security policies and vulnerability disclosures are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high business credibility and technical maturity with moderate user tracking for analytics and marketing purposes.

Lumeum Verein Bethanien operates a cultural and spiritual venue in St. Niklausen, Switzerland, offering an immersive 360° film experience centered on the historical figures Niklaus von Flüe and Dorothee Wyss. The organization targets visitors interested in culture, spirituality, and history, providing ticketing, visitor information, and group visit services. The website is professionally designed, consistent in branding, and provides clear contact details and social media presence, positioning it as a trustworthy small non-profit entity in the hospitality and media sectors. Technically, the website is built on the Contao CMS platform and employs modern JavaScript libraries such as jQuery, Handorgel, and Swipe.js. It integrates third-party booking and tracking services from Smeetz and Google Analytics. The site is mobile-optimized with moderate performance and basic accessibility and SEO features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and visible security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, but incident response and vulnerability disclosure information are absent. Overall, the website is safe, family-friendly, and professionally maintained with a good security posture but could improve privacy compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

K

Kloster Werthenstein

kloster-werthenstein.ch

46

Kloster Werthenstein is a Swiss cultural and spiritual site offering visitors a place to experience tradition, history, and spirituality. The website serves as an informational platform highlighting the monastery's history, events, pilgrimage services, and natural surroundings. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and tracking tools such as Google Analytics, Facebook Pixel, and Pinterest Tag. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and professionally presented but would benefit from enhanced privacy and security disclosures.

K

Kirchgemeinde Thomas

thomaskirche.ch

46

Thomaskirche is a small, non-profit religious community based in Basel-Stadt, Switzerland, affiliated with the Evangelisch-reformierte Landeskirche Basel-Stadt. The website serves as an information hub for community events, religious services, youth programs, and social engagement projects. It targets local community members and churchgoers, providing schedules, contact information, and event details. Technically, the site is built on WordPress using the Divi theme, with standard web technologies such as FontAwesome and Google Fonts. The site is moderately performant, mobile-optimized, and SEO-friendly, with good content quality and clear navigation. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

T

Tennisverband Pfalz e.V.

tvpfalz.de

56

The Tennisverband Pfalz e.V. is a regional tennis association based in Kaiserslautern, Germany, serving tennis players, clubs, and enthusiasts in the Pfalz region. The website provides news, tournament information, training opportunities, and organizational details, positioning itself as a key regional sports entity. The business model is non-profit and community-focused, emphasizing sports development and engagement. Technically, the site is built on TYPO3 CMS with Bootstrap for responsive design and includes accessibility enhancements via eyeAble scripts. The hosting is provided by kundenserver.de, indicating a professional hosting environment. Security posture is moderate; HTTPS is implied, and secure login forms are present, but security headers and explicit security policies are lacking. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-structured but could improve in security and privacy transparency. Strategic recommendations include implementing security headers, cookie consent, and publishing security policies to enhance trust and compliance.

T

Tennisverband Rheinland e.V.

tennisverband-rheinland.de

58

Tennisverband Rheinland e.V. is a regional tennis association serving the Rheinland-Pfalz region in Germany. The organization focuses on providing tennis-related news, organizing tournaments and league matches, offering trainer and referee education, and supporting sport development initiatives. The website serves as an information hub for tennis players, clubs, and enthusiasts in the region, featuring event calendars, training opportunities, and online booking for tennis halls. The association positions itself as a key regional governing body within the tennis community. Technically, the website is built on the TYPO3 CMS platform with Bootstrap for responsive design. It integrates Google Tag Manager for analytics and includes accessibility enhancements via eyeAble scripts. The site is hosted on servers managed by agenturserver, with multiple nameservers indicating a professional hosting environment. The website demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers and explicit cookie consent mechanisms are absent. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security policies, incident response contacts, and security.txt files. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Contact information is clearly provided, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its audience. Strategic improvements in security headers, cookie consent, and published security policies would enhance compliance and security posture, supporting the association's credibility and user trust.

S

SPORTUNION Österreich

sportunion.at

63

SPORTUNION Österreich is a major non-profit sports umbrella organization in Austria, representing a large membership base and numerous sports clubs nationwide. The website serves as an informational and service platform for sports enthusiasts and affiliated clubs, providing event information, member services, and organizational support. The organization holds a strong market position as one of the top three sports federations in Austria. Technically, the website is built on WordPress with a modern tech stack including popular plugins for event management, cookie consent, and SEO optimization. The infrastructure is hosted by netcup GmbH, a reputable hosting provider. The site demonstrates good mobile optimization and moderate performance, with comprehensive SEO and accessibility features. From a security perspective, the website enforces HTTPS, uses security plugins like Wordfence, and implements a robust cookie consent mechanism compliant with GDPR. Security headers are present, and no critical vulnerabilities or exposed sensitive data were detected. However, there is no publicly available security policy or incident response information, which could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include publishing a dedicated security policy, establishing an incident response contact, and enhancing accessibility features to further strengthen the security posture and user experience.

Ö

Österreichischer Turnerbund

oetb.at

55

The Österreichischer Turnerbund (ÖTB) is a well-established Austrian sports federation focused on promoting gymnastics and physical activity, especially among youth and community members. The website serves as an information hub for events, training courses, and publications, positioning the organization as a key player in Austria's non-profit sports sector. The digital infrastructure is built on WordPress with Elementor, leveraging modern web technologies and analytics tools like Matomo to monitor user engagement while maintaining GDPR compliance through a comprehensive privacy and cookie policy. Security posture is solid with HTTPS and reCAPTCHA protections, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and well-optimized for its audience.

B

Bayerischer Turnverband e. V.

btv-turnen.de

47

Bayerischer Turnverband e. V. is a regional non-profit sports association focused on gymnastics, fitness, and health sports in Bavaria, Germany. The website serves as an information hub for educational programs, events, and youth activities, positioning itself as a key player in the regional sports education sector. The technical infrastructure includes modern JavaScript libraries such as Swiper.js and Fancybox, with privacy-conscious analytics via Matomo and a cookie consent mechanism from Consentmanager.net. The site is well-structured, mobile-optimized, and provides rich content relevant to its audience. Security posture is moderate with HTTPS implied but no explicit security headers detected. Privacy compliance is basic, lacking a visible privacy policy or terms of service. Overall, the domain appears legitimate and consistent with the organization's mission, though WHOIS data is minimal. Strategic improvements include publishing comprehensive privacy and security policies and enhancing security headers.

A

Allgemeiner Sportverband Österreich

asvoe.at

49

The Allgemeiner Sportverband Österreich (ASVÖ) is a large, well-established non-profit sports federation in Austria representing over 5,500 member clubs across more than 120 sports. The organization focuses on promoting sports participation, health, and community engagement through diverse programs, education, and support services for sports clubs and individuals. The website reflects a professional and comprehensive digital presence built on WordPress with modern UIkit framework and includes essential features such as GDPR-compliant privacy and cookie policies, multiple social media integrations, and a service platform for clubs. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website demonstrates a mature digital infrastructure and a trustworthy business profile.

A

ASKÖ Bundesorganisation

askoe.at

50

ASKÖ Bundesorganisation is the largest Austrian sports umbrella organization dedicated to promoting sports and physical culture across Austria. It serves a broad audience including sports clubs, athletes, and community members, offering services such as sports promotion, health-oriented activities, youth sports, education, and events. The organization maintains a strong network of regional subsidiaries and partners, reinforcing its market position in the non-profit sports sector. Technically, the website is built on the Internetkonzepte.at CMS and employs modern web technologies including jQuery, Font Awesome, and various UI and carousel libraries. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the website enforces HTTPS and uses some best practices such as async script loading and no visible sensitive data exposure. However, it lacks explicit security headers and a published incident response policy. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a large non-profit organization. It is safe for general audiences and demonstrates good privacy and security hygiene, though there is room for improvement in security headers and incident response transparency.

Ö

ÖFT - Österr. Fachverband für Turnen

turnsport.at

49

Turnsport Austria is the official Austrian gymnastics federation representing approximately 450 clubs and over 90,000 members across multiple gymnastics disciplines. The organization serves both grassroots and elite sports communities, providing event organization, trainer licensing, and promoting safe sport and anti-doping initiatives. The website is well-structured, professionally designed, and provides comprehensive information and news relevant to its audience. Technically, the site uses a modern tech stack including jQuery, Font Awesome, and Owl Carousel, and is built on the Internetkonzepte.at CMS platform. It is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are lacking. Privacy compliance is strong with a clear privacy and cookie policy and consent mechanism. Overall, the site is trustworthy and credible, reflecting a mature non-profit sports federation.

K

Kulturbüro Riehen

eigenundartig.ch

69

Riehen Events is a municipal cultural event platform operated by the Kulturbüro Riehen, providing comprehensive information about local cultural events, exhibitions, and community activities in Riehen, Switzerland. The website serves residents and visitors by offering event calendars, venue information, permit guidance, and cultural funding details. It supports event organizers with tools to submit events and promotes local culture effectively. Technically, the site is built on Drupal 10 with modern JavaScript libraries such as Alpine.js and Splide.js, ensuring a responsive and accessible user experience. The use of Matomo analytics with a cookie consent mechanism demonstrates a commitment to privacy and GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with its municipal purpose.

K

Knepper Gruppe

knepper-recycling.de

51

Knepper Gruppe is a well-established German family-run company with over 70 years of experience, specializing in demolition, earthworks, recycling, scrap metal processing, logistics, and food recycling. The company operates nationally and across Europe, emphasizing sustainable and innovative solutions. Their website reflects a professional and comprehensive digital presence, built on TYPO3 CMS, with modern technologies and good mobile optimization. Security practices include HTTPS enforcement, cookie consent management, and use of Google Tag Manager with consent mechanisms. No critical vulnerabilities or privacy issues were detected. However, the site lacks explicit incident response contacts and a security.txt file. Overall, Knepper Gruppe presents a trustworthy and credible business with a strong focus on sustainability and customer service.

Weidmüller is a well-established German company specializing in connection technology, automation, and digitalization solutions for industrial customers. The website reflects a mature digital presence with comprehensive product and solution offerings targeting B2B industrial sectors. The company maintains a strong market position with a focus on innovation and customer support. Technically, the website uses modern technologies including Google Tag Manager and OneTrust for consent management, hosted likely on infrastructure provided by Deutsche Telekom. Security posture is strong with HTTPS enforced and security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is robust with GDPR-aligned cookie consent mechanisms and a detailed privacy policy. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

V

Vauth-Sagel

vauth-sagel.de

64

Vauth-Sagel is a well-established manufacturing company specializing in furniture fittings and related industry solutions. The company operates a professional, multi-language website powered by TYPO3 CMS, targeting industry professionals and dealers globally. The website offers product overviews, service information, and dealer search capabilities, reflecting a mature B2B business model with a strong market presence. Technically, the site uses modern analytics tools including self-hosted Matomo and Hotjar, and implements cookie consent via Usercentrics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is partial, as no explicit privacy policy or terms of service were found in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

T

The Family Butchers Germany GmbH

the-family-butchers.com

66

The Family Butchers Germany GmbH is a large-scale manufacturer and retailer specializing in sausage, ham, and protein products, including plant-based alternatives. As Germany's second-largest producer in this sector and part of InFamily Foods Holding, the company emphasizes tradition, family values, and innovation. Their digital presence is built on TYPO3 CMS with modern web technologies, providing a well-structured, mobile-optimized, and content-rich website. The site integrates consent management and tracking tools responsibly, reflecting good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy image suitable for its target audience and market position.

S

Stiegelmeyer

stiegelmeyer.com

61

Stiegelmeyer is a well-established company specializing in the manufacturing and supply of hospital and care beds, boasting over 120 years of experience. The website presents a professional image targeting healthcare providers and institutions, offering modern solutions focused on hygiene, usability, and patient mobilization. The digital infrastructure is built on TYPO3 CMS with Bootstrap, indicating a modern and maintainable platform. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible security headers or privacy policies, which could be improved to enhance trust and compliance. Overall, the website is functional and informative but would benefit from enhanced security and privacy compliance measures.

S

STEINBILD

steinbild-collection.com

55

STEINBILD is a German-based e-commerce retailer specializing in unique handcrafted natural stone wall art. Founded in 2023, the company targets consumers and business customers seeking exclusive design objects made from natural stone. The website is professionally designed, mobile-optimized, and offers a clear navigation structure including product categories, B2B dealer access, and personal design consultation services. Technically, the site is built on the Shopware platform, leveraging modern web technologies and integrating analytics and review widgets. Security posture is good with HTTPS, CSRF protection, and domain status locks, though improvements like DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the business presents a credible and trustworthy online presence with a niche market focus.

S

Sievert

sievert.de

64

Sievert is a well-established company specializing in construction materials and logistics solutions, operating internationally with around 60 locations and over 1,600 employees. The website reflects a mature business with a strong focus on sustainability, customer support, and professional services. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable infrastructure. The website is well-optimized for SEO and mobile devices, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. Overall, the site presents a trustworthy and professional digital presence aligned with the company's market position.

Schröter Technologie GmbH & Co. KG is an internationally recognized manufacturer specializing in thermal equipment for the food industry, including solutions for smoking, cooking, steaming, and drying. The company positions itself as a leader in precision, quality, and innovation within its sector. The website is built on TYPO3 CMS, indicating a mature digital infrastructure with modern technologies such as Google reCAPTCHA and Google Tag Manager integrated for security and analytics purposes. However, the absence of explicit privacy policies and contact information on the visible HTML content suggests areas for improvement in transparency and compliance. Security posture is moderate, with HTTPS usage and bot protection in place, but lacking visible security headers and formal incident response details. Overall, the website is professional and trustworthy, serving a general audience in the manufacturing sector without any adult or questionable content.

P

Phoenix Contact

phoenixcontact.com

70

Phoenix Contact is a leading enterprise specializing in industrial connection technology, automation, interface systems, and surge protection. The company targets industrial customers, manufacturers, and distributors primarily in Finland but also globally through its parent company Phoenix Contact GmbH & Co. KG. The website reflects a mature B2B business model with a strong market position as an innovator and market leader in its sector. Key services include product configurators, sample services, and customer-specific solutions, supporting a comprehensive industrial product portfolio. Technically, the website employs modern web technologies including JavaScript frameworks like Vue.js, Google Tag Manager for analytics, Dynatrace for performance monitoring, and Usercentrics for consent management. The site is hosted on a robust platform with Akamai CDN inferred, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, supporting a professional user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. Consent management is properly integrated, supporting GDPR compliance. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The WHOIS data is not publicly accessible, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and trust signals. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise in the industrial manufacturing sector. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance further.

O

OWL Verkehr GmbH

teutoowl.de

57

OWL Verkehr GmbH operates as a regional public transportation service provider and information portal for the TeutoOWL network in Germany. The company offers a range of services including schedule information, ticket sales (such as Deutschlandticket, JobTickets, and SchülerTickets), subscription management, and mobility services like call-collect taxis and night buses. The website targets public transport users in the OWL region, providing comprehensive and accessible information to facilitate mobility. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and FontAwesome. It employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. The site is hosted on infrastructure associated with DomainControl, uses HTTPS with strong SSL configuration, and demonstrates good mobile optimization and accessibility. From a security perspective, the website enforces HTTPS and uses privacy-friendly analytics. However, it lacks explicit security policy documentation and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transportation entity. Overall, the site maintains a good security posture with room for improvement in transparency and security headers. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining regular security audits to sustain and improve the security posture.

O

OstWestfalenLippe GmbH

ostwestfalenlippe.de

58

OstWestfalenLippe GmbH is a regional development agency focused on promoting the OstWestfalenLippe region in North Rhine-Westphalia, Germany. The company supports sustainable transformation, workforce development, regional marketing, and innovation through various projects and events. The website is professionally designed, content-rich, and targets stakeholders including businesses, academia, government, and citizens of the region. Technically, the site uses TYPO3 CMS and Matomo analytics, indicating a modern and privacy-aware infrastructure. Security posture is good with HTTPS and spam-protected emails, though additional security headers and explicit policies could improve it. Overall, the website is trustworthy, well-maintained, and compliant with GDPR, though it lacks a cookie consent mechanism. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent to improve compliance and trust.

N

NTT DATA Business Solutions

nttdata-solutions.com

70

NTT DATA Business Solutions Finland is a leading global SAP consulting and full-service software solutions provider, operating in over 30 countries. The company focuses on delivering comprehensive SAP-related services including advisory, implementation, managed services, and cloud solutions, targeting midsize and large enterprises. Their market position is strong, supported by a consistent brand presence and a wide range of key services that address digital transformation challenges. The website reflects a mature digital infrastructure leveraging WordPress CMS, advanced SEO tools, and modern analytics platforms such as Matomo and Google Tag Manager. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and domain registration data indicate a trustworthy and professional enterprise with a high level of business credibility.

N

nobilia Küchen

nobilia.de

59

nobilia Küchen is a leading German kitchen manufacturer with a strong market position in the manufacturing sector. The company offers a wide range of kitchen, bathroom, and living space products, supported by planning tools and customer services. The website reflects a mature digital presence with a professional design, clear navigation, and strong accessibility features, including integration of a comprehensive accessibility tool by digi·access GmbH. The technical infrastructure is based on TYPO3 CMS and includes modern marketing and analytics tools such as Google Tag Manager, HubSpot, and eTracker. Security posture is moderate with HTTPS enforced and consent management implemented, but lacks explicit security headers and published security policies. WHOIS data is minimal and uses generic name servers, which slightly reduces transparency but does not indicate malicious intent. Overall, the website is trustworthy, professional, and well-optimized for its target audience.

Musterring International, operated by Josef Höner GmbH & Co. KG, is a well-established German furniture brand with a history dating back to 1938. The company focuses on high-quality, sustainable furniture products with a strong emphasis on design, functionality, and customer service. Their digital presence reflects a mature retail business with comprehensive product offerings, dealer support, and configurator tools to enhance customer experience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and third-party tools for analytics, consent management, and accessibility. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website content and business information. Strategic recommendations include enhancing transparency on security and privacy policies and ensuring WHOIS data availability for trust enhancement.

E

eurobahn GmbH & Co. KG

eurobahn.de

51

eurobahn GmbH & Co. KG operates as a regional passenger rail transport provider serving parts of Lower Saxony, North Rhine-Westphalia, and the Netherlands. The company offers extensive rail connections, timetable information, ticketing services, and customer support, positioning itself as an important regional mobility player. The website reflects a professional and user-friendly digital presence with clear navigation, multilingual support, and comprehensive service information. Technically, the site is built on TYPO3 CMS, integrates Matomo analytics, and employs modern UI components ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be enhanced. Overall, the site demonstrates strong business credibility, compliance with GDPR, and effective communication channels, supporting a trustworthy and professional brand image.

G

Gebrüder Lödige Maschinenbau GmbH

loedige.de

42

Gebrüder Lödige Maschinenbau GmbH is a well-established German manufacturer specializing in industrial mixing and processing machinery, with a history dating back to 1938. The company positions itself as an international market leader offering tailored system solutions, engineering services, and customer support primarily targeting industrial clients across sectors such as pharmaceuticals, chemicals, food, and environmental technology. Their website reflects a professional and consistent brand image, leveraging TYPO3 CMS and modern web technologies to provide a user-friendly experience. The presence of a cookie consent mechanism and Google Tag Manager indicates a moderate level of digital maturity and compliance awareness. Security posture is solid with HTTPS enabled and no blocking mechanisms detected, though explicit security headers and incident response information are lacking. Overall, the site demonstrates good business credibility and technical implementation, though privacy policy and terms of service documentation could be improved to enhance compliance and user trust.

E

Energieversum GmbH & Co. KG

energieversum.de

70

Energieversum GmbH & Co. KG is a German company specializing in photovoltaic and solar energy solutions, offering comprehensive all-inclusive packages for residential and commercial customers. The company is positioned as a reliable provider with a strong market presence, supported by its affiliation with the EnBW Group, one of Germany's largest energy companies. Their services include photovoltaic systems, energy storage, electric vehicle charging stations, heat pumps, and financing options, targeting customers seeking sustainable and cost-effective energy independence. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and integrates marketing and consent management tools like Google Tag Manager, Visual Website Optimizer, and Usercentrics CMP. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be managed via 1&1 IONOS, inferred from nameservers. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service documentation. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the security posture and compliance maturity.

D

DFT – Dürkopp Fördertechnik

duerkopp.com

70

DFT – Dürkopp Fördertechnik is a German-based company specializing in intralogistics and conveyor technology solutions, targeting industries such as fashion, pharmaceutical wholesale, parcel logistics, and eCommerce fulfillment. The company offers a range of products including material handling systems, sorter systems, and software solutions for warehouse control and analytics. Their market position is that of an established medium-sized B2B provider with a global footprint and a focus on innovative, durable logistics solutions. The website content is professionally presented, with comprehensive product information and active news updates, reflecting a mature digital presence. Technically, the website is built on WordPress with modern SEO tools like Rank Math and uses Google Tag Manager for analytics and tracking, configured with privacy-conscious defaults. The site is mobile-optimized, accessible, and performs moderately well. Security best practices such as HTTPS and cookie consent mechanisms are implemented, though some security headers and explicit security policies are missing. From a security perspective, the site shows good baseline protections but lacks published incident response or vulnerability disclosure information. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, although the website content and branding are consistent with a legitimate business. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a specialized industrial technology provider, but the domain registration opacity warrants further verification. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and compliance posture.

S

Stadt Bielefeld

bielefeld.de

57

The website www.bielefeld.de is the official digital presence of the city of Bielefeld, Germany, serving as a comprehensive portal for municipal services, community information, city development, culture, and events. It targets residents, visitors, and businesses, providing a wide range of services including appointment scheduling, public announcements, and career opportunities. The site is well-positioned as the authoritative source for city-related information and services. Technically, the site is built on Drupal 10 with Bootstrap framework, hosted likely by Deutsche Telekom, and integrates privacy-conscious analytics via Matomo with cookies disabled and DoNotTrack respected. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows privacy best practices. However, it lacks explicit security policies or incident response information and could improve by adding additional security headers and a vulnerability disclosure policy. Overall, the security posture is solid but could be enhanced. The risk assessment is low given the official nature, absence of suspicious content, and good privacy compliance. Strategic recommendations include strengthening security headers, publishing security policies, and enhancing transparency around incident response and vulnerability disclosures.

C

Converge Technology Solutions

convergetp.de

65

Converge Technology Solutions is a German IT system house specializing in comprehensive digital solutions, covering strategy, implementation, and operational support. The company targets business clients seeking tailored IT services. The website is built on WordPress using the Divi theme and integrates several plugins for events and marketing. The technical infrastructure includes Cloudflare DNS and multiple marketing analytics tools such as HubSpot and LinkedIn Insight. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a professional image but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

R

ROTTLER

rottler.de

69

ROTTLER is a German retail and service company specializing in optical and hearing products including eyeglasses, sunglasses, hearing aids, and contact lenses. The company operates both physical stores and an online shop, targeting end customers in Germany seeking vision and hearing solutions. The website is professionally designed, content-rich, and well-structured, providing comprehensive product information, offers, and appointment booking services. Technically, the site is built on the HubSpot CMS platform, leveraging modern JavaScript frameworks and marketing tools such as Google Tag Manager and Usercentrics for consent management. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

B

bonprix

bonprix.de

68

bonprix is a large European online retailer specializing in fashion, shoes, and home goods, targeting approximately 10 million customers in 2024. The company offers a broad product range including women's, men's, and children's clothing, accessories, and home textiles. The website is professionally designed with consistent branding and supports multiple European markets via hreflang tags. Technically, the site uses modern JavaScript, CSS, and integrates social media marketing tools such as Flowbox. Hosting is provided by Akamai, indicating a robust infrastructure. Security posture is moderate with HTTPS implied and CSRF tokens present, but lacks visible security headers and published security policies. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. Overall, the site is accessible without WAF blocking and shows strong business credibility and technical maturity.

A

Axon Enterprise, Inc.

axon.com

70

Axon Enterprise, Inc. is a leading technology company specializing in public safety solutions, including TASER devices, police body cameras, cloud-based evidence management, AI-powered tools, and drone detection systems. The company targets law enforcement, federal agencies, enterprise, fire, EMS, corrections, and campus safety sectors, positioning itself as a market leader with a comprehensive ecosystem designed to protect life and enhance public safety operations. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on AWS with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and privacy policies in place, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Axon's reputation as a credible enterprise in the public safety technology market.

A

Aug. Winkhaus SE

winkhaus.com

71

Winkhaus is a well-established German manufacturer specializing in innovative window technology, door locking systems, and intelligent access control solutions. With a history spanning over 170 years, the company serves a global audience including architects, building owners, manufacturers, and security professionals. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and active engagement through news and press releases. Technically, the site leverages modern web technologies including Google Tag Manager and Usercentrics for consent management, built on the SAP Commerce (Hybris) CMS platform. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security headers should be verified. The WHOIS data is incomplete or unavailable, which slightly reduces trust but the overall business credibility remains high due to consistent branding, certifications, and transparent contact information.

A

ALSO Holding AG

also.com

74

ALSO Holding AG operates as a leading technology provider specializing in comprehensive IT solutions for SMB resellers, offering a broad portfolio including webshop services, cloud marketplace, AI, IoT, cybersecurity, and value-added services. The company targets IT partners and resellers, positioning itself as a central ecosystem player in the ICT industry with enterprise scale and a strong presence in Switzerland. The website reflects a mature digital infrastructure utilizing modern JavaScript libraries, consent management, and analytics tools, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is solid with HTTPS enforcement and consent mechanisms, though lacks explicit published security policies and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position effectively.

A

alpha logs GmbH

alphalogs.de

62

alpha logs GmbH operates the website alphalogs.de, providing expert consulting and management services for logistical change processes targeting companies in industry, trade, and services sectors. The company positions itself as pragmatic, experienced, and future-oriented, focusing on supply chain and intralogistics solutions primarily for medium-sized enterprises and corporations in Germany. The website is professionally designed, multilingual (German and English), and optimized for user experience and SEO. Technically, it is built on WordPress with modern plugins such as Rank Math SEO and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence with good privacy compliance and business credibility.

T

TMC Live GmbH

tmc-live.de

40

TMC Live GmbH is a German full-service event agency specializing in the conception, planning, and execution of B2B events including hybrid and digital formats. The company positions itself as a creative and reliable partner focused on sustainable and emotionally engaging event experiences. Their market presence is supported by a professional website showcasing extensive services, client testimonials, and references, indicating a solid reputation in the event management sector. Technically, the website uses modern frameworks such as Alpine.js and Swiper.js, is built on October CMS, and is hosted on agenturserver infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not found. Overall, the website reflects a mature digital presence with strong business credibility and compliance with privacy regulations.

T

TMC Amplio GmbH

tmc-brandwork.de

43

TMC Brandwork, operated by TMC Amplio GmbH, is a German branding agency specializing in brand strategy, communication, and creative production for both B2B and B2C clients. The company positions itself as a provider of tailored solutions to strengthen brands with a professional portfolio and notable client references. The website reflects a strong market presence with consistent branding and clear contact points, including a named CEO and company email. Technically, the site uses modern web technologies such as Alpine.js and Tailwind CSS, hosted on a provider indicated by the nameservers. The site is mobile-optimized, fast-loading, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

TMC Amlio GmbH

tmc-amplio.de

40

TMC Amlio GmbH operates the website tmc-amplio.de as a digital consulting and agency partner focused on driving digital growth for businesses. Their service offerings include digital strategy, user experience design, online marketing with CRM integration, and web development including API services. The company positions itself as a technology-driven yet human-centric partner for digital transformation, targeting businesses seeking to amplify their brand digitally. The website is professionally designed using the Astro framework, with good mobile optimization and clear navigation, reflecting a moderate level of digital maturity. The technical infrastructure includes modern JavaScript modules and a cookie consent mechanism via CookieFirst, hosted on servers indicated by agenturserver nameservers.

T

TMC GmbH

tmc-gmbh.de

38

TMC GmbH is a medium-sized marketing agency based in Germany, specializing in creating emotional brand experiences across digital and analog environments. The company operates multiple specialized agencies under its group, including Amplio®, TMC Brandwork, and TMC Live, offering services such as marketing consulting, brand development, event management, and video production. The website reflects a strong market position as the largest marketing agency in the Ostwestfalen-Lippe region, targeting businesses seeking comprehensive marketing solutions. Technically, the website is built on a modern stack including OctoberCMS, JavaScript libraries like jQuery and Vime.js for video playback, and integrates Google Tag Manager and CookieFirst for analytics and consent management. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and documented security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with a legitimate business domain, with no privacy protection or suspicious patterns. Overall, the website demonstrates a high level of professionalism, good security posture, and compliance with privacy regulations, making it a trustworthy digital presence for the company.

R

RBA Libros

rbalibros.com

66

RBA Libros is a prominent Spanish publishing house specializing in adult fiction and non-fiction literature, offering a diverse catalog through multiple well-known imprints such as Gredos, Serie Negra, and National Geographic. The company operates under the Grupo RBA umbrella, positioning itself as a key player in the Spanish media and publishing sector. Their website provides comprehensive access to their catalog, news, and social media engagement, targeting general adult readers interested in literary content. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, and LazySizes for optimized content delivery and lazy loading. It integrates GDPR-compliant consent management via the Didomi SDK and uses Google Tag Manager for analytics and marketing. Hosting of static content is done through Microsoft Azure Blob Storage, indicating a robust infrastructure. The site is mobile-optimized with good SEO and accessibility practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses consent mechanisms aligned with GDPR. However, the absence of explicit security headers and a published security policy or incident response contact reduces the overall security posture. The missing WHOIS domain registration data is a notable concern, as it creates uncertainty about domain legitimacy despite the professional appearance and consistent branding of the website. Overall, RBA Libros presents a trustworthy and professional digital presence with strong content and compliance features. The primary risk lies in the lack of transparent domain registration information and some minor security best practice gaps. Addressing these would enhance trust and security assurance for users and partners.