Security Directory

D

Direktoratet for forvaltning og økonomistyring (DFØ)

doffin.no

67

Doffin.no is an official Norwegian government website operated by the Direktoratet for forvaltning og økonomistyring (DFØ). It serves as a comprehensive database for public procurement announcements, enabling public sector entities and suppliers to access procurement data to improve transparency and decision-making. The platform holds a strong market position as the national official source for public procurement information in Norway, targeting government agencies and suppliers. The website is well-branded, consistent, and professionally designed with a focus on usability and accessibility. Technically, the site leverages modern web technologies including React and Matomo analytics, ensuring a responsive and accessible user experience. The site is served over HTTPS with appropriate security headers, reflecting a good security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are areas for improvement to enhance privacy compliance and transparency. Security-wise, the platform demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The absence of a vulnerability disclosure policy and incident response contact reduces transparency but does not indicate immediate risk. Overall, the site is trustworthy and secure for its intended audience. The overall risk assessment is low, with recommendations focusing on improving privacy compliance by implementing cookie consent, publishing security policies, and adding terms of service. These steps will strengthen user trust and regulatory adherence while maintaining the platform's role as a critical government service.

A

Act-On

actonsoftware.com

75

Act-On is a well-established marketing automation software provider founded in 2005, offering AI-driven solutions to help businesses create, measure, and optimize marketing campaigns. The company targets B2B marketers and enterprises, positioning itself as a competitive mid-market to enterprise SaaS platform with a comprehensive suite of services including multichannel marketing, lead scoring, analytics, and sales alignment. The website reflects a mature digital presence with professional design, clear navigation, and strong SEO practices. Technically, the site is built on WordPress using Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, Cookiebot, and 6sense. Hosting is via Amazon AWS, and the site employs HTTPS with good security headers, although DNSSEC is not enabled. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but there is room for improvement by enabling DNSSEC and publishing explicit security policies or vulnerability disclosure information. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. The risk assessment is low, with no blocking WAF detected and no suspicious WHOIS patterns. Strategic recommendations include enhancing DNS security, formalizing security incident response, and improving accessibility features to further strengthen compliance and user experience.

Q

Qwellcode GmbH

qwellcode.de

10

Qwellcode GmbH is a German software development company specializing in custom software solutions for industry and small to medium-sized enterprises (KMUs). Established since 2013, the company offers a broad range of services including web development, e-commerce, mobile applications, virtual reality, and blockchain technologies. Their market position is that of an experienced, innovative agency with international reach and a focus on modern technologies. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on OctoberCMS with modern frontend technologies and is hosted behind Cloudflare DNS, ensuring good performance and security. The site is mobile optimized and SEO friendly, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and publicly available security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

B

Bitburger Braugruppe GmbH

dasgastroportal.de

73

DasGastroPortal is a professional B2B service portal operated by Bitburger Braugruppe GmbH, targeting both aspiring and experienced gastronomy professionals in Germany. The portal offers a comprehensive suite of services including a B2B shop for promotional materials, educational resources, partnership programs, and a marketplace for gastronomy properties. The website is well-branded, consistent, and designed to support the hospitality industry with a focus on alcohol-related products and services. Technically, the site is built on TYPO3 CMS with modern web technologies, optimized for mobile and SEO, and integrates privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The site complies with GDPR and provides clear contact information but lacks explicit public security policies or incident response details. Overall, the site is trustworthy, professional, and mature audience appropriate due to alcohol content.

B

Bitburger Braugruppe

bitburger-braugruppe.de

51

Bitburger Braugruppe is a well-established German brewing group specializing in the production and distribution of alcoholic beverages, primarily beer. The company targets adult consumers and business partners, emphasizing responsible alcohol consumption and compliance with legal age restrictions. The website reflects a professional and consistent brand image, with clear navigation and relevant content for its audience. Technically, the site is built on TYPO3 CMS and employs OneTrust for GDPR-compliant cookie consent management. Hosting appears to be managed by a reputable provider, Deutsche Telekom, based on nameserver data. Security posture is solid with HTTPS enforced and age verification implemented, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but no explicit terms of service or security policies were found. Overall, the website demonstrates a mature digital presence with good business credibility and moderate technical sophistication.

The website www.bynder.com is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks access to any actual site content. No metadata, structured data, or business-related information is available for analysis. The WHOIS query returned no registration data, indicating the domain may not be registered or WHOIS data is unavailable. This severely limits the ability to assess the business, technical infrastructure, or security posture. The presence of Cloudflare as a security provider indicates some level of protection, but without access to the site content, no further evaluation is possible.

I

IngenCO2.dk

co2neutralwebsite.de

54

IngenCO2.dk operates the CO2-neutral website certification platform, www.co2neutralwebsite.de, providing brands and website owners with a service to offset their websites' carbon footprint by supporting global CO2 reduction projects certified by the Gold Standard. The platform is well-positioned in the sustainability market with over 32,000 websites certified, trusted by notable partners and audited by BDO for CO2 compensation accuracy. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting environmentally conscious businesses and organizations. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Analytics and Tag Manager for analytics, and uses Cloudflare for DNS and likely CDN services, ensuring fast and secure delivery. Security posture is strong with HTTPS enforced and bot protection via Google reCAPTCHA, though explicit security headers and incident response policies could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

S

Stadtwerke Bonn

bewerbung-fahrdienst-swb.de

59

The website bewerbung-fahrdienst-swb.de serves as a recruitment portal for SWB Bus und Bahn, a subsidiary of Stadtwerke Bonn, focusing on hiring bus and tram drivers in the Bonn region. The company operates a large public transportation network with extensive services and a significant workforce. The site provides detailed information about the business, job requirements, and links to application portals, reflecting a well-established municipal transport operator. Technically, the site uses standard web technologies with external font hosting and JavaScript for UI and cookie management. The site is mobile-optimized and presents a professional user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. No vulnerabilities or tracking scripts were detected in the provided content. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity. Strategic improvements could focus on enhancing security headers, publishing incident response information, and adding vulnerability disclosure mechanisms.

S

SWB Konzern - Stadtwerke-Bonn

swb-konzern.de

65

SWB Konzern - Stadtwerke-Bonn is a large regional utility and transportation company serving Bonn, Germany, providing essential services such as electricity, natural gas, water, district heating, and public transport. The company emphasizes sustainability and climate neutrality, reflected in its projects and communications. The website is built on TYPO3 CMS and integrates modern technologies like Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Stadtwerke Bonn

stadtwerke-bonn.de

67

Stadtwerke Bonn (SWB) is a large regional utility provider based in Germany, offering a comprehensive range of services including energy supply (electricity and gas), water, public transportation, waste management, and district heating. The company positions itself as a top local supplier with a strong commitment to sustainability and climate protection, targeting a broad audience including residential customers and families. Their business model integrates multiple utility and mobility services under the SWB brand, supported by several related domains and subsidiaries. Technically, the website is built on the TYPO3 CMS platform, employs modern web technologies such as JavaScript and Owl Carousel, and is hosted on reputable German infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a good user experience and professional design. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks publicly visible security policies and incident response contacts, which could be improved. Overall, the website demonstrates a mature digital presence with strong privacy compliance and trustworthy business credibility.

G

Göttingen Tourismus

goettingen-marketing.de

69

Göttingen Tourismus operates a comprehensive and professionally designed official tourism website for the city of Göttingen, Germany. The site provides extensive information on local attractions, events, accommodations, and cultural offerings, targeting tourists, families, and business visitors. The business model focuses on destination marketing and visitor engagement through digital content, event promotion, and booking facilitation. The website demonstrates strong branding consistency and trust indicators, including social media integration and structured data usage. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Oxygen Builder, and Usercentrics for cookie consent management. It employs various third-party services for analytics (etracker), booking (Regiondo), and email marketing (Sendinblue). The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate and could benefit from further optimization. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the site lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is consistent with the website's official nature, showing no suspicious patterns or privacy protection that would raise concerns. Overall, Göttingen Tourismus presents a low-risk, trustworthy online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

B

Brinkhaus / Ferchow

bf-net.de

53

Brinkhaus / Ferchow is a small creative agency specializing in web design, advertising, and online marketing services primarily targeting clients in Oldenburg, Rastede, and surrounding regions in Germany. The website is built on WordPress using Elementor and jQuery, reflecting a moderate level of technical maturity with good mobile optimization and a professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website presents a professional image but could improve compliance and security transparency.

B

Bullsgroup.com

bullsgroup.com

44

Bullsgroup.com is a content creation and editorial services website that emphasizes unique and engaging content, claiming a business history dating back to 1929. The website is built on WordPress using the Astra theme and incorporates SEO best practices via the Yoast SEO plugin. It employs Matomo analytics for user tracking and includes a cookie consent mechanism, indicating some level of privacy compliance. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and a valid domain registration, though improvements such as enabling DNSSEC and adding security headers are recommended. The absence of explicit privacy policies, terms of service, and contact information limits full compliance and trustworthiness assessment. Overall, the website presents a professional front with room for enhanced security and compliance documentation.

C

codin GmbH

codin.ch

76

codin GmbH is a Swiss-based managed IT service provider specializing in comprehensive IT solutions for small and medium-sized enterprises (KMU). Their offerings include IT support, Microsoft 365 services, cybersecurity, procurement, training, and backup management, all provided at a fixed monthly price. Positioned as an external IT department, codin GmbH aims to simplify and secure IT operations for SMEs, allowing clients to focus on their core business. The website reflects a professional and modern digital presence, leveraging Next.js and Vercel hosting for performance and scalability. Cookie consent is managed effectively through Cookiebot, ensuring compliance with data privacy norms. Security posture is strong with HTTPS and appropriate security headers, though explicit privacy policy and terms of service pages are currently missing, representing areas for improvement. Overall, codin GmbH demonstrates a credible and trustworthy business with a clear market focus and solid technical infrastructure.

O

OPAN®

opancare.ch

71

OPAN® operates a leading digital platform in Switzerland for online patient registrations and healthcare coordination among hospitals, clinics, Spitex organizations, nursing homes, and patients. The platform streamlines communication and administrative processes in the healthcare sector, enhancing efficiency and reducing errors. The website reflects a professional and consistent brand presence targeting healthcare providers and patients within Switzerland. Technically, the site uses modern web technologies including the Uikit framework and secure HTTPS connections, with good mobile optimization and SEO practices. However, explicit privacy and cookie policies are not clearly found, and security headers are missing, indicating areas for improvement in compliance and security posture. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

The website for EXEC Software Team GmbH is currently minimalistic, containing only a basic HTML page with a title and a single image. There is no substantive business description, contact information, or policy documentation available. The lack of content and metadata indicates the site may be under construction or serves as a placeholder. Technically, the site does not demonstrate modern web practices such as HTTPS enforcement, security headers, or SEO optimization. Security posture is weak due to absence of HTTPS and security policies, and no incident response or vulnerability disclosure information is provided. Overall, the site presents a low-risk profile due to minimal content but lacks professionalism and trust signals, which could impact business credibility.

The website frankfurtforward.com currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered with INWX GmbH since 2018, consistent with a German origin, but no detailed business or contact information is available on the landing page. The site uses outdated CMS versions (Joomla 1.5 and WordPress 2.5) as indicated by meta tags, which poses significant security risks. The only external link points to bitninja.io, a security service provider, suggesting some level of security monitoring. Overall, the website lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present, limiting trust and credibility assessment.

L

Landeshauptstadt Mainz

mainz.de

68

Landeshauptstadt Mainz operates an official municipal government website providing comprehensive information and services related to city administration, politics, tourism, culture, and public events. The site targets residents, tourists, and businesses, offering multilingual support and various online services. The technical infrastructure is based on the Sitepark Information Enterprise Server CMS, utilizing modern JavaScript libraries such as jQuery and Modernizr, with Matomo analytics integrated for user tracking under GDPR-compliant consent mechanisms. Accessibility and mobile optimization are well implemented, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response contacts are not evident. The WHOIS data aligns with the official city domain, confirming legitimacy and trustworthiness. Overall, the website demonstrates high professionalism, good security hygiene, and strong compliance with privacy regulations.

C

Campana & Schott

campana-schott.com

59

Campana & Schott is a large international management and technology consulting firm headquartered in Germany, with over 600 employees across Europe and the USA. The company specializes in digital transformation, project and change management, Microsoft technologies, and IT strategy consulting. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting business clients undergoing significant organizational and technological changes. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates consent management via Usercentrics, indicating attention to privacy compliance. Security posture is good with HTTPS and consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing trust slightly, but the overall professional presentation and market position support legitimacy. No adult or questionable content is present, and the site is fully accessible without WAF blocking.

S

Stadtverwaltung Eschborn

eschborn.de

55

The website www.eschborn.de serves as the official municipal portal for the city administration of Eschborn, Germany. It provides a comprehensive range of online services and information targeted at citizens, businesses, and visitors. The site is well-branded and includes extensive accessibility features to support diverse user needs. The content is primarily in German with multi-language support available through an integrated accessibility tool. The business model is focused on public service delivery and community engagement, positioning the city government as a trusted local authority. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including Bootstrap and jQuery. Analytics are managed via Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the official nature of the site, showing consistent domain registration and hosting. Overall, the website presents a professional and trustworthy digital presence for the Eschborn city administration. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance compliance and security posture further.

I

IHK Frankfurt am Main

startup-pilot.online

74

IHK Frankfurt am Main operates as a regional chamber of commerce and industry, providing a comprehensive platform called Startup-Pilot FrankfurtRheinMain that aggregates over 300 regional support offerings for startups. These include networking opportunities, financing, talent activation, accelerator programs, incubators, and competitions, targeting startups and innovation-driven enterprises in the FrankfurtRheinMain region. The website serves as a key resource for startups, investors, and academic institutions, positioning IHK Frankfurt am Main as a central facilitator in the regional startup ecosystem. Technically, the website is built on the CoreMedia CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates third-party services such as eTracker for analytics, Userlike for chat support, and CCM19 for cookie consent management, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms with granular user control, and uses secure forms with CSRF tokens. While explicit security policies and incident response information are not published, no vulnerabilities or exposed sensitive data were detected. The domain and WHOIS data align with the official branding and regional chamber identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence that effectively supports its business mission. Strategic improvements could include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

Hofheimer Wohnungsbau GmbH (HWB) is a regional real estate company focused on socially responsible housing and city development in Hofheim am Taunus, Germany. The company offers a broad range of services including residential construction, social management, property management, and community engagement. Their market position is that of a trusted local housing provider with a strong emphasis on social responsibility and sustainability, supported by published annual and sustainability reports. Technically, the website employs a moderate technology stack with jQuery and several UI libraries, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and updating legacy libraries. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's mission and audience.

M

Museum für Gestaltung Zürich

museum-gestaltung.ch

51

Museum für Gestaltung Zürich is a leading Swiss museum specializing in design and visual communication, operating across three locations in Zurich. It is affiliated with the Zurich University of the Arts and supported by prominent cultural and corporate entities. The museum offers exhibitions, educational programs, publications, and an online shop, targeting a broad audience including groups, schools, families, and accessible audiences. The website reflects a mature digital presence with modern technologies such as Nuxt.js and Vue.js, and integrates Matomo analytics for user tracking. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and explicit security policies. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

M

Mittner & Partner

mittner-partner.ch

47

Mittner & Partner is a well-established Swiss financial services firm specializing in fiduciary services, auditing, tax consulting, and business advisory primarily serving clients in Chur, Zurich, the Eastern Switzerland region, and Liechtenstein. With over 30 years of experience, the company positions itself as a trusted partner for both corporate and private clients, emphasizing professional and competent service delivery. The website reflects a focused business model with clear service offerings and regional expertise, supported by memberships in relevant professional associations.

L

Liechtensteinische Wirtschaftsprüfer-Vereinigung

wpv.li

50

The Liechtensteinische Wirtschaftsprüfer-Vereinigung (WPV) is a professional association representing auditors in Liechtenstein. It serves as the official body organizing the profession, providing education, setting ethical standards, and liaising with regulatory authorities such as the FMA. The website is targeted at auditors, auditing firms, and financial market participants within Liechtenstein, offering information about membership, organizational structure, professional standards, and contact details. The WPV holds a recognized position within the Liechtenstein financial and regulatory ecosystem.

L

Luca Brunoni

lucabrunoni.com

54

The website lucabrunoni.com serves as the official online presence of Swiss author Luca Brunoni, showcasing his literary works, biography, and multimedia content related to his novels. The site targets readers interested in contemporary literature, particularly French and Italian-speaking audiences. The business model centers on personal branding and book promotion, with a niche market position in the literary domain. Technically, the site is built on the Adobe Portfolio platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, Google Analytics, and Adobe Typekit fonts. The site demonstrates good mobile optimization and moderate performance but lacks advanced accessibility features and comprehensive SEO optimization. Security-wise, the site benefits from HTTPS encryption and uses sandboxed iframes for embedded content, but it lacks important security headers and DNSSEC is not enabled, which could be improved to enhance security posture. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms, which poses compliance risks under GDPR. The site does not provide explicit contact information or incident response channels, limiting business credibility and user trust. Overall, the website is professional and functional but would benefit from enhanced security, privacy compliance, and contact transparency to improve trust and regulatory adherence.

S

Spezial Tourenwagen Trophy

spezial-tourenwagen-trophy.de

55

Spezial Tourenwagen Trophy (STT) is a well-established German motorsport racing series founded in 1986, catering to both professional and amateur racing drivers. The website serves as a central hub for news, event schedules, race results, and media galleries related to the racing series. It maintains a professional and consistent brand presence with a focus on delivering relevant content to motorsport enthusiasts. Technically, the site employs modern web technologies including HTTPS, JavaScript, and cookie consent management tools, hosted on resellerinterface.de infrastructure. The site demonstrates good digital maturity with moderate performance and mobile optimization. Security-wise, the website enforces HTTPS and includes a comprehensive cookie consent mechanism, but lacks some advanced security headers and formal security policies. Privacy compliance is strong with GDPR-aligned cookie management and a detailed privacy policy. Overall, the site is trustworthy, professionally maintained, and serves its niche audience effectively.

2

24H Series - Welcome to the world of endurance!

24hseries.com

65

The website www.24hseries.com serves as an informational platform dedicated to endurance racing events, targeting motorsport enthusiasts and fans of endurance series. It provides race updates, championship details, galleries, and newsletters, positioning itself as a niche sports event information site. The technical infrastructure includes modern JavaScript libraries such as jQuery and a cookie consent management system (Cookiebot), indicating a moderate level of digital maturity. The site is accessible over HTTPS and implements basic security practices such as CSRF token usage and cookie consent banners. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Additionally, the lack of privacy policy, terms of service, and contact information limits the site's compliance and trustworthiness. Overall, the site is functional and professionally designed but requires improvements in legal disclosures and security headers to enhance its security posture and compliance.

W

WSC GROUP

tcr-series.com

68

WSC GROUP is a Swiss-based company founded in 2014 specializing in motorsport rule-making and service provision, particularly in touring car racing categories such as TCR and ETCR. The company has established itself as a leader in global touring car racing and electric vehicle racing, also expanding into SIM racing competitions. The website is professionally designed using Squarespace, featuring good content quality and clear navigation targeted at motorsport professionals and enthusiasts. Technically, the site uses modern web technologies and is hosted on Squarespace's platform with HTTPS and HSTS enabled, ensuring a secure connection. However, the site lacks comprehensive privacy and cookie policies, contact information, and additional security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were detected. Overall, the site presents a moderate to high level of business credibility and security posture but would benefit from enhanced privacy compliance and security best practices.

3W-Room is a Swiss-based company specializing in creating virtual 360-degree tours using advanced 3D scanning technology to produce digital twins of physical spaces. Their business model uniquely integrates sustainability and social inclusion by supporting global reforestation projects, reducing CO2 emissions, and making spaces accessible to people with mobility or cognitive impairments. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at businesses and organizations interested in sustainable virtual tours and inclusive tourism. Technically, the website employs modern web technologies including Google Maps API, Facebook Pixel, Google Analytics, and YouTube background video integration. The site is mobile-optimized with good performance and basic accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security and privacy policies are missing. Cookie consent is managed via a third-party service, indicating some level of privacy compliance. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks a vulnerability disclosure policy and incident response contact information, which are recommended for enhanced security maturity. The WHOIS data confirms a legitimate Swiss registration consistent with the website's claims, supporting high trustworthiness. Overall, 3W-Room presents a credible and professional online presence with a focus on sustainability and inclusion. Strategic improvements in privacy policy transparency and security disclosure would further strengthen their security posture and compliance standing.

S

Swiss Sport Integrity

sportintegrity.ch

63

Swiss Sport Integrity is a Swiss foundation dedicated to protecting the integrity of Swiss sports through anti-doping measures, ethical guidelines, and incident reporting services. The organization serves athletes, coaches, sports organizations, and the public by providing education, prevention, control, and legal frameworks to ensure clean and ethical sports practices. The website is professionally designed, multilingual, and provides comprehensive information and services related to sports integrity in Switzerland. Technically, the website is built on Drupal 11 with modern frontend technologies including Tailwind CSS and jQuery. It is mobile-optimized, accessible, and integrates Google Tag Manager and Analytics for user tracking. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. From a security perspective, the site follows best practices such as secure forms and no exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the website's Swiss non-profit sports integrity mission, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong content quality and business credibility. Strategic improvements in security transparency and incident response readiness would further enhance trust and compliance.

B

Building4Jobs

building4jobs.com

9

Building4jobs.com is a specialized online job board focused on the construction sector, primarily serving jobseekers and recruiters in the UK construction industry. The platform offers job search, job alerts, CV uploads, and recruiter services such as job posting and candidate search. The website is powered by the Madgex Job Board Platform and integrates standard digital marketing and analytics tools including Google Analytics and Google Tag Manager. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business model appear credible and consistent with a legitimate niche job board.

A

AFT (Association pour le développement de la formation professionnelle dans le transport)

ambassadeurs-emploi-tl.com

61

The website ambassadeurs-emploi-tl.com represents a French initiative by the AFT organization to promote responsible engagement and employer branding in the transport and logistics sectors. It targets companies and professionals in these industries, offering a structured ambassador program with personalized support, recruitment facilitation, and networking opportunities. The site is well-branded, consistent, and provides relevant content including testimonials and partner information. Technically, it is built on Drupal 10 with modern tracking tools like Google Analytics and Tag Manager, hosted via Gandi SAS. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with no explicit privacy policy or opt-in cookie consent. Contact information is limited to a single email address. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

LinkedIn is a leading professional networking platform owned by Microsoft, serving millions of users worldwide. The website analyzed is the sign-up and sign-in page, designed to facilitate user registration and authentication with modern technologies such as Google One Tap. The platform targets professionals, job seekers, and recruiters, offering services around professional identity management, networking, and job opportunities. The site demonstrates a high level of digital maturity with excellent content quality, responsive design, and comprehensive privacy and cookie policies. Security measures include HTTPS enforcement, CSRF protection, and a security verification modal, indicating a strong security posture. Overall, the website is trustworthy, professional, and compliant with major privacy regulations.

H

Hochschule der Bildenden Künste Saar

hbksaar.de

50

The Hochschule der Bildenden Künste Saar (HBKsaar) is a public higher education institution specializing in fine arts and design, located in Saarbrücken, Germany. The website serves as a comprehensive portal for prospective and current students, offering detailed information on academic programs, student services, events, and institutional news. The institution holds a solid regional position as an art university with a medium-sized footprint and a history dating back to 1970. Technically, the website is built on the Contao Open Source CMS platform, utilizing a range of front-end libraries including Bootstrap 3 and jQuery 1.11.2. While the site is generally well-structured, mobile-optimized, and accessible, some outdated libraries pose potential security risks. The hosting infrastructure appears to be university-affiliated, with nameservers linked to the German Research Network and Saarland University. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. No dedicated security or incident response policies are publicly available. Privacy compliance is strong, with a clear privacy policy and cookie management in place. Overall, the website is professional, trustworthy, and serves its educational mission effectively. Strategic improvements in updating third-party libraries and enhancing security headers would further strengthen its security posture and compliance.

S

shop4runners

shop4runners.ch

69

shop4runners.ch is a specialized e-commerce retailer focused on running shoes, apparel, and accessories targeting runners and sports enthusiasts primarily in Switzerland and German-speaking regions. The website presents a professional and consistent brand image with a clear business model centered on online retail of high-quality running products from top brands. The technical infrastructure is modern, leveraging Magento CMS with Hyvä Themes for frontend, integrated marketing automation via SalesManago, and Google Tag Manager for analytics. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and vulnerability disclosure mechanisms. WHOIS data confirms domain legitimacy with consistent registrant information and appropriate domain age. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in privacy policy transparency and security disclosures are recommended.

K

Knipp Medien und Kommunikation GmbH

shop4runners.at

64

Shop4Runners.at is an Austrian e-commerce retailer specializing in running shoes, apparel, and accessories. The website targets runners and sports enthusiasts primarily in Austria and German-speaking regions. It offers a broad catalog of products from top brands, supported by competent customer service and fast delivery. The business operates under Knipp Medien und Kommunikation GmbH, a legitimate registrar and operator. Technically, the website is built on the Magento platform with a modern Hyvä frontend theme, leveraging Cloudflare for DNS and CDN services. It integrates marketing and tracking tools such as SalesManago and Google Tag Manager. The site is mobile-optimized with a clear navigation structure, though some accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies, cookie consent mechanisms, and security headers, which are important for GDPR compliance and overall security posture. Overall, the website is professional and trustworthy with a solid business foundation but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

C

COREhub, S.R.L.

shop4runners.com

10

Shop4Runners is a German-language e-commerce retailer specializing in running shoes, clothing, and accessories. Established in 2011 and operated by COREhub, S.R.L., the website targets runners and sports enthusiasts primarily in German-speaking countries. The business model focuses on online retail with a curated selection of top brands and customer support services. The website demonstrates a professional design with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages Magento as its e-commerce platform with a modern frontend (Hyvä Themes), integrates marketing and analytics tools such as Google Tag Manager and SalesManago, and uses Cloudflare for DNS and likely CDN services. Security posture is adequate with HTTPS enforced and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is limited due to absence of privacy and cookie policies and no cookie consent mechanism. Overall, the site is trustworthy and well-established but would benefit from enhanced privacy and security disclosures.

K

Knipp Medien und Kommunikation GmbH

shop4runners.eu

71

Shop4Runners.eu is a specialized e-commerce retailer focused on running shoes and apparel, offering products from well-known brands such as Asics, Adidas, and New Balance. The website targets runners and sports enthusiasts primarily in Germany and surrounding regions, providing services like free shipping and a 30-day return policy. The business is operated by Knipp Medien und Kommunikation GmbH, which is consistent with the domain registration data, indicating a legitimate and established entity. Technically, the website is built on Magento CMS with a modern frontend stack including JavaScript libraries and marketing tools such as Google Tag Manager and SalesManago. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Consent management for cookies is implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers and does not publicly disclose security policies or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Shop4Runners.eu presents a trustworthy and professional online retail platform with moderate to good technical maturity and privacy compliance. Strategic enhancements in security transparency and policy disclosures would further strengthen its security posture and customer trust.

V

Vélo-Store

velo-store.fr

53

Vélo-Store is a French-based e-commerce retailer specializing in bicycles, cycling parts, apparel, and accessories. Founded in 2020, it serves primarily the French and broader European cycling community with a comprehensive product catalog and competitive pricing. The website demonstrates a mature digital presence with modern technologies such as SvelteKit, Cloudflare CDN, and integrated marketing and analytics tools. Security is robust with HTTPS enforcement, cookie consent management, and secure payment options clearly displayed. While no explicit security policy or incident response contacts are published, the overall security posture is strong and aligned with industry best practices. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional user experience.

T

Trek-Expert

trek-expert.fr

55

Trek-Expert is a French e-commerce retailer specializing in outdoor and mountain sports equipment, offering a wide range of products including clothing, footwear, and gear for hiking, trail running, skiing, aquatic sports, and fishing. The company positions itself as a discount specialist with up to 70% off on branded products, targeting outdoor enthusiasts primarily in France and neighboring European countries. The website demonstrates a professional and consistent brand presence with clear navigation and a focus on customer trust through secure payment options and customer service availability. Technically, the website is built using modern web technologies such as SvelteKit and is hosted behind Cloudflare, ensuring good performance, security, and scalability. The site is mobile-optimized and accessible, with SEO best practices implemented. It integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook Pixel, and AWIN affiliate tracking, all managed with GDPR-compliant consent mechanisms. From a security perspective, the site enforces HTTPS, uses appropriate security headers, and does not expose sensitive data. However, there is no dedicated security policy or incident response information publicly available, which could be improved. The WHOIS data is transparent and consistent with the business claims, indicating a legitimate and well-managed domain. Overall, Trek-Expert presents a low-risk profile with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and incident response readiness would further enhance trust and resilience.

T

Training-Fit

training-fit.fr

54

Training-Fit is a French-based e-commerce retailer specializing in fitness and musculation equipment, accessories, and apparel. The company offers a wide range of products from major brands such as Adidas, Nike, Garmin, and Mizuno, targeting fitness enthusiasts and sports professionals primarily in France and Europe. The website demonstrates a mature market position with multiple sister stores and a strong brand presence. Their business model focuses on online retail with fast delivery and secure payment options, supported by customer service and after-sales support. Technically, the site is built on modern frameworks like SvelteKit, hosted behind Cloudflare, and integrates advanced marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and Criteo. The site is mobile-optimized, fast, and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS, proper security headers, and GDPR-compliant cookie consent mechanisms, although a dedicated security policy and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious activity.

S

Sport is good

sportisgood.fr

55

Sport is good is a French-based e-commerce retailer specializing in sportswear, sports equipment, and lifestyle apparel. Founded in 2016, it operates multiple country-specific domains and offers a wide range of products from major brands such as Adidas, Asics, Puma, and more. The website emphasizes fast shipping, secure payment options, and customer service, positioning itself as a reliable online sports retailer in the European market. The presence of multiple partner stores and a Trustpilot widget further supports its market credibility. Technically, the website is built using modern web technologies including the SvelteKit framework, Cloudflare CDN and DNS services, and integrates various marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and AWIN affiliate tracking. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, uses Cloudflare for protection, and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly identified, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a professional and trustworthy e-commerce platform with good privacy compliance and technical maturity. Strategic improvements could include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and security posture.

S

Sneak'In

sneakin.fr

57

Sneak'In operates a French-based e-commerce platform specializing in sneakers, clothing, and fashion accessories for men, women, and children. The website positions itself as a mid-tier retailer offering popular brands with competitive pricing and fast delivery options. The business targets fashion-conscious consumers across multiple European countries, supported by localized domains and a broad partner network. The company was founded in 2019 and maintains a consistent brand presence with clear customer service channels and trust signals such as secure payment badges and Trustpilot integration. Technically, the website leverages modern web technologies including SvelteKit for frontend rendering, Cloudflare for DNS and CDN services, and integrates multiple marketing and tracking tools such as Google Tag Manager, Facebook Pixel, Criteo, and AWIN affiliate tracking. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Consent management is implemented via AppConsent, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, Sneak'In presents a trustworthy and professionally managed e-commerce platform with solid technical infrastructure and compliance posture. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing incident response transparency to further strengthen security and customer trust.

S

Sneakids

sneakids.fr

55

Sneakids is a French e-commerce retailer specializing in children's footwear and fashion clothing, targeting parents and guardians of babies, girls, and boys. The company offers a curated selection of top brands at competitive prices, supported by secure payment options and customer service based in France. The website demonstrates a solid market position within the children's retail segment in France, with a modern and responsive design optimized for mobile and desktop users. Technically, the site leverages modern JavaScript frameworks (SvelteKit), Cloudflare CDN, and integrates widely used marketing and analytics tools such as Google Tag Manager and Facebook Pixel, all managed with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities, although the site lacks a dedicated security policy or incident response contact information. Overall, Sneakids presents a trustworthy and professional online presence with good compliance and technical maturity.

S

Smash-Expert

smash-expert.fr

55

Smash-Expert is a French-based e-commerce retailer specializing in racket sports equipment and accessories, including tennis, padel, badminton, table tennis, and squash. The company offers a wide range of branded products with a focus on fast delivery and secure payment options. Their market position is that of a specialist retailer targeting sports enthusiasts primarily in France and other European countries. The website demonstrates a modern technical infrastructure built on SvelteKit and hosted behind Cloudflare, ensuring good performance and mobile optimization. The presence of multiple tracking and advertising pixels indicates a mature digital marketing strategy. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place, although no explicit security policy or incident response information is publicly available. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

S

Slowood Interior

slowood-interior.fr

55

Slowood Interior is a French e-commerce retailer specializing in modern interior decoration, furniture, lighting, and home textiles. The website targets general consumers interested in stylish and contemporary home decor products. The business operates primarily online with a clear focus on the French market, supported by localized content and contact information. The company appears to be relatively new, founded in 2023, and positions itself as a niche player offering curated design products from various brands. Technically, the website is built using modern technologies including SvelteKit, Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and performs well with good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and GDPR compliance via a consent management platform. However, no explicit security policy or incident response information is published, which could be improved. Overall, the website is professional, trustworthy, and well-maintained, with a high legitimacy score based on domain registration and content consistency.

P

Pet and Garden

pet-and-garden.fr

55

Pet and Garden is a French e-commerce retailer specializing in pet supplies, gardening, and agricultural equipment. Founded in 2024, the company targets pet owners and gardeners primarily in France and neighboring European countries. The website offers a broad range of products from well-known brands, emphasizing fast shipping and secure payment options. The business positions itself as a reliable and customer-focused online store with clear service policies and multiple partner stores.

P

Pecheur-Store

pecheur-store.fr

55

Pecheur-Store is a French e-commerce retailer specializing in fishing equipment including rods, reels, baits, and accessories for various fishing styles such as carp, carnassier, and sea fishing. Founded in 2022, it targets fishing enthusiasts primarily in France and neighboring European countries. The website demonstrates a solid market position with partnerships with well-known fishing brands and a broad product catalog. Technically, the site uses modern frameworks like SvelteKit, is hosted behind Cloudflare, and integrates advanced marketing and analytics tools such as Google Analytics, Google Ads, and Facebook Pixel. The site is well-optimized for performance and mobile devices, with good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and cookie consent management, though it lacks a dedicated security policy or incident response page. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, making it a reliable platform for customers. Strategic recommendations include publishing explicit security and incident response policies and enhancing accessibility features.