Security Directory

O

On-Fight

on-fight.fr

55

On-Fight is a French e-commerce retailer specializing in martial arts and combat sports equipment, offering a wide range of products including gloves, protections, shoes, textiles, and club materials. The website targets martial arts practitioners and combat sports enthusiasts primarily in France and European countries. The business operates a modern, well-structured online platform with clear navigation and professional branding. Technically, the site leverages modern frameworks such as SvelteKit, is hosted behind Cloudflare, and integrates multiple marketing and analytics tools with GDPR-compliant consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the site presents a trustworthy and professional e-commerce presence in its niche.

N

Nauti-wave

nauti-wave.fr

46

Nauti-wave is a French e-commerce retailer specializing in nautical sports equipment including swimwear, diving gear, and accessories. The website offers a broad selection of products from multiple well-known brands, targeting French and European customers interested in water sports. The business is relatively new, founded in 2022, and positions itself as a niche player with competitive pricing and fast delivery options. Technically, the website is built on modern frameworks such as SvelteKit, uses Cloudflare for DNS and CDN, and integrates standard analytics and marketing tools like Google Analytics and Trustpilot for customer reviews. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS enforced, appropriate security headers, and domain registration protections. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, there is no dedicated security policy or incident response page, which could be improved. Overall, the website is professional, trustworthy, and well-suited for its retail business model.

M

Made in Paradis

madeinparadis.com

59

Made in Paradis is a French e-commerce retailer specializing in women's fashion, footwear, and accessories, offering over 300 brands with a focus on fast delivery and secure payment. The company operates multiple sister sites targeting different international markets, indicating a strategic expansion and solid market presence. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content tailored to its target audience of fashion-conscious women. Technically, the site leverages modern frameworks such as SvelteKit and integrates various marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Trustpilot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, domain protection statuses set, and GDPR compliance via a consent management platform. However, minor improvements such as enabling DNSSEC and publishing a formal security policy could enhance trust further. Overall, the site presents a professional, trustworthy, and compliant e-commerce platform with a good balance of business and technical maturity.

L

Le Motard Bleu

lemotardbleu.com

59

Le Motard Bleu is a well-established French e-commerce retailer specializing in motorcycle equipment and parts, founded in 2009. The website offers a broad range of products including helmets, gloves, jackets, and accessories, targeting motorcycle riders primarily in France and neighboring European countries. The business operates multiple related retail brands, indicating a medium-sized enterprise with a strong market presence in the motorcycle retail sector. Technically, the website is built using modern frameworks such as SvelteKit, hosted behind Cloudflare, and employs advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no critical vulnerabilities detected, although DNSSEC is not enabled. Privacy compliance is robust with clear GDPR consent mechanisms and comprehensive privacy policies. Overall, the website demonstrates good professionalism, trustworthiness, and user experience, making it a reliable platform for motorcycle gear retail.

L

La Sellerie de Maé

selleriemae.com

58

La Sellerie de Maé is a specialized French e-commerce retailer focused on equestrian equipment and accessories for both horses and riders. Established in 2011, the company offers a wide range of products from reputable brands, targeting equestrian enthusiasts primarily in France and neighboring European countries. The website presents a professional and well-structured digital storefront with clear navigation and a strong emphasis on customer service, including secure payment options and fast shipping. Technically, the site leverages modern web technologies such as SvelteKit, Cloudflare CDN, and integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel, ensuring a robust and performant user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the business claims, supporting a high legitimacy score. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure channel to further enhance trust and compliance.

L

La Bagagerie du Motard

labagageriedumotard.com

58

La Bagagerie du Motard is a French e-commerce retailer specializing in motorcycle luggage and accessories, offering a wide range of products such as top cases, side bags, and rider gear. Established since 2012, the company targets motorcycle enthusiasts primarily in France and Europe, positioning itself as a niche market leader with a strong online presence and multiple brand partnerships. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site leverages modern frameworks like SvelteKit, integrates with major analytics and marketing tools, and is hosted with Cloudflare DNS and CDN services, ensuring fast performance and reliability. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and GDPR-compliant cookie consent mechanisms, although some security headers could be improved and a formal security policy is absent. Overall, the domain registration data aligns well with the business claims, enhancing trustworthiness. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure information to further strengthen security and compliance.

H

House of Rugby

house-of-rugby.fr

55

House of Rugby is a specialized e-commerce retailer focused on rugby apparel, footwear, and equipment, primarily serving the French market and French-speaking rugby enthusiasts. The website offers a broad catalog of official club products, shoes, and accessories from major brands, positioning itself as a niche market leader with a strong emphasis on secure payment and customer service. The business is relatively new, founded in 2022, and operates with a medium-sized footprint in the retail sector. Technically, the website is built on modern technologies including SvelteKit and is hosted behind Cloudflare, ensuring fast performance and good mobile optimization. The site integrates multiple marketing and analytics tools such as Google Tag Manager and Facebook Pixel, with a compliant consent management platform to adhere to GDPR requirements. The design is professional and user-friendly, with clear navigation and good SEO practices. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. However, the site lacks a dedicated security policy or incident response contact, which could be improved to enhance trust and preparedness. Overall, the security posture is strong for an e-commerce retailer. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include publishing a formal security policy, adding incident response contacts, and implementing a security.txt file for vulnerability disclosures. These steps would further strengthen compliance and security culture. The website demonstrates a mature digital presence with good privacy compliance and business credibility.

H

Handball-Store : Site numéro 1 du handball en ligne

handball-store.fr

37

Handball-Store.fr is a specialized e-commerce platform focused on retailing handball-related equipment, including shoes, clothing, balls, and protective gear. Established in 2009, it holds a strong market position in France as a leading online handball store. The website offers a comprehensive catalog with detailed navigation and supports multiple languages, indicating a mature digital presence. Technically, the site leverages a Magento-based CMS (OpenMage), uses Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo. The site is served over HTTPS with good security headers, reflecting a solid security posture. However, it lacks explicit privacy and terms of service pages and does not provide direct contact information, which are areas for improvement in compliance and user trust. Overall, the website is professional, functional, and secure, but could enhance privacy transparency and user support channels.

G

Galop-Store

galop-store.fr

55

Galop-Store is a French e-commerce retailer specializing in equestrian equipment and animal care products. Founded in 2022, it targets horse riders, animal owners, and related enthusiasts with a broad catalog of products from reputable brands. The website demonstrates a solid market position within its niche, supported by a professional design, clear navigation, and secure payment options. The company maintains a medium-sized operation with a focus on the French market and some international reach through sister sites. Technically, the site leverages modern frameworks like SvelteKit and is hosted on Cloudflare, ensuring fast performance and good mobile optimization. Security practices include HTTPS enforcement, security headers, and GDPR-compliant cookie consent management, although no explicit security policy or incident response information is published. Overall, the site is trustworthy, professional, and well-maintained, with room for improvement in publishing dedicated security and incident response policies.

F

Foot-Store

foot-store.fr

56

Foot-Store is a well-established French e-commerce retailer specializing in football-related products including shoes, jerseys, and equipment. The website targets football players and fans primarily in France and Europe, offering a wide range of branded merchandise from Nike, Adidas, Puma, and others. The business has a solid market position supported by a domain age of over 9 years and multiple related partner sites. Technically, the website employs modern technologies such as SvelteKit, Cloudflare CDN, and integrates various marketing and tracking tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS enforced, comprehensive security headers, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a professional and trustworthy e-commerce platform with good privacy and security practices.

E

Espace Golf

espace-golf.fr

54

Espace Golf is a specialized French e-commerce retailer focused on golf equipment, including clubs, bags, carts, clothing, and accessories. Founded in 2019, it serves golf enthusiasts primarily in France and surrounding European countries. The website demonstrates a professional market position with competitive pricing, fast delivery, and multiple payment options including secure installment plans. The presence of Trustpilot reviews and clear contact information enhances customer trust. Technically, the site uses modern frameworks such as SvelteKit, is hosted with OVH and Cloudflare, and integrates advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contacts are absent. Overall, the site is compliant with GDPR and provides a good user experience with clear navigation and mobile optimization.

D

Direct-Volley : chaussures, ballons, vêtements et équipements de volleyball

direct-volley.fr

57

Direct-Volley.fr is a specialized e-commerce retailer focused on volleyball equipment, apparel, and accessories, serving primarily the French market with multiple localized European domains indicating a broader regional presence. The website offers a comprehensive catalog including shoes, balls, protective gear, club equipment, and lifestyle products related to volleyball. The business appears well-established with a domain age of nearly 9 years and uses reputable hosting and CDN services via Cloudflare. The technical infrastructure is based on Magento (OpenMage), supported by modern analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Criteo, reflecting a mature digital marketing strategy. Security posture is solid with HTTPS enforced, security headers present, and domain registration practices consistent with a legitimate retail business. However, the site lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Contact information and incident response details are also missing, limiting transparency. Overall, the site is professional, secure, and functional but would benefit from enhanced privacy and compliance documentation.

B

Boulevard du Golf

boulevard-du-golf.fr

55

Boulevard du Golf is a specialized French e-commerce retailer focused on golf equipment and accessories, offering a wide range of products from leading brands such as Taylormade, Callaway, and Srixon. Established in 2012, the company has positioned itself as a trusted provider for golf enthusiasts, providing secure payment options, customer support, and a user-friendly online shopping experience. The website is well-structured, mobile-optimized, and integrates modern web technologies including SvelteKit and Cloudflare CDN for performance and security. From a security perspective, the site enforces HTTPS, employs security headers, and integrates a consent management platform to comply with GDPR regulations. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. The domain registration details are consistent with the business claims, enhancing trustworthiness. Overall, Boulevard du Golf demonstrates a mature digital presence with strong privacy compliance and a secure e-commerce environment. Strategic enhancements in security policy disclosure and incident response mechanisms would further strengthen its security posture and customer trust.

B

Basket-Center

basket-center.fr

57

Basket-Center is a well-established French e-commerce retailer specializing in basketball equipment and accessories, including official NBA merchandise and products from major brands such as Adidas, Nike, Wilson, and Mitchell & Ness. The company targets basketball players and fans primarily in France and Europe, offering a broad catalog with fast shipping and secure payment options. The website demonstrates a strong market position as an official distributor with a professional and consistent brand presence. Technically, the website is built on modern technologies including SvelteKit and is hosted behind Cloudflare, ensuring good performance and security. It employs multiple tracking and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and a consent management platform to comply with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements security headers, and manages cookie consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, Basket-Center presents a low-risk profile with a strong business and technical foundation. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure policy to further strengthen security posture and transparency.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

invitu

invitu.ch

43

invitu.ch is a Swiss-based online platform specializing in stylish and quick event invitations for private, corporate, and public events. The website offers a user-friendly interface with various event categories and customizable invitation templates, targeting individuals and companies in Switzerland. The business operates as a small-sized entity focusing on digital event invitation services with a clear market niche. Technically, the site employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and user behavior tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The website is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some advanced security policies and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is legitimate and trustworthy with room for improvement in privacy and security documentation.

E

EXPO EVENT – Swiss LiveCom Association

expo-event.ch

61

EXPO EVENT – Swiss LiveCom Association is a national industry association representing the Live Communication sector in Switzerland. The organization provides membership services, industry events, education, and sustainability consulting to its members. The website reflects a professional and well-established entity with a clear market position as a leading voice for LiveCom in Switzerland. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with integration of common analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is strong with HTTPS and security headers implemented, although cookie consent mechanisms and explicit terms of service are missing. Overall, the site is well-designed, mobile-optimized, and provides comprehensive contact and event information, supporting a high level of trust and credibility.

G

Grafik Design Katja Saenze

grafik-art.ch

47

Grafik Design Katja Saenze is a small, professional graphic design agency based in Aargau, Switzerland, specializing in comprehensive visual branding services including logo creation, corporate identity, and web design. The website demonstrates a strong market position locally with over 20 years of experience and a portfolio of more than 1000 projects. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, providing clear contact information and social media presence.

T

Text Aha - Texte und Marketingberatung

text-aha.ch

54

Text Aha is a small Swiss-based marketing consultancy and copywriting service specializing in helping clients attract new customers with authentic and non-intrusive marketing approaches. The website is professionally designed using WordPress and Elementor, with good SEO optimization and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA v3 on forms, though advanced security headers and formal security policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a trustworthy and professional digital presence suitable for its niche market.

K

Kunst Raum Riehen

kunstraumriehen.ch

70

Kunst Raum Riehen is a publicly funded cultural institution serving as the official exhibition space for contemporary art in the municipality of Riehen, Switzerland. The website provides comprehensive information about current and upcoming exhibitions, events, and art mediation activities, targeting a general audience interested in culture and the arts. The institution operates with free public access and maintains active engagement through newsletters and social media channels. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks such as Alpine.js and Splide.js for interactive components. It employs Matomo analytics with privacy-conscious settings and a cookie consent mechanism, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal vulnerability disclosure mechanisms. Overall, the security posture is solid but could benefit from enhanced transparency and formal documentation. The domain registration aligns well with the website's municipal identity, showing no suspicious patterns and indicating high legitimacy. The website content is safe for general audiences, with no adult or questionable material. The overall risk is low, and the site demonstrates good compliance with privacy regulations such as GDPR.

B

Behinderten- und Rehabilitationssportverband Nordrhein-Westfalen e.V.

brsnw.de

53

Behinderten- und Rehabilitationssportverband Nordrhein-Westfalen e.V. (BRSNW) is a non-profit organization dedicated to enabling people with disabilities to participate in sports activities within the North Rhine-Westphalia region of Germany. The website serves as a comprehensive portal offering information about rehabilitation sports, inclusive sports programs, training, and support services for sports clubs and individuals. It holds a strong regional market position as a leading association in its sector. Technically, the website is built on the TYPO3 CMS platform, employs privacy-friendly Matomo analytics, and integrates a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and session management cookies but lacks explicit security headers and a published security policy or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and incident response readiness.

D

D.SPORTS

d-sports.de

50

D.SPORTS is a German sports-related website powered by TYPO3 CMS, targeting a general audience interested in sports activities or services. The website employs modern technologies such as Google Tag Manager for analytics and Usercentrics for cookie consent management, indicating a moderate level of digital maturity. However, the absence of explicit privacy policies, terms of service, and clear contact information suggests room for improvement in compliance and user trust. The security posture is adequate with HTTPS enabled and no detected blocking mechanisms, but lacks comprehensive security headers and incident response details. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices to improve trust and compliance.

The website dafuer-sein-ist-alles.de is operated by the Deutscher Olympischer Sportbund e.V. (DOSB), the German Olympic Sports Confederation, serving as a platform to promote and inform about Germany's bid for the Olympic and Paralympic Games. It targets the German public and stakeholders interested in the Olympic movement, providing detailed information on bidding concepts from major German cities and regions, interactive tools, and news updates. The site enjoys strong government backing, evident from the partnership with the German Federal Ministry of the Interior and official logos displayed. Technically, the website employs modern web technologies including ES modules, Alpine.js for interactivity, and Vite for bundling. It integrates consent management via Consentmanager.net, analytics through Matomo, and uses Google reCAPTCHA for form security. The site is well-optimized for mobile devices, fast loading, and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and manages cookie consent properly. While explicit security headers like X-Content-Type-Options and X-Frame-Options are not visible in the HTML, the overall security posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional, trustworthy, and secure platform aligned with its governmental and non-profit nature. It effectively balances user engagement, privacy, and security, making it a reliable source for information on Germany's Olympic bid.

L

Lumosa GmbH

sportplatzbeleuchtung.de

55

Lumosa GmbH is a specialized manufacturer and service provider of LED floodlighting solutions for sports facilities, including football, tennis, hockey, and equestrian sports. The company positions itself as a leading player in the European market with a strong focus on energy efficiency and innovative lighting technology. Their website reflects a professional and well-structured digital presence, leveraging WordPress CMS and modern web technologies to deliver a responsive and user-friendly experience. Privacy and cookie policies are well implemented with consent mechanisms, indicating good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Overall, the domain and website content are consistent and trustworthy, supporting Lumosa's market position as a reputable business in the energy-efficient sports lighting sector.

A

Auto Centrum Lass GmbH

autocentrum-lass.de

67

Auto Centrum Lass GmbH is a medium-sized regional automobile dealership specializing in Toyota vehicles, serving customers primarily in Schleswig-Holstein, Germany. The company offers a comprehensive range of services including new and used car sales, financing options, vehicle servicing, test drives, and electric mobility solutions. Their market position is that of a trusted Toyota partner with a strong local presence. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to car buyers and service customers. Technically, the site is built on WordPress with Elementor and leverages modern web technologies such as Alpine.js and Swiper.js, hosted on INWX infrastructure. The site is mobile-optimized and implements structured data for SEO benefits. Security-wise, the website enforces HTTPS, uses security headers, and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy and incident response information, which could be improved. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business.

Müllverbrennung Kiel GmbH & Co. KG (MVK) operates a highly efficient and environmentally friendly waste-to-energy facility in Kiel, Germany, processing approximately 140,000 tons of household and commercial waste annually. The company serves around 500,000 residents and employs about 70 staff members. Ownership is split between the City of Kiel (51%) and REMONDIS GmbH (49%), positioning MVK as a key regional player in waste management and energy recovery. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries and a cookie consent mechanism compliant with GDPR requirements. Analytics are handled via Matomo, ensuring privacy-conscious tracking.

M

MULTA MEDIO AG

lotto-sh.de

66

LOTTO Schleswig-Holstein operates as the official regional lottery provider for Schleswig-Holstein, Germany, offering a comprehensive portfolio of lottery games including LOTTO 6aus49, Eurojackpot, GlücksSpirale, BINGO!, KENO, Rubbellose, and TOTO. The website facilitates online ticket purchases, subscription services, and jackpot tracking, targeting adult lottery players within the region. The platform is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and analytics through Etracker, hosted likely on Telekom infrastructure, ensuring reliable performance and compliance with data protection regulations. Security posture is solid with HTTPS enforcement, CAPTCHA integration, and ISO 27001 certification, though some security headers could be enhanced. Overall, the site demonstrates a mature digital presence aligned with legal and regulatory requirements for gambling services in Germany.

R

REMONDIS Entsorgung

remondis-entsorgung.de

67

REMONDIS Entsorgung operates as a leading enterprise in the waste management and environmental services sector in Germany. The company offers a broad range of services including waste disposal, management, sorting, transport, and recycling solutions tailored for businesses. Their market position is strong, supported by a professional website that clearly communicates their services and target audience. The website is built on TYPO3 CMS and integrates modern consent management tools such as Cookiebot, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the website demonstrates good compliance with privacy regulations, including GDPR, through comprehensive cookie consent mechanisms. The risk profile is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility features to further improve compliance and user trust.

The website sport-thieme.de is currently inaccessible due to a CloudFront 403 error indicating that requests are blocked, possibly due to traffic overload or configuration issues. This prevents any meaningful extraction of business, technical, or security information from the site content. The domain is hosted on Amazon AWS infrastructure, which is reputable, and WHOIS data is structured and consistent with no privacy protection or suspicious patterns detected. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. The site currently lacks visible privacy, cookie, or security policies, and no contact information is available for further engagement. From a technical perspective, the site is served behind AWS CloudFront CDN, but the blocking error suggests misconfiguration or security rules preventing access. No metadata, scripts, or technologies could be identified due to the minimal error page content. Security headers and SSL configuration cannot be assessed. The absence of any forms or data collection mechanisms further limits analysis. Security posture is weak as the site is inaccessible and does not expose any security or privacy policies. The lack of incident response or vulnerability disclosure information is a concern for trust and compliance. Overall, the site currently presents a high risk due to unavailability and lack of transparency. Strategic recommendations include resolving the CloudFront configuration to restore site availability, publishing comprehensive privacy and security policies, implementing security headers, and establishing incident response and vulnerability disclosure processes to improve trust and compliance.

Schleswig-Holstein Netz GmbH operates as a regional energy network operator serving Schleswig-Holstein and parts of Nordniedersachsen in Germany. The company provides essential services including electricity and gas network connections, energy feed-in, and customer support portals. The website is professionally designed, well-structured, and targets both residential and commercial customers in the energy sector. The presence of multiple customer portals and detailed service information indicates a mature digital presence. Technically, the site leverages modern JavaScript frameworks like React, integrates consent management via Usercentrics, and uses analytics tools such as Matomo and Google Tag Manager, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced, consent mechanisms in place, and no obvious vulnerabilities detected. However, the absence of publicly available WHOIS registration data for the domain www.sh-netz.com raises concerns about domain legitimacy and ownership transparency. This discrepancy should be addressed to improve trust. Overall, the site is a reliable and professional resource for energy network customers but would benefit from clearer domain registration information and enhanced security policy disclosures.

P

Provinzial Versicherung Aktiengesellschaft

provinzial.de

55

Provinzial Versicherung Aktiengesellschaft operates as a regional insurance provider in Germany, offering services focused on property protection, securing existence, and future planning. The website targets a general audience seeking insurance consultation and services within their region. The company positions itself as a trusted, established player in the finance and insurance sector with a clear regional focus. The website content is professionally presented with good branding consistency and accessibility features, including multiple accessibility profiles to support users with disabilities.

S

Sparkassen- und Giroverband für Schleswig-Holstein

sgvsh.de

51

The Sparkassen- und Giroverband für Schleswig-Holstein is a regional umbrella association serving the savings banks in Schleswig-Holstein, Germany. It acts as a partner, service provider, and representative body offering career services, sustainability initiatives, legal and personnel support, and financial information. The website reflects a professional and consistent brand presence targeting regional financial institutions and the general public interested in savings banks. Technically, the site is built on TYPO3 CMS with a modern responsive design, good accessibility, and moderate performance. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained but could improve in security transparency and privacy compliance.

H

Hamburger Sportjugend

hamburger-sportjugend.de

44

Hamburger Sportjugend is a well-established non-profit organization dedicated to youth sports in Hamburg, representing over 220,000 athletes. The website provides comprehensive information about their services including education, voluntary services, funding, and prevention of sexualized violence. Their market position is strong within the Hamburg sports community, supported by partnerships and a clear digital presence. Technically, the website is built on WordPress with Elementor, offering good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve by publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website Nettfart.no appears to be a Norwegian internet speed testing service established in 2009. It provides users with the ability to view their internet speed test results. The site uses modern frontend technologies such as Angular and Mapbox GL JS, indicating a moderate level of technical maturity. However, the site lacks critical compliance and security features such as privacy policies, cookie consent mechanisms, and contact information, which are essential for user trust and regulatory compliance. The absence of security headers and incident response information further highlights potential security posture weaknesses. Overall, while the site is accessible and functional, it requires significant improvements in privacy, security, and business transparency to enhance trustworthiness and compliance.

The website www.hotel-in-gstaad.com serves as a regional hospitality and tourism platform focused on the Gstaad area in Switzerland. It provides hotel booking services, restaurant listings, event information, and sightseeing guides tailored to tourists and travelers seeking accommodation and leisure activities in the Swiss Alps. The business model centers on facilitating bookings and promoting regional tourism, positioning itself as a specialized local service provider. The website content is professionally presented with good design quality, clear navigation, and relevant information for its target audience. Technically, the site is built on the MASCH CM Studio CMS platform, utilizing standard web technologies such as JavaScript, CSS, and jQuery UI components. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and mobile responsiveness. The presence of a TripAdvisor conversion pixel indicates integration with third-party marketing tools, but no extensive analytics or tracking services are detected. From a security perspective, the website enforces HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers are detected in the HTML source, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable concern, as it reduces transparency and trust in domain ownership. Despite this, the website itself appears legitimate and professional, with no signs of malicious activity or vulnerabilities visible in the content. Overall, the site demonstrates a solid foundation for a regional hospitality platform but would benefit from enhanced security practices, improved domain registration transparency, and clearer contact information to strengthen trust and compliance.

M

mylokalesuche AG

myls.ch

67

mylokalesuche AG operates as a specialized marketing agency and software developer focused on Swiss small and medium-sized enterprises (SMEs). Their core offerings include the myls App for synchronizing business profiles across multiple directories, website creation with SEO optimization, and management of Google and Meta advertising campaigns. The company positions itself as a Google Partner, enhancing its credibility and market presence within the local Swiss digital marketing landscape. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the site leverages WordPress CMS with modern plugins and libraries, ensuring good performance and SEO compliance. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response details are absent. Overall, the business demonstrates a trustworthy and professional online presence with strong customer trust signals, including numerous positive Google reviews.

K

KERN CHERKEH Rechtsanwälte Partnerschaft mbB

kern-cherkeh.de

55

KERN CHERKEH Rechtsanwälte Partnerschaft mbB is a specialized law firm based in Hannover, Germany, offering expert legal services primarily in labor law, sports law, banking and capital markets law, and compliance. The firm positions itself as a top legal service provider with nationwide reach, emphasizing high-quality, practice-oriented legal advice and representation. Their recognition as a top law firm in sports law by WirtschaftsWoche underscores their market credibility and expertise. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with the Swiper.js library for interactive elements. The site is mobile-optimized and presents content clearly, though some advanced accessibility features are basic. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which suggests room for improvement in hardening the security posture. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. Overall, the website is professional and trustworthy, with clear contact information and relevant content for its target audience.

S

Staatskanzlei des Landes Nordrhein-Westfalen

sportland.nrw

67

Sportland.NRW is an official government platform operated by the Staatskanzlei des Landes Nordrhein-Westfalen, dedicated to promoting sports activities, events, and funding opportunities within the North Rhine-Westphalia region. The website serves a broad audience including sports fans, athletes, clubs, and event organizers, providing comprehensive information about sports in the region, upcoming events, and government initiatives. The platform maintains a strong market position as the authoritative source for sports-related information in NRW, supported by consistent branding and official government endorsements. Technically, the website is built on Drupal 10 CMS, leveraging modern frontend technologies such as Font Awesome 6 and Bootstrap components. It integrates Matomo for privacy-conscious analytics and implements a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices and clear navigation, contributing to an excellent user experience. From a security perspective, the site enforces HTTPS and employs cookie consent controls to manage tracking. While DNSSEC is not enabled, the domain registration is consistent and transparent, with no suspicious patterns detected. No critical vulnerabilities or exposed sensitive data were found in the content. However, additional security headers and a vulnerability disclosure policy could enhance the security posture. Overall, Sportland.NRW presents a trustworthy, professional, and well-maintained digital presence for government sports promotion. The risk profile is low, with strong compliance to privacy regulations and good technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security.txt file to further improve security and transparency.

A

ASS-Einrichtungssysteme GmbH

ass.de

64

ASS-Einrichtungssysteme GmbH is a German family-owned manufacturer specializing in ergonomic and modern school furniture and learning environments. The company has a strong market position in the education sector, offering a wide range of products including chairs, tables, storage solutions, and digital learning accessories such as the FLEXCHARGE® system. The website reflects a medium-sized enterprise with a focus on quality and ergonomic design, targeting educational institutions and schools primarily in Germany. Technically, the website is built on a modern stack with Pimcore CMS, uses Cloudflare DNS, and is hosted by Hetzner Online GmbH. It features responsive design and good SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and public security policies. Overall, the site is professional, trustworthy, and safe for general audiences.

R

Rheinischer Sparkassen- und Giroverband

rsgv.de

48

The Rheinischer Sparkassen- und Giroverband (RSGV) is a regional financial association based in Düsseldorf, Germany, representing 27 Sparkassen in the Rheinland region. It provides advisory services and represents the interests of its member savings banks, aligning with the Deutscher Sparkassen- und Giroverband. The website reflects a professional and consistent brand image, targeting financial institutions and the public. The business model focuses on regional financial collaboration and policy coordination. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response contacts are absent. WHOIS data confirms domain legitimacy and consistency with the organization's claims. Overall, the site is trustworthy and well-maintained, supporting the organization's credibility and digital presence.

P

Pfeifer & Langen GmbH & Co. KG

pfeifer-langen.de

76

Pfeifer & Langen GmbH & Co. KG is a well-established German sugar manufacturing company founded in 1870, specializing in regional and sustainable sugar production. Their website reflects a mature digital presence with a focus on B2B customers across food, chemical, pharmaceutical, and feed industries, as well as agricultural partners. The company emphasizes sustainability and regional sourcing as key differentiators. Technically, the website is built on the Sitefinity CMS platform, integrates Google Tag Manager for analytics, and uses modern UI components like Swiper.js for interactive content. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and explicit security policies indicates room for improvement. The lack of WHOIS domain registration data is a notable concern, though the website's branding and external social media presence support its legitimacy. Overall, the site scores well on content quality and privacy compliance but should address domain registration transparency and enhance security disclosures.

W

WestLotto

westlotto.de

70

WestLotto.de is the official state lottery operator for North Rhine-Westphalia (NRW), Germany, providing a range of lottery and gaming services including LOTTO, Eurojackpot, KENO, TOTO, and GlücksSpirale. The website targets adult residents of NRW and positions itself as a secure and reliable state-run gaming platform. The business model is focused on regulated lottery services under government oversight, with a strong regional market presence.

The website 'Vereinssuche Landessportbund Nordrhein-Westfalen e.V.' serves as an informational platform for searching sports clubs affiliated with the Landessportbund Nordrhein-Westfalen, a regional non-profit sports federation in Germany. The site targets residents and sports enthusiasts in North Rhine-Westphalia, providing a centralized resource for club information. The business model is non-profit and focused on public service rather than commercial revenue. Technically, the site employs modern web technologies including Blazor WebAssembly and Bootstrap CSS, indicating a contemporary frontend infrastructure. Hosting appears to be managed via Deutsche Telekom infrastructure, inferred from the nameservers. The site shows moderate performance and basic mobile optimization, with dynamic content loading via Blazor. However, the content on the main HTML is minimal, relying on client-side rendering. From a security perspective, the site uses HTTPS, but no explicit security headers were detected in the provided data. There are no visible privacy or cookie policies, nor contact information for security incidents, which limits compliance and user trust. No forms or data collection mechanisms were found on the landing page, reducing immediate attack surface but also limiting user engagement features. Overall, the website is legitimate and consistent with its stated purpose and regional focus. However, improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

S

Sportjugend Nordrhein-Westfalen

sportjugend.nrw

47

Sportjugend Nordrhein-Westfalen is a regional youth sports organization affiliated with the Landessportbund Nordrhein-Westfalen, focusing on youth engagement, sports education, volunteer services, and community programs in the German state of North Rhine-Westphalia. The website serves as a comprehensive portal for information on various youth sports initiatives, qualification programs, and events, targeting young people, sports clubs, and volunteers. Technically, the site is built on the TYPO3 CMS platform, integrating modern web technologies such as Google Tag Manager, Google Analytics, and accessibility tools like ReadSpeaker. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism aligned with GDPR requirements. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is typical and justified for a non-profit organization. Overall, the website demonstrates a mature digital presence with good content quality and compliance, supporting its role as a trusted regional youth sports entity.

L

Landessportbund Nordrhein-Westfalen e.V.

lsb-nrw.de

46

The Landessportbund Nordrhein-Westfalen e.V. is a large, non-profit regional sports umbrella organization serving the state of North Rhine-Westphalia, Germany. It provides a broad range of sports programs, information, and funding opportunities for sports clubs and individuals. The website is professionally designed, well-structured, and targets sports organizations and enthusiasts within NRW. The technical infrastructure is based on TYPO3 CMS with integration of modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns given the website's professional nature and content. Overall, the site demonstrates a strong commitment to privacy compliance and user experience.

H

Hessischer Turnverband e.V.

htv-online.de

62

Hessischer Turnverband e.V. (HTV) is a regional non-profit sports federation dedicated to gymnastics and related sports in Hessen, Germany. The organization provides a broad range of services including competitions, training and certification for trainers and volunteers, club consulting, and events. The website serves as an information hub for members, clubs, and sports enthusiasts, emphasizing education, child welfare, and community engagement. HTV holds a strong market position as the authoritative body for turn sports in Hessen, supported by partnerships with related organizations and events. Technically, the website is built on TYPO3 CMS with a modern frontend leveraging Bootstrap and jQuery. It employs Cookiebot for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site is hosted on reliable infrastructure with good mobile optimization and accessibility features. SEO and metadata are well implemented, supporting discoverability and user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics settings. While some standard security headers are not explicitly confirmed, no critical vulnerabilities or exposed sensitive data were detected. The privacy policy and cookie consent mechanisms are comprehensive and transparent, with clear contact details including a data protection officer. However, no explicit security policy or incident response information is published. Overall, HTV's website demonstrates a mature digital presence with strong compliance to privacy regulations and a solid security posture. The site effectively supports its business goals and community engagement while maintaining user trust. Strategic improvements in security headers and updating legacy libraries could further enhance its security and compliance standing.

H

Hessische Behinderten- und Rehabilitationssportverband

hbrs.de

56

The Hessische Behinderten- und Rehabilitationssportverband is a regional non-profit organization based in Fulda, Germany, dedicated to providing sports and rehabilitation services for people with disabilities. The website serves as an informational portal for the association, targeting disabled individuals and stakeholders in the Hesse region. The business model focuses on community support and advocacy through sports activities and rehabilitation programs. Technically, the website is built on the Wix platform using Wix Thunderbolt technology, with standard Wix scripts and Google Fonts. The site shows moderate performance and good mobile optimization, but accessibility features are basic. The site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS and includes scripts to harden fetch and XMLHttpRequest calls, indicating some attention to security best practices. However, no explicit security headers were detected, and there is no public security or incident response policy. No vulnerabilities or suspicious domains were found. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing incident response information to enhance trust and compliance.

L

Landessportbund Hessen e.V.

landessportbund-hessen.de

45

Landessportbund Hessen e.V. is a large non-profit organization serving as the umbrella sports federation for over 7,300 member clubs in the German state of Hessen. The organization provides a broad range of services including sports development, education and licensing, club management, infrastructure support, and communication. Their website is built on TYPO3 CMS and integrates accessibility tools and privacy-respecting analytics, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and GDPR compliant with clear contact information and social media presence, supporting strong stakeholder engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and hosting are consistent with the organization's identity, indicating a trustworthy online presence.

P

peakzone

peakzone.de

46

Peakzone is a German-based e-commerce retailer specializing in sportswear, equipment, and accessories across a broad range of sports including basketball, football, rugby, volleyball, handball, running, and fitness. The website is built on the Shopware platform and integrates modern payment solutions such as PayPal and Klarna, indicating a mature digital infrastructure. The site offers a well-structured navigation system catering to sports enthusiasts, teams, referees, and lifestyle customers, positioning itself as a niche regional sports retail provider. Technically, the website demonstrates good mobile optimization and moderate performance, though there is room for improvement in SEO and accessibility features. Security posture is solid with HTTPS enabled and secure payment integrations; however, the absence of security headers and explicit privacy and terms of service pages suggests gaps in compliance and best practices. No blocking mechanisms or WAF challenges were detected, allowing full content accessibility. Overall, the site is safe for general audiences with no adult or questionable content. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security maturity.