Security Directory

D

Deutsche Sport Marketing GmbH

dsm-olympia.de

46

Deutsche Sport Marketing GmbH is a specialized sports marketing agency operating in Germany, focusing on the comprehensive marketing and promotion of German sports, including Olympic and Paralympic movements. The company collaborates closely with major sports organizations such as the Deutscher Olympischer Sportbund (DOSB) and the Deutscher Behindertensportverband (DBS), offering services in marketing, concept development, communication, and product innovation. Their market position is strong within the German sports ecosystem, supported by partnerships with leading brands and institutions. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, ensuring good mobile optimization, accessibility, and SEO. The site uses Matomo for analytics with privacy-conscious configurations such as Do Not Track and cookie disabling. Performance is moderate, with room for optimization. Hosting and DNS are managed via standard providers, with HTTPS enforced and no visible security vulnerabilities. From a security perspective, the site demonstrates good practices such as HTTPS usage and no exposed sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files are present. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. Overall, the website and business present a low-risk profile with professional content, clear contact information, and a trustworthy digital presence. Strategic improvements in security headers and incident response transparency would enhance the security posture further.

D

Design Business Association

dba.org.uk

52

The Design Business Association (DBA) is a UK-based trade association representing over 350 design agencies and design-centric businesses. It champions the strategic and economic value of design to business and government, providing members with resources, training, advocacy, and a community platform. The website reflects a professional and well-established organization with a clear focus on supporting the design industry through membership benefits and industry promotion. Technically, the site is built on WordPress with modern integrations including Stripe for payments, Google Analytics for tracking, and reCAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, with a strong emphasis on user experience and content quality. Security posture is good with HTTPS enforced and secure form handling, though explicit security headers and a public security policy are absent. WHOIS data is unavailable due to a domain registration error at Nominet UK, but the website content and structure strongly indicate legitimacy. Overall, the DBA website is a credible, professional platform serving the UK design industry effectively.

T

Trust Square

trustsquare.com

65

Trust Square is a Zurich-based innovation hub focused on fostering entrepreneurship and disruptive technologies such as blockchain and web3. The company provides co-working spaces, hosts innovation events, and offers business and digital services to startups, investors, and academics. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools, primarily leveraging HubSpot's CMS and marketing platform. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, which raises some legitimacy concerns, but the overall professional presentation and active social media presence mitigate risk. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, and publishing vulnerability disclosure information.

I

Impel Global

impel.global

71

Impel Global is a fintech company leveraging blockchain technology, specifically the XDC Network, to transform financial messaging and payment settlements. It offers ISO 20022-compliant messaging APIs, instant settlement options using crypto-backed collateral, and integration with the R3 Corda ecosystem for hybrid private/public data handling. Positioned as a modern alternative to legacy systems like SWIFT, Impel Global targets financial institutions and multinational corporations seeking faster, cost-effective, and transparent payment solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern plugins and SEO optimizations. Security posture is solid with HTTPS and security best practices, though DNSSEC is not enabled and explicit security policies are absent. Overall, the platform shows strong business credibility and technical maturity, with ongoing strategic partnerships and adoption efforts.

D

Domains By Proxy, LLC

apothem.network

50

Apothem.Network serves as the official testnet platform for the XinFin blockchain ecosystem, providing essential services such as network statistics, masternode management, block explorer, and wallet access. The website targets blockchain developers, masternode operators, and users interested in testing and interacting with the XinFin network in a non-production environment. It positions itself as a critical infrastructure component supporting the broader XinFin ecosystem. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and FontAwesome, hosted behind Cloudflare DNS services. The site is moderately optimized for mobile devices and includes Google Analytics for user tracking. However, it lacks advanced SEO and accessibility features and does not implement DNSSEC or security headers, which are recommended for improved security posture. From a security perspective, the site uses HTTPS and domain registration protections such as EPP locks and privacy-protected WHOIS. Nonetheless, the absence of DNSSEC, security headers, and formal privacy or cookie policies indicates room for improvement in compliance and security best practices. No forms or direct contact information are provided, limiting user engagement and transparency. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and clearer contact channels to improve trustworthiness and regulatory adherence.

D

Domains By Proxy, LLC

xinfin.network

51

XinFin.Network operates as a blockchain platform providing the XDC MainNet infrastructure, including network statistics, masternode hosting, block explorer, web wallet, and developer APIs. The platform targets blockchain users and developers seeking decentralized finance and enterprise blockchain solutions. The website demonstrates a moderate level of digital maturity with a modern frontend stack using Bootstrap and jQuery, mobile optimization, and integration of Google Analytics for user tracking. Hosting and DNS are managed via reputable providers including Cloudflare and GoDaddy, with domain privacy protection in place. From a security perspective, the site uses HTTPS and enforces domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data, indicating room for improvement in hardening the web presence. Privacy and cookie policies are absent, which may impact compliance with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency and user trust. Overall, the website is functional and professional but lacks some critical compliance and security features. The domain registration is consistent with legitimate blockchain projects, and the site links to multiple official subdomains and partner resources. The risk level is moderate with recommendations to enhance security posture and privacy compliance to improve trust and regulatory adherence.

T

TQ-Systems GmbH

tq-group.com

74

TQ-Systems GmbH is a medium-sized, Germany-based technology company specializing in electronic products and services across multiple sectors including embedded systems, e-mobility, automation, aviation, and medical technology. The company positions itself as a leading provider with comprehensive lifecycle services from development to after-sales. Their website reflects a mature digital presence built on TYPO3 CMS, integrating modern analytics and consent management tools, and optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and privacy compliance, though incident response and vulnerability disclosure details are not publicly available. Overall, the website and business information indicate a trustworthy and professional organization with a solid market position and clear communication of services and certifications.

S

Servus Handels- und Verlags-Gesellschaft m.b.H.

personalshop.com

68

Personalshop is an established German e-commerce retailer specializing in exclusive membership-based sales of branded clothing and household products at discounted prices. The company targets a defined customer base including members of unions, professional associations, and corporate employees. The website is professionally designed, mobile-optimized, and incorporates multiple trust signals such as Trusted Shops certification and environmental badges. Technically, it leverages the Websale platform with modern JavaScript libraries and integrates marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Bazaarvoice. Security posture is good with HTTPS enforced and SSL encryption, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and consistency with the claimed business history. Overall, the site presents a trustworthy and professional retail platform with minor areas for security enhancement.

M

MKG Bank

mkg-bank.de

62

MKG Bank is a specialized financial institution serving as the official financing partner for Mitsubishi Motors in Germany. The company offers a range of automotive financing products including standard loans, balloon credits, and leasing options tailored for both private and business customers. Additionally, MKG Bank provides insurance services in partnership with established insurance companies, enhancing its value proposition to customers. The website reflects a medium-sized, well-established business with a strong market position in automotive finance, supported by its parent company MCE Bank GmbH. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Matomo analytics with privacy-conscious settings, and uses a comprehensive cookie consent management system. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policy and incident response information.

DSV aktiv is a well-established leisure sports organization in Germany, specializing in winter sports memberships and insurance packages. With approximately 300,000 members worldwide, it holds a strong market position as the largest leisure sports organization globally. The website offers detailed information on various membership and insurance packages, emphasizing safety and member benefits. The business model focuses on providing comprehensive insurance coverage and membership advantages to winter sports enthusiasts. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery, Mmenu.js, and Colorbox, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although some security headers and explicit security policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and partner affiliations enhancing credibility.

V

VA-TEC GmbH & Co KG

va-tec.de

62

VA-TEC GmbH & Co KG is a specialized manufacturer based in Germany focusing on custom vacuum chambers, components, and systems for vacuum technology and high vacuum applications. The company offers a comprehensive range of services including technical consulting, construction, production, quality assurance, logistics, and on-site commissioning. Their market position is that of a niche industrial B2B provider delivering tailored vacuum solutions to clients requiring precision and customization. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress and modern plugins to provide a user-friendly and informative experience. The company demonstrates compliance with GDPR and cookie regulations, and holds ISO 9001 certification, enhancing trustworthiness. Technical infrastructure is solid with HTTPS enabled and standard security practices, though there is room for improvement in security headers and incident response transparency. Overall, the website is well-structured, SEO optimized, and provides clear contact information, supporting a high level of business credibility.

B

Blockchain News, Opinion, Jobs and Video

the-blockchain.com

63

The website www.the-blockchain.com operates as a blockchain news and analysis platform providing crypto market insights, industry news, opinion pieces, and educational content. It targets blockchain enthusiasts, investors, and professionals, positioning itself as an industry leader since 2015. The business model centers on content publishing with monetization through sponsored content and affiliate marketing partnerships. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and various plugins for enhanced functionality and marketing. The site is mobile-optimized and SEO-friendly, offering a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No explicit security policies or incident response contacts are provided, which could be improved to enhance trust. Overall, the site is professional and trustworthy in content and presentation but would benefit from improved transparency and security documentation.

S

Skiclub 1906 Oberstdorf e.V.

skiclub-oberstdorf.de

55

Skiclub 1906 Oberstdorf e.V. is a well-established non-profit sports club based in Germany, focused on promoting skiing and supporting athletes. The website reflects a mature digital presence with regularly updated content, event information, and athlete profiles. The club has a strong community orientation and historical significance dating back to 1906. Technically, the site uses modern JavaScript libraries and a CMS platform (Tramino), with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and serves its target audience effectively.

L

LIQUI MOLY GmbH

liqui-moly.com

62

LIQUI MOLY GmbH operates a professional and well-branded website focused on automotive products such as motor oils, additives, and car care items. The company targets vehicle owners and automotive professionals with a broad product portfolio and multiple language versions, indicating a strong international presence. The website is built on the Magento platform, leveraging modern web technologies and includes a cookie consent mechanism for privacy compliance. However, no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is moderate with HTTPS enabled but lacking visible security headers. WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not detract from the overall legitimacy indicated by the website content and branding.

B

Brauerei C. & A. VELTINS GmbH & Co. KG

veltins.de

60

VELTINS is a well-established German brewery company with a strong online presence promoting its beer products, events, and B2B partnerships. The website is professionally designed, mobile-optimized, and provides comprehensive information about the brand, product range, and corporate initiatives such as sustainability and career opportunities. The company leverages digital marketing tools including Google Tag Manager, Google Analytics, and Facebook Pixel with a clear cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit security policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and mature business.

D

Deutscher Skiverband

deutscherskiverband.de

57

The Deutscher Skiverband (DSV) is the official German skiing and winter sports federation, managing multiple disciplines and providing training, events, and partnerships. The website serves a broad audience including athletes, trainers, clubs, fans, and media, positioning itself as the central authority for winter sports in Germany. The site is built on the Liferay DXP platform, leveraging modern web technologies such as jQuery, Swiper.js, and Matomo for analytics, indicating a mature digital infrastructure. The design is professional, mobile-optimized, and content-rich, supporting a positive user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though improvements can be made in cookie consent and published security policies. Overall, the site is trustworthy and well-maintained, reflecting the organization's stature and commitment to compliance and user engagement.

P

Privacy Protect, LLC

xinfin.org

61

XinFin Network operates as a decentralized, open-source smart contract platform focused on enterprise-friendly blockchain solutions, particularly in trade finance and payments. The platform leverages the XDC Network, a hybrid blockchain with high throughput and low latency, supporting EVM-compatible smart contracts. The business targets developers, enterprises, and blockchain communities, offering tools such as developer documentation, masternode setup, and interoperability bridges. The company maintains a medium-sized presence with a foundation dating back to 2017 and emphasizes community-driven development and partnerships with notable industry players.

T

TechBullion

techbullion.com

66

TechBullion is a specialized online media platform delivering financial technology and technology news globally. Established in 2016, it serves fintech professionals and enthusiasts with news, interviews, reviews, and press releases. The website leverages WordPress CMS with modern SEO and analytics tools, ensuring a good digital presence and user experience. The technical infrastructure includes Google Analytics, Google Tag Manager, and multiple advertising networks, reflecting a mature monetization strategy. Security posture is solid with HTTPS enforcement and domain protection, though improvements in security headers and explicit security policies are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, TechBullion presents a trustworthy and professional digital footprint with room for enhanced security transparency.

C

Cryptopolitan

cryptopolitan.com

74

Cryptopolitan is an established online media platform focused on delivering the latest cryptocurrency news, price analysis, and educational guides. The website targets cryptocurrency enthusiasts, investors, and learners, providing a broad range of content including market insights, price predictions, and industry reports. The platform maintains a consistent brand presence and offers multilingual support, enhancing its accessibility to a global audience. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices to ensure good performance and user experience. Security posture is solid with HTTPS enforced, though there is room for improvement in implementing security headers and publishing comprehensive privacy and cookie policies. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the professional presentation and active content mitigate immediate trust issues. Overall, Cryptopolitan presents as a credible and valuable resource in the cryptocurrency media space.

M

MOBI

dlt.mobi

54

MOBI is a global nonprofit consortium established in 2018, focused on creating standards and building Web3 infrastructure for interoperability in mobility and IoT ecosystems. The organization targets stakeholders in technology, transportation, and data privacy sectors, providing standards, working groups, and educational services to foster a decentralized and equitable digital economy. The website reflects a professional and consistent brand presence with clear navigation and relevant content aligned with its mission. Technically, the site is built on WordPress with modern plugins and hosted on SiteGround, employing Google Analytics and Tag Manager for tracking and marketing. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The domain registration is privacy protected but consistent with the nonprofit's Canadian origin and founding date. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, though it could improve transparency by publishing detailed privacy and security policies.

O

Obesity Canada

obesitycanada.ca

58

Obesity Canada is a Canadian non-profit organization dedicated to obesity education, research, and advocacy. The organization aims to eliminate stigma, improve health outcomes, and ensure equitable access to evidence-informed obesity care for Canadians. Their target audience includes patients, healthcare professionals, allies, and employers. The website serves as a resource hub offering educational materials, advocacy campaigns, and community support. Technically, the site is built on WordPress using Elementor and integrates Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly with structured data implemented. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No contact emails or phone numbers are directly visible, which may impact user trust and compliance. Overall, the website is professional, trustworthy, and serves its mission effectively.

L

LookUs Scientific Inc.

eco2026.org

57

The website eco2026.org serves as the official platform for the 33rd European Congress on Obesity scheduled for May 2026 in Istanbul, Turkey. It provides comprehensive information about the congress including registration, accommodation, scientific program, and general details. The target audience primarily consists of healthcare professionals, researchers, and academics interested in obesity research and treatment. The business model revolves around event organization and information dissemination within the healthcare sector, specifically obesity research. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience.

The website eco2025.org serves as the official platform for the 33rd European Congress on Obesity scheduled for May 2025 in Istanbul, Turkey. It provides comprehensive information about the event including registration, accommodation, scientific programs, and important dates. The site targets healthcare professionals, researchers, and stakeholders in obesity research and treatment, positioning itself as a reputable event within the European healthcare conference market. The business model centers on event organization and scientific knowledge dissemination, supported by sponsorship and exhibition opportunities. Technically, the website employs a modern tech stack including Bootstrap 5, jQuery, Font Awesome, and Google Analytics, hosted behind Cloudflare DNS services. The site is mobile-optimized with good SEO practices and basic accessibility features. It integrates Google Translate for multilingual support and uses cookie consent mechanisms to comply with privacy regulations. From a security perspective, the site enforces HTTPS and uses Google Tag Manager asynchronously, but lacks DNSSEC and explicit security headers such as CSP or HSTS. No vulnerability disclosure or incident response contacts are provided, which could be improved. The WHOIS data shows privacy protection but aligns reasonably with the event's nature and timeline, indicating legitimacy. Overall, the website demonstrates a solid digital presence with good content quality and business credibility. Security posture is adequate but can be enhanced by implementing DNSSEC, security headers, and publishing security policies. Privacy compliance is basic but present. The site is safe for general audiences and free from suspicious or malicious content.

Elavon Europe, operated by U.S. Bank Europe DAC, is a prominent payment processing and merchant services provider targeting businesses across Europe. The company is regulated by the Central Bank of Ireland and other UK financial authorities, underscoring its legitimacy and compliance with financial regulations. The website serves as a regional portal offering multi-language support and links to country-specific domains, facilitating localized payment solutions. The business model focuses on enabling merchants to accept payments efficiently, with a strong emphasis on regulatory compliance and customer service. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries such as jQuery, Video.js, and Slick Carousel for enhanced user experience. Google Tag Manager is used for analytics and marketing purposes, with a clear cookie consent mechanism in place, reflecting good privacy practices. The site is mobile-optimized and demonstrates good SEO and accessibility basics, although some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of a security.txt or explicit incident response contact is a minor gap. The domain WHOIS data is privacy protected under EURid, which is typical for European domains and justified given the financial nature of the business. Overall, Elavon Europe presents a professional, secure, and compliant online presence suitable for its enterprise-scale financial services. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility features to further strengthen trust and compliance.

Elavon operates as a division of U.S. Bank, providing global payment solutions primarily targeting European business clients. The company leverages the financial strength and regulatory compliance of its parent, U.S. Bank Europe DAC, to offer commercial payment products including travel and payables solutions. The website reflects a professional and consistent brand presence with clear business focus on payment services. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries, delivering a responsive and user-friendly experience. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and public security policies. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in security and contact information.

The website www.costcopaymentprocessing.ca represents Elavon Canada Company, a large payment processing service provider partnered with Costco Canada. The site offers a range of payment solutions including online, mobile, and in-person payments, with a focus on secure, fast, and reliable transaction processing. The business targets Canadian businesses seeking payment processing services and emphasizes customer satisfaction and operational efficiency. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including phone numbers and a contact form protected by Google reCAPTCHA. Privacy and cookie policies are present and indicate GDPR compliance. Technically, the site uses Adobe Experience Manager CMS and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Invoca, and Tealium. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers are not detected in the HTML source. WHOIS data is unavailable, suggesting privacy protection or a new domain registration, which slightly impacts trust but is common for this business type. Overall, the website is trustworthy, well-maintained, and aligned with industry standards for payment processing services.

C

Creditreform International

creditreform.com

67

Creditreform International operates as a large, established European credit information and debt collection service provider, offering economic information, debt management, and marketing data services primarily to businesses. The website is professionally designed using TYPO3 CMS and modern frontend technologies, with good mobile optimization and clear navigation. Security posture is strong with HTTPS enforcement and security headers, though some improvements in CSP and incident response transparency are recommended. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, the website presents a trustworthy and professional digital presence, though the absence of WHOIS registration details slightly reduces domain trust.

V

Verband der Vereine Creditreform e.V.

creditreform.de

60

Verband der Vereine Creditreform e.V. operates as Germany's leading provider of business information, creditworthiness assessments, debt collection, and marketing data services. The company targets businesses seeking to manage credit risk, optimize receivables, and improve sustainability practices through ESG evaluations. Their market position is strong, supported by recognized certifications such as CrefoZert and EcoZert, and a broad service portfolio including factoring and credit insurance. The website reflects a mature digital presence with a professional design and comprehensive content tailored to business clients. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and multiple analytics and marketing tools, including Usercentrics for consent management, Google Tag Manager, and LinkedIn Analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the website and domain WHOIS data indicate a legitimate, well-established business with consistent branding and trustworthy digital infrastructure. The absence of blocking mechanisms or suspicious domains further supports its credibility. Strategic improvements could focus on enhancing transparency around security policies and incident response. The risk assessment is low, with no critical vulnerabilities or compliance gaps detected, making the site suitable for business interactions and data exchange.

ج

جيه إل إل

jll-ksa.com

64

The website www.jll-ksa.com represents the Saudi Arabian regional presence of JLL, a global real estate consulting firm. The site offers a comprehensive range of real estate services including property search, investment, portfolio management, technology-driven transformation, and project delivery. The content is professionally presented in Arabic, targeting corporate clients and investors in Saudi Arabia. Technically, the site is built on Adobe Experience Manager, integrates Brightcove for video content, and uses OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and domain verifications, but lacks explicit security headers and published privacy or terms policies. WHOIS data is missing or not publicly available, which raises concerns about domain registration transparency. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

M

M&G plc

mandg.com

76

M&G plc is a well-established international leader in savings and investments, serving over five million customers globally. The company offers a broad range of financial services including savings products, investment management, and institutional client services. Their website reflects a mature business with a strong market position in the finance sector, targeting investors, intermediaries, and private clients. The presence of multiple regional and partner sites indicates a significant international footprint. Technically, the website is built on a modern stack including Sitecore CMS, jQuery, Bootstrap, and Google Tag Manager, hosted likely via Akamai CDN. The site demonstrates good performance, mobile optimization, and accessibility standards. SEO practices are well implemented with comprehensive meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms with opt-in for performance cookies. However, some security headers are missing, and no public incident response or vulnerability disclosure information is found. The WHOIS data is unavailable or protected, which is common for large enterprises but reduces transparency. Overall, the security posture is solid but could be improved with additional headers and published security policies. The overall risk assessment is low, with the website presenting a professional, trustworthy front for a major financial institution. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure and incident response contacts, and improving transparency around registrant data where possible.

L

La Française Systematic Asset Management GmbH

la-francaise-systematic-am.com

65

La Française Systematic Asset Management GmbH operates as a specialized asset management firm under the La Française Group umbrella, offering a range of investment funds including equity, bond, and multi-asset allocation products. The company targets institutional and retail investors seeking systematic and ESG-aligned investment solutions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive product information. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates Matomo analytics and Google reCAPTCHA for security and user tracking. Security posture is solid with HTTPS enforcement and basic security headers, though additional headers and a formal security policy would enhance trust. Privacy compliance is well addressed with visible cookie consent and a detailed privacy policy. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, though the website content and branding strongly indicate a legitimate financial services entity. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in transparency and domain registration clarity.

D

Drescher & Cie AG

dc-bigpoints.de

50

Drescher & Cie AG operates as an independent service provider specializing in economic and financial information with a focus on stock markets and funds. The company offers a range of services including webinars, investment conferences, roadshows, and newsletters targeting professional investors and financial intermediaries in Germany. The website is built on TYPO3 CMS and employs modern web technologies such as Bootstrap 4 and Font Awesome 6 Pro, providing a professional and responsive user experience. Security measures include HTTPS enforcement and secure login forms, although explicit security policies and incident response information are not publicly available. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website reflects a medium-sized finance sector business with consistent branding and a trustworthy online presence.

D

Drescher & Cie AG

fondsmanagertalk.de

51

Drescher & Cie AG operates the Fondsmanagertalk platform, a well-established financial event focused on investment professionals and fund managers. The website promotes their flagship event held in an elegant setting, featuring top-tier speakers discussing current developments in the fund and global financial markets. The company positions itself as an independent provider of economic and financial information with a strong presence in the German finance sector. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Font Awesome and Bootstrap, ensuring a responsive and professional user experience. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and professional business with a network of related partner domains.

D

Drescher & Cie AG

tempowechsel.de

51

The website tempowechsel.de represents Drescher & Cie AG's event series 'TEMPOWECHSEL', focusing on investment retreats held in monasteries for finance professionals. The business operates in the finance sector, targeting asset managers, investors, and financial advisors with specialized events and educational content. The site is professionally designed, leveraging TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and secure login forms, though some security headers and explicit policies could be improved. Privacy compliance is addressed with a cookie consent mechanism and privacy policy, but terms of service and incident response information are lacking. Overall, the site is legitimate, professional, and trustworthy, with room for enhancements in security and compliance documentation.

D

Drescher & Cie AG

dc-fourcast.de

53

Drescher & Cie AG operates the DC Fourcast website, providing financial market information, investment fund insights, and hosting professional events such as webinars and conferences. The company positions itself as an independent service provider focused on professional investors and financial intermediaries in Germany. The website content is professionally curated, targeting a specialized audience with a focus on finance and investment. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and Font Awesome, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and standard security practices observed, although some headers like Content-Security-Policy could be improved. Privacy compliance is well addressed with clear cookie consent and privacy policies in place. Overall, the site demonstrates a mature digital presence aligned with its business objectives.

D

Drescher & Cie AG

tacheles-investmentgespraech.de

46

Drescher & Cie AG operates the TACHELES investment discussion event, a well-established forum since 2010 that brings together fund industry representatives, politicians, and media in Germany. The website serves as an information and event platform targeting financial professionals and investors, emphasizing transparency and open dialogue in the investment sector. The company positions itself as an important player in the German financial event landscape with a focus on quality and professionalism. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and Font Awesome. It integrates a professional video player and uses structured data for SEO enhancement. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Cookie consent is implemented, but explicit privacy and terms of service pages are missing. From a security perspective, the site uses HTTPS and modern libraries but lacks visible security headers and formal security policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is minimal but consistent with the business profile. Overall, the site is trustworthy but could benefit from enhanced privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, improving accessibility, and formalizing incident response and vulnerability disclosure processes to strengthen trust and compliance.

D

Drescher & Cie AG

sustainability-congress.com

51

The Sustainability Congress website is operated by Drescher & Cie AG, a medium-sized finance sector company based in Germany, specializing in organizing investment conferences focused on sustainable finance. The site presents a professional and consistent brand image, targeting investors and finance professionals interested in sustainable investments. The business model revolves around event organization, media content, and partnerships within the sustainable finance ecosystem. Technically, the site is built on TYPO3 CMS, leveraging modern frontend technologies such as Font Awesome and Bootstrap, hosted by Vautron Rechenzentrum AG. The website is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No critical vulnerabilities or security issues were detected. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators.

D

DRESCHER & CIE AG

drescher-cie.de

48

DRESCHER & CIE AG is an established independent financial information service provider based in Germany, specializing in stock market and fund-related services since 1997. The company offers a broad range of services including capital market research, consulting, editorial content, event organization, and operates an online platform for webinars, podcasts, and media content. Their target audience primarily consists of professional investors and financial intermediaries. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies, providing a professional and accessible user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good compliance with GDPR and offers clear navigation and relevant content.

H

Hotel Sopron**** - Négycsillagos szálloda Sopronban családoknak, cégeknek, csoportoknak

hotelsopron.hu

48

Hotel Sopron is a four-star hotel located in the city center of Sopron, Hungary, near the Austrian border. The hotel targets families, companies, and groups, offering renovated rooms, free parking, wifi, and an online booking system. The website is professionally designed using Concrete5 CMS and Bootstrap 3.3.7, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure includes Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie banner but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and legitimate, supported by a domain age of over 20 years consistent with the business history.

R

Raaberbahn AG

raaberbahn.at

61

Raaberbahn AG is a regional private railway company operating in Austria's Burgenland region with cross-border services. It provides passenger transportation, ticketing, customer service, and network access services. The company is a subsidiary or closely affiliated with GYSEV Zrt., a larger railway operator. The website is professionally designed using TYPO3 CMS and modern web technologies, offering comprehensive information and services to passengers, partners, and job seekers. Privacy and cookie policies are well implemented with user consent mechanisms. Security posture is good with HTTPS and secure forms, though some security headers could be improved. WHOIS data is not publicly available, which slightly reduces transparency but does not detract from the overall legitimacy given the official contact details and business context. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

P

PORR s.r.o.

porr.sk

48

PORR Slovakia (porr.sk) is a well-established construction company operating as part of the multinational PORR Group. The company provides a broad range of construction services including engineering, infrastructure, building construction, asphalt production, and specialized construction skills. The website reflects a mature business with over 18 years of domain age and consistent branding aligned with the parent company. Technically, the site uses TYPO3 CMS and modern web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and incident response policies are not publicly disclosed. Privacy compliance is strong, with GDPR-aligned cookie policies and data protection statements. Overall, the website is professional, trustworthy, and suitable for its target audience of construction clients and partners.

P

PORR S.A.

porr.pl

57

PORR Poland is a well-established construction company operating as part of the larger PORR Group. The company offers a wide range of construction services including infrastructure, civil engineering, building construction, rail construction, power plant construction, hydraulic engineering, and specialized equipment services. The website reflects a mature business with a strong market position in Poland and connections to European markets. Technically, the site is built on TYPO3 CMS with modern web technologies and includes comprehensive cookie consent mechanisms and analytics integration. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

PORR Schweiz

porr.ch

55

PORR Schweiz is a well-established, international construction company with over 150 years of experience and a strong presence in Switzerland and other European countries. The company offers a broad range of construction services including building construction, civil engineering, infrastructure, tunnel construction, and environmental technology. The website reflects a professional corporate identity aligned with its parent company PORR AG, showcasing a comprehensive service portfolio and multiple country-specific sites. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is well addressed with a detailed privacy and cookie policy. Overall, the website projects high business credibility and trustworthiness.

P

PORR a.s.

porr.cz

56

PORR a.s. is a well-established large enterprise operating in the construction and infrastructure sector in the Czech Republic, with a strong international presence under its parent company PORR AG. The company offers full-service construction solutions including transport and engineering structures, building construction, and special competencies. The website reflects a professional corporate identity with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and privacy-conscious embedded content. No critical vulnerabilities or compliance gaps were detected. Overall, the site projects high trustworthiness and business credibility.

S

SCHIG mbH

schig.com

53

SCHIG mbH is a government-owned competence center for railway and mobility matters in Austria, operating under the Federal Ministry for Climate Protection, Environment, Energy, Mobility, Innovation and Technology. Founded in 1996, it has evolved from a financing agency to a proactive service organization offering solutions for sustainable mobility. The website reflects a professional government entity with comprehensive information on its services, tasks, and job offerings. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, providing good mobile optimization and accessibility. Security posture is moderate with no detected blocking or WAF, but lacks explicit security headers and incident response contacts. WHOIS data is missing, which reduces transparency but the site content and contact details support legitimacy. Overall, the site is well-structured, informative, and trustworthy for its target audience.

E

Earlybird GmbH

earlybird.at

51

Earlybird GmbH is a Vienna-based digital agency specializing in TYPO3 CMS web development, digital accessibility, intranet solutions, and election analysis services. The company positions itself as a professional partner for digital transformation projects, emphasizing quality, sustainability, and accessibility. Their market position is strengthened by certifications such as TYPO3 Association Gold membership and Certified WebAccessibility Expert status. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, optimized for mobile and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response policies are recommended. Overall, the website reflects a mature digital presence with strong business credibility and compliance awareness.

igus® AB is a Swedish branch of the global igus® GmbH group, specializing in the development and manufacturing of high-performance polymer components such as energy chains, cables, bearings, and linear technology. The company serves a broad industrial audience with a strong focus on motion plastics® solutions, offering extensive product catalogs, configurators, and CAD resources. The website demonstrates a mature digital presence with multi-language support and comprehensive product and service information. Technically, the site uses modern JavaScript libraries, analytics tools, and secure HTTPS protocols, reflecting a well-maintained infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data, although explicit incident response and vulnerability disclosure information are not present. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site is professional, trustworthy, and aligned with industry best practices.

igus® México S. de R.L. de C.V. operates a professional and comprehensive website focused on industrial automation components such as energy chains, polymer bushings, cables for motion, linear technology, and robotic automation products. The company targets industrial manufacturers and automation professionals in Mexico, leveraging a B2B business model with direct online sales and configurator tools. The website reflects a strong market position as a subsidiary of the global igus GmbH brand, offering extensive product information, digital tools, and customer engagement features.

igus® Korea operates as a regional branch of the global igus GmbH, specializing in manufacturing and supplying motion plastics products such as energy chains, cables, polymer bearings, and automation components. The website is professionally designed, offering extensive product information, online configurators, CAD tools, and customer support features tailored for industrial clients in South Korea. The company positions itself as a leader in the manufacturing sector with a strong focus on innovation and customer-centric solutions. Technically, the website employs modern JavaScript libraries, analytics, and marketing tools, ensuring a robust digital presence. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site reflects a mature business with good digital maturity and trustworthiness, despite the lack of WHOIS data which may be due to regional registry constraints.