Security Directory

H

Hawlik GmbH Pilzbrut

pilzbrut.de

53

Hawlik GmbH Pilzbrut operates an e-commerce website specializing in mushroom cultivation products, including mushroom spawn, cultivation kits, dried mushrooms, spices, and educational materials. The website targets consumers interested in home and garden mushroom cultivation, primarily in Germany. The business model is retail-focused with a niche market position supported by a well-structured online shop and product categorization. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Ads, and a consent management platform, hosted on Rackspeed infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, consent management implemented, and secure login forms, though some security headers and explicit policies are missing. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service pages. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation. No WAF or blocking mechanisms were detected, and no adult or questionable content is present.

Amt Achterwehr operates as a local government administrative body serving multiple municipalities in Germany. The website provides comprehensive citizen services including appointment scheduling, political information, building and housing resources, and community support. The site is well-structured and targets residents and stakeholders within the Amt Achterwehr region. Technically, the website is built on TYPO3 CMS with modern frontend components such as jQuery and Slick Carousel, hosted likely by Your-Server.de. The site is mobile-optimized and accessible with good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is evident with clear cookie and privacy policies and consent mechanisms. Overall, the website is trustworthy and professionally maintained, reflecting its government entity status.

The website at websitex5.com is currently inaccessible, returning a 403 Forbidden error page with no visible content. The domain is registered to Stefano Ranfagni Incomedia, an Italian technology company established in 2005, indicating a mature business entity. However, due to the lack of accessible website content, no detailed business description, services, or user engagement features can be assessed. The DNS is managed via Cloudflare, but DNSSEC is not enabled, and no security headers or SSL details are available from the provided data. The absence of privacy, cookie, or terms of service policies further limits compliance evaluation. Overall, the site’s security posture and technical implementation cannot be fully evaluated due to access restrictions.

S

Schinkels Brauerei

bier-moment.de

69

Schinkels Brauerei operates a regional e-commerce platform specializing in organic craft beers and related merchandise, targeting customers primarily in Germany. The business emphasizes regional and organic quality, offering a variety of beer styles and additional services such as brewery tours and event ticketing. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations for analytics and marketing. The digital infrastructure is robust, with good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are absent. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.

P

Pilztag

pilztag.de

63

Pilztag is a small niche educational website focused on mushrooms and related vocabulary, primarily targeting German-speaking audiences interested in mycology. The site offers a digital mushroom word collection, articles on mushroom species, mushroom cuisine, and information about the European Mushroom Day. It operates on a WordPress platform using the Divi theme and several plugins including Yoast SEO and Borlabs Cookie for GDPR-compliant cookie management. The website demonstrates good SEO practices, mobile optimization, and a consistent branding approach. Social media presence on Facebook and Twitter supports community engagement. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA, and cookie consent mechanisms, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit business contact information and formal security or incident response policies, which could be improved for enhanced trust and compliance. Overall, Pilztag presents as a trustworthy, well-maintained educational resource with moderate technical sophistication and good privacy compliance.

Z

Zammad

zammad.com

75

Zammad is a medium-sized technology company founded in 2012, specializing in open source helpdesk and ticketing software designed to streamline customer service operations. The company positions itself as a provider of powerful yet user-friendly solutions that integrate multiple communication channels and offer extensive features such as multilingual support, automation, and various integrations. Their market presence is supported by strong branding, customer testimonials, and a focus on digital sovereignty. Technically, the website demonstrates a modern and responsive design with fast performance and good SEO practices. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. Security-wise, the site enforces HTTPS and employs domain transfer protections, but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in cookie consent and security transparency are recommended.

The website 'Bloggers Unite' hosted at xperta.es is a basic WordPress blog platform primarily serving general audiences with blog content. The site currently contains minimal content, including the default 'Hello world!' post, indicating it may be newly established or under development. The business model appears to be content publishing with no evident commercial or transactional services. Technical infrastructure is based on WordPress CMS with standard web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate mobile optimization and basic SEO but lacks advanced technical or security features. Security posture is minimal with no detected security headers or policies, and the site lacks privacy, cookie, or terms of service documentation. The domain registration is privacy protected, which is common for small personal blogs but limits trust signals. Overall, the site scores low to moderate on content quality, security, and privacy compliance, reflecting a basic web presence without professional or business-grade features.

GNOSS is a technology company specializing in semantic artificial intelligence platforms and knowledge graph solutions. Their platform offers both open source and enterprise options, targeting organizations across sectors such as banking, education, culture, healthcare, and government. The company provides a range of services including business consulting, ontology engineering, AI and NLP services, and cloud platform deployment. Their market position is that of a specialized provider of semantic AI technology with a partner ecosystem and multiple customer references. Technically, the website employs a modern tech stack including jQuery, Bootstrap 4, Font Awesome, and various JavaScript libraries for UI and data visualization. The site is moderately performant, mobile-optimized, and has good SEO and content quality. Privacy and cookie policies are implemented with consent mechanisms, and Google Analytics is used for tracking with user consent. From a security perspective, HTTPS is enforced and a security policy document is publicly available. However, no explicit security headers were detected, and no incident response or vulnerability disclosure information is provided. The WHOIS data for the domain is missing or not found, which is unusual and reduces trustworthiness somewhat. No direct contact emails or phone numbers are listed, only a contact form. Overall, the website presents a professional and trustworthy business presence with good content and technical implementation. The main risk is the lack of WHOIS transparency and some missing security best practices. Strategic recommendations include adding security headers, publishing incident response contacts, and improving direct contact information availability.

T

Telefónica

telefonica.es

49

Telefónica is a leading telecommunications company in Spain, offering a broad range of telecom and digital services. The website reflects a mature and professional digital presence, targeting both general consumers and business customers. It emphasizes sustainability, talent, and innovation as key pillars of its business. The technical infrastructure is based on WordPress with modern tracking and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-maintained, and aligned with the company's established market position.

B

Babygalerie24 - Babygalerie24.de/babysmile24

babygalerie24.de

29

The website babygalerie24.de appears to be a simple, small-scale platform focused on baby photo galleries, targeting German-speaking parents or families. The site content is minimal and lacks detailed business descriptions, contact information, or interactive features. Technically, the site uses legacy jQuery libraries and basic CSS styling without modern frameworks or CMS indications. Mobile optimization and accessibility are poor, and no advanced SEO or analytics tools are detected. Security posture is weak with no visible HTTPS enforcement or security headers, and no cookie consent mechanisms are present. The WHOIS data shows an active domain with standard nameservers but lacks registrant details, limiting trust assessment. Overall, the site is functional but basic, with significant room for improvement in content richness, security, and compliance.

M

Medizinisches Versorgungszentrum Osthessen GmbH

mvz-osthessen.de

53

MVZ Osthessen is a regional medical care center based in Fulda, Germany, providing a broad spectrum of specialized healthcare services across multiple disciplines such as surgery, dermatology, neurology, and oncology. The website clearly targets patients and healthcare professionals in the Osthessen region, offering comprehensive contact information and department details. The business model is focused on healthcare service provision with a medium-sized organizational footprint.

K

Klinikum Fulda gAG – Außenstelle Klinikum Gersfeld

klinikum-gersfeld.de

44

Klinikum Gersfeld operates as a regional hospital branch of Klinikum Fulda gAG, providing a broad range of healthcare services including orthopedics, spinal surgery, urology, and pain therapy to the Rhön region in Germany. The website clearly targets patients and healthcare professionals seeking medical services in this area. Technically, the site is built on WordPress with a modern theme and SEO plugin, offering good mobile responsiveness and structured content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence aligned with its healthcare mission.

The website www.laykeymanager.com appears to be a minimal service portal designed to allow users to input a key or email to retrieve information and download files. The site uses modern frontend technologies such as React and Next.js, hosted on Vercel, and integrates Google reCAPTCHA Enterprise for bot protection. However, the site lacks critical business and security information such as privacy policies, terms of service, contact details, and WHOIS registration data, which raises concerns about its legitimacy and trustworthiness. The absence of WHOIS data suggests the domain may be unregistered or privacy protected, which is unusual for a business-facing website. Security posture is basic with no visible security headers and limited compliance indicators.

W

Webfinancial Group Schweiz AG

yourmoney.ch

10

Webfinancial Group Schweiz AG operates a professional ICT and financial market information website targeting investors and financial professionals primarily in Switzerland. The company specializes in stock market information systems, data processing, knowledge management, consulting, ICT security monitoring, and maintenance services. The website demonstrates a solid market position as a leading ICT company in Switzerland within its niche. Technically, the site employs modern JavaScript libraries such as jQuery, Bootstrap, and Highcharts for interactive charts, and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements CSRF tokens, but lacks visible security headers and published security policies or incident response contacts. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

D

Deutscher Tennis Bund

mypadel.de

75

mypadel.de is an official platform dedicated to the sport of Padel in Germany, operated under the Deutscher Tennis Bund. It provides comprehensive information including news, club and coach directories, event details, and partner information, serving players, coaches, clubs, and partners. The website is professionally designed with consistent branding and clear navigation, targeting the German Padel community. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and integrates third-party services for analytics, advertising, and cookie consent management. Security posture is strong with HTTPS enforced and secure form implementations, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with official federation backing and partner endorsements.

D

DOSB New Media GmbH

sporteurope.tv

8

The website sporteurope.tv is operated by DOSB New Media GmbH, a German media company founded in 2018. It appears to be a sports media platform targeting European sports fans, particularly German-speaking audiences. The business model focuses on sports streaming and content delivery, positioning itself as a niche regional sports media provider. The technical infrastructure uses modern frontend technologies such as Bootstrap and Font Awesome, with moderate performance and good mobile optimization. However, the website lacks visible privacy and cookie policies, contact information, and security headers, indicating gaps in privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the domain registration details are consistent and legitimate. Overall, the website presents a basic but functional digital presence with room for improvement in security and compliance.

B

BrandShelter™

safebrands.com

10

BrandShelter™ is a specialized service provider focused on protecting brands and intellectual property through comprehensive domain management, monitoring, and enforcement solutions. As part of Team Internet PLC, a major player in domain management, BrandShelter leverages industry expertise and global reach to serve businesses and trademark owners worldwide. Their offerings include brand protection, domain registration, SSL certificates, DNS services, and legal enforcement support, positioning them as a trusted partner for safeguarding online brand assets. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot, Google Tag Manager, and Visual Website Optimizer, ensuring good performance, mobile optimization, and SEO readiness. The site employs multiple analytics and marketing tools with appropriate privacy and cookie policies, reflecting a mature digital infrastructure. From a security perspective, BrandShelter demonstrates strong practices such as HTTPS enforcement and ISO/IEC 27001 certification. However, the absence of visible security headers and a public incident response policy suggests room for improvement. The WHOIS data is unavailable or not found, which may be due to privacy protection or querying issues, but the website's professional presentation and association with Team Internet PLC mitigate concerns about legitimacy. Overall, BrandShelter presents a secure, professional, and trustworthy online presence with comprehensive brand protection services. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and clarifying WHOIS registration details to strengthen trust further.

E

Eurosport

eurosport.de

11

Eurosport is a leading sports media company providing comprehensive sports news, live scores, video streaming, and event highlights primarily targeting German-speaking sports fans. As a subsidiary of Warner Bros. Discovery Sports, it holds a strong market position in the sports broadcasting sector. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as Next.js, AWS hosting, and advanced analytics and marketing tools including Permutive and Adobe DTM. The platform is well-optimized for mobile and desktop users, offering excellent user experience and navigation clarity. Security posture is solid with HTTPS enforced and error monitoring via Sentry, though explicit security headers and published security policies are absent. Privacy compliance is basic, with no explicit privacy or cookie policies found in the analyzed content, though a consent mechanism is present. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Deutscher Tennis Bund (DTB)

tennis.de

11

tennis.de is the official digital platform for tennis in Germany, operated under the Deutscher Tennis Bund (DTB). It serves as a centralized hub for tennis players, clubs, fans, and stakeholders, offering services such as player profiles, tournament and league searches, training offers, news, and licensing for ranked players. The platform is well-positioned as the authoritative source for tennis-related activities in Germany, leveraging partnerships with major tennis equipment brands and regional tennis federations. Technically, the website is built on Adobe Experience Manager, hosted on Adobe's cloud infrastructure, and integrates modern JavaScript frameworks and advertising technologies. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is solid with HTTPS and secure form handling, though it lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is evident. Overall, tennis.de is a professional, trustworthy, and comprehensive platform for the German tennis community.

C

ClubDesk

clubdesk.ch

11

ClubDesk is a Swiss-based SaaS provider offering an online club management software tailored for various types of associations including sports clubs, cultural groups, and fan clubs. The platform provides comprehensive modules such as member management, accounting, event calendars, and website creation, positioning itself as a leading solution with over 20,000 clubs using its services. The website is professionally designed, mobile-optimized, and offers extensive support resources including FAQs, tutorials, and a user forum. Technically, it leverages Contao CMS and modern JavaScript libraries, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, security headers, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly detailed. Overall, ClubDesk demonstrates a mature digital presence with solid business credibility and trustworthy domain registration.

SailingAdmin is a specialized software platform developed primarily for the administration of sailors and officials affiliated with Swiss Sailing. It provides member data management and regatta registration functionalities, partially accessible to clubs and classes. The platform emphasizes data privacy and confidentiality, allowing members to control their personal data visibility and usage. The website reflects a niche market position focused on Swiss Sailing's community with a small-scale business model and a consistent brand presence. Technically, the site uses standard web technologies including Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is moderate, with no explicit security headers detected and no visible vulnerabilities, but lacking advanced security policies or incident response information. Privacy compliance is partially met with a privacy policy present but missing cookie consent mechanisms and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with a legitimate domain registration consistent with the business history and location.

Swiss Sailing operates the Swiss eSailing Championship, a national-level virtual sailing competition leveraging the Virtual Regatta Inshore platform. The website serves as an informational and promotional portal for the 2025 season, targeting Swiss citizens interested in eSailing. The organization collaborates with recognized partners such as World Sailing and Virtual Regatta, and benefits from sponsorship by Allianz, enhancing its market credibility. The business model focuses on event organization, participant engagement, and partnership-driven promotion within the niche eSports sailing community. Technically, the website uses a modern but straightforward tech stack including Bootstrap, jQuery, and FontAwesome, with integration of social media SDKs for Facebook. The site is mobile optimized and provides clear navigation and relevant content. Hosting and domain registration are consistent with the Swiss focus, though DNSSEC is not enabled. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No cookie consent mechanism or detailed privacy compliance features are present, which could be improved to meet GDPR standards more fully. The WHOIS data shows privacy protection but aligns with the Swiss entity and domain age is appropriate, supporting legitimacy. Overall, the website is professional and trustworthy with good business credibility but could benefit from enhanced security practices and privacy compliance measures to reduce risk and improve user trust.

S

Home

swiss-sailing-league.ch

9

The Swiss Sailing League website serves as an informational and promotional platform for a niche sports league focused on sailing activities in Switzerland. The site primarily provides basic content about the league and links to its social media channels. The technical infrastructure is based on Joomla CMS with standard web technologies such as FontAwesome and Google Fonts. HTTPS is properly configured, and basic security measures like CSRF tokens are implemented, indicating a reasonable security posture for a small organization. However, the site lacks critical compliance elements such as privacy and cookie policies, contact information, and security headers, which limits its overall trustworthiness and compliance standing. There are no signs of malicious content or blocking mechanisms, and the content is safe for general audiences.

Swiss Sailing Team is a Swiss sports organization dedicated to competitive sailing, supporting elite and youth athletes. The website serves as a platform for news, team information, event updates, and partner engagement. It targets sailing enthusiasts, athletes, and sponsors within Switzerland. The business model is centered on athlete development and sponsorship partnerships, positioning itself as a national leader in sailing sports. Technically, the site is built on WordPress with common libraries such as jQuery, Bootstrap, and Slider Revolution, hosted by omega.influent.solutions. The site is moderately performant and mobile-optimized with basic accessibility and SEO features. Security posture is adequate with HTTPS and Google reCAPTCHA implemented, but lacks advanced security headers and explicit privacy/cookie policies. Contact information is clearly provided, including company emails and physical address, alongside active social media presence. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

The website 'Natur & Freizeit' is a Swiss non-profit organization focused on promoting respect for wildlife during snow sports activities. It provides educational content, guidelines, and resources to protect wildlife in designated areas, supported by Swiss federal and cantonal authorities. The site targets outdoor enthusiasts and nature conservation supporters, positioning itself as a niche environmental advocacy platform within Switzerland. Technically, the website is built on the Contao CMS platform, utilizing common JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial, with a privacy policy likely located on the Impressum page but no explicit cookie consent found. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

E

EUROSAF

eurosaf.org

9

EUROSAF is the European Sailing Federation, a non-profit organization dedicated to governing and promoting sailing activities across Europe since 1998. The website serves as an information hub for governance, committees, events, and regulatory frameworks related to sailing in Europe. The site targets sailing organizations, athletes, officials, and enthusiasts, positioning itself as a key continental federation in the sailing sports sector. Technically, the website is built on WordPress with common plugins and frameworks such as Bootstrap and WPBakery Page Builder, hosted via a reputable registrar and DNS provider. The site is moderately performant and mobile-optimized but lacks some advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but it lacks DNSSEC and important security headers, which should be addressed to improve resilience. Privacy compliance is weak due to missing privacy and cookie policies, which is a significant gap given GDPR requirements in Europe. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

W

World Sailing

sailing.org

10

World Sailing is the official international governing body for the sport of sailing, providing comprehensive information on sailors, international regattas, events, boat classes, member federations, and rankings across multiple sailing disciplines including fleet racing, match racing, para sailing, and e-sailing. The organization serves a global audience of sailing enthusiasts, athletes, and affiliated federations, positioning itself as the authoritative source for sailing governance and event information worldwide. The website reflects a medium-sized, professional non-profit entity with consistent branding and good content quality. Technically, the website employs modern web technologies such as Vue.js and is hosted on a CDN infrastructure (Amazon CloudFront), ensuring moderate to good performance and mobile optimization. The presence of Google Tag Manager indicates active analytics and marketing tracking, although privacy compliance measures such as cookie consent and privacy policies are not evident in the provided content. From a security perspective, the site enforces HTTPS and follows some best practices but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or suspicious elements were detected in the content. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature, and does not raise immediate concerns. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy compliance and security header implementation are recommended to enhance trust and regulatory adherence.

S

Stiftung Schweizer Sporthilfe

sporthilfe.ch

11

Stiftung Schweizer Sporthilfe is a well-established Swiss non-profit organization dedicated to financially supporting over 1,200 Swiss athletes, especially in youth, elite, and less commercially visible sports sectors. The website reflects a mature digital presence with strong branding, clear calls to action for donations and memberships, and a comprehensive content strategy highlighting their mission and impact. The organization maintains a reputable market position within Swiss sports promotion and athlete development.

I

Indiana Paddle & Surf

indiana-paddlesurf.ch

54

Indiana Paddle & Surf is a Swiss-based small retail company specializing in premium water sports equipment, including SUP boards, foil boards, paddles, wings, and surfboards. Founded in 2010, the company positions itself as an innovator in the water sports niche, targeting enthusiasts primarily in Switzerland and the EU. The website is built on Magento 2 with several WeltPixel extensions, integrating marketing and analytics tools such as Google Tag Manager and Klaviyo. The site is professionally designed with good navigation and mobile optimization, though it lacks visible privacy and cookie policies, which impacts compliance ratings. Security posture is solid with HTTPS enforced, but missing security headers and vulnerability disclosure information are areas for improvement. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is a functional and credible e-commerce platform with room to enhance privacy compliance and security best practices.

P

Peter Frisch GmbH

frisch-homepage.de

8

Peter Frisch GmbH is a small local business based in München, Germany, with an online presence hosted on the Wix platform. The website provides basic contact information including a phone number and physical address but lacks detailed business descriptions or service listings. The technical infrastructure is standard for Wix-hosted sites, utilizing Wix's Thunderbolt framework and common web technologies such as JavaScript and JSON-LD for structured data. Mobile optimization appears adequate, but SEO and accessibility features are basic. Security posture is moderate with HTTPS implied but no explicit security headers or policies found. Privacy and cookie policies are absent, indicating potential compliance gaps. Overall, the site is functional but could benefit from enhanced content, security, and compliance features to improve trust and professionalism.

S

Skippers

skippers.ch

9

Skippers is a Swiss-based e-commerce website specializing in sailing and boating products and services. The website is built on a WordPress platform using WooCommerce for e-commerce functionality and Elementor for page building. The site employs modern web technologies including Google Fonts, Matomo analytics, and WP Rocket for performance optimization. While the site is technically sound with HTTPS enabled and some security best practices like reCAPTCHA, it lacks explicit privacy and cookie policies, as well as contact information, which are critical for compliance and user trust. The domain registration data aligns well with the website's business claims, indicating legitimacy. Overall, the website presents a professional front but would benefit from enhanced privacy compliance and security headers to improve trust and security posture.

J

juris GmbH

landesrecht-mv.de

10

The website 'Landesrecht Mecklenburg-Vorpommern' is an official legal information portal operated by juris GmbH in cooperation with the Justice Ministry of Mecklenburg-Vorpommern, Germany. It provides free access to consolidated state laws, administrative regulations, and court decisions, targeting citizens and legal professionals. The business model focuses on public service and legal transparency, positioning itself as a trusted government resource. Technically, the site uses modern web technologies including React and Webpack, with a CMS platform (jportal) tailored for legal content management. The site is mobile-optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

L

Landesregierung Mecklenburg-Vorpommern

regierung-mv.de

10

The website www.regierung-mv.de is the official government portal for the state of Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information hub for the state's government activities, ministries, press releases, and public services. The portal targets citizens, media, and stakeholders interested in regional governance and public affairs. It offers rich content including ministerial information, news, events, and accessibility features such as content in sign language and easy language. Technically, the site uses standard web technologies with a likely custom CMS, providing good mobile optimization and accessibility. Security-wise, it implements cookie consent mechanisms and uses HTTPS, but lacks explicit security headers and incident response information. The WHOIS data aligns with the official government entity, confirming legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security policy transparency and technical security headers.

ペライチは日本を拠点とするホームページ作成ツールのSaaS企業で、専門知識不要で誰でも簡単に高品質なホームページやランディングページを作成できるサービスを提供しています。600種類以上のテンプレートやフォーム、決済、予約、メールマガジンなど多彩な機能を備え、個人事業主や中小企業、フリーランスを主なターゲットとしています。技術的にはNext.jsを利用したモダンなフロントエンドを持ち、AWSのDNSを利用してホスティングされており、Google AnalyticsやFacebook Pixel、Mixpanelなど多様なマーケティング・分析ツールを活用しています。セキュリティ面ではHTTPSが有効でドメインは安定的に管理されていますが、DNSSEC未設定やセキュリティヘッダーの欠如、プライバシーポリシーやクッキーポリシーの不備が見られます。全体として高品質で信頼性の高いサービスですが、プライバシーとセキュリティの強化が推奨されます。

Headspin AS is a Norwegian creative agency based in Trondheim, specializing in integrated communication services including strategy, campaign development, design, text production, 3D visualization, website and app development, and film production. The company targets businesses and organizations seeking comprehensive communication and branding solutions. The website reflects a professional and consistent brand image with a medium-sized team and a solid client portfolio. Technically, the site is built on WordPress with modern technologies such as Google Fonts, Google Maps API, and multiple analytics platforms including Matomo and Plausible, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, with clear business information and certifications such as Miljøfyrtårn enhancing credibility.

T

Telia Company

teliacompany.com

76

Telia Company is a leading telecommunications provider operating primarily in the Nordic and Baltic regions. The company offers a broad range of connectivity and digital services targeting both consumer and enterprise customers. Their market position is strong, supported by a consistent brand presence and a focus on sustainability and corporate governance. The website reflects a mature digital presence with modern technologies and a professional design. The technical infrastructure is built on React and modern web standards, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of publicly available WHOIS data suggests privacy protection, which is common for large enterprises. Overall, the website and company demonstrate a high level of professionalism and trustworthiness.

S

SJ Norge

sj.no

65

SJ Norge operates as a major Norwegian train service provider offering climate-friendly and comfortable travel options across multiple regional and long-distance routes. The company targets a broad audience including individual travelers, groups, and business clients, providing tailored travel solutions and extensive customer support. The website reflects a mature digital presence with comprehensive travel information, booking integration via a national travel planner, and active social media engagement. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, SJ Norge presents a trustworthy and professional online presence aligned with its transportation business.

G

Go-Ahead Nordic

go-aheadnordic.no

52

Go-Ahead Nordic operates as a regional train service provider in Norway, connecting major cities such as Oslo, Stavanger, and Kristiansand. The company is part of the larger Go-Ahead Group and focuses on delivering passenger rail services with an emphasis on travel information and customer support. The website serves as a portal for travelers to plan journeys, check train status, and access company news. Technically, the site is built on a modern React single-page application hosted on Microsoft Azure, integrating analytics and marketing tools such as Google Analytics, Bing Ads, and Telia ACE Web SDK. The site demonstrates good mobile optimization, accessibility, and basic SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and published security policies would enhance trust. Overall, the domain registration aligns well with the business profile, indicating legitimacy and consistency. The site is safe for general audiences and does not contain any adult or questionable content.

Entur AS operates as Norway's national travel planner, consolidating multiple modes of public transportation including bus, train, boat, tram, metro, and flights into a single platform. The company provides comprehensive travel search, ticketing, and real-time departure information, positioning itself as the leading travel planning service in Norway. The website is professionally designed, mobile-optimized, and offers a seamless user experience for a broad audience of travelers within Norway. Technically, the site leverages modern frameworks such as React, Firebase backend services, and integrates mapping services via Mapbox. Privacy and cookie compliance are well implemented with Usercentrics consent management, and analytics are handled through PostHog and Firebase Analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosure mechanisms could be improved. Overall, Entur demonstrates a mature digital presence aligned with its business goals and regulatory requirements.

B

Black Hole Experience

blackholeexperience.com

60

The Black Hole Experience website presents a mobile exhibition that combines the awe of nature and the cosmos with meditative reflection. The site is built using modern web technologies such as Next.js and React, and integrates privacy-conscious analytics via Plausible. While the website is accessible and professionally designed, it lacks publicly available WHOIS registration data, which raises some concerns about domain legitimacy. No direct contact information or detailed business credentials are provided, limiting business credibility assessment. Security posture is moderate with HTTPS enabled but missing key security headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page. Overall, the site appears legitimate and focused on a niche experiential offering but would benefit from enhanced transparency and security hardening.

The website creatorsoftomorrow.com is currently inaccessible due to a paused deployment on the Vercel hosting platform, resulting in a 503 SERVICE_UNAVAILABLE error page. No business content, metadata, or interactive elements are available for analysis. The domain is registered with Gandi SAS since 2018, indicating a stable and legitimate registration history. However, the lack of accessible content prevents a full assessment of the company's business model, services, or market position. From a technical perspective, the site is hosted on Vercel but currently not operational. No information about CMS, frameworks, or analytics tools is available. Security posture cannot be fully evaluated due to missing security headers and SSL configuration details. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. The security posture is weak due to the absence of accessible content and security best practices. No contact or incident response information is provided, limiting the ability to assess the organization's readiness for security incidents. The domain WHOIS data is consistent and shows no suspicious patterns, supporting the legitimacy of the domain ownership. Overall, the website is currently non-functional, which severely limits trust and credibility. Strategic recommendations include resuming the deployment to restore service, implementing comprehensive privacy and cookie policies, adding security headers, and providing clear contact and incident response information to improve compliance and trust.

Lavenham Leisure Ltd. operates a professional e-commerce website specializing in premium quilted jackets and waistcoats, manufactured in-house at their Suffolk factory. The company positions itself as a British factory brand with a focus on quality and craftsmanship, targeting men and women seeking high-quality outerwear. The website is built on the Shopify platform, leveraging modern technologies such as React, Google Analytics, Facebook Pixel, and OneTrust for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS domain registration data raises concerns about domain legitimacy, suggesting the need for further verification. Overall, the site demonstrates strong business credibility and technical implementation with room for improvement in transparency and security documentation.

D

DNEG

dneg.com

67

DNEG is a globally recognized leader in visual effects, animation, and creative technologies, serving the film, TV, and immersive content industries. With over 25 years of experience and multiple Academy Awards, DNEG partners with top filmmakers and studios to deliver cutting-edge digital production services. Their website reflects a mature digital presence with rich multimedia content and strong branding. Technically, the site uses modern frameworks like Next.js and React, integrates Vimeo for video hosting, and employs TrustArc for cookie consent management. However, some security best practices such as explicit security headers are not evident in the provided data. The absence of WHOIS registration details reduces transparency but does not detract significantly from the company's credibility given their established market position and external partnerships. Overall, DNEG demonstrates a solid security posture with room for improvement in security headers and incident response visibility.

Native is a specialized insurance brokerage focused on digital assets and the crypto-native ecosystem. They leverage decades of experience to provide bespoke insurance and risk management solutions tailored for onchain and offchain risks, integrating traditional insurance with blockchain technology. Their services include onchain capital insurance, smart contract-based policy execution, and crypto-denominated policies, positioning them as a niche player bridging legacy insurance and web3 innovation. Technically, the website is built on modern frameworks such as Next.js and React, with content managed likely via Contentful CMS. The site demonstrates good design and mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is moderate with no visible security headers or explicit SSL details in the provided data, and privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are visible, limiting direct communication channels. Overall, the site is professional and safe but would benefit from enhanced security practices and compliance transparency.

S

Stadt Uster

uster.ch

61

Stadt Uster operates as the official municipal government website for the city of Uster, Switzerland. It provides comprehensive information and services to residents, businesses, and visitors, including online administrative services, event announcements, and local news. The site targets a broad audience within the community and supports civic engagement through accessible contact and feedback channels. The business model is centered on public service delivery and community information dissemination. Technically, the website employs modern web technologies including Matomo for analytics, ES modules for JavaScript, and a Swiss-based CMS platform (i-web). The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be local to Switzerland, enhancing data sovereignty and compliance. From a security perspective, the site enforces HTTPS, uses secure login forms, and implements privacy and cookie policies with user consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, and no advanced security headers were detected. No vulnerabilities or suspicious content were found, indicating a solid security posture appropriate for a government website. Overall, Stadt Uster's website is a trustworthy, professional, and well-maintained digital presence for the municipality. It effectively balances user experience, privacy compliance, and security, though it could benefit from enhanced transparency around security policies and incident response procedures.

S

Stadt Wetzikon

wetzikon.ch

67

The website www.wetzikon.ch is the official municipal portal for the city of Wetzikon in the Zürcher Oberland region of Switzerland. It provides comprehensive information about the city, including tourism, culture, events, and local services. The site targets residents, visitors, and local businesses, serving as a central information hub. The business model is that of a government municipal service, with a medium-sized scope and a focus on public service and community engagement. Technically, the website is built using the Weblication® CMS platform, indicating a professional and structured content management approach. The site uses modern web technologies including Font Awesome icons and JavaScript, and it is optimized for mobile devices with good accessibility features. Performance is moderate, with room for improvement in loading speed and technical optimizations. From a security perspective, the site uses HTTPS with a strict referrer policy, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy or cookie policy, nor any incident response or vulnerability disclosure information, which are areas for improvement. No vulnerabilities or suspicious patterns were detected in the provided data. Overall, the website is trustworthy and professional, with a strong business credibility score. However, it would benefit from enhanced privacy compliance, improved security headers, and explicit policies to better align with GDPR and modern security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response contacts to improve transparency and security posture.