Security Directory

P

PIXELIGHT

pixelight.it

11

PIXELIGHT is a specialized creative studio based in Italy, focusing on motion graphics, animation, and digital visual effects for film, television, and web projects. The company has established a strong market presence with a portfolio of notable clients and partners in the media industry. Their website reflects a professional and modern digital presence, leveraging WordPress and popular frontend technologies to deliver a visually appealing and user-friendly experience. The site includes comprehensive privacy and cookie policies managed through Iubenda, indicating a commitment to GDPR compliance and user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in HTTP security headers and incident response documentation. Overall, PIXELIGHT demonstrates a mature digital infrastructure suitable for its business model and industry demands.

C

Con Magazine

conmagazine.it

44

Con Magazine is an Italian online video magazine dedicated to exploring social issues and their intersection with culture, education, sports, economy, and communication. Established in 2014 and registered as a periodical in Rome, it serves a niche audience interested in social cohesion and community development. The website leverages WordPress CMS with modern front-end technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Privacy compliance is robust, with integrated Iubenda cookie consent and a comprehensive privacy policy. Security posture is good with HTTPS and privacy-conscious analytics (Matomo with disabled cookies), though some security headers could be enhanced. Contact information is clearly provided, and partnerships with notable organizations like Con i Bambini and Fondazione Con il Sud reinforce credibility.

A

Aisico

aisico.com

52

AISICO is an established Italian company specializing in road safety and crash test services, boasting over 30 years of experience. The company operates a unique European testing center dedicated to crash tests, supported by a skilled team and advanced laboratories. Their market position is strong within the transportation safety sector, offering a broad range of services including certification, infrastructure testing, and training. The website reflects a professional and comprehensive digital presence, supporting their leadership claims with detailed service descriptions and accreditations. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant privacy and cookie policies managed by Iubenda. Security posture is generally good with HTTPS enabled and consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, AISICO presents as a credible and professional organization with room for improvement in domain transparency and security hardening.

I

INDIGO FILM SRL

indigofilm.it

49

Indigo Film SRL is an established independent film production company based in Italy, specializing in films, TV series, documentaries, and factual content. The company maintains a professional and well-branded online presence with a website optimized for both desktop and mobile users. Their market position is that of a medium-sized player in the Italian media production industry, targeting a general audience interested in independent film and television content. The website demonstrates good digital maturity with a modern WordPress CMS, SEO optimization via Yoast, and compliance with GDPR through an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response information are not published. Overall, the site is trustworthy and professionally managed, with strong social media integration and clear business information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further improve trust and compliance.

A

APT Servizi

aptservizi.com

55

APT Servizi is an Italian service-oriented company with an online presence primarily targeting Italian-speaking customers. The website is built on WordPress and employs common web technologies such as jQuery, Contact Form 7, and Cookiebot for cookie consent management. The presence of Google reCAPTCHA and New Relic indicates attention to bot protection and performance monitoring. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership details. The website is accessible without any WAF or security challenge blocking content. Cookie consent is well implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Contact information such as emails or phone numbers is not clearly presented on the site.

S

Seeweb srl

seeweb.it

65

Seeweb srl is an established Italian cloud computing and hosting provider founded in 1998, offering a wide range of IT infrastructure services including cloud servers, GPU computing for AI and machine learning, virtual private clouds, and data center services across Italy, Switzerland, and Bulgaria. The company emphasizes sustainability by powering its data centers with 100% renewable energy and guarantees high service availability with SLA commitments of 99.9%. Their business model targets enterprises and organizations requiring scalable, secure, and high-performance cloud solutions, supported by a multi-level technical support system and a partner program to extend market reach. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, self-hosted analytics (Matomo), Microsoft Clarity for user behavior insights, and integrated marketing tools such as Google Tag Manager and various ad networks. The site is well-optimized for mobile devices, features clear navigation, and maintains good SEO and accessibility standards. Hosting appears to be managed internally, reflecting control over infrastructure and performance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed, the absence of exposed sensitive data and use of privacy-conscious analytics indicate a solid security posture. However, the site lacks a publicly visible security policy or incident response contact, which could be improved to enhance transparency and readiness. Overall, Seeweb presents a trustworthy and professional online presence with strong business credibility, technical robustness, and compliance with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security transparency and formalizing vulnerability disclosure processes.

F

Flyeye

sudtirol360.it

50

Virtual Südtirol is a small hospitality-focused business offering augmented reality virtual tours of the Alto Adige region in Italy. The company, branded as Flyeye, provides immersive virtual experiences to tourists and hospitality clients to enhance travel planning and marketing efforts. The website is professionally designed using Incomedia WebSite X5 Pro and integrates modern analytics tools such as Matomo and Google Analytics, with GDPR-compliant privacy and cookie policies in place. Contact information is clearly presented, including a contact form, phone number, email, and physical address in Meran, Italy. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency.

ITASnow.it is a dedicated website offering mandatory ski insurance in Italy, operated by ITAS Mutua, a well-established insurance mutual company. The site targets skiers in Italy, providing an easy and immediate online purchase experience for the required ski insurance. The business model focuses on direct online sales of insurance policies, leveraging ITAS Mutua's brand and market presence. The domain registration and DNSSEC status support the legitimacy of the business, with a domain age consistent with the product launch timeline. Technically, the website employs modern web technologies including React, Google Tag Manager, OneTrust for cookie consent, and Worldline Italy's payment SDK for secure transactions. Accessibility is enhanced via the AccessiWay tool. The site demonstrates good mobile optimization, SEO practices, and a strict Content Security Policy, contributing to a robust technical infrastructure and digital maturity. From a security perspective, the website benefits from HTTPS, DNSSEC, and a strict CSP. However, the use of an outdated jQuery version and the absence of explicit privacy policy and terms of service pages are notable gaps. No security.txt or vulnerability disclosure information is present, and no direct contact information for security incidents is provided. Cookie consent mechanisms are implemented comprehensively, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its insurance product, with strong technical and security foundations. To enhance compliance and trust, publishing clear privacy and terms documents, updating legacy libraries, and providing direct contact channels for security and customer support are recommended.

L

Luisl's Ski School

luisls-skischool.com

52

Luisl's Ski School is a regional ski instruction service based in Ratschings, South Tyrol, Italy, offering skiing and snowboarding lessons including group courses and private lessons. The website is professionally designed using Consisto CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and Avacy Consent Management for privacy compliance. The site demonstrates good mobile optimization and user experience with clear navigation and relevant content for its target audience of winter sports enthusiasts. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern, suggesting the need for further verification of domain registration and ownership to ensure legitimacy. Overall, the website is functional, privacy-aware, and business-focused but would benefit from enhanced transparency regarding domain registration and contact information.

F

First Music Contact

breakingtunes.com

53

Breaking Tunes is a niche media platform dedicated to the discovery and promotion of music artists on the Island of Ireland. It serves as a community portal for artists and industry professionals, supported by First Music Contact, a national music organization. The website offers artist registration, browsing by genre, and curated artist charts, positioning itself as a key resource in the Irish independent music sector. Technically, the site uses modern web technologies including Turbolinks and Google Tag Manager for analytics, with good mobile optimization and a professional design. However, the absence of visible security headers and privacy policies indicates room for improvement in security and compliance. The WHOIS data is missing, which raises questions about domain registration legitimacy, though the content and organizational association suggest a legitimate business presence. Overall, the site is safe for general audiences and provides valuable services to its target community.

The website ydea.it is currently a parked domain page primarily advertising the domain for sale. The content is minimal, with no business services or company information presented. The domain was registered in 2012 and is consistent with a long-held domain now offered for resale. Technically, the site uses basic JavaScript and external ad network scripts, hosted via Amazon Cloudfront CDN. There is no evidence of a CMS or advanced frameworks. Security posture is weak with no visible security headers or privacy policies, and no HTTPS status provided. The site lacks contact information, privacy, cookie, or terms of service policies, indicating low compliance and business credibility. Overall, the site is low trust and low content quality, suitable only for domain investors or buyers.

S

Stape, Inc.

stape.net

82

Stape, Inc. is a US-based technology company specializing in server-side tracking solutions, primarily leveraging Google Tag Manager and various API gateways for platforms like Meta, TikTok, and Snapchat. Positioned as an industry leader with over 200,000 customers, Stape offers a SaaS platform that simplifies server-side tracking setup, improves data quality, and enhances marketing ROI. Their business model focuses on providing cloud-hosted server infrastructure, integrations, and power-ups to marketers and businesses seeking advanced tracking capabilities. The company maintains a strong market presence with comprehensive customer support, certifications, and a robust online community. Technically, Stape utilizes modern web technologies including React and Next.js, hosted on Google Cloud Platform with Kubernetes for secure and scalable infrastructure. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security-wise, Stape enforces HTTPS, employs recommended security headers, and holds multiple certifications such as SOC 2, ISO 27001, HIPAA, and GDPR compliance. They implement privacy best practices including cookie consent and anonymization features. No critical vulnerabilities or suspicious patterns were detected, though enabling DNSSEC and publishing a security.txt file would enhance security posture. Overall, Stape demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable service provider in the server-side tracking domain.

F

FH Münster

fh.ms

10

FH Münster is a well-established university of applied sciences in Germany, providing a range of degree programs and educational services primarily targeting students and the academic community. The website reflects a professional educational institution with a clear focus on higher education. The site offers key services such as course listings and a student portal (myFH-Portal), positioning itself as a regional higher education provider. The content is primarily in German with an option for English, catering to a broad academic audience. Technically, the website uses modern web technologies including JavaScript ES modules and CSS, with SVG graphics for branding. The site is moderately performant and optimized for mobile devices, though accessibility features are basic. Security is addressed with HTTPS and a Content-Security-Policy header, but additional security headers and policies are lacking. There is no evidence of analytics or advertising scripts, indicating a focus on privacy and minimal tracking. From a security perspective, the site demonstrates a good baseline with HTTPS and CSP but lacks comprehensive privacy policies, cookie consent mechanisms, and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the academic nature of the institution, showing consistent domain registration with German academic network name servers, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, additional security headers, and published policies to improve user trust and regulatory adherence.

The website at https://www.b-ite.com/recruitingmanager/ is currently inaccessible, returning a server error (HTTP 500) with minimal HTML content. Due to this, no meaningful business, technical, or security information can be extracted or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or compliance posture. Technically, the site shows no evidence of modern web technologies, security headers, or privacy mechanisms. The WHOIS data is privacy protected, further limiting trust verification. Overall, the site appears non-operational or blocked, resulting in a low trust and security score.

The domain px.media currently serves a 404 error page with no accessible business content or services. The page references pixx.io in its imprint and privacy policy links, suggesting a possible affiliation or redirection to that domain. The lack of WHOIS data due to TLD restrictions and privacy protection limits the ability to verify registrant details. Technically, the site uses Google Fonts and Material Icons but lacks HTTPS and security headers, indicating a minimal technical setup. No forms, contact information, or analytics scripts are present, reflecting a non-operational or placeholder status. Security posture is weak due to missing HTTPS and security best practices. Overall, the domain appears inactive or misconfigured, with low trustworthiness and business credibility.

G

gastroevents GmbH & Co. KG

ulmmesse-catering.de

41

The website www.ulmmesse-catering.de represents gastroevents GmbH & Co. KG, a small hospitality business specializing in catering services for the Ulm Messe trade fair. The site provides information about catering offerings, job opportunities, and accommodation partnerships, targeting event organizers and visitors. The business operates locally with a clear focus on event catering and hospitality services. Technically, the website is built on WordPress using the Divi theme, with jQuery and a cookie consent plugin. Hosting is provided by cloudpit, as indicated by the nameservers. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. Security posture is good with HTTPS enforced and a cookie consent mechanism, but lacks security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and GDPR-compliant cookie consent. Contact information is available with a physical address and company email. No social media or phone contact is explicitly provided. Overall, the site is professional, trustworthy, and safe for general audiences.

S

servier.bar - Self Ordering

servier.bar

67

servier.bar is a German-based digital ordering and payment platform tailored for the hospitality industry. The company offers self-ordering, kiosk, and webshop solutions that enable guests to order and pay via smartphones, aiming to reduce staff workload, minimize errors, and increase revenue. The website is professionally designed using WordPress with modern SEO and analytics integrations, targeting hospitality businesses in Germany. The technical infrastructure includes WordPress CMS, WPBakery Page Builder, Usercentrics for cookie consent, and analytics tools such as Matomo and Facebook Pixel. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies indicates room for improvement. Overall, the website is trustworthy and functional but lacks some compliance and security best practices.

The website 'Parken in Ulm' serves as an informational platform providing live updates on parking availability across multiple parking facilities in Ulm, Germany. It targets drivers and cyclists looking for parking options, offering real-time data, route guidance, and facility details. The business behind the site appears to be the Ulmer Parkbetriebs-GmbH, a local parking management entity. The site is well-branded, consistent, and provides clear contact information, enhancing its credibility. Technically, the site is built on the Odoo CMS platform and leverages modern web technologies including MapLibre GL for interactive maps and FontAwesome for icons. The site is mobile-optimized with good navigation and SEO practices. Hosting is managed via the d9t.de infrastructure, consistent with the domain's nameservers. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and a cookie consent mechanism, which are areas for improvement. No forms or data collection points are present on the main page, reducing immediate data exposure risks. No incident response or security policies are published, which could be enhanced to improve trust. Overall, the website is safe, professional, and trustworthy with a solid business focus on transportation services. Strategic improvements in privacy compliance and security headers would elevate its security posture and regulatory adherence.

E

Evangelische Gesamtkirchengemeinde Ulm

ulmer-muenster.de

57

The Evangelische Gesamtkirchengemeinde Ulm operates the Ulmer Münster, serving as a religious and community organization in Ulm, Germany. The website provides comprehensive information about visiting hours, tours, church services, music ensembles, and community activities. It targets local residents, visitors, and church members, positioning itself as a key cultural and religious institution in the region. The business model is non-profit, focusing on community engagement and cultural preservation. Technically, the website is built on the ChurchDesk CMS platform, which is tailored for church organizations. It uses modern web technologies including JavaScript and jQuery, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is hosted on servers associated with kasserver.com, with good mobile optimization and accessibility features. Performance is moderate, with a well-structured navigation system and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies in German, reflecting GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

D

DONAU 3 FM

donau3fm.de

58

DONAU 3 FM is a regional radio station serving the Schwaben region in Germany, providing music and important local news from cities such as Ulm, Neu-Ulm, Biberach, Günzburg, and Heidenheim. The website is professionally designed with consistent branding and targets local residents and listeners interested in regional content. The business model focuses on radio broadcasting and news dissemination, positioning itself as a key media outlet in its region. Technically, the website uses a modern technology stack including Google Tag Manager, Matomo Analytics, Google Adsense for advertising, and hCaptcha for bot protection. It is hosted on Hetzner servers, a reputable German hosting provider. The site is mobile optimized and SEO friendly, with structured data implemented for better search engine understanding. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers and does not provide visible security or incident response policies. Privacy compliance is basic, with no clear privacy or cookie policy pages found, although a cookie consent mechanism is present. No contact information for security or data protection officers is available. Overall, the website is safe, professional, and trustworthy for general audiences, with no adult or explicit content. The main risks relate to privacy compliance and security policy transparency, which could be improved to enhance user trust and regulatory adherence.

R

RADIO 7 Hörfunk GmbH & Co. KG

radio7.de

60

RADIO 7 is a regional private radio broadcaster based in Ulm, Germany, offering a variety of services including live radio streaming, podcasts, regional news, entertainment, and event ticketing. The website reflects a strong local media presence with multiple regional studios and a broad content offering targeting general audiences in southern Germany. The business model centers on media broadcasting and advertising, supported by partnerships with ticketing and advertising platforms. The site is professionally designed, mobile-optimized, and provides clear contact channels and social media integration. Technically, the website leverages modern JavaScript frameworks (Nuxt.js/Vue.js), integrates a consent management platform (Usercentrics), and uses Google Analytics and Tag Manager for analytics. Hosting and media assets are served via Amazon AWS infrastructure, ensuring good performance and scalability. The site demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, employs standard security headers, and anonymizes IP addresses in analytics. Consent mechanisms for cookies and privacy are implemented, aligning with GDPR requirements. However, no explicit security policy or incident response information is publicly available, and no vulnerability disclosure policy is found. The WHOIS data is minimal, lacking detailed registrant information, which slightly reduces trust but is not uncommon for media companies using managed DNS services. Overall, RADIO 7's website is a well-maintained, secure, and privacy-conscious platform that effectively serves its regional audience. Strategic improvements could include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

U

Ulmer City Marketing e.V.

ulmercity.de

61

Ulmer City Marketing e.V. is a local economic association dedicated to supporting and promoting the retail, service, hospitality, and gastronomy sectors in Ulm, Germany. The organization focuses on marketing the city center, organizing events, and managing voucher programs to enhance the local business environment. The website reflects a professional and consistent brand image, targeting local businesses and consumers with relevant content and services. Technically, the site is built on Webflow with modern animation libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and functional but could improve in compliance and security transparency.

V

VMV GmbH

vmvgmbh.com

10

VMV GmbH is a specialized event management company focused on organizing and marketing Volksfeste, markets, and related events primarily in the Ulm region of Germany. With nearly two decades of experience, the company positions itself as a trusted partner for municipalities and event organizers, offering comprehensive services from concept development to execution and marketing. The website reflects a professional and consistent brand image, emphasizing their expertise and long-standing event references. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for GDPR-compliant cookie management. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. The site is mobile-optimized and performs moderately well, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent is implemented thoroughly, reflecting good privacy compliance. However, the site lacks explicit security policies or incident response contacts, which could enhance trust further. Overall, VMV GmbH presents a credible and professional online presence with strong compliance and a clear business focus. Strategic improvements in security headers and incident response transparency are recommended to further strengthen their security posture and trustworthiness.

U

Ulm-Messe GmbH

ulm-messe.de

10

Ulm-Messe GmbH is a regional event venue and event management company based in Ulm, Germany. The company offers a wide range of event spaces and professional services for trade fairs, congresses, open-air events, and seasonal markets such as the Ulm Christmas market. Their strong local partnerships and comprehensive service offerings position them as a key player in the hospitality and event sector in southern Germany. The website is well-structured, professionally designed, and targets event organizers and businesses seeking venue rental and event coordination services. Technically, the site is built on RapidWeaver CMS using the Foundation framework and includes modern JavaScript libraries and a consent management platform, reflecting a moderate to advanced digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting a positive business credibility profile.

B

BlaBlaCar

blablacar.de

11

BlaBlaCar is a leading European transportation platform specializing in ridesharing and long-distance bus travel. The website www.blablacar.de offers users a comprehensive and user-friendly interface to find and book affordable travel options across Europe, primarily targeting German-speaking customers. The platform emphasizes trust and safety through member verification and ratings, supported by modern identity verification technologies such as Onfido. The company maintains a strong digital presence with mobile apps and active social media channels. Technically, the site leverages modern web frameworks, cloud hosting, and integrates analytics and marketing tools to optimize user experience and business insights. Security posture is robust with HTTPS, CSP, and secure data handling practices, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business with a mature digital infrastructure.

Y

Your-Run GmbH

your-run.com

10

Your-Run GmbH operates a specialized community app focused on running and triathlon sports, offering a comprehensive event calendar, social community features, and detailed competition statistics. The business targets active runners and triathletes primarily in Germany but with a global event database. The company uses a freemium business model with a premium subscription unlocking advanced features. The website is professionally designed, mobile-optimized, and integrates modern SEO and performance tools.

R

RideBee

ridebee.com

10

RideBee is a German-based platform founded in 2012 that facilitates ride-sharing and sustainable commuting solutions primarily targeting commuters, companies, universities, and event organizers. The platform offers services including carpooling, bike-sharing, shuttle services, and features such as intelligent matching, digital payments, and in-app communication. The company positions itself as a niche player in the sustainable transportation sector within Germany, emphasizing environmental benefits and cost savings for users. Technically, the website is built on Angular 13 with integrations for Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the domain is secured with HTTPS, and domain registration is stable and consistent with the business history. However, the site lacks visible privacy and cookie policies, security.txt, and explicit contact information, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

M

Marathon-Photos.com Limited

marathon-photos.com

37

Marathon Photos Live is a globally operating sports photography company specializing in mass participation event photography, with a presence in 70 countries and a large volume of images and athletes served. The company positions itself as a world leader in this niche, offering event photography services and image sales primarily targeting athletes and event organizers. The website is professionally designed using modern web technologies such as Vue.js, with good mobile optimization and SEO practices. Privacy and cookie policies are implemented with user consent mechanisms, supporting GDPR compliance. However, direct contact information such as emails or phone numbers is not publicly listed, relying on contact forms instead. The WHOIS data is privacy protected, limiting verification of domain age and registrant details, but the website's content and social media presence support its legitimacy. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and accessibility.

A

ASC Ulm/Neu-Ulm

asc-ulm-neu-ulm.de

10

ASC Ulm/Neu-Ulm is a well-established German sports club founded in 2011, focusing on running, swimming, and cycling training courses primarily to prepare participants for the Einstein-Marathon. The club offers a variety of courses and community events, serving approximately 2,000 members as of 2016. The website is professionally designed using WordPress and Elementor, providing rich content about training programs, events, and membership details. It integrates with partner event sites and promotes sustainability initiatives. Technically, the site uses modern web technologies and SEO tools but lacks explicit privacy and cookie policies, which are compliance gaps. Security posture is adequate with HTTPS but could be improved by adding security headers and formal policies. Overall, the site is trustworthy and serves its community well but should enhance privacy compliance and security best practices.

B

Bernd Hummel

eurotour25-28.de

10

EuroTour25–28 is a multi-year endurance and climate awareness project led by Ulm-based extreme athlete Bernd Hummel, aiming to connect key European regions through sporting challenges and sustainability advocacy from 2025 to 2028. The project is positioned as a niche initiative promoting European unity and environmental responsibility, supported by partners such as the Einstein-Marathon and Technische Hochschule Ulm. The website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and clear navigation. However, it lacks critical compliance elements such as privacy and cookie policies, and no direct contact information is provided, which limits user trust and GDPR compliance. Security posture is generally good with HTTPS and no visible vulnerabilities, but the absence of security headers and incident response details are areas for improvement.

X-treme Battle is a small-scale event organizer specializing in obstacle and cross runs in Heroldstatt, Germany. The website provides detailed event information, registration links via a trusted third-party platform (Datasport), and multimedia content to engage participants. The site is built on WordPress using Themify Ultra theme and includes modern web technologies such as lazy loading and video embedding. Security posture is adequate with HTTPS and cookie consent, but lacks comprehensive security headers and formal privacy or terms policies. Contact information is limited to an email address, with no phone or physical address provided. Overall, the site is functional and professional for its niche audience but could improve compliance and security transparency.

E

Einstein-Marathon

ulmer-jugendlaeufe.de

52

The website ulmer-jugendlaeufe.de represents the Einstein Jugendläufe, a well-established youth running event held annually in Ulm, Germany. The site is professionally designed using WordPress and Elementor, providing comprehensive information about the event, registration, and results. The business operates in the education and sports event sector, targeting children, youth, families, and schools in the region. The site integrates with partner domains and services such as einsteinmarathon.de and datasport.de for event management and registration. Technically, the website employs modern web technologies including WordPress 6.8.3, Elementor, and Rank Math SEO, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in privacy compliance and security header implementation. The domain WHOIS data aligns with the website's business purpose, showing legitimacy and consistency. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure policy, and enhancing user consent mechanisms to improve compliance and trust.

S

SUN Sportmanagement GmbH

ulmer-klimalauf.de

46

Ulmer Klimalauf is a virtual running event organized by SUN Sportmanagement GmbH, focused on climate protection through community participation. The event encourages participants to collect kilometers by running, walking, or hiking, supporting climate-related projects such as water supply initiatives in Uganda. The website is well-branded, professionally designed, and provides comprehensive information about the event, partners, and sustainability efforts. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the site is trustworthy and serves its target audience effectively.

Y

yorkwachter

ulmer-muensterturmlauf.de

52

Ulmer Münsterturmlauf is a specialized event website promoting the annual tower running race held in Ulm, Germany. The site provides detailed event information, registration links, news updates, and partner information, targeting runners and sports enthusiasts. The business operates as a small, niche event organizer with a focus on local and regional participants, emphasizing sustainability and community engagement. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure connections. Security posture is good but could be improved with additional security headers and explicit privacy and cookie policies. No direct contact emails or phone numbers are published, relying on contact forms and newsletter signups. Overall, the website is professional, trustworthy, and safe for general audiences.

U

Ulmer Frauenlauf

ulmer-frauenlauf.de

54

Ulmer Frauenlauf is a regional event organizer focused on women's running events in southern Germany. The website provides comprehensive event information, partner promotion, and registration details, targeting female runners and sports enthusiasts. The site is built on WordPress with Elementor and uses modern SEO practices including structured data. Hosting and DNS are managed via Cloudflare, ensuring good performance and security at the infrastructure level. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks under GDPR. Security posture is moderate with HTTPS enforced but missing security headers and vulnerability disclosure. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

U

Ulmer Firmenlauf

firmenlauf-ulm-neu-ulm.de

53

The Ulmer Firmenlauf website represents a regional corporate running event organizer in southern Germany, focusing on the popular AOK Firmenlauf event. The site provides event information and branding but lacks comprehensive business and contact details. Technically, the website is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. SEO is supported by Rank Math, and analytics are implemented via WordPress.com Stats. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but could improve transparency and security practices.

Datasport Germany GmbH operates a professional website focused on sports event timing and registration services, primarily targeting event organizers and participants in Germany. The company offers key services including event timing, registration management, live result publishing, and event organization support. The website is well-branded and consistent with the company's identity, reflecting a medium-sized business with a solid market position in the sports event sector. Technically, the website employs modern frameworks such as Bootstrap and Material Design Bootstrap, uses jQuery for interactivity, and leverages Cloudflare for DNS and CDN services. Analytics are handled via Matomo, indicating a moderate level of user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare services, but lacks explicit security headers and published security policies. Privacy compliance is addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content. The domain registration data aligns with the business identity, supporting legitimacy. Strategic improvements in security policy transparency and privacy consent mechanisms would enhance compliance and trust.

tapCLIQ is a technology company specializing in AI-driven engagement automation and front-office robotic process automation (RPA) solutions primarily targeting eCommerce businesses and enterprises. Their platform offers a suite of customizable bots and RPAs designed to automate sales processes, enhance customer experience, and improve conversion and retention rates. The company positions itself as an enterprise-grade solution provider with a focus on intelligent marketing automation and customer journey orchestration. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, Typed.js for dynamic text effects, and integrates multiple analytics and advertising tools such as Google Analytics, Google Tag Manager, and AdRoll. The site is mobile-optimized with good SEO practices and interactive content including video embeds and multiple user engagement forms. From a security perspective, the site enforces HTTPS and uses secure form validation but lacks explicit security headers and does not disclose a formal security policy or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and business presentation are professional and consistent. Overall, tapCLIQ presents a mature digital presence with strong business and technical foundations but would benefit from improved transparency in domain registration and enhanced security practices to bolster trust and compliance.

I

Integral Ad Science

integralads.com

65

Integral Ad Science is a global leader in digital media measurement and optimization, providing actionable data to advertisers, publishers, and platforms to enhance advertising effectiveness. The company offers a broad suite of services including ad fraud detection, brand safety, contextual targeting, and viewability measurement, positioning itself as a critical partner in the advertising technology ecosystem. The website reflects a mature, enterprise-grade digital presence with comprehensive content and global reach, supported by multiple language versions and a strong SEO foundation. Technically, the site is built on WordPress with modern frameworks and integrates advanced marketing and analytics tools such as Google Tag Manager, Hotjar, and Marketo, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in DNSSEC adoption and security header implementation. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, with no critical security or content safety concerns.

anonystats.de is a small-scale, internal-use web analytics service focused on anonymous and GDPR-compliant web logging. The website content is minimal, indicating the service is not publicly marketed but used internally. The technical infrastructure is simple, leveraging Bootstrap for styling and a custom JavaScript analytics script. There is no evidence of complex CMS or third-party analytics services, reflecting a lightweight and privacy-conscious approach. Security posture is moderate; while no security headers or cookie consent mechanisms are detected, the absence of forms and minimal external dependencies reduce attack surface. The WHOIS data shows consistent domain registration and legitimate name servers, supporting the domain's trustworthiness. Overall, the website is safe, with no adult or questionable content, but lacks public business and contact information, limiting external trust signals.

S

SoftTec GmbH

softtec.de

63

SoftTec GmbH operates a professional website offering hotel software and cloud-based hotel management solutions primarily targeting the hospitality sector in Germany. The website is built on WordPress using Elementor and incorporates modern web technologies such as jQuery and WPRocket for performance optimization. The site is accessible without any WAF or security challenges, indicating a stable hosting environment. However, the website lacks explicit privacy and cookie policies, as well as clear contact information for security incidents or data protection officers, which are critical for GDPR compliance and user trust. Security best practices such as security headers are not evident, suggesting room for improvement in the security posture. Overall, the website presents a good business credibility and technical foundation but requires enhancements in privacy compliance and security transparency.

B

Best Western Hotels & Resorts

bestwestern.com

73

Best Western Hotels & Resorts operates a global hospitality business offering hotel accommodations through multiple brands. The website serves as a primary booking platform with enhanced cleaning protocols, flexible rates, and a rewards program. The company targets travelers seeking reliable and affordable lodging options worldwide. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and integrates secure payment processing via Stripe. Bot protection and analytics tools like DataDome and Tealium are employed to ensure security and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly available. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

A

adfocus GmbH

getback.ch

45

Getback, operated by adfocus GmbH, is a Swiss-based technology company specializing in conversion optimization and web-push notification services tailored for e-commerce platforms. The company offers a SaaS solution that tracks user behavior on online shops and delivers targeted campaigns to increase conversion rates and customer engagement. Their market position is supported by a portfolio of reputable clients including Ikea, Tchibo, and Jumbo, indicating strong industry trust and relevance. The website is professionally designed, multilingual, and provides comprehensive information about their services and benefits. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, and integrates Google Analytics and Tag Manager for user tracking and performance analysis. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced with anonymized IP tracking in analytics, and anti-spam measures are implemented in forms. However, explicit security headers and cookie consent mechanisms are lacking, representing areas for improvement. Overall, the security posture is solid but could be enhanced by adopting additional HTTP security headers and publishing formal security policies. Privacy compliance is adequate with a clear privacy policy, but cookie consent is missing. The domain registration is transparent and consistent with the business identity, reinforcing legitimacy. There are no indications of malicious content or blocking mechanisms, allowing full access to the site. Strategically, Getback is well-positioned in the e-commerce marketing technology sector with a clear value proposition and trusted client base. Enhancing security and privacy features would further strengthen their market credibility and compliance posture.

The website redintelligence.net is minimalistic, consisting solely of a frameset that loads an external domain (www.redvertisment.com). There is no substantive content, metadata, or business information present on the site. The domain is registered since 2012 with INWX GmbH and is currently active with no privacy protection enabled. The lack of HTTPS and security headers indicates a weak security posture. No privacy, cookie, or terms of service policies are available, and no contact information or social media presence is found. Overall, the site appears to be a placeholder or redirect without meaningful business presence or user engagement features. Technically, the site uses outdated HTML frameset technology and lacks modern web standards such as responsive design, SEO metadata, or analytics. The hosting provider is inferred from the registrar data but no direct hosting details are available. Performance and accessibility cannot be fully assessed due to minimal content. From a security perspective, the absence of HTTPS and security headers is a significant concern. The domain registration is stable and consistent, but the website itself does not demonstrate compliance with privacy regulations or security best practices. No vulnerabilities or malicious indicators are detected, but the site’s minimalism and redirection behavior warrant caution. Overall risk is moderate due to lack of content and security features. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving website content and structure, and implementing security headers to enhance trust and compliance.

B

Bundesverband Deutscher Finanzberater e.V.

bdf24.de

54

The Bundesverband Deutscher Finanzberater e.V. (BDF) is a professional association representing financial advisors, investment consultants, insurance brokers, and related experts in Germany. The organization offers membership benefits including certifications, professional development, and a rating system to enhance the credibility and market position of its members. The website targets both finance professionals seeking membership and consumers looking for qualified advisors. Technically, the website employs a modern JavaScript stack with user consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional, well-structured, and compliant with GDPR, supporting a trustworthy online presence for the association.