Security Directory

A

Alibaba Cloud

aliyun.com

76

Alibaba Cloud is a leading global cloud computing service provider and a subsidiary of Alibaba Group. The company offers a wide range of scalable, secure, and reliable cloud products and solutions designed to accelerate digital transformation for enterprises worldwide. Their market position is strong, especially in Asia, with a comprehensive portfolio including AI, data analytics, and security services. The website reflects a mature digital infrastructure with modern technologies such as React and RequireJS, ensuring a fast and responsive user experience. Security is a priority, evidenced by HTTPS enforcement, multiple security headers, and compliance with international standards like ISO 27001 and PCI DSS. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates high professionalism and trustworthiness, although WHOIS data is not publicly available, likely due to privacy protection.

R

RootMetrics

rootmetrics.com

63

RootMetrics is a well-established technology performance benchmarking company specializing in mobile network operator testing and 5G performance measurement. As a recognized industry standard and now a subsidiary of Ookla, RootMetrics provides actionable insights to consumers and businesses to improve their connected technology experiences. The website reflects a professional and consistent brand presence with comprehensive content and multimedia elements that engage its target audience effectively. Technically, the site employs modern JavaScript frameworks such as AngularJS and uses marketing automation tools like Eloqua and HubSpot forms, hosted on AWS infrastructure, ensuring good performance and scalability. Security posture is solid with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are not evident, indicating room for improvement. Privacy and terms policies are comprehensive and hosted on the parent company domain, demonstrating good privacy compliance. Overall, the website is trustworthy, well-designed, and serves its business purpose effectively.

L

Lebenshilfe Gießen e.V.

reisemobilspendenaktion.de

38

The Reisemobilspendenaktion der Lebenshilfe Gießen e.V. is a charitable initiative focused on raising funds through a motorhome donation campaign. The organization supports inclusive social projects for people with intellectual disabilities and psychological illnesses in Germany. The website presents a professional and well-structured platform with clear information about donation campaigns, prizes, and past results, targeting camper enthusiasts and socially conscious donors. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and implements GDPR-compliant cookie consent via Usercentrics. Security posture is solid with HTTPS and basic security headers, though there is room for improvement in incident response and security policy disclosures. Overall, the site is trustworthy, transparent, and well-positioned within its niche non-profit sector.

L

Lebenshilfe Gießen e.V.

schlepperspendenaktion.de

46

The Schlepperspendenaktion website represents a non-profit fundraising campaign operated by Lebenshilfe Gießen e.V., a German social aid organization. The campaign incentivizes donations by offering historic tractors as prizes, targeting classic tractor enthusiasts and donors interested in charitable causes. The website is professionally designed with clear navigation, consistent branding, and relevant content that supports its mission. It maintains a good level of trust through notarized prize draws and transparent contact information. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and a cookie consent mechanism via Usercentrics. The infrastructure is hosted with a reputable DNS provider and uses HTTPS with good SSL configuration. Mobile optimization and SEO practices are well implemented, though accessibility could be improved. No major technical debts or vulnerabilities are evident. From a security perspective, the site enforces HTTPS and uses cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Business credibility is strong due to transparent contact details and trust signals. Overall, the website presents a low-risk profile with solid business credibility and technical implementation. Strategic improvements in security headers and incident response transparency would enhance its security posture and trustworthiness.

L

Lebenshilfe Gießen e.V.

oldtimerspendenaktion.de

38

Lebenshilfe Gießen e.V. operates the Oldtimerspendenaktion, a well-established charitable campaign running for over 31 years in Germany. The organization supports people with disabilities through various social services and fundraising initiatives involving classic and youngtimer vehicle donations. The website reflects a mature non-profit with consistent branding, clear communication, and a focus on community engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-positioned within its niche.

J

Jaguar Land Rover Classic

jaguarlandroverclassic.eu

68

Jaguar Land Rover Classic is the official heritage and classic division of Jaguar Land Rover, specializing in the preservation, restoration, and maintenance of classic Jaguar and Land Rover vehicles. The business offers a comprehensive range of services including approved classic vehicle sales, bespoke builds, servicing, parts sales, and classic driving experiences. The website reflects a premium market position with strong brand consistency and professional presentation. Technically, the site is built on Magento Commerce with modern JavaScript frameworks and integrates advanced search and analytics tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforcement, cookie consent mechanisms, and standard security headers, though there is room for improvement in publishing explicit security policies and vulnerability disclosure information. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, serving a global audience of classic car enthusiasts and collectors.

Jaguar Land Rover Classic is a specialized division of Jaguar Land Rover focused on providing classic Jaguar and Land Rover parts and restoration services. The website targets classic car enthusiasts and owners primarily in Germany and Europe, leveraging a robust e-commerce platform based on Magento Enterprise. The technical infrastructure includes modern JavaScript libraries, advanced search capabilities via Klevu, and GDPR-compliant cookie management through Cookiebot. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and terms policies are not detected in the provided content. Overall, the site demonstrates a mature digital presence aligned with a large automotive brand, though improvements in transparency and contact availability would enhance trust and compliance.

J

Jaguar Land Rover Classic

jaguarlandroverclassic.com

68

Jaguar Land Rover Classic operates as the official heritage and classic vehicle division of Jaguar Land Rover, focusing on preserving, restoring, and maintaining classic Jaguar and Land Rover vehicles. The business offers a range of services including bespoke vehicle builds, continuation models, servicing, restorations, parts supply, and lifestyle merchandise. The website reflects a premium brand image consistent with its market position and targets classic car enthusiasts and collectors globally, primarily in the UK and Europe. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates essential tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data is a notable anomaly that requires further investigation but does not detract from the overall professional presentation and trust signals on the site.

Grafik Werkstatt operates a professional German-language e-commerce website specializing in greeting cards, calendars, gifts, and related products. The site targets general consumers seeking occasion-specific cards and gifts, offering a well-structured catalog and a B2B shop variant. Technically, the website is built on Magento CMS, leveraging RequireJS, jQuery, and Owl Carousel for frontend interactivity, with integrations for Google Analytics and Facebook Pixel for marketing and tracking. The hosting is managed via kasserver.com, and the site enforces HTTPS with a cookie consent mechanism, indicating GDPR awareness. However, explicit privacy policies and terms of service are not found in the provided content, which is a compliance gap. Security posture is moderate with SSL enabled but lacking security headers and vulnerability disclosure policies. Overall, the website is safe, professional, and trustworthy for general audiences.

E

Edelman

edelman.nl

63

Edelman is a professional importer and wholesaler specializing in decorative home products, representing multiple well-known brands such as Mica Decorations and Luca Lighting. The company targets business customers and importers in the home decoration sector, operating a Magento-based e-commerce platform with multi-language support and a secure customer login system. The website demonstrates a solid market position with a comprehensive product range and a focus on sustainability, evidenced by its Certified B Corp status. Technically, the site employs modern web technologies including Magento Commerce, RequireJS, jQuery, and integrates marketing and analytics tools like Google Analytics, HubSpot, and Cookiebot. Security posture is strong with HTTPS enforcement, appropriate security headers, and secure form handling, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences, with no signs of adult or questionable content.

C

Constant Contact

marketingautomation.services

62

The website marketingautomation.services serves as a login portal for Constant Contact, a well-known marketing automation platform. It provides users access to marketing automation tools primarily targeting business users and marketers. The site integrates Okta for authentication, ensuring a secure login process. The presence of official Constant Contact branding and links to their legal pages supports the legitimacy of the service. The technical infrastructure includes modern JavaScript libraries and frameworks such as Okta Sign-In Widget, jQuery, Bootstrap, and Pendo analytics, indicating a mature digital environment. However, some security headers are not explicitly visible in the provided data, suggesting room for improvement in security hardening. Privacy compliance is supported by links to comprehensive privacy and terms of service pages, though no cookie consent mechanism was detected on the login page. Overall, the site presents a professional and trustworthy interface for its users.

D

Dropbox

dropbox.com

68

Dropbox is a leading global technology company specializing in cloud storage, file sharing, and collaboration solutions. It serves both individual users and enterprises with a suite of products including Dropbox, Replay, Backup, Dash, DocSend, and Sign. The company is well-established with a strong market position and recognized brand. Technically, Dropbox employs modern web technologies such as React and RequireJS, delivering a fast, mobile-optimized, and accessible website experience. Security is robust, with HTTPS enforced, comprehensive security headers, and adherence to industry standards like ISO 27001 and SOC 2. Privacy compliance is evident through detailed policies and GDPR adherence. Overall, Dropbox demonstrates a mature digital infrastructure and strong business credibility.

S

Swiss Safety Center AG

safetycenter-shop.ch

56

Swiss Safety Center AG operates the SafetyCenter-Shop, an e-commerce platform specializing in safety, health protection, and certification materials for businesses. The company offers a comprehensive range of products including handbooks, checklists, e-learnings, and guidelines to support compliance with safety standards and legal requirements. The website targets organizations seeking to improve workplace safety and certification readiness, positioning itself as a trusted partner in the safety sector within Switzerland. Technically, the website is built on the ePages storefront platform, utilizing modern JavaScript libraries such as jQuery, RequireJS, and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, HubSpot, and LinkedIn Insight. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs privacy-conscious analytics settings such as IP anonymization. A cookie consent banner is present, supporting GDPR compliance. However, the site lacks explicit security headers and a public security policy or incident response contact, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations. It effectively serves its niche market with quality content and a solid technical foundation. Strategic improvements in security policy transparency and header implementation would further strengthen its security stance.

S

SauerlandKurier

sauerlandkurier.de

58

SauerlandKurier is a regional news media outlet serving the Sauerland region in Germany, focusing on local news, events, and community information. The website is professionally designed with a consistent brand presence and offers a variety of content including news articles, photos, and videos. It operates under the parent company Ippen.Media, leveraging a modern technical infrastructure with multiple third-party integrations for advertising and user engagement. The site employs HTTPS and consent management to ensure privacy compliance, although explicit security and incident response policies are not publicly disclosed. Overall, the website demonstrates a mature digital presence suitable for its regional audience.

W

Waldeckische Landeszeitung

wlz-online.de

58

Waldeckische Landeszeitung operates as a regional news media portal serving the Waldeck, Frankenberg, and Nordhessen regions in Germany. The website offers a variety of local news content including articles, photos, videos, podcasts, and e-paper services. It targets local residents and readers interested in regional news and events. The business model is primarily advertising-supported digital media with a focus on community engagement and local reporting. The site is part of the Ippen Digital group, a known media company in Germany, indicating a stable market position within regional news media. Technically, the website employs modern web technologies such as RequireJS, Google Tag Manager, Braze for marketing automation, and a custom CMS platform. The site is mobile responsive and optimized for SEO, providing a good user experience. Security posture is solid with HTTPS enforced and consent management implemented for GDPR compliance, although explicit privacy policies and terms of service are not directly found in the provided content. Advertising and tracking scripts are standard for media sites, with no suspicious or malicious elements detected. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

W

Werra-Rundschau

werra-rundschau.de

56

Werra-Rundschau is a regional news media outlet serving Eschwege and the surrounding Werra-Meißner-Kreis region in Germany. The website offers local news, sports coverage, panorama stories, multimedia content, and digital newspaper services such as an ePaper. It targets local residents and readers interested in regional developments. The business model relies on advertising and subscription-based digital content. The site is part of the Ippen Digital network, indicated by scripts and tracking tools used. Technically, the website employs modern JavaScript frameworks, responsive design, and integrates consent management platforms to comply with privacy regulations. Hosting is provided by Deutsche Telekom AG, with German nameservers ensuring regional consistency. Security posture is good with HTTPS enforced and some security headers implied, though explicit security policies and incident response contacts are not published. Privacy compliance is basic, lacking clearly visible privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, serving its regional audience effectively.

D

Das Gelbe Blatt

dasgelbeblatt.de

58

Das Gelbe Blatt is a regional German media outlet providing local news, events, and advertisements for the Bavarian areas of Bad Tölz, Wolfratshausen, Miesbach, and Penzberg. The website offers a variety of news content including local politics, sports, and community events, targeting local residents and readers interested in regional updates. Technically, the site uses a modern JavaScript stack with RequireJS, jQuery, and integrates multiple third-party advertising and tracking services such as Google Tag Manager, Braze, and Outbrain. Hosting appears to be managed via Deutsche Telekom's infrastructure. Security posture is adequate with HTTPS enforced and asynchronous script loading, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Business credibility is moderate with consistent branding and professional content but lacks explicit contact information and certifications. Overall, the site is safe for general audiences and functions well as a local news platform.

K

Kreiszeitung Verlagsgesellschaft mbH & Co. KG

kreiszeitung.de

56

Kreiszeitung.de is a regional news media website providing comprehensive local news coverage for Niedersachsen, Bremen, and surrounding coastal regions in Germany. The site offers news on politics, sports, culture, and consumer topics, targeting a general audience interested in regional developments. The business operates under the legal entity Kreiszeitung Verlagsgesellschaft mbH & Co. KG and maintains a consistent brand presence with professional content and a moderate-sized operation. Technically, the website employs a modern technology stack including RequireJS, Google Tag Manager, Braze for marketing automation, and custom CMS modules from Ippen Digital. The site is mobile-optimized with good SEO practices and moderate performance. Hosting appears to be managed by Ippen Digital or affiliated infrastructure. From a security perspective, the site enforces HTTPS and uses standard tracking and advertising technologies. However, explicit security headers and policies are not evident, and no public incident response or vulnerability disclosure information is available. Privacy compliance is basic, with no clear privacy or cookie policies detected in the provided content. Overall, the website is professionally maintained with a good trust profile but would benefit from enhanced transparency in privacy and security policies to improve compliance and user trust.

I

IPPEN.MEDIA

stadtpost.de

52

The website www.op-online.de is a regional German media portal operated by IPPEN.MEDIA, focusing on local news and advertisement newspapers (Anzeigenzeitungen) with digital ePaper editions and subscription services. It serves primarily the Offenbach and Hessen regions, targeting local residents and readers interested in regional news and advertisements. The business model relies on media publishing, combining digital and print subscriptions with advertising revenue streams. The site demonstrates a consistent brand presence and good content quality with a professional design and clear navigation.

O

OP-Online.de

op-online.de

57

OP-Online.de is a regional news website delivering current news from Offenbach, the surrounding region, and Hessen. It operates under the media group Ippen Digital GmbH, providing news articles, subscription services including print and ePaper, and advertising opportunities. The site targets a general audience interested in local and regional news. Technically, the website uses a modern tech stack including RequireJS, Google Tag Manager, and Outbrain for advertising and tracking, supported by a proprietary CMS. The site is mobile optimized and SEO friendly, with good performance and accessibility at a basic level. Security posture is strong with HTTPS, security headers, and privacy compliance including GDPR adherence. However, explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving as a reliable regional news source.

F

Frankfurter Neue Presse

fnp.de

61

Frankfurter Neue Presse (FNP) operates as a leading regional news media outlet serving Frankfurt, Rhein-Main, and Hessen regions in Germany. The website provides comprehensive local news, digital subscription services, and advertising opportunities, positioning itself as a trusted source for regional information. The business is part of the Ippen Digital media group, indicating strong backing and market presence. The content is professionally curated, with a focus on news, sports, politics, and lifestyle relevant to its target audience. Technically, the website employs modern web technologies including RequireJS, Google Tag Manager, Braze for marketing automation, and various advertising networks such as Adnami and Traffective. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with asynchronous loading of scripts and use of CDN resources. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and uses reputable third-party services for analytics and advertising. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a high level of professionalism, compliance with GDPR, and strong business credibility. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and adopting vulnerability disclosure practices to enhance trust and security posture.

A

az-online.de

az-online.de

54

az-online.de is a regional German news portal delivering current news and information focused on Uelzen, Altmark, and the Niedersachsen region. The site offers a variety of news categories including local news, sports, politics, and consumer information, targeting residents and readers interested in regional updates. The business operates under a media publishing model, likely affiliated with Ippen Digital GmbH, a known media group in Germany. The website demonstrates a good level of digital maturity with modern JavaScript frameworks, asynchronous script loading, and a structured content layout optimized for desktop and mobile users. Security posture is solid with HTTPS enforcement and standard security practices, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is partially implemented with cookie consent mechanisms but lacks visible privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and serves its regional audience effectively.

C

come-on.de

come-on.de

59

come-on.de is a regional news website focused on the Märkischer Kreis area in Germany, delivering timely news on sports, politics, economy, and culture. It operates under the IPPEN.MEDIA umbrella, indicating a solid market position in regional media. The website offers subscription services, advertising, and multimedia content, targeting local residents and interested readers. Technically, the site employs modern JavaScript frameworks, consent management platforms, and tracking tools while maintaining GDPR compliance through clear privacy and cookie policies. Security posture is good with HTTPS and some security best practices, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and content-rich, with no signs of adult or inappropriate content.

T

The Stationery Office Limited

tsoshop.co.uk

62

TSO Shop is a specialist e-commerce platform operated by The Stationery Office Limited, providing official UK government publications and specialist books targeted at academics, professionals, and businesses. The website offers a broad catalog of authoritative publications including regulatory guides, official gazettes, and best practice manuals, positioning itself as a trusted source for official and specialist content in the UK market. The company has a well-established presence since 2004, reinforcing its credibility and market position. Technically, the website employs a moderately modern technology stack including jQuery, RequireJS, and polyfills to support legacy browsers. Analytics are implemented via Google Analytics and Matomo with user consent mechanisms in place, reflecting a reasonable level of digital maturity. The site is functional with good navigation and content relevance, though some technical improvements such as updated libraries and enhanced security headers could be beneficial. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in for analytics, demonstrating compliance with privacy regulations like GDPR. However, the absence of explicit security headers and use of an older jQuery version present moderate risks. No incident response or vulnerability disclosure policies are publicly available, which could be improved to enhance security posture. Overall, the website is professional, trustworthy, and compliant with privacy standards, serving its niche market effectively. Strategic improvements in security practices and technical modernization would further strengthen its resilience and user trust.

W

Westfälischer Anzeiger Verlagsgesellschaft mbH & Co. KG

wa.de

59

Westfälischer Anzeiger is a regional news media company serving Hamm and the broader NRW region in Germany. The website wa.de offers comprehensive news coverage including politics, economy, sports, and local events, targeting a general audience interested in regional and national news. The business operates a digital news portal alongside traditional print media, supported by advertising and subscription services. Technically, the site employs a custom CMS platform with modern JavaScript frameworks and asynchronous loading to optimize performance and user experience. The presence of structured data and SEO best practices enhances its digital maturity. Security posture is strong with HTTPS enforcement, consent management for cookies, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR-aligned consent mechanisms. Overall, the site demonstrates a professional, trustworthy, and user-friendly news platform with moderate tracking and advertising integrations.

V

Verlag Dierichs GmbH & Co KG

hna.de

58

HNA.de is a regional news website serving Kassel and the Hessen region in Germany, operated by Verlag Dierichs GmbH & Co KG. The site offers a broad range of news content including local, national, and international news, consumer tips, and sports coverage. It targets a general audience interested in regional news and consumer information. The business model is primarily advertising-supported with subscription services such as ePaper. The website holds a strong market position as a leading regional news provider with consistent branding and professional content quality. Technically, the website employs a custom CMS platform with modern JavaScript frameworks including RequireJS and Google Tag Manager for analytics and marketing. It uses a consent management platform to comply with GDPR requirements and is hosted likely on infrastructure related to Deutsche Telekom. The site is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and explicit security headers. From a security perspective, the website enforces HTTPS and uses tracking and advertising technologies responsibly with user consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture but with room for improvement in transparency and policy publication. Overall, HNA.de presents a trustworthy and professional regional news platform with moderate technical maturity and compliance. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility features to strengthen user trust and regulatory compliance.

The Gazette is the UK's official public record publication, established in 1665 and published by TSO under the authority of His Majesty's Stationery Office, part of The National Archives. It serves as a trusted source for official notices including insolvency, wills and probate, company data, and historical archives. The website targets businesses, legal professionals, government entities, and the general public seeking authoritative public records. Its business model includes providing official notices, data services, and archival access with paid options for notice placement and data subscriptions. Technically, the website employs modern JavaScript libraries such as RequireJS and Modernizr, uses Matomo Analytics with consent management, and integrates a live chat widget for customer support. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. The presence of cookie consent banners and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to manage analytics tracking. However, it lacks explicit security policy pages and incident response information, and security headers are not visibly present in the HTML. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The domain WHOIS data is unavailable due to Nominet UK restrictions, consistent with the domain being government-controlled. This lack of public WHOIS data does not detract from the site's legitimacy given its official status. The site is trustworthy, professionally maintained, and safe for general audiences.

I

IPPEN.MEDIA

ippen.media

62

IPPEN.MEDIA is a major German media publishing group specializing in digital and print journalism with a strong focus on local news. The website presents a professional and comprehensive digital presence, showcasing news articles, network information, and career opportunities. The technical infrastructure leverages modern JavaScript frameworks and asynchronous loading to optimize user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website reflects a mature and credible media business with a strong market position in Germany.

F

Frankfurter Rundschau GmbH

fr.de

59

Frankfurter Rundschau GmbH operates FR.de, a prominent German news website delivering current news in politics, economy, sports, and culture with a focus on Frankfurt, Hessen, and global events. The site targets a general audience interested in comprehensive news coverage and offers digital news content supported by advertising revenue. The company holds a strong regional and national market position as a reputable news media provider in Germany. Technically, the website employs modern web technologies including RequireJS, Google Tag Manager, and various advertising and tracking platforms, ensuring a responsive and content-rich user experience. Security-wise, the site enforces HTTPS and uses consent management tools but lacks explicit security policies and vulnerability disclosures, indicating room for improvement in transparency and incident response readiness. Overall, the website is professionally designed, trustworthy, and safe for general audiences, with moderate tracking and advertising practices typical for media outlets.

M

Merkur tz Redaktions GmbH & Co. KG

tz.de

58

The website tz.de is a well-established regional news portal focused on Munich and Bavaria, providing current news, sports coverage, and local interest stories. It is operated by Merkur tz Redaktions GmbH & Co. KG, a recognized media company in Germany. The site offers subscription services including ePaper access and maintains a professional digital presence with consistent branding and good content quality. Technically, the site employs modern web technologies such as RequireJS, Google Tag Manager, and Outbrain for advertising, alongside a responsive design optimized for desktop and mobile users. Privacy and cookie policies are clearly presented and GDPR compliant, with a consent management platform in place. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security headers could be improved. Overall, the site demonstrates a mature digital infrastructure suitable for a large media organization, with good user experience and trust indicators.

M

Münchener Zeitungs-Verlag GmbH & Co. KG

merkur.de

60

Merkur.de is a prominent German news portal operated by Münchener Zeitungs-Verlag GmbH & Co. KG, delivering current news across politics, sports, consumer affairs, and regional topics primarily focused on Bavaria and Germany. The website serves a broad general audience with a professional and content-rich platform, positioning itself as a key regional and national news provider. Technically, the site employs modern web technologies including RequireJS, Google Tag Manager, and Outbrain for content recommendation and advertising, with responsive design and moderate performance. Security posture is strong with HTTPS enforcement and security headers, though explicit security and privacy policies are not published. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy consent mechanisms.

C

Crnogorski Telekom

kidsland.me

50

Kidsland.me is an established e-commerce platform specializing in baby and children's products, operated under the reputable Montenegrin telecommunications company Crnogorski Telekom. The website offers a wide range of products including baby equipment, toys, clothing, and footwear, targeting parents and families in Montenegro and the surrounding region. The business model is retail-focused with a local market presence and a loyalty program to enhance customer retention. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates multiple marketing and tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain registration transparency; however, there are gaps in DNS security and published policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which poses a risk for GDPR adherence. Overall, the site is legitimate and functional but would benefit from enhanced privacy and security disclosures.

N

Netmarble

netmarble.com

61

Netmarble is a well-established gaming company with a domain registered since 2001, indicating a mature presence in the digital entertainment industry. The website serves as a corporate portal showcasing their newest game titles and exclusive content, targeting the gaming community. The business model revolves around game development, publishing, and digital content distribution. The site uses modern web technologies including Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking, with a cookie consent mechanism in place to comply with privacy regulations such as GDPR. Technically, the website is hosted on a robust CDN infrastructure (Akamai), ensuring good performance and availability. The site is HTTPS enabled with domain transfer protections, but lacks DNSSEC and some advanced security headers, which could be improved. The content is minimal but professional, with basic mobile optimization and accessibility features. No direct contact information or detailed security policies are published on the main page, which limits transparency in incident response readiness. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and cookie consent. However, the absence of explicit security policies, vulnerability disclosure mechanisms, and security.txt files suggests room for maturity improvement. No vulnerabilities or suspicious patterns were detected in the provided content or WHOIS data. Overall, the domain registration and website content align well, supporting a high legitimacy score. The overall risk is moderate with recommendations to enhance DNS security, publish security policies, and improve accessibility and mobile responsiveness. These steps would strengthen trust and compliance posture while supporting the company’s market position in the competitive gaming industry.

H

Handelskammer beider Basel

hkbb.ch

49

Handelskammer beider Basel is a prominent bi-cantonal economic chamber serving the Basel region in Switzerland. It acts as a voice and catalyst for regional economic development, supporting over 2,100 members with advocacy, consulting, networking, and educational services. The organization focuses on key sectors such as energy, transport, and government-related economic activities, positioning itself as a leading regional economic association. The website reflects a professional and comprehensive digital presence, offering detailed information on services, cluster initiatives, export/import support, and events.

G

GROUPE MEDECINE & HYGIENE

georg.ch

58

Georg Editeur is a Swiss-based publisher specializing in humanities and social sciences literature, operating an e-commerce platform to sell their publications. The company positions itself as a key voice in the humanities sector, targeting a general audience interested in academic and cultural works. Their market presence is niche but professional, supported by a clear online catalog and transactional capabilities. Technically, the website is built on Magento 2, leveraging modern JavaScript libraries such as RequireJS and jQuery, and includes user experience enhancements like responsive design and carousel sliders. Security measures include HTTPS enforcement and Google reCAPTCHA integration, alongside cookie consent mechanisms reflecting GDPR compliance efforts. The security posture is solid with standard security headers and encrypted communications, though the absence of a publicly stated security policy or incident response contact limits transparency. No vulnerabilities or suspicious activities were detected in the analysis. Privacy compliance is adequate with visible policies and consent banners. Overall, the website is trustworthy and professionally maintained, with recommendations to enhance security transparency and accessibility compliance to further strengthen user trust and regulatory adherence.

D

Dakota State University

dsuathletics.com

65

Dakota State University's official athletics website serves as a comprehensive platform for sports schedules, scores, news, and media related to the university's athletic programs. The site targets students, athletes, and sports fans, providing timely updates and multimedia content. The business model is focused on supporting university athletics and engaging the community through digital content. The website is well-branded and consistent with the university's identity, reflecting a medium-sized educational institution with a long-standing online presence since 2008. Technically, the site leverages a modern tech stack including Google Tag Manager, Google Analytics, RequireJS, Knockout.js, and a specialized Sidearm Sports CMS platform. Hosting is via AWS Cloudfront CDN, ensuring reasonable performance and scalability. The site is mobile-optimized and includes accessibility features, though some improvements in security headers and library versions are recommended. From a security perspective, the site enforces HTTPS and has domain transfer protections, but lacks DNSSEC and comprehensive security headers like Content Security Policy. The use of an outdated jQuery version poses potential vulnerabilities. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information and incident response details are not prominently available, indicating areas for enhancement. Overall, the website is professional, trustworthy, and serves its audience well, but could benefit from improved security practices and enhanced privacy compliance to align with modern standards and regulations.

T

Transavia

transavia.com

73

Transavia is a European low-cost airline offering affordable flights to over 100 destinations primarily within Europe. The website presents a professional and consistent brand image with a focus on flight bookings and travel services. The technical infrastructure leverages modern JavaScript frameworks, Sitecore CMS, and Microsoft Application Insights for analytics and performance monitoring. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security posture is solid with HTTPS enforced and a coordinated vulnerability disclosure policy, though explicit security headers are not evident in the HTML source. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data reduces domain trustworthiness, which is unusual for a major airline. Overall, the site is professional, secure, and user-friendly, supporting a large-scale transportation business.

S

Sinclair Pharma

sinclair-college.com

68

Sinclair College is a specialized online educational platform focused on aesthetic medicine, targeting healthcare practitioners seeking comprehensive training and professional development. The platform offers a variety of learning resources including treatment videos, webinars, interactive case studies, and a supplementary mobile app to enhance accessibility and learning convenience. The business operates under Sinclair Pharma, with a domain registered since 2016, indicating a mature and established presence in its niche market. Technically, the website is built on the Totara LMS platform, leveraging Moodle core components, and integrates modern web technologies and third-party marketing tools such as Google Analytics, Facebook Pixel, and HubSpot. The site is mobile-optimized and presents a professional design with clear navigation, supporting a positive user experience. Security-wise, the website enforces HTTPS and domain registration protections but lacks DNSSEC and advanced security headers. Privacy compliance is basic, with privacy and cookie policies present but no explicit consent mechanisms. Contact information is limited on the public site, and no incident response or security policies are disclosed. Overall, Sinclair College demonstrates a solid business and technical foundation with room for improvement in security and privacy transparency.

S

Schellenberg Wittmer Ltd

swlegal.ch

54

Schellenberg Wittmer Ltd is a leading Swiss business law firm with a strong presence in Zurich, Geneva, and Singapore. The firm offers a comprehensive range of legal services including transactions, advisory, and dispute resolution to a global client base of companies and entrepreneurs. The website reflects a professional and well-established business with extensive legal expertise and a commitment to corporate social responsibility. Technically, the website employs modern JavaScript libraries such as RequireJS and integrates Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and provides a rich content experience with detailed insights and newsletters. Security posture is generally good with HTTPS and CAPTCHA protections, but lacks visible security headers and published incident response policies. WHOIS data is missing or unavailable, which is unusual for a firm of this stature and warrants further investigation. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in domain registration and security policies.

A

Aeschbach

a1904.ch

58

Aeschbach is a Swiss-based e-commerce retailer specializing in shoes, clothing, and accessories primarily targeting women, men, and children. The website showcases a broad portfolio of over 300 leading brands, offering free shipping and returns, and emphasizes customer satisfaction and quality service. The platform is built on Magento Commerce, leveraging modern web technologies and analytics tools such as Google Tag Manager, Facebook Pixel, and Matomo for marketing and user behavior tracking. The site is well-structured with clear navigation and multilingual support, optimized for mobile devices. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website presents a professional and trustworthy retail experience with moderate to good technical maturity.

A

Aeschbach

aeschbach-chaussures.ch

58

Aeschbach is a Swiss-based e-commerce retailer specializing in shoes, clothing, and accessories for women, men, and children. The website offers a broad selection of products from over 300 leading brands, emphasizing quality customer service, free shipping, and returns. The platform targets consumers interested in fashion and footwear, positioning itself as a trusted and established player in the Swiss retail market. The business model is primarily online retail with a focus on brand partnerships and customer satisfaction.

N

Naturschutzzentrum Obere Donau

nazoberedonau.de

71

Naturschutzzentrum Obere Donau is a regional nature conservation center in Germany affiliated with the Baden-Württemberg Ministry of Environment. The website provides comprehensive information about nature conservation activities, educational programs, events, and community engagement focused on the Obere Donau region. The site targets the general public, educators, families, and tourists interested in environmental education and nature preservation. Technically, the website is built on the Liferay CMS platform, using modern JavaScript libraries and frameworks such as YUI, jQuery, and Bootstrap. It employs Matomo analytics with cookies disabled to respect user privacy. Security posture is good with HTTPS enforced, though some security headers are not explicitly detected. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-maintained, serving its non-profit/governmental mission effectively.

S

SocialTIC

smalldata.technology

54

Small Data is a non-profit educational project by SocialTIC focused on documenting and promoting the use of Small Data methodology for social impact among small organizations and community groups. The website provides case studies, methodology explanations, and resources primarily in Spanish, targeting non-profit and social impact sectors in Mexico and Latin America. The technical infrastructure is based on Adobe Muse with legacy technologies such as jQuery 1.8.3 and includes Google Analytics for visitor tracking. While the site is accessible and well-designed with good mobile optimization, it lacks modern security practices such as updated libraries, security headers, and privacy/cookie policies. WHOIS data is unavailable due to TLD restrictions, but the association with SocialTIC supports legitimacy. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and protection.

R

Rheinwerk Verlag GmbH

rheinwerk.de

71

Rheinwerk Verlag GmbH is a specialized German publisher focusing on IT, design, and photography educational content. The company offers a broad range of products including print and digital books, digital subscription services (Rheinwerk 365), and educational events such as seminars and conferences. Their market position is strong within the German-speaking education sector, targeting IT professionals, designers, photographers, and learners. The website reflects a mature digital infrastructure utilizing modern JavaScript libraries and asynchronous loading techniques to enhance user experience and performance. Privacy and compliance are well addressed with comprehensive GDPR-aligned privacy and cookie policies, including a granular cookie consent mechanism. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility.

R

Rheinwerk Verlag GmbH

rheinwerk-verlag.de

71

Rheinwerk Verlag GmbH operates as a leading specialized publisher in the German-speaking market, focusing on IT, design, and photography educational content. Their business model includes traditional book publishing, digital subscriptions (Rheinwerk 365), and educational events such as seminars and conferences. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content offerings targeting IT professionals, designers, photographers, and learners. The company maintains a strong market position with a focus on quality educational materials and digital transformation of their offerings. Technically, the website employs modern JavaScript libraries such as RequireJS and Knockout.js, integrates Google Tag Manager for analytics and marketing, and uses responsive design techniques ensuring excellent mobile optimization and accessibility. Hosting appears stable and self-managed with dedicated name servers. Performance is fast, and SEO practices are well implemented. From a security perspective, the site uses HTTPS with strong SSL configuration and implements a detailed cookie consent mechanism compliant with GDPR. Security headers are likely configured though not explicitly visible in HTML. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly visible security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, Rheinwerk Verlag's website demonstrates a high level of professionalism, security awareness, and privacy compliance. The extensive use of third-party marketing and analytics tools is balanced with clear user consent and transparency. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing direct contact options for security incidents.

C

CryptPad: Collaboration suite, encrypted and open-source

cryptpad.fr

59

CryptPad.fr is an open-source, end-to-end encrypted collaboration platform focused on providing secure online collaboration tools. The website positions itself as a privacy-centric technology service targeting users who require secure document editing and file sharing. The domain is registered in France with OVH, consistent with the website's French origin and technology focus. The site uses modern JavaScript libraries such as RequireJS and jQuery, alongside cryptographic utilities like TweetNaCl-util, to enable client-side encryption. However, the homepage content is minimal, primarily a loading placeholder, with no visible privacy or cookie policies, contact information, or terms of service. Security headers are not detected, and SSL configuration details are not provided, though HTTPS is implied by the URL. There is no evidence of analytics or advertising scripts, indicating a privacy-respecting approach but also limited marketing visibility. Overall, the site demonstrates a moderate technical maturity but lacks comprehensive compliance and security disclosures.

IKK classic is a well-established statutory health insurance provider in Germany, primarily serving craftsmen and private customers. The company offers a broad range of health insurance services including preventive care, rehabilitation, supplementary insurance, and digital health applications. The website reflects a strong market position with top test results and a clear focus on customer service and digital engagement. Technically, the website employs modern JavaScript frameworks and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

M

Microsoft

yammer.com

75

The website www.yammer.com represents Viva Engage, a Microsoft enterprise collaboration platform designed to enhance communication and productivity within organizations. It is positioned as a key component of the Microsoft 365 ecosystem, targeting enterprise customers and business professionals. The site showcases Microsoft branding and integrates tightly with other Microsoft services, reflecting a mature and well-established business offering. Technically, the website employs modern JavaScript frameworks such as RequireJS and CoreUI, hosted on Microsoft Azure infrastructure. It demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. The site uses HTTPS and includes standard security headers, indicating a strong security posture. From a security and compliance perspective, the site links to comprehensive Microsoft privacy and cookie policies, indicating GDPR compliance and user consent mechanisms. However, no explicit security policy, incident response contacts, or vulnerability disclosure pages were found publicly. WHOIS data is unavailable due to privacy or proxy registration, which is typical for large enterprises like Microsoft. Overall, the website is trustworthy, professionally maintained, and secure, with no signs of suspicious activity or content. Strategic recommendations include enhancing transparency by publishing explicit security policies and vulnerability disclosure information to further strengthen trust and compliance.

S

Schellenberg Wittmer Ltd

swlegal.com

64

Schellenberg Wittmer Ltd is a leading Swiss business law firm with a strong presence in Zurich, Geneva, and Singapore. The firm offers a comprehensive range of legal services including transactions, advisory, and dispute resolution across multiple practice areas and industries. It is recognized for its professional excellence, awards, and commitment to corporate social responsibility. The website reflects a mature digital presence with modern technologies and good user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. WHOIS data is missing, which is a concern for domain legitimacy verification but the professional content and contact details support trustworthiness.