Security Directory

T

Training-Fit: Fitness og bodybuilding udstyr

training-fit.dk

48

Training-Fit.dk is a Danish e-commerce website specializing in fitness and bodybuilding equipment, offering a wide range of products including cardio machines, strength training gear, cross-training equipment, yoga accessories, martial arts supplies, clothing, and footwear. The site targets fitness enthusiasts and athletes primarily in Denmark, providing products from well-known brands such as Adidas, Nike, and Mizuno. The business model is focused on online retail with an emphasis on fast delivery and secure payment options. The website is newly launched in 2024, reflecting a modern and organized digital presence with clear navigation and product categorization. Technically, the website is built on Magento (OpenMage), utilizing modern web technologies including Google Analytics, Google Ads, reCAPTCHA for bot protection, and a consent management platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and technical optimizations. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. It implements a GDPR consent mechanism but lacks explicit privacy policy and terms of service pages in the analyzed content. Security headers are partially present but could be strengthened with additional policies. The domain registration is transparent and consistent with the business, registered recently with GANDI SAS without privacy protection, which is appropriate for an e-commerce business. Overall, Training-Fit.dk presents a professional and trustworthy online store with a solid foundation but would benefit from enhanced privacy disclosures, improved security headers, and clearer contact information to strengthen compliance and user trust.

H

House of Rugby: o especialista em râguebi

house-of-rugby.pt

59

House of Rugby is a specialized e-commerce retailer focused on rugby apparel, equipment, and accessories, primarily targeting rugby players and fans in Portugal and possibly French-speaking markets. The website offers official club products, rugby shirts, shoes, and protective gear from well-known brands. The business operates a Magento-based platform with a professional and consistent branding approach. Technically, the site uses modern tracking and advertising technologies including Google Analytics, Google Ads, and Actito for marketing automation. The site is mobile optimized and provides a good user experience with clear navigation. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic with a consent mechanism present but no visible privacy or cookie policies. Overall, the site appears legitimate and trustworthy but could improve transparency and compliance documentation.

P

Pecheur-Store

pecheur-store.pt

59

Pecheur-Store is an established e-commerce retailer specializing in fishing equipment, including rods, reels, baits, and accessories, targeting fishing enthusiasts primarily in Portugal and other European markets. The website demonstrates a professional and consistent brand presence with a clear product categorization and multi-language support, indicating a mature digital presence. Technically, the site leverages modern technologies such as Google Analytics, Google Ads, reCAPTCHA, and a Magento-based CMS (OpenMage), providing a solid infrastructure for e-commerce operations. Security measures include HTTPS enforcement and CAPTCHA integration, though explicit security headers and detailed privacy documentation are lacking. The absence of visible contact information and privacy policies suggests areas for compliance improvement. Overall, the site is functional, secure, and well-positioned in its niche but would benefit from enhanced transparency and security best practices.

P

Pet & Garden - Tu tienda de mascotas y centro de jardinería online

pet-and-garden.es

59

Pet & Garden is a Spanish e-commerce retailer specializing in pet supplies, gardening products, and agricultural equipment. The website offers a broad catalog of products organized into detailed categories and brands, targeting pet owners, gardeners, and agricultural professionals. The business model is focused on online retail with a medium-sized market presence in Spain. The site demonstrates consistent branding and a professional design that supports a positive user experience. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern frontend technologies and integrating Google Analytics, Google AdWords, and reCAPTCHA for marketing and security purposes. The site is mobile optimized and provides a clear navigation structure, although accessibility features are basic. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks advanced security headers and explicit privacy policies. No contact information or detailed security policies are visible, which may impact user trust and compliance. Overall, the website is safe, professional, and functional but could improve in privacy transparency and security hardening.

P

Pecheur-Store: Online fiskebutik

pecheur-store.dk

57

Pecheur-Store.dk is a Danish online retail store specializing in fishing equipment including rods, reels, baits, and accessories. The website targets fishing enthusiasts primarily in Denmark and possibly the broader European market. The business model is focused on e-commerce with an emphasis on fast shipping and secure payment options. The site demonstrates a consistent brand presence with a professional design and clear navigation structure. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies such as Google Analytics, Google Ads, reCAPTCHA, and a GDPR-compliant consent management platform (AppConsent TCF2). The site is mobile optimized and performs moderately well, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks DNSSEC for DNS security and does not publish a privacy policy or terms of service, which are important for compliance and user trust. No security.txt or vulnerability disclosure mechanisms are present, indicating room for improvement in transparency and security posture. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures, improved DNS security, and additional security headers. These improvements would strengthen user trust and compliance with data protection regulations.

D

Daily-Bikers

daily-bikers.pt

59

Daily-Bikers is a specialized e-commerce retailer focused on motorcycle equipment and parts, serving primarily the Portuguese market with a multi-country presence in Europe. The website offers a wide range of products including helmets, jackets, gloves, and motorcycle accessories, emphasizing fast delivery and secure payment options. The business targets motorcycle enthusiasts and riders, positioning itself as a trusted retailer in the motorcycle gear sector. Technically, the website is built on a Magento-based platform (OpenMage variant) and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito marketing automation. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, it lacks several important security headers that could enhance protection against common web threats. Privacy compliance is partially addressed through a consent mechanism, but explicit privacy and cookie policies were not found in the provided content. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, Daily-Bikers presents a professional and trustworthy online presence with a solid business model. Enhancements in security headers and explicit privacy documentation would further strengthen its security posture and compliance standing.

D

Daily-Bikers: Equipamiento y piezas para motos

daily-bikers.es

59

Daily-Bikers.es is a specialized e-commerce retailer focused on motorcycle equipment and parts, targeting motorcycle enthusiasts primarily in Spain and other European countries. The website offers a wide range of products including helmets, jackets, gloves, and technical parts, with a multi-language and multi-country presence indicating a broad market reach. The business model is retail e-commerce with emphasis on fast delivery and secure payment options. Technically, the site is built on Magento OpenMage CMS and integrates modern tracking and advertising technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent management implemented, though explicit privacy and security policies are missing, which impacts compliance completeness. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in privacy and security documentation. The domain uses privacy protection in WHOIS, which is common and justified for this business type, and no blocking or WAF challenges were detected, allowing full content accessibility.

D

Le Motard Bleu: Vybavení pro motorkáře a díly motocyklů

dailybikers.cz

59

Dailybikers.cz is a Czech Republic-based e-commerce retailer specializing in motorcycle gear, including jackets, helmets, gloves, and accessories. The website targets motorcycle enthusiasts and riders, offering a wide range of products with discounts and fast delivery. The platform is built on Magento Open Source (OpenMage) and integrates modern technologies such as Google Analytics, reCAPTCHA, and a Consent Management Platform to manage user privacy preferences. The site demonstrates good mobile optimization, clear navigation, and professional design, contributing to a positive user experience. Security measures include HTTPS enforcement and CAPTCHA to prevent abuse, though explicit privacy and terms of service pages are not found, indicating room for improvement in compliance documentation. WHOIS data shows a suspicious future domain creation date, which may be a data anomaly but slightly impacts trust. Overall, the website is functional, secure, and professionally presented, suitable for its retail business model.

P

Pecheur-Store: Internetový obchod s rybami

pecheur-store.cz

59

Pecheur-Store.cz is a Czech Republic based e-commerce retailer specializing in fishing equipment including rods, reels, baits, and accessories for various fishing styles such as carp, predator, sea fishing, and others. The website targets fishing enthusiasts in the Czech market offering a wide product range with promises of fast delivery and secure payment options. The site is built on the Magento (OpenMage) platform, leveraging modern web technologies and third-party services such as Google Analytics and reCAPTCHA to enhance user experience and security. Cookie consent mechanisms indicate awareness of GDPR compliance, although explicit privacy and terms of service pages are not found. Security posture is generally good with HTTPS enforced and anti-bot protections in place, but could benefit from additional security headers and formal policies. Overall, the website presents a professional and trustworthy retail presence with moderate technical maturity and compliance.

T

Training-Fit: Vybavení pro fitness a kulturistiku

training-fit.cz

59

Training-Fit.cz is a Czech Republic based e-commerce platform specializing in fitness, bodybuilding equipment, and sportswear. The website offers a wide range of products from major brands with a focus on fast delivery and secure payment options. The platform targets fitness enthusiasts and athletes within the Czech market, positioning itself as a leading retailer with competitive pricing and comprehensive product categories. Technically, the website is built on Magento (OpenMage) with modern frontend technologies, integrated with Google Analytics, Google Ads, and marketing automation tools like Actito. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security-wise, the site enforces HTTPS, uses reCAPTCHA, and has implemented consent management mechanisms, but lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

S

SPACEFOOT SAS

velo-store.cz

58

Vélo-Store is a specialized e-commerce retailer focused on cycling products including bicycles, parts, and accessories. The company operates primarily in the Czech Republic and other European countries, with its legal entity SPACEFOOT SAS based in France. The website offers a comprehensive catalog of cycling-related products, emphasizing fast delivery and secure payment options. The business model is retail e-commerce with a strong focus on cycling enthusiasts and customers seeking quality cycling gear. Technically, the site is built on Magento (OpenMage), leveraging modern web technologies, marketing platforms, and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA protections, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data shows an anomalous future domain creation date that warrants verification. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility.

F

Foot-store : 100% Football shop | Trička a boty

foot-store.cz

59

Foot-store.cz is a Czech Republic based e-commerce platform specializing in football-related products including shoes, balls, jerseys, and specialized equipment for goalkeepers and referees. The website presents a professional and well-structured online retail experience targeting football players and fans primarily in the Czech market. The product catalog is extensive and well organized by brands and categories, indicating a mature business model focused on sports retail. Technically, the website uses Magento (OpenMage) CMS, integrates Google Analytics and reCAPTCHA for security and analytics, and is hosted on Gandi infrastructure with HTTPS enabled. The site demonstrates good mobile optimization and user experience. Security posture is solid with HTTPS and CAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is partial; while consent management scripts are present, no explicit privacy or cookie policies are found. WHOIS data shows an anomalous future domain creation date, which raises some concerns about registration legitimacy. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from improved transparency in privacy and security policies and verification of domain registration data.

H

House of Rugby: Der Rugby-Experte

house-of-rugby.de

62

House of Rugby is a specialized e-commerce retailer focused on rugby sportswear, equipment, and accessories, targeting rugby players and fans primarily in Germany. The website offers a broad catalog of products including jerseys, shoes, protective gear, and teamwear from well-known brands. The business positions itself as a niche market leader in rugby retail with a professional online presence and promises secure payment and fast shipping services. Technically, the website is built on Magento (OpenMage variant) and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and AWIN affiliate tracking. Security measures include HTTPS enforcement, Google reCAPTCHA, and GDPR consent management, although explicit privacy and terms of service pages are missing. The site demonstrates good design quality, mobile optimization, and navigation clarity, contributing to a positive user experience. WHOIS data aligns with the website content, indicating a legitimate and consistent domain registration. Overall, the site is secure, professional, and trustworthy but would benefit from enhanced privacy disclosures and contact transparency.

P

Pecheur-Store : Online-Angelshop

pecheur-store.de

59

Pecheur-Store.de is a German-language e-commerce website specializing in the retail of fishing equipment, including rods, reels, baits, and accessories for various fishing types such as carp, predator, spinning, and sea fishing. The site targets fishing enthusiasts and anglers primarily in Germany, offering a broad product catalog with fast shipping and secure payment options. The website is built on a Magento-based platform, likely OpenMage or Magento 1.x, and is hosted or registered through Gandi, a reputable domain registrar. The technical infrastructure includes modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito marketing automation, indicating a moderate level of digital maturity. Security measures include HTTPS encryption, reCAPTCHA integration, and a consent management platform for GDPR compliance, though explicit privacy and cookie policies are not found in the provided content. Overall, the site presents a professional and user-friendly experience with good navigation and mobile optimization. However, the absence of explicit privacy and cookie policies and lack of direct contact information represent compliance and trust gaps. The domain registration data is consistent and does not raise suspicion, supporting the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact channels for security incidents to improve compliance and trust.

S

SPACEFOOT SAS

slowood-interior.dk

58

Slowood Interior is a Danish e-commerce retailer specializing in modern interior decoration, design furniture, lighting, and lifestyle products. The company operates under the legal entity SPACEFOOT SAS, based in France, with a newly registered domain consistent with a recent business launch in 2024. The website targets consumers interested in trendy and modern home decoration solutions, offering a broad catalog of products through a well-structured online store. The business model is retail-focused, leveraging multiple partner stores and brands to enhance its market presence. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern JavaScript libraries and third-party services such as Google Analytics, Google Ads, reCAPTCHA, and Actito marketing tools. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Privacy compliance is well addressed through a consent management platform and clear privacy and cookie policies, reflecting GDPR adherence. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and transparent, with no privacy protection masking, enhancing trustworthiness. Overall, Slowood Interior presents a professional, secure, and privacy-conscious e-commerce platform with a clear business focus and good technical implementation. Strategic improvements in security headers and DNS security would further strengthen its posture.

F

Foot-store: 100% Fußballgeschäft : Pullover und Schuhe

foot-store.at

62

Foot-store.at is an Austrian-based e-commerce retailer specializing in football-related products including shoes, apparel, and equipment. The website targets football players and fans, offering a wide range of branded products with a focus on fast delivery and competitive pricing. The business operates in the retail sector with a medium-sized market presence in Europe. Technically, the site is built on Magento (OpenMage variant) and integrates modern marketing and analytics tools such as Google Analytics, Google Ads, and reCAPTCHA for security. The website demonstrates good mobile optimization and user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and some security best practices in place, though it lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages. WHOIS data aligns with the business claims, showing consistent registrant information and domain age appropriate for the business. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security policies to improve compliance and user trust.

S

SPACEFOOT SAS

golf-and-co.at

64

Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, serving golf enthusiasts primarily in Europe with a strong presence in France and Austria. The company offers a wide range of products including clubs, balls, bags, shoes, clothing, gloves, and training equipment from well-known brands such as Taylormade, Callaway, and Srixon. The website is professionally designed with consistent branding and clear navigation, supporting multiple country versions to cater to an international audience. The business model centers on online retail with customer service and secure payment options, positioning itself as a trusted specialist in the golf retail market. Technically, the website is built on the Magento (OpenMage) platform, utilizing modern web technologies including Google Analytics for tracking, Google reCAPTCHA for form security, and a Consent Management Platform to ensure GDPR compliance. The site demonstrates good mobile optimization and moderate performance, with a clean and structured HTML layout. Security best practices are observed with HTTPS enforcement and invisible reCAPTCHA, although some security headers could be improved for enhanced protection. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. GDPR compliance is well addressed through privacy and cookie policies, consent mechanisms, and clear contact information. However, explicit security policies and incident response contacts are not found, which could be areas for improvement. The domain registration details align well with the business information, reinforcing the legitimacy and trustworthiness of the site. Overall, Golf and co presents a secure, compliant, and professionally managed e-commerce platform with a clear focus on golf retail. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to sustain a strong security posture.

D

Daily Bikers : Motorcycle Equipment and Parts

daily-bikers.ie

62

Daily Bikers is an e-commerce retailer specializing in motorcycle equipment and parts, including helmets, jackets, gloves, and accessories. The website targets motorcycle riders and enthusiasts primarily in Ireland and offers fast delivery and secure payment options. The business appears to be recently established in early 2024, with a medium-sized operational scale and a consistent brand presentation. Technically, the website is built on Magento Open Source (OpenMage variant) and integrates modern technologies such as Google Analytics, Google Ads, and reCAPTCHA for security and marketing purposes. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with no explicit privacy or cookie policies found, though a consent mechanism is implemented. WHOIS data is transparent and consistent with the business profile, indicating legitimacy. Overall, the website is functional and professional but would benefit from enhanced security and privacy disclosures.

T

Tripnbikers : Motorcycle case and bags

tripnbikers.ie

62

Tripnbikers.ie is a newly established e-commerce retailer specializing in motorcycle luggage, cases, bags, and related accessories. The website offers a wide range of products including top cases, side luggage, soft luggage, rider backpacks, and navigation devices, targeting motorcycle enthusiasts and riders. The business model is retail-focused with an emphasis on discounted pricing and customer service features such as secure payment and easy returns. Technically, the website is built on a Magento-based platform (OpenMage variant) and integrates modern analytics and advertising tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito for marketing automation. The site is hosted by Gandi and secured with HTTPS, but lacks advanced DNS security features like DNSSEC and some recommended HTTP security headers. Privacy compliance is basic with no explicit privacy or cookie policies found, although a consent mechanism is implemented. Contact information and security policies are not explicitly provided, which may impact user trust. Overall, the website is functional, well-structured, and professionally branded but would benefit from enhanced security headers, explicit privacy documentation, and clearer contact details to improve compliance and trust.

H

House of Rugby: the rugby specialist

house-of-rugby.ie

63

House-of-rugby.ie is an e-commerce website specializing in rugby sportswear and equipment, offering a wide range of products including jerseys, shoes, protective gear, and accessories from top brands such as Nike, Adidas, and Gilbert. The site targets rugby players and fans, positioning itself as a niche specialist retailer with a focus on fast shipping and secure payment options. Technically, the website is built on the Magento OpenMage platform, leveraging modern tracking and advertising technologies including Google Analytics, Google Ads, and a consent management platform for GDPR compliance. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but lacking explicit privacy policy and terms of service pages. Overall, the website is functional and trustworthy for its business scope but would benefit from enhanced compliance and security practices.

F

Foot-store : Store 100% Football | Shirts and boots

foot-store.ie

64

Foot-store.ie is an e-commerce website specializing in football-related products including boots, shirts, balls, and protective gear. The site targets football players and fans, offering a range of branded sportswear and equipment with a focus on fast delivery and competitive pricing. The business appears to be newly established in 2023, with a domain registered through Gandi and consistent branding throughout the site. The website uses Magento (OpenMage) as its CMS platform and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google AdWords. A consent management platform is implemented, indicating some level of GDPR compliance awareness, although explicit privacy and cookie policies are not found in the provided content. Security posture is generally good with HTTPS enforced and reCAPTCHA used, but there is room for improvement in security headers and published security policies. Overall, the site presents a professional and trustworthy e-commerce platform for football enthusiasts.

H

Haufe Group

haufe.com

71

Haufe Group operates a comprehensive corporate website offering a wide range of digital knowledge, software, and consulting services primarily targeting HR, finance, legal, sustainability, and real estate sectors. The company is positioned as a market leader in the German-speaking corporate solutions market, providing both software products and educational services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, jQuery, and Usercentrics for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a mature digital presence with high trustworthiness and business credibility.

M

moBiel GmbH

mobiel.de

43

moBiel GmbH is the primary public transportation operator in Bielefeld, Germany, managing the StadtBahn and majority of bus lines. The company offers comprehensive mobility services including ticketing, timetable information, and sharing options such as bike and carsharing. The website is professionally designed, well-structured, and optimized for mobile users, reflecting a mature digital presence. Technically, it leverages TYPO3 CMS and Angular framework, with integrated consent management and tracking tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, moBiel demonstrates a trustworthy and credible business with clear contact channels and compliance with GDPR. Strategic recommendations include publishing security policies and enhancing security header configurations.

S

Stadtsportbund Bielefeld e.V.

sportbund-bielefeld.de

50

Stadtsportbund Bielefeld e.V. is a medium-sized non-profit organization dedicated to promoting sports and community engagement in Bielefeld, Germany. The website serves as an information hub for sports clubs, youth programs, educational initiatives, and community sports activities. It positions itself as a local leader in sports promotion with a clear focus on inclusivity and education. The site uses TYPO3 CMS and integrates modern web technologies such as Bootstrap, jQuery, and Google Analytics to provide a responsive and accessible user experience. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-aligned with its mission to support sports in the Bielefeld community.

A

ASVÖ Salzburg

asvoe-sbg.at

52

ASVÖ Salzburg is a regional non-profit umbrella sports association representing over 380 member clubs in Salzburg, Austria. It provides advisory and service functions, supports sports clubs with legal, tax, and sports-specific questions, and manages various projects and funding programs. The website reflects a well-established organization with a clear focus on community sports development and member support. The target audience includes sports clubs, officials, trainers, and athletes within the Salzburg region. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery, fancybox, and slick slider for enhanced user experience. The site is mobile-optimized and includes a cookie consent mechanism via Usercentrics, demonstrating compliance with GDPR requirements. Google Analytics 4 is used for visitor tracking with consent. From a security perspective, the site enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a regional non-profit sports association, with good content quality, technical implementation, and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

B

Badischer Turner-Bund e.V.

badischer-turner-bund.de

44

The Badischer Turner-Bund e.V. is a large regional sports federation in Germany, focusing on gymnastics, youth sports, fitness, and health activities. It serves over 444,000 members across more than 1,130 clubs, positioning itself as the largest sports federation in the Baden region. The website provides comprehensive information about the federation's structure, youth programs, competitions, media, and partner networks, targeting sports clubs, athletes, and fitness enthusiasts. Technically, the site is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery and Slick Slider, offering a good user experience with responsive design and clear navigation. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism but lacks visible security headers, published security policies, or vulnerability disclosure channels. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, the website is professional, trustworthy, and well-suited for its audience, though improvements in security transparency and privacy policy publication are recommended.

M

MJ Marketing LTD.

nfi.at

52

NFI Gesundheits Magazin is a small, professional online health magazine focused on alternative medicine, superfoods, supplements, healing mushrooms, and healing stones, targeting German-speaking health-conscious audiences in Austria and Germany. The website is built on WordPress with modern technologies including Yoast SEO Premium and Elementor, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking some security headers and published policies. Privacy compliance is partial with a comprehensive privacy policy but no cookie consent mechanism. Business credibility is strong with clear company information and contact details. Overall, the site is trustworthy and well-positioned in its niche.

2

2024 kerschbaumer group I Website by Kings & Cake Werbeagentur

kerschbaumer-trophies.com

50

Kerschbaumer Trophies operates an e-commerce platform specializing in high-quality trophies, medals, and personalized awards primarily targeting sports clubs and organizations in Austria and German-speaking regions. The website offers a broad catalog of products including glass, acrylic, wooden trophies, and specialty trophies by sport, with custom engraving and printing services. The business positions itself as a niche leader with a focus on quality and personalized service, supported by trust signals such as official membership in the Austrian Federal Fire Brigade Association. Technically, the website is built on the JTL Shop platform, leveraging modern JavaScript libraries and Bootstrap for responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS and secure forms, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not currently impact the operational status of the site. Overall, the site is professional, trustworthy, and well-optimized for its market segment.

KATES Tennisanlagenbau Kamer & Kujtim Kabashi GbR is a small, family-run business specializing in tennis court construction and maintenance services in Hamburg, Germany. The company offers a comprehensive range of services including new construction, renovation, seasonal preparation, winter services, and training seminars. Their market position is that of a niche regional specialist with decades of experience in the industry. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form with CAPTCHA to prevent spam. Technically, the website is built on the Contao Open Source CMS platform and uses legacy jQuery 1.11.3 along with modern UI components like Slick Slider and FontAwesome. While the site performs moderately well and is mobile-friendly, the use of outdated JavaScript libraries and absence of security headers indicate areas for improvement. No analytics or tracking scripts were detected, suggesting minimal user tracking and a privacy-conscious approach, although no cookie consent mechanism was found. From a security perspective, the site uses HTTPS (assumed from base href), but lacks explicit security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. The contact form includes CAPTCHA, which is a positive security measure. No incident response or security policies are publicly available. WHOIS data is minimal but does not raise immediate concerns, though registrant details do not fully match the business name, slightly reducing trust. Overall, the website is safe, professional, and trustworthy for its target audience, but could benefit from technical and compliance enhancements to improve security posture and GDPR adherence.

A

Allied Express Cargo S.L.

allied-express.com

45

Allied Express Cargo S.L. is a Spanish logistics and transportation company founded in 2000, providing national and international distribution, customs clearance, and supply chain management services. The company is a member of Grupo ASTRE, which enhances its market position and service network. The website reflects a professional business with clear service offerings targeted at businesses requiring logistics solutions. Technically, the site is built on WordPress with common plugins and uses Google Analytics for tracking. The site is mobile optimized and has good design and navigation, though SEO and accessibility are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit incident response or vulnerability disclosure policies are present. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. Overall, the domain age and WHOIS data support the legitimacy of the business. Strategic improvements in security and privacy compliance would enhance trust and resilience.

M

Manitou

manitou.com

64

Manitou is a well-established French manufacturing company specializing in handling, lifting, and earthmoving equipment for diverse sectors including agriculture, construction, and industries. With over 60 years of experience, the company offers a broad range of machinery such as telehandlers, forklift trucks, and aerial work platforms, complemented by attachments and services like financing and maintenance. The website reflects a mature global brand with extensive multilingual support and a professional digital presence. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. The WHOIS data is notably missing, which reduces transparency but is likely due to privacy protection services. Despite this, the website's professional content, structured data, and social media presence support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Manitou's website demonstrates strong business credibility and technical maturity, with minor security and transparency gaps that can be addressed to enhance trust and compliance.

J

Jubla Kanton Freiburg

jubla-freiburg.ch

10

Jubla Kanton Freiburg is a regional non-profit youth organization based in Freiburg, Switzerland, dedicated to providing leisure activities, courses, and community events for young people. The website reflects a well-structured platform with clear navigation and relevant content tailored to its target audience. The organization maintains a consistent brand presence and offers key services such as event agendas, equipment rental via the RAST Shop, and educational courses. Technically, the site is built on the Neos CMS platform, utilizing modern web technologies including lazy loading and responsive design, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site demonstrates a trustworthy and professional online presence appropriate for a small non-profit entity.

J

Jungwacht Blauring Allschwil

jubla-allschwil.ch

55

Jungwacht Blauring Allschwil is a Swiss non-profit youth organization focused on providing engaging leisure activities and diverse holiday camps for children and adolescents. The organization aims to offer a pressure-free environment to foster the versatile skills of children through playful programs. The website reflects a local community-oriented entity with a clear target audience of youth and families in Allschwil, Switzerland. Their business model centers on community engagement and youth development rather than commercial profit. Technically, the website is built on the Neos CMS platform with a custom framework (Ongoing.Base), utilizing modern web technologies such as lazy loading, slick sliders, and Google Fonts. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses deferred script loading and lazy loading for performance and security benefits. However, it lacks visible security headers and explicit privacy or cookie consent mechanisms, which are important for GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for maturity in security governance. Overall, the website is trustworthy and professional, with a strong community focus and good digital presence. The main risks relate to privacy compliance and security best practices, which can be improved to enhance user trust and regulatory adherence.

E

Else Kröner-Fresenius-Stiftung

ekfs.de

54

Else Kröner-Fresenius-Stiftung (EKFS) is a well-established German non-profit foundation founded in 1983, dedicated to funding medical research and supporting humanitarian projects. The website clearly communicates the foundation's mission, funding opportunities, and recent news, targeting medical researchers and humanitarian stakeholders. The organization maintains a professional online presence with comprehensive content and clear navigation, supporting its credibility and outreach efforts. Technically, the website is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears stable with consistent domain and DNS configurations. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms aligned with GDPR, and respects user privacy by disabling tracking cookies unless consented. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. Overall, EKFS demonstrates a strong digital maturity and trustworthy online presence suitable for its non-profit healthcare sector role. Strategic improvements in security transparency and formal policies would further strengthen its posture.

V

VERA - Vertrauensstelle gegen Belästigung und Gewalt in Kunst, Kultur und Spor

vera-vertrauensstelle.at

42

VERA is a specialized non-profit trust center operating in Austria, dedicated to supporting victims of violence and harassment within the arts, culture, and sports sectors. The organization is jointly operated by two independent associations focusing on these sectors, providing confidential support, guidance, and referrals to affected individuals. The website reflects a clear mission with professional design and targeted content for its audience of artists, cultural workers, and athletes. The presence of government funding logos enhances trust and legitimacy. Technically, the website is built on WordPress using Elementor and related plugins, ensuring a modern and responsive design. SEO is well addressed with Yoast SEO integration and proper meta tags. Performance is moderate with good mobile optimization. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially met with a privacy policy and cookie policy present, but lacking an explicit cookie consent mechanism. Contact information is clearly provided with dedicated emails and phone numbers for different sectors. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and professional, serving a critical social function. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance compliance and security posture.

T

The Family Butchers Germany GmbH

the-family-butchers.com

66

The Family Butchers Germany GmbH is a large-scale manufacturer and retailer specializing in sausage, ham, and protein products, including plant-based alternatives. As Germany's second-largest producer in this sector and part of InFamily Foods Holding, the company emphasizes tradition, family values, and innovation. Their digital presence is built on TYPO3 CMS with modern web technologies, providing a well-structured, mobile-optimized, and content-rich website. The site integrates consent management and tracking tools responsibly, reflecting good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy image suitable for its target audience and market position.

O

OWL Verkehr GmbH

teutoowl.de

57

OWL Verkehr GmbH operates as a regional public transportation service provider and information portal for the TeutoOWL network in Germany. The company offers a range of services including schedule information, ticket sales (such as Deutschlandticket, JobTickets, and SchülerTickets), subscription management, and mobility services like call-collect taxis and night buses. The website targets public transport users in the OWL region, providing comprehensive and accessible information to facilitate mobility. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and FontAwesome. It employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. The site is hosted on infrastructure associated with DomainControl, uses HTTPS with strong SSL configuration, and demonstrates good mobile optimization and accessibility. From a security perspective, the website enforces HTTPS and uses privacy-friendly analytics. However, it lacks explicit security policy documentation and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transportation entity. Overall, the site maintains a good security posture with room for improvement in transparency and security headers. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining regular security audits to sustain and improve the security posture.

G

Gebrüder Lödige Maschinenbau GmbH

loedige.de

42

Gebrüder Lödige Maschinenbau GmbH is a well-established German manufacturer specializing in industrial mixing and processing machinery, with a history dating back to 1938. The company positions itself as an international market leader offering tailored system solutions, engineering services, and customer support primarily targeting industrial clients across sectors such as pharmaceuticals, chemicals, food, and environmental technology. Their website reflects a professional and consistent brand image, leveraging TYPO3 CMS and modern web technologies to provide a user-friendly experience. The presence of a cookie consent mechanism and Google Tag Manager indicates a moderate level of digital maturity and compliance awareness. Security posture is solid with HTTPS enabled and no blocking mechanisms detected, though explicit security headers and incident response information are lacking. Overall, the site demonstrates good business credibility and technical implementation, though privacy policy and terms of service documentation could be improved to enhance compliance and user trust.

A

Aug. Winkhaus SE

winkhaus.com

71

Winkhaus is a well-established German manufacturer specializing in innovative window technology, door locking systems, and intelligent access control solutions. With a history spanning over 170 years, the company serves a global audience including architects, building owners, manufacturers, and security professionals. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and active engagement through news and press releases. Technically, the site leverages modern web technologies including Google Tag Manager and Usercentrics for consent management, built on the SAP Commerce (Hybris) CMS platform. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security headers should be verified. The WHOIS data is incomplete or unavailable, which slightly reduces trust but the overall business credibility remains high due to consistent branding, certifications, and transparent contact information.

L

Lumosa GmbH

sportplatzbeleuchtung.de

55

Lumosa GmbH is a specialized manufacturer and service provider of LED floodlighting solutions for sports facilities, including football, tennis, hockey, and equestrian sports. The company positions itself as a leading player in the European market with a strong focus on energy efficiency and innovative lighting technology. Their website reflects a professional and well-structured digital presence, leveraging WordPress CMS and modern web technologies to deliver a responsive and user-friendly experience. Privacy and cookie policies are well implemented with consent mechanisms, indicating good compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Overall, the domain and website content are consistent and trustworthy, supporting Lumosa's market position as a reputable business in the energy-efficient sports lighting sector.

T

TelefonSeelsorge® Deutschland

telefonseelsorge.de

11

TelefonSeelsorge® Deutschland is a well-established non-profit organization providing free, anonymous, and competent counseling services across Germany. It operates under the responsibility of the Evangelical and Catholic churches and relies on a large volunteer base to offer telephone, chat, email, and on-site counseling, as well as a mobile app for crisis support. The organization is positioned as a trusted national service with strong church affiliations and a comprehensive digital presence including a YouTube channel and multiple contact options. Technically, the website is built on WordPress with modern plugins and scripts, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

Deutsche Gesetzliche Unfallversicherung e.V.

dguv.de

11

The Deutsche Gesetzliche Unfallversicherung e.V. (DGUV) is the leading statutory accident insurance umbrella organization in Germany, representing commercial professional associations and public accident insurance carriers. The website provides comprehensive information on prevention, insurance coverage, rehabilitation, research, and qualification services targeted at companies, employees, educational institutions, and healthcare providers. DGUV maintains a strong market position as a government/non-profit entity with extensive subsidiary institutes and clinics. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and slick sliders, hosted likely by Deutsche Telekom infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in cookie consent and security headers. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, but lacks an explicit cookie consent mechanism. Overall, the domain registration data aligns well with the organization's identity, enhancing trustworthiness.

A

Astre

astre.fr

61

Astre is a well-established European logistics and transportation network headquartered in France, providing tailored transportation, logistics, and palletized shipment solutions through its extensive member company network. The website reflects a professional and consistent brand image, targeting businesses requiring scalable and environmentally responsible supply chain services across Europe. Technically, the site is built on WordPress with modern JavaScript libraries and Google Analytics integration, offering good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosures are not published. Privacy compliance is moderate with a cookie consent mechanism but lacks a clearly accessible privacy policy. Overall, the domain WHOIS data is privacy protected, which is typical for .fr domains, and the website content aligns with legitimate business operations.

G

GKV-Spitzenverband

gkv-spitzenverband.de

66

The GKV-Spitzenverband website serves as the official portal for Germany's statutory health and long-term care insurance umbrella organization. It provides comprehensive information on health insurance, care insurance, policy updates, research, and services for insured persons and healthcare providers. The site is well-structured, professionally designed, and offers content in German and English, targeting insured individuals, healthcare professionals, policymakers, and the public. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics with a strong emphasis on privacy and consent. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not explicitly published. Overall, the site reflects a mature digital presence consistent with a large, government-related healthcare entity.

D

DigiShop GmbH

kloepfer.de

60

Klöpfer Holzhandel operates a professional B2B e-commerce platform specializing in wood and wood-related construction materials, targeting professional tradespeople and commercial customers primarily in Germany. The website offers a comprehensive product catalog, planning tools, and customer account management features, positioning itself as a leading provider in the German wood trade market. Technically, the site uses a modern JavaScript stack with Bootstrap, jQuery, Slick Slider, and a ColdFusion backend, hosted likely on Deutsche Telekom infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published privacy or terms policies. No WAF or blocking mechanisms were detected, and no suspicious or adult content is present. Overall, the site is professional, trustworthy, and well-structured but could improve privacy transparency and security header implementation.

D

DigiShop GmbH

weltholz.de

59

Weltholz is a German-based wood import company specializing in high-quality timber and exclusive wood products for wholesale and retail customers. The website presents a professional and well-structured platform targeting B2B clients such as large and wood dealers. It offers a comprehensive product catalog, marketing support, and online tools like a terrace planner. Technically, the site uses a custom ColdFusion backend with modern frontend libraries including jQuery, Bootstrap, and Slick Slider, integrated with HubSpot and Google Analytics for marketing and analytics. The security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected and could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, well-branded, and professionally maintained.

funny-frisch.de is the official website of funny-frisch, a leading German snack brand known for its salty snack products. The site is branded under the parent company Intersnack Deutschland SE and positions itself as a market leader with a strong consumer focus in Germany. The website offers product information, brand storytelling, and consumer engagement through social media and campaigns. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries such as jQuery, Slick Slider, and WOW.js to deliver a responsive and visually appealing user experience. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, with contact primarily via a web form. Overall, the website is trustworthy, professional, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

M

Muffin Group

muffingroup.com

59

Muffin Group is a well-established company specializing in premium WordPress themes and website building tools, notably Betheme and BeBuilder. The company targets WordPress users, developers, and agencies seeking versatile and feature-rich themes with extensive pre-built website demos and premium plugin integrations. Their market position is strong, supported by a large user base exceeding 300,000 satisfied customers and consistent product updates. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, though improvements in privacy transparency and security hardening are recommended.

C

Cotec

cotec.es

10

Cotec is a Spanish non-profit foundation dedicated to promoting innovation through research, projects, and public engagement. The website reflects a well-established organization with a clear focus on innovation and youth, providing reports, observatories, and events. Technically, the site is built on WordPress with modern plugins and integrations such as HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though formal security policies and incident response contacts are absent. Overall, the site is professional, compliant with GDPR, and trustworthy, serving a broad audience interested in innovation in Spain.

P

Paprec Group

paprec.com

65

Paprec Group is a leading French company specializing in waste management and recycling services. Established in 1994, it has grown into a major player in the environmental sector, serving both industrial clients and local authorities with a comprehensive range of services including waste collection, sorting, recycling, and energy valorization. The company emphasizes sustainability and circular economy principles, positioning itself as a key contributor to environmental preservation in France. The website reflects a mature digital presence with multilingual support and rich content aimed at educating and engaging its audience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Matomo analytics. It demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement and security headers, although public security policies and incident response information are not explicitly published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing or not publicly available, which raises minor concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, Paprec Group's website is professional, secure, and compliant, supporting its position as a trusted leader in the recycling industry. Strategic recommendations include publishing explicit security and incident response policies and improving domain registration transparency.