Security Directory

N

Naturpark Stechlin-Ruppiner Land

stechlin-ruppiner-land-naturpark.de

43

Naturpark Stechlin-Ruppiner Land operates as a regional nature park authority and tourism promoter in Brandenburg, Germany. The website provides comprehensive information about the park's natural landscapes, flora, fauna, events, and regional specialties, targeting nature enthusiasts, tourists, and local residents. The site is powered by TYPO3 CMS and hosted on agenturserver infrastructure, reflecting a moderate level of digital maturity with responsive design and good navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No direct contact or incident response information is provided, which limits user trust and compliance visibility. Overall, the website is professional and trustworthy for its purpose but could improve in privacy compliance and security best practices.

L

Landesamt für Umwelt (LfU)

schlaubetal-naturpark.de

44

The Naturpark Schlaubetal website serves as an official information portal for the Schlaubetal Nature Park in Brandenburg, Germany, managed by the Landesamt für Umwelt (LfU). It provides comprehensive details about the park's natural features, events, conservation efforts, and visitor information, targeting nature enthusiasts and tourists. The site is positioned as a regional government-affiliated resource with a focus on environmental education and sustainable tourism. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, and employs Matomo for analytics, reflecting a commitment to privacy-conscious tracking. The hosting is managed via agenturserver, consistent with the domain's nameservers. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with excellent SSL configuration and shows no signs of exposed sensitive data or vulnerable libraries. However, the absence of explicit security headers and a formal security policy or incident response contact reduces the overall security posture. Privacy compliance is adequate with a clear privacy policy linked, but lacks a cookie consent mechanism. Overall, the website is trustworthy, professionally maintained, and serves its informational purpose well. Strategic enhancements in security headers, cookie consent, and direct contact information would further strengthen its security and compliance profile.

N

Naturpark Dahme-Heideseen

dahme-heideseen-naturpark.de

43

Naturpark Dahme-Heideseen is a regional nature park organization in Germany focused on nature conservation, education, and visitor engagement. The website provides comprehensive information about the park's natural features, events, educational programs, and partner networks. It is powered by TYPO3 CMS and hosted on agenturserver infrastructure, with a professional and user-friendly design optimized for mobile devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for compliance improvements. The domain registration is consistent and trustworthy, supporting the legitimacy of the organization. Overall, the website serves as a reliable resource for nature enthusiasts and regional visitors.

E

Envestnet

billfin.com

79

Envestnet operates a cloud-based advisory fee billing platform called BillFin, targeting Registered Investment Advisors (RIAs) and financial advisors. The website presents a professional and modern interface built on Drupal 11, integrating advanced marketing and consent management tools such as Visual Website Optimizer and TrustArc. The company positions itself as a leading provider of cost-effective billing solutions in the financial services sector. Technically, the site demonstrates good performance, mobile optimization, and SEO practices, though some accessibility features could be improved. Security posture is solid with HTTPS and consent mechanisms, but lacks explicit security policy and incident response information. WHOIS data is unavailable, which slightly impacts trust but the overall site appears legitimate and professional.

L

Landtmann's Original

landtmanns-original.at

74

Landtmann's Original is an Austrian e-commerce company specializing in traditional baked goods and confectionery, targeting consumers seeking authentic Austrian products. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrating multiple third-party analytics and advertising tools. The technical infrastructure is solid, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although formal security policies and incident response information are not published. Overall, the website presents a trustworthy and professional online presence with compliance to GDPR and cookie regulations.

H

Heureka Group a.s.

shoproku.sk

61

ShopRoku is a well-established e-commerce awards platform operated by Heureka Group a.s., targeting Czech and Slovak online shops. The website serves as a hub for competition information, results, and media content, positioning itself as a trusted authority in the regional e-commerce sector. The platform benefits from strong branding and partnerships with notable companies such as Visa and media partners like Forbes and CzechCrunch. Technically, the site employs modern JavaScript frameworks and integrates consent management tools to comply with privacy regulations. The website is mobile-optimized, fast-loading, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and consent frameworks but lacks explicit security headers and a published security policy, which are recommended for enhanced protection. Overall, the domain registration and WHOIS data align well with the business claims, indicating high legitimacy and trustworthiness.

M

Mark Allen Group

efwconference.com

10

The Energy from Waste Conference website represents a well-established industry event organized by Mark Allen Group, focusing on the global waste to energy sector. The site effectively communicates the conference's purpose, target audience, and key services such as networking, knowledge sharing, and sponsorship opportunities. The business is positioned as a reputable event organizer with a medium-sized presence in the energy sector, supported by a domain registered since 2015 and consistent branding. Technically, the website leverages modern JavaScript libraries, Google Analytics, Google Tag Manager, and the Evessio event management platform. Hosting is distributed with Amazon S3 for static assets and UKFast for DNS services. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security measures include HTTPS, CSRF tokens, and reCAPTCHA, but could be improved by enabling DNSSEC and adding security headers. From a security perspective, the site shows a mature posture with no critical vulnerabilities detected. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. No incident response or security policy pages were found, indicating an area for potential enhancement. Overall, the site is trustworthy, professional, and safe for general audiences. The overall risk is low, with recommendations focusing on enhancing DNS security, adding security headers, and maintaining regular audits of third-party scripts to sustain a strong security posture.

M

Mark Allen Group

opopworkshop.com

56

Operational Optimisation 2026 is a specialized event organized by Mark Allen Group targeting operational decision-makers in the energy from waste and biomass sectors. The website presents a professional and well-structured platform for event information, networking, and industry engagement. The business model focuses on event organization, sponsorship, and industry knowledge exchange, positioning itself as a niche leader in this technical sector. The website content is relevant and well-maintained, with clear calls to action and supporting testimonials enhancing credibility. Technically, the website leverages modern JavaScript libraries, Google Analytics, Google Tag Manager, and a proprietary event platform (Evessio CMS) hosted on AWS infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and DNSSEC is not enabled. No explicit security policies or incident response contacts are published, which could be improved. The domain registration is consistent with the business claims, showing no suspicious patterns and a reasonable domain age. Overall, the website is trustworthy and professional with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the site's resilience and user trust.

S

SIGNAL IDUNA Gruppe

signal-iduna-agentur.de

10

SIGNAL IDUNA Gruppe operates a comprehensive insurance agency network in Germany, offering a broad portfolio of insurance products including auto, liability, disability, and accident insurance. The website serves as a local agent locator and information portal, targeting individuals and businesses seeking insurance solutions. The company is positioned as a large, established player in the German finance and insurance sector with a strong emphasis on sustainability and customer trust. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries, Google Maps API, and a GDPR-compliant consent management platform (Usercentrics). The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could improve transparency around security policies and contact information.

The website www.schorfheide-chorin-biosphaerenreservat.de represents the UNESCO Biosphere Reserve Schorfheide-Chorin, a government/non-profit entity focused on environmental conservation, sustainable regional development, and education. It serves as an informational and educational platform for visitors, local residents, and stakeholders interested in nature preservation and sustainable tourism. The site highlights various projects, partnerships, and initiatives aligned with UNESCO and EU environmental programs. Technically, the website is built on TYPO3 CMS, hosted on agency servers, and demonstrates good mobile optimization and SEO practices. However, it lacks explicit privacy and cookie policies, security headers, and direct contact information, which are areas for improvement. Security posture is adequate with HTTPS enabled but could be enhanced with additional headers and disclosure mechanisms. Overall, the site is trustworthy, professional, and well-positioned within its niche but would benefit from improved privacy compliance and security transparency.

E

Biosphärenreservat Flusslandschaft Elbe-Brandenburg - Biosphärenreservat Elbe Brandenburg

elbe-brandenburg-biosphaerenreservat.de

43

The website www.elbe-brandenburg-biosphaerenreservat.de represents the UNESCO Biosphere Reserve Flusslandschaft Elbe-Brandenburg, a regional non-profit entity focused on nature conservation, environmental education, and sustainable regional development in Germany. The site provides rich content including news, events, and educational resources targeting the general public, regional partners, and educational institutions. It holds a strong market position as a recognized UNESCO biosphere reserve with partnerships including the Brandenburg Ministry for Environment. Technically, the website is built on TYPO3 CMS, hosted by agenturserver, and demonstrates moderate performance with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced but lacks security headers and explicit privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

M

Mercado Libre

mercadolibre.cl

75

Mercado Libre Chile operates a leading e-commerce marketplace platform serving general consumers in Chile. The website offers a broad catalog of products with fast shipping options, positioning itself as a dominant player in the Chilean online retail market. The platform leverages modern web technologies including React and New Relic monitoring to deliver a performant and user-friendly experience. The site is well-optimized for SEO and accessibility, with consistent branding and professional design. Security posture is strong with HTTPS enforcement and monitoring, though explicit privacy and terms policies are not directly found on the homepage. Overall, the site demonstrates a mature digital infrastructure with extensive analytics and advertising integrations, supporting its enterprise-scale operations.

C

CDN Alliance

cdnalliance.org

64

CDN Alliance is a nonprofit organization established in 2020, dedicated to connecting, supporting, and representing the global Content Delivery Network (CDN) industry and community. The website serves as an informational and community hub for CDN professionals and stakeholders, positioning itself as an industry alliance. The business model is nonprofit, focusing on industry collaboration rather than commercial sales. The organization appears to be small in size with a clear focus on the technology sector related to CDN services. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as JavaScript, Google Fonts, and Mailchimp for newsletter management. The site is hosted behind Cloudflare DNS services, ensuring reliable delivery and basic security. The website demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection, but lacks DNSSEC and security headers, which are recommended for enhanced security. There is no visible privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency and readiness. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

E

Envestnet, Inc.

envestnet.com

55

Envestnet, Inc. is a leading enterprise in the financial technology sector, specializing in wealth management platforms and financial planning solutions. Their website reflects a mature digital presence with comprehensive offerings targeted at financial advisors, RIAs, asset managers, and financial institutions. The company emphasizes delivering financial wellness through an interconnected ecosystem of technology and data-driven services. Technically, the site is built on Drupal 11 with modern analytics and consent management tools, showing good digital maturity and mobile optimization. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with industry standards.

H

henge.it

henge.it

7

The website henge.it is a long-registered domain primarily used as a parked domain with advertising and related search content. There is no clear business description or contact information available on the site, indicating it is not actively used for direct business operations. The technical infrastructure relies on basic HTML, CSS, and JavaScript with monetization through Google Adsense and Bodis domain parking scripts. The site lacks advanced security features such as security headers, DNSSEC, and cookie consent mechanisms, which limits its compliance with privacy regulations like GDPR. Overall, the security posture is minimal, with no visible vulnerabilities but also no proactive security measures. The domain registration data is consistent and legitimate, but the site itself offers limited business credibility or user engagement. Strategic improvements in security, privacy compliance, and content development are recommended to enhance trust and usability.

W

Wirtschaftskammern Österreichs - WKO

wkv.at

67

The website www.wko.at serves as the official portal for the Austrian Economic Chambers (WKO), providing comprehensive information, services, and advisory offerings targeted at entrepreneurs and business owners in Austria. It holds a strong national market position as a government-affiliated economic chamber portal, offering key services such as information dissemination, consulting, event organization, and e-services tailored to Austrian businesses. The content is primarily in German and is professionally presented with consistent branding and clear navigation. Technically, the website employs modern web technologies including JavaScript libraries like jQuery and Swiper.js, and uses Bootstrap for responsive design. The site is powered by Gentics CMS, indicating a mature content management infrastructure. Performance is moderate with good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes some security headers. It uses Google Tag Manager and consent management scripts to handle tracking and privacy compliance, although explicit privacy and cookie policies were not found in the provided content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain with consistent registrant information and appropriate domain age. Overall, the website is a trustworthy, professional, and secure portal for Austrian businesses, though it would benefit from publishing explicit privacy, cookie, and security incident response policies to enhance compliance and user trust.

reformiert.jobs operates as a specialized online job portal dedicated to employment opportunities within the church sector in Switzerland. It serves both job seekers and employers by providing a platform for job listings, newsletter subscriptions, and educational course promotions. The website is positioned as a leading niche portal in its market segment, focusing on ecclesiastical work and related services. The content is primarily in German and targets a Swiss audience interested in church-related employment and professional development. Technically, the website is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, and JavaScript, with Google Fonts integration. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, and the site includes mechanisms to clean tracking parameters from URLs, enhancing user privacy. However, explicit security headers are not evident in the provided data, and no cookie consent banner is present despite GDPR relevance. From a security perspective, the site uses HTTPS and includes secure form inputs with consent checkboxes for newsletter subscriptions. There is no evidence of exposed sensitive data or vulnerable libraries in the analyzed content. The absence of a published security policy or incident response contacts suggests room for improvement in security transparency and readiness. Overall, the domain registration data aligns well with the website's purpose, indicating legitimacy and trustworthiness. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing explicit cookie consent mechanisms, publishing security policies, enhancing security headers, and improving accessibility. These steps will strengthen compliance, user trust, and security posture, supporting the site's continued role as a trusted niche job portal.

G

Golf Sempach

golf-sempachersee.ch

63

Golf Sempach is a prominent golf resort located centrally in Switzerland, offering two championship 18-hole golf courses and a variety of related services including a performance center, academy, events, gastronomy, and an online shop. The website is professionally designed using TYPO3 CMS and integrates modern analytics tools such as Google Analytics and Matomo. It provides clear contact information and maintains a consistent brand presence with active social media channels. The site is fully accessible without any blocking or WAF challenges, indicating good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in cookie consent and security policy disclosures. Overall, the business presents a trustworthy and professional online presence aligned with its market position as a leading golf resort in Switzerland.

P

Philippe Meyer Architecte

philippemeyer.ch

54

Philippe Meyer Architecte is a small Swiss architectural firm presenting its portfolio, projects, competitions, essays, and photography through a professionally designed Drupal-based website. The site targets architecture clients and collaborators, showcasing the firm's design capabilities and team. The technical infrastructure includes Drupal CMS and Matomo analytics with privacy-conscious settings such as Do Not Track enabled. The website is mobile optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No direct contact emails or phone numbers are provided, only a contact form. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

A

Avant-Gouz

avant-gouz.com

44

Avant-Gouz is a small hospitality business operating cafés in Basel and Münchenstein, Switzerland, specializing in fresh, Mediterranean-inspired cuisine with a focus on healthy, vegan, and gluten-free options. The website provides detailed menus, contact information, and local press mentions, positioning Avant-Gouz as a reputable local café with a loyal customer base. Technically, the site is built on Drupal CMS and uses Wix DNS hosting, with moderate performance and good mobile optimization. However, it lacks advanced security headers and DNSSEC, and does not provide privacy or cookie policies, which are important for GDPR compliance. The security posture is moderate with room for improvement, especially in implementing security best practices and compliance documentation. Overall, the site is professional and trustworthy but could enhance its privacy and security measures to improve user trust and regulatory compliance.

S

Studio Lukas Raeber

lukasraeber.ch

48

Studio Lukas Raeber is a small architectural studio based in Switzerland, presenting a portfolio of architectural projects primarily through video and image content. The website serves as a digital showcase for their work, targeting potential clients and collaborators interested in architectural design. The business model is service-oriented, focusing on architectural design and project presentation. The site is built on Drupal CMS and features modern web technologies with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is professional and safe, with no adult or questionable content detected.

I

InterSmart

intersmartsolution.com

61

InterSmart is a small technology company specializing in web design, development, digital marketing, and e-commerce solutions primarily serving clients in Kochi, Kerala, India. The website demonstrates a professional design with good content relevance and user experience, targeting businesses and individuals seeking digital services locally. Technically, the site is built on WordPress with modern technologies such as Bootstrap and Google Fonts, and uses SEO tools like Rank Math and Google Tag Manager for analytics and marketing. However, the security posture is moderate with no explicit security headers detected and missing privacy and cookie policies, which are critical for compliance and trust. The WHOIS data is missing or indicates the domain is unregistered, which is a significant red flag affecting the legitimacy and trustworthiness of the domain. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

C

CO₂ Bank – KLIMA – ZUKUNFT – HOLZ

co2-bank.de

39

The website co2-bank.de is a German-language platform focused on climate, sustainability, and wood-related environmental topics, likely offering CO2 banking or offsetting services. It targets environmentally conscious individuals and organizations within Germany, positioning itself in the niche energy and sustainability sector. The business model appears to revolve around environmental services and products related to CO2 and sustainable forestry. Technically, the site is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities. Hosting is provided by aditsystems.hosting, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of advanced analytics or marketing tools in use. From a security perspective, the site lacks visible security headers and publicly available security policies or incident response information. SSL/TLS status is unknown from the provided data but should be verified. The site includes a cookie consent mechanism via the Complianz GDPR plugin, indicating some level of privacy compliance, though no privacy policy or terms of service were found. No vulnerability disclosure or security.txt files are present. Overall, the site is functional and moderately professional but would benefit from enhanced security practices, clearer privacy and contact information, and improved transparency. The risk level is moderate with no critical vulnerabilities detected but some compliance and security gaps that should be addressed.

Primarstufe Münchenstein operates as a primary education institution serving the Münchenstein community in Switzerland. The website provides comprehensive information about the school's organizational structure, locations, and services, targeting parents, students, and local stakeholders. The business model is that of a public educational institution focused on delivering primary and kindergarten education with additional online services for ease of access. Technically, the website is built using a modern JavaScript and CSS stack, leveraging Webpack for module bundling and an i-web CMS platform. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO is basic but functional, and the site includes proper meta tags and a consent mechanism for anonymized web statistics. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a visible privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is trustworthy, professionally designed, and well-maintained, with a strong alignment between WHOIS registration data and the website content. There are no critical security or compliance issues, making it a reliable digital presence for the educational institution.

S

StellarTerm

stellarterm.com

55

StellarTerm operates as an open source trading client for the Stellar network, enabling users to trade, send, and receive assets on the Stellar Decentralized Exchange. The platform targets cryptocurrency traders and users within the Stellar ecosystem, positioning itself as a niche service provider in blockchain finance. The business model revolves around providing a decentralized exchange client with additional services such as crypto swaps and asset purchases. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, hosted via Cloudflare, ensuring moderate performance and basic mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements such as DNSSEC enablement and enhanced security headers are recommended. Privacy compliance is partial, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site is professional and trustworthy with moderate risk, suitable for its business scope.

B

Basler Stadtbuch

baslerstadtbuch.ch

61

Basler Stadtbuch is a reputable digital cultural archive dedicated to preserving and presenting the historical memory of Basel since 1879. The website offers rich historical content including articles, dossiers, and daily historical events, targeting the general public interested in Basel's heritage. Technically, the site is built on Magnolia CMS and uses modern JavaScript libraries and analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS and security headers, though explicit privacy and security policies are missing. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and incident response transparency.

D

Dachstiftung der Christoph Merian Stiftung

dachstiftung-cms.ch

57

The Dachstiftung der Christoph Merian Stiftung (DS-CMS) is a well-established non-profit foundation based in Basel, Switzerland, managing 35 sub-foundations to fund social, cultural, and natural projects in the region. It serves as an efficient vehicle for donors to implement their philanthropic goals. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of donors and project applicants. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, hosted likely by cyon AG, and uses Craft CMS for content management. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and credible, aligned with its parent organization Christoph Merian Stiftung.

L

Liverpool University Press

modernlanguagesopen.org

69

Modern Languages Open is a reputable open access academic journal platform specializing in modern languages research, published by Liverpool University Press in partnership with the University of Liverpool Library. The platform offers rigorous peer review, interdisciplinary content, and international dissemination under Creative Commons licenses. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its academic audience. Technically, it leverages modern web technologies including React and Next.js, hosted on a reliable infrastructure with good performance and accessibility standards. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness with strong university press affiliation and recognized certifications.

The website pico.coop is currently inaccessible due to a security challenge page implementing a JavaScript proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall or similar security mechanism designed to block automated or suspicious traffic. As a result, no meaningful business, contact, or policy information is available for analysis. The page content is minimal and focused solely on verifying the visitor's legitimacy before granting access. The technical infrastructure includes advanced client-side cryptographic computations to solve the challenge, served via Amazon CloudFront CDN. Security posture is partially demonstrated by the challenge mechanism, but lacks visible security headers or compliance documentation. Overall, the site cannot be fully assessed for business credibility, privacy compliance, or content quality due to this blocking mechanism.

H

HAWtech

hawtech.com

51

HAWtech is a consortium of six leading German universities of applied sciences specializing in engineering sciences. Founded in 2009, it serves approximately 60,000 students across economically strong regions in Germany. The alliance focuses on applied teaching, learning, research, and academic cooperation, offering study programs, summer schools, and scholarships. The website reflects a professional academic presence with clear navigation and relevant content targeted at students and academic partners. Technically, the site is built on TYPO3 CMS with JavaScript enhancements and uses Piwik for analytics, indicating moderate digital maturity. Security posture is adequate with cookie consent implemented but lacks visible advanced security headers and explicit incident response or security policies. The absence of WHOIS registration data for the domain is a notable anomaly that reduces trustworthiness, though the website content and partner domains strongly suggest legitimacy. Overall, the site is well-maintained, content-rich, and serves its educational mission effectively.

D

Donau-Iller-Nahverkehrsverbund-GmbH (DING)

ding.eu

61

Donau-Iller-Nahverkehrsverbund-GmbH (DING) operates as a regional public transportation association in Germany, providing comprehensive transport schedules, ticketing options, and service information for the Donau-Iller region. The website serves as a portal for commuters, students, and travelers, offering quick connection searches, ticket purchase information, and service updates. The company holds a solid regional market position as a transportation authority and service provider.

A-Frame is an established open source web framework founded in 2015 that enables developers to build 3D, AR, and VR experiences using HTML and entity-component architecture. The website serves as a hub for documentation, examples, and community resources targeting developers and VR content creators. It holds a niche position in the WebVR technology space with a small but focused user base. Technically, the site uses modern web technologies including A-Frame 1.7.0, Hexo static site generator, Google Analytics, and Algolia DocSearch, hosted behind Cloudflare DNS. The site is moderately optimized for performance and mobile, with good SEO metadata and clear navigation. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which impacts compliance. No contact emails or phone numbers are provided, limiting direct business credibility signals. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the project. The site content is safe for general audiences with no adult or questionable material.

G

Gumlet Pte. Ltd.

gumlet.com

60

Gumlet Pte. Ltd. is a technology company specializing in AI-powered video hosting, streaming, and image optimization services. Positioned as a modern alternative to established platforms like Mux and Vimeo, Gumlet targets developers, creators, and enterprises seeking high-performance media delivery solutions. The company offers a comprehensive suite of services including DRM-protected video hosting, adaptive streaming, and detailed analytics, supported by a global CDN infrastructure. Gumlet's market presence is reinforced by notable customer case studies and certifications such as SOC2 and ISO, indicating a commitment to security and compliance. Technically, Gumlet employs a modern web stack leveraging React and Next.js frameworks, with media assets hosted on AWS S3 and delivered via CDN for optimal performance. The website demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. Security measures include HTTPS enforcement, robust security headers, and DRM capabilities for video content, reflecting a mature security posture. While the website provides comprehensive business and contact information, privacy compliance could be enhanced by implementing explicit cookie consent mechanisms and publishing dedicated security and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the active and professional web presence suggests a legitimate operation. Overall, Gumlet presents a strong digital maturity and business credibility with room for improvement in privacy transparency and domain registration clarity.

I

INFINITI Abu Dhabi

infiniti-abudhabi.com

63

INFINITI Abu Dhabi operates as an official luxury automotive dealership specializing in new and pre-owned SUVs and crossovers under the INFINITI brand. The website targets luxury vehicle buyers in Abu Dhabi and the UAE, offering premium design, performance, and innovation in their vehicle lineup. The business appears to be a medium-sized entity aligned with Nissan Motor Company, leveraging strong brand recognition in the automotive sector. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager and Adobe Experience Platform, with a professional design optimized for mobile devices and good SEO practices. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and explicit security policies. Overall, the website is functional and professional but requires enhancements in privacy, security, and domain registration transparency to strengthen trust and compliance.

F

Faber Company Inc.

mieru-ca.com

11

Mieru-ca.com is a Japanese SEO and content marketing SaaS platform operated by Faber Company Inc., offering AI-powered SEO tools and consulting services. The platform integrates advanced AI features such as AI article generation, custom AI chat for content rewriting, and comprehensive SEO analytics, targeting corporate marketers and SEO professionals. The website demonstrates a mature digital infrastructure with extensive use of modern analytics and marketing technologies, hosted on AWS infrastructure with a reputable registrar. Security posture is solid with HTTPS and reCAPTCHA protections, though DNSSEC and security headers could be improved. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in the Japanese SEO tool market with a strong client base including major corporations.

H

HotelMap

hotelmap.com

76

HotelMap is a UK-based technology company specializing in hotel booking solutions tailored for events such as conferences, exhibitions, and trade shows. The company offers a suite of products including fully managed services for large event organizers and venues, free solutions for smaller events, and advanced room block blending technology. Their platform integrates with event registration systems and provides automated marketing and reporting tools, positioning them as a global leader in event hotel booking technology. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive content supporting their business model. Technically, the site leverages HubSpot CMS and marketing tools, AWS hosting, and integrates analytics and behavioral tracking services like Google Analytics and Hotjar. Security posture is strong with HTTPS, domain transfer protections, and secure form handling, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, the site is trustworthy, professional, and well-optimized for its target audience.

D

Shop Ufficiale del Duomo di Milano

duomoshop.com

58

The website www.duomoshop.com appears to be an e-commerce retail site built on the Wix platform. However, the absence of WHOIS registration data raises significant concerns about the legitimacy and ownership of the domain. The site lacks essential business information such as privacy policies, contact details, and terms of service, which are critical for trust and compliance. Technically, the site uses standard Wix scripts and includes LinkedIn tracking pixels for marketing purposes, but SEO and accessibility are minimal. Security posture is weak due to missing security headers and lack of incident response information. Overall, the site presents a basic online presence with limited content and low trustworthiness.

instant.page is a technology-focused website offering a lightweight, open source JavaScript library that enables just-in-time preloading of web pages to improve page load speed and user engagement. The service targets website owners and developers aiming to reduce latency and increase conversion rates by approximately 1%. The website is well designed, mobile optimized, and provides clear technical explanations and usage instructions. It is trusted by notable brands and has a strong GitHub presence, indicating a reputable and active community. Technically, the site uses modern web standards including CSS Grid and asynchronous JavaScript loading. It integrates Google Analytics and Google Tag Manager for user tracking and performance measurement. The site is fast and accessible, with good SEO and mobile optimization. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good practices such as script integrity checks and respectful resource loading, but it does not publish a security policy or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of privacy and cookie policies and contact information reduces the overall privacy compliance score. Overall, instant.page presents a professional, trustworthy, and technically sound offering with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear contact channels for security incidents.

The website rhmerchandise.com is currently inaccessible due to a security challenge page implementing a proof-of-work captcha mechanism. This prevents access to any business-related content, contact information, or policies. The domain is registered since 2017 with GoDaddy and uses Amazon Cloudfront CDN for content delivery. The security challenge page indicates an intent to protect the site from automated access or abuse but severely limits external analysis. No privacy, cookie, or terms of service policies are visible, and no contact details or business information can be extracted. The technical infrastructure includes modern JavaScript with Web Workers and cryptographic functions for the captcha. However, no security headers or DNSSEC are enabled, representing minor security gaps. Overall, the site’s security posture is difficult to assess fully due to the blocking mechanism, but the domain registration appears legitimate.

A

AAA Studio

aaastudio.ch

62

AAA Studio was a Swiss-based small design agency operating from 2019 to 2023, specializing in visual communication, graphic design, and digital spaces. The agency served clients primarily in the cultural and industrial sectors, collaborating with interdisciplinary partners to deliver complex and sustainable projects. Their business model focused on agile, project-based work with a strong emphasis on creative experimentation and client collaboration. Technically, the website is built on Drupal CMS with a moderate performance profile and good mobile optimization. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The security posture is moderate with no critical vulnerabilities detected but missing best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance measures.

A

AAA Studio

alexkern.com

59

AAA Studio was a Swiss-based visual communication agency operating from 2019 to 2023, specializing in graphic design, digital spaces, and communication projects for cultural and industrial clients. The studio emphasized a collaborative and experimental approach to design, working closely with interdisciplinary partners. Their portfolio includes projects for notable clients such as Fondation Beyeler, Museum Tinguely, and Performance Art Awards Switzerland. The website is bilingual (German and English), professionally designed, and showcases a rich portfolio of projects with multimedia content including images and videos. Technically, the site is built on Drupal CMS with modern HTML5 and CSS3 standards, optimized for mobile devices with good SEO practices. However, there are gaps in privacy and security compliance, with no visible privacy or cookie policies, no security headers, and no incident response information. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a small but professional agency with a strong creative portfolio but could improve in security and privacy compliance.

Z

Zephir Software Design AG

zephir.ch

59

Zephir Software Design AG is a Swiss-based web agency specializing in web development services with a focus on innovative ideas and modern web technologies. The company targets businesses and organizations seeking professional web solutions, emphasizing Swiss quality and reliability. Their website showcases client references and projects, positioning them as a reputable regional player in the technology sector. Technically, the website uses modern JavaScript libraries such as fullPage.js and integrates privacy-friendly analytics via Plausible. The site is well-designed, mobile-optimized, and provides clear contact information, enhancing user experience and trust. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

FRAKO Kondensatoren- und Anlagenbau GmbH

frako.com

57

FRAKO Kondensatoren- und Anlagenbau GmbH is a specialized company focused on reactive power compensation, energy management, and power quality solutions. The company offers a comprehensive portfolio of products, services, and training aimed at improving energy efficiency and network reliability, primarily targeting industrial and commercial energy professionals. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap and uses Matomo analytics for privacy-conscious user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The WHOIS data is notably absent or unregistered, which raises legitimacy concerns; however, the association with the parent company AdCapital Gruppe and consistent branding mitigate some risk. Overall, the site scores well on content quality and technical implementation but should address WHOIS transparency and security policy publication to improve trust and compliance.

W

Wiener Zeitung

wienerzeitung.at

67

Wiener Zeitung is a well-established Austrian digital media outlet providing independent and critical quality journalism. The website offers a variety of content including news articles, podcasts, videos, and newsletters targeting a general audience interested in current affairs and quality journalism. The site is professionally designed with consistent branding and excellent content quality. Technically, it uses modern web technologies including the Astro framework, Tailwind CSS, and Matomo analytics configured with privacy-conscious settings. Security posture is good with HTTPS enforced and some privacy features enabled, but lacks explicit security policies and headers. Privacy compliance is basic due to missing visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

V

Vereinte Dienstleistungsgewerkschaft (ver.di)

verdi.de

48

ver.di is a major German trade union focused on advocating for workers' rights, fair wages, and work-life balance. The website reflects a large, professional organization with a clear mission to support service sector employees. The technical infrastructure uses modern web technologies and includes consent management and analytics tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and explicit privacy and terms policies. Overall, the site is trustworthy and well-maintained but could improve transparency and security practices.

R

ReferralCandy

referralcandy.com

68

ReferralCandy operates as a leading SaaS provider specializing in referral marketing software tailored for eCommerce businesses. The platform empowers online retailers to leverage customer referrals to drive exponential sales growth, boasting a user base exceeding 30,000 eCommerce stores. Their business model focuses on performance-based payments and seamless integration with popular platforms such as Shopify. The website reflects a mature digital presence with professional branding, comprehensive content, and strong social media engagement.

P

Playmit GmbH

jobeinsteiger.at

52

Playmit GmbH operates jobeinsteiger.at, a leading Austrian online platform dedicated to connecting vocational beginners with apprenticeship and entry-level job opportunities. The platform offers comprehensive job listings, company profiles, career videos, and integrated services such as strength analysis through its partner site Playmit.com. The website targets young professionals and students seeking to start their careers in Austria, positioning itself as a trusted resource in the education and employment sector. Technically, the site employs modern JavaScript frameworks, Vite for asset bundling, and integrates analytics tools like Matomo and Microsoft Clarity with user consent mechanisms, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and provides cookie consent, though it could enhance security headers and publish a formal security policy. Overall, the platform demonstrates strong business credibility, excellent content quality, and good privacy compliance, making it a reliable and professional resource for its audience.

I

Imdaad

imdaad.ae

57

Imdaad is a leading integrated facilities management company based in Dubai, UAE, with a strong presence across the Middle East. The company offers a comprehensive range of services including Hard FM, Environmental Services, Material Recovery, Soft FM, Home Maintenance, Fire Detection, and Lift Systems. Imdaad operates through multiple subsidiaries and brands, serving a diverse clientele with a multi-national workforce. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with good performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and cookie policies. WHOIS data confirms legitimacy with consistent registration details and no privacy protection, supporting trustworthiness. Overall, the site is professional, content-rich, and well-branded, targeting business customers in the facilities management sector.

The website alqaryan.com currently presents a robot challenge screen designed to block automated access, indicating the presence of a Web Application Firewall or similar security mechanism. Due to this blocking, no substantive business content, contact information, or policies are accessible for analysis. The domain is long-registered since 2002 with GoDaddy.com, LLC, suggesting a stable registration history but no further legitimacy indicators are visible on the page. The technical infrastructure includes JavaScript-based CAPTCHA challenges and uses a Cloudfront CDN for some assets. Security posture cannot be fully assessed due to lack of accessible content and missing security headers or SSL details. Overall, the site appears to be protected by security measures that limit direct content access, resulting in a low AI score and incomplete analysis.

P

Plachutta's Mario Hietzing

plachutta-mario.at

55

Plachutta's Mario Hietzing is a hospitality business operating a restaurant in Vienna, Austria, specializing in Mediterranean and Viennese cuisine. The website presents a professional and visually appealing platform showcasing their menu offerings, including breakfast, pasta, grilled dishes, and takeaway options. The business is positioned as a local favorite with a strong brand association to the Plachutta group. Technically, the website employs modern web technologies such as JavaScript libraries for galleries and sliders, and uses Google Tag Manager for tracking, though Google Analytics is not actively configured. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service documentation. Overall, the site is accessible, well-structured, and trustworthy, though improvements in privacy compliance and security best practices are recommended.