Security Directory

S

Spektrum Ingenieurgesellschaft mbH

siincos.com

48

Siincos, operated by Spektrum Ingenieurgesellschaft mbH, is a specialized software development company focusing on Industrial Internet of Things (IIoT), IoT, and Industrie 4.0 solutions. Their offerings include custom app development, cloud integration, and smart factory solutions targeting industrial clients and manufacturing environments. The company positions itself as a niche provider delivering tailored software and IoT systems from sensor integration to cloud services. Technically, the website is built using a static site CMS (Publii) with modern frontend technologies like jQuery and CSS3, hosted via a German registrar and DNS provider. The site is mobile optimized and SEO friendly but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with HTTPS enabled and no visible vulnerabilities, but improvements are recommended in security headers and privacy compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website is professional, trustworthy, and provides clear contact channels including email, phone, and social media.

E

EMPERIA Digital Solutions GmbH

emperia.one

57

EMPERIA Digital Solutions GmbH operates a technology-focused website offering interactive 3D web solutions and digital visualization services. The company appears to be a small, niche player in the digital solutions market, founded in 2019 and based in Germany. Their website serves as a portal to their 3D showroom and related services, targeting a general audience interested in advanced digital visualization technologies. The business model centers on providing specialized digital content and virtual presentation environments. Technically, the website uses standard HTML5, CSS3, and JavaScript technologies with Google Analytics for user tracking. Hosting is provided by IONOS SE, a reputable German hosting provider. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS integration. SEO and accessibility features are basic, and the site relies on an iframe to deliver its main interactive content. From a security perspective, the domain is registered with privacy protection and has a clientTransferProhibited status, which protects against unauthorized domain transfers. However, DNSSEC is not enabled, and no security headers are present in the HTML content, indicating room for improvement in security hardening. Privacy and cookie policies are absent, which impacts GDPR compliance and user trust. The use of Google Analytics implies moderate user tracking without visible consent mechanisms. Overall, the website is functional and professional but basic in content and security posture. Strategic improvements in privacy compliance, security headers, and transparency of contact information would enhance trust and compliance. The domain registration and hosting are consistent with a legitimate small German technology company, supporting a moderate legitimacy score.

C

CENIT AG

cenit.com

75

CENIT AG is a well-established technology and consulting company based in Germany, specializing in digital process solutions, product lifecycle management, and software integration. With over 30 years of experience and strategic partnerships with global IT leaders such as Dassault Systèmes, IBM, and SAP, CENIT serves a broad enterprise clientele across multiple countries. Their business model focuses on providing comprehensive digital transformation services, software solutions, and consulting to enhance operational excellence and digital maturity for their customers. Technically, the website is built on the TYPO3 CMS platform with Bootstrap for responsive design, leveraging modern web technologies and integrating marketing and analytics tools like Google Tag Manager and Microsoft Dynamics Marketing Forms. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs security headers such as Content Security Policy, and uses CAPTCHA-protected forms, indicating a solid security posture. However, the absence of publicly available security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and readiness. Overall, the website presents a professional, trustworthy, and content-rich presence aligned with the company's market position. The lack of WHOIS data limits domain trust verification, but the business legitimacy is supported by consistent branding, detailed service offerings, and contact information. Strategic recommendations include enhancing security transparency, publishing incident response details, and verifying domain registration information to strengthen trust further.

I

INTEGRITY Global Security

integrityglobalsecurity.com

62

INTEGRITY Global Security is a specialized cybersecurity company focused on providing high-assurance security solutions including CSfC solutions for classified networks, EAL6+ certified separation kernel software, IoT security, and protection for commercial and medical sectors. Their market position is that of a niche leader with a unique high-level security certification, targeting government agencies and critical infrastructure sectors. The company operates primarily in the United States and has been established since 2007. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with video content delivered via VideoJS. The site is hosted through GoDaddy and uses Google Tag Manager for marketing purposes. The website is moderately optimized for mobile devices and has a professional design, though accessibility and SEO optimizations are basic. From a security perspective, the site lacks advanced security headers and DNSSEC is not enabled, which are areas for improvement. No incident response or security policy information is publicly available. The site uses HTTPS (assumed but not explicitly confirmed in data) and avoids exposing sensitive data. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professionally presented, with a solid business credibility score. However, improvements in security posture and privacy compliance would enhance the overall risk profile and user trust.

M

MEMPOOL SPACE K.K.

mempool.space

66

Mempool.space is an open source Bitcoin blockchain explorer operated by MEMPOOL SPACE K.K., a company registered in Japan since 2018. The website provides real-time transaction status, network information, mining pool data, and fee estimations, targeting Bitcoin users, miners, and developers. The platform leverages modern web technologies including Angular and ECharts to deliver interactive and responsive user experiences. While the site is well-designed and professional, it lacks formal privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is generally good with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. No direct contact or incident response information is provided, limiting transparency in security matters. Overall, mempool.space is a credible and specialized service in the Bitcoin ecosystem with room for enhanced compliance and security practices.

H

HMS

hms-services.com

58

HMS is a specialized maritime supply company serving merchant and passenger shipping sectors with provisioning, technical supply management, and galley support services. The company positions itself as a leading marine supplier with a global footprint and decades of experience, supported by certifications and a strong parent company presence (CHEFS CULINAR). The website is professionally designed, mobile-optimized, and provides clear navigation and relevant business content. Technically, the site uses modern privacy compliance tools such as Usercentrics CMP and analytics via Etracker, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the site demonstrates good privacy compliance and business credibility but could improve its security posture and transparency.

C

CHEFS CULINAR

chefsculinar.pl

52

CHEFS CULINAR is a leading Polish national distributor specializing in food and non-food products for the HoReCa sector, including restaurants, hotels, and catering companies. The company offers a broad portfolio of approximately 12,000 products, including proprietary brands and a webshop platform. Their website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and rich content aimed at culinary professionals. Technically, the site uses modern web technologies such as jQuery, Modernizr, and Usercentrics for privacy management, alongside eTracker for analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit HTTP security headers and a published security policy are absent. WHOIS data is unavailable from the registry, which slightly impacts trust but is mitigated by the professional branding and presence of trust badges. Overall, the site is well-structured, privacy-conscious, and business-focused, serving a large enterprise in the hospitality distribution sector.

L

Let's Make Your Website Amazing

ottawawebdesign.ca

46

Ignite Web Solutions, operating under the brand 'Let's Make Your Website Amazing', is a small Canadian technology service provider specializing in custom responsive web design, CRM, and database solutions primarily targeting associations, small and medium businesses, and charities in Ottawa and beyond. The company has a strong local market position with over 100 projects completed and more than $200 million in transactions processed, demonstrating significant operational experience and client trust. Their business model focuses on delivering comprehensive digital platforms including web hosting, SEO, branding, and e-commerce, supported by a free strategy call to engage potential clients. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO and accessibility practices, though performance is moderate. Hosting and domain registration are managed by Rebel.ca Corp., with domain age consistent with the company's operational history. However, some technical security enhancements like DNSSEC and security headers are missing. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA, but lacks published privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing an area for improvement. The WHOIS data is privacy protected but shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and well-positioned in its niche, but would benefit from enhanced privacy compliance and security best practices to further strengthen its risk posture and user confidence.

Green Hills Software is a well-established company specializing in embedded software solutions, particularly real-time operating systems (RTOS), development tools, and safety/security certified platforms. Founded in 1982, it holds a strong market position as a leader in embedded safety and security software, serving sectors such as aerospace, defense, automotive, industrial, medical, and networking. The company offers a comprehensive suite of products including the INTEGRITY RTOS family, MULTI IDE development tools, and hypervisor technologies, supported by certifications like EAL 6+ and DO-178B/C. The website reflects a professional and consistent brand image with rich content targeted at embedded software developers and industry professionals.

C

Corellium

corellium.com

79

Corellium is a technology company specializing in virtual hardware solutions for iOS, Android, and Arm devices. Their platform accelerates security testing, research, and DevSecOps processes for security teams, mobile pentesters, software developers, enterprises, and government agencies. The company offers a range of products and solutions including mobile app pentesting, vulnerability research, malware analysis, IoT DevOps, automotive systems virtualization, and security training. Their MATRIX automation tool further enhances security testing and reporting capabilities. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to their target audience. The technical infrastructure leverages HubSpot CMS, Google Tag Manager, Intercom, and other modern web technologies, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit incident response and vulnerability disclosure information are not publicly available. Overall, Corellium presents a credible and trustworthy digital presence with a focus on advanced security and development tools for virtual hardware.

B

Bosch Mobility

bosch-mobility.com

68

Bosch Mobility is a division of the globally recognized Robert Bosch GmbH, specializing in vehicle technology and software solutions to provide comprehensive mobility services. The website showcases a broad portfolio including ADAS, automated driving, powertrain technologies, and electric mobility solutions, targeting automotive manufacturers and technology partners. The digital presence is professionally designed with clear navigation and modern web technologies, reflecting a mature and enterprise-level infrastructure. Security posture is strong with HTTPS enforcement, CSRF protections, and consent management, although explicit security policies and incident response information are not publicly detailed. The domain WHOIS data is unavailable, suggesting the site operates as a subdomain or alias within Bosch's corporate domain structure. Overall, the site is trustworthy, compliant with GDPR, and serves as a credible source for Bosch's mobility technology offerings.

D

DECHEMA Gesellschaft für Chemische Technik und Biotechnologie e.V.

dechema.de

61

DECHEMA Gesellschaft für Chemische Technik und Biotechnologie e.V. is a well-established non-profit professional association in Germany focused on chemical technology and biotechnology. The organization serves as a key network for professionals in science, industry, politics, and society, promoting knowledge exchange, research funding, and event organization. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to its target audience. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and FontAwesome, hosted on webdiscount.net, and employs Google Tag Manager and Analytics for user tracking with appropriate cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting DECHEMA's market position as a leading network in its sector.

A

Atom

bitavo.com

74

Atom operates as a specialized online marketplace offering over 200,000 premium domain names for sale, targeting businesses and entrepreneurs seeking to enhance their brand presence through high-value domain acquisitions. The website is professionally designed with a clear focus on domain sales, providing users with search and filtering capabilities to find suitable domain names. The company positions itself as a significant player in the premium domain market, leveraging a robust digital platform to facilitate transactions. Technically, the website employs modern web technologies including JavaScript, Google Fonts, and New Relic monitoring for performance and error tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. The infrastructure appears stable with HTTPS enforced and security headers implemented, contributing to a secure browsing experience. From a security perspective, the site follows best practices such as HTTPS and security headers but lacks publicly available security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy and cookie policies are comprehensive and GDPR compliant, indicating attention to user data protection. Overall, the website presents a moderate risk profile primarily due to the absence of WHOIS data, which limits domain legitimacy verification. The site is operational and professional, but the unclear domain registration status suggests caution. Strategic recommendations include publishing explicit security and incident response policies and enhancing accessibility to improve compliance and trust.

A

Association for Advancing Automation

automate.org

67

The Association for Advancing Automation (A3) operates as a leading industry association focused on advancing automation technologies including robotics, vision, motion control, and artificial intelligence. The organization provides a comprehensive hub of information, certifications, events, market intelligence, and advocacy services targeted at industrial automation professionals and businesses. Their market position is strong within the automation sector, supported by a professional website that promotes key industry certifications and upcoming events. Technically, the website employs a modern tech stack with JavaScript libraries, Google Analytics, and marketing tools, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a credible and trustworthy organization with a medium-sized business footprint in the United States.

C

CHEFS CULINAR

chefsculinar-gkt.de

54

CHEFS CULINAR Großküchentechnik is a well-established German company specializing in the planning and servicing of commercial kitchens across multiple industries including hospitality, ship catering, and corporate gastronomy. With over 40 years of experience and more than 25,000 projects completed, the company offers comprehensive services including 3D kitchen planning software, leasing options, and extensive customer service. The website reflects a professional and consistent brand image, targeting B2B clients seeking tailored kitchen solutions. Technically, the site employs modern web technologies and integrates a reputable cookie consent management platform (Usercentrics) and analytics (Etracker), indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience.

J

JOMOsoft

jomosoft.de

55

JOMOsoft is a German-based technology company specializing in IT solutions for smart kitchen and catering management systems. Their website presents a comprehensive portfolio of software tools designed to optimize kitchen operations, including procurement, production planning, sales, controlling, sustainability, and smart kitchen integrations. The company positions itself as an experienced provider with over 25 years of expertise, serving a medium-sized market with 2500+ installations and 80+ employees. The website is professionally designed, mobile-optimized, and rich in relevant content targeting the out-of-home catering and communal catering sectors. Technically, the website employs modern JavaScript modules, uses Usercentrics for consent management, and integrates privacy-protected third-party content such as Vimeo videos. Analytics are handled via etracker with respect for Do Not Track signals, indicating a privacy-conscious approach. Hosting is managed through German nameservers (123ns.eu/123ns.de), consistent with the company's geographic focus. From a security perspective, the site uses HTTPS and implements a consent management platform, but lacks explicit HTTP security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is primarily via web forms, with no direct emails or phone numbers visible. Overall, the website is trustworthy, professional, and well-structured, with a solid security posture and good privacy practices. Recommendations include enhancing HTTP security headers, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

H

Hedera

hedera.com

71

Hedera is a mature and well-established public distributed ledger technology platform that offers a fast, secure, and compliant environment for decentralized applications. Governed by a council of leading global organizations, Hedera provides key services including tokenization, consensus, smart contracts, and its native cryptocurrency HBAR. The platform targets developers, enterprises, and organizations seeking decentralized trust infrastructure. Technically, the website employs modern web technologies, integrates multiple analytics and marketing tools, and is hosted with Cloudflare DNS. Security posture is good with HTTPS enforced and bot protection via reCAPTCHA, though it lacks some security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-branded, reflecting a strong market position in blockchain technology.

T

TU9-Allianz

tu9.de

47

TU9-Allianz is a prestigious alliance of leading technical universities in Germany, including RWTH Aachen, TU Berlin, TU Braunschweig, TU Darmstadt, TU Dresden, Leibniz Universität Hannover, KIT, TU München, and Universität Stuttgart. The alliance focuses on cutting-edge research, innovation, and education in engineering and natural sciences, fostering international collaboration and promoting the German engineering brand globally. The website serves as an information hub for academic partners, students, and industry collaborators, showcasing current projects, policy positions, and alliance activities. Technically, the website employs modern web standards with responsive design, uses JavaScript libraries such as jQuery and Slick Carousel, and integrates Matomo for analytics, reflecting a moderate to advanced digital maturity. Hosting and DNS infrastructure appear to be managed by university or academic networks, ensuring reliability and institutional trust. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected, which may be a compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its academic mission. Strategic improvements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a local offline error display including the embedded Chromium offline dinosaur game. There is no actual website content, business information, or external links present. The page is not publicly accessible and does not represent a commercial or organizational website. The technical infrastructure is limited to embedded JavaScript and CSS for the offline game, with no external hosting or CMS detected. Security posture evaluation is not applicable as this is a local browser page without network exposure. Overall, this page does not provide any business or compliance information and cannot be evaluated as a website in the traditional sense.

The website media-server.com currently serves as a minimal placeholder page titled 'Multimedia Centre' with very limited content and no direct business information. The only external link points to a privacy and legal statement hosted on a different domain (west.com). The domain is registered since 2003 with Amazon Registrar, Inc., indicating a stable and long-standing registration, but the website itself lacks substantive content or clear business identity. Technically, the site uses basic HTML and CSS without any detected scripts, analytics, or CMS platforms. There is no evidence of advanced security headers or HTTPS enforcement visible in the provided data, which limits the security posture. Privacy compliance is minimal, with no cookie policy or consent mechanisms detected. Overall, the site appears to be either under development or a simple informational placeholder without active business operations or user engagement features.

G

go2automation.de

go2automation.de

35

The website go2automation.de currently serves as a parked domain with minimal content primarily consisting of advertisements and related search iframes. There is no substantive business information, contact details, or service descriptions available, indicating that the domain is not actively used for commercial or informational purposes. The technical infrastructure relies on Bodis domain parking services and Google Adsense for monetization. No CMS or advanced frameworks are detected, and the site lacks HTTPS and security headers, reflecting a low level of digital maturity. Security posture is weak due to absence of HTTPS, security policies, and contact information. Overall, the site presents a low trust profile and minimal business credibility, with no indicators of active operations or compliance with privacy regulations.

B

Bosch Rexroth

boschrexroth.com

73

Bosch Rexroth is a global leader in drive and control technologies, specializing in factory automation, industrial and mobile hydraulics, and electronics. The company operates primarily in the manufacturing and transportation sectors, serving industrial clients worldwide. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to B2B audiences. Technically, the site uses modern web technologies, including custom UI components, JavaScript frameworks, and integrates advanced analytics and marketing tools such as Google Tag Manager and Tealium. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a minor concern but does not detract significantly from the overall trustworthiness given the company's established brand and certifications.

R

Rockwell Automation

rockwellautomation.com

78

Rockwell Automation is a global leader in industrial automation and smart manufacturing solutions, serving a broad range of industries including manufacturing and energy. The company offers a comprehensive portfolio of hardware, software, and consulting services designed to improve productivity and sustainability in industrial environments. Their market position is strong, supported by well-known subsidiary brands such as Allen-Bradley and FactoryTalk. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial professionals. Technically, the website is built using modern web technologies including Polymer web components and Adobe Experience Manager CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, though explicit security policy and incident response information are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The security posture is robust with no detected vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain registration transparency, which slightly impacts trust scores. Overall, the website is trustworthy, professional, and secure, suitable for its enterprise audience. Strategic recommendations include publishing a dedicated security policy and incident response contact, implementing a vulnerability disclosure program, and enhancing accessibility features to further improve compliance and user experience.

M

MARKT-PILOT

markt-pilot.com

62

MARKT-PILOT is a specialized software provider offering parts pricing solutions tailored for machine manufacturers. Their products, PRICERADAR and PRICEGUIDE, enable data-driven pricing strategies and aftermarket intelligence, helping clients increase revenue and customer loyalty. The company is positioned as a trusted partner with over 100 customers and demonstrates strong industry presence through events and certifications such as ISO 27001. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools, providing a professional and responsive user experience. Security posture is strong with HTTPS and ISO certification, though explicit incident response and vulnerability disclosure information are absent. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the overall credibility given the professional web presence and contact information.

Yazaki North America operates as a major player in the automotive components sector, specializing in power distribution, data connectivity, and display technologies for vehicles. The company emphasizes innovation, environmental responsibility, and global presence with operations in 46 countries. Their product portfolio includes wiring harnesses, connectors, sensors, and hybrid electric vehicle components, targeting automotive manufacturers and suppliers. The website reflects a professional corporate identity with clear navigation and relevant content aimed at industry professionals and potential employees. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight Tag. The site is mobile optimized and accessible, with a moderate performance profile. Security is enforced through HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies are absent. From a security perspective, the site shows a solid baseline with encrypted communications and privacy compliance. However, the absence of WHOIS data and registrant information introduces some uncertainty regarding domain legitimacy. No critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit incident response contacts or vulnerability disclosure policies, which could be improved to enhance trust. Overall, Yazaki North America’s website is a credible and professional digital presence supporting their business operations. Strategic improvements in transparency, security policy publication, and WHOIS data availability would strengthen their security posture and stakeholder confidence.

P

PSTproducts GmbH

pstproducts.com

60

PSTproducts GmbH is a German-based medium-sized company specializing in electromagnetic pulse technology (EMPT) for industrial mass production applications. The company is positioned as a world leader in EMPT machine systems, offering tailored solutions for welding, joining, and high-speed forming processes without heat input. Their website is professionally designed, multilingual, and targets industrial manufacturers and engineering clients. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with good mobile optimization and SEO practices. Security posture is moderate; while cookie consent is implemented and no sensitive data is exposed, the absence of DNSSEC and security headers suggests room for improvement. No incident response or security policy information is published. Overall, the domain registration is consistent with the business history, supporting legitimacy and trustworthiness.

I

Instra Corporation Pty Ltd.

eu.com

59

EU.COM operates as a domain registry service specializing in the .EU.COM subdomain, targeting businesses seeking to establish or expand their presence in Europe without the residency restrictions of the .eu ccTLD. The company is operated by Instra Corporation Pty Ltd., a reputable domain registrar established in 1995. The website clearly communicates its value proposition, emphasizing unrestricted global access, premium domain availability, and SEO benefits for European market engagement. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Underscore.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and a published security policy. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Incident response is supported via a partner domain (gen.xyz) for abuse reporting. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

B

Beer of Satoshi GmbH

beerofsatoshi.com

44

Beer of Satoshi GmbH is a German-based small business specializing in a unique niche product: a limited edition craft beer that integrates Bitcoin rewards via hidden QR codes under bottle caps. The company targets Bitcoin enthusiasts and craft beer lovers primarily within the European Union, leveraging a business model that combines e-commerce sales and event-based distribution. Their market position is niche but well-defined, with a strong community and partnership ecosystem supporting their brand. The website is professionally designed, mobile-optimized, and rich in content that clearly communicates the product's value proposition and legal compliance.

I

IVRSA – Industrievereinigung

ivrsa.de

61

IVRSA is a German industry association representing leading manufacturers and suppliers in the Rollladen, Sonnenschutz, and Automation sectors. The organization focuses on developing technical guidelines, supporting scientific studies, and representing the industry in national and European standardization bodies. The website is professionally designed, content-rich, and targeted at industry professionals and stakeholders. Technically, the site is built on WordPress with common plugins and demonstrates good GDPR compliance through a cookie consent mechanism. Security posture is adequate with HTTPS enforced, though security headers are not explicitly detected. No critical vulnerabilities or blocking mechanisms were found, indicating a trustworthy and accessible web presence.

The website www.aids-tage.de represents a well-established medical congress focused on AIDS and infectious diseases, organized by verlag moderne industrie GmbH. It targets healthcare professionals, scientists, and students, offering expert speakers, networking opportunities, and continuing education credits. The event is scheduled for March 27-29, 2026, in Berlin, reflecting a strong market position in the German healthcare event sector. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates Google Tag Manager for analytics, alongside a robust privacy consent mechanism compliant with GDPR. Security posture is good with HTTPS and consent management, though explicit security headers and incident response policies are not evident. Overall, the site is professional, trustworthy, and provides comprehensive event information and contact options.

BNP Paribas is a major European and international banking group with a diversified business model covering corporate, institutional, commercial, personal banking, and investment services. The website reflects a mature digital presence with comprehensive content on governance, sustainability, innovation, and career opportunities. The technical infrastructure uses modern analytics and consent management tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, domain locking, and cookie consent, though DNSSEC is not enabled and explicit security policies are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with the company's business identity.

D

DASDING / Südwestrundfunk - Anstalt des Öffentlichen Rechts

dasding.de

58

DASDING is a regional public radio station serving Baden-Württemberg and Rheinland-Pfalz in Germany, operated under the Südwestrundfunk public broadcasting organization. The website offers a comprehensive digital platform featuring live radio streaming, video livestreams, podcasts, music discovery, and event information targeting a young audience. The site is professionally designed with consistent branding and rich multimedia content, reflecting a mature digital presence. Technically, the site employs modern web standards, including responsive design, SVG icons, and multiple audio streaming formats, supported by analytics tools such as Chartbeat and Piano. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are absent. Privacy compliance is limited by the lack of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and credible, aligned with its public broadcaster status.

S

SWR/Südwestrundfunk - Anstalt des Öffentlichen Rechts

swr4.de

63

The website www.swr.de/swr4 is the official regional portal for SWR4, a public radio station operated by Südwestrundfunk (SWR), a major public broadcaster in Germany. It offers regional news, practical lifestyle tips, music programming, and event information targeted primarily at audiences in the Rheinland-Pfalz and Baden-Württemberg regions. The site demonstrates consistent branding and professional content quality, reflecting its position as a trusted media entity. Technically, the site uses modern web technologies including lazy loading, SVG icons, and analytics tools such as Chartbeat and Piano Analytics, ensuring good mobile optimization and accessibility. However, explicit privacy and cookie policies are not found in the provided content, and no direct contact information for security or incident response is disclosed. The domain registration data aligns well with the public broadcaster's identity, supporting high legitimacy and trustworthiness.

H

Herzenssache e.V.

herzenssache.de

57

Herzenssache e.V. is a well-established non-profit organization dedicated to supporting children and youth in the German regions of Baden-Württemberg, Rheinland-Pfalz, and Saarland. The website reflects a strong partnership with regional media (SWR) and financial institutions (Sparda-Bank), positioning it as a trusted charity with a clear mission to fund and promote social projects. The content is professionally presented, with excellent design, navigation, and relevant information for donors and participants. Technically, the site uses modern web technologies and integrates analytics and media players effectively, though it lacks an explicit cookie consent mechanism which is a minor GDPR compliance gap. Security posture is strong with HTTPS and no visible vulnerabilities, but could be improved by adding explicit security headers and incident response contacts. Overall, the site is trustworthy, user-friendly, and serves its charitable purpose well.

S

SWR Kindernetz

kindernetz.de

58

SWR Kindernetz is the children's content portal of the Südwestrundfunk (SWR), a major German public broadcaster. The website offers multimedia content including TV program information, audio plays, podcasts, and educational videos targeting children and families. It holds a strong market position as a trusted regional public media provider with a focus on educational and entertaining content for young audiences. The platform is well-branded and consistent with the SWR and ARD public broadcasting identity.

S

Südwestrundfunk

swr3.de

62

SWR3 is a prominent German pop radio station operated by Südwestrundfunk, a public broadcasting institution. The website offers a wide range of content including news, music, comedy, podcasts, and event information, targeting a general audience interested in entertainment and current affairs. The site is well-branded, professionally designed, and provides a rich user experience with responsive design and accessible navigation. Technically, the site employs modern web technologies, including HTML5, CSS3, JavaScript, and integrates analytics tools such as Chartbeat and Piano Analytics. The security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and policies could be enhanced. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content, and no consent mechanisms are evident. Contact information is minimal, with no direct emails or phone numbers visible, but social media presence is established. Overall, the site is trustworthy and credible, consistent with a public media entity.

BitLab d.o.o. is a medium-sized IT company based in Bosnia and Herzegovina, specializing in a broad range of technology services including web development, mobile applications, 3D visualization, hosting, education, and e-commerce. Established in 2015, the company has completed over 500 projects and serves a diverse clientele including government agencies and educational institutions. Their business model focuses on providing comprehensive IT solutions and digital services tailored to client needs, supported by a strong local presence and multilingual website content. Technically, BitLab employs a modern technology stack with popular frameworks and platforms, ensuring good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved further. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and published security policies, which are recommended for enhanced trust and compliance. Overall, BitLab presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security transparency.

H

Hanse Haus

hanse-haus.ch

77

Hanse Haus is a well-established German prefabricated house provider with a strong presence in Switzerland, offering individually planned turnkey and shell houses. The company emphasizes customer satisfaction, quality, and personalized service, supported by a large workforce and a history dating back to 1929. Their website is professionally designed, multilingual, and optimized for user experience and accessibility. Technically, the site uses TYPO3 CMS and integrates modern analytics and cookie consent tools, ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital infrastructure with good privacy and security practices, supporting the company's credible market position.

M

Mark Hamstra Web Development

modx.today

10

MODX.today is a niche online magazine dedicated to the MODX Content Management Platform, providing news, tutorials, reviews, and community event information primarily targeting MODX developers and users. The website is operated by Mark Hamstra Web Development, a small business based in the Netherlands, with a domain registration dating back to 2014, consistent with the site's content history. The platform leverages modern web technologies including Foundation CSS framework, jQuery, Google Fonts, and integrates Google Analytics and Disqus for user engagement and analytics. The site is mobile optimized and presents a professional, consistent brand image with clear navigation and relevant content for its audience. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and legitimate but would benefit from enhanced security and compliance measures.

P

pantamedia communication

pantanet.de

53

Pantamedia communication is a German-based full-service agency specializing in public relations, advertising, and marketing with over 30 years of experience. The company focuses on serving clients in political and business sectors, offering services such as print design, logo design, text design, and web design. The website is professionally designed using WordPress with the Enfold theme and includes a comprehensive cookie consent mechanism via Cookiebot, reflecting good privacy compliance. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional and consistent business presentation. The technical infrastructure is modern and adequate, though security headers and explicit security policies are not evident. Overall, the site demonstrates a good security posture and privacy compliance but would benefit from enhanced transparency regarding domain registration and security policies.

eNovosti.info is a Serbian language online news portal established in 2007, targeting audiences primarily in Republika Srpska and Serbia. It offers a wide range of news categories including politics, sports, culture, economy, and entertainment. The site is monetized primarily through Google Adsense advertising and uses Google Analytics for visitor tracking. The portal is powered by BitLab CMS and hosted by BitLab services, indicating a partnership with a local technology provider. The website demonstrates good content quality and user experience with clear navigation and mobile optimization, but lacks critical privacy and security features such as HTTPS and privacy policies.

BitLab d.o.o. is a medium-sized technology company based in Bosnia and Herzegovina, specializing in IT solutions including web development, mobile applications, 3D visualization, hosting, e-commerce, and education. Established in 2014, the company has a solid market presence with over 500 completed projects and a diverse client base including government and educational institutions. Their business model focuses on providing comprehensive digital services and products to businesses and organizations in the region. Technically, the website demonstrates a modern technology stack with a variety of backend and frontend frameworks, CMS options, and integration of analytics and social sharing tools. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Hosting appears to be managed internally or through affiliated services, with DNSSEC enabled and SSL certificates in use, indicating a secure infrastructure. From a security perspective, the website benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies such as privacy or cookie policies. No forms or direct data collection mechanisms were detected in the provided content, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and similar regulations. Overall, BitLab d.o.o. presents a trustworthy and professional online presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory adherence.

A

Antena Radio

antena.ba

46

Antena Radio is a small media company operating an online radio streaming platform targeting general audiences interested in contemporary music. The website provides live streaming, social media integration, and mobile app distribution, positioning itself as a local/regional broadcaster in Bosnia and Herzegovina. The technical infrastructure uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and integrates Google Analytics and Facebook SDK for tracking and social features. While the site is functional and well-branded, it uses an outdated jQuery version and loads some scripts over HTTP, which introduces security risks. The security posture is moderate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional but would benefit from security and privacy improvements.

R

RedIRIS

rediris.es

69

RedIRIS is a well-established Spanish academic and research network providing connectivity and advanced ICT services to the academic and scientific community since 1988. It operates under the auspices of Red.es, a Spanish public entity, and holds important certifications such as ISO 27001 and ENS, underscoring its commitment to security and quality. The website reflects a professional and consistent brand image targeting academic institutions and researchers in Spain. Technically, the site uses modern web technologies including jQuery, DataTables, and Google Analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and certifications, though explicit security headers and incident response policies are not publicly visible. Privacy compliance is partially addressed with cookie consent but lacks a dedicated privacy policy page. Overall, the site is trustworthy, secure, and professionally maintained, serving a critical role in Spain's academic infrastructure.

А

Агенција за безбједност саобраћаја Републике Српске

bslzrs.org

44

The website bslzrs.org represents the Agency for Traffic Safety of Republika Srpska, Bosnia and Herzegovina. It primarily serves as an informational platform for the XIV International Conference on Traffic Safety in Local Communities, providing detailed content about traffic safety statistics, conference agenda, speakers, thematic areas, and organizational committees. The agency operates as a governmental and non-profit entity focused on improving traffic safety through research, awareness, and collaboration with regional and international partners. The website targets professionals, researchers, and government officials involved in traffic safety and local community development. Technically, the website employs a modern frontend stack including Bootstrap 4, jQuery, Slick Carousel, and Google Maps API integration. It is hosted on Bitlab Hosting and demonstrates moderate performance with good mobile optimization. However, accessibility and SEO optimizations are basic, and no CMS or advanced platforms are detected. The site lacks analytics and tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. The WHOIS data shows privacy protection and a recent domain registration date, which is somewhat inconsistent with the historical content but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is professional and trustworthy with good content quality and business credibility. However, it requires improvements in privacy compliance, security headers, and transparency to enhance its security posture and regulatory adherence.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

unser-holz-bw.de

68

The website represents the official online presence of the Ministry for Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It focuses on public information campaigns related to sustainable forestry, climate protection, and consumer awareness, notably the #UnserHolz campaign promoting wood as a climate-friendly resource. The site targets citizens, environmental stakeholders, and professionals in forestry and construction sectors within Baden-Württemberg. The content is professionally curated, accessible, and well-structured, reflecting a mature digital presence of a government entity. Technically, the site is built on TYPO3 CMS, employs Matomo analytics with user consent, and integrates modern web technologies ensuring good performance and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be more visible. Overall, the domain registration and website content align, confirming legitimacy as an official government resource.

P

Promotim d.o.o.

promotim.ba

44

Promotim d.o.o. is a Bosnian technology company specializing in innovative web development and online marketing solutions since 2003. The company offers a range of services including web development, e-commerce platforms, web applications, and social media marketing, supported by their proprietary CMS platform PromoCMS. Their market position is strong locally with a portfolio of notable clients including news agencies and government entities. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics for tracking. However, the site lacks published privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. Overall, the website is professional and well-structured but could improve in privacy and security transparency.

S

Spreadshop

myspreadshop.it

54

The website myspreadshop.it serves as a landing page for Spreadshop, a print-on-demand merchandise platform targeting Italian users. It offers users the ability to create and sell custom merchandise online, leveraging the Spreadshirt group infrastructure. The site is minimalistic, focusing on a call to action to open a merchandise store via a partner registration link. The business model centers on e-commerce and print-on-demand services, with a medium-sized market presence supported by the parent company Spreadshirt. The domain is relatively new but consistent with the business timeline and geographic focus. Technically, the site uses basic HTML and CSS with embedded web fonts, but lacks advanced frameworks or CMS indicators. Performance and mobile optimization are basic but functional. No analytics or tracking scripts were detected, indicating minimal user data collection. SEO and accessibility features are present at a basic level. Security posture is moderate with DNSSEC enabled and domain status OK, but no visible security headers or HTTPS confirmation in the provided data. Privacy and cookie policies are absent, reducing compliance confidence. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data but lacks formal security policies and incident response information. The absence of privacy and cookie policies and contact details limits trust and compliance with GDPR. No WAF or blocking mechanisms were detected, and content is fully accessible. Overall, the site is safe with no adult or explicit content, targeting a general audience interested in merchandise sales. Recommendations include implementing HTTPS with strong TLS, adding security headers, publishing privacy and cookie policies, providing contact and incident response information, and establishing a vulnerability disclosure process to enhance security posture and compliance.

M

Create and sell with print on demand | Spreadshop

myspreadshop.co.uk

58

The website myspreadshop.co.uk serves as a partner landing page for Spreadshop, a print on demand merchandise platform. It targets individuals and small businesses interested in creating and selling custom merchandise online. The site is minimalistic, providing a call to action to open a merch shop via an affiliate link, and links to Spreadshirt's main sites for legal and company information. Technically, the site uses modern web fonts and responsive design but lacks advanced frameworks or CMS indications. Security posture is basic with no visible security headers or privacy policies, and no HTTPS status provided in the data. The domain is registered since 2021 with EuroDNS SA, consistent with the business age and purpose. Overall, the site is functional but minimal, with room for improvement in privacy, security, and contact transparency.