Security Directory

U

Union Investment

union-investment.com

66

Union Investment is a large, well-established asset management company focused on active and sustainable investment solutions for institutional investors. The company offers a broad range of asset classes and investment services, emphasizing sustainability and active management. Their website reflects a mature digital presence with modern web technologies, strong branding, and comprehensive content tailored to their target audience. The technical infrastructure is robust, leveraging web components, modular JavaScript, and advanced consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Union Investment's market position as a leading asset manager.

M

Messe München GmbH

exporeal.net

62

EXPO REAL is a leading international trade fair and conference for the real estate and investment industry, organized by Messe München GmbH. The website provides comprehensive information about the event, including ticketing, exhibitor services, conference programs, and visitor information. It targets professionals and stakeholders in the real estate sector, offering a platform for networking and industry insights. The technical infrastructure is modern, leveraging JavaScript modules, web components, and consent management tools like Usercentrics, ensuring compliance with GDPR and providing a good user experience across devices. Security posture is strong with HTTPS enforced, no visible vulnerabilities, and good privacy practices, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are found. Overall, the site is professional, trustworthy, and well-maintained, reflecting the stature of the EXPO REAL event in the European real estate market.

E

EB-SIM

eb-sim.de

59

EB-SIM is a German asset management company specializing in ethical and sustainable investments, with a strong focus on multi-asset strategies and renewable energy projects. The company positions itself as a leading player in the sustainable finance sector, leveraging its affiliation with the Evangelische Bank to underpin its Christian values and sustainability mission. The website is professionally designed, content-rich, and targets private investors, institutional investors, and financial advisors primarily in Germany and neighboring countries. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response disclosures are recommended. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate online presence.

H

Huan Qiu Guo Ji Shi Pin Tong Xun She You Xian Gong Si

amsp.link

49

The website amsp.link represents a media service platform operated by Huan Qiu Guo Ji Shi Pin Tong Xun She You Xian Gong Si, a Chinese organization. The platform focuses on providing global international video agency services including news exchange, special features, cooperation zones, and related multimedia services. The site targets media professionals and international audiences interested in multimedia content. The business is relatively new, founded in 2022, and operates primarily in Chinese with some English elements. The domain registration and website content are consistent, indicating legitimacy. Technically, the website uses modern JavaScript modules and likely the Vue.js framework, with CSS styling and Swiper.js for interactive elements. Hosting is provided by DNSPod, a Chinese registrar and hosting provider. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are basic but present. However, there is room for improvement in technical implementation and user experience. From a security perspective, the website lacks visible security headers, published security policies, and incident response information. DNSSEC is not enabled, and no cookie consent mechanism is present, which impacts privacy compliance. The SSL configuration details are not fully available, but HTTPS is implied. The site does not expose sensitive data or show signs of vulnerabilities in the provided content. Overall security posture is moderate but could be enhanced with standard best practices. The overall risk assessment suggests a legitimate media service platform with moderate technical maturity and some gaps in security and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, and adding cookie consent mechanisms to improve compliance and trust.

Süwag is a large regional energy company in Germany specializing in electricity, gas, green energy, and water services. The company operates through multiple subsidiaries including Süwag Vertrieb AG & Co. KG and Syna GmbH, focusing on sustainable energy solutions and regional partnerships. Their website demonstrates a mature digital presence with modern technologies such as Adobe Experience Manager and Usercentrics for consent management. The site is well-designed, mobile-optimized, and provides comprehensive information for customers, partners, and job seekers. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable, which slightly reduces domain trustworthiness but the professional presentation and certifications support legitimacy. Overall, Süwag presents as a credible and established energy provider with a strong regional focus.

H

Hello, type friends!

hellotypefriends.com

58

Hello, type friends! is a niche podcast focused on typography and creative arts, hosted by Elliot Jay Stocks. The website serves as a landing page for the podcast, providing episode access and social media links. The business model centers on content creation and distribution within a specialized creative community. Technically, the site uses modern JavaScript modules and Vue.js framework, hosted on Simplecast with Cloudflare DNS and registrar services. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with a cookie consent banner but no privacy policy or terms of service pages. Contact information is not provided, limiting direct communication channels. Overall, the site is professional and trustworthy for its niche audience but would benefit from enhanced compliance and security documentation.

R

reiswerk

travelcollege.nl

55

The website identity.onlineacademy.nl with the company parameter 'reiswerk' appears to be a minimalistic web presence focused on identity or authentication services, as suggested by the page title 'Identity Governor'. The site lacks substantive content, business descriptions, or visible contact information, which limits the ability to fully assess the business model or market position. Technically, the site uses modern JavaScript modules and integrates Google reCAPTCHA v3 for bot protection, indicating some level of security awareness. However, the absence of privacy policies, cookie consent mechanisms, and security headers suggests immature compliance and security posture. The domain's WHOIS data is privacy protected, which is common but reduces transparency and trust. Overall, the site is accessible without WAF blocking but provides minimal information and limited trust signals.

A

Atlas Obscura

atlasobscura.com

73

Atlas Obscura is a specialized travel media company offering a definitive guidebook and rich content focused on unique and wondrous travel destinations worldwide. The website serves a niche audience of curious explorers and cultural tourists, providing travel tips, articles, and event listings. The company positions itself as a leader in the niche travel guidebook market with a strong brand and consistent professional content. Technically, the website employs a modern tech stack including JavaScript ES modules, Tailwind CSS, and various analytics and marketing tools such as Google Tag Manager, Hotjar, and Klaviyo. Hosting is inferred to be on Amazon AWS with assets served via S3. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, security headers present, and cookie consent mechanisms implemented. However, explicit security policies and incident response contacts are not found, and WHOIS data is unavailable, limiting full trust verification. Overall, the website is professional, secure, and compliant with privacy regulations, suitable for a general audience.

A

a11y.info

a11y.info

67

a11y.info operates as a niche Mastodon social networking server dedicated to the accessibility and inclusion community. Founded in 2018 and hosted under a US-based domain, it provides an open platform for users interested in digital accessibility topics. The website serves as a community hub with Mastodon integration, offering trending posts and user engagement features. The platform is small in scale with approximately 20 active users, reflecting a focused and specialized audience. Technically, the site leverages Mastodon version 4.4.1 with modern JavaScript frameworks and is hosted with reputable DNS and registrar services. The site demonstrates good mobile optimization and accessibility features, aligning well with its mission. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are absent, indicating room for improvement. Privacy compliance is partial; a privacy policy exists but cookie consent and terms of service are missing. No direct contact information or incident response details are provided, which may limit user trust and compliance readiness. Overall, the site is professionally presented with consistent branding and trustworthy domain registration, but could enhance security and privacy practices to better serve its community and regulatory requirements.

K

Keuze.nl

keuze.nl

62

Keuze.nl is a Dutch independent energy comparison platform that helps consumers find the cheapest energy tariffs without sponsored listings. The website is well-designed with modern frontend technologies, optimized for mobile, and provides a good user experience. It integrates Google Analytics 4 and uses a cookie consent mechanism to comply with privacy regulations. However, explicit privacy policies and terms of service are not found, which is a compliance gap. Security posture is strong with HTTPS and some security headers, but lacks published incident response or vulnerability disclosure information. Overall, the site is legitimate, trustworthy, and focused on the Dutch energy market.

B

BonusGuru

bonusguru.net

66

BonusGuru.net is an affiliate marketing platform specializing in online casino bonuses and reviews for 2025. It targets online casino players seeking trusted and licensed casinos with fair play and secure payments. The website offers expert reviews, bonus listings, and detailed casino information to help users make informed decisions. Technically, the site is built on WordPress with modern technologies including Laravel Livewire and Bootstrap, optimized for mobile and SEO. Security posture is good with HTTPS and secure forms, but lacks explicit security headers and published privacy or cookie policies. The WHOIS data is unavailable, indicating possible new registration or privacy protection, which slightly reduces trust. Overall, the site is professional and content-rich but would benefit from improved transparency and privacy compliance.

Q

QBet.com

qbet.com

44

The website qbet.com appears to be an online gambling platform offering casino games, cashback, and tournaments targeted at adult users. However, the actual website content is inaccessible, showing only a loading spinner, which suggests the presence of a web application firewall or security challenge blocking full access. The WHOIS data for the domain is unavailable, indicating the domain may be unregistered, privacy protected, or otherwise obscured, which raises concerns about legitimacy and transparency. The site uses modern frontend technologies such as React and Material-UI but lacks visible content, privacy policies, or contact information, limiting trust and compliance assessment. Overall, the security posture is weak due to missing HTTPS and security headers information, and no privacy or cookie policies are detected.

EVENIUM is a French company specializing in event management solutions, targeting event organizers and corporate clients. The company has been established since 2014 and operates primarily in the technology sector focused on event software and services. The website content is minimal and primarily JavaScript-driven, with no visible textual content or metadata to provide detailed information about the business or its offerings. The technical infrastructure appears modern with usage of ES modules and hosting on AWS, but lacks visible SEO, accessibility, and performance indicators. Security posture is weak due to absence of security headers, DNSSEC, and visible privacy or cookie policies. No contact or incident response information is provided, limiting transparency and user trust. The domain registration data is consistent and legitimate, supporting the business credibility despite the minimal web presence. Overall, the website requires significant improvements in content, security, and compliance to better serve its audience and enhance trust.

S

Spaceship, Inc.

mastodon.uno

70

Mastodon Uno Social - Italia is a prominent Mastodon instance serving the Italian Mastodon community with a focus on privacy and Open Source values. It is operated by Spaceship, Inc. and hosts a large user base of approximately 77,000 users, positioning itself as the largest Italian Mastodon node. The platform offers federated social networking services leveraging the Mastodon open-source software, providing a decentralized social media experience without ads or algorithms. The website is well-structured, mobile-optimized, and uses modern web technologies including React and ES modules, with hosting infrastructure supported by Cloudflare DNS services. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and GDPR explicit indicators. No direct company contact information or incident response policies are published on the site. Overall, the site is trustworthy and professional, serving a niche community with a clear mission and stable technical foundation.

M

Mapstodon.Space

mapstodon.space

65

Mapstodon.Space is a niche Mastodon instance dedicated to the cartography and geospatial community, providing a federated social networking platform based on Mastodon version 4.4.1. The platform targets enthusiasts and professionals interested in mapping and geospatial topics, fostering community engagement through user-generated content. The website is hosted in France and operated by an identified administrator, reflecting a small but active user base. Technically, the site leverages modern web technologies including React and Rails, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are absent. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site demonstrates a consistent brand and trustworthy domain registration, but could improve in security and compliance transparency.

E

EU OS

eu-os.eu

59

EU OS is a community-driven Proof-of-Concept project aimed at creating a common free operating system tailored for the EU public sector. It leverages Fedora Linux with KDE Plasma desktop and focuses on providing a shared, secure, and sovereign OS base that meets EU public sector requirements. The project is positioned as a niche initiative promoting digital sovereignty and open source adoption within government entities. Technically, the website is built using modern web technologies such as VitePress and ES modules, delivering fast performance and good mobile optimization. The security posture is moderate, with HTTPS usage implied but lacking explicit security headers and published security policies. Privacy and cookie policies are absent, and no contact information is provided, which impacts compliance and trust. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.

C

Canonical, Ltd.

ubuntu.social

64

Ubuntu.social is an official Mastodon social networking instance hosted and managed by Canonical, Ltd., targeting official Ubuntu community members. The platform facilitates decentralized social interaction within the fediverse, leveraging the open-source Mastodon software. The website presents a professional and consistent brand aligned with Canonical's identity, serving a niche audience of Ubuntu users and enthusiasts. Technically, the site employs modern web technologies including React and ES modules, with a mobile-optimized and accessible design. The hosting infrastructure is managed by Canonical, with domain registration details confirming legitimacy and consistency with the business entity. Security posture is moderate; while domain status protections are in place, DNSSEC is not enabled and no explicit security headers were detected in the provided data. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the site is trustworthy and functional but could improve in security and privacy transparency.

P

Privacy service provided by Withheld for Privacy ehf

kde.social

64

kde.social is an independent Mastodon server instance launched in 2023, providing a decentralized social networking platform focused on privacy, ethical design, and user data ownership. It operates within the Mastodon fediverse, targeting users who seek an ad-free and surveillance-free social media experience. The platform currently has a small user base and offers standard Mastodon features such as timelines and trending posts, although the explore page currently shows no trending content. Technically, the website is built on Mastodon version 4.4.1 using modern web technologies including React and ES modules. The site is moderately optimized for mobile devices and provides basic accessibility features. Hosting details are not explicit, but the domain uses HTTPS with a good SSL configuration. However, DNSSEC is not enabled, and no security headers are present in the HTML, indicating room for improvement in security hardening. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks advanced DNS security and HTTP security headers. There is no visible security policy, incident response contact, or vulnerability disclosure information. Privacy compliance is limited; a basic privacy policy exists but no cookie consent mechanism or terms of service are found. No contact information such as emails or phone numbers is provided, which may impact user trust and support. Overall, kde.social presents as a legitimate, privacy-focused Mastodon instance with a small but niche user base. The site is functional and uses modern technologies but would benefit from enhanced security practices, improved privacy compliance, and clearer business contact information to increase trust and compliance with regulations.

D

discuss.systems

discuss.systems

73

discuss.systems is a specialized Mastodon instance dedicated to fostering discussion among researchers, academics, and professionals in the field of computer systems, including operating systems, distributed systems, networking, databases, and architecture. The platform operates as a decentralized social media server within the Fediverse, leveraging Mastodon version 4.4.1 technology. It serves a niche community with approximately 399 active users, emphasizing open and inclusive discourse. The website content is professional, well-structured, and targeted to its audience, with clear administration and contact details provided.

R

Red Hat

ansible.com

77

Red Hat is a leading enterprise open source software company, prominently offering the Ansible Automation Platform, which integrates multiple upstream projects into a secure, enterprise-grade automation solution. The website serves as a collaborative hub for users, partners, and vendors to access documentation, community forums, training, and automation content. The site is well-branded, professionally designed, and targets IT professionals and organizations seeking automation solutions. Technically, the site is built on Drupal 10, uses modern JavaScript modules, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSP nonces, and consent mechanisms, though explicit security policies and incident response contacts are not present on this page. WHOIS data is unavailable from VeriSign, likely due to privacy or registry policies, but the domain is a well-known enterprise domain with high trust. Overall, the site demonstrates high professionalism, technical maturity, and business credibility.

X

XOXO Zone

xoxo.zone

67

XOXO Zone operates as a community-run Mastodon instance primarily serving attendees and speakers of the XOXO Festival, a cultural event held in Portland, Oregon. The platform facilitates social networking within the fediverse, leveraging the open-source Mastodon software. The website presents a niche social media service with a focused target audience, maintaining a small but active user base. The business model centers on community engagement rather than commercial monetization. Technically, the website is built on Mastodon version 4.4.1, utilizing React and modern JavaScript modules, hosted on DigitalOcean infrastructure with CDN support for media assets. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The technical stack is modern and appropriate for a social networking platform of this scale. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and several recommended security headers. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service published. Contact information is limited to Mastodon user profiles and sign-in forms, with no direct company emails or phone numbers. Overall, XOXO Zone is a trustworthy and professionally maintained community platform with a clear niche focus. Security posture is adequate but could be improved with enhanced policies and technical controls. Privacy compliance requires attention to meet GDPR standards fully. Strategic recommendations include enabling DNSSEC, publishing terms of service, implementing cookie consent, and enhancing security headers to strengthen trust and compliance.

P

Polarstern Energie

polarstern-energie.de

57

Polarstern Energie operates as a renewable energy provider in Germany, offering 100% clean electricity and gas sourced sustainably. The company positions itself as a committed player in the global energy transition, targeting environmentally conscious consumers. Their website reflects a professional and consistent brand image with clear messaging about their services and mission. Technically, the site is built using modern frameworks such as Nuxt.js, hosted on Azure DNS infrastructure, and integrates third-party tools like Cookiebot for consent management and Zoho SalesIQ for customer engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and active consent mechanisms. Overall, the website demonstrates a mature digital presence suitable for a medium-sized energy company.

H

Headliner

headliner.cz

53

Headliner is a Czech music magazine and media platform providing news, interviews, podcasts, and cultural content primarily targeting Czech-speaking music enthusiasts. The website offers a digital magazine, podcasts, newsletters, and music news articles, positioning itself as a niche media outlet in the Czech Republic. The presence of official logos such as the Ministry of Culture and OSA indicates recognized legitimacy within the cultural sector. Technically, the website employs modern web technologies including responsive images, JavaScript ES modules, and analytics tools like Matomo and Google Analytics. The site is mobile-optimized with good SEO and basic accessibility features. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is generally good with HTTPS enforced and cookie consent implemented, but improvements are recommended in security headers and vulnerability disclosure mechanisms. The absence of WHOIS data limits domain registration trust verification, though the website content and external trust signals support its legitimacy. Overall, the website is professionally designed, content-rich, and compliant with privacy regulations, making it a trustworthy source for music and cultural content in its market segment.

G

Gastia

gastia.ch

66

Gastia is a specialized trade fair and experiential event organizer focused on the hospitality industry in Switzerland, particularly targeting hoteliers, restaurateurs, and catering professionals. The website promotes the upcoming event scheduled for March 2026, highlighting its role as a regional leader in hospitality trade fairs with a strong emphasis on quality, regionality, and knowledge transfer. The business operates under the parent company OLMA Messen St. Gallen, which lends credibility and stability to its operations. The site provides rich multimedia content, including videos, photo galleries, and news articles, to engage its professional audience. Technically, the website employs modern web technologies such as ES modules, Bootstrap for UI components, Splide.js for carousels, and Usercentrics for GDPR-compliant cookie consent management. Google Analytics is used for visitor tracking, and the site is served over HTTPS with good SSL configuration. The site is mobile-optimized with a clear navigation structure and good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a reputable cookie consent platform, but lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. WHOIS data confirms the domain's legitimacy with consistent registrant information matching the business profile. Overall, Gastia's website is professional, trustworthy, and well-suited for its target audience. It demonstrates a solid digital presence with moderate tracking and compliance measures. Strategic improvements in security transparency and accessibility could further enhance its posture and user trust.

K

Kalas

kalas.cz

58

Kalas.cz is a Czech-based e-commerce website specializing in cycling apparel and sportswear for men, women, and children. The company boasts over 30 years of experience in manufacturing quality cycling clothing, positioning itself as a reputable brand within the Czech and Slovak markets. The website offers a broad range of products including jerseys, shorts, vests, and accessories, along with options for custom designs. The business model focuses on direct online sales supported by a professional and user-friendly website. Technically, the website employs modern web technologies such as JavaScript ES modules, Google Tag Manager, and SmartEmailing for marketing and analytics. The site is mobile-optimized with good SEO practices and a responsive design. However, some security best practices like explicit security headers and a published security policy are missing, which could be improved. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, indicating a baseline compliance with privacy regulations such as GDPR. The absence of WHOIS data for the domain is a concern, as it limits the ability to verify domain legitimacy and ownership, slightly reducing trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Kalas.cz presents as a professional and trustworthy e-commerce platform with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration information to bolster trust and compliance.

S

stoz werbeagentur ag

stoz.ch

59

Stoz Werbeagentur AG is a Swiss-based fullservice advertising agency specializing in creative print and digital marketing solutions. Established in 1987 and operated as a family business, it serves a diverse clientele ranging from SMEs to international companies. The website reflects a strong brand identity emphasizing creativity, quality, and emotional engagement. Technically, the site uses modern web technologies including Alpine.js and Google Tag Manager, with good mobile optimization and fast performance. Security posture is solid with HTTPS and cookie consent implemented, though lacking explicit security headers and public security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Hamilton Company

hamiltoncompany.com

69

Hamilton Company is a well-established provider of scientific instrumentation and engineered solutions, specializing in automated liquid handling, integrated devices, temperature control, and related services. With over 70 years of experience, the company targets research laboratories, production facilities, and scientific innovators globally. The website reflects a mature digital presence with comprehensive product navigation and service offerings. Technically, the site employs modern JavaScript frameworks such as Alpine.js, integrates HubSpot marketing and analytics tools, and uses a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and a vulnerability disclosure page suggests room for improvement. The lack of WHOIS data is a notable anomaly, potentially due to privacy protection or registry issues, which slightly impacts trustworthiness assessments. Overall, the website is professional, user-friendly, and compliant with privacy standards, supporting Hamilton Company's market position as a trusted leader in scientific automation solutions.

S

Sazka

sazkabet.cz

55

Sazka.cz is a leading Czech online gambling and lottery operator offering a wide range of sports betting and lottery products. The website provides extensive betting markets including live betting, supported by modern web technologies and integrations with analytics and telemetry services. The company targets adult sports bettors primarily in the Czech Republic, offering attractive bonuses and a mobile app to enhance user engagement. The website demonstrates a high level of digital maturity with professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS, secure third-party integrations, and cookie consent mechanisms, although some HTTP security headers could be improved. The absence of public WHOIS data suggests privacy protection typical for gambling businesses, which does not detract from the site's legitimacy. Overall, Sazka.cz presents a trustworthy and professional online gambling platform with a solid technical foundation.

F

Fontdue

fontdue.com

59

Fontdue operates as a specialized ecommerce platform tailored for independent type foundries, enabling font designers and publishers to build branded websites and sell fonts directly to customers. The platform emphasizes flexible licensing, white-label operations, and developer-friendly tools such as a GraphQL API and React components. Serving over 100 foundries since 2018, Fontdue occupies a niche market with a focused business model supported by subscription and enterprise service offerings. Technically, the website leverages modern frameworks including Phoenix LiveView and integrates Stripe for secure payment processing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional and consistent brand presentation. Security posture is moderate; HTTPS is used and Stripe integration ensures payment security, but the absence of security headers, cookie consent, and published security policies indicates room for improvement. The lack of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, Fontdue presents a credible and professional service with a strong technical foundation but should address compliance and transparency gaps to enhance security and trust.

B

BI Norwegian Business School

bi.edu

71

BI Norwegian Business School is a leading educational institution in Norway, recognized as the country's first triple-accredited business school. The website offers comprehensive information about their bachelor, master, executive education, and PhD programs, alongside research initiatives and corporate collaborations. The institution targets students, researchers, and business professionals seeking high-quality business education and research. Technically, the website employs modern JavaScript modules, integrates Google Tag Manager and Microsoft Application Insights for analytics and monitoring, and uses OneTrust for GDPR-compliant cookie consent management. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, uses standard security headers, and manages user consent effectively. However, the absence of WHOIS domain registration data and explicit security or incident response policies slightly reduce trustworthiness. Overall, the website is professional, secure, and compliant, with minor areas for improvement in transparency and contact information.

Ö

Ötztal

oetztal-hub.com

74

Ötztal.com is a professionally designed tourism website promoting the Ötztal valley in Austria as a year-round holiday destination. It offers comprehensive information about summer and winter activities, targeting tourists and holidaymakers. The site uses modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The presence of detailed cookie consent mechanisms indicates a good level of privacy awareness. However, the absence of explicit privacy policy and terms of service pages in the analyzed content is a gap. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but security headers are not detected and no incident response or security policy information is found. Overall, the site is safe and trustworthy for general audiences, but domain registration status should be verified for full trust.

E

EUCS SSO

eucs.online

46

The EUCS SSO website serves as a Single Sign-On authentication portal primarily targeting users of EUCS online services. It provides a straightforward login interface with email and password fields, built using Angular 14.2.2. The site is designed with a clean and consistent branding style, localized in Czech, and focuses solely on authentication without additional business or contact information. Technically, the site uses modern web technologies and is mobile optimized, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or CSRF protections. Privacy and cookie policies are absent, limiting compliance confidence. Overall, the site is functional but minimalistic, suitable for internal or partner use rather than public-facing marketing.

D

Data Protected

jihlavsko.online

67

jihlavsko.online is a Czech regional online media platform providing reliable and up-to-date news, events, and information focused on the Jihlava area. The website serves local residents and visitors with news articles, event calendars, advertising opportunities, and premium content. It operates a newsletter subscription to keep users informed weekly. The business model centers on local news dissemination combined with advertising revenue from partners and premium content offerings. The site is relatively new, founded in 2025, and targets a small but engaged regional audience.

A

Allgemeiner Deutscher Fahrrad-Club e. V.

radvolution.de

61

The Allgemeiner Deutscher Fahrrad-Club e. V. (ADFC) operates the Radvolution campaign website to advocate for bicycle-friendly transportation policies in Germany. As the largest bicycle interest association globally with over 240,000 members, the organization focuses on promoting sustainable mobility, safer cycling infrastructure, and environmental awareness. The website serves as an informational and engagement platform targeting cyclists, environmental advocates, municipalities, and policymakers. It offers newsletter subscriptions, campaign information, and links to social media channels. Technically, the website is built using modern JavaScript frameworks (Svelte) and integrates privacy-conscious analytics (Matomo) hosted on German servers. The newsletter service is provided by CleverReach, a reputable German marketing platform. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in cookie consent and security headers are recommended. From a security perspective, the site enforces HTTPS and anonymizes user IPs in analytics, demonstrating good privacy practices aligned with GDPR. However, it lacks visible security headers and published incident response or vulnerability disclosure policies, which could be enhanced to improve trust and resilience. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's mission effectively. Strategic improvements in cookie consent and security transparency would further strengthen its security posture and user trust.

D

DREWAG - Stadtwerke Dresden GmbH

drewag.de

60

DREWAG - Stadtwerke Dresden GmbH is a regional energy utility provider based in Dresden, Germany, offering electricity, natural gas, district heating, and drinking water services primarily to residential and commercial customers. The company emphasizes customer satisfaction and provides multiple tariff options and online customer portals to facilitate service management. The website is professionally designed with consistent branding and clear navigation, targeting local customers with relevant energy solutions. Technically, the site is built on IBM WebSphere Portal with modern JavaScript modules and integrates Google Tag Manager for analytics and marketing purposes. Accessibility and mobile optimization are well addressed, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies could enhance the security maturity. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

V

VELUX Magyarország Kft.

velux.hu

66

VELUX Magyarország Kft. operates as a leading manufacturer and retailer of roof windows, skylights, sun tunnels, and shading solutions in Hungary. The company is part of the global VELUX Group, established in 1941, and holds a strong market position as a trusted brand for home improvement products. Their website offers comprehensive product information, consultation services, and supports both consumers and professionals with dedicated resources. Technically, the website is built on modern frameworks like Vue.js and Sitecore CMS, integrating advanced search and analytics tools, ensuring a responsive and user-friendly experience across devices. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, complemented by comprehensive privacy and legal documentation, including GDPR compliance and a whistleblower reporting channel. Overall, the site reflects a mature digital presence with high professionalism, trustworthiness, and alignment with business goals.

V

VELUX Danmark

velux.dk

58

VELUX Danmark is a well-established manufacturer and retailer specializing in roof windows, skylights, and related accessories. With over 80 years of history, the company holds a leading market position globally and offers a comprehensive range of products for both pitched and flat roofs, including remote-controlled solutions and sunshades. Their website reflects a mature digital presence with strong branding, professional design, and extensive customer support resources. Technically, the site leverages modern frameworks such as Vue.js and Sitecore CMS, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement and appropriate security headers, though there is room for improvement in public vulnerability disclosures. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness, though the absence of WHOIS data slightly impacts domain trust analysis.

V

VELUX

velux.hr

58

VELUX is a leading global manufacturer specializing in roof windows, flat roof windows, light tunnels, blinds, and external shutters. The company has a strong market position with a comprehensive product portfolio and professional services aimed at homeowners, architects, and construction professionals. The website is well-structured, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Vue.js and Sitecore CMS, with integrations like Google Tag Manager and Algolia for search functionality. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit cookie consent and security policy disclosures. Overall, the domain registration and WHOIS data align well with the brand's identity, supporting legitimacy and trustworthiness.

R

RustyBrick ®, Inc.

seroundtable.com

58

Search Engine Roundtable is a specialized media outlet operated by RustyBrick ®, Inc., providing news, updates, and community insights focused on search engine marketing and SEO. The website targets professionals and enthusiasts in the search marketing community, offering articles, video recaps, and subscription services. The business model is primarily advertising-supported content publication, with a strong presence in the niche market of search marketing news. Technically, the website employs modern analytics and tracking technologies including Google Analytics, Microsoft Clarity, and Snowplow Analytics, alongside Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and uses a custom or proprietary CMS. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, but lacks some security headers and a comprehensive privacy/cookie consent mechanism. No exposed sensitive data or vulnerabilities were detected in the HTML content. WHOIS data is unavailable, which slightly impacts trust assessment but the website's content and branding indicate an established and professional entity. Overall, the website is a reliable source for search marketing news with good technical and security practices, though improvements in privacy compliance and security headers are recommended to enhance trust and compliance.

C

Cesky volejbalovy svaz s.r.o.

volej.tv

56

VOLEJ.TV is a specialized Czech sports streaming platform operated by Cesky volejbalovy svaz s.r.o., focusing on live volleyball matches, statistics, and related content primarily for the Czech volleyball community. The platform offers a rich user experience with video previews, match schedules, and integration with official volleyball federation statistics, positioning itself as a niche leader in Czech volleyball media. Technically, the website employs modern JavaScript modules, video streaming libraries, and CDN hosting to deliver fast and responsive content optimized for desktop and mobile users. The use of Google Analytics indicates moderate user tracking, though privacy compliance could be improved with a cookie consent mechanism. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and DNSSEC are areas for enhancement. WHOIS data confirms the domain's legitimacy and alignment with the business identity. Overall, VOLEJ.TV is a professional and trustworthy platform with room for security and privacy improvements.

A

AutoScout24

autoscout24.bg

69

AutoScout24.bg is a leading European online marketplace specializing in new and used cars, offering over 2.5 million listings from dealers and private sellers across Europe. The platform provides a comprehensive and user-friendly experience for buyers and sellers, supporting multiple languages and localized content. Technically, the website employs modern web technologies including React, service workers, and integrates major analytics and advertising tools such as Google Tag Manager, Bing Ads, and Facebook Pixel. Security posture is strong with HTTPS enforcement, reCaptcha Enterprise integration, and consent management for GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with high-quality content and professional design, positioning it as a trustworthy and authoritative automotive marketplace in Bulgaria and Europe.

D

DB Fernverkehr AG

bahnundhotel.com

48

Bahn und Hotel is a German travel comparison portal specializing in train and hotel package deals, primarily targeting travelers interested in 1st class train travel within Germany and select European cities. The website is affiliated with DB Fernverkehr AG, a major player in the German transportation sector, and leverages official Deutsche Bahn branding and social media channels. The platform offers users an interactive search experience with date pickers, traveler selectors, and destination teasers, supporting a user-friendly booking process. Technically, the website employs modern web technologies including Laravel Livewire for reactive components, Alpine.js for frontend interactivity, and ES modules for JavaScript. Hosting and DNS are managed via Amazon Registrar, Inc., indicating a reliable infrastructure. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured content. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No explicit security or incident response policies are publicly available, and no vulnerability disclosure or security.txt files were found. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, Bahn und Hotel presents a professional and trustworthy online presence with a solid technical foundation and good business credibility. Security posture is adequate but could be improved by implementing DNSSEC, security headers, and explicit incident response information. Privacy compliance is good but would benefit from a visible cookie consent mechanism.

G

GetYourGuide

getyourguide.co.uk

77

GetYourGuide operates as a leading global online marketplace specializing in booking tours, attractions, and travel activities worldwide. The platform targets travelers and tourists seeking convenient access to local experiences, offering a broad range of services including sightseeing tours, excursions, and entry tickets. The website demonstrates a strong market position with consistent branding and a professional digital presence. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, and integrates advanced fraud prevention and consent management tools. The infrastructure is hosted on Cloudflare CDN, ensuring fast performance and robust security. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site uses HTTPS, Content Security Policy nonces, and integrates third-party security and monitoring services like Forter and Sentry. However, explicit privacy, cookie, and terms of service pages were not detected in the provided content, indicating potential gaps in privacy compliance visibility. The WHOIS data is missing, which limits domain legitimacy verification but the overall site quality and trust signals suggest a legitimate enterprise. Overall, the risk profile is moderate with recommendations to enhance privacy disclosures, publish security policies, and improve WHOIS transparency to strengthen trust and compliance.

E

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG

eurobaustoff-forum.de

51

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG operates a professional industry forum and networking platform focused on the construction retail sector in Germany. The website EUROBAUSTOFF FORUM serves as a hub for shareholders, suppliers, service providers, and representatives of the EUROBAUSTOFF central office to connect and stay informed about industry innovations and exclusive forum conditions. The business model centers on cooperation and service provision within the building materials trade, offering exhibitions, digital communication platforms, and educational opportunities to its members. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap 5, enhanced by Usercentrics for consent management and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. No blocking or WAF mechanisms were detected, indicating open accessibility. From a security perspective, the site uses HTTPS and consent management but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website presents a professional, trustworthy, and well-maintained digital presence aligned with the company's business objectives. Strategic improvements in security policy transparency and technical security headers would enhance the security posture further.

PolyPublisher Marketplace is a specialized platform associated with RiffReporter, targeting media publishers who require access to marketplace services. The website primarily serves as a login portal and access application point for publishers. The business operates within the media sector in Germany and appears to be a small-sized entity founded in 2020. Technically, the site uses modern JavaScript modules, Material-UI for UI components, and Matomo for analytics, hosted with Cloudflare DNS services. The website is mobile optimized with basic accessibility and SEO features but lacks comprehensive privacy and cookie policies. Security posture is moderate with clientTransferProhibited domain status but lacks DNSSEC and explicit security headers, which are recommended for improvement. Overall, the site is professional but minimalistic, focusing on core login functionality without extensive content or marketing features.

Literaturbüro in der Euregio Maas-Rhein e. V. is a small, non-profit cultural organization based in Aachen, Germany, dedicated to promoting literature and literary culture in the tri-border Euregio Maas-Rhein region. Founded in 1981, it organizes a variety of literary events, seminars, and projects aimed at authors and literature enthusiasts. The website is professionally designed using WordPress with Yoast SEO, providing rich content and clear navigation tailored to its target audience. The technical infrastructure is modern and well-maintained, hosted on rzone.de, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, though improvements could be made by adding security headers and cookie consent mechanisms. Overall, the site reflects a trustworthy and credible cultural institution with strong regional ties.

V

Voilà

getvoila.ai

71

Voilà is a technology company offering an AI-powered assistant designed to enhance productivity through writing, brainstorming, research, and communication tools. The platform integrates seamlessly across web browsers, desktop, and mobile devices, targeting individuals and teams who seek efficient AI assistance. The company enjoys a strong market position with high user ratings and endorsements from major industry players. Technically, the website employs modern frameworks and analytics tools, ensuring a fast, responsive, and accessible user experience. Security practices are solid with HTTPS and CSRF protections, though explicit security policies and headers could be improved. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

The website www.staremesto.sk serves as the official municipal portal for Bratislava-Staré Mesto, the central district of Slovakia's capital city. It provides comprehensive information and services related to local government administration, cultural heritage, public services, social assistance, urban planning, and community engagement. The site targets residents, visitors, and stakeholders interested in the district's governance and cultural activities. Technically, the website employs modern web technologies including Font Awesome icons, Facebook SDK for social integration, and responsive design principles ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and CSRF tokens in forms, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page, indicating GDPR awareness. Overall, the site is professional, trustworthy, and well-aligned with its role as a government information portal.

S

S-Communication Services GmbH

s-communication.de

61

S-Communication Services GmbH (S-Com) is a well-established creative agency affiliated with the Sparkassen-Finanzgruppe and parent company DSV-Gruppe. The company specializes in brand communication, digitalization, and enhancing customer experiences for Sparkassen financial institutions. With over 25 years of market experience and a large team of experts, S-Com positions itself as a key player in the financial services marketing and digital transformation sector. The website reflects a professional and consistent brand image, targeting Sparkassen and related stakeholders. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript modules, and integrates various marketing and analytics tools, including Google Tag Manager and TrustCommander for cookie consent. Security is well addressed with HTTPS and a Content-Security-Policy header, although additional security headers could enhance protection. Privacy compliance is strong, with clear policies and consent mechanisms in place. However, explicit contact information and security incident response details are not publicly available on the homepage. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

O

Obec Kvetoslavov

obeckvetoslavov.sk

64

Obec Kvetoslavov operates an official municipal website serving the local community in Slovakia. The site provides residents and visitors with essential information about the municipality, including news, public services, contact details, event calendars, and access to municipal forms. The website also promotes mobile applications for Android and iOS, enhancing accessibility and engagement. The platform is built on a modern CMS tailored for municipalities, featuring responsive design and multilingual support. Technically, the site employs standard web technologies such as Google Analytics, reCAPTCHA, and Facebook SDK, ensuring user interaction tracking and security against bots. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy page, reflecting adherence to GDPR requirements. Security posture is solid with HTTPS enforced and secure form handling, though some HTTP security headers are not explicitly detected. Overall, the website is a trustworthy and professional digital presence for the local government, with no signs of malicious activity or content safety concerns.