Security Directory

H

Hessischer Rundfunk

hr.de

63

Hessischer Rundfunk (hr) is the official public broadcasting institution for the German state of Hessen and a founding member of the ARD consortium. The website hr.de serves as a comprehensive portal for news, cultural programming, radio and television services, and public information. It targets the general public in Hessen and Germany, offering a wide range of media content including live streams, press releases, event information, and career opportunities. The business model is publicly funded broadcasting, emphasizing transparency and public service.

F

Freie Sachverständigenbüro-Kooperation Sauerbrey GmbH + Peter Schulze

sv-schadenmanagement.de

55

Freie Sachverständigenbüro-Kooperation Sauerbrey GmbH + Peter Schulze is a well-established German company specializing in expert appraisals and assessments for vehicles and real estate. With over 35 years of experience, they serve clients primarily in Ulm and surrounding regions, offering services such as accident damage reports, oldtimer valuations, building damage assessments, and technical consulting. Their business model focuses on providing on-site expert evaluations for both private and commercial customers. The website reflects a professional and trustworthy presence with multiple physical locations and a free hotline for customer contact. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics with IP anonymization, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though it appears to use a custom CMS. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and integrates privacy-compliant analytics and consent mechanisms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data confirms domain legitimacy consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic enhancements in security policy transparency and technical security headers would further strengthen their security posture.

K

KALORIMETA GmbH

kalo.de

67

KALORIMETA GmbH operates a professional website focused on providing smart energy solutions and heating cost accounting services primarily for residential properties in Germany. The company positions itself as a partner for the smart energy transition in residential real estate, offering services such as heating cost accounting, smart thermostat control, and smoke detector services. The website is well-structured, content-rich, and targets landlords, residents, and corporate clients. The presence of a parent company, Noventic, is clearly indicated, enhancing business credibility. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and uses Cloudflare for DNS and CDN services. It integrates advanced consent management via Usercentrics and analytics through eTracker and Google Tag Manager, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. From a security perspective, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, which could be improved. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, indicating a strong security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively communicates its business offerings and maintains a good balance between user experience and security. Strategic recommendations include publishing explicit security policies and incident response contacts to further enhance trust and compliance.

Doser + Partner Baugesellschaft mbH is a well-established real estate company based in Konstanz, Germany, with over 30 years of experience in project development, new construction, renovation, and property rental. The company operates through multiple subsidiaries specializing in different real estate sectors and emphasizes local craftsmanship and customer-centric project planning. The website reflects a professional and consistent brand image with clear contact information and a focus on regional real estate services. Technically, the site uses a range of common web technologies including jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and email obfuscation, though security headers and incident response details could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. WHOIS data is privacy protected, which is typical for European domains, and does not raise immediate trust concerns. Overall, the website and business present a trustworthy and professional front with room for technical and security enhancements.

V

Versicherungskammer Bayern

vkb.de

65

Versicherungskammer Bayern is a large regional insurance provider in Germany offering a wide range of insurance products including auto, home, liability, health, travel, life, and retirement insurance. The website targets private customers, families, professionals, farmers, companies, and municipal clients, providing comprehensive product information and multiple online service portals. The company emphasizes customer service with online claims reporting and contract management features. Technically, the website uses modern web technologies such as jQuery, Modernizr, and a consent management platform (Usercentrics), built on a CMS framework (OEVD CMS) with responsive design and accessibility considerations. Security posture is good with HTTPS enforced and sandboxed iframes, though some security headers could be improved. Privacy compliance is supported by a cookie consent mechanism but lacks explicit privacy policy and terms of service links in the provided content. No WAF or blocking mechanisms were detected, and the domain WHOIS data is limited but consistent with a legitimate business. Overall, the website is professional, trustworthy, and well-structured, suitable for its insurance business model.

I

Irish Rugby Football Union

irishrugby.ie

54

The Irish Rugby Football Union operates the official website for Irish rugby, providing comprehensive coverage of Ireland's rugby teams, provincial games, and community rugby activities. The site serves a large audience of rugby fans and stakeholders in Ireland, offering news, fixtures, ticketing, and merchandise services. The organization is well-established with a domain age dating back to 2001, reflecting its longstanding presence in the sports sector. Technically, the website leverages a modern technology stack including WordPress CMS, Bootstrap, Vue.js, and various JavaScript libraries to deliver a responsive and engaging user experience. Hosting and content delivery utilize Gandi as registrar and Cloudfront CDN for media assets, ensuring reliable performance. SEO and mobile optimization are well addressed, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy or cookie policies were detected in the provided content, indicating potential compliance gaps with GDPR and related regulations. Social media presence is strong, supporting community engagement. Overall, the website is professional and trustworthy with good business credibility. However, improvements in privacy compliance and security hardening are advised to mitigate risks and enhance user trust.

B

Bankgirot

bankgirot.se

71

Bankgirot is a key Swedish financial infrastructure provider specializing in payment services including clearing, invoicing, and direct debit solutions. The company serves businesses and organizations in Sweden, offering a broad portfolio of payment-related services. The website reflects a mature and professional organization with a clear focus on supporting Swedish payment infrastructure and customer self-service. The presence of job listings and annual reports indicates an active and transparent business. Technically, the website uses modern JavaScript libraries and analytics tools, with a cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS and secure forms, though some security headers and explicit policies could be improved. WHOIS data extraction failed due to querying a subdomain, but metadata and content suggest a legitimate and established entity. Overall, the site is well-designed, trustworthy, and compliant with privacy regulations.

The website at site.neoassist.com currently serves a 403 Forbidden error page indicating that the content is either non-existent or under construction. There is no accessible business information, contact details, or policies available on the site. The WHOIS lookup failed to return any registration data for the domain, suggesting it may be unregistered or a subdomain without independent registration. Technically, the site uses basic HTML, CSS, and JavaScript with Cloudflare Insights for analytics, hosted by Locaweb. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. Overall, the site is inaccessible for meaningful content or business analysis, resulting in a low trust and legitimacy score.

BerufsbildungPlus.ch is a Swiss government-backed platform operated by the Staatssekretariat für Bildung, Forschung und Innovation (SBFI) to promote vocational education and training for adults and youth. The website serves as an informational and community hub, providing resources, news, and engagement opportunities related to apprenticeships and vocational pathways in Switzerland. It holds a strong market position as an official government initiative with clear branding and trust signals. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and the Foundation framework, with Matomo analytics hosted on a Swiss domain, reflecting a privacy-conscious approach. The site is mobile optimized and well-structured, though some accessibility features could be improved. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security policies or incident response information. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve compliance and security posture.

C

Citronio

citronio.gr

42

Citronio is a small Greek business specializing in communication applications and design services. Their website presents a professional image with a focus on delivering comprehensive communication products ranging from printed materials to electronic communication solutions. The target audience appears to be business clients seeking creative and modern communication solutions. Technically, the website is built on Drupal 8 with a modern front-end stack including jQuery, Bootstrap, and various UI libraries, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is used but no advanced security headers or policies are evident. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly listed, limiting direct communication channels. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

J

John Will Kommunikation

will-kommunikation.de

39

John Will Kommunikation is a small, experienced communication consultancy based in Germany, specializing in tailored communication strategies for brands, markets, and people. With over 25 years of experience, the company offers a range of services including media relations, crisis communication, media training, and social media management. The website reflects a professional and consistent brand image, targeting corporate clients across various sectors in the German-speaking region. Technically, the site is built on WordPress with common plugins and libraries, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

J

JP/Politikens Hus A/S

jppol.dk

58

JP/Politikens Hus A/S is a major Danish media house established in 2003, operating multiple news and publishing brands that reach approximately 3 million Danes monthly. The company holds a strong market position with about 100 million visits per month, offering news media, publishing, and niche media services. The website reflects a professional and consistent brand image targeting the Danish general public and media consumers. Technically, the site is built on WordPress using modern libraries such as jQuery and Modernizr, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with minor gaps in security and privacy transparency.

U

University of Fribourg

unifr.ch

56

The University of Fribourg is a well-established public educational institution founded in 1889, offering a broad range of academic programs including Bachelor, Master, and Doctorate degrees. It serves a diverse audience including students, researchers, and employees, with a strong regional and international presence. The website reflects the university's bilingual and multicultural identity, providing comprehensive information about studies, research, campus life, and support services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and various analytics tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.

b-on is a Portuguese digital knowledge platform operated by the Fundação para a Ciência e a Tecnologia (FCT) and developed by FCCN. It provides access to scientific journals, e-books, and other academic resources primarily targeting students, researchers, health professionals, and publishers within Portugal. The platform is positioned as a key national resource for academic content access and open access initiatives. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no cookie consent banner detected and limited explicit GDPR indicators. Overall, the website is trustworthy and professionally maintained, with strong government and research institution affiliations.

F

Fritz Reuter und Sohn

reuterundsohn.de

56

Fritz Reuter und Sohn is a well-established local painting and renovation company based in Kassel, Germany, with a history spanning over 100 years. The company offers a wide range of interior and exterior painting services, including specialized offerings such as Feng Shui color consulting and mold remediation. Their target audience includes both residential and commercial customers in Kassel and surrounding areas. The website reflects a professional and consistent brand image, supported by active social media channels and modern web technologies.

M

MyCCI

mycci.ch

65

MyCCI is a regional member portal serving multiple Latin Swiss chambers of commerce, providing centralized access to chamber services and information. The website targets members of these chambers and acts as a gateway to individual chamber portals. The business model focuses on membership facilitation and information dissemination within the regional commerce ecosystem. Technically, the site uses modern JavaScript libraries such as jQuery and Kendo UI within an ASP.NET MVC framework, delivering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS assumed but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No contact information or incident response details are provided, limiting transparency. Overall, the site is functional and trustworthy but could improve in privacy compliance and security best practices.

A

Arbeiter-Samariter-Bund Deutschland e. V.

asb.de

66

Arbeiter-Samariter-Bund Deutschland e. V. (ASB) is a well-established non-profit welfare and emergency aid organization in Germany. The organization provides a wide range of social services including care, child and youth services, help for people with disabilities, rescue services, disaster protection, first aid training, home emergency call services, international aid, and volunteer engagement. ASB holds a strong market position as a traditional yet modern welfare organization with a large operational size and a clear focus on serving the general public in Germany. The website reflects this with comprehensive content, consistent branding, and clear navigation.

WNG SA is a specialized digital communication and marketing agency based in Lausanne, Switzerland, targeting institutional clients in the French-speaking region of Switzerland. The company offers consulting, design, technology implementation, and marketing strategy services, positioning itself as a trusted partner for institutional actors. The website reflects a professional and consistent brand image with strong client references and certifications. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement and basic security headers, although there is room for improvement in explicit security policies and incident response documentation. Privacy compliance is supported by a cookie consent mechanism, but a dedicated privacy policy page is not clearly found. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

A

Associazione Luca Coscioni

formyrights.eu

40

The website www.formyrights.eu represents a non-profit advocacy initiative led by Associazione Luca Coscioni, focused on promoting respect for the rule of law within the European Union through a European Citizens' Initiative. The platform facilitates citizen engagement by providing information, partner support, and petition signing capabilities. The target audience includes EU citizens, human rights organizations, and civil rights advocates. The business model relies on donations and partnerships, positioning itself as a niche player in the government and non-profit sector. Technically, the website is built on ASP.NET WebForms with modern front-end libraries such as Bootstrap, jQuery, and FontAwesome. It employs Google Analytics for visitor tracking and uses responsive design techniques for mobile optimization. While the site is functional and well-structured, it lacks some advanced security headers and accessibility features, which could be improved to enhance security and user experience. From a security perspective, the site uses HTTPS and implements basic form validation, but no advanced security policies or incident response contacts are visible. The WHOIS data is unavailable due to EURid privacy policies, which is typical for .eu domains, but the website provides consistent contact information and partner references that support its legitimacy. Privacy and cookie policies are present with consent mechanisms, indicating a basic level of GDPR compliance. Overall, the website is trustworthy and professionally presented, with a clear mission and active engagement channels. However, improvements in security headers, incident response transparency, and accessibility would strengthen its security posture and compliance standing.

R

Riot Games

riotgames.com

70

Riot Games is a leading global developer and publisher of popular video games such as League of Legends and VALORANT, with a strong presence in esports and digital entertainment. The company operates a professional and well-branded website that serves gamers and esports enthusiasts worldwide. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, Google Tag Manager for analytics, and Osano for consent management, ensuring a performant and privacy-conscious user experience. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not prominently published. Overall, the website reflects a mature digital presence aligned with industry best practices, supporting Riot Games' market position and business model.

H

Hugentobler & Bühler AG für Treuhand und Unternehmensberatung

hubtreuhand.ch

59

Hugentobler & Bühler AG is a Swiss-based medium-sized company specializing in fiduciary and business consulting services, including financial accounting, tax consulting, corporate consulting, succession planning, financial management, and personnel administration. With over 30 years of professional experience and a team of more than 20 specialists, the company holds a reputable position in the Swiss finance sector and is a member of the Swiss fiduciary association TREUHAND | SUISSE. The website reflects a professional and consistent brand image targeting Swiss businesses and private clients seeking trusted fiduciary services. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and performs moderately well. However, it lacks a cookie consent mechanism despite using tracking scripts, which is a privacy compliance gap. Security-wise, the site uses HTTPS with anonymized IP tracking for analytics, but lacks explicit security headers and incident response information. Overall, the security posture is solid but could be improved by implementing cookie consent, security headers, and publishing security policies. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. No suspicious or malicious content was detected, and the site is safe for general audiences.

The Gazette is the UK's official public record publication, established in 1665 and published by TSO under the authority of His Majesty's Stationery Office, part of The National Archives. It serves as a trusted source for official notices including insolvency, wills and probate, company data, and historical archives. The website targets businesses, legal professionals, government entities, and the general public seeking authoritative public records. Its business model includes providing official notices, data services, and archival access with paid options for notice placement and data subscriptions. Technically, the website employs modern JavaScript libraries such as RequireJS and Modernizr, uses Matomo Analytics with consent management, and integrates a live chat widget for customer support. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. The presence of cookie consent banners and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to manage analytics tracking. However, it lacks explicit security policy pages and incident response information, and security headers are not visibly present in the HTML. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The domain WHOIS data is unavailable due to Nominet UK restrictions, consistent with the domain being government-controlled. This lack of public WHOIS data does not detract from the site's legitimacy given its official status. The site is trustworthy, professionally maintained, and safe for general audiences.

A

Against Breast Cancer

againstbreastcancer.org.uk

64

Against Breast Cancer is a UK-based charity organization dedicated to funding research into secondary spread of breast cancer, which is the primary cause of breast cancer-related deaths. The website presents a professional and consistent brand image, targeting patients, researchers, donors, and supporters interested in breast cancer research. The organization operates primarily as a non-profit entity focused on advancing medical research and awareness. Technically, the website is built on WordPress with integration of modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Visual Website Optimizer. The site uses HTTPS and CDN hosting for performance and security. However, the absence of visible privacy and cookie policies indicates a gap in privacy compliance. Security posture is generally good with HTTPS and no obvious vulnerabilities, but security headers could be improved. WHOIS data is unavailable due to an invalid query on the www subdomain, limiting domain trust assessment. Overall, the website is credible and professionally maintained but should improve privacy disclosures and security headers to enhance compliance and trust.

B

Berker

berker.com

68

Berker is a well-established brand specializing in high-quality electrical switches and intelligent building management systems. The company positions itself as a leader in the energy and building automation sector, emphasizing quality, design, and innovation. The website reflects a professional business presence with clear navigation and comprehensive product offerings. Technically, the site uses modern JavaScript libraries, Google Analytics, and a consent management platform to ensure compliance and user tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not evident. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong association with the Hager Group. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

I

International Micro Payment Ventures Ltd

flip-pay.com

64

Flip-Pay, operated by International Micro Payment Ventures Ltd, is a specialized B2B SaaS platform offering advanced content monetization solutions tailored for digital and print publishers. The company provides a comprehensive suite of services including identity management, paywall journey automation, subscription orchestration, analytics, customer service tools, and print delivery solutions. Their market position is reinforced by partnerships with notable media companies and a strong emphasis on innovation and agility. The website reflects a professional and consistent brand image targeting media companies, SAAS, and gaming sectors primarily in Ireland and the US. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Font Awesome, and various analytics and marketing tools such as Google Analytics, Leadfeeder, and Mailchimp. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive cookie and privacy management solutions implemented via Iubenda. Hosting and CDN services appear robust, likely leveraging Cloudflare infrastructure. From a security perspective, Flip-Pay demonstrates a mature posture with HTTPS enforcement, multiple security certifications (ISO 27001, SOC 2, PCI DSS, GDPR compliance), and cookie consent mechanisms supporting GDPR and CCPA. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public incident response policy and security.txt file suggests room for improvement in transparency and vulnerability management. Overall, Flip-Pay presents a trustworthy, professional, and secure digital presence with strong compliance and business credibility. The risk profile is low, supported by consistent WHOIS data and legitimate business operations. Strategic recommendations include enhancing incident response visibility, adding vulnerability disclosure mechanisms, and continuous security audits to maintain and improve their security posture.

A

Arbeiterkammer

arbeiterkammer.at

68

Arbeiterkammer is a prominent Austrian non-profit organization dedicated to advising and representing workers and consumers. The website serves as a comprehensive portal offering extensive information and services related to labor law, tax law, consumer protection, education, family support, and workplace health. It is well-positioned as a leading advocacy group in Austria with a strong regional presence through multiple subdomains. The site targets employees, workers, and consumers seeking legal advice and social support.

H

Hager Ukraine

hager.ua

62

Hager Ukraine operates as a localized branch of the international Hager Group, specializing in electrical distribution systems, modular equipment, and related electrical products tailored for the Ukrainian market. The website serves primarily as a product catalog and resource portal for electrical professionals and customers, offering product information, downloads, and training resources. The business model is B2B focused, targeting installers, distributors, and industry professionals. The site demonstrates consistent branding aligned with the global Hager identity and maintains a professional online presence. From a technical perspective, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with some use of libraries such as Modernizr and Material Icons. The site appears to be custom-built or uses a proprietary CMS tailored for Hager's needs. Performance and mobile optimization are adequate, though accessibility features are basic. SEO is implemented at a basic level with meta tags and canonical links. Security posture is moderate; HTTPS is enforced as indicated by canonical URLs, and a cookie consent mechanism is implemented, reflecting some GDPR awareness. However, no privacy policy or terms of service are found, and no advanced security headers are detected in the provided data. Forms exist for user login and registration but lack visible anti-CSRF tokens or advanced protections in the snippet. No incident response or vulnerability disclosure information is published. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business claims, supporting legitimacy. Key recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility and compliance documentation to strengthen trust and regulatory adherence.

R

REYL Intesa Sanpaolo

reyl.com

63

REYL Intesa Sanpaolo is a Swiss-based banking group established in 1973, offering wealth management, asset management, and asset services to high net worth individuals and institutional clients. The company positions itself as a partner delivering innovative financial solutions with a strong international presence including subsidiaries such as REYL Overseas. The website is professionally designed using Drupal CMS and modern web technologies, featuring multimedia content and clear navigation. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies and incident response information. WHOIS data is missing, which reduces transparency but the overall website and business presence appear legitimate and professional.

S

Schibsted Sverige

klart.se

66

Klart.se is a leading Swedish weather information portal operated under the Schibsted media group. It provides comprehensive weather forecasts, maps, warnings, pollen and ski weather information targeted primarily at the Swedish-speaking general public. The site integrates with major advertising networks and partners such as Aftonbladet, leveraging a robust digital infrastructure. Technically, the site uses modern JavaScript libraries and tracking tools with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, Klart.se presents a professional, trustworthy, and content-rich platform with a high level of business credibility and technical maturity.

M

Massachusetts Institute of Technology

mit.edu

71

The Massachusetts Institute of Technology (MIT) is a globally recognized educational and research institution focused on advancing knowledge in science, technology, and related fields. The website serves a diverse audience including prospective and current students, faculty, researchers, alumni, and the general public. It offers comprehensive information on education, research, innovation, admissions, campus life, and alumni engagement. The site is well-branded, professionally designed, and provides rich content aligned with MIT's mission. Technically, the website is built on Drupal CMS and leverages modern web technologies including SVG graphics, asynchronous JavaScript loading, and integration with Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and performs well with fast loading times. Security best practices are observed with HTTPS enforcement, security headers, and anonymized IP tracking. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in privacy compliance, particularly in implementing explicit cookie consent mechanisms and publishing a public security policy or incident response contact. The absence of WHOIS data is noted but likely due to registrar privacy policies rather than malicious intent. Overall, MIT's website is a high-quality, trustworthy digital presence that effectively supports its educational and research mission. Strategic recommendations include enhancing privacy compliance, publishing security policies, and maintaining vigilance on third-party scripts to sustain security and trust.

Oriented.net is a Swiss-based managed services provider specializing in open-source software services and Linux server management. The company operates from a self-owned data centre in Switzerland and holds ISO 27001 certification, underscoring its commitment to information security. Their service portfolio includes various server types such as ARM VPS, GPU servers, physical servers, and managed security services like web application firewalls. The website targets businesses seeking reliable and secure Linux-based hosting and managed services. Technically, the site employs modern JavaScript libraries and Matomo analytics for privacy-conscious tracking, hosted on their own infrastructure. However, the site lacks visible privacy and cookie policies, and no contact information is directly available in the provided HTML content. Security posture is solid due to ISO certification and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and contact transparency.

H

Hrvatska akademska i istraživačka mreža - CARNET

domene.hr

59

The website domene.hr is the official portal for the Croatian national domain registry (.hr), managed by Hrvatska akademska i istraživačka mreža - CARNET. It provides domain registration, WHOIS lookup, dispute resolution, and registrar services primarily targeting Croatian internet users and registrars. The site is well-branded, consistent, and reflects its authoritative role in the Croatian internet infrastructure ecosystem. Technically, the site uses a modern but somewhat dated JavaScript stack including jQuery 2.0.3 and Bootstrap, with good mobile optimization and basic accessibility features. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. The WHOIS data aligns perfectly with the business claims, showing a legitimate and transparent registration. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

Glas Istre novine d.o.o. operates a regional Croatian news archive website providing access to both digital portal and printed edition archives. The company is an established media entity founded in 1943 with a strong presence in Istria. The website serves a general audience interested in regional news and historical content. Technically, the site uses modern web technologies including Google Adsense, Analytics, Tag Manager, Bootstrap, and Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

R

Redview Media

redviewmedia.com

50

Redview Media is a small digital advertising company specializing in multi-screen media environments, offering proprietary and standard IAB ad formats distributed through premium publishers. The website presents a professional and consistent brand image with clear navigation and relevant content targeting advertisers and publishers. Technically, the site is built on WordPress using common libraries such as jQuery, Bootstrap, and Google Tag Manager for analytics and marketing. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, and no explicit incident response or vulnerability disclosure information is provided. Privacy policy exists but is basic and does not explicitly confirm GDPR compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

П

Пивара Скопје АД

polnacasa.mk

43

Pivara Skopje AD operates a digital platform at polnacasa.mk focused on age verification and content delivery related to their alcoholic beverage products. The website is bilingual, supporting Macedonian and English, and includes comprehensive privacy, cookie, and terms of service policies embedded in pop-ups. The platform collects minimal personal data (date of birth and consent) to comply with legal age restrictions for alcohol-related content. Technically, the site is built on WordPress 5.3 with common plugins for forms, sliders, and media embedding, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and input validation, but lacks advanced security headers and explicit incident response or security policies. Overall, the site is trustworthy and professionally maintained, with a clear business focus on brand engagement and regulatory compliance.

P

Privredna banka Zagreb

pbz.hr

64

Privredna banka Zagreb (PBZ) is a well-established Croatian bank founded in 1996, offering a comprehensive range of retail banking services including accounts, cards, loans, savings, and digital banking solutions. The website reflects a mature digital presence with clear navigation, professional design, and detailed product information targeting retail customers in Croatia. The domain age and registration details align with the bank's history and legitimacy, reinforcing trustworthiness. Technically, the site employs modern web technologies, CDNs, and analytics tools such as Google Tag Manager and Google Analytics, ensuring a robust infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies could be enhanced. Overall, the site demonstrates high professionalism, compliance with GDPR, and a strong business credibility profile.

C

CH Media

chmedia.ch

58

CH Media is a leading Swiss media company with a strong presence in the German-speaking region, operating approximately 70 brands across print, radio, TV, streaming, and digital platforms. Founded in 1836, it is a well-established family-run business emphasizing independent journalism and regional engagement. The website reflects a professional and comprehensive digital presence, showcasing their brands, services, and career opportunities. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and integrates Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the site is trustworthy, well-branded, and compliant with GDPR privacy policies.

M

Max Henschel Graphics

mhg.ch

44

Max Henschel Graphics is a small, specialized graphic design agency based in Bern, Switzerland, offering services such as branding, corporate design, logo creation, and illustration. The company targets businesses and organizations seeking professional visual communication solutions. The website presents a professional portfolio and clear contact information, supporting a credible market position within the local media and design sector. Technically, the site uses a moderate technology stack including jQuery, Modernizr, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and privacy compliance mechanisms. Overall, the site is functional and professional but would benefit from enhanced privacy and security policies to improve compliance and trust.

GoDirect.gov is an official U.S. Department of the Treasury website providing federal benefit recipients with a secure platform to enroll in direct deposit and the Direct Express® Debit Mastercard®. The site serves as a trusted government resource for electronic payment enrollment and related information, targeting federal benefit recipients and the general public. It maintains a strong market position as the authoritative source for federal benefit payment management. Technically, the site employs modern web technologies including US Web Design System, jQuery, Google Analytics, and Google Tag Manager, hosted on a government infrastructure with Ultradns DNS services. The site is mobile optimized, accessible, and SEO friendly, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, includes key security headers, and incorporates session timeout and security notices, though it lacks DNSSEC and a published vulnerability disclosure policy. Overall, the site demonstrates a high level of trustworthiness and professionalism appropriate for a government service.

F

Free Software Foundation Europe

fsfe.org

53

The Free Software Foundation Europe (FSFE) is a well-established non-profit organization founded in 2001, dedicated to advocating for software freedom and empowering users to control technology. The website serves as a comprehensive platform for news, events, campaigns, and community engagement related to free software in Europe. It targets users, contributors, and policy stakeholders interested in digital rights and software freedom. The organization operates with a clear mission and maintains a consistent brand presence with multilingual support and community testimonials. Technically, the website employs a modern yet somewhat dated technology stack including jQuery, Modernizr, and Bootstrap 3. It is hosted under the registrar Gandi SAS and shows moderate performance with good mobile optimization and accessibility. The site lacks a CMS indication, suggesting a custom or static site approach. SEO and metadata are well implemented with comprehensive Open Graph and Twitter card tags. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy, though no cookie consent mechanism was found. Contact is primarily via forms and a contact page, with no direct emails or phone numbers publicly listed. Social media presence is limited but includes Mastodon and Peertube. Overall, FSFE's website demonstrates a high level of professionalism, trustworthiness, and content quality suitable for its non-profit advocacy role. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing explicit security and incident response policies to further enhance trust and compliance.

T

The Tor Project

torproject.org

68

The Tor Project is a well-established nonprofit organization focused on advancing privacy and anonymity online through free software and open networks. Their flagship product, the Tor Browser, enables users worldwide to browse the internet privately, defend against tracking and surveillance, and circumvent censorship. The website reflects a strong commitment to privacy advocacy and community engagement, targeting privacy-conscious users, activists, and journalists. Technically, the site uses modern frontend technologies such as Bootstrap, FontAwesome, and jQuery, delivering a mobile-optimized and accessible user experience with good SEO practices. However, the absence of explicit privacy and cookie policies and incomplete WHOIS data slightly detract from the overall trust and compliance posture. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional, trustworthy, and aligned with the organization's mission, though improvements in transparency and security documentation are recommended.

O

OPUS1

opus-1.eu

48

OPUS1 is a German-based company specializing in innovative paint and coating products for both interior and exterior applications. The website presents a professional image with a focus on quality products such as interior paints, facade paints, and lacquers, targeting DIY enthusiasts and professional painters. The company leverages a modern TYPO3 CMS platform with Bootstrap for responsive design, ensuring a good user experience across devices. The presence of a cookie consent mechanism and use of privacy-respecting Matomo analytics indicate a commitment to privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit policies could enhance trust further. Overall, the website is well-structured, content-rich, and trustworthy, reflecting a medium-sized retail business in the home improvement sector.

A

Association for Computing Machinery

acm.org

68

The Association for Computing Machinery (ACM) is a globally recognized professional organization dedicated to advancing computing as a science and profession. The website serves as a comprehensive portal offering resources such as publications, conferences, educational materials, and membership services targeted at computing professionals, researchers, educators, and students. ACM holds a leading market position in the technology and education sectors, operating as a large non-profit entity with a strong brand presence and consistent professional content. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and various analytics and marketing tools from reputable providers such as Google, Microsoft, and LinkedIn. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a moderate performance profile. The use of HTTPS and cookie consent mechanisms reflects a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly identified and could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact suggests room for enhancement in transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. The lack of WHOIS data is consistent with privacy protection for large organizations and does not detract from legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer incident response information to further strengthen security posture and user trust.

T

Trojan Zone

dsubookstore.com

61

Trojan Zone operates as the official university bookstore for Dakota State University, providing students, alumni, and the university community with textbooks, apparel, and graduation supplies. The website positions itself as a key retail outlet for university-related merchandise, leveraging partnerships with textbook providers and graduation product vendors. The business model is primarily e-commerce focused, targeting the university demographic with branded products and course materials. The site demonstrates consistent branding and a clear navigation structure, supporting a positive user experience.

W

Wellness Stars Deutschland GmbH

wellness-stars.de

46

Wellness Stars Deutschland GmbH operates a well-established online platform specializing in wellness tourism within Germany, offering a quality certification (Wellness Stars Qualitätssiegel) for hotels, spas, and health resorts. Founded in 2004, the company positions itself as a trusted intermediary providing wellness vacation offers, vouchers, and expert wellness tips. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting wellness travelers and health-conscious customers. Technically, the site uses modern JavaScript libraries, asynchronous script loading, and cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies could be improved. The domain registration is consistent with the business identity, and no suspicious elements were detected. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

E

Home

eifu.online

57

The website eifu.online operates as a specialized platform providing users the ability to download manufacturer information by entering a Key-Code. The service targets manufacturers and customers who require access to detailed manufacturer data. The business model is focused on information delivery, with a simple user interface and limited content beyond the core search functionality. The domain is registered since 2016, indicating a stable presence, and the site is hosted by CSL Computer Service Langenbach GmbH. Technically, the site uses an ASP.NET Web Forms framework with legacy JavaScript libraries such as jQuery 1.10.2 and featherlight.js for UI components. While HTTPS is enabled and a Thawte SSL certificate is present, the site lacks modern security headers and uses outdated libraries, which could pose security risks. Privacy compliance is minimal, with a privacy policy page available but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a single support email address, with no phone or physical address provided. Overall, the site is functional but basic in design and security posture.

M

MANOVA GmbH

tmona.at

57

MANOVA GmbH is a specialized provider of business intelligence, market research, and marketing analytics services with a strong focus on the tourism sector. The company leverages over 20 years of experience and proprietary tools like WEBMARK to deliver customized data-driven solutions. Their website reflects a professional and consistent brand presence, targeting businesses and organizations seeking advanced data analysis and strategic marketing insights. Technically, the site is built on WordPress with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is good with HTTPS enabled, though improvements can be made by adding security headers and explicit privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche, with strong client testimonials supporting its credibility.

Frankfurt Ticket RheinMain GmbH operates a regional ticketing platform focused on cultural, musical, theatrical, and sporting events in the Frankfurt RheinMain area. The company offers online ticket sales, physical pre-sale offices, gift vouchers, and event bundles targeting a broad audience interested in entertainment and cultural activities. The website is built on the ProcessWire CMS and uses modern web technologies including jQuery and Font Awesome, providing a good user experience with mobile optimization and accessibility features. Privacy compliance is well addressed with a comprehensive privacy policy and an opt-in cookie consent mechanism. Security posture is moderate with HTTPS usage and no visible vulnerabilities, though security headers and incident response policies are not explicitly published. WHOIS data is consistent with the business claims, supporting domain legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its regional market.

Beck & Stone, Inc. is a specialized brand consultancy focused on serving institutions and enterprises within American culture. Their core services include strategic consulting, platform development, brand management, and audience engagement. The company positions itself as a dedicated team of professionals providing bespoke services to grow institutions and enterprises. The website reflects a professional and consistent brand image with references to notable clients and a clear target audience. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Modernizr, jQuery, and the Foundation framework. Hosting and DNS services are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks important security headers and DNSSEC. There is no published privacy or cookie policy, nor a vulnerability disclosure or incident response contact, which are gaps in compliance and security transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security headers. The domain registration data is consistent and supports the legitimacy of the business. Strategic improvements in privacy and security policies would strengthen the company's risk posture and user trust.

D

Dot5Hosting

dot5hosting.com

65

Dot5Hosting is a small business web hosting provider offering domain registration, email, and web services primarily targeting small businesses and individual domain owners. The company has been integrated into iPage by Network Solutions, a larger hosting provider under Newfold Digital. The website serves as a login portal for customers to access control panel and webmail services. The business model focuses on providing essential hosting and domain services with additional business solutions. The market position is that of a niche provider within a larger corporate ecosystem, leveraging the brand and infrastructure of iPage and Network Solutions. Technically, the website uses a modern technology stack including Bootstrap 3, jQuery, YUI, and Genesys Web Messenger for live chat. It employs Google Tag Manager and Sift Science for analytics and fraud detection. The site is mobile optimized with basic accessibility features and moderate performance. Hosting is implied to be provided by iPage/Network Solutions. The site uses HTTPS with secure login forms and includes CSRF tokens, script integrity checks, and crossorigin attributes, indicating a good security posture. Security-wise, the site shows good practices such as HTTPS enforcement and secure form handling. However, it lacks explicit security headers like CSP, X-Frame-Options, and HSTS in the provided HTML content. The presence of a HACKER SAFE certification badge adds trust. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms and GDPR compliance indicators. Contact information is limited but includes a clear support phone number. Overall, the website is professional, secure, and compliant with privacy standards. The lack of WHOIS data for the subdomain is expected and not suspicious. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include adding explicit security headers, publishing incident response policies, and continuing to monitor third-party scripts for vulnerabilities.