Security Directory

S

STRIEBEL & JOHN

striebelundjohn.com

54

STRIEBEL & JOHN is a German-based company specializing in energy distribution systems and electrical installation products. Their website showcases a range of innovative solutions such as CombiLine mounting plates, wiring systems, and multifunction enclosures, targeting electrical installers and industry professionals. The company maintains a professional online presence with consistent branding and active social media channels. Technically, the website is built on Drupal 11, employs modern web technologies including lazy loading and consent management via Usercentrics, and uses Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and integrates GDPR-compliant consent mechanisms but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structure suggest a legitimate business. Overall, the site scores well in content quality and security posture but is penalized for missing domain registration transparency and contact details.

B

Busch-Jaeger

busch-jaeger.de

66

Busch-Jaeger is a well-established German company specializing in electrical installation technology and smart home systems, boasting a history of approximately 140 years and a market leader position. The company operates under the parent company ABB AG and targets professionals such as electricians, installers, architects, and end customers interested in smart home solutions. The website reflects a mature digital presence built on TYPO3 CMS, leveraging modern JavaScript frameworks and professional hosting via Akamai. It features comprehensive navigation, multilingual support, and a cookie consent mechanism compliant with GDPR standards. Security posture is solid with HTTPS and error monitoring via Sentry, though explicit security policies and privacy documentation are lacking. Overall, the site is professional, trustworthy, and well-optimized for user experience.

B

Baltnetos komunikacijos, UAB

tellq.io

61

Tellq.io is a Lithuanian-based technology company operating under Baltnetos komunikacijos, UAB, founded in 2016. The company offers Tellq Multi, a SaaS platform designed to streamline multi-channel customer support and sales through email, chat, phone, and SMS. Positioned as an emerging enterprise solution, Tellq emphasizes features such as a unified inbox, communication history, notifications, analytics, and team collaboration to enhance customer service efficiency. The website reflects a professional and consistent brand image with clear calls to action for early access, targeting businesses seeking advanced customer support tools. Technically, the site employs modern web technologies including SVG graphics, JavaScript, and Cloudflare DNS services, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial, with a privacy policy and terms of service present but lacking cookie consent mechanisms and GDPR explicit indicators. Overall, the domain registration aligns well with the business identity, supporting a high legitimacy score.

B

The 20 best boutique hotels in Madrid

boutiquehotels-madrid.com

52

The website boutiquehotels-madrid.com is a specialized online platform focused on showcasing and facilitating bookings for boutique hotels in Madrid. It offers curated hotel listings with detailed descriptions, ratings, and booking links, targeting travelers seeking unique and stylish accommodations. The site also provides guidance on local dining and nightlife, enhancing the visitor experience. Technically, the site employs modern web technologies and is hosted with Cloudflare DNS services, ensuring reasonable performance and availability. However, it lacks some advanced security measures such as DNSSEC and security headers, and does not publish privacy or cookie policies, which are important for compliance and user trust. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

B

The 20 best boutique hotels in New York

boutiquehotels-newyork.com

51

The website boutiquehotels-newyork.com is a niche online travel guide focused on boutique hotels in New York City. It provides curated hotel listings with descriptions, ratings, and booking links, targeting travelers seeking unique and stylish accommodations. The business model appears to be referral-based, linking users to hotel booking platforms. The domain is well-established since 2014, with professional domain management via Gandi SAS and Cloudflare DNS services. Technically, the site uses modern web standards, Google Fonts, and is mobile optimized, offering a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, contact information, and security policy disclosures, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled and some security headers are missing. Overall, the site is legitimate and professionally presented but would benefit from enhanced privacy compliance and transparency.

B

The 20 best boutique hotels in Paris

boutiquehotels-paris.com

50

The website boutiquehotels-paris.com is a specialized online platform dedicated to showcasing the 20 best boutique hotels in Paris. It provides detailed hotel listings, including descriptions, ratings, room counts, and booking links, targeting travelers seeking unique and stylish accommodations in Paris. The business operates as a travel guide and booking referral service, with a focus on boutique hospitality in the French capital. The domain is well-established since 2014, indicating a mature presence in the niche market. Technically, the site employs modern web standards with HTTPS and Cloudflare DNS, ensuring secure and reliable access. However, it lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR regulations. No direct contact or incident response information is provided, limiting transparency and user trust. Overall, the site offers a good user experience with professional design and relevant content but requires improvements in privacy, security, and contact disclosures to elevate its trustworthiness and compliance posture.

B

The 20 best boutique hotels in Berlin

boutiquehotels-berlin.com

51

The website boutiquehotels-berlin.com serves as a specialized online guide for boutique hotels in Berlin, offering curated hotel listings, descriptions, ratings, and booking links. It targets travelers seeking unique and stylish accommodations in Berlin, positioning itself as a niche player in the hospitality travel sector. The business model revolves around providing information and facilitating bookings through affiliate or partner links. Technically, the site employs modern web standards with HTTPS, Cloudflare DNS, and responsive design, though it lacks advanced security headers and DNSSEC. The absence of privacy and cookie policies, as well as contact and incident response details, indicates gaps in compliance and transparency. Security posture is moderate with room for improvement in headers and policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Mailman4.com is a niche technology website offering Mailman 3 mailing list management software as a service via the AWS Marketplace. The business is positioned as a small provider focusing on delivering a well-maintained Mailman 3 installation with enhanced features and reliable email delivery. The website content is basic but functional, targeting organizations requiring mailing list solutions, including large enterprises. The technical infrastructure leverages AWS hosting and DNS, with integrations of Google Analytics, Google Tag Manager, and Bugsnag for monitoring and marketing. However, the site lacks comprehensive privacy, cookie, and security policies, and no contact information is provided, which limits user trust and compliance. Security posture is moderate with domain registration protections but missing DNSSEC and security headers. Overall, the site is accessible and operational but would benefit from improved compliance and security transparency.

P

Pelican

getpelican.com

48

Pelican is an established open source static site generator project founded in 2012, focused on providing a Python-based tool for generating static websites without server-side logic. The website serves a developer and technical audience, offering documentation, blog content, and community engagement through GitHub and Fediverse social links. The business model is community-driven with support via donations and contributions. Technically, the site is well designed with modern responsive layouts, uses efficient image formats, and supports multiple content formats and plugins. Security posture is moderate; while the domain registration is stable and transparent, the site lacks visible security headers, DNSSEC, and published privacy or cookie policies. No forms or analytics scripts were detected, indicating minimal data collection and tracking. Overall, the site is professional, trustworthy, and safe for general audiences.

cPanel, L.L.C. operates a leading web hosting control panel platform, providing graphical interfaces and automation tools to simplify website and server management. With over 20 years in the industry, cPanel holds a strong market position supported by key partnerships with WordPress, CloudLinux, and others. The website reflects a mature digital presence with professional design, comprehensive content, and extensive use of analytics and marketing technologies. Security posture is solid with HTTPS enforced and consent management implemented, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data is unavailable, likely due to privacy or registry restrictions, which slightly impacts domain trust analysis but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security header implementation and publishing formal security and incident response policies.

T

The Mail Archive

mail-archive.com

55

The Mail Archive is a specialized service that provides searchable archives for mailing lists, enabling users and administrators to easily search through archived mailing list postings. Established in 1998, it holds a niche position in the technology sector, focusing on mailing list archiving services. The website presents a straightforward interface with basic but functional design and navigation, targeting mailing list users and administrators. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript, with DNS hosted via Cloudflare. The site shows moderate performance and basic mobile optimization. There is no evidence of advanced frameworks or CMS usage. Security practices include HTTPS usage and domain transfer protection, but DNSSEC is not enabled and security headers are absent, indicating room for improvement. From a security perspective, the website does not expose sensitive data and uses HTTPS, but lacks visible security headers and cookie consent mechanisms. There is no published security policy or incident response information, which could be enhanced to improve trust and compliance. The domain registration is consistent and long-standing, supporting legitimacy. Overall, the website is functional and trustworthy for its niche purpose but would benefit from enhanced security headers, privacy compliance improvements, and clearer contact and security policy disclosures to strengthen its security posture and user trust.

R

Read the Docs, Inc

rtfd.org

58

Read the Docs, Inc operates a documentation building and hosting platform aimed at developers, providing versioned documentation, integrated search, and pull request previews. The website content is professional and targeted towards a technical audience, positioning itself as an established player in the documentation hosting market. The technical infrastructure is based on the Pelican static site generator and uses modern web technologies including Font Awesome icons. The site demonstrates good design quality and mobile optimization but lacks visible security headers and explicit privacy or cookie policies. No blocking or WAF mechanisms were detected, and the site is accessible without restrictions. The WHOIS data for the subdomain is not available, which is typical for subdomains, and does not raise immediate concerns. Overall, the site presents a moderate risk profile with room for improvement in security and privacy compliance.

AfriSIG is a well-established African School on Internet Governance, operating since 2013 and convened by the Association for Progressive Communications (APC) along with key African and UN partners. The organization focuses on educating and developing internet governance leaders across Africa through annual events and a multidisciplinary curriculum. The website reflects a professional and consistent brand with good content quality and clear navigation, targeting policy makers, activists, and ICT professionals in Africa. Technically, the site is built on Drupal CMS with modern front-end libraries and demonstrates moderate performance and good mobile optimization. However, security posture is moderate with no DNSSEC enabled and no visible security headers, and privacy compliance is low due to the absence of privacy and cookie policies. Contact information is limited to a single official email address. Overall, the domain registration data is consistent and supports the legitimacy of the organization.

A

Association for Progressive Communications (APC)

giswatch.org

57

Global Information Society Watch (GISWatch) is a reputable non-profit initiative supported by the Association for Progressive Communications (APC) and Sida. It focuses on publishing comprehensive reports and fostering civil society advocacy around digital rights, internet governance, and information society issues globally. The website is multilingual and provides extensive resources and author profiles, targeting civil society, researchers, and policy makers. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as Leaflet.js for mapping, and employs Matomo analytics with privacy-conscious settings (no cookies, Do Not Track respected). The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and domain registration locked against unauthorized changes. However, DNSSEC is not enabled, and there is no published security or incident response policy. Privacy compliance is basic, lacking a cookie consent mechanism. Contact information is limited to a contact form, with no explicit emails or phone numbers. Overall, the website presents a trustworthy and professional platform for its non-profit mission, with recommendations to enhance privacy compliance, security transparency, and contact accessibility.

Intel Corporation is a leading global technology company specializing in semiconductor manufacturing and artificial intelligence solutions. Their website showcases a broad portfolio of AI-related products including processors, AI accelerators, software solutions, and network-edge devices, targeting business and technical leadership audiences. The company maintains a strong market position with enterprise-scale operations and consistent branding across its digital presence. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and hosted on Akamai CDN, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and consent management implemented, though explicit security policies and vulnerability disclosures are not prominently published. Overall, the website reflects a mature digital infrastructure with high professionalism and trustworthiness, suitable for a major technology enterprise.

A

Association for Progressive Communications

apc.org

10

The Association for Progressive Communications (APC) is a well-established global non-profit organization dedicated to advancing human rights, digital inclusion, and internet governance through advocacy, grants, and community support. Their website reflects a mature digital presence with comprehensive content targeting civil society organizations and digital rights advocates worldwide. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates privacy-conscious analytics tools such as Matomo and Plausible. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS registrant data is mitigated by the professional and consistent branding and content, indicating legitimacy. Overall, the site demonstrates a strong commitment to privacy, accessibility, and user experience, positioning APC as a credible and trustworthy entity in the non-profit digital rights sector.

S

Sursiendo

sursiendo.org

10

Sursiendo is a small non-profit organization focused on digital rights and digital culture, primarily serving Spanish-speaking communities in Latin America, particularly Argentina. The organization has been active since 2011 and provides advocacy, research, community accompaniment, and educational materials to promote collective digital rights and open, collaborative digital environments. Their website reflects a clear mission and thematic focus, targeting activists, researchers, and community members interested in digital culture and rights. Technically, the website is built on WordPress using the Understrap theme framework and employs jQuery. The site is mobile-optimized with good SEO practices and a moderate performance profile. Hosting details are not explicit, but the domain is registered with Gandi SAS, a reputable registrar. The website uses HTTPS but lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. From a security perspective, the site demonstrates basic good practices such as HTTPS and clientTransferProhibited domain status but lacks cookie consent mechanisms and security headers like CSP or HSTS. No direct contact emails or phone numbers are provided, only a contact form. There is no visible security policy or incident response information. The domain WHOIS data is transparent and consistent with the organization's claims, supporting legitimacy. Overall, the website is professional, trustworthy, and content-rich but could improve privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to strengthen trust and compliance.

The website 'thenewit.eu' presents a minimalistic online presence for an entity named 'New IT'. The site contains very limited content, primarily a fixed footer with the company name and a contact email address. The presence of links to mailman3.com and mailman4.com suggests some association or interest in mailing list software, but no explicit business description or services are detailed. The technical infrastructure appears basic, with no detected CMS, frameworks, or advanced technologies. Hosting is via GoDaddy.com, LLC, a common registrar and hosting provider. Security posture is weak, with no visible security headers, privacy or cookie policies, or incident response information. The site uses no analytics or tracking technologies, and no forms or data collection mechanisms are present. Overall, the site is accessible without WAF or blocking mechanisms but lacks professional polish and comprehensive content.

G

GNU Mailman

list.org

9

GNU Mailman is a mature open source software project specializing in electronic mail discussion and newsletter list management. The website serves as the official hub for the project, providing documentation, downloads, community resources, and development information. The project is well-established with a domain age dating back to 1996, reflecting its long-standing presence in the open source community. The business model is community-driven and donation-supported, targeting mailing list administrators, developers, and open source users. Technically, the website uses a traditional tech stack including Python for the backend and Bootstrap 3 with jQuery 1.10.1 for frontend styling and interactivity. While the site is functional and well-structured, some technical aspects such as the use of outdated JavaScript libraries and lack of DNSSEC indicate areas for modernization. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and privacy compliance features such as cookie consent mechanisms. From a security perspective, the domain is protected against unauthorized transfers and shows no signs of malicious activity. However, the absence of DNSSEC, security headers, and use of older JavaScript libraries present moderate security risks. The site does not expose sensitive data and maintains a professional security posture but could improve incident response visibility and privacy compliance. Overall, the website is trustworthy and professional with good content quality and business credibility. Strategic improvements in security hardening, privacy compliance, and technical modernization would enhance the site's resilience and user trust.

S

StromKompass®

stromkompass.de

47

StromKompass® is a German educational platform focused on energy efficiency, electrical engineering, and building automation. It offers multimedia content including podcasts, expert videos, and technical fact sheets targeting professionals and students in the electrical and energy sectors. The website is built on WordPress and uses modern JavaScript libraries and consent management tools, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche audience effectively.

W

Wir helfen Kindern e.V.

whk-online.de

64

Wir helfen Kindern e.V. is a German non-profit organization dedicated to supporting disadvantaged children through various charitable projects focusing on child cancer aid, abuse prevention, poverty alleviation, education, and integration. Established in 1998, the organization has a strong regional presence and a history of supporting over 100 projects with more than one million euros in donations. The website serves as an information and donation platform, targeting donors, volunteers, and supporters interested in child welfare. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Slider Revolution, and Borlabs Cookie for GDPR-compliant cookie management. It integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized with a moderate performance profile and good SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing a long-standing domain registration appropriate for the organization's history. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for its charitable mission.

T

The smarter E

thesmartere.com

57

The smarter E Digital is a comprehensive online platform dedicated to smart energy solutions, offering a wide range of content including recordings from exhibitions, conferences, webinars, studies, interviews, and whitepapers from leading experts in the energy sector. The platform targets energy professionals and companies interested in renewable energy and smart grid technologies, providing both free and premium content access through user accounts. Technically, the website employs modern JavaScript libraries, consent management tools, and CAPTCHA for security, with a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response information are not evident. The absence of WHOIS registration data is a notable anomaly, suggesting either privacy protection or a technical issue, which slightly impacts trust but does not detract from the professional and comprehensive nature of the website content. Overall, the platform demonstrates a high level of professionalism, content quality, and user engagement, positioning it as a key player in the smart energy digital space.

2

2Pixels Studio

2pixels.hu

51

2Pixels Studio is a Hungarian web and print design studio specializing in web design, web development, branding, packaging, and print design services. The company targets businesses and individuals seeking cohesive digital and offline visual identities. Their market position is that of a niche, small-sized design studio with a professional portfolio and active social media presence. Technically, the website is built on WordPress with common optimization plugins and uses Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices but lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

T

Terrán Tetőcserép Gyártó Kft.

terran-generon.hu

57

Terrán Tetőcserép Gyártó Kft. operates the Terrán Generon website, offering innovative solar roof tile solutions primarily targeting homeowners and businesses in Hungary. The company leverages its century-long expertise in roofing combined with modern solar technology to provide aesthetically pleasing and environmentally friendly energy solutions. The website reflects a strong market position supported by multiple industry awards and certifications, emphasizing product quality and sustainability. Technically, the site is built on WordPress with modern technologies such as Google Analytics, Facebook Pixel, and CookieYes for compliance and marketing. The site is well optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

D

Duel-Press s.r.o.

ujszo.com

57

Új Szó is a well-established Hungarian language daily newspaper and online news portal serving the Hungarian-speaking community in Slovakia. Operated by Duel-Press s.r.o., the website has a strong market position as the leading Hungarian news source in the region. The site offers a broad range of news categories and multimedia content, supported by a modern Drupal 10 CMS infrastructure and integrated advertising and analytics technologies. The domain is longstanding and consistent with the business history, enhancing credibility. Technically, the site is well-optimized for mobile and SEO, with good accessibility features and a moderate performance profile. Security posture is adequate with HTTPS and transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with GDPR and cookie consent mechanisms in place. Overall, the site presents a professional and trustworthy media outlet with room for security enhancements.

B

Brand Consulting s. r. o.

brandingslovakia.sk

45

Brand Consulting s. r. o. is a Slovakian small business focused on brand consulting and reputation management services. The website is currently a 'coming soon' placeholder with minimal content, targeting businesses interested in brand growth and reputation enhancement. The company presents itself professionally with social media presence and a company email contact but lacks detailed business information or certifications on the site. The technical infrastructure uses modern frontend technologies such as Bootstrap, Font Awesome, and Google Fonts, with a disabled contact form integrated with SB Forms. The site is mobile optimized but basic in content and SEO. Security posture is moderate with HTTPS implied but no visible security headers or active forms, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. Overall, the site is functional but underdeveloped, requiring enhancements in content, security, and compliance to improve trust and user engagement.

BigMedia, spol. s r.o. is a well-established leader in the Central European outdoor advertising market, specializing in a broad range of advertising formats including billboards, digital displays, and transport advertising. The company offers comprehensive services from rental to production and installation, targeting businesses and advertisers seeking out-of-home advertising solutions. Their market position is strong, supported by a domain registered since 2008 and active social media presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Quantcast Choice for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

Y

YCO Digital Agency

findfocus.hu

49

YCO Digital Agency operates the FindFocus website, a Hungarian-language professional platform focused on digital marketing trends, strategy, and development. The site provides valuable content such as articles and case studies targeting marketing professionals and businesses interested in digital transformation. Technically, the website is built on WordPress, leveraging modern technologies like WP Rocket for performance optimization, Bootstrap for responsive design, and Google Tag Manager for analytics. The security posture is adequate with HTTPS enabled and script lazy loading, but lacks visible security headers and published privacy or cookie policies, which are critical for compliance and trust. No WAF or blocking mechanisms were detected, and the domain registration is consistent with the business age and content. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

D

Dan Abrams

dan-abrams.com

53

Dan Abrams is a well-established media entrepreneur and legal analyst with a diversified portfolio including media businesses, television and radio hosting, publishing, and hospitality ventures. The website reflects a professional media presence with good content quality and consistent branding. Technically, the site is built on WordPress using modern themes and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is credible and trustworthy but could improve in privacy and security transparency.

B

Bottle Raiders, Inc.

thedailypour.com

57

The Daily Pour is a specialized media company operating under Bottle Raiders, Inc., providing comprehensive reviews, ratings, and news coverage focused on spirits, non-alcoholic, and cannabis-infused beverages. Established in 2013, the website has a strong market position within the niche beverage media sector, offering content that appeals to both enthusiasts and industry professionals. The business model relies on content publishing, advertising partnerships, subscription clubs, and newsletters to engage its audience and generate revenue. The site demonstrates consistent branding and high-quality content, supported by a professional design and clear navigation.

The website www.econoxx.com is currently inaccessible due to a client-side Proof of Work challenge that blocks direct access to any meaningful content. The domain WHOIS query returned no match, indicating the domain may not be registered or is extremely new, which raises concerns about legitimacy. No business information, contact details, or legal policies are available on the site, limiting the ability to assess the company's operations or compliance posture. Technically, the site uses JavaScript and CryptoJS for the challenge but lacks HTTPS and security headers, which are critical for secure web presence. Overall, the site presents a low trust profile and minimal digital maturity.

SCHENK STAHL GmbH is a German company established in 1986 specializing in the trading of stainless, heat-resistant, and acid-resistant steel products including pipes, tubes, fittings, and special alloys. The company targets industrial clients requiring high-quality steel materials for demanding applications. The website reflects a traditional B2B business model with a focus on product range and technical specifications. The digital infrastructure is based on TYPO3 CMS version 4.4, with legacy Flash content still present, indicating a need for modernization. The site includes multiple language options, suggesting an international audience. Security posture is moderate but lacks modern security headers and visible HTTPS enforcement. Privacy compliance is weak, with no privacy or cookie policies detected and tracking scripts active without consent mechanisms. Overall, the site is functional but requires updates to improve security, privacy, and user experience.

V

Van Geenen

vangeenen-metallschleiferei.de

43

Van Geenen is a specialized B2B company offering comprehensive metal finishing and processing solutions targeting industrial, high-tech, and aesthetic sectors. The company positions itself as a one-stop-shop for metal refinement services including polishing, grinding, coating, and cleanroom packaging. The website reflects a professional and consistent brand image with clear service offerings and a project portfolio, catering primarily to industrial clients in the Netherlands and surrounding regions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks advanced security headers and published security policies. The domain is newly registered in 2025 with minimal WHOIS registrant information, which slightly reduces trust but is offset by the professional website presentation and clear contact details. Overall, the website is well-structured, user-friendly, and business-focused, with room for improvement in privacy and security transparency.

Rolf Kind GmbH is a medium-sized German manufacturing company specializing in the production of high-quality forged steel components, including rings, shafts, and custom shapes made from high-alloy stainless steels and special materials such as nickel and titanium alloys. Founded in 1969, the company has a strong market position as a family-owned business with over 50 years of experience, serving industrial clients requiring precision and customized forging solutions. Their website reflects a professional digital presence built on TYPO3 CMS, featuring multimedia content, a cookie consent mechanism, and multilingual support (German and English). Technically, the website employs modern web technologies including HTML5 video, jQuery, and Google Maps API integration. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, but security headers are not explicitly detected and no dedicated security or incident response policies are published. Overall, the website demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. Contact information is clearly presented, and social media channels are active, enhancing business credibility. No critical security or content safety issues were found, and the domain registration appears legitimate and consistent with the business profile. Strategic improvements could focus on enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance.

Böllinghaus Steel GmbH is a family-owned manufacturing company specializing in the production of high-quality stainless steel profiles, nickel alloys, and titanium products. Operating its own factory in Portugal, the company serves demanding industrial sectors including pharmaceutical, chemical, medical technology, aerospace, and energy. The website reflects a professional business with a clear focus on quality and customer-specific solutions. The company maintains a moderate digital maturity with a CMS-based website, cookie consent compliance, and integration of analytics and marketing tools. Security posture is adequate with use of CSRF tokens and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is well-structured, GDPR compliant, and targets industrial clients effectively.

S

Schoeller Werk GmbH & Co. KG

schoellerwerk.de

53

Schoeller Werk GmbH & Co. KG is a well-established German manufacturer specializing in premium longitudinally welded stainless steel tubes, serving industrial and automotive sectors globally. Founded in 1827, the company emphasizes quality, sustainability, and innovation, positioning itself as a leading European supplier with a strong reputation and certifications such as ISO 9001. The website reflects a professional digital presence built on WordPress with multilingual support and modern technologies, providing clear navigation, comprehensive product and company information, and active engagement through social media and news updates. Security posture is robust with HTTPS, cookie consent management, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is strong, with detailed policies and user consent mechanisms aligned with GDPR. Overall, the site demonstrates high business credibility and trustworthiness, supporting the company's market position and customer engagement.

T

The Chartered Institute of Building

ciob.org

67

The Chartered Institute of Building (CIOB) is a well-established professional body founded in 1834, dedicated to advancing the science, ethics, and practice of construction management and leadership globally. The organization offers membership services, professional development courses, events, and industry support, positioning itself as a leading authority in the built environment sector. The website reflects a mature digital presence with a clear focus on education, member support, and industry engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies and Google Tag Manager for analytics and marketing. It demonstrates good mobile optimization, accessibility compliance (AA certified), and a professional design that supports user engagement and navigation. The presence of multiple certifications such as Cyber Essentials and Disability Confident further underscores its commitment to security and inclusivity. From a security perspective, the site enforces HTTPS and employs recognized certifications, though explicit security headers could be more visible. Privacy compliance is robust, with clear cookie and privacy policies and consent mechanisms in place. However, no explicit incident response or vulnerability disclosure information is provided, which could be improved. Overall, CIOB's website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and providing clearer incident response contacts to further strengthen trust and security posture.

A

Atom Publishing

atompublishing.co.uk

54

Atom Publishing is a boutique content and events agency specializing in connecting brands with audiences in the built environment sector. The company offers a diverse range of services including magazines, websites, events, commercial content, editorial, design, podcasts, video, webinars, social media, and recruitment. Their market position is that of a specialized agency with a strong focus on the built environment, serving clients primarily in the UK. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. From a technical perspective, the website is built on WordPress and utilizes modern JavaScript libraries such as jQuery, SAL.js, Fancybox, and Tiny Slider. Hosting appears to be managed by electricbloom.co.uk. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Accessibility features are basic but present. Analytics are implemented via Google Analytics and Google Tag Manager, indicating moderate user tracking. Security posture is generally good with HTTPS enabled and no exposed sensitive data. However, the absence of key security headers and a cookie consent mechanism are notable gaps. The WHOIS lookup failed due to domain registration issues with Nominet UK, which introduces some uncertainty about domain legitimacy. Despite this, the website content and business information appear credible and professional. Overall, the site presents a low risk but would benefit from enhanced security headers, privacy compliance improvements, and clarification of domain registration status to strengthen trust and compliance.

C

CIOB Jobs

ciobjobs.com

65

CIOB Jobs is a professionally maintained online job board and career resource platform affiliated with the Chartered Institute of Building. It serves the construction and building industry by providing job listings, career advice, training courses, and CPD resources. The website targets construction professionals and recruiters, positioning itself as an authoritative niche platform with a medium-sized operational scale and a founding date of 2009. The business model revolves around job advertising and career support services within the UK and global construction sectors. Technically, the site is built on WordPress with WooCommerce and uses modern tracking and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Hosting and DNS are managed via Cloudflare, ensuring reliable infrastructure and domain security. The site demonstrates good SEO, mobile optimization, and accessibility standards. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, CIOB Jobs presents a trustworthy and professional digital presence with room for enhanced security and privacy practices.

PRECHEZA a.s. is a well-established large European manufacturer specializing in titanium dioxide and related chemical products. The company operates primarily in the manufacturing sector, serving industrial and commercial clients with a diverse product portfolio including pigments, ferrous sulfate, calcium sulfate, and sulfuric acid. It is part of the AGROFERT holding group, which enhances its market position and credibility. The website reflects a professional business presence with clear product offerings and legal disclosures. Technically, the website employs modern web technologies such as Google Tag Manager, Bootstrap, and slick carousel, and is built on the Kentico CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is addressed through a cookie consent mechanism and a dedicated privacy policy page. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces transparency but does not significantly detract from the overall trustworthiness given the professional presentation and business information. Overall, PRECHEZA a.s. demonstrates a solid digital presence with good security hygiene and compliance practices. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and security posture.

C

COREZINC

corezinc.com

55

COREZINC is a specialized company focused on producing circular zinc powders and zinc alloys, emphasizing sustainability and innovation within the zinc industry. The company handles significant volumes of zinc materials annually and is committed to carbon-neutral products aligned with climate goals through 2030. The website reflects a professional business presence with clear messaging targeted at industrial clients and partners in the zinc and recycling sectors. Technically, the site is built on WordPress with modern libraries and is hosted likely by Wedos, featuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. The domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

R

RADKA spol. s r.o.

radka.cz

45

RADKA spol. s r.o. is a Czech-based chemical distribution company with over 30 years of history, specializing in high-quality chemical products including plastics, elastomers, coatings, adhesives, and water treatment chemicals. As a member of the RADKA Group, it holds a solid market position in the manufacturing and chemical distribution sectors, targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 9001 and ISO 14001, enhancing trustworthiness. Technically, the website is built on WordPress 6.8.3 with modern performance optimizations including WP Rocket and Rank Math SEO. It uses Google Fonts and integrates Plausible Analytics for privacy-conscious tracking. The site is mobile-optimized and loads quickly, with good SEO practices and basic accessibility features. However, explicit privacy and cookie policies are not found, which is a gap in compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. No major vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly present, and there is no visible vulnerability disclosure or security.txt file, which could improve the security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, RADKA.cz presents a trustworthy and professional online presence with strong business credibility and technical implementation. To further enhance security and compliance, the company should publish clear privacy and cookie policies, implement security headers, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory compliance.

C

Czech chemical society

csch.cz

37

The Czech chemical society is a well-established professional organization serving the chemical science community in the Czech Republic and Europe. It provides membership services, organizes conferences, publishes journals, and supports young chemists. The website reflects a medium-sized non-profit entity with a consistent brand and professional content. Technically, the site is built on WordPress with common plugins and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy and cookie policies, indicating compliance gaps. Overall, the domain's age and WHOIS data support legitimacy and trustworthiness.

M

Metrohm

metrohm.cz

63

Metrohm is a well-established company specializing in chemical analysis systems for laboratories and industrial processes, with a strong presence in Germany and globally. The website reflects a mature digital infrastructure with professional design, multi-language support, and comprehensive product and service information. The technical stack includes modern JavaScript frameworks, Adobe Experience Manager CMS, and advanced analytics tools such as Adobe Analytics, Google Tag Manager, and New Relic, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site presents a trustworthy and professional image suitable for its B2B audience.

V

VVKL

vvkl.cz

55

VVKL is a specialized conference focused on the development, manufacturing, and quality control of pharmaceutical products, targeting professionals in the healthcare and pharmaceutical industries. The website is built on the Wix platform, leveraging standard Wix technologies and Google Analytics for visitor tracking. The site presents professional content relevant to its niche audience but lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and trust. Security posture is adequate with HTTPS enabled, but could be improved with additional security headers and transparency about data protection. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the site content and technical setup suggest a legitimate small-scale event organizer. Strategic improvements in privacy compliance and contact transparency would enhance trust and security.

V

Vilatrans Empresa de Distribución y Logística

vilatrans.com

53

Vilatrans Empresa de Distribución y Logística is a medium-sized Spanish logistics and distribution company with over 25 years of experience. The company specializes in full load transportation and associated logistics services, leveraging satellite tracking technology and holding necessary administrative authorizations for special transport across Spain. Their website reflects a professional and consistent brand presence, targeting businesses requiring reliable logistics solutions. Technically, the site is built on WordPress with the Divi theme and uses common plugins such as Yoast SEO and Contact Form 7, hosted on Amazon AWS infrastructure. The website is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is partial, with a cookie policy and consent mechanism present but no privacy policy page found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is free from WAF blocking or content restrictions and contains no adult or questionable content.

A

Asociación de Fabricantes Españoles de Paneles Sándwich

afepp.com

53

The Asociación de Fabricantes Españoles de Paneles Sándwich (AFEPP) is an industry association representing Spanish manufacturers of sandwich panels. The website serves as an informational and promotional platform targeting manufacturers and stakeholders within Spain's manufacturing sector. The site is built on WordPress using the Colibri page builder and integrates marketing and analytics tools such as HubSpot and Google Analytics. It features a cookie consent mechanism compliant with GDPR principles but lacks a dedicated privacy policy and terms of service pages. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Security posture is moderate with HTTPS enabled but no detected security headers or published security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

B

Bouwen met Staal

staalbouwdag.nl

41

Bouwen met Staal organizes the annual Staalbouwdag event, a leading Dutch trade fair and congress focused on steel construction. The event targets decision-makers across the steel and construction sectors, offering networking, knowledge sharing, and showcasing innovations. The website is professionally designed using WordPress and the Divi theme, with good SEO practices and structured data implementation. However, it lacks privacy and cookie policies, and the Google Analytics plugin is installed but not configured. Security posture is adequate with HTTPS but missing security headers and incident response information. Overall, the site is trustworthy and serves its business purpose well but should improve compliance and security transparency.

N

Nationale staalprijs

nationalestaalprijs.nl

46

Nationale staalprijs is a Dutch organization dedicated to promoting and awarding excellence in steel construction projects. The website serves as a platform to showcase nominations, winners, and project submissions related to steel construction within the Netherlands. It targets professionals and companies in the steel construction industry, providing information and recognition to encourage innovation and quality in this sector. The business model appears to be non-profit or industry promotional in nature, focusing on national recognition rather than commercial sales. Technically, the website is built on Drupal 10 CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, YouTube and Vimeo APIs, and Google reCAPTCHA for form security. The site is mobile optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on user registration and login forms to mitigate automated abuse. However, no explicit security headers were detected in the provided content, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is limited as no privacy or cookie policies were found on the homepage content, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and well-targeted to its audience. The main risks relate to privacy compliance and security policy transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance.

B

Bouwen met Staal

brandveiligmetstaal.nl

38

Brandveiligmetstaal.nl is a specialized Dutch digital information platform dedicated to fire safety in steel constructions. It provides comprehensive resources, including practical design tools, publications, and expert support, primarily targeting construction professionals such as architects and engineers. The website is supported by recognized industry partners, enhancing its credibility and market position within the niche of fire-safe steel construction. Technically, the site employs a modern but standard web technology stack including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. However, there is room for improvement in security practices, particularly in implementing security headers and privacy compliance mechanisms. The security posture is moderate with HTTPS usage but lacks advanced protections. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security policies to align with best practices and regulatory requirements.