Security Directory

A

AMX

amx.com

70

AMX is a well-established brand specializing in professional audio video control systems and solutions, operating under the Harman International umbrella. The website targets enterprise AV professionals and system integrators, offering a comprehensive product catalog including automation controllers, touch panels, and networked AV distribution equipment. The site is localized in German, indicating a focus on the German-speaking market segment. Technically, the website employs a modern JavaScript stack with analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and HubSpot, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers are missing and could be improved. Privacy and cookie policies are hosted on the parent company domain, indicating centralized compliance management. The absence of WHOIS data is a notable gap but likely due to privacy protection or registrar policies rather than malicious intent. Overall, the site is professional, trustworthy, and business-focused.

J

JBL Professional

jblpro.com

68

JBL Professional is a well-established enterprise-level brand specializing in professional loudspeakers and audio equipment, operating under the parent company Harman International. The website targets professional audio customers, installers, and distributors globally, offering a comprehensive product catalog, support resources, and training. The digital infrastructure leverages modern JavaScript libraries, tracking tools, and is hosted on Amazon AWS, reflecting a mature technical environment with good mobile optimization and user experience. Security posture is strong with HTTPS enforcement and domain transfer protections, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is adequate with visible privacy and cookie policies linked via the parent company, but explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and aligned with industry standards.

O

Otto Bohuš

ottobohus.cz

48

Otto Bohuš is a Czech-based personal brand specializing in copywriting services, educational courses, audiobooks, and blog content aimed at helping businesses and individuals improve their text marketing and sales through compelling writing. The website is built on Drupal 7, hosted on Websupport infrastructure, and incorporates modern web technologies such as jQuery and SVG icons. It features a professional design with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit privacy or cookie policies. Tracking is implemented via Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate, well-maintained, and targets a niche market with a small business scale.

PROMISE Technology, Inc operates a professional website focused on high-performance storage solutions tailored for IT, cloud, surveillance, and rich media markets. The company positions itself as a leading developer offering scalable SAN, Thunderbolt, NAS, and cloud storage products. The website demonstrates a mature digital presence with comprehensive product catalogs, success stories, and promotional content targeting IT professionals and media production companies. Technically, the site employs modern web technologies including jQuery, Foundation CSS, and Google Analytics, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not evident. WHOIS data for the domain is unavailable, which introduces some uncertainty about domain registration legitimacy, but the overall branding and content quality support a credible business. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and providing clear contact information for security incidents.

S

Surfing Waves

surfing-waves.com

54

Surfing Waves is a well-established online resource dedicated to surfing enthusiasts, offering comprehensive tutorials, surf spot maps, community forums, news, and an e-commerce surf shop. Founded in 2003, the website has built a niche community and provides valuable content for surfers worldwide. The business model combines content delivery with product sales and community engagement, positioning it as a trusted surfing information hub. Technically, the website uses a mix of legacy and modern web technologies including jQuery, Google Tag Manager, and Typekit fonts. It is hosted behind Cloudflare DNS and uses HTTPS, ensuring basic security and performance. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content relevance. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and several important security headers. There is no visible cookie consent mechanism, and privacy compliance is partial. No direct company contact emails or phone numbers are provided, limiting transparency. Advertising is managed via Monumetric and Google DoubleClick, with moderate user tracking. Overall, Surfing Waves presents a moderate risk profile with good content quality and business credibility but could improve security posture and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and providing clearer contact information to enhance trust and compliance.

D

DVV Media Group GmbH

maritime-archives.com

53

Maritime Archives is a specialized digital archive platform operated by DVV Media Group GmbH, providing access to maritime industry publications such as Schiff&Hafen, Ship&Offshore, and New Ships. The platform targets maritime professionals and researchers, offering subscription-based and pay-per-access services. The website is professionally designed with consistent branding and good content relevance, supporting German and English languages. Technically, the site is built on ASP.NET WebForms with jQuery and Bootstrap, hosted on plusserver.com, and integrates Usercentrics for cookie consent and Google Analytics with IP anonymization for privacy compliance. Security posture is adequate with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business history, indicating legitimacy. Overall, the site scores well on business credibility and privacy compliance, with moderate technical and security scores.

G

Gesellschaft für Maritime Technik e.V.

maritime-technik.de

65

Gesellschaft für Maritime Technik e.V. (GMT) is a German non-profit association focused on maritime technology, fostering cooperation between companies and research institutions to develop technologies for ocean research, protection, and sustainable use. The website positions GMT as a key network in the maritime technology sector, providing services such as networking, events, publications, and advocacy. The technical infrastructure is based on a modern CMS platform (Website-Editor.net) with standard web technologies including jQuery and CDN delivery, hosted by 1AND1. The site is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, reflecting a mature digital presence. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and partner affiliations.

A

Asociace místních potravinových iniciativ, o.p.s.

asociaceampi.cz

44

Asociace místních potravinových iniciativ, o.p.s. is a Czech non-profit organization dedicated to fostering a close relationship between people and the land that sustains them. The organization focuses on educational programs for schools and communities about food, agriculture, and sustainable land use. It also supports community-supported agriculture and local food systems, positioning itself as a niche leader in ecological and community food initiatives within the Czech Republic. The website is professionally designed, content-rich, and targets educators, schools, and local communities. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, showing moderate digital maturity. Security posture is good with HTTPS enforced, but lacks some security headers and visible privacy compliance documentation. Overall, the site is safe, trustworthy, and well-maintained, though improvements in privacy policy visibility and security headers are recommended.

興

興隨興展覽股份有限公司

thetw.com

57

興隨興展覽股份有限公司是一家專注於國際大型及海外國際展覽代理與組展服務的公司，涵蓋安全器材、消費性電子、汽車零配件、專業機械、船舶及農機等多個領域。公司在美國CES及歐洲IFA Berlin等重要國際展覽中擔任主要組展單位，具備良好的市場地位和專業服務能力。網站內容豐富，針對企業及展覽參展商提供多元展覽服務與設計方案，並有深圳子公司支持中國大陸市場。技術基礎穩健，採用多種現代前端技術與分析工具，網站設計專業且具良好用戶體驗，支持多語言切換，並符合基本的隱私與GDPR要求。安全方面，網站使用HTTPS，實施Cookie同意機制，但缺乏明確的安全政策與事件響應資訊，且WHOIS資料缺失，對域名註冊狀態造成信任疑慮。整體風險中等，建議加強安全政策透明度及域名註冊資訊核實。

L

LandReise.de

landreise.de

49

LandReise.de is a specialized online platform offering rural vacation accommodations primarily in German-speaking Europe. The company focuses on providing families, couples, and groups with access to unique farm stays, holiday homes, huts, and hideaways. Their market position is strong within the niche of rural hospitality, supported by a comprehensive and professionally designed website that facilitates booking and discovery of over 4,000 properties. Technically, the website employs modern web technologies including Statamic CMS, Tailwind CSS, and JavaScript modules, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the platform demonstrates a mature digital presence with clear contact channels and social media integration, but could improve privacy transparency and security documentation.

H

Hedestoker ApS

hedestoker.dk

53

Hedestoker ApS is a Danish company specializing in the sale of heating and plumbing products, including pellet boilers (pillefyr), stoker boilers, solar heating systems, fireplaces, and district heating accessories. The company operates an e-commerce platform offering a wide range of products with price guarantees, professional advice, and installation services. Their market position is supported by positive customer reviews and a high credit rating from Dun & Bradstreet. Technically, the website uses established technologies such as jQuery, Font Awesome, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and published security policies. Overall, the website is professional, trustworthy, and well-suited for its target audience of Danish consumers and businesses seeking heating solutions.

V

Verband der deutschen Lack- und Druckfarbenindustrie e.V.

wirsindfarbe.de

56

The website www.wirsindfarbe.de represents the Verband der deutschen Lack- und Druckfarbenindustrie e.V., an established industry association for manufacturers of paints, coatings, and printing inks in Germany. The site provides industry news, publications, and resources targeted at stakeholders in the German manufacturing sector. The business model is focused on industry representation and member services, positioning the association as a key player in the German paint and printing ink market. The website is professionally designed, consistent in branding, and offers a good user experience with clear navigation and relevant content.

J

Joint Nature Conservation Committee

jncc.gov.uk

70

JNCC (Joint Nature Conservation Committee) is a UK government advisory body specializing in nature conservation. It provides scientific advice and coordination on biodiversity and environmental monitoring across the UK and internationally. The organization targets government entities, environmental professionals, researchers, and the public interested in nature conservation. The website reflects a professional and authoritative presence consistent with its government affiliation, offering comprehensive information, news, and resources related to its mission. Technically, the website employs a modern but stable technology stack including jQuery, Foundation framework, and Slick Carousel, integrated with Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, with a clear navigation structure and professional design. Hosting details are not explicit, but domain registration is through Nominet, consistent with UK government domains. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. The use of third-party libraries is current but should be monitored for updates. Overall, the security posture is good but could be enhanced by adding security headers and formal security policies. The overall risk assessment is low, with high trustworthiness and legitimacy due to the domain age, consistent WHOIS data, and professional content. Strategic recommendations include publishing a dedicated security policy, adding security headers, and providing incident response contacts to improve transparency and security maturity.

Vogler technische Leistungen GmbH is a Berlin-based electrical engineering company founded in 2002, specializing in residential and commercial construction projects. Their clientele includes Berlin housing cooperatives, government bodies, and private clients. The company offers services such as new construction, renovations, building technology, data technology, and project planning. The website is built on TYPO3 CMS with a moderate technical infrastructure including jQuery and Google reCAPTCHA for security. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA, though lacking advanced security headers and explicit incident response policies. Overall, the website reflects a trustworthy small business with professional presentation and clear contact information.

F

Figurentheater-Kolleg

ft-k.de

42

Figurentheater-Kolleg is a specialized educational institution based in Germany offering comprehensive training, courses, and workshops in the field of figurentheater, puppetry, and related performing arts. The website presents a professional and well-structured digital presence that effectively targets professionals and learners interested in these niche arts. Their offerings include foundational training, advanced courses, and various projects and events, positioning them as a niche leader in their sector. Technically, the website is built on a modern stack including Foundation 6, jQuery, GSAP animations, and the RapidWeaver CMS platform. It is hosted on German-based servers, ensuring regional consistency and likely good performance for its target audience. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and includes privacy policy compliance with GDPR. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, and the contact form includes anti-spam measures. Overall, the website is trustworthy, professional, and safe for general audiences. The domain registration data aligns with the website's geographic and business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing explicit security and incident response policies to further strengthen trust and compliance.

H

Heiner-Rust-Stiftung

heiner-rust-stiftung.de

54

The Heiner-Rust-Stiftung website represents a small non-profit foundation focused on promoting and supporting sports activities for people with disabilities in Germany. The foundation collaborates with regional partners such as Lotto Niedersachsen and the Sparkassenverband to fund and facilitate inclusive sports projects. The website content is well-structured, professionally designed, and clearly targeted at sports organizations and individuals interested in disability sports inclusion. Technically, the website is built using the RapidWeaver CMS with the Foundry theme and Stacks plugin, leveraging technologies like jQuery, Bootstrap, and Font Awesome. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie consent banner present but no detailed GDPR compliance indicators or data protection officer contact information. Overall, the website is trustworthy and professional for its non-profit purpose but could enhance its security posture and privacy compliance to better protect users and build further trust.

S

SEH Engineering GmbH

seh-engineering.de

62

SEH Engineering GmbH is a medium-sized German engineering and manufacturing company specializing in steel construction, bridge building, and related services. The company operates multiple subsidiaries and offers a broad portfolio of products and services including steel bridge construction, steel building construction, reconstruction, system bridges, conveyor technology, and corrosion protection. The website is professionally designed using TYPO3 CMS and modern frontend libraries, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well managed with Cookiebot for cookie consent and Matomo for analytics, reflecting a strong commitment to GDPR compliance. Security posture is adequate with HTTPS and consent management but lacks explicit security policies and headers. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and established business.

H

HD하이드로젠

hdhydrogen.com

57

HD하이드로젠 is a newly established South Korean company specializing in advanced hydrogen energy technologies, including fuel cells and electrolyzers based on third-generation solid oxide technology. As part of the HD Hyundai group, it holds a strategic position in the sustainable energy sector, targeting industrial and commercial markets with innovative carbon-neutral solutions. The website reflects a professional corporate presence with clear navigation and relevant business content primarily in Korean. Technically, the site uses a modern JavaScript stack with libraries like jQuery, Swiper, and GSAP, though no CMS or hosting details are evident. Security posture is moderate, with domain transfer protection but lacking DNSSEC and visible security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or incident response information. Overall, the site is well-branded and consistent with the parent group’s ecosystem, linking extensively to related subsidiaries and partner domains.

The Las Vegas Convention and Visitors Authority (LVCVA) operates as the official destination marketing organization for Southern Nevada, focusing on promoting tourism, conventions, meetings, and special events. The website reflects a professional and well-structured digital presence, targeting tourists, event planners, and hospitality professionals. It highlights its market position as a leading destination marketing organization, recognized by industry awards. Technically, the site employs a modern technology stack including jQuery, RequireJS, Plyr video player, and Google Tag Manager, hosted on a CMS platform (Simpleview CMS) optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are not explicitly found, indicating room for compliance enhancement. The WHOIS data is unavailable or privacy protected, which slightly reduces domain trust but the website content and design strongly indicate legitimacy. Overall, the site is professional, secure, and credible with recommendations to improve privacy compliance and security headers.

K

KOVOPLAST, výrobní družstvo

kovoplastvd.cz

46

KOVOPLAST, výrobní družstvo is a Czech manufacturing cooperative specializing in the production of high-quality plastic and metal components primarily for the automotive, construction, consumer, healthcare, electrical, and engineering industries. With a 30-year tradition, the company emphasizes employing persons with changed work ability, reflecting a socially responsible business model. Their key services include serial production of plastic and metal parts, tool making, and assembly of products according to customer specifications. The company holds the IATF 16949 certification, indicating adherence to automotive quality standards. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Google reCAPTCHA v3, and Google Maps API. The site is mobile-optimized with good SEO practices and uses HTTPS for secure communication. However, some security best practices such as security headers are missing, and privacy and cookie policies are not explicitly found, indicating room for improvement in compliance and security posture. Security-wise, the site uses HTTPS and reCAPTCHA to protect forms, but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and certifications support legitimacy. Overall, the website is professional and trustworthy from a business perspective but would benefit from enhanced privacy disclosures, security headers, and verified domain registration information to improve compliance and trust.

Visit Atlantic City operates as the official convention and visitor bureau for Atlantic City, providing comprehensive tourism information including events, attractions, dining, accommodations, and travel planning tools. The website serves as a central hub for visitors and group travel planners, offering curated itineraries and promotional deals. The organization positions itself as a key regional tourism promoter with a professional and consistent brand presence. Technically, the website employs a modern tech stack with multiple third-party analytics and marketing integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional content and social media presence support its credibility. Overall, the site is well-designed for its audience but would benefit from enhanced privacy compliance and security transparency.

Visit Atlantic City operates as the official destination marketing organization for Atlantic City, providing comprehensive tourism information, event calendars, group travel support, and promotional services. The website targets tourists, event planners, and group travelers, offering a broad range of services to enhance visitor experience and promote Atlantic City as a travel destination. The business model centers on tourism promotion and visitor engagement, positioning itself as a key player in the hospitality sector within the United States. Technically, the website is built on the Simpleview CMS platform, utilizing a modern technology stack including jQuery, RequireJS, Google Tag Manager, and various analytics and marketing tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure supports extensive user tracking and marketing efforts, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and employs several best practices such as asynchronous script loading and no visible sensitive data exposure. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. The absence of privacy and cookie policies, as well as WHOIS registration data, presents compliance and legitimacy concerns that should be addressed. Overall, the website is professional and trustworthy in appearance but requires improvements in privacy compliance and security header implementation. The missing WHOIS data is a notable anomaly that could impact trustworthiness assessments. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and clarifying domain registration details to strengthen business credibility and compliance.

CatchDesMoines.com is a professionally designed tourism and visitor information website focused on promoting Greater Des Moines. It provides comprehensive guides on things to do, events, hotels, restaurants, and resources for meeting planners. The site targets visitors and planners interested in Des Moines tourism, positioning itself as an official resource likely affiliated with the Greater Des Moines Convention and Visitors Bureau. Technically, the site uses a modern tech stack including jQuery, RequireJS, Cloudinary, Vimeo API, and multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized, accessible, and SEO friendly. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which is unusual and slightly reduces trust, but the professional content and branding support legitimacy. Privacy and cookie policies are not explicitly found, indicating a compliance gap. Overall, the site is a credible and well-maintained tourism portal with room for improvement in privacy and security transparency.

Visit Knoxville operates as a regional tourism promotion website providing comprehensive information about events, attractions, accommodations, and dining in Knoxville, Tennessee. The site targets tourists, families, couples, and event planners, positioning itself as a key resource for visitors to the region. The business model centers on destination marketing and visitor engagement through digital content and trip planning tools. Technically, the website employs a modern tech stack including jQuery, RequireJS, and various media and analytics integrations, hosted on a CMS platform known as Simpleview. The site demonstrates good mobile optimization, SEO practices, and user experience design. Security posture is solid with HTTPS enforced and some security best practices observed, though additional headers and integrity checks could enhance protection. Privacy compliance is basic with privacy and cookie policies present, but no explicit GDPR compliance indicators or detailed data retention policies were found. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional presentation and partner integrations suggest a legitimate entity. Overall, the site scores well on content and technical implementation but should address WHOIS transparency and enhance security headers for improved trust.

Atlantic City Sports Commission operates as a regional sports destination marketing organization focused on promoting Atlantic City as a premier location for sports events. The website offers resources such as sports planning guides, venue information, and destination services targeted at sports event planners and organizations. The technical infrastructure is built on a modern stack including RequireJS, jQuery, Vue.js, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized and demonstrates good accessibility and SEO practices. Security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable due to privacy protection, which is typical for this business type. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

V

VISIT Milwaukee

visitmilwaukee.org

66

VISIT Milwaukee operates as the official destination marketing organization for the city of Milwaukee, providing comprehensive tourism information including restaurants, breweries, events, and hotels. The website is designed to serve tourists and visitors planning trips to Milwaukee, offering event calendars, lodging options, and local guides. The business model focuses on promoting Milwaukee as a travel destination, leveraging digital content and interactive maps to engage users. The site positions itself strongly within the hospitality sector, targeting a broad audience interested in travel and local experiences. Technically, the website employs a modern technology stack including RequireJS, jQuery, Plyr video player, and Glide.js sliders, integrated within the Simpleview CMS platform. It uses multiple analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing infrastructure. The site is mobile-optimized with good accessibility features and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and includes some security headers, though explicit Content-Security-Policy and X-Frame-Options headers are not evident. There is no visible exposure of sensitive data or vulnerable libraries. However, the absence of clear privacy and terms of service pages and incident response policies suggests room for improvement in compliance and transparency. The WHOIS data is unavailable due to query failure or privacy protection, but the website's professionalism and trust signals support its legitimacy. Overall, VISIT Milwaukee presents a well-structured, content-rich, and professionally maintained website suitable for its tourism promotion purpose. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and maintaining up-to-date third-party libraries to strengthen security posture and compliance.

W

WBG Wittenberg

wbg.de

43

WBG Wittenberg operates as a regional real estate company specializing in housing and property management services in Wittenberg, Germany. The website is built on WordPress and integrates modern consent management tools such as Usercentrics, indicating a commitment to privacy compliance. The technical infrastructure includes standard web technologies and Google Maps integration for location services. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but lacks explicit security policies and vulnerability disclosures. Overall, the website presents a professional image with good content quality and user experience, though it would benefit from enhanced transparency in privacy and security documentation.

ITS España is a non-profit association founded in 2002 that serves as a key forum in Spain for the intelligent transport systems sector, uniting public, private, and academic stakeholders to promote safer, sustainable, and efficient mobility. The website reflects a professional and consistent brand presence targeting industry professionals and organizations involved in transport technologies. Technically, the site uses a modern tech stack including jQuery, Flexslider, and Mapbox, hosted on a 1&1 IONOS platform with PWA capabilities and multilingual support. Security posture is adequate with HTTPS and cookie consent implemented, though lacking explicit security policies and advanced security headers. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, but could improve transparency around security and incident response.

M

Městský úřad Jílové u Prahy

jilove.cz

48

The website represents the official municipal portal for the town of Jílové u Prahy, Czech Republic. It serves as a comprehensive information and service hub for residents and visitors, offering access to local government services, news, event calendars, and citizen portals. The site is well-positioned as a trusted local government resource with a clear focus on community engagement and public service delivery. The presence of social media links and regular content updates further enhance its outreach and relevance. From a technical perspective, the website employs a custom CMS platform (Vismo) and integrates common web technologies such as jQuery, Google reCAPTCHA, and Google Translate. The site is hosted with a reputable provider (Active24) and uses HTTPS to secure communications. Mobile optimization and accessibility features are adequately implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforcement and anti-bot measures on forms, though there is room for improvement in implementing security headers and explicit incident response policies. Privacy compliance is basic but present, with a privacy policy and cookie information available, though no active consent mechanism is detected. Overall, the site demonstrates a good balance of usability, security, and compliance appropriate for a municipal government entity. Strategically, the website should focus on enhancing security headers, formalizing incident response contacts, and improving cookie consent mechanisms to strengthen GDPR compliance and user trust. These steps will help maintain the site's integrity and protect citizen data while supporting its role as a reliable public service platform.

B

b.i.g. bechtold ingenieurgesellschaft mbH

vwi.de

58

The website represents the engineering bureau VWI, now part of the big. bechtold-gruppe since July 2021. It specializes in electrical engineering and building technology services, targeting business clients primarily in Germany. The site positions itself as a subsidiary within a larger engineering group, providing consultancy and technical services. The content is professional, primarily in German, and includes clear contact information and links to the parent company and related associations. Technically, the site uses a modern but basic tech stack including jQuery, Mapbox, and Snowplow analytics, hosted on 1&1 IONOS infrastructure. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR, though it could improve in terms of security best practices and transparency.

S

Stone Gallery

stonegallery.cz

53

Stone Gallery is a Czech Republic-based specialist retailer and installer of stone, brick, ceramic, plaster, and concrete cladding and flooring materials. With over 20 years of experience, the company offers a broad product range including custom stone products and construction chemicals, targeting both professional builders and end consumers. The website reflects a mature e-commerce platform with a physical store presence in Prague, supported by certifications such as dTest and Heureka, enhancing customer trust. Technically, the site uses modern JavaScript libraries and tracking tools like Google Tag Manager, Facebook Pixel, and Hotjar, with a CMS likely based on the Nette Framework. Security posture is good with HTTPS enforced and secure forms, though some improvements like security headers and cookie consent mechanisms are recommended. The absence of WHOIS data reduces domain trustworthiness, but the overall business and website professionalism remain high.

PA Sports is a collaborative sports tourism organization representing 13 member destinations across Pennsylvania, aiming to attract and service quality sports events. The website is professionally designed, mobile-optimized, and uses modern web technologies including RequireJS, jQuery, and Google Tag Manager. The site employs HTTPS and a consent management platform to manage user privacy preferences. However, no explicit privacy policy or terms of service were found on the analyzed page, and no contact information is readily available. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the professional nature of the site. Overall, the website presents a good security posture with room for improvement in privacy compliance and domain registration transparency.

W

Webové aplikace s.r.o.

webap.cz

53

Webové aplikace s.r.o. is a Czech Republic based small business specializing in web development, e-commerce solutions, and graphic design services primarily serving the Ostrava, Opava, and Hlučín regions. The company offers responsive websites, custom web applications, e-shop systems, and graphic design including logos and corporate identity. Their market position is that of a regional specialized agency with a portfolio of local and international clients. The website demonstrates a professional design with good navigation and mobile responsiveness, leveraging common JavaScript libraries and Google Analytics for tracking. However, the absence of WHOIS data limits domain legitimacy verification. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. Contact information is available via a contact form and social media but lacks direct email or phone contacts. Overall, the website is safe and business-focused with no adult or questionable content.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

S

Strauhof

strauhof.ch

49

Strauhof is a small Swiss cultural institution and museum dedicated to literature, offering exhibitions, events, and educational programs. The website serves as an information portal for current and upcoming exhibitions and literary events, targeting literature enthusiasts and the general public interested in cultural activities. The business model revolves around cultural promotion and education rather than commercial sales. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and jQuery, with Google Tag Manager integrated for analytics. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, it lacks security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanism. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

L

Landeshauptstadt Schwerin

schwerin.de

48

The website www.schwerin.de serves as the official municipal portal for the city of Schwerin, Germany, providing comprehensive information and services for residents, tourists, and businesses. It offers extensive content on culture, tourism, city administration, events, and digital services, positioning itself as a key digital touchpoint for the city government. The site targets a broad audience including citizens, tourists, and entrepreneurs, with a focus on accessibility and multilingual support. The business model is that of a government service portal, emphasizing public information dissemination and service facilitation.

R

Really Free GEO IP API | reallyfreegeoip.org

reallyfreegeoip.org

54

ReallyFreeGeoIP.org is a small technology service providing a free public IP geolocation API compatible with the deprecated freegeoip.net API. The service targets developers and users seeking simple, no-account-required IP geolocation data. The website is built using the Silex website builder, hosted and registered via Cloudflare, and employs Google Tag Manager for analytics. The site enforces HTTPS and has a consistent branding and design quality, optimized for mobile devices. However, it lacks critical compliance and transparency elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information. Security headers are not present, and no incident response or vulnerability disclosure information is provided, which limits trust and compliance posture.

S

Schwäbischer Turnerbund (STB) e.V.

kinderturn-kongress.de

50

The Kinderturn-Kongress website represents a specialized event platform focused on children's gymnastics, organized by the Schwäbischer Turnerbund (STB) e.V. The site provides event information, partner details, and resources for trainers and clubs involved in children's gymnastics in the Württemberg region of Germany. The business model centers on event organization and community support within the sports sector, targeting trainers and club representatives. The website is well-branded and consistent with its organizational partner STB, featuring clear contact channels and social media integration. Technically, the site is built on TYPO3 CMS with a modern tech stack including Bootstrap, jQuery, and ECharts for interactive content. Hosting is provided by Hetzner, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices. Privacy compliance is robust, leveraging Usercentrics for consent management and Matomo for analytics with cookie consent enforcement. From a security perspective, the site uses HTTPS and integrates reCAPTCHA with consent requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The overall security posture is good but could be improved by implementing security headers and publishing formal security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It serves its niche audience effectively with clear communication and a solid technical foundation. Strategic improvements in security transparency and accessibility could further enhance its maturity and trustworthiness.

E

ECOTRANS

destinet.eu

51

The website destinet.eu operates as a knowledge networking portal dedicated to sustainable and responsible tourism. It serves as a platform connecting various stakeholders including businesses, certification bodies, destination administrations, and NGOs. The portal offers resources such as courses, publications, a market place, and news updates, positioning itself as a key player in the sustainable tourism ecosystem. The business model is non-profit and focuses on collaboration and information dissemination to promote sustainability in tourism. Technically, the site uses a Naaya CMS platform with a tech stack including jQuery, Google Analytics, Google Tag Manager, and Slick Carousel. The site is mobile optimized and has good SEO practices, though some technical debt exists with the use of an older jQuery version. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks advanced headers like CSP and a cookie consent mechanism. WHOIS data indicates consistent and legitimate domain registration without privacy protection, aligning with the website's business purpose. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

S

Schwäbischer Turnerbund (STB) e.V.

stb.de

53

The Schwäbischer Turnerbund (STB) e.V. is a well-established non-profit sports federation based in Stuttgart, Germany, serving sports clubs, volunteers, and various age groups including children, youth, and seniors. The organization offers a broad range of services including education, event organization, fitness and health programs, and support for member clubs. Their market position is strong regionally within Baden-Württemberg, supported by a professional and content-rich website. The digital infrastructure is based on TYPO3 CMS with modern technologies and integrations such as Usercentrics for consent management and Matomo for analytics, hosted on a reputable provider (Hetzner).

C

Centigrade GmbH

centigrade.de

48

Centigrade GmbH is a medium-sized German technology company specializing in human-centered IT solutions, focusing on digital product development, UX design, software engineering, and AI integration. The company serves business clients seeking to enhance user experience and digital transformation success. Their website reflects a mature digital presence with comprehensive service descriptions, client references, and industry awards, positioning them as a reputable player in the UX and software engineering consultancy market. Technically, the website employs a modern tech stack including jQuery, lazy loading, Google Analytics with privacy features, and a consent management platform (Usercentrics). The site is mobile-optimized, accessible, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, uses consent management for GDPR compliance, and implements form validation with required privacy consent. However, it lacks explicit security policies, incident response information, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with room for improvement in transparency and security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk level is low, but strategic enhancements in security documentation and incident response readiness are recommended to further strengthen trust and compliance.

N

NetZone AG

netzone.ch

78

NetZone AG is a Swiss-based hosting provider specializing in web hosting, email services, domain registration, managed vServers, SMS, and security solutions. The company positions itself as a pioneer in Swiss hosting with a strong emphasis on Swiss server location, high availability, and security features such as spam and malware filtering and application firewalls. The website reflects a professional and consistent brand image targeting businesses and individuals seeking reliable hosting services in Switzerland. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap 3.3.7 and jQuery 2.2.4, with integrations for Google reCAPTCHA and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and secure forms, but lacks explicit security headers and a published security policy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and SEO.

S

Sekundarschule Turbenthal-Wildberg

sektw.ch

55

Sekundarschule Turbenthal-Wildberg is a small secondary school located in Turbenthal, Switzerland, serving approximately 200 students. The school focuses on fostering student development, responsibility, and mutual respect within its community. The website provides clear contact information and educational content targeted at students, parents, and staff. Technically, the site uses a mix of older and modern JavaScript libraries and frameworks, including jQuery, Alpine.js, and Vue.js, and appears to be built on a custom CMS platform named Escola. The site is mobile optimized and has a moderate performance profile. Security-wise, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, indicating compliance gaps. No vulnerability disclosure or incident response information is present. Overall, the website is professional, trustworthy, and safe for general audiences but would benefit from enhanced privacy and security measures.

WebThinker GmbH is a small German technology service provider specializing in web design, online marketing, web development, tracking, analysis, and consulting. The company holds reputable certifications such as Google Partner and Shopware Partneragentur, positioning it well in the digital services market. Their website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the business demonstrates legitimacy and trustworthiness with clear contact information and positive customer testimonials.

Simpleview Europe is a specialized digital agency providing comprehensive tourism technology solutions including CMS, CRM, DMS, and digital marketing services. As part of Granicus, it holds a strong market position serving Destination Management Organisations and tourism boards across Europe. The website reflects a mature digital presence with modern technologies and extensive service offerings. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The technical infrastructure is robust with use of modern JavaScript frameworks and analytics tools, supporting good performance and user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

Informationsdienst Holz operates a specialized informational website focused on indoor air quality and wood construction, targeting planners, builders, and construction companies in Germany. The site provides neutral, factual content including research, legal questions, and recommendations to support healthy indoor environments. The business model centers on expert consulting and information dissemination rather than direct sales. Technically, the website uses a moderate technology stack including jQuery and WOW.js for animations, and Matomo for privacy-conscious analytics. The site is mobile-optimized with good SEO practices but lacks some modern security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security policies and headers. Overall, the site is trustworthy and professional, with clear contact information and regularly updated content. No adult or questionable content is present, making it safe for general audiences.

C

Canal9

canal9.ch

61

Canal9 is a regional public service media broadcaster serving the Valais canton in Switzerland, offering bilingual French and German programming. The website provides news, magazine shows, live streaming, and replay services, supported by advertising and sponsorship. The company maintains a clear contact presence and social media engagement, positioning itself as a trusted regional media outlet. Technically, the site is built on WordPress with common plugins for ads, forms, and social integration, hosted by Infomaniak, a reputable Swiss provider. Security measures include HTTPS, Google reCAPTCHA, and GDPR cookie consent, though formal security and incident response policies are not published. Overall, the site is professional, content-rich, and trustworthy with moderate technical maturity and good privacy compliance.

A

Atelier Mondial

ateliermondial.com

50

Atelier Mondial is a small, regionally focused non-profit arts organization based in Switzerland that supports artists through scholarships and residencies abroad. The website reflects a professional and consistent brand presence, targeting artists and cultural professionals primarily in the Basel and surrounding regions. The organization collaborates with multiple cultural partners and provides detailed information about events, artists, and programs. Technically, the website uses a mix of older and modern JavaScript libraries and is hosted on a provider associated with the domain's nameservers. While the site is mobile-optimized and offers a good user experience, some technical debt is evident in the use of outdated libraries and lack of advanced security headers. Security posture is moderate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and no incident response or vulnerability disclosure policies are published. Privacy compliance is strong with a clear cookie consent mechanism and a privacy policy in German. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

G

G3 Shopping Resort Gerasdorf

g3-shopping.at

67

G3 Shopping Resort Gerasdorf is a large retail shopping center located in Austria, offering a diverse range of over 130 shops including fashion, food, electronics, sports, and gastronomy. The website reflects a professional and well-branded digital presence with comprehensive information about the center, its shops, gastronomy, events, and services. The business model focuses on physical retail complemented by online services such as gift voucher sales. The site targets a general audience including local and regional shoppers. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Tag Manager and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices.

B

BIKE&CO Germany

matrix-bikeparts.de

51

Matrix-BikeParts is a German bicycle parts and accessories brand operating under the BIKE&CO umbrella. The website presents a professional and modern digital presence, highlighting a broad product range and partnerships with well-known bicycle brands. The technical infrastructure is based on the Neos CMS and Flow PHP framework, with integration of Google Tag Manager and Cookiefirst for consent management, indicating a mature digital marketing and compliance approach. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-branded, and targets the German bicycle retail market effectively.