Security Directory

R

Home

regioit.de

54

The website www.regioit.de represents a German business with a focus on IT services or related technology sectors, as inferred from the domain and technical setup. The site uses the DNN CMS platform and integrates cookie consent management via Cookiebot, along with analytics and marketing tracking through eTracker and Facebook Pixel. However, the website lacks explicit privacy policy, terms of service, and contact information pages, which are critical for compliance and user trust. The technical infrastructure is moderately modern with HTTPS enabled and basic JavaScript libraries, but security headers are missing, indicating room for improvement in security posture. Overall, the site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

U

UBC

ubc.com

65

UBC is a healthcare-focused company specializing in connecting specialty therapies to patients through modern, customized solutions in access, safety, and evidence generation. The company appears to have a mature market presence, supported by a domain registered since 1997 and a professional website that targets healthcare providers and pharmaceutical partners. The website leverages a WordPress CMS with Elementor, integrating marketing and analytics tools such as HubSpot and Google Tag Manager, and employs Cookiebot for GDPR-compliant cookie consent management. Security measures include HTTPS enforcement and reCAPTCHA integration, though some security headers and policies are absent, indicating room for improvement. Overall, the website presents a professional and trustworthy digital presence with moderate technical maturity and good privacy compliance.

K

Kenjo

kenjo.io

68

Kenjo is a technology company offering workforce management software tailored for small and medium enterprises (SMEs) with deskless teams. Their platform consolidates HR tasks such as shift planning, time tracking, and payroll preparation into a single solution, positioning them as a specialized SaaS provider in the HR tech space. The website reflects a professional and consistent brand image with clear messaging targeting SMEs managing deskless workers. Technically, the site leverages modern frameworks like Next.js and React, integrates multiple analytics and marketing tools, and employs a cookie consent mechanism compliant with GDPR standards. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and incident response information are absent. Overall, the site is well-structured, performant, and trustworthy, with no signs of blocking or WAF interference.

G

Goethe Business School

goethe-business-school.de

65

Goethe Business School is a reputable educational institution based in Frankfurt am Main, Germany, offering part-time Master and MBA programs along with executive education tailored for professionals. The website reflects a professional and consistent brand image, targeting a global audience of career-oriented individuals seeking advanced business education. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for GDPR-compliant cookie management. The presence of a detailed cookie consent mechanism and a comprehensive privacy policy indicates a strong commitment to privacy compliance. Security-wise, the site enforces HTTPS and uses consent management effectively, though it lacks explicit security headers and published security policies or incident response contacts. Overall, the website demonstrates a solid security posture with room for improvement in transparency and contact availability. The domain WHOIS data is limited but does not raise immediate concerns, aligning moderately with the business's legitimacy. Strategic recommendations include adding terms of service, publishing security policies, and enhancing contact information to improve trust and compliance.

T

Techmania Science Center

techmania.cz

63

Techmania Science Center is a well-established interactive science and educational center located in the Czech Republic, founded in 2006. The website presents a professional and comprehensive digital presence showcasing their interactive exhibits, 3D planetarium, science shows, and educational workshops. The business targets families, schools, and science enthusiasts, positioning itself as a regional leader in science education and entertainment. Technically, the website employs modern web technologies including JavaScript, Bootstrap, Google reCAPTCHA, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and session management cookies, though some security headers could be improved. Privacy compliance is strong with a clear GDPR-compliant privacy and cookie policy and active consent mechanisms. Overall, the website is trustworthy, well-maintained, and suitable for its audience.

Z

Zdravotní klaun

zdravotniklaun.cz

58

Zdravotní klaun is a Czech non-profit organization dedicated to bringing joy and laughter to children in hospitals and geriatric patients in senior homes since 2001. The website reflects a mature digital presence with a professional design and consistent branding. It leverages TYPO3 CMS and integrates multiple modern frontend libraries and accessibility tools to enhance user experience. The organization uses comprehensive cookie consent mechanisms and integrates major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Microsoft telemetry to monitor and optimize its outreach and engagement. However, the absence of WHOIS data and explicit privacy policy pages introduces some concerns regarding domain legitimacy and full privacy compliance. Overall, the website demonstrates a good security posture with HTTPS enforcement and standard security practices, but could improve by adding more security headers and explicit privacy documentation.

A

Alphabet partner s.r.o.

onlineobec.sk

53

Online Obec, operated by Alphabet partner s.r.o., is a Slovak-based technology company specializing in digital solutions tailored for municipalities and local governments. The company offers an integrated ecosystem including municipality websites, mobile applications, and mobile broadcasting services designed to simplify administrative tasks and enhance citizen communication. With over 350 municipalities served, Online Obec holds a strong regional market position as a trusted provider of affordable and automated digital tools for public administration. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. The infrastructure supports responsive design, accessibility, and SEO best practices, ensuring a good user experience across devices. The use of Google Tag Manager and Cookiebot indicates a mature approach to analytics and user consent management. From a security perspective, the site enforces HTTPS with DNSSEC enabled, employs cookie consent mechanisms, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response contacts are not present, representing an area for improvement. Overall, the security posture is solid but could be enhanced with additional headers and documented policies. The overall risk assessment is low, with the website demonstrating professionalism, compliance with GDPR, and strong business credibility. Strategic recommendations include formalizing security policies, enhancing incident response readiness, and continuous monitoring of third-party scripts to maintain security and compliance.

A

ATELIERS MECANIQUES DE SAUCOURT

ressorts-ams.com

57

ATELIERS MECANIQUES DE SAUCOURT (AMS) is a French manufacturer specializing in the production of industrial springs, offering both small and large series fabrication. Positioned regionally in Hauts-de-France and part of the QUARSOR SPRING SOLUTIONS group, AMS serves various industrial sectors including automotive, agriculture, medical, and luxury goods. Their website reflects a professional and consistent brand image, emphasizing certifications such as ISO9001 and IATF 16949, which reinforce their quality and reliability in manufacturing. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. The presence of Cookiebot for cookie consent and Google Analytics for traffic monitoring indicates a mature digital infrastructure with attention to privacy compliance. However, the absence of visible security headers and incomplete WHOIS data are notable gaps. From a security perspective, the site benefits from HTTPS encryption and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. The missing WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is secure and professional but could improve in transparency and security best practices. The overall risk assessment is moderate with recommendations focusing on domain registration verification, enhanced security headers, and clearer security policies. These improvements will strengthen AMS's digital trustworthiness and compliance posture.

P

Penn State Health

pennstatehealth.org

66

Penn State Health is a large, multi-hospital healthcare system serving central Pennsylvania, providing comprehensive medical services to patients and communities. The website reflects a professional healthcare provider with clear branding and a focus on patient care. The organization leverages modern web technologies including Drupal 10 CMS and integrates multiple analytics and marketing tools to optimize user experience and outreach. The presence of structured data and official social media links enhances credibility and discoverability. Technically, the website is built on a mature and scalable platform with good mobile optimization and accessibility features. Performance is moderate, supported by CDN and third-party services. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and published security policies are absent. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is unavailable due to query failure or privacy protection, which is common for healthcare entities to safeguard registrant information. Despite this, the website's content, branding, and external references strongly indicate legitimacy. Privacy compliance is well addressed with a comprehensive cookie consent banner and GDPR-related mechanisms. Overall, the website presents a trustworthy and professional digital presence for Penn State Health, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.

U

UPMC

upmc.com

66

UPMC is a leading healthcare provider and hospital system prominently positioned as the #1 ranked hospital in Pittsburgh according to U.S. News. The website serves patients and healthcare consumers by providing services such as doctor search and appointment requests. The digital infrastructure is built on a modern CMS (Sitecore) and integrates multiple third-party analytics and marketing tools including Piwik PRO, Visual Website Optimizer, and Cookiebot for consent management. The site demonstrates professional design, mobile optimization, and good SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and explicit security policies in the provided content. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for large enterprises. Overall, the website is professional, trustworthy, and well-positioned in the healthcare sector.

T

Turun yliopisto

utu.fi

11

Turun yliopisto is a large Finnish university serving approximately 25,000 students and staff, focusing on education, research, and societal impact. The website reflects a mature digital presence with comprehensive academic content, clear navigation, and strong branding consistency. The technical infrastructure is modern, leveraging Drupal 10 CMS, Cloudflare for security and performance, and multiple third-party analytics and marketing tools integrated with GDPR-compliant consent mechanisms. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with detailed policies and cookie consent. Overall, the site demonstrates high professionalism and trustworthiness suitable for an academic institution.

D

Danone s.r.o.

danonesutaze.sk

52

Danone s.r.o. operates the website www.danonesutaze.sk as a promotional platform for Danone product contests targeting Slovak consumers. The site aggregates current and past contests, providing users with opportunities to participate and win prizes. The business model focuses on consumer engagement and brand promotion within the retail sector in Slovakia. The website is professionally designed using WordPress with Oxygen Builder, featuring responsive design and clear navigation. It integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS enforced and appropriate security headers present. Privacy compliance is well addressed with comprehensive cookie and privacy policies linked and a consent mechanism implemented. Contact information is clearly provided, enhancing business credibility. No critical security or content safety issues were detected, and the domain registration data aligns well with the business identity, indicating legitimacy.

H

HELLENiQ ENERGY

helleniqenergy.gr

71

HELLENiQ ENERGY is a leading energy group operating in Southeastern Europe with activities spanning six countries. The company focuses on refining, supply, and sales of petroleum products and petrochemicals, positioning itself as a key player in the energy sector. Their website reflects a professional corporate presence with clear branding and comprehensive business information. The target audience includes industry stakeholders, partners, and customers interested in energy solutions with a focus on low carbon emissions. Technically, the website is built on Drupal 9, leveraging modern web technologies such as jQuery UI and Slick Carousel for UI components. It integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements multiple security headers, contributing to a strong security posture. Cookie consent mechanisms comply with GDPR requirements, offering users granular control over cookie categories. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in transparency around security policies and incident handling would further strengthen its security and compliance posture.

P

PIBS

pibs.cz

63

Prague International Business School (PIBS) is an established educational institution based in the Czech Republic, specializing in advanced management education including MBA, DBA, and LL.M programs. The school targets current and future leaders seeking to enhance their managerial knowledge and skills, leveraging a network of experienced professors and business leaders. The website reflects a professional and consistent brand image with clear navigation and relevant content for prospective students. Technically, the site is built on WordPress using the Genesis Framework and Yoast SEO, hosted by Active24, and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers are not detected and could be improved. Privacy compliance is good with a detailed cookie consent mechanism, but explicit privacy and terms of service pages are not found in the provided content. Overall, PIBS presents a trustworthy and professional online presence suitable for its educational mission.

S

SSL For Free

sslforfree.com

63

SSL For Free is a technology-focused website offering free SSL certificates issued quickly for one or multiple domains, including support for wildcards and ACME protocol. The service targets website owners and administrators seeking to secure their sites with HTTPS at no cost. The website is positioned as a niche provider leveraging the ZeroSSL infrastructure, evident from related domains and cookie consent data. The business model centers on providing free SSL certificates with tutorials and user support, catering to a broad audience of webmasters and developers. Technically, the website employs modern analytics tools such as Google Analytics, Google Tag Manager, Ahrefs Analytics, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and uses HTTPS exclusively, ensuring secure communications. However, no explicit CMS or hosting provider is identified, and some security headers are missing, suggesting room for technical improvements. From a security perspective, the site demonstrates good practices with HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a security.txt file and public incident response policies indicates an opportunity to enhance transparency and security posture. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but does not necessarily indicate malicious intent given the legitimate content and related domains. Overall, SSL For Free presents a trustworthy and professional service with a strong focus on free SSL certificate issuance. Strategic recommendations include improving WHOIS transparency, adding security headers, publishing security policies, and enhancing contact information visibility to bolster business credibility and security compliance.

N

Nej.cz

pb.cz

74

Nej.cz is a Czech telecommunications provider offering internet, digital television, and telephone services primarily targeting personal and business customers within the Czech Republic. The company operates as part of the O2 group, leveraging its infrastructure and service platforms. The website presents a professional and consistent brand image with clear service offerings and customer support channels. Technically, Nej.cz employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for consent management, Hotjar for user behavior analytics, and reCAPTCHA for form security. The site is well-optimized for mobile devices and includes comprehensive cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the business context and content quality. Overall, Nej.cz demonstrates a mature digital presence with good security and privacy compliance, suitable for its telecommunications market segment.

Demcon is a technology company focused on attracting and recruiting technology professionals through its careers website. The site is designed to showcase career opportunities and engage talent interested in technology sectors. The company appears to be medium-sized and founded in 2018, with a consistent domain registration and hosting setup. The technical infrastructure leverages modern JavaScript frameworks such as Nuxt.js, integrates Google Tag Manager and YouTube APIs, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service in the provided content. Overall, the website is professional and functional, but could improve transparency and security practices to enhance trust and compliance.

Z

ZeroSSL

zerossl.com

66

ZeroSSL is a technology company specializing in providing free and automated SSL certificates to website owners, developers, and enterprises. The company positions itself as a trusted certificate authority with a strong market presence, supported by notable industry clients such as Microsoft, Intel, and Hubspot. Their services include SSL certificate issuance, monitoring, one-step validation, quick installation, and ACME automation, catering to a broad audience seeking reliable and fast SSL solutions. Founded in 2016, ZeroSSL has established a medium-sized operation with consistent branding and a professional online presence. Technically, the website leverages a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and Cookiebot for cookie consent management. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, though there is room for improvement in accessibility and security headers. From a security perspective, ZeroSSL enforces HTTPS and employs domain registration protections such as clientDeleteProhibited and clientTransferProhibited statuses. Cookie consent is managed comprehensively with granular user controls, reflecting good privacy compliance. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly available, representing areas for enhancement. Overall, the website is professional, trustworthy, and secure, with no indications of malicious content or vulnerabilities. The domain registration details align well with the business claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, enhancing HTTP security headers, and providing clearer contact information for security incidents.

R

Ringhotels

ringhotels.de

58

Ringhotels is a German hospitality business specializing in hotel bookings, wellness weekends, and conference hosting across Germany. The website targets travelers seeking authentic HeimatGenuss experiences and offers a professional platform for vacation planning. Technically, the site employs modern JavaScript frameworks, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and uses Cookiebot for cookie consent management. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and terms of service pages in the provided content. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

B

Bright by Rivacom

bright-by-rivacom.fr

59

Bright by Rivacom is a newly established French marketing agency specializing in influencer marketing and talent management, primarily targeting businesses and e-commerce platforms. The company operates a professional website built on WordPress using the Divi theme, incorporating modern web technologies such as Google Fonts, Font Awesome, Yoast SEO, Cookiebot for cookie consent, and Google Tag Manager for analytics. The website demonstrates good design quality, mobile optimization, and SEO practices, although it lacks some compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enabled and cookie consent implemented, but could be improved by adding security headers and explicit contact information. The domain registration is recent and consistent with the business founding date, registered through a reputable registrar OVH, indicating legitimacy. Overall, the website presents a professional image suitable for its niche market but should address compliance and security gaps to enhance trust and regulatory adherence.

C

Coinmate s.r.o

coinmate.io

60

Coinmate s.r.o operates a well-established European cryptocurrency exchange platform, primarily targeting European crypto traders and investors. Founded in 2014, it positions itself as the largest Czech crypto exchange with a focus on fair fees and customer trust. The platform offers services for buying and selling cryptocurrencies safely and easily. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern web technologies including Angular framework, Google Tag Manager, Cookiebot for consent management, and Microsoft Clarity for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response details are not published. WHOIS data confirms the legitimacy of the business with consistent registration details matching the website claims. Overall, the site is safe, professional, and trustworthy, with room for improvement in privacy and security transparency.

R

Rivacom

rivacom.fr

50

Rivacom is a regional communication agency operating primarily in Brittany, France, with offices in Brest and Rennes. The company offers a comprehensive suite of communication services including press relations, event management, digital marketing, branding, and audiovisual production. Positioned as a 360° communication agency, Rivacom targets businesses and organizations seeking professional marketing and communication support within the regional market. The website reflects a professional and consistent brand image, supported by active social media channels and modern web technologies. Technically, the website is built on WordPress using the Elementor page builder, leveraging popular libraries such as jQuery and Slick Carousel. It integrates Google Tag Manager, Google Analytics, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and structured data. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. Cookie consent mechanisms are implemented, indicating awareness of GDPR requirements. However, the absence of additional security headers and lack of visible privacy policy or terms of service pages suggest areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, but the website content and social presence support legitimacy. Overall, Rivacom presents a trustworthy and professional online presence suitable for its business domain. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving contact information visibility to strengthen trust and compliance.

A

ASP Events

asp.events

69

ASP Events is a specialized service provider focused on creating websites for conferences, shows, and exhibitions. Their market position is that of a niche event website specialist offering engaging, functional, and visually appealing online presences tailored for event organizers. The website demonstrates a good level of professionalism and targets event planners seeking dedicated web solutions. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Cookiebot for consent management, and custom CMS technology named SHOWOFF by ASP.events. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and policies are not visible. Privacy compliance is partially addressed via Cookiebot, but no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable due to query failure or privacy protection, which is common for small service providers and does not raise immediate concerns. Overall, the website is professional and trustworthy but could improve transparency by publishing privacy and security policies and providing clear contact information.

Aquafil is a well-established company specializing in the production of Polyamide 6 and pioneering circular business models in the textile and clothing sector. The company positions itself as a leader in sustainable textile manufacturing with a focus on environmental responsibility. Their website reflects a mature digital presence built on WordPress, incorporating modern technologies such as Google Tag Manager and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, demonstrating a commitment to GDPR compliance. However, explicit contact details such as emails and phone numbers are not directly provided, relying instead on a contact form for communication. The WHOIS data for the domain is unavailable or indicates the domain may not be registered, which is inconsistent with the company's claimed history and raises questions about domain registration transparency. Security posture is generally strong with HTTPS enforced and cookie consent implemented, but additional security headers and explicit security policies could enhance trust. Overall, the website is professional and trustworthy, but the domain registration ambiguity warrants further investigation.

E

Elinor.bg

elinor.bg

50

Elinor.bg is a Bulgarian e-commerce website specializing in the sale of perfumes, cosmetics, and makeup products. The site targets a general audience interested in beauty products and offers a large catalog with over 30,000 items. The business model is retail-focused, leveraging online sales channels to reach customers primarily in Bulgaria. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Criteo, and SendPulse, indicating a mature digital marketing infrastructure. Mobile optimization and SEO practices are adequately implemented, contributing to a positive user experience.

V

Vision Zero e.V.

vision-zero-oncology.de

57

Vision Zero Oncology is a German non-profit initiative focused on reducing avoidable cancer deaths through collaboration among scientific, medical, and industrial stakeholders. The website serves as a platform for information dissemination, event promotion, and publication sharing, targeting healthcare professionals, researchers, and the public. Technically, the site uses a modern Bootstrap framework, integrates Cookiebot for GDPR-compliant cookie management, and employs Google reCAPTCHA for form security. The hosting is managed via One.com with HTTPS enforced, indicating a secure baseline. Security posture is solid with room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting its mission effectively.

D

deutsche Automobilberatung Oranienburg

dabag.de

48

The website www.dabag.de represents deutsche Automobilberatung Oranienburg, a small-sized automobile consulting and brokerage service based in Germany. The company offers services including automobile brokerage, fleet management, custom vehicle procurement, and financing solutions. The website is professionally designed using WordPress CMS with SEO optimization and targets automobile customers and fleet managers primarily in the German market. The business has been active since at least 2014, consistent with the domain age. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Meta Pixel, and Cookiebot for cookie consent management. The site is hosted likely on your-server.de, a German hosting provider, and uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and cookie consent with blocking mode, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The site uses multiple third-party analytics and marketing scripts, indicating extensive user tracking but with GDPR-compliant consent mechanisms in place. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration and hosting details align with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen the security posture and compliance.

W

wilhelm.tel

wilhelm-tel.de

67

Wilhelm.tel is a regional telecommunications provider in Germany offering bundled services including fixed-line telephony, internet, and HD-TV. The website is professionally designed using TYPO3 CMS and incorporates modern privacy and cookie consent management through Cookiebot, ensuring GDPR compliance. The company targets private customers in its regional fiber optic network area, positioning itself as a comprehensive communication service provider. Technically, the site uses Matomo analytics with user consent, and the infrastructure appears stable and moderately performant with good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No contact information or terms of service pages were found, which could be enhanced for better business credibility and user trust. Overall, the website is safe, professional, and compliant with privacy regulations, reflecting a trustworthy telecommunications business.

G

Gastein

gastein.com

62

Gastein.com is a regional tourism website promoting vacation and wellness activities in the Gasteinertal region of Austria. The site offers information on hiking, biking, yoga, and thermal spa experiences, targeting tourists and wellness seekers. The business model centers on tourism promotion and booking facilitation, positioning itself as a key regional destination platform. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent, but lacks visible security headers and published privacy or terms policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is professional and trustworthy from a content perspective but would benefit from improved transparency and security practices.

E

EHiP - Europäische Hochschule für Innovation und Perspektive

ehip.eu

59

EHiP - Europäische Hochschule für Innovation und Perspektive is a private German university specializing in flexible, fully digital and dual study programs primarily at the bachelor level. The institution emphasizes personalized student support, state recognition, and multiple accreditations to position itself as a modern and trustworthy educational provider. The website is professionally designed, content-rich, and targets prospective students seeking flexible higher education options in Germany and German-speaking regions. Technically, the site uses Contao CMS, Bootstrap, and integrates modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent implemented, though some security headers and explicit security policies are missing. WHOIS data is privacy protected by EURid, which is common and justified for this business type, though it limits transparency. Overall, the website and business present a credible, professional, and trustworthy profile with minor areas for security and compliance improvement.

D

Deutsches eLearning Studieninstitut

delst.de

46

DeLSt - Deutsches eLearning Studieninstitut is a German-based distance learning education provider offering state-approved and certified remote study programs. The website targets students and professionals seeking flexible education and continuing education opportunities. The business operates in the education sector with a niche focus on eLearning and distance education. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience. Technically, the site uses modern web technologies including jQuery, Bootstrap, Google Tag Manager, reCAPTCHA, and Cookiebot for cookie consent, hosted on domaincontrol.com infrastructure. Security posture is solid with HTTPS, security headers, and anti-bot measures, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and safe for general audiences.

S

sailfish

sailfish.com

71

The website www.sailfish.com is a professionally designed e-commerce platform specializing in premium triathlon wetsuits, swimwear, and related accessories. It targets triathlon athletes and enthusiasts, offering competition equipment and leisurewear. The site is built on the Shopify platform, leveraging modern technologies such as Google Analytics, Microsoft Clarity, Klaviyo, and Cookiebot for analytics and consent management. The presence of structured data and SEO optimizations indicates a mature digital presence. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies could be improved. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the active and professional nature of the site suggests it is a legitimate business. Overall, the site demonstrates good technical and business maturity with room for enhanced privacy and security transparency.

E

ELITE Electro-Partner

electro-partner.ch

51

ELITE Electro-Partner operates a large network of electrical professionals serving Switzerland and Liechtenstein, positioning itself as a key player in the energy services sector. The website presents a professional image with clear branding and a focus on electrical services, targeting both consumers and businesses in the region. The business model centers on a broad partnership network providing electrical installation, maintenance, and repair services. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance documentation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and incident response information. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced transparency and security best practices.

S

Schweizerische Elektro-Einkaufsvereinigung eev Genossenschaft

eev.ch

53

The Schweizerische Elektro-Einkaufsvereinigung eev Genossenschaft operates as a leading marketing and service cooperative for the Swiss electrical trade sector. Their website targets electrical industry professionals and members, offering a range of services including marketing, event organization, contract partner management, and member support. The organization positions itself as a key player in the Swiss energy sector, providing exclusive models, advertising, and service solutions to its members. The website is professionally designed, multilingual, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Hotjar for user behavior analysis, and Cookiebot for GDPR-compliant cookie consent management. The site uses HTTPS with a service worker for progressive web app capabilities and lazy loading for images, indicating a moderate to good level of digital maturity. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's claims, showing a legitimate Swiss cooperative with transparent registration details. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

A

ActionAid Nederland

actionaid.nl

57

ActionAid Nederland is a well-established non-profit organization focused on supporting people in the global South through advocacy, humanitarian aid, and women's rights campaigns. The organization operates with a clear mission and has a strong market position supported by reputable partners and donors. The website reflects a professional and consistent brand image with comprehensive content tailored to donors, activists, and partners. Technically, the site is built on WordPress with modern tracking and consent tools, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site demonstrates a mature digital presence aligned with its business goals.

T

Tennisverband Mittelrhein e.V.

tvm-tennis.de

64

Tennisverband Mittelrhein e.V. is a regional tennis association in Germany, serving tennis players and clubs in the Mittelrhein region. The website provides basic information about the association but lacks comprehensive business and legal disclosures such as privacy policy and terms of service. The technical infrastructure includes modern JavaScript usage and cookie consent management via Cookiebot, with Cloudflare DNS providing hosting and security benefits. Security posture is moderate with some best practices like consent management but lacks visible security headers and detailed policies. Overall, the website is functional but could improve in transparency, contact availability, and SEO optimization.

The website dolne-rakusko.info serves as an official regional tourism portal for Lower Austria, targeting Slovak-speaking tourists interested in cultural, wine, and travel experiences near Vienna. It offers travel packages, tips, and event information, positioning itself as a trusted source for regional tourism. The site employs modern web technologies including Cookiebot for cookie consent management, Matomo and Google Tag Manager for analytics, and Cloudflare for hosting and security. The technical infrastructure is moderately performant and mobile-optimized, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. WHOIS data is privacy protected, which is typical for such portals, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it could improve transparency by publishing terms of service and security policies.

Wirtshauskultur Niederösterreich is a regional cultural organization promoting approximately 200 inns and traditional restaurants in Lower Austria. The website serves as a comprehensive portal for visitors and locals interested in regional cuisine, offering listings, guides, recipes, and voucher sales. The organization positions itself as a key promoter of local gastronomy culture with a strong regional identity and consistent branding. Technically, the website employs modern JavaScript frameworks, SVG maps, and integrates privacy-respecting analytics tools such as Matomo and Google Tag Manager with DoNotTrack compliance. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. Security posture is good with HTTPS enforced and privacy best practices observed, though some security headers could be improved. Contact information is clearly provided, enhancing trust and credibility. No adult or questionable content is present, making the site safe for general audiences.

E

EKO-PUNKT

eko-punkt.de

65

EKO-PUNKT is a German-based competence center specializing in sustainable packaging management, including packaging licensing, circular contracting, ecodesign, and recycled material delivery. The company operates under the REMONDIS Group umbrella, a well-established waste management conglomerate. Their website reflects a professional and business-focused approach, targeting companies needing compliance and sustainability solutions in packaging. The digital infrastructure is built on TYPO3 CMS, integrating modern tools like Cookiebot for consent management and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

H

Hotel Château Gütsch

chateau-guetsch.ch

64

Hotel Château Gütsch is a boutique hotel located in Luzern, Switzerland, offering scenic views over the city and Lake Lucerne. The website presents a professional and well-structured digital presence built on WordPress, integrating booking functionalities and analytics tools. The business targets travelers seeking a unique and tranquil hotel experience. Technically, the site uses modern web technologies and plugins to enhance user experience and SEO. Security measures include HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and contact information availability.

C

Commsor

commsor.com

50

Commsor is a B2B SaaS company specializing in activating warm introductions and referrals through a company's network to accelerate sales pipelines. The website presents a professional and consistent brand image with clear messaging targeting businesses seeking to improve their sales conversion rates by leveraging existing networks. Technically, the site is built on Webflow CMS and integrates modern analytics and cookie consent tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or terms policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and design suggest a legitimate business. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

I

Iftra GmbH

deutsche-pflegejobs.de

49

Deutsche Pflegejobs is a specialized German online job board and recruitment platform focused on the healthcare and social care sectors, operated by Iftra GmbH. The platform offers a comprehensive range of services including job listings, recruitment solutions, educational program information, and industry news. With over 10 years of experience, it holds a strong position in the German healthcare recruitment market, targeting both job seekers and employers. The website is professionally designed using TYPO3 CMS and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and business credibility.

D

Deutsches Pflegeportal DPP GmbH

deutsches-pflegeportal.de

51

Deutsches Pflegeportal DPP GmbH operates a comprehensive online platform dedicated to healthcare professionals in Germany, focusing on nursing, therapy, and social services. The website offers a broad range of services including job listings, educational programs, further training, and an industry-focused magazine. It serves as a valuable resource for both aspiring and experienced professionals seeking career development and industry insights. The platform is well-positioned nationally with partnerships linking it to related job portals and educational providers. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and UIkit for UI components. It integrates analytics and tracking tools like Google Tag Manager and Hotjar, alongside a GDPR-compliant cookie consent mechanism via Cookiebot. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns with the business profile, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, Deutsches Pflegeportal presents a professional, trustworthy, and user-friendly platform with a solid security posture and compliance with privacy regulations. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

N

Nimbel Baby Carrier

nimbelcarrier.com

70

Nimbel Baby Carrier operates an e-commerce website focused on selling ergonomic baby carriers featuring patented Exoframe Technology™️. The company targets parents and caregivers seeking comfortable and innovative baby carrying solutions. The website is built on the Shopify platform, leveraging modern JavaScript libraries and marketing tools such as Google Tag Manager and Facebook Pixel. The technical infrastructure is solid, hosted via Hostnet in the Netherlands, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism via Cookiebot but lacking explicit privacy and terms of service policies. Overall, the site presents a professional and trustworthy front for a small retail business with room for enhanced security and compliance maturity.

T

The Salvation Army Switzerland

salvationarmy.ch

53

The Salvation Army Switzerland operates as a reputable non-profit organization focused on international development and humanitarian aid. Their website demonstrates a clear mission to provide holistic help for self-help to people in need worldwide, supported by government funding and certifications such as ZEWO. The site is well-structured, multilingual, and includes donation mechanisms to support their projects. Technically, the website is built on WordPress with modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security measures include HTTPS and reCAPTCHA on forms, though some security headers could be improved. Overall, the organization presents a trustworthy and professional digital presence aligned with its humanitarian mission.

C

Culligan Austria GmbH

culligan.at

62

Culligan Austria GmbH operates a professional website offering water dispensers and related services for both businesses and households in Austria. The company is positioned as a reputable provider with a broad customer base, leveraging a comprehensive service model that includes rental and maintenance of water dispensers. The website reflects a mature digital presence with modern technologies such as WordPress CMS, Bootstrap framework, and integrated marketing and analytics tools including HubSpot, Hotjar, and Piwik Pro. Privacy compliance is well addressed with a detailed privacy policy and a robust cookie consent mechanism powered by Cookiebot. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be enhanced for better protection. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

MakoLab S.A. is a well-established technology company specializing in digital solutions, technology consulting, custom software development, and global 24/7 support. With over 30 years of experience and a focus on intelligence amplified—combining AI with human expertise—they serve businesses seeking innovative and efficient digital transformation. The company maintains a strong market position in Poland and internationally, supported by professional branding and comprehensive case studies. Technically, the website is built on modern frameworks such as Next.js and React, integrated with HubSpot for marketing and analytics, and uses Cookiebot for GDPR-compliant cookie consent. The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Analytics and tracking are moderate and privacy-conscious. Security posture is solid with HTTPS enforced and domain transfer protections in place. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response contacts. No critical vulnerabilities or exposures were detected. Overall, the website and domain exhibit high legitimacy and professionalism, with strong business credibility and compliance. Strategic recommendations include enhancing security transparency and further hardening domain and web security configurations.

H

Heilsarmee Schweiz

heilsarmee.ch

52

Heilsarmee Schweiz is a Swiss Christian non-profit organization dedicated to social welfare and church services, focusing on alleviating human suffering. The website reflects a well-established entity with consistent branding and a clear mission. The technical infrastructure is based on WordPress CMS, utilizing modern tools such as Gravity Forms, Cookiebot for cookie consent, and Google Tag Manager for analytics. The site is mobile-optimized and employs standard SEO and accessibility practices. Security posture is solid with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, though formal security and incident response policies are not publicly documented. Overall, the website is trustworthy and professionally maintained, with moderate tracking and good privacy compliance.

H

HOFER REISEN

hofer-reisen.at

74

HOFER REISEN is an established Austrian travel agency offering a wide range of affordable travel packages including car trips, flights, cruises, and bus tours. The website targets German-speaking travelers seeking budget-friendly vacation options. The company maintains a consistent brand presence with a professional and user-friendly website optimized for mobile devices. Technically, the site employs modern web technologies, integrates third-party marketing and analytics tools, and enforces strong security practices including HTTPS and security headers. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, contact information and terms of service pages are not readily found, which could be improved for better user trust and compliance.

J

Julius Meinl

juliusmeinl.com

62

Julius Meinl is a well-established premium coffee and tea company with a rich heritage dating back to 1862. The company positions itself as a global ambassador for Viennese Coffee House Culture, offering a wide range of products and services tailored to both businesses and home consumers. Their offerings include premium coffee and tea, professional coffee machines, training, and bespoke business solutions. The website reflects a mature brand with consistent messaging and a strong market presence in the hospitality sector, particularly in Austria and internationally. Technically, the website is built on a modern stack including Kentico CMS, hosted on Azure, and utilizes advanced analytics and tracking tools such as Microsoft Application Insights and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Privacy compliance is well addressed through Cookiebot consent mechanisms and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS, implements a Content Security Policy, and avoids exposing sensitive data. However, there is room for improvement by enabling DNSSEC, adding more security headers, and publishing a formal security policy or incident response contacts. No critical vulnerabilities or suspicious patterns were detected. Overall, Julius Meinl's website demonstrates a high level of professionalism, trustworthiness, and digital maturity. The domain registration details corroborate the company's legitimacy and long-standing market presence. Strategic recommendations include enhancing DNS security, expanding security policies, and improving transparency around incident response to further strengthen trust and security posture.