Security Directory

F

Freshify

freshify.click

60

Freshify is a small, independent company founded in 2023 that develops modern Shopify applications focused on enhancing image management and global commerce capabilities for e-commerce merchants. The company offers a suite of apps including EZ Product Image Translate, EZ Product Image Market, EZ Product Collection Image, and a Terms & Conditions Checkbox app. With over 400 merchants worldwide, Freshify positions itself as a trusted provider of no-code, easy-to-use Shopify solutions. Technically, the website is built on Laravel, uses Cloudflare for DNS and CDN, and incorporates modern frontend technologies such as Tailwind CSS and JavaScript ES modules. The site is fast, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, Freshify demonstrates a professional and trustworthy online presence with room for improvement in privacy and security transparency.

L

LangShop

langshop.app

67

LangShop is a SaaS provider specializing in e-commerce translation solutions, offering a Shopify translation app and Magento 2 translation extension. The company targets e-commerce store owners seeking multilingual capabilities and seamless migration between Magento and Shopify platforms. The website demonstrates a solid market position with clear service offerings and a professional digital presence. Technically, the site is built on Magento 2 with integrations of modern JavaScript libraries and marketing tools, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly, with comprehensive privacy and cookie policies including consent mechanisms. Security posture is good with HTTPS enforced and domain registration locked, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, with room for improvement in publishing explicit security policies and incident response contacts.

The website at pzapi-kg.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, services, or technical infrastructure. The domain is registered with Gandi SAS since 2020 and appears legitimate from a registration standpoint, but the lack of accessible content severely limits assessment of its market position or digital maturity. Security posture cannot be evaluated due to absence of security headers, SSL details, or any visible security policies. Overall, the site is effectively blocked, resulting in a very low AI score and high risk from a user trust perspective.

D

DPD

dpd.fr

68

DPD France operates as a major parcel delivery service provider, offering comprehensive shipping, tracking, and delivery management solutions for both professional and individual customers. The website reflects a mature digital presence with multilingual support and integration into the broader DPDgroup network. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, ensuring responsive design and good user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and fraud alert information, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy and professionally maintained, supporting DPD's market position in France and internationally.

I

investpgz.hr is under construction

investpgz.hr

40

The website investpgz.hr is currently under construction and displays only a placeholder page indicating ongoing work. The business behind the domain appears to be newly established in 2022, based in Croatia, but no detailed business description, services, or contact information is provided. The site uses WordPress with an under construction plugin and includes basic styling libraries such as Bootstrap and Font Awesome. The technical infrastructure is minimal, with no advanced frameworks or analytics detected. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. No vulnerabilities or malicious content were detected, but the lack of content and security best practices limits trustworthiness. Overall, the site is not yet operational and provides limited information for users or stakeholders.

D

DRiV

drivparts.com

63

DRiV is a company specializing in the manufacturing and distribution of quality automotive parts, targeting automotive professionals and parts buyers. The website presents a professional and consistent brand image with a focus on quality and safety in auto parts. Technically, the site is built on Adobe Experience Manager CMS and employs modern web technologies including jQuery, Vue.js components, and integrates tracking tools such as Google Tag Manager and Facebook Pixel. The site is accessible, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data is a significant concern, indicating potential issues with domain legitimacy or privacy protection. Overall, the site is functional and professional but requires improvements in privacy compliance and transparency to enhance trust and security.

U

University of Alaska

alaska.edu

67

The University of Alaska operates the website www.alaska.edu as a subdomain under its main alaska.edu domain, serving as a digital portal for educational and research services. The institution is a large public university system focused on providing higher education and community outreach within the state of Alaska. The website targets students, faculty, researchers, and the general public interested in academic programs and university resources. The business model is that of a public educational institution, with a strong market position as the primary higher education provider in Alaska. Technically, the website employs modern frontend technologies such as Bootstrap 4.6.1 and FontAwesome 6.7.2, along with multiple analytics and marketing tools including Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel. The site appears to be mobile optimized and has a moderate performance profile. However, no CMS or hosting provider details were explicitly identified from the provided data. From a security perspective, the site uses HTTPS and standard third-party scripts but lacks visible security headers and explicit privacy or cookie policies in the analyzed content. No forms or contact information were detected, which limits the assessment of input security and user data handling. The absence of privacy and cookie policies suggests potential compliance gaps with GDPR and other privacy regulations. Overall, the website is legitimate and trustworthy as an educational institution's digital presence, but it would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

fuse.space GmbH operates a specialized file sharing platform tailored for creatives such as musicians and designers. The service emphasizes secure and beautiful sharing experiences, leveraging blockchain technology to provide immutable proof of file ownership. The company positions itself as a niche player in the creative technology sector, offering subscription-based plans including a free tier and paid options with enhanced storage and features. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its services and pricing. Technically, the platform uses modern web technologies including React and the Remix framework, hosted on AWS infrastructure, and integrates popular analytics and marketing pixels from Google, Facebook, and TikTok. Security posture is strong with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the business demonstrates legitimacy and maturity appropriate for its domain age and market focus.

F

Friedrichstadt

friedrichstadt.de

59

The website www.friedrichstadt.de serves as a tourism and cultural promotion platform for the town of Friedrichstadt in Schleswig-Holstein, Germany. It highlights local attractions such as canal tours and city walks, targeting tourists and visitors interested in nature and cultural experiences. The site is built on TYPO3 CMS and employs Cookiebot for cookie consent management, indicating a basic level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which limits full compliance and transparency. Technically, the site shows moderate performance and good mobile optimization but lacks visible security headers and advanced security policies. The domain is hosted by netcup GmbH, consistent with the German location, and shows no signs of blocking or WAF interference.

L

Lease a Bike

lease-a-bike.de

62

Lease a Bike is a large German bike leasing service provider targeting companies, public employers, and employees. It offers a digital platform for bike leasing, enabling companies to provide bikes as employee benefits with minimal administrative effort. The company is affiliated with Volkswagen Financial Services AG and Pon.Bike, indicating strong market positioning and trust. The website is modern, well-designed, and optimized for mobile, featuring extensive customer testimonials and a comprehensive service offering. Technically, the site uses modern frameworks like Tailwind CSS, HubSpot forms, and Google Tag Manager, hosted behind Cloudflare DNS. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not fully documented. Privacy compliance is basic, with no explicit privacy or terms of service pages found in the provided content. Overall, the site is professional, trustworthy, and business-focused with a strong digital presence.

M

myRight

myright.de

64

myRight is a German legal services platform specializing in consumer rights across various legal domains such as tenancy law, emissions scandal, travel law, and labor law. The company positions itself as a consumer advocate with a high success rate in court cases, targeting German consumers seeking legal assistance online. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its services. Technically, the site leverages modern frameworks like Laravel, uses Cloudflare for DNS and security, and integrates Cookiebot for GDPR-compliant cookie consent. Security posture is strong with HTTPS enforcement, CSRF protection, and security headers, though explicit security and incident response policies are not publicly available. Overall, the site demonstrates good privacy compliance and business credibility, though contact information is limited to web forms without direct emails or phone numbers.

Onilo.de is a German educational platform operated by StoryDOCKS GmbH, specializing in interactive digital learning content for children in primary education. The platform offers animated Boardstories, educational materials, and digital training, serving over one million children and numerous educators. It holds a strong market position supported by partnerships with reputable publishers and endorsements from educational ministries. Technically, the website is built on modern frameworks including React and Phoenix, hosted by Hetzner, and optimized for mobile and accessibility. Security measures include HTTPS and bot protection via FriendlyCaptcha, though explicit security headers and policies could be enhanced. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in the education sector.

Ö

ÖKO-TEST

oekotest.de

60

ÖKO-TEST is a well-established German media company specializing in independent product testing, consumer advice, and related news. With a history spanning over 30 years, it holds a strong market position as a trusted source for product evaluations and lifestyle guidance. The website offers subscription-based content and integrates modern consent management and subscription authentication systems to comply with GDPR requirements. Technically, the site leverages Cloudflare for DNS and likely CDN services, uses Google Analytics for tracking, and employs a custom or proprietary CMS framework. The design is professional, mobile-optimized, and content-rich, targeting a general audience interested in consumer products and lifestyle topics. Security posture is solid with HTTPS and Cloudflare protection, though explicit security headers and incident response information are not evident. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency of privacy and security policies.

streamfood.tv is a media streaming platform founded in 2020 and operated by Ralf M. Mendle - Mediendienstleistungen based in Germany. The platform offers a variety of cultural content including events, shows, interviews, and documentaries across genres such as comedy, music, literature, science, and politics. It targets a general audience interested in fair and transparent media consumption. The business model centers on streaming content with a focus on fair revenue sharing. Technically, the website is built using modern technologies including the Elixir Phoenix framework, Video.js for video playback, and Tailwind CSS for styling. Hosting is provided by Vautron Rechenzentrum AG, with DNS managed via Google Domains. The site is mobile optimized and provides a good user experience with clear navigation and search functionality. Security posture is adequate with HTTPS enforced and CSRF protection, but lacks important security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact and security incident response information are not provided, limiting transparency. Overall, the domain registration is consistent and legitimate, supporting the business claims. Recommendations include adding comprehensive privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact information to improve trust and compliance.

F

Foire de Marseille

foiredemarseille-lavitrine.com

50

The website www.foiredemarseille-lavitrine.com serves as the official exhibitor platform for the Foire de Marseille event scheduled from September 26 to October 6, 2025. It provides visitors and exhibitors with essential information including exhibitor listings and product promotions. The platform is positioned as a regional event tool, operated under the umbrella of GL Events, a recognized event organizer. The website demonstrates a good level of content quality and user experience, with clear navigation and mobile optimization. Technically, it is built on WordPress CMS, utilizing standard libraries such as FontAwesome and Matomo for analytics, and incorporates GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding suggest a legitimate business presence. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer contact information.

A

Anixy

anixy.com

43

Anixy is a French company specializing in event management services, particularly focusing on fairs and public salons. They offer comprehensive ticketing management from preparation to post-event analysis, positioning themselves as a leader in their niche within France. The website is built on WordPress using Elementor and integrates modern SEO and tracking tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, though some security headers are missing. Contact information is clearly provided, enhancing business credibility. However, formal security policies and incident response details are absent, indicating room for improvement in compliance and security transparency.

A

Arstay s. r. o.

artstay.co

55

Arstay s. r. o. is a small technology-focused digital product design and development agency based in the Czech Republic. The company specializes in strategic consulting, user interface design, and full-scale development to help clients succeed in the evolving digital landscape. Their website reflects a professional and consistent brand image, targeting businesses seeking impactful digital solutions. The site is built using Framer, leveraging modern web technologies and Google Analytics for performance insights. While the site is visually appealing and mobile-optimized, it currently lacks key compliance documents such as privacy and cookie policies, which are critical for GDPR adherence and user trust. Security posture is adequate with HTTPS enabled, but the absence of security headers and vulnerability disclosures indicates room for improvement. Contact information is limited to an email address, with no phone or physical address provided, which may affect user confidence. Overall, the website presents a credible business presence but should enhance compliance and security transparency to strengthen trust and regulatory adherence.

R

Rakuten Advertising

linkshare.com

70

Rakuten Advertising is a leading global affiliate marketing network that connects advertisers and publishers using advanced AI and data analytics to maximize growth. The company offers a comprehensive suite of digital marketing solutions including affiliate marketing, audience targeting, display advertising, influencer marketing, and paid search and social campaigns. Positioned as a market leader with over 25 years of experience and the #1 global traffic rank, Rakuten Advertising targets advertisers and publishers seeking performance-driven marketing outcomes. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, HubSpot, and OneTrust for cookie consent management. The site demonstrates excellent SEO, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Hosting is supported by NS1 DNS services, and the site uses HTTPS with strong SSL configuration. From a security perspective, the site enforces HTTPS, employs clientTransferProhibited domain status, and integrates cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and explicit security headers like CSP and X-Frame-Options are not visibly configured in the HTML. No vulnerabilities or exposed sensitive data were detected. Incident response and security policy information are not publicly available. Overall, Rakuten Advertising presents a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing security policies and incident response contacts, and enhancing security header configurations to further strengthen security posture.

R

Rakuten Advertising

rakutenadvertising.com

11

Rakuten Advertising is a leading global affiliate marketing and digital advertising platform that connects advertisers and publishers using advanced AI and data analytics. The company operates an enterprise-scale network with over 25 years of experience and claims the #1 position in global traffic. Their services include affiliate marketing, audience targeting, display advertising, influencer marketing, media buying, paid search, and paid social campaigns. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site is built on WordPress with modern analytics and marketing tools integrated, including HubSpot, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though some security headers could be improved. Privacy compliance is well addressed with GDPR-compliant cookie consent and a comprehensive privacy policy. Overall, the website and domain registration data support a legitimate, trustworthy enterprise business with a strong market position.

G

Gimii

gimii.fr

43

Gimii is a French technology company specializing in innovative consent management solutions for websites and mobile applications. Their core offering, the Consent Raiser, is designed to increase user consent rates for cookies by incentivizing users with donations to associations, thereby combining privacy compliance with social impact. The company targets website publishers, advertisers, and non-profit associations, positioning itself as a niche player in the consent management market with a socially responsible business model. Founded in 2022, Gimii operates primarily in France and maintains a professional online presence with a well-structured website and active LinkedIn profile. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and integrates marketing and analytics tools like HubSpot and Google Analytics. The site is hosted with Cloudflare DNS and enforces HTTPS, reflecting a good baseline security posture. However, explicit privacy and cookie policies are not found in the provided content, and there is no visible security or incident response policy, which are areas for improvement. Overall, Gimii demonstrates a solid digital maturity for a small company, with good content quality and business credibility but room to enhance privacy compliance and security transparency.

The website represents the Zväz cestovného ruchu Slovenskej republiky, a Slovak voluntary organization of employers in the tourism sector. It focuses on protecting and promoting the interests of its members, advocating for sustainable tourism development, regulatory frameworks, and workforce innovation. The organization targets tourism businesses, government bodies, and stakeholders in Slovakia. Technically, the site is built on WordPress with Elementor, using common plugins and libraries, hosted by Websupport. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, reflecting a legitimate organization with a stable online presence.

C

Corps Touristique

corps-touristique.at

49

Corps Touristique is a small, Austria-based non-profit association representing international and national tourism organizations. The website serves as a platform to promote tourism and provide information about member countries and events. The business model focuses on association and representation within the hospitality sector, targeting tourism organizations and stakeholders in Austria. The site is professionally designed using WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The technical infrastructure is stable with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

R

Regionalna razvojna agencija Primorsko-goranske županije

prigoda.hr

46

Regionalna razvojna agencija Primorsko-goranske županije (PRIGODA) is a government-established regional development agency focused on coordinating sustainable and balanced regional growth in the Primorsko-goranska County of Croatia. Founded in 2017, it serves as a support center for local governments and legal entities, providing consultancy and project management services, especially related to EU funding and strategic regional development. The website reflects a professional government entity with detailed information on projects, funding opportunities, and regional strategies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though it lacks some advanced security headers and explicit privacy policies. The security posture is adequate with HTTPS and Google Analytics tracking, but could be improved with better security policies and headers. Overall, the site is trustworthy and well-positioned as a regional government resource, but should enhance privacy and security transparency to improve compliance and user trust.

E

Ericsson Nikola Tesla d.d.

ericsson.hr

67

Ericsson Nikola Tesla d.d. is a well-established regional provider of telecommunications products, innovative ICT solutions, and related services. The company targets telecommunication service providers, government agencies, and various industries requiring digital transformation and ICT innovation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content highlighting their key services and business achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, demonstrating a moderate to good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and error monitoring, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

S

S-Bahn Berlin GmbH

sbahn-ebe.de

68

S-Bahn Berlin GmbH operates a dedicated online portal for managing the increased fare enforcement payments (Erhöhtes Beförderungsentgelt - EBE). The portal facilitates secure and quick payment of fines, submission of personalized tickets for review, and customer support for related inquiries. The website is professionally designed, mobile-optimized, and provides comprehensive FAQs and contact options, reflecting a mature digital presence for a public transportation entity. Technically, the site uses Drupal CMS, integrates UserCentrics for consent management, and employs Matomo for analytics, indicating a focus on privacy and compliance. Security measures include HTTPS, Content Security Policy with nonce, and CAPTCHA protections, contributing to a strong security posture. The domain WHOIS data is privacy protected but consistent with legitimate business use. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and other regulations.

S

S-Bahn Berlin GmbH

abo-antrag.de

64

The website www.abo-antrag.de is an official online subscription management portal operated by S-Bahn Berlin GmbH, a medium-sized transportation company under Deutsche Bahn. It provides services for purchasing, managing, and canceling public transport subscriptions for Berlin and Brandenburg residents. The site is well-branded with official logos and integrates with partner domains such as sbahn.berlin and bahn.de. Technically, it is built on ASP.NET WebForms with modern JavaScript libraries and uses Adobe Analytics and Usercentrics for tracking and consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a general audience without any adult or questionable content.

C

CYQUEST GmbH

cyquest.net

10

CYQUEST GmbH operates as a specialized provider of online assessment, self-assessment, and study orientation solutions, combining psychological expertise with modern web technologies to enhance employer branding and recruitment processes. The company targets businesses and educational institutions primarily in Germany, offering scientifically validated tools and interactive applications to improve selection decisions and candidate engagement. The website demonstrates a professional and consistent brand presence with strong client references and ISO 27001 certification, indicating a mature security posture. Technically, the website is built on WordPress using the Enfold theme, leveraging modern JavaScript libraries such as jQuery and integrating Google Analytics 4 and Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security practices include HTTPS enforcement and use of security plugins, but the absence of security headers and cookie consent mechanisms suggests room for enhancement. The security posture is solid with ISO 27001 certification, but the lack of visible incident response contacts and missing WHOIS registration data raise concerns about domain legitimacy and transparency. No WAF or blocking mechanisms were detected, and the site content is safe and business-focused without any adult or questionable material. Overall, CYQUEST presents as a credible and professional business with a good digital presence and security foundation, but should address domain registration transparency, privacy compliance (cookie consent), and security header implementation to strengthen trust and compliance.

B

BVG Jelbi

jelbi.de

62

Jelbi is a large-scale mobility platform operated by BVG Jelbi, integrating Berlin's public transport with various sharing services such as e-scooters, bikes, cars, and taxis. The website serves as an informational and promotional portal for the Jelbi app, targeting residents and visitors in Berlin. The business model focuses on providing a unified mobility experience through a single app, positioning Jelbi as a key player in Berlin's transportation ecosystem. Technically, the site is built on WordPress with the Divi theme, leveraging modern plugins and consent management tools like Didomi. The infrastructure is hosted on Cronon servers with proper HTTPS encryption and basic SEO optimizations. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is partial due to missing visible privacy and terms pages. Overall, the site is professional, trustworthy, and well-branded, with room for improvement in transparency and security documentation.

S

SENS eRecycling

sens.ch

67

SENS eRecycling is a Swiss non-profit foundation specializing in the sustainable recycling of electrical and electronic equipment. The organization operates a well-established take-back system that facilitates environmentally friendly disposal for both private individuals and business partners. Their market position is strong within Switzerland, supported by a comprehensive partner network and a history of over 30 years in the industry. The website reflects a professional and consistent brand image, targeting environmentally conscious consumers and businesses. Technically, the site uses modern web technologies including Magnolia CMS, JavaScript frameworks, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Intercom for user engagement and tracking.

E

eEducation Austria

digicheck.at

59

digi.check is an Austrian educational initiative website focused on providing online questionnaires to assess digital and informatics competencies for students and educators. It operates under the aegis of eEducation Austria and the Austrian Federal Ministry of Education, positioning itself as a niche tool within the national digital competence framework. The website is built on TYPO3 CMS with Bootstrap styling and uses several JavaScript libraries including jQuery and star-rating plugins. The technical infrastructure is moderately modern but uses some outdated libraries that could pose security risks if not maintained. Security posture is adequate with HTTPS enforced, but lacks important security headers and cookie consent mechanisms, which are recommended for compliance and protection. Privacy policy is present on a related domain and linked appropriately, indicating reasonable GDPR compliance. Overall, the site is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected.

E

eEducation Austria

digikomp.at

59

Digi.komp is an Austrian educational initiative focused on fostering digital competencies across various school levels. The website serves as a resource hub offering competency models, teaching examples, and online testing tools primarily targeted at educators and students within Austria. The initiative is supported by eEducation Austria and the Austrian Ministry of Education, indicating strong institutional backing and trustworthiness. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, providing a responsive and structured user experience. However, there is room for improvement in security practices, such as implementing security headers and cookie consent mechanisms. Overall, the site is professional, content-rich, and aligned with its educational mission.

R

regioactive.de

regioactive.de

49

regioactive.de is a German media platform specializing in cultural and music event coverage, including news, event listings, photo galleries, and ticket sales. It targets music and culture enthusiasts primarily in Germany and German-speaking regions. The website has a consistent brand presence and a solid market position as a regional cultural media outlet. Technically, the site uses a mix of jQuery, Google Analytics, and a cookie consent management system, hosted on UI-DNS name servers. The site is mobile-optimized and SEO-friendly with good performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. WHOIS data confirms a mature and consistent domain registration since 2001, supporting the legitimacy of the business. Overall, regioactive.de is a professional, trustworthy, and compliant cultural media website.

T

Thomann

thomann.de

60

Thomann is a leading European e-commerce retailer specializing in musical instruments and related accessories. The website serves a broad international audience with multiple language and country-specific versions, positioning itself as Europe's largest music retailer. The platform offers a wide range of products including guitars, drums, studio equipment, lighting, and PA systems, supported by strong customer service features such as a 30-day money-back guarantee and a 3-year warranty. Technically, the website employs modern web technologies including JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

C

Commissariat aux Assurances

caa.lu

61

The Commissariat aux Assurances website serves as the official regulatory authority for the insurance sector in Luxembourg. It provides comprehensive information and resources for insurance operators, consumers, and stakeholders, including regulatory documents, circulars, and consumer alerts. The site is professionally designed with clear navigation and bilingual support (French and English), targeting industry participants and the general public interested in insurance regulation. Technically, the website employs a modern but straightforward technology stack including jQuery and tarteaucitron.js for cookie consent management. The site is accessible, mobile-optimized, and includes SEO best practices. However, no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the official .lu domain and professional content support legitimacy. Google Analytics is used with user consent, indicating privacy awareness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility to further strengthen trust and compliance.

C

Commission de Surveillance du Secteur Financier

cssf.lu

76

The Commission de Surveillance du Secteur Financier (CSSF) is a public institution responsible for supervising professionals and products within the Luxembourg financial sector. It serves both professionals and consumers by providing regulatory frameworks, publications, and guidance. The CSSF holds a key market position as Luxembourg's financial regulatory authority, offering services such as supervision of financial entities and dissemination of financial data. The website targets financial sector stakeholders and consumers seeking authoritative information and regulatory updates. Technically, the website is built on WordPress, utilizing modern web technologies including jQuery and Font Awesome, and integrates Matomo for analytics. The site demonstrates good digital maturity with responsive design, accessibility features, and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie-based security measures. However, explicit HTTP security headers are not detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data are evident. The absence of WHOIS data limits domain trust verification, but the official nature and content quality support legitimacy. Overall, the CSSF website is a professional, secure, and compliant platform serving as a trusted source for financial regulation in Luxembourg. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and security posture.

L

Landesnahverkehrsgesellschaft Niedersachsen mbH

lnvg.de

46

The Landesnahverkehrsgesellschaft Niedersachsen mbH (LNVG) is a government-affiliated organization responsible for planning, financing, and managing public transportation services in the German state of Niedersachsen. The website serves as an information hub for passengers, transport operators, and stakeholders, providing comprehensive details on regional rail and bus services, funding programs, infrastructure projects, and regulatory frameworks. The company holds a significant market position as a key public transport authority in the region. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, ensuring maintainability and scalability. The site employs Matomo analytics with an opt-out mechanism, reflecting a moderate level of privacy awareness. The site is mobile-optimized, accessible, and SEO-friendly, with a clear navigation structure and professional design. From a security perspective, the site uses HTTPS with a Content-Security-Policy header, indicating good baseline security practices. However, it lacks explicit cookie consent mechanisms and published security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and well-aligned with its public service mission. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture.

N

NETINERA Deutschland GmbH

netinera.de

57

NETINERA Deutschland GmbH is a major transportation company in Germany, operating since 2004 in regional rail and bus services. It is a subsidiary of Trenitalia, part of one of Europe's largest transport groups. The company offers a broad portfolio of rail and bus transport services along with maintenance and infrastructure support. The website reflects a mature business with a clear market position and extensive subsidiary network. Technically, the site uses SITEFORUM CMS and Bootstrap 3, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and incident response readiness are recommended.

V

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN)

vbn.de

64

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN) operates as a regional public transportation authority providing integrated ticketing, timetable information, and mobility services across Bremen and Lower Saxony. The website serves a broad audience including commuters, families, students, and groups, offering comprehensive transport options and customer support. The business model focuses on facilitating seamless public transport usage through digital platforms and partnerships with transport operators. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet for interactive maps and widgets. The integration of HAFAS public transport widgets enhances user experience for timetable and ticketing queries. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows good security practices, though explicit security headers like Content-Security-Policy could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the website presents a trustworthy, professional, and user-friendly platform supporting VBN's mission. Strategic improvements in security policy transparency and header implementation would further enhance its posture.

Q

Qualibooth.com

qualibooth.com

74

Qualibooth.com is an enterprise-focused digital accessibility software provider offering solutions to help organizations comply with global accessibility standards such as ADA, EAA, and WCAG 2.2. Their product suite includes real-time monitoring toolkits, accessibility scanners, testing workbenches, and consulting services. The company targets medium to large enterprises and is trusted by notable global brands, positioning itself as a leader in the accessibility compliance market. Technically, the website is built on modern platforms like Webflow and integrates advanced analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and HubSpot. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting the company's domain expertise. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security headers and policies could be improved. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms. However, the absence of WHOIS registration data reduces domain trustworthiness, though the overall business credibility remains high due to strong branding and external trust signals.

The website at thrive-production.fr is a default landing page hosted and managed by IONOS SE, a well-known European web hosting and domain registration provider. The site currently serves as a placeholder indicating the domain is registered and accessible, but no custom business content or branding is present. The page promotes IONOS services such as domain registration, web hosting, virtual servers, and website building tools, targeting individuals and businesses seeking to establish an online presence. The domain is newly registered in 2023 and is consistent with IONOS's domain management practices. Technically, the site uses standard HTML5, CSS3, and JavaScript without any detected CMS or advanced frameworks. The hosting provider is IONOS SE, and the site shows moderate performance and good mobile optimization. However, SEO optimization is poor due to missing meta tags and structured data. No analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by IONOS hosting), but no security headers are detected in the HTML content. The form present uses POST method but no advanced security or privacy policies are visible. No vulnerabilities or exposed sensitive data were found, but the absence of privacy and cookie policies and security headers lowers the security posture score. Overall, the site is safe with no adult or questionable content. The lack of custom content and policies suggests it is a placeholder rather than an active business site. Strategic recommendations include adding privacy and cookie policies, implementing security headers, improving SEO metadata, and providing clear contact information to enhance trust and compliance.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

LTDesign.sk is a small Slovakian web design and e-commerce development service provider operated by Ing. Ján Chudý. The company offers affordable website and e-shop creation services targeting small businesses and individuals in the local market. The website is minimalistic, providing basic contact information and branding but lacks comprehensive content and policies. Technically, the site uses standard HTML5 and CSS3 with Google Fonts but does not demonstrate advanced frameworks or CMS usage. The absence of HTTPS and security headers indicates a weak security posture, and no privacy or cookie policies are present, which may impact compliance with GDPR regulations. Overall, the site is functional but basic, with room for significant improvements in security, privacy, and content richness.

S

SMART Design | Gregic Advisory

sm-art-design.com

37

SMART Design | Gregic Advisory is a Croatian technology company specializing in advanced SMART web solutions, including custom web shops, web applications, and AI integrations. Positioned as a leader in the Zagreb region, the company targets businesses and professionals seeking high-performance, secure, and adaptive digital platforms. Their offerings emphasize nano-optimized code, dynamic content, and loyalty programs, reflecting a modern and innovative approach to web development. The website demonstrates a high level of digital maturity with professional design, responsive layouts, and comprehensive GDPR-compliant cookie management. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response details are absent. Overall, the company presents a trustworthy and professional image with strong client references including government and educational institutions.

O

Onlysollo

onlysollo.cz

42

Onlysollo.cz is a niche e-commerce website specializing in premium gymnastics and bodyweight training equipment. Founded by a professional gymnast, the brand leverages expert knowledge to offer high-quality mats, balance tools, and accessories, targeting athletes and fitness enthusiasts primarily in the Czech Republic but shipping worldwide. The website is built on WordPress with WooCommerce, featuring a modern and responsive design with integrated social media and multi-currency support. Security posture is adequate with HTTPS and anonymized analytics but lacks advanced security headers and published policies. Privacy compliance is limited due to missing cookie consent mechanisms and GDPR-specific disclosures. Overall, the site presents a trustworthy and professional front for a small retail business with room for improvement in privacy and security transparency.

E

European Gymnastics

europeangymnastics.com

63

European Gymnastics is a prominent sports organization representing 50 national member federations and over 10 million gymnasts across Europe. The organization promotes gymnastics in various forms, including Olympic disciplines and gymnastics for all, positioning itself as a unifying body for gymnastics in Europe. The website reflects a professional and consistent brand image, targeting athletes, federations, and gymnastics enthusiasts. Technically, the site leverages modern web technologies such as Angular, Google Analytics, and Google Adsense, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site is trustworthy and well-maintained, though the lack of WHOIS data and security disclosure policies suggests areas for improvement in transparency and security maturity.

C

Czech Gymnastics Federation

gymtv.cz

55

GymTV is the official TV channel of the Czech Gymnastics Federation, providing live streaming and archived video content of gymnastics competitions. The website serves a niche audience of gymnastics enthusiasts primarily in the Czech Republic and operates as a non-profit media outlet affiliated with the national federation. The digital infrastructure is based on WordPress CMS with common plugins for analytics, translation, and UI enhancements, reflecting a moderate level of digital maturity. The site is well-branded, mobile-optimized, and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and published security policies. The absence of WHOIS registrant data is likely due to privacy protection, which is common for such organizations. Overall, the website is legitimate, professional, and focused on its core mission of gymnastics event broadcasting.

P

PACE-VET

pace-vet.eu

39

PACE-VET is an educational project focused on developing a digital platform for the recognition and validation of vocational competencies in the event technology sector. The website presents detailed project information, objectives, and schedules, targeting vocational learners, employers, and education providers. The platform aims to facilitate micro-credential certification to improve labor market adaptability. Technically, the website is built on WordPress with modern plugins and libraries, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

The European Theater Technicians Education (ETTE) website represents a European non-profit educational project coordinated by Deutsche Theatertechnische Gesellschaft (DTHG) e.V. The project aims to improve safety competencies for theatre technicians and stage professionals across Europe, leveraging ESCO competences and the European Safety Passport. The site provides multilingual educational content and openly licensed materials, supported by Erasmus+ funding and multiple European partners. The target audience includes theatre technicians, stage hands, and event professionals seeking safety training. Technically, the website is built using RapidWeaver CMS with Foundation framework and includes standard web technologies such as jQuery and Google Analytics. While the site is functional and professionally presented, it lacks modern security headers, updated libraries, and explicit privacy or cookie policies. No contact information or incident response channels are provided, which limits user trust and compliance. Overall, the site is safe, educational, and trustworthy but would benefit from improved security practices and privacy compliance.

L

LIVELINE

livelinefund.uk

60

The Liveline Fund is a newly established UK-based non-profit organization focused on supporting the independent grassroots music scene. Its primary mission is to strengthen the future viability of the UK's grassroots music ecosystem through curated investments in infrastructure, events, and touring. The fund enables grassroots music venues, artists, and independent promoters to apply for funding via an open application process. The website reflects a professional and consistent brand presence with active social media engagement on Instagram, TikTok, Facebook, and LinkedIn. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Analytics and Facebook Pixel for tracking, alongside reCAPTCHA for form security. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, typical for a Squarespace-hosted site. From a security perspective, the site enforces HTTPS with HSTS enabled, uses cookie consent banners compliant with GDPR, and employs reCAPTCHA to mitigate spam. However, it lacks some advanced security headers and does not publish a formal security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with a strong focus on compliance and user privacy. The domain registration details are consistent with the organization's founding date and purpose, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and expanding contact information to improve transparency and trust.

Q

Qube AG

itds.ch

64

Qube AG operates as a web and advertising agency based in Switzerland, specifically targeting the Aarau and Bern regions. Their website presents a professional image focused on branding, corporate communication, and digital strategy services. The company appears to serve businesses and organizations seeking creative and digital marketing solutions. The website is well-structured with modern design elements and uses technologies such as FontAwesome, Vimeo player, and analytics tools like Matomo and Google Tag Manager. However, the absence of visible privacy and cookie policies and lack of explicit contact information limit the transparency and compliance posture of the site. Security headers are not detected, indicating room for improvement in security hardening. The WHOIS data is unavailable or privacy protected, which is common for small agencies but reduces trust signals. Overall, the site is functional and professional but could benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.