Security Directory

Q

Qube AG

qube.ag

64

Qube AG operates as a web and advertising agency based in Aarau and Bern, Switzerland, offering services including branding, corporate communication, digital strategy, and web design. The company targets business clients seeking professional digital and advertising solutions within the Swiss market. The website reflects a small, regionally focused agency with consistent branding and good content quality. The technical infrastructure includes modern web technologies such as Vimeo for video content, FontAwesome for icons, and analytics tools like Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security posture. The WHOIS data is privacy protected or unavailable, which is typical for small businesses but slightly reduces trustworthiness. Overall, the website is professional and functional but would benefit from enhanced security and privacy transparency to improve user trust and compliance.

F

forward

forward.live

55

The website forward.live represents the 'fwd: Bundesvereinigung Veranstaltungswirtschaft e.V.', a German non-profit association dedicated to the event industry. It serves as a central platform for members of the event sector, focusing on political advocacy, networking, knowledge transfer, and sustainability initiatives. The organization positions itself as a key voice for the industry at the national and regional levels, with a clear emphasis on community and future-oriented development. The site content is professionally presented in German, targeting industry professionals and stakeholders. Technically, the website is built on WordPress using Elementor and several Jet plugins, with SEO optimization via Yoast. It employs modern web technologies including jQuery and Google Tag Manager for analytics. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for this type of organization. No explicit security or incident response policies are publicly available, suggesting an area for enhancement. Overall, the website demonstrates a strong business credibility and compliance posture with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

R

R.I.F.E.L. Research Institute for Exhibition and Live-Communication e.V.

rifel-institut.de

45

R.I.F.E.L. Research Institute for Exhibition and Live-Communication e.V. is a small, Germany-based non-profit organization specializing in research within the exhibition and live communication sectors. The website serves as a platform to showcase their research activities, provide access to an online shop, and offer contact channels for stakeholders. Their market position is niche, targeting professionals and organizations involved in exhibitions and live events. The business model combines research services with e-commerce capabilities, supporting their mission and outreach. Technically, the website is built on WordPress with WooCommerce integration, leveraging common web technologies such as jQuery and PHP. Hosting is managed via Corpex DNS, and the site employs HTTPS with a good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of Jetpack and WooCommerce analytics indicates moderate user tracking. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and security posture, supporting the organization's credibility and user trust.

F

fwd: Bundesvereinigung Veranstaltungswirtschaft e.V.

we-transform-future.live

62

The website www.we-transform-future.live represents the event platform 'wtf25' organized by 'fwd: Bundesvereinigung Veranstaltungswirtschaft e.V.', a non-profit association focused on the event industry in Germany. The platform offers a professional event experience with workshops, panels, and networking opportunities centered on future-oriented themes such as sustainability, business, politics, and people. The site targets event professionals, decision makers, and newcomers, providing relevant content and resources including event programs and partner information. Technically, the site is built on the Multiscreensite CMS platform, leveraging modern JavaScript libraries like jQuery and analytics tools such as Google Analytics and Snowplow. It uses HTTPS with good SSL configuration and includes privacy compliance features like cookie consent and GDPR-aligned privacy policies. However, explicit security headers and incident response information are absent, representing areas for improvement. Overall, the site is well-designed, accessible, and trustworthy, with a strong social media presence and clear business identity.

B

Bundeskonferenz Veranstaltungswirtschaft

bundeskonferenz.org

63

Bundeskonferenz Veranstaltungswirtschaft is a German non-profit organization representing the event industry. The website serves as a platform for advocacy, event information, and industry representation. It targets professionals and stakeholders within the German event sector, providing information about conferences, programs, and organizational goals. The organization positions itself as a strong voice for the event industry in Germany. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Fonts and reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS with HSTS enabled, indicating a good baseline security posture. However, there is a lack of explicit privacy and cookie policies, which impacts privacy compliance. Security-wise, the site benefits from HTTPS and HSTS but lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain ownership verification, but the website content and social media presence support legitimacy. Overall, the website is professional and trustworthy for its intended audience but would benefit from improved privacy compliance and enhanced security headers. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response contact information.

B

BrandEx

brand-ex.org

60

BrandEx is a specialized event and award platform focused on recognizing excellence in live communication and brand experience within the German-speaking market. Established in 2017, it organizes annual award ceremonies celebrating creativity and innovation in categories such as architecture, events, and special awards. The website serves as a hub for ticket sales, jury information, news updates, and industry networking, targeting marketing professionals, event organizers, and creative agencies. Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and analytics, hosted behind Cloudflare DNS. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and DNSSEC are not implemented. Privacy compliance is strong, reflecting GDPR requirements with detailed cookie categories and user consent options. No critical vulnerabilities or suspicious indicators were found. Overall, BrandEx presents a professional, trustworthy, and well-maintained digital presence aligned with its business goals.

The Landesinnungsverband Elektro- und Informationstechnik Schleswig-Holstein is a regional trade association representing over 800 electrical and information technology companies in Schleswig-Holstein, Germany. The organization focuses on advocacy, member support, training, and standardization within the electrical trade sector. Their website provides comprehensive information about their services, events, and industry news, targeting professionals and apprentices in the electrical industry. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries to enhance user experience. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses secure forms with CSRF tokens, but lacks advanced HTTP security headers and a public security policy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

L

Landesinnungsverband Sachsen-Anhalt der Elektrohandwerke

elektrohandwerk-sachsen-anhalt.de

38

The Landesinnungsverband Sachsen-Anhalt der Elektrohandwerke is a regional industry association representing electrical trades in the German state of Sachsen-Anhalt. The website serves as an information hub for professionals, businesses, and stakeholders in the electrical, energy, and related sectors, offering details on industry events, training, membership, and sector news. It positions itself as a key regional player facilitating networking, education, and industry standards. Technically, the site is built on TYPO3 CMS, employs modern web standards, and is hosted with reputable DNS providers. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks some security headers and formal security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

F

Fachverband Elektro- und Informationstechnik Sachsen/Thüringen

elektro-sachsen-thueringen.de

38

The Fachverband Elektro- und Informationstechnik Sachsen/Thüringen is a regional trade association representing electrical and information technology craftsmen and companies in the German states of Saxony and Thuringia. The website serves as a professional platform offering information about the association, upcoming events, employee training, and member services. It targets electrical trade professionals and companies seeking industry support and networking. The business model focuses on member representation, training, and industry promotion within the regional market. Technically, the website is built on TYPO3 CMS, hosted on Strato servers, and integrates modern marketing and analytics tools such as Usercentrics CMP, Google Tag Manager, and TikTok Pixel. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with consent management, reflecting good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the association's credibility and member engagement.

L

Landesinnung Saarland der Elektro- und Informationstechnischen Handwerke

elektrohandwerk-saar.de

38

The Landesinnung Saarland der Elektro- und Informationstechnischen Handwerke is a well-established regional trade association in Germany, serving the electrical and information technology trades with a history spanning 50 years. The organization provides member services including training, certification, industry news, and event organization, positioning itself as a trusted entity within its sector. The website reflects this professionalism with good content quality, clear navigation, and consistent branding aimed at members and stakeholders in the Saarland region. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Usercentrics for consent management and Google Analytics for tracking, all served over HTTPS with good mobile optimization. While performance is moderate, the site is accessible and SEO-friendly. Security practices include HTTPS enforcement and consent mechanisms, though explicit security headers and incident response information are absent. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear policies and consent management. The WHOIS data aligns with the business claims, showing domain age and registration consistency that support legitimacy. Overall, the site is low risk with good trust indicators. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure mechanism to further strengthen security and trust.

F

Fachverband Elektro- und Informationstechnische Handwerke Nordrhein-Westfalen

feh-nrw.de

43

The Fachverband Elektro- und Informationstechnische Handwerke Nordrhein-Westfalen (FEH.NRW) is a regional trade association serving the electrical and information technology trades in North Rhine-Westphalia, Germany. The website provides comprehensive information about the association's services, including member support, training, industry news, and job listings. The organization targets professionals and companies within the electrical trade sector, positioning itself as a key regional industry body. Technically, the website is built on TYPO3 CMS and employs modern web technologies including JavaScript, Usercentrics for consent management, Google Tag Manager, and TikTok analytics. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. The use of HTTPS and consent management indicates a good level of privacy and security awareness. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for such organizations and does not raise immediate concerns. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on compliance and user privacy. Strategic recommendations include publishing explicit security and incident response policies, enhancing HTTP security headers, and maintaining regular audits of third-party scripts to further strengthen security posture.

L

Landesinnungsverband für Elektro- und Informationstechnik Niedersachsen / Bremen

eh-nb.de

40

The Landesinnungsverband für Elektro- und Informationstechnik Niedersachsen / Bremen is a regional trade association serving professionals in the electrical and information technology sectors within the German states of Niedersachsen and Bremen. The organization provides member services including certification as E-Marken Betrieb, educational seminars, industry news, and representation. Their website reflects a professional and consistent brand image, targeting trade members and stakeholders with relevant content and resources. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as SVG, CSS3, and JavaScript. It integrates Usercentrics for cookie consent management and TikTok analytics for user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. Overall, the website presents a low-risk profile with a solid business credibility and privacy posture. Strategic improvements could focus on enhancing security headers, publishing security policies, and expanding incident response information to further strengthen trust and compliance.

L

Landesinnungsverband der Elektro- und Informationstechnischen Handwerke Mecklenburg-Vorpommern

eh-mv.de

40

The Landesinnungsverband der Elektro- und Informationstechnischen Handwerke Mecklenburg-Vorpommern operates as a regional trade association focused on the electrical and information technology sectors within Mecklenburg-Vorpommern, Germany. The website serves as a comprehensive portal offering member services, training, certification programs, industry news, and job postings, positioning itself as a key resource for professionals in the electrical trade industry. The business model centers on supporting and representing member companies, providing educational resources, and facilitating industry collaboration. Technically, the website is built on the TYPO3 CMS platform and employs modern web technologies including JavaScript, AJAX for search functionality, and integrates third-party services such as Usercentrics for cookie consent management, Google Analytics, Google Tag Manager, and TikTok Pixel for analytics and marketing. The site is hosted on infrastructure associated with DomainControl, with good mobile optimization, accessibility, and SEO practices observed. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR. However, explicit security headers and incident response policies are not evident, suggesting areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the trade association, with moderate to good scores across content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic enhancements in security headers and incident response transparency would further strengthen the security posture and trustworthiness.

F

Fachverband Elektro- und Informationstechnik Hessen/Rheinland-Pfalz

liv-fehr.de

39

The Fachverband Elektro- und Informationstechnik Hessen/Rheinland-Pfalz (FEHR) operates as a regional trade association providing comprehensive support, consulting, and training services to entrepreneurs and businesses in the electro-technology sector within Hessen and Rheinland-Pfalz, Germany. The website serves as an information hub offering access to legal advice, technical consultations, training seminars, and member benefits, targeting local industry professionals and companies. The association maintains a strong market position as a trusted regional entity with a consistent brand presence and active member engagement. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Usercentrics for consent management, Google Analytics, Google Tag Manager, and TikTok Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting and DNS are managed via DomainControl (GoDaddy), indicating a professional infrastructure. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and no public security or incident response policies are published. No vulnerabilities or sensitive data exposures were detected. The WHOIS data aligns with the website's legitimacy, showing consistent domain registration without privacy protection, appropriate for a trade association. Overall, the website demonstrates a good balance of content quality, technical implementation, security posture, privacy compliance, and business credibility, scoring an overall AI rating of 82. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would further enhance trust and resilience.

N

NFE Norddeutscher Fachverband Elektro- und Informationstechnik e.V.

nfe.de

46

NFE Norddeutscher Fachverband Elektro- und Informationstechnik e.V. is a well-established regional association representing approximately 350 medium-sized companies in the electrical and information technology sectors in Hamburg. The organization provides advocacy, certification, training, and networking services to its members, positioning itself as a key industry stakeholder in the region. The website reflects a professional and member-focused approach with clear communication of benefits and services. Technically, the site is built on TYPO3 CMS with Bootstrap, ensuring responsive design and good accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

E

E-Handwerke Berlin/Brandenburg

eh-bb.de

38

E-Handwerke Berlin/Brandenburg is a regional trade association focused on supporting electrical craftsmen and professionals in the Berlin and Brandenburg regions. The organization provides certification services such as E-Check, training seminars, apprenticeship support, and member services. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at trade professionals and apprentices. Technically, the site is built on TYPO3 CMS, hosted by SchlundTech, and uses modern tracking and consent management tools, including Usercentrics and Google Tag Manager. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the domain registration and hosting align well with the business purpose, indicating legitimacy and trustworthiness.

L

Landesinnungsverband für das Bayerische Elektrohandwerk

elektroverband-bayern.de

37

The Landesinnungsverband für das Bayerische Elektrohandwerk is a regional trade association representing the Bavarian electrical craft sector. It provides member services including training, certification (E-Marke), public relations, and a platform for news and events. The website targets professionals, trainees, and stakeholders in the electrical industry within Bavaria, positioning itself as an authoritative and trusted organization in this niche. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates a consent management platform (Usercentrics) alongside analytics tools such as Google Analytics and TikTok Pixel. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place; however, there is room for improvement in publishing explicit security policies and implementing additional HTTP security headers. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The site is free from blocking mechanisms or WAF challenges, enabling full content accessibility.

F

Fachverband Elektro- und Informationstechnik Baden-Württemberg

fv-eit-bw.de

43

The Fachverband Elektro- und Informationstechnik Baden-Württemberg is a regional industry association focused on the electrical and information technology sectors in Baden-Württemberg, Germany. It provides its members with industry news, training, networking opportunities, and advocacy services. The website reflects a professional and well-structured digital presence, targeting professionals and businesses within the regional energy and technology sectors. The association maintains a strong market position as a trusted regional body with a clear focus on quality and member services. Technically, the website is built on TYPO3 CMS and integrates modern technologies including Usercentrics for consent management, Google Analytics, and TikTok Pixel for analytics and marketing. The site is hosted on a domain controlled by DomainControl, likely GoDaddy, and shows good mobile optimization and SEO practices. Performance is moderate with no critical technical issues detected. From a security perspective, the website uses HTTPS with SSL and implements privacy best practices such as IP anonymization and cookie consent mechanisms. However, it lacks explicit security headers and does not provide visible security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the security posture is good but could be improved with additional headers and documented policies. The overall risk assessment is low with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining regular audits of third-party scripts to ensure ongoing compliance and security.

A

Arbeitsgemeinschaft Medienwerbung GmbH im Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

e-check.de

46

The website www.elektrohandwerk.de is a professionally maintained information portal affiliated with the German electrical trade association (ZVEH). It focuses on promoting the E-CHECK service, which provides electrical safety inspections and energy efficiency advice primarily for private homeowners, tenants, landlords, and property managers. The site offers comprehensive content on electrical safety, damage prevention, energy saving, and comfort enhancements, positioning itself as an authoritative resource in the energy sector within Germany. Technically, the site is built on TYPO3 CMS, uses modern JavaScript and CSS technologies, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager and TikTok analytics for tracking, all implemented with GDPR compliance in mind. Security-wise, the site enforces HTTPS and uses consent-based tracking but lacks explicit security headers and published security policies or incident response information. Overall, the site is trustworthy, well-branded, and user-friendly, with moderate to good performance and mobile optimization.

E

Eurosystem Procurement Coordination Office (EPCO)

epco.lu

54

The Eurosystem Procurement Coordination Office (EPCO) is an institutional entity established by the European Central Bank to coordinate joint procurement activities among the central banks of the Eurosystem and the European System of Central Banks (ESCB). Hosted by the Banque centrale du Luxembourg since 2008, EPCO facilitates cost-efficient procurement, contract management, and promotes best practices across its member institutions. The website reflects a professional and consistent brand image, targeting central banks and related governmental entities involved in procurement activities. Technically, the site is built on WordPress with modern frontend technologies and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of explicit privacy and terms of service policies is a notable gap. Overall, the site is trustworthy and well-positioned as an official coordination office for Eurosystem procurement.

C

Comité du Risque Systémique

cdrs.lu

32

The website cdrs.lu represents the Comité du Risque Systémique, an institutional entity likely focused on systemic risk in Luxembourg. The site is primarily informational, presented in French, and built on WordPress using the Divi theme. The technical infrastructure is standard for a small institutional website, with moderate performance and basic mobile optimization. However, the site lacks critical privacy and security policies, contact information, and advanced security headers, which limits its compliance and trustworthiness. No WAF or blocking mechanisms were detected, indicating full accessibility. The WHOIS data shows Luxembourg-based name servers consistent with the domain's country code but lacks detailed registrant information, limiting full legitimacy assessment. Overall, the site is safe and suitable for general audiences but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

B

Banque centrale du Luxembourg

apieceofluxembourg.lu

60

The website 'A Piece of Luxembourg' is an official platform managed by the Banque centrale du Luxembourg, offering unique numismatic products that celebrate Luxembourg's culture, history, and heritage. It targets collectors and enthusiasts interested in Luxembourg-themed euro coins and related products, positioning itself as a niche leader in this specialized market. The business model revolves around e-commerce sales combined with cultural promotion, leveraging the authority and trust of the central bank. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, FontAwesome, Swiper.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain registration transparency but does not significantly detract from the site's legitimacy given its official affiliation. Overall, the website presents a low-risk profile with strong business credibility and good technical and security posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

R

RTL

rtl.lu

69

RTL Lëtzebuerg operates as a leading media and broadcasting company in Luxembourg, offering a comprehensive range of services including news, television, radio, and digital content. The website is professionally designed with excellent content quality and clear navigation, targeting a general audience interested in regional and international news and entertainment. Technically, the site employs a modern technology stack with extensive use of JavaScript libraries, consent management tools, and analytics platforms, supporting both web and mobile app platforms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is robust, featuring a comprehensive GDPR consent mechanism. The absence of WHOIS data due to malformed queries slightly reduces domain trustworthiness but does not detract from the overall legitimacy of the site. Strategic recommendations include publishing security and incident response policies, providing clear contact information, and adding terms of service to enhance legal clarity and user trust.

D

Dopravní koridor Poodří, z.s.

dopravnikoridorpoodri.cz

59

Dopravní koridor Poodří, z.s. is a Czech non-profit organization focused on advocating for transportation corridor development, particularly high-speed rail projects, in the Poodří region. The organization collaborates with multiple municipalities and regional authorities to influence infrastructure planning and environmental considerations. Their website serves as an information hub and communication platform for stakeholders and the public. Technically, the website is built on WordPress using the Avada theme and Fusion Builder framework, incorporating modern JavaScript libraries like Splide.js for interactive elements. The site is hosted under the REG-GRANSY registrar with consistent DNS settings. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the website presents a professional and trustworthy front for the organization, with clear contact information and relevant content. Strategic improvements in security headers and incident response documentation could further strengthen their posture.

Ř

Římskokatolická farnost Klimkovice

farnostklimkovice.cz

56

The website www.farnostklimkovice.cz represents the Roman Catholic parish of Klimkovice, a small non-profit religious organization serving its local community. The site provides parish news, religious service schedules, historical information, and contact details. It targets local parishioners and visitors interested in the parish's activities and spiritual services. The business model is community and faith-based, with no commercial intent. Technically, the website is built on the Webnode CMS platform and uses Cloudfront CDN for content delivery. It incorporates Google Analytics with IP anonymization for visitor tracking. The site is mobile-optimized and has a moderate performance profile. However, it lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and Strict-Transport-Security. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and trustworthy for its intended audience. The lack of WHOIS data suggests privacy protection, which is typical for small non-profits. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and regulatory adherence.

SoviSol GmbH is a medium-sized German company specializing in the procurement and supply of solar energy components, including photovoltaic modules, battery storage systems, inverters, and mounting systems. With over 10 years of experience, the company targets professional customers such as solar installers, builders, and project developers. Their website presents a professional image with clear navigation, relevant content, and a focus on sustainable energy solutions. The company maintains multiple physical locations in Germany and provides clear contact information. Technically, the website uses modern frontend technologies like jQuery, Bootstrap, and Swiper.js, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and performs moderately well.

R

RHEINZINK

rheinzink.de

55

RHEINZINK is a globally recognized manufacturer specializing in titanium zinc products, primarily serving the construction and architectural sectors. The company positions itself as a market leader with a strong emphasis on quality, sustainability, and innovative solutions for roofing, facades, and drainage systems. Their website reflects a mature digital presence with comprehensive product information, localized domains for international markets, and a professional design tailored to architects, craftsmen, distributors, and builders. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and includes performance optimizations and mobile responsiveness. Security measures such as HTTPS, security headers, and cookie consent mechanisms are in place, indicating a solid security posture. However, explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The absence of blocking mechanisms or WAF challenges allows full content accessibility and analysis. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information to further strengthen trust.

E

Eurener

eurener.com

47

Eurener is a Spanish photovoltaic module manufacturer specializing in high-quality, durable solar panels primarily targeting the European residential and commercial markets. The company emphasizes sustainability, advanced solar technologies, and premium design, supported by industry certifications and awards such as the TOP Brand seal and Ecovadis platinum medal. The website is built on WordPress with Elementor, featuring modern web technologies and multilingual support, providing a professional user experience with good navigation and mobile optimization. Security posture is adequate with HTTPS and domain registration protections, but lacks advanced DNS security and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for improvement in privacy and security transparency.

M

Maxeon Solar Technologies

maxeon.com

67

Maxeon Solar Technologies operates as a leading manufacturer and innovator in the solar energy sector, providing advanced solar panels and technology solutions tailored for homeowners, businesses, and power plants. The company leverages a partner installer network to deliver superior solar solutions globally. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a large enterprise in the energy industry. Technically, the site is built on the Squarespace platform, utilizing modern web technologies and integrated consent management for privacy compliance. Security posture is solid with HTTPS and HSTS enabled, though explicit security policies and incident response information are absent. The absence of WHOIS domain registration data is a notable gap but does not detract significantly from the overall legitimacy given the professional site and external references. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information to further strengthen trust and compliance.

T

TESVOLT AG

tesvolt.com

57

TESVOLT AG is a German-based company specializing in the production and provision of lithium battery storage systems tailored for renewable energy applications across industry, commerce, and agriculture sectors. The company positions itself as a leading European full-service provider with a strong market presence demonstrated by over 6,000 projects worldwide. TESVOLT offers a broad product portfolio including cabinet and container systems, energy management solutions, and partner programs to support sustainable energy transitions. Technically, the website is built on the CIDEMOS CMS platform with modern web technologies such as lazy loading, JSON-LD structured data, and Google Tag Manager for analytics. The site is well-optimized for mobile devices and SEO, providing a professional user experience with clear navigation and comprehensive content. From a security perspective, the website enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and no dedicated incident response or vulnerability disclosure pages are present, indicating room for improvement in security transparency and defense-in-depth. Overall, the website and business exhibit a high level of professionalism and trustworthiness, supported by certifications, awards, and active social media engagement. The only notable concern is the lack of WHOIS data, which may be due to domain privacy or registration anomalies but does not currently detract significantly from the company's credibility. Strategic recommendations include enhancing security headers, publishing incident response information, and implementing a security.txt file to further strengthen security posture and stakeholder trust.

H

Heckert Solar Shop

heckertsolar.com

48

Heckert Solar Shop is a German-based e-commerce and service provider specializing in photovoltaic modules, storage systems, inverters, and related solar technology products. The company targets a broad audience including private consumers, professional partners, investors, and commercial clients. The website demonstrates a professional and consistent brand presence with a good range of products and services, positioning itself as a reliable expert in the solar energy sector. Technically, the site is built on the Shopware platform, uses modern JavaScript libraries, and integrates multiple advertising and analytics tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain protection statuses, but lacks advanced DNS security and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms policies. Overall, the website is trustworthy and well-maintained but could improve transparency and security documentation.

F

Fair-ON-Pay Association

fair-on-pay.com

52

Fair-ON-Pay Association is a Swiss-based non-profit organization founded in 2022 that promotes equal pay in companies through certification and auditing services. It offers a recognized certification process with multiple levels, audited by SGS, to help companies demonstrate their commitment to equal pay and social responsibility. The association is a member of the Equal Pay International Coalition (EPIC), enhancing its credibility and international standing. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website and business present a trustworthy and professional image with clear contact information and partner relationships.

H

Hager Group

elcom.de

66

Hager Group operates a professional website focused on door communication and security solutions, targeting primarily B2B customers in the energy sector. The company has a long-standing market presence since 1976, supported by a domain registered since 1997. The website content is well-structured, professionally designed, and consistent with the company's branding and business model. The technical infrastructure leverages modern technologies including Sitecore CMS, Akamai CDN, and advanced search capabilities via Algolia, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy policy and terms of service on the analyzed page. Overall, the website reflects a credible and trustworthy enterprise with room for enhanced security and privacy transparency.

E

E3/DC

e3dc.com

50

E3/DC operates as a German-based company specializing in energy storage solutions, particularly for photovoltaic systems. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern technologies such as Bootstrap and various marketing and analytics tools. The company positions itself as a price-winning provider in the energy storage sector, targeting end customers with photovoltaic installations. Technically, the site is well-optimized for mobile and SEO, with HTTPS enforced and cookie consent mechanisms in place. However, the absence of WHOIS data and lack of explicit privacy and security policies reduce the overall trustworthiness and compliance posture. Security best practices such as security headers and incident response information are missing, indicating room for improvement in security maturity. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

A

aleo solar GmbH

aleo-solar.de

62

Aleo Solar GmbH is a German company specializing in the manufacturing and sale of efficient solar modules, emphasizing sustainable energy solutions made in Germany. The website positions the company as an established player in the renewable energy sector, targeting a general audience interested in solar energy products. The digital infrastructure is built on the Wix platform, leveraging Wix's Thunderbolt framework and associated technologies, providing a moderate level of performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, complemented by a cookie consent mechanism indicating GDPR awareness. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced compliance documentation and contact accessibility.

E

EVBox

evbox.com

11

EVBox is a well-established global provider of electric vehicle charging stations and software solutions, founded in 2007. The company targets businesses, resellers, distributors, installers, OEMs, and electric vehicle users, offering scalable and modular charging solutions alongside partner support and maintenance services. Their market position is strong within the energy and transportation sectors, supported by a global partner network and certifications. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted by OVH sas, and optimized for performance and mobile devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers could be added. The domain registration is consistent and trustworthy, with no privacy protection but with domain status flags to prevent unauthorized changes. Overall, the website is professional, secure, and compliant with GDPR, providing a trustworthy digital presence for EVBox.

Netatmo is a recognized smart home technology company specializing in connected consumer electronics designed to enhance home safety, health, and comfort. The company operates under the parent company Legrand, a global leader in electrical and digital building infrastructures. The website currently is in maintenance mode, returning a 500 server error, limiting access to full content and services. The digital infrastructure employs modern JavaScript frameworks such as Nuxt.js and integrates analytics and marketing tools like Google Tag Manager and Qualibooth. However, the absence of visible privacy, cookie, and terms of service policies, as well as lack of contact information, reduces transparency and user trust. Security posture is moderate with HTTPS enforced but missing security headers and vulnerability disclosure information. The WHOIS data is unavailable, which raises concerns about domain registration transparency but may be due to privacy protection or technical issues. Overall, the site reflects a professional brand but currently suffers from accessibility and compliance gaps.

BIOK laboratorija is a Lithuanian cosmetics manufacturing company specializing in natural and innovative cosmetic and oral care products. They manage multiple brands and serve Nordic and European markets with over 250 products. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site uses a mix of legacy and modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and tracking. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and uses an outdated jQuery version. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and domain registration visibility.

E

Ecodenta

ecodenta.lt

38

Ecodenta.lt is a Lithuanian-based healthcare e-commerce website specializing in dental care products and services. The company has been established since 2014 and operates primarily in the Lithuanian market. The website is built on WordPress using the WooCommerce plugin and the Divi theme, indicating a standard but effective e-commerce platform. The site is moderately optimized for mobile devices and provides a generally good user experience with clear navigation and professional design. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled and cookie consent implemented, but the absence of security headers and incident response information suggests room for improvement. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

The website tavokraujas.lt represents the Vilniaus Universiteto Ligoninės Santaros Klinikų Kraujo centras, a major Lithuanian healthcare institution specializing in blood donation and transfusion services. The site provides comprehensive information about blood donation, donor registration, donor eligibility, and blood donation events. It serves as an important resource for potential donors and healthcare professionals in Lithuania. The business is well-positioned as a trusted healthcare provider with ISO 9001:2015 certification and affiliation with a leading university hospital. Technically, the website uses a variety of established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. The site is mobile optimized and features multiple interactive forms for donor registration and event organization. However, there is no evidence of a CMS, and hosting details are not disclosed. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

Asociacija ,,Padedu augti“ is a Lithuanian non-profit organization dedicated to supporting families with premature and seriously ill newborns. Established in 2011, it provides various services including social support projects, educational initiatives, and direct assistance to hospitals and families. The organization maintains a strong community presence through storytelling, events, and partnerships with healthcare institutions. Their website reflects a well-structured, content-rich platform with clear navigation and engagement tools such as a live chat widget. Technically, the website employs modern web technologies including jQuery, jQuery UI, Fancybox, and Google Fonts, hosted behind Cloudflare DNS and nameservers ensuring reliable performance and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal security policies. From a security and compliance perspective, the site lacks visible privacy and cookie policies, which is a notable compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

H

Hittalån.se

xn--hittaln-jxa.se

48

Hittalån.se is a Swedish financial comparison website specializing in loans without UC credit checks and loans for individuals with many credit inquiries. The site provides detailed listings and comparisons of loan providers that use alternative credit checks such as Creditsafe and Dun & Bradstreet, targeting consumers who want to avoid UC inquiries or have weak creditworthiness. The website is built on WordPress with modern performance optimizations including lazy loading and WebP images. It uses Google Analytics and Tag Manager for tracking visitor data. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and structure appear professional and focused on legitimate financial services. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the site serves a niche market in Sweden with a clear business model as an affiliate/comparison platform for loan providers.

T

Testly AB

xn--bst-i-testet-gcb.se

39

Bäst-i-testet.se is a Swedish independent product review and comparison website operated by Testly AB. The site offers comprehensive product tests, expert and user reviews, and buying guides across multiple categories such as electronics, home appliances, and family products. It targets consumers seeking trustworthy and objective information to aid their purchase decisions. The business model relies primarily on affiliate marketing and content publishing. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Overall, the domain registration is consistent with the business age and operations, indicating legitimacy and trustworthiness.

K

Kökstavlor.se

xn--kkstavlor-07a.se

48

Kökstavlor.se is a Swedish niche affiliate marketing website specializing in kitchen posters and wall art. The site aggregates product information and links to partner retailers such as Designtorget, KitchenTime, Confident Living, and Solhem Inredning, providing users with curated selections and price comparisons. The business model relies on affiliate commissions while maintaining editorial independence and transparency through affiliate disclosures. The website is built on WordPress using Elementor and Yoast SEO, indicating a mature digital infrastructure with good SEO practices and mobile optimization. Security posture is solid with HTTPS enforced and standard security headers, though improvements like DNSSEC and Content-Security-Policy headers are recommended. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-positioned within its retail niche.

Á

Árvakur hf.

mogginn.is

59

Árvakur hf. operates the www.mbl.is website, a leading Icelandic news media platform offering a broad range of news content including domestic, international, business, sports, and cultural news. The site supports multiple content formats such as PDF newspapers, text articles, audio summaries, and daily podcasts, targeting the general Icelandic-speaking public and subscribers. The business model is subscription-based with additional free content, positioning it as a major player in Iceland's media landscape. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Analytics, Microsoft Clarity, and the Piano paywall system for subscription management. The site is mobile-optimized and uses responsive design principles, with good SEO and accessibility features. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure forms and cookie consent mechanisms. However, explicit security headers like Content-Security-Policy are not evident, and no public security or incident response policies are published. The absence of WHOIS data limits domain registration transparency, though the site content and branding strongly support legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly platform with extensive analytics and advertising integrations. Strategic improvements in security policy transparency and domain registration visibility would enhance trust and compliance.

YACHT s.r.o. operates the website yacht.cz, a Czech-language media platform dedicated to yachting and boating enthusiasts. The site provides editorial content including articles, news, event information, and an e-commerce section selling magazines and books related to the maritime lifestyle. The company targets boating hobbyists and professionals within the Czech Republic, positioning itself as a niche media leader in this sector. Technically, the website is built on TYPO3 CMS, employs modern JavaScript libraries such as jQuery, and integrates marketing and analytics tools like HubSpot and Google Analytics. Security measures include HTTPS enforcement and RSA encryption for login forms, alongside a cookie consent mechanism compliant with GDPR principles. However, the absence of explicit privacy and terms of service pages and missing WHOIS registration data reduce overall trust and compliance scores. The site is accessible without WAF or blocking mechanisms, indicating good availability and user experience.

W

Winterhalter Gastronom GmbH

winterhalter.com

64

Winterhalter Gastronom GmbH is a well-established family-owned company specializing in commercial warewashing technology, including dishwashers, water treatment, chemicals, and accessories for the hospitality and catering industries. The company positions itself as a quality leader with a comprehensive system approach to warewashing solutions. The website is professionally designed, multilingual, and targets a global audience of commercial kitchen operators. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, bot protection via Cloudflare Turnstile, and privacy compliance through Usercentrics, although explicit security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence and contact transparency. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility.