Security Directory

Mercedes-Benz France operates as a premier luxury automotive brand focused on the French market, offering new and used vehicles alongside connected vehicle services. The website reflects a mature digital presence with comprehensive legal disclosures, GDPR compliance, and strong branding consistent with the global Mercedes-Benz Group AG. Technically, the site leverages modern frameworks such as Vue.js, integrates advanced analytics and marketing tools, and is hosted on Amazon Web Services, ensuring robust performance and scalability. Security posture is strong with HTTPS enforcement, security headers, and privacy mechanisms, though explicit incident response and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism and trustworthiness, supporting Mercedes-Benz's market leadership in luxury transportation.

Mercedes-Benz South Africa Limited operates a comprehensive and professionally maintained website offering luxury vehicles, financing, leasing, and after-sales services tailored to the South African market. The company is a subsidiary of Mercedes-Benz AG, with a strong brand presence and detailed legal and privacy disclosures. The website employs modern web technologies including Vue.js and Adobe Experience Manager, ensuring a responsive and accessible user experience. Security practices include HTTPS, consent management, and monitoring via Datadog RUM, though explicit security headers and incident response policies are not clearly published. WHOIS data is unavailable, which is a minor concern but does not detract from the overall legitimacy and professionalism of the site.

Mercedes-Benz AG operates as a leading global premium automotive manufacturer headquartered in Germany, offering a broad portfolio of luxury vehicles including sedans, SUVs, electric vehicles, and commercial vans. The company also provides financial services such as leasing and banking through subsidiaries. The website reflects a mature digital presence with comprehensive product information, configurators, and customer service options targeting both private and business customers. Technically, the site leverages modern frameworks like Vue.js and is built on Adobe Experience Manager, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust, with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with corporate branding standards.

Mercedes-Benz Polska Sp. z o.o. operates the official Mercedes-Benz website for Poland, offering a comprehensive range of luxury passenger vehicles, connectivity services, financial products including leasing and loans, and insurance solutions. The company is a subsidiary of the global Mercedes-Benz Group AG, maintaining a strong market position in the premium automotive sector. The website targets both individual consumers and business clients interested in Mercedes-Benz products and services within Poland. The business model integrates vehicle sales with digital connectivity and financial services, enhancing customer engagement and retention. Technically, the website leverages modern web technologies including Vue.js, Google Tag Manager, and Datadog Real User Monitoring, indicating a mature digital infrastructure focused on performance and user experience. The use of Adobe Experience Manager as the CMS suggests enterprise-grade content management capabilities. The site is well-optimized for mobile devices, includes comprehensive SEO metadata, and employs advanced analytics and user tracking tools to monitor and improve service delivery. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is robust, with detailed GDPR-aligned privacy policies, cookie consent mechanisms, and clear data protection officer contact information. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly visible security policy or vulnerability disclosure program suggests room for improvement in transparency and incident response readiness. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with the brand's global standards. The lack of WHOIS data is mitigated by strong on-site legitimacy indicators. Strategic recommendations include enhancing security transparency, maintaining rigorous third-party script audits, and implementing a formal vulnerability disclosure channel to further strengthen trust and compliance.

Mercedes-Benz Hungária Kft. operates the official Hungarian website for Mercedes-Benz passenger cars, providing comprehensive information on vehicle models, services, financing options, and digital extras. The company is a subsidiary of Mercedes-Benz AG, a globally recognized premium automotive manufacturer. The website targets Hungarian consumers interested in luxury vehicles and related services. Technically, the site employs modern web technologies including Vue.js and Adobe Experience Manager, ensuring a fast, responsive, and professional user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, with detailed GDPR-aligned privacy policies and data protection officer contact information. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

Mercedes-Benz Denmark operates an official, comprehensive website targeting Danish consumers interested in premium passenger cars, including electric and hybrid models. The site offers detailed product information, online configurators, and service booking functionalities, positioning the brand as a leader in the Danish automotive market. The technical infrastructure leverages modern web technologies such as Vue.js and Adobe Experience Manager, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security headers could be better documented. Privacy compliance is robust, with a detailed GDPR-compliant privacy policy and clear data protection officer contact information. Overall, the website reflects a mature digital presence aligned with Mercedes-Benz's global standards.

Mercedes-Benz Belgium Luxembourg NV operates the official Mercedes-Benz website for Belgium, providing comprehensive information on passenger cars, commercial vehicles, services, financing, and digital offerings. The company is a subsidiary of Daimler AG (now Mercedes-Benz Group AG), a global leader in premium automotive manufacturing. The website targets Belgian consumers and corporate clients interested in Mercedes-Benz vehicles and related services. The site is well-branded, professionally designed, and offers extensive navigation and content relevant to its audience. Technically, the website leverages modern web technologies including Vue.js, Adobe Experience Manager CMS, and integrates advanced analytics and monitoring tools such as Google Tag Manager and Datadog RUM. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is restricted due to .be domain policies, but the domain and website content strongly indicate legitimacy and corporate authenticity. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance with privacy regulations, making it a trustworthy digital presence for Mercedes-Benz in Belgium.

Mercedes-Benz România S.R.L. operates the official Mercedes-Benz brand website for Romania, offering a comprehensive digital platform for vehicle sales, financing, leasing, insurance, and after-sales services. The website targets Romanian consumers interested in premium passenger cars, including electric and hybrid models, providing tools for vehicle configuration, test-drive scheduling, and service appointments. The company is a subsidiary of the global Mercedes-Benz AG group, reflecting a strong market position in the automotive transportation sector. Technically, the website leverages modern web technologies such as Vue.js and integrates advanced analytics and monitoring tools like Google Tag Manager and Datadog RUM. The platform appears to be built on Adobe Experience Manager (AEM), ensuring robust content management and scalability. Performance and mobile optimization are good, though accessibility compliance is basic with room for improvement. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and uses modern JavaScript frameworks, contributing to a solid security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is comprehensive, with detailed GDPR-aligned policies, a named Data Protection Officer, and transparent data handling practices. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting Mercedes-Benz's brand integrity in Romania. Strategic recommendations include enhancing accessibility standards, verifying security headers explicitly, and maintaining regular security audits to uphold the strong security posture.

Mercedes-Benz New Zealand Limited operates the official Mercedes-Benz passenger car website for New Zealand, offering a comprehensive range of luxury vehicles including electric and hybrid models. The company is positioned as a premium automotive brand with a strong market presence supported by authorized dealerships and financial services. The website reflects a mature digital infrastructure leveraging modern technologies such as Vue.js, Adobe Experience Manager, and advanced analytics tools including Google Analytics 360 and Datadog RUM. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy compliance aligned with GDPR and New Zealand Privacy Act standards. The absence of WHOIS data for the domain suggests it is a subdomain or alias under a broader Mercedes-Benz domain strategy, but the website content and branding strongly affirm legitimacy. Overall, the site provides a professional, secure, and user-friendly experience tailored to New Zealand consumers interested in luxury vehicles.

Mercedes-Benz Australia/Pacific Pty Ltd operates the official Mercedes-Benz website for Australia, offering a comprehensive range of luxury passenger vehicles including electric and hybrid models. The company is a subsidiary of the global Mercedes-Benz Group and provides automotive sales, financial services, and insurance solutions tailored to the Australian market. The website is professionally designed with clear navigation, extensive product information, and strong branding consistency, targeting Australian consumers interested in premium vehicles. Technically, the website leverages modern web technologies including Vue.js, Adobe Experience Manager CMS, and integrates advanced monitoring tools like Datadog RUM. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of reputable analytics and marketing platforms. From a security and compliance perspective, the site demonstrates strong adherence to privacy regulations including GDPR and the Australian Privacy Act. Comprehensive privacy policies, cookie policies, and terms of service are present and easily accessible. No critical vulnerabilities or suspicious activities were detected. However, explicit security headers could be further verified and incident response contact details could be more prominently disclosed. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing transparency on security headers, maintaining up-to-date vulnerability assessments, and improving incident response visibility to further strengthen security posture and user trust.

Mercedes-Benz Italia S.p.A. operates as the official Italian subsidiary of the global Mercedes-Benz AG automotive group, specializing in luxury passenger vehicles including electric and hybrid models. The website serves as a comprehensive platform for showcasing vehicle models, providing financial services information, and facilitating customer engagement in Italy. The company holds a strong market position as a leading luxury automotive brand with a broad portfolio of vehicles and services tailored to the Italian market. Technically, the website employs modern web technologies such as Vue.js and Adobe Experience Manager, ensuring a fast, mobile-optimized, and accessible user experience. The infrastructure includes advanced analytics and consent management tools, reflecting a mature digital presence. Security posture is robust with HTTPS enforcement, privacy compliance, and no visible vulnerabilities, though explicit public security policies and incident response contacts are not prominently disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, supporting Mercedes-Benz's brand integrity and customer trust in Italy.

Mercedes-Benz Nederland B.V. operates the official Dutch website for Mercedes-Benz, providing comprehensive information on their vehicle models, services, and corporate details. The company is a subsidiary of Mercedes-Benz Group AG, a globally recognized premium automotive manufacturer. The website targets consumers and business customers in the Netherlands, offering new and certified used cars, financing, insurance, and digital services. Technically, the site employs modern frameworks such as Vue.js and Adobe Experience Manager, with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and consent management, though explicit security policy and incident response pages are absent. Privacy compliance is well addressed with detailed GDPR-aligned policies and a clear data protection officer contact. Overall, the site is professional, trustworthy, and well-maintained, reflecting the brand's premium market position.

Mercedes-Benz Česká republika s.r.o. operates the official Czech Republic website for Mercedes-Benz, a premium automotive brand known globally for luxury and performance vehicles. The website serves as a comprehensive platform for marketing, customer engagement, and service offerings including vehicle information, online booking, and financial services. The company is a subsidiary of Mercedes-Benz Group AG, reflecting a strong market position in the transportation sector. The website is professionally designed, mobile-optimized, and rich in localized content tailored for Czech consumers. Technically, the site leverages modern web technologies such as Vue.js, ES modules, and advanced analytics tools including Datadog RUM and Google Analytics 360. It is built on a robust CMS platform, likely Adobe Experience Manager, ensuring scalability and content management efficiency. Performance and SEO optimizations are evident, with proper meta tags, responsive design, and accessibility considerations. From a security perspective, the site enforces HTTPS and employs best practices including secure cookie consent mechanisms and likely security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with detailed GDPR-aligned policies, cookie management, and clear data protection officer contact information. However, the absence of WHOIS data introduces some uncertainty about domain registration transparency. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing explicit security header disclosures, continuous third-party script audits, and maintaining up-to-date compliance with evolving data protection regulations.

Mercedes-Benz España, S.A.U. operates the official Spanish website for Mercedes-Benz, a leading luxury automotive brand. The company offers a wide range of vehicles including sedans, SUVs, coupes, and digital services such as Mercedes me and MB.DRIVE. The website also supports after-sales services and financial products through subsidiaries like Mercedes-Benz Bank AG. The brand holds a strong market position in Spain and globally, targeting general consumers interested in premium vehicles and related services. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy information in compliance with GDPR.

Mercedes-Benz México operates as a premium automotive brand offering luxury passenger vehicles, financing, and after-sales services tailored to the Mexican market. The website reflects a strong market position with comprehensive product information, financing plans, and customer support channels. The digital infrastructure leverages modern technologies such as Vue.js and integrates advanced analytics and consent management tools, indicating a mature digital presence. Security posture is robust with HTTPS enforcement, security headers, and privacy policies aligned with local regulations. No critical vulnerabilities or blocking mechanisms were detected, supporting a trustworthy user experience. Overall, the site demonstrates professionalism, compliance, and strong brand consistency.

Z

Zeppelin Konzern

zeppelin.com

71

Zeppelin Konzern is a large German enterprise specializing in providing innovative solutions across construction, industry, plant engineering, and energy sectors. The company operates globally with over 200 locations, emphasizing sustainability and corporate social responsibility. Their business model focuses on B2B services including machinery, rental, power systems, and engineering solutions. The website reflects a mature digital presence with professional design and comprehensive content tailored to industrial clients and partners. Technically, the website leverages modern frameworks such as Next.js and React, supported by CDN hosting and enhanced with Google Tag Manager and OneTrust for privacy compliance. The site is mobile-optimized, fast-loading, and accessible, indicating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, although no public vulnerability disclosure or incident response information is provided. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well implemented with clear cookie consent mechanisms and GDPR-aligned privacy policies. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and branding strongly support the authenticity of the business. Overall, Zeppelin Konzern presents a professional, trustworthy, and secure online presence suitable for its enterprise audience. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and continuing regular security audits to maintain and enhance trust.

W

WMS WebMediaSolutions GmbH

it-wms.com

53

WMS WebMediaSolutions GmbH operates a professional website offering specialized panoramic and livestream camera solutions for sectors including tourism, construction, industry, and meteorology. The company emphasizes robust outdoor systems with in-house software development, enabling customized and flexible solutions. Their market position is that of a niche technology provider with a focus on B2B clients requiring advanced camera and livestreaming technologies. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Matomo, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and includes a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses bot management and reCAPTCHA services. However, it lacks explicit security headers and documented incident response policies. No critical vulnerabilities were detected in the visible content or scripts. Privacy compliance is strong with clear policies and consent management. A notable risk is the absence of WHOIS registration data for the domain, which is inconsistent with the active and professional nature of the website. This discrepancy lowers the overall trust score and suggests further verification is needed. Overall, the website is well-constructed, secure, and compliant, but domain registration transparency should be addressed.

G

Graz Tourismus

graztourismus.at

72

Graz Tourismus operates as the official tourism board for the city of Graz, Austria, providing comprehensive information and booking services for accommodation, sightseeing, and events. The website targets tourists and visitors interested in exploring Graz, positioning itself as a trusted source for travel planning in the region. The business model focuses on tourism promotion and visitor engagement, leveraging digital channels to enhance the city's attractiveness. Technically, the website employs modern web technologies including Bootstrap 5 for responsive design, Google Tag Manager for analytics, and Cookiebot for GDPR-compliant cookie management. The presence of Pimcore personalization scripts suggests a mature digital infrastructure aimed at delivering tailored user experiences. The site demonstrates good performance, mobile optimization, and accessibility standards. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, there is no explicit security policy or incident response contact published, which could be improved to enhance transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The risk profile is low, with no detected vulnerabilities or suspicious activities. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a security.txt file to facilitate vulnerability disclosures.

O

OBI Hungary Kft.

obi.hu

66

OBI Hungary Kft. operates a comprehensive retail and e-commerce platform focused on home improvement, gardening, and construction products in Hungary. The website www.obi.hu serves as a digital storefront offering over 80,000 products, supported by in-store services such as tool rental and design studios. The company is part of the larger OBI Group, a well-established European retail chain. The site targets homeowners, DIY enthusiasts, and professionals seeking quality products and services for home and garden projects. Technically, the website employs modern frameworks such as Vue.js and integrates advanced analytics and marketing tools including Google Tag Manager, Hotjar, and Instana, ensuring a fast, mobile-optimized, and accessible user experience. Privacy compliance is robust, with clear cookie consent mechanisms and comprehensive privacy policies in Hungarian language, reflecting GDPR adherence. Security posture is strong, with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site demonstrates a mature digital presence with professional design, clear navigation, and trustworthy business information.

O

OBI Česká republika

obi.cz

67

OBI Česká republika operates as a leading home improvement retailer in the Czech market, offering a wide range of products and services including online shopping, in-store purchases, wood cutting, and tool rental. The company targets consumers and DIY enthusiasts, leveraging a strong brand presence and a comprehensive e-commerce platform. The website demonstrates a mature digital infrastructure with modern technologies such as Vue.js, Google Tag Manager, and Hotjar, ensuring a fast, mobile-optimized, and accessible user experience. Security measures are robust, with HTTPS enforced and multiple security headers implemented, although no public incident response or vulnerability disclosure policies were found. Overall, the website reflects a professional and trustworthy retail operation with good privacy compliance and user engagement.

O

OBI

obi.sk

66

OBI Slovensko operates as a major retail brand specializing in home improvement, garden, construction, kitchen, and bathroom products and services. The website targets general consumers in Slovakia, offering both online shopping and in-store services such as wood cutting and tool rental. The company maintains a strong market position as a leading home improvement retailer in the region. Technically, the website leverages modern frameworks like Vue.js, integrates multiple analytics and marketing tools, and uses performance optimizations such as Baqend SpeedKit and Imgix CDN for images. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit privacy and cookie policies are not found in the provided content. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency on privacy and incident response.

Д

Държавна агенция за закрила на детето

116111.bg

46

The website www.116111.bg is the official online presence of the National Telephone Line for Children 116 111, operated by the State Agency for Child Protection in Bulgaria. It provides free, anonymous, and 24/7 telephone and online chat support services aimed at children, parents, and professionals working with children. The site serves as a government non-profit service focused on child welfare and protection, with a clear mission and target audience. The content is primarily in Bulgarian with multilingual support, and the site includes news, stories, and resources relevant to child protection.

W

WeNet Group S.A.

wenet.pl

11

WeNet Group S.A. operates a professional digital marketing and technology services website targeting small and medium enterprises in Poland. The company offers a broad range of services including website creation, SEO, e-commerce solutions, Google Ads, social media management, hosting, and email marketing. The website is well-branded, consistent, and supported by strong trust indicators such as Microsoft and Google partnerships. Technically, the site is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and consent mechanisms, though some security headers could be improved. No blocking or WAF interference was detected, allowing full content access. WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the site reflects a mature digital presence with strong business credibility and compliance.

O

OBI Italia

obi-italia.it

68

OBI Italia is a prominent retail and e-commerce company specializing in DIY, home improvement, and gardening products targeted at the Italian market. The website offers a comprehensive product catalog, promotions, and services such as home delivery and equipment rental, positioning itself as a market leader in Italy. The digital infrastructure is modern, leveraging Vue.js and various analytics and marketing tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for consumers.

M

MAXIMILIAN.it

maximilian.it

10

MAXIMILIAN.it is a medium-sized Italian fashion retailer operating both online and through physical stores. The website hosts over 200 fashion brands and targets fashion consumers primarily in Italy, with multilingual support for German and English. The business model is focused on e-commerce retail leveraging the Shopify platform, providing a seamless shopping experience with integrated marketing and analytics tools. The site is professionally designed with consistent branding and good content quality, supporting a positive user experience.

B

bauexpert S.p.A

domusbauexpert.it

11

DOMUS bauexpert is a medium-sized Italian company specializing in high-quality interior and exterior finishing products, including flooring, coverings, bathroom furnishings, and doors. It operates primarily in the Trentino Alto Adige region, offering a comprehensive customer experience through multiple showrooms and expert consultancy services. The website reflects a strong regional market position with a focus on professional design and customer support. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google reCAPTCHA, and Iubenda for cookie compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, although some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

K

Kostner GmbH

kostner.net

9

Kostner GmbH operates a diversified business primarily in the energy sector, offering fuel products, retail services through gas stations and bistros, waste cleaning and disposal, and energy systems including e-mobility solutions. The company targets both general consumers and business clients within Italy, maintaining a medium-sized regional presence with multiple related subsidiaries. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Usercentrics for analytics and consent management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data for the domain raises concerns about registration legitimacy, though the professional website and consistent business information mitigate some trust issues. Overall, the site is well-designed, mobile-optimized, and compliant with GDPR privacy requirements, supporting a positive user experience and business credibility.

P

Pattis & Pastorelli GmbH | Srl

pattis-pastorelli.com

52

Pattis & Pastorelli GmbH is a small, independent insurance agency based in Brixen, Italy, with over 70 years of experience. The company offers personalized insurance solutions, financial planning, and asset protection services, collaborating with multiple reputable insurance partners such as Allianz and Italiana. The website reflects a professional and trustworthy business with clear contact information and comprehensive privacy and cookie policies. Technically, the site uses modern CMS technology (Consisto CMS), integrates Google Tag Manager and Analytics, and implements a consent management platform for GDPR compliance. Security posture is adequate with HTTPS and consent mechanisms, though security headers are not detected and WHOIS data is missing, which slightly reduces trust. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

Vertical-Life operates a specialized digital platform focused on delivering real-time competition results for climbing events. Their service supports multiple climbing disciplines and competition formats, offering features such as seamless registration, judging interfaces, participant messaging, and series rankings. The platform targets climbing event organizers, judges, and athletes, positioning itself as a niche leader in climbing competition technology. Technically, the website is built with modern JavaScript frameworks (likely Vue.js), integrates Google services for analytics and advertising, and employs cookie consent mechanisms indicating GDPR awareness. Security posture is strong with HTTPS, security headers, and bot protection via reCAPTCHA, though explicit security policies and incident response contacts are absent. Overall, the site is professional, well-designed, and trustworthy, with minor gaps in privacy documentation and incident response readiness.

S

Südtirol Alto Adige

suedtirol.info

70

The website www.suedtirol.info is the official tourism portal for the South Tyrol (Südtirol Alto Adige) region in Italy. It provides comprehensive information about accommodations, events, regional products, and travel guidance for visitors. The site is well-branded with consistent regional identity and targets tourists seeking detailed and multilingual content about South Tyrol. The business model focuses on tourism promotion and facilitating bookings and event discovery. Technically, the site uses modern web technologies including Adobe Experience Manager CMS, Algolia search, Usercentrics consent management, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a compliance gap. WHOIS data is privacy protected, common for official tourism sites, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

T

Tourismusgenossenschaft Sterzing Pfitsch Freienfeld

knoedelfest-sterzing.com

51

The website www.knoedelfest-sterzing.com represents a regional cultural event focused on the traditional Knödelfest in Sterzing, South Tyrol, Italy. It serves as an informational and promotional platform for the annual dumpling festival, highlighting the event's history, culinary offerings, and local tourism attractions. The site is well-structured with multilingual support and integrates modern web technologies including Google Analytics and a consent management platform to comply with privacy regulations. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and branding strongly suggest a legitimate tourism event. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies or incident response information. Overall, the site provides a good user experience with clear navigation and relevant content for its target audience of tourists and food enthusiasts.

W

Weihnachtsmarkt Sterzing in Südtirol - Glockenweihnacht

weihnachtsmarkt-sterzing.com

52

The website www.weihnachtsmarkt-sterzing.com serves as an official tourism and event promotion platform for the Sterzing Christmas Market in South Tyrol, Italy. It provides detailed information about the event, related programs, accommodation options, and regional tourism highlights. The site targets general audiences interested in cultural and holiday events, leveraging multilingual support (German, Italian, English) to reach a broad visitor base. The business model focuses on regional tourism promotion and event marketing, positioning itself as a key local resource for visitors. Technically, the site is built on ASP.NET Web Forms using the Consisto CMS platform, integrating modern JavaScript libraries and Google services such as Google Tag Manager and Google Analytics. The site implements a comprehensive cookie consent mechanism compliant with GDPR, indicating a mature approach to privacy. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and enforces cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. However, the WHOIS data for the domain is missing or inaccessible, which reduces trust in domain registration transparency. No direct contact information or security contacts are published on the analyzed page. Overall, the website is professional, content-rich, and privacy-conscious, suitable for its tourism promotion purpose. The main risk lies in the lack of domain registration transparency and limited visible security policies. Strategic improvements in security headers, contact disclosures, and domain WHOIS transparency would enhance trust and compliance.

C

Consisto GmbH

sterzing-ratschings.com

52

The website www.sterzing-ratschings.com serves as a regional tourism portal promoting the Sterzing-Ratschings-Gossensass area in South Tyrol, Italy. It provides comprehensive information about local attractions, activities, and accommodations, targeting tourists interested in alpine vacations, skiing, hiking, and cultural experiences. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies and a consent management platform compliant with GDPR standards. Technically, it is built on ASP.NET Web Forms and uses Consisto CMS, integrating Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected in the HTML. The absence of WHOIS data for the domain is a notable anomaly, raising questions about domain registration legitimacy, but the active and professional website presence mitigates some concerns. Overall, the site is a credible and well-maintained regional tourism platform with moderate technical maturity and privacy compliance.

G

Guestnet

guestnet.info

10

Guestnet is a hospitality-focused guest experience platform supporting over 2,500 hotels across multiple countries. The company offers a suite of products including a web app, TV info screens, print templates, and website widgets to digitize and enhance guest communication and services. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Google Tag Manager and Usercentrics for consent management. Security posture is strong with HTTPS and reCAPTCHA protections, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable anomaly that warrants further verification. Overall, Guestnet presents a credible and mature digital presence in the hospitality technology sector.

C

Consisto GmbH

vipiteno.com

54

The website www.vipiteno.com serves as a comprehensive tourism portal for the alpine town of Vipiteno in Alto Adige, Italy. It offers rich content including cultural events, outdoor activities, shopping, and local gastronomy, targeting tourists and visitors interested in mountain vacations. The site is professionally designed with multilingual support and clear navigation, reflecting a mature digital presence. Technically, it is built on ASP.NET Web Forms and uses modern tracking and consent management tools such as Google Analytics, Google Tag Manager, and AVACY for GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the website's professional appearance and functionality. Overall, the site is a reliable and well-maintained regional tourism resource.

K

Kiflo

kiflo.com

76

Kiflo is a specialized SaaS company offering Partner Relationship Management software designed for transparency and scalability. Their platform enables B2B companies to onboard, support, pay, and track partner revenue efficiently, integrating seamlessly with popular CRMs like HubSpot and Salesforce. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeted at businesses looking to scale their partner programs. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and various analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit incident response and vulnerability disclosure policies are not found. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which should be further investigated. Overall, Kiflo presents as a credible and professional business with a strong market position in the PRM space.

S

Städtereinigung Gerke GmbH

staedtereinigung-gerke.de

62

Städtereinigung Gerke GmbH is a well-established regional service provider specializing in municipal and industrial waste management and sanitation services in Tönisvorst, Willich, and surrounding areas in Germany. With over 60 years of history, the company offers a broad range of services including hazardous waste disposal, sanitary rentals, and container rentals through an online shop. The website reflects a professional and consistent brand image targeting local businesses, municipalities, and citizens. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Vodafone infrastructure, and incorporates consent management and analytics tools like Usercentrics and Google Tag Manager. Security posture is solid with HTTPS and basic security best practices, though explicit security headers and incident response policies are not published. Overall, the site is accessible, well-structured, and compliant with GDPR, but could improve transparency on security and incident response. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.

CURANTO is a German container rental service specializing in providing containers for construction debris, bulky waste, and garden waste. The company targets both private and business customers, positioning itself as a reliable and cost-effective service provider with TÜV certification enhancing its trustworthiness. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, hosted on maxcluster infrastructure, and optimized for mobile devices. Tracking and analytics tools like eTracker and Google Tag Manager are implemented with a cookie consent mechanism via Cookiebot, indicating basic privacy compliance. Security posture is adequate with HTTPS enabled, but lacks explicit security policies and some security headers. Overall, the domain registration and website content are consistent and legitimate, reflecting a medium-sized transportation sector business.

Swish is a specialized SaaS provider offering wishlist solutions tailored for Shopify and other e-commerce brands. The company positions itself as a trusted partner for ambitious online retailers, providing seamless wishlist integration, customer behavior analytics, and personalized notifications to enhance customer engagement and drive sales growth. The website reflects a mature and professional business with a strong market presence evidenced by thousands of stores using their service and hundreds of positive reviews. Technically, the site employs modern frameworks such as React and integrates with various analytics and chat tools, demonstrating a solid digital infrastructure and good performance. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a visible cookie consent mechanism and dedicated security policies indicates room for improvement in privacy compliance and transparency. Overall, the site is trustworthy and well-constructed, with minor gaps in privacy and incident response disclosures.

D

Domain Protection Services, Inc.

fibr.shop

65

Fibr AI is a newly established technology company founded in 2023, offering an AI-driven Conversion Rate Optimization (CRO) workforce platform targeted at marketers. Their key services include AI agents for personalization, optimization, and 24/7 monitoring to help businesses increase visitor conversions effortlessly. The website is built on modern infrastructure using Framer CMS and hosted behind Cloudflare, integrating multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Mixpanel, and LinkedIn Insight Tag. The technical implementation is solid with HTTPS enabled and a moderate performance profile, though some security best practices like DNSSEC and security headers are missing. The security posture is decent but could be improved by adding explicit security policies and vulnerability disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with consistent branding but lacks direct contact information and trust signals like certifications or testimonials. Overall, the website is professional and safe for general audiences, with no adult or questionable content detected.

K

Kleine Zeitung GmbH

kleinezeitung.at

78

Kleine Zeitung GmbH operates a prominent regional news website serving Styria, Austria, providing current news, sports, culture, and regional events. The company has a long history dating back to 1904 and maintains a strong market position as a leading regional media outlet. Their business model combines advertising revenue with subscription services, notably the Kleine Pur subscription that offers an ad-light experience. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates multiple third-party analytics and advertising platforms, including Chartbeat, Cxense, and Tinypass, alongside a GDPR-compliant consent management system by Didomi. The site is well-optimized for mobile and SEO, with good accessibility features. Security-wise, the site enforces HTTPS, uses security headers, and manages cookie consent effectively, though it lacks a publicly available security policy or incident response contact. Overall, the site demonstrates a mature digital presence with strong trust signals and compliance with privacy regulations.

R

Region Graz - Steiermark Tourismus

regiongraz.at

67

The website www.steiermark.com serves as the official tourism portal for the Graz region and the broader Styrian area in Austria. It provides comprehensive information about local attractions, events, and travel opportunities, targeting tourists and visitors interested in exploring the region. The site is professionally designed with a clear focus on user experience, multilingual support (German and English), and regional branding consistent with the official tourism authority. The business model centers on destination marketing and promoting regional tourism services, positioning itself as a key player in Austria's hospitality sector. Technically, the website employs a modern technology stack including Matomo for analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The use of Pimcore CMS suggests a robust content management system tailored for complex content needs. The site is mobile-optimized, accessible, and SEO-friendly, ensuring broad reach and usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a published security policy or incident response contacts is noted as an area for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for tourism entities. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and maintaining transparency in domain registration details to further boost trust and security assurance.

T

topi

topi.eu

68

topi is a technology company specializing in providing a B2B subscription platform for hardware-as-a-service. Their platform enables retailers and manufacturers to offer hardware products on a monthly subscription basis, targeting business customers and retail partners. The website demonstrates a strong market position with partnerships with leading IT retailers and a clear focus on simplifying hardware acquisition through subscription models. Technically, the website is built on modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, and Segment Analytics, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers and incident response information are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business credibility and market presence.

The Oskar-Patzelt-Stiftung operates the website mittelstandspreis.com, which promotes and manages the "Großer Preis des Mittelstandes," Germany's premier economic award for medium-sized enterprises. The foundation focuses on recognizing outstanding achievements of the Mittelstand, fostering regional marketing, and building a strong network of nominated and awarded companies. The website is well-structured, content-rich, and targets medium-sized businesses and economic stakeholders in Germany. The business model is non-profit, emphasizing economic development and recognition rather than commercial sales. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Bootstrap, and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. However, some security best practices like security headers and published incident response policies are missing, which could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent, but lacks visible security headers and formal security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional and consistent website content. Overall, the site presents a moderate security posture with room for improvement. Strategically, the foundation should address the WHOIS inconsistency, enhance security headers, and publish clear security and incident response policies to improve trust and compliance. The website is a credible and professional platform for its purpose but would benefit from technical and security enhancements to align with best practices.

Z

Zeppelin Rental

zeppelin-rental.de

65

Zeppelin Rental is a large German company specializing in the rental of machinery, equipment, and temporary infrastructure solutions primarily for business customers in the construction and transportation sectors. The website presents a professional and well-structured digital presence, offering detailed product categories and rental assistance tools. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and includes compliance with GDPR through cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its market segment.

BRUGG Pipes is a globally recognized specialist in flexible and rigid pipe systems, serving sectors such as energy, industrial manufacturing, and transportation. The company offers a comprehensive portfolio of pipe solutions for applications including district heating, cooling, industrial plants, tank stations, and cryogenic uses. As part of the BRUGG Group, it holds a strong market position with a focus on safety, quality, and environmental protection. The website reflects a mature digital presence with multilingual support and detailed product and service information. Technically, the website is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and eTracker. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be enhanced. Security posture is solid with HTTPS enforced and no evident vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, possibly due to privacy protection or recent domain registration, which slightly reduces trust but is mitigated by the professional website content and branding. Overall, BRUGG Pipes presents a professional and trustworthy online presence aligned with its industry leadership. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response visibility to further strengthen trust and compliance.

E

ETAPART AG

etapart.com

63

ETAPART AG is a specialized company focused on providing innovative and energy-efficient hall heating solutions primarily for industrial, sports, and workshop halls. With over 30 years of experience, the company offers services including planning, installation, renovation, and maintenance of decentralized heating systems. The website is professionally designed, content-rich, and targets B2B customers in the energy sector within Germany. Technically, the site is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager and reCAPTCHA for analytics and bot protection. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional online presence. Overall, the site is trustworthy and well-positioned in its niche but should address privacy compliance and domain registration transparency to enhance trust.

K

komptech.com

komptech.com

53

Komptech.com is a professional website representing a company specializing in environmental technology, particularly in waste management and biomass processing machinery. The company targets business clients in the transportation and energy sectors, offering industrial equipment and technology solutions. The website demonstrates a good level of digital maturity with a modern WordPress CMS, optimized performance, and SEO best practices. However, the absence of explicit privacy and cookie policies and lack of visible contact information limit its privacy compliance and user trust. Security posture is generally good with HTTPS and some security headers, but could be enhanced by adding more explicit security policies and incident response contacts. The WHOIS data is missing or protected, which reduces domain trustworthiness and suggests a need for further verification of domain registration details. Overall, the website is professional and safe, but improvements in privacy compliance and transparency are recommended.

P

PRÄZI GROUP

praeziflachstahl.de

54

PRÄZI GROUP is a well-established manufacturing company specializing in precision flat steel products since 1904. The website reflects a professional B2B industrial focus with multilingual support and modern digital infrastructure. The company maintains a consistent brand presence and targets industrial clients primarily in Germany and possibly broader European markets. Technically, the site is built on WordPress with contemporary plugins such as Cookiebot for consent management and Weglot for translations, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is partially met with cookie consent but no visible privacy policy or terms of service on the homepage. Overall, the website is trustworthy and professional but could improve transparency and security documentation.