Security Directory

P

Pädagogische Hochschule Oberösterreich

europaschule-linz.at

70

Europaschule Linz is an educational institution affiliated with the Pädagogische Hochschule Oberösterreich, serving students and educators in the Linz region. The website provides comprehensive information about the school, its services, projects, and contact details, targeting students, parents, and educational professionals. The institution holds a stable regional position as a pedagogical school with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates Google Analytics for visitor insights. The site is mobile-optimized and implements a detailed cookie consent mechanism compliant with GDPR requirements. Hosting and domain registration are managed by reputable providers, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected, and the site maintains good privacy compliance. Overall, Europaschule Linz presents a professional, trustworthy, and user-friendly web presence aligned with its educational mission. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

P

Prandia Augustinum

prandia.at

42

Prandia Augustinum is a specialized food service provider focused on delivering fresh, regional, and biologically sourced meals primarily for the Campus Augustinum community in Graz, Austria. Their offerings include cafeteria and mensa services, school and kindergarten catering, event catering, and menu planning. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German. Technically, the site uses modern web technologies including UKit and Piwik PRO for analytics, with secure HTTPS and cookie consent mechanisms in place. Security posture is solid with secure forms and CSRF protection, though explicit security policies and incident response contacts are absent. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site is free from adult or questionable content, targeting a general audience including students, staff, and event organizers.

B

Bischöflicher Campus Augustinum

augustinum.at

49

Bischöflicher Campus Augustinum is a well-established Austrian educational institution offering a comprehensive range of educational services including kindergarten, primary school, gymnasium, boarding school, social pedagogy college, church music conservatory, and a private pedagogical university. The institution also operates a gastronomy service (Prandia Augustinum) and maintains a large park area, positioning itself as a regional leader in education and religious community services. The website reflects a mature digital presence with clear branding and extensive content tailored to students, parents, and the church community. Technically, the site is built on ProcessWire CMS, uses modern web technologies, and is mobile-optimized with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and secure forms, though it lacks some security headers and published security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with a strong alignment between domain registration data and business claims.

FOTOma.sk is a Slovak-language photography portal operated by PRO.Laika, offering a comprehensive range of content including news, reviews, galleries, forums, contests, and workshops. The site targets photography enthusiasts and professionals within Slovakia and Slovak-speaking communities. It maintains a consistent brand presence and provides regular content updates, supported by active social media channels and a newsletter subscription service. Technically, the website employs a custom CMS with modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence with moderate tracking and advertising practices, aligned with GDPR compliance. WHOIS data confirms legitimacy and consistency with the business profile.

°

°celseo Heizung

celseo-heizung.de

48

°celseo Heizung operates a professional website focused on heating system modernization and installation services in Germany. The company connects homeowners with local heating professionals, offering consultation, configuration tools, and price comparison services. The website is built on TYPO3 CMS and integrates modern web technologies including Google Analytics and Facebook Pixel for marketing and analytics purposes. It provides clear contact options including a prominently displayed phone number and a contact page. Privacy and cookie policies are present and appear GDPR compliant. The site demonstrates good SEO practices and mobile optimization, with consistent branding and customer testimonials enhancing trust. Security posture is adequate with HTTPS enforced, though additional security headers and explicit security policies could improve it. WHOIS data is limited but does not raise concerns. Overall, the website is professional, trustworthy, and well-suited for its target audience.

A

A.D Shop AB

morework.se

53

Morework.se is an established Swedish e-commerce business specializing in material handling, carts, and storage solutions for workplaces. It operates under the parent company A.D Shop AB and has been active since 2006, offering a broad product range with a focus on quality and fast delivery. The website targets business customers needing reliable workplace equipment and storage products. Technically, the site is built on a custom ASP.NET platform using mature JavaScript libraries and integrates Google reCAPTCHA for form security. Analytics and marketing tools such as Google Analytics, Google Ads, and LiveChat are employed to enhance user engagement and track performance. Security posture is solid with HTTPS and form protections, though improvements in HTTP security headers are recommended. The WHOIS data for the www subdomain is missing, but the overall business legitimacy is supported by consistent branding, contact information, and a strong credit rating. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanisms.

A

A.D Shop AB

more.nu

56

More.nu is a Swedish retail and manufacturing business specializing in store fixtures, glass showcases, wall systems, mannequins, and office furniture. It operates as part of A.D Shop AB, targeting retail businesses and office environments with a focus on quality products and direct import. The website is professionally designed with clear navigation and mobile optimization, supporting multiple customer interaction forms protected by Google reCAPTCHA. Technically, the site uses ASP.NET WebForms with common JavaScript libraries, though some libraries are outdated. Security posture is moderate with HTTPS enabled and CAPTCHA protection but lacks advanced security headers and uses older jQuery versions. Privacy compliance is basic with a cookie consent banner and privacy policy present. The domain WHOIS data is missing, which reduces trust from a domain registration perspective but the website content and business information are consistent and professional.

H

HSH Soft- und Hardware Vertriebs GmbH

hsh-berlin.com

71

HSH Soft- und Hardware Vertriebs GmbH is a medium-sized German company specializing in software and hardware solutions for public administration, particularly in the government sector. Their offerings include a range of specialized software products such as MESO, GESO, AUSO, and biometric solutions like Biometric Go®, positioning them as a market leader in municipal resident registration software in Germany. The company actively participates in federal IT modernization initiatives, demonstrating a strong presence in the eGovernment domain. Technically, the website employs a modern but standard technology stack including jQuery and Bootstrap, with a custom CMS backend. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. Privacy and cookie policies are implemented with GDPR compliance, but no direct contact emails or phone numbers are visible on the homepage. From a security perspective, the site lacks explicit security headers and there is no information about HTTPS or SSL configuration in the provided data. The presence of BSI-certified biometric software indicates some level of security awareness. The absence of WHOIS data for the domain is a concern, as it is inconsistent with the active and professional website presence, reducing overall trustworthiness. Overall, the website is professional and content-rich, serving a specialized government software market. The main risks relate to domain registration transparency and security header implementation. Strategic improvements in these areas would enhance trust and security posture significantly.

N

Neuland visuelle Gestaltung GmbH

neuland.li

67

Neuland visuelle Gestaltung GmbH is a professional graphic design agency based in Schaan, Liechtenstein, specializing in functional visual concepts for digital and analog applications. The company serves a diverse clientele including government bodies, cultural institutions, and private enterprises, positioning itself as a trusted local design partner. Their portfolio showcases expertise in branding, corporate design, signage, digital interfaces, and campaign development. Technically, the website is built on the concrete5 CMS and leverages modern JavaScript libraries such as jQuery, Pixi.js, and Anime.js, alongside the Foundation framework, providing a responsive and visually engaging user experience. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a credible and professional business with room for improvement in security and privacy transparency.

S

Streetwork Liechtenstein

streetwork.li

61

Streetwork Liechtenstein operates as a non-profit social outreach organization focused on providing support and counseling services in public and semi-public spaces within Liechtenstein. The organization emphasizes confidentiality and flexible engagement schedules, targeting youth and community members. The website reflects a professional and consistent brand presence with clear contact points and organizational governance details. Technically, the site is built on Concrete5 CMS, leveraging modern frontend libraries such as jQuery and Foundation, and employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and formal policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its niche, with a moderate to good technical and security maturity.

S

Stiftung Sovort (Soziale Arbeit vor Ort) Liechtenstein

sovort.li

62

Stiftung Sovort (Soziale Arbeit vor Ort) Liechtenstein is a non-profit foundation established in 2023 by 10 municipalities in Liechtenstein to consolidate youth social work services including Open Youth Work and Streetwork. The organization targets local youth and communities, providing social support under a unified foundation structure. The website reflects a regional, small-sized non-profit entity with clear business focus and community engagement. Technically, the website is built on the concrete5 CMS platform, leveraging modern JavaScript frameworks such as Vue.js and Axios, and uses the Foundation framework for responsive design. The site is mobile-optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is solid with HTTPS enforced and email obfuscation implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and regional scope.

Minhembio.com is a Swedish niche community platform operated by Prisjakt Sverige AB, targeting home cinema and hi-fi enthusiasts. The site offers forums, galleries, news, and reviews, serving as a meeting place for enthusiasts to share experiences and content. The business model appears to be community-driven with advertising and affiliate partnerships, notably with Prisjakt.nu and Blocket Jobb. The website content is primarily in Swedish and focuses on relevant topics for its audience. Technically, the site uses standard web technologies including JavaScript and CSS, with Google Analytics and a local analytics service for tracking. The site implements a cookie consent mechanism and provides privacy and cookie policies, indicating basic GDPR compliance. However, no explicit security policies or incident response information are publicly available.

I

International Contrast Ultrasound Society

icus-society.org

56

The International Contrast Ultrasound Society (ICUS) operates a professional website dedicated to promoting the safe and effective use of contrast-enhanced ultrasound (CEUS) globally. The organization functions as a non-profit medical society providing education, advocacy, and resources to medical professionals and sonographers. Their market position is unique as the only global society exclusively focused on CEUS, offering webinars, training, protocols, and safety information. The website is built on WordPress with Elementor and integrates modern SEO and analytics tools, reflecting a moderate level of digital maturity. The site is mobile-optimized and professionally designed, facilitating good user experience and navigation. Security posture is adequate with HTTPS and domain registrar protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

W

World Health Organization (WHO)

openwho.org

67

OpenWHO.org is a reputable online learning platform operated by the World Health Organization, focusing on public health emergency preparedness and response. It serves a global audience of health professionals and the public, providing authoritative training resources. The platform is well-branded, professionally designed, and leverages modern web technologies including React and Kaltura for media delivery. The domain registration is consistent with WHO ownership and the platform's founding date. Technically, the website demonstrates good digital maturity with responsive design, accessibility considerations, and integration of media analytics. However, there is room for improvement in security posture, notably the absence of DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited by the lack of explicit privacy and cookie policies in the analyzed content. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and privacy disclosures would strengthen trust. The platform does not engage in advertising or affiliate marketing, focusing solely on educational content. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, publishing clear privacy and cookie policies, and enhancing incident response contact visibility to improve compliance and security transparency.

V

Verband der Veranstaltungsorganisatoren e.V.

vdvo.de

59

The website vdvo.de represents the Verband der Veranstaltungsorganisatoren e.V., a German industry association focused on innovation within the MICE (Meetings, Incentives, Conferences, and Exhibitions) sector. The organization provides startup support, education, political advocacy, and sustainability initiatives tailored to the event industry. The site positions itself as a niche player supporting MICE innovation with a clear target audience of industry professionals and startups. The business model revolves around membership, education, and sector advocacy, with a small organizational size and a strong German regional focus. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, a professional design, and clear navigation, although accessibility features are basic. Performance is moderate, typical for a CMS-based site. Structured data in JSON-LD format enhances SEO and provides clear organization and local business information. From a security perspective, the site enforces HTTPS with HSTS enabled, uses Google reCAPTCHA to protect forms, and includes security headers. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and comprehensive privacy and cookie consent implementations, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data is minimal but consistent enough with the website's claims, supporting legitimacy. Overall, vdvo.de is a professionally presented, secure, and credible website for a specialized industry association. Strategic recommendations include adding explicit privacy and cookie consent policies, implementing a security.txt file, enhancing accessibility, and maintaining regular security audits to uphold compliance and trust.

L

LiveMusikKommission e.V.

livekomm.org

40

LiveMusikKommission e.V. is a well-established non-profit association founded in 2012, representing over 750 music clubs and festivals across Germany. It serves as a key advocate and partner for the live music scene, focusing on cultural event promotion, talent development, and industry representation. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience of music venues and cultural stakeholders. Technically, the site is built on WordPress with a standard theme and uses modern libraries like jQuery, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences, with strong industry partnerships evident through linked domains and logos.

I

isdv e.V.

isdv.net

52

isdv e.V. is a professional association representing self-employed and freelance service providers in the event industry in Germany. The organization serves as a lobby and voice for various professions within the event sector, including technical, logistical, and creative roles. The website is well-structured, professionally designed, and provides comprehensive information about the association's mission, services, and news updates. Technically, the site is built on WordPress with Elementor, uses HTTPS, and integrates Google Analytics and Tag Manager for visitor tracking. Privacy and cookie policies are detailed and GDPR-compliant, with active consent mechanisms. However, no explicit security or incident response policies are publicly available, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain legitimacy verification.

A

Arbeitsgemeinschaft der Evangelischen Jugend in Deutschland e. V. (aej)

evangelische-jugend.de

52

The Arbeitsgemeinschaft der Evangelischen Jugend in Deutschland e. V. (aej) operates as a national umbrella organization for Protestant youth work in Germany. Their website serves as a comprehensive portal offering resources, advocacy information, funding guidance, and project details targeted at children, youth, and professionals in youth work. The organization maintains a strong presence with clear contact channels, social media engagement, and a newsletter subscription service. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery and FontAwesome, supported by Matomo analytics for privacy-conscious tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure.

V

Verband Schweizer Plastic Recycler (VSPR)

plasticrecycler.ch

51

The Verband Schweizer Plastic Recycler (VSPR) is a Swiss non-profit association serving as the competence center for plastic recycling in Switzerland. It connects municipalities, collection systems, and recycling companies to promote sustainable, high-quality plastic recycling and circular economy principles. The website reflects a strong commitment to sustainability, quality assurance, and transparency, supported by a monitoring and licensing system that awards a quality label to certified collection systems. The target audience includes municipalities, industry partners, and the general public interested in environmental sustainability within Switzerland. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Slick Carousel, LazyLoad, and Fancybox. It employs multilingual support via Weglot and integrates Google reCAPTCHA for form security. Cookie consent is managed through the Complianz GDPR plugin, ensuring compliance with European privacy regulations. The site is well-optimized for mobile devices and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to prevent scraping. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence for the VSPR. It effectively communicates its mission and services while maintaining good technical and security standards. Strategic recommendations include enhancing security headers, fixing minor image loading issues, and publishing a formal security policy or incident response contact to further strengthen trust and compliance.

F

Ferro Recycling

ferrorecycling.ch

25

Ferro Recycling is a Swiss non-profit association dedicated to promoting the recycling of steel packaging. The website serves as an informational platform targeting a general audience interested in environmental sustainability and recycling practices. It positions itself as a niche player within the Swiss recycling sector, focusing on awareness and stakeholder engagement rather than commercial activities. The site is multilingual, primarily in German, with French and Italian versions, reflecting its Swiss market focus. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Real Cookie Banner Pro for privacy compliance. The inclusion of WPML enables multilingual content delivery, enhancing accessibility for diverse Swiss audiences. The site integrates YouTube video content with appropriate consent mechanisms, demonstrating attention to privacy regulations.

VetroSwiss operates as a key organization managing glass recycling processes and fees in Switzerland, focusing on the administration of the 'vorgezogene Entsorgungsgebühr' (VEG) for glass beverage packaging. The website targets business partners involved in fee payments and compensation, providing a user-friendly customer portal and extensive informational resources about glass recycling. The organization positions itself as a central authority in the Swiss glass recycling ecosystem, emphasizing efficiency and digital transformation. Technically, the website is built on WordPress 6.6.4 with the Yoast SEO plugin, leveraging UIkit for frontend components and Matomo for privacy-respecting analytics. The site is well-structured with multi-language support (German, French, Italian), good SEO practices, and a cookie consent mechanism, reflecting a moderate to advanced digital maturity. Hosting details are not explicit but suggest a professional setup possibly involving Cubetech services. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file indicates room for improvement in transparency and security communication. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with a strong focus on business credibility and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and compliance.

S

SENS eRecycling

erecycling.ch

67

SENS eRecycling is a Swiss non-profit foundation specializing in the sustainable recycling of electrical and electronic equipment. The organization operates a well-established take-back system that facilitates environmentally friendly disposal for both private individuals and business partners across Switzerland. Their website reflects a mature market position with comprehensive services including collection, recycling, awareness campaigns, and a partner network. The content is professionally presented, multilingual, and targets a broad audience concerned with environmental sustainability. Technically, the website employs modern web technologies including Magnolia CMS, JavaScript frameworks, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Intercom. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some improvements are recommended in security headers and explicit policies. The security evaluation shows no critical vulnerabilities or blocking mechanisms, indicating a trustworthy and stable platform. However, the absence of a cookie consent mechanism and formal security policies suggests room for compliance enhancement. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its non-profit environmental mission. Strategic recommendations include implementing cookie consent banners, publishing security and incident response policies, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture and regulatory compliance.

I

INOBAT

inobat.ch

66

INOBAT is a Swiss organization responsible for collecting and managing advance disposal fees related to batteries and accumulators. It serves as a key player in Switzerland's battery recycling ecosystem, providing information, education, and support to consumers, manufacturers, importers, and recycling partners. The website is well-structured, professionally designed, and offers comprehensive content relevant to its mission. Technically, the site uses modern web technologies including Bootstrap and JavaScript frameworks, with a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

I

IGORA-Genossenschaft für Aluminium-Recycling Schweiz

igora.ch

38

IGORA-Genossenschaft für Aluminium-Recycling Schweiz operates as a cooperative focused on the collection and recycling of aluminium packaging in Switzerland. The organization emphasizes environmental protection by promoting aluminium recycling, which significantly reduces energy consumption and greenhouse gas emissions compared to new aluminium production. The website positions IGORA as a key player in the Swiss aluminium recycling sector, targeting both consumers and businesses interested in sustainable waste management. Technically, the website is built on WordPress and integrates modern technologies such as Google reCAPTCHA for security, Google Maps for location services, and EmbedSocial for social media content integration. The site employs a professional cookie consent mechanism compliant with GDPR and Swiss data protection laws, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, supporting a good user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and manages user consent effectively. No critical vulnerabilities or suspicious activities were detected. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, IGORA's website reflects a trustworthy and professional organization with a solid security posture and compliance framework. Strategic enhancements in security documentation and accessibility could further strengthen its digital maturity and stakeholder trust.

M

metronom Eisenbahngesellschaft mbH

metronom.de

56

metronom Eisenbahngesellschaft mbH operates regional passenger rail services primarily in the German states of Niedersachsen, Hamburg, and Bremen. The company positions itself as a friendly and reliable transportation provider under the motto "Unterwegs mit Freunden" (Traveling with Friends). It offers multiple regional train lines (RE2, RE3, RB31, RE4, RB41) and provides comprehensive travel planning tools, real-time updates, and ticketing options including integration with the Deutschland-Ticket and Niedersachsentarif. The website reflects a medium-sized transportation company with a strong regional presence and a parent company, Netinera, supporting its operations. The target audience includes commuters, tourists, and day travelers in Northern Germany.

The website www.lausanne.ch is the official municipal portal for the City of Lausanne, Switzerland, serving as a comprehensive resource for residents, visitors, and businesses. It provides extensive information on municipal services, cultural events, social assistance, urban planning, and public participation. The site is well-branded and professionally designed, reflecting its authoritative government status. Technically, it employs modern web technologies including jQuery, Bootstrap Icons, Google Maps API, and Matomo analytics, indicating a mature digital infrastructure. Security measures such as HTTPS enforcement, security headers, and CSRF protections are in place, contributing to a strong security posture. However, explicit privacy policies, terms of service, and incident response information are not clearly linked or found, representing areas for improvement. Overall, the site is trustworthy, user-friendly, and well-optimized for mobile and accessibility standards.

Berliner Verkehrsbetriebe (BVG) operates as the primary public transportation provider in Berlin, Germany, offering comprehensive services including route planning, ticketing, subscriptions, and mobile applications. The website serves a broad audience including residents and tourists, providing timely service updates, ticket purchase options, and customer support. BVG holds a strong market position as the leading transit operator in Berlin with a large operational scale. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely by Cronon, and managed via Magnolia CMS. It demonstrates excellent performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. The site employs standard SEO and metadata practices, including Open Graph tags and structured JSON data. From a security perspective, the site enforces HTTPS, includes standard security headers, and implements a robust cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and user-friendly, with strong privacy compliance and business credibility. Strategic recommendations include publishing detailed security policies, providing direct security contact information, and establishing a vulnerability disclosure program to enhance transparency and trust.

C

CFL

cfl.lu

19

CFL is the national railway company of Luxembourg, providing passenger and freight transport services along with mobility solutions such as carsharing, bicycles, tram, and funicular. The website serves as a comprehensive travel portal offering timetable searches, ticket bookings (both national and international), travel packages, and customer services. The company holds a strong market position in Luxembourg's transportation sector with a large operational scale and multiple subsidiaries. Technically, the website employs modern frameworks like Bootstrap and FontAwesome, integrates Google Tag Manager and Matomo for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Privacy compliance is good with privacy and cookie policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and user-friendly, though the lack of WHOIS data slightly reduces trustworthiness from a domain registration perspective.

S

S-Bahn Berlin GmbH

s-bahn-berlin.de

68

S-Bahn Berlin GmbH operates the official website for Berlin's urban rail transit system, providing comprehensive services including timetable information, ticket sales, route planning, and customer support. The website targets commuters, tourists, and residents in Berlin, offering multilingual content and extensive travel-related resources. The company holds a strong market position as a key public transportation provider in Germany's capital. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Matomo for analytics and Usercentrics for consent management, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, employs domain transfer locks, and uses consent management for cookies, indicating good security hygiene. However, DNSSEC is not enabled, and no explicit security or incident response policies are published, suggesting areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of malicious activity or content blocking. Strategic enhancements in DNS security and public security policies could further strengthen its posture.

H

Hamburg Airport

airport.de

67

Hamburg Airport operates as a major transportation hub in Germany, providing comprehensive flight information, parking, travel services, and passenger amenities. The website targets travelers and visitors, offering multilingual support and detailed service information. The digital infrastructure leverages modern technologies including Cookiebot for GDPR-compliant consent management, etracker and Meta Pixel for analytics and advertising, and is hosted on Microsoft Azure DNS infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly visible. The website demonstrates good privacy compliance and professional content quality, supporting a trustworthy user experience. Strategic improvements include publishing terms of service, enhancing security headers, and providing clear contact and security incident response information.

H

Hamburg Airport

ham.aero

68

Hamburg Airport operates as a major transportation hub in Germany, providing comprehensive flight information, parking, shopping, and passenger services. The website targets travelers and visitors, offering detailed and localized content primarily in German with English alternatives. Technically, the site employs modern web technologies including Cookiebot for GDPR-compliant consent management, etracker and Meta Pixel for analytics and advertising, and is hosted on Microsoft Azure infrastructure. The security posture is strong with HTTPS enforced and consent-based loading of tracking scripts, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though improvements could be made in publishing terms of service and security disclosures.

H

Hamburg Airport

hamburg-airport.de

68

Hamburg Airport operates as a major transportation hub in Germany, providing comprehensive flight information, parking, and passenger services through its official website. The site targets travelers and visitors, offering detailed and localized content in German with English alternatives. Technically, the website employs modern web technologies including Cookiebot for GDPR-compliant cookie management, multiple analytics and advertising scripts, and is hosted on enterprise-grade Azure DNS infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and active consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

S

Star Casino Group

cecpraha.cz

64

Star Casino Group is a prominent operator of casino and gaming venues in the Czech Republic, boasting over 50 physical locations and an online casino platform. The company emphasizes fair play and has a long operational history exceeding 25 years. Their target audience is adults interested in gambling and casino entertainment. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript libraries and Google Maps integration for location services. Security-wise, the site enforces HTTPS, includes age verification, and manages cookie consent in compliance with GDPR. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly detracts from overall trustworthiness. The company provides clear contact information and an ethical whistleblower program, indicating a commitment to compliance and corporate governance.

The website onlinecampus-server.at is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content or metadata. Due to this restriction, no business information, contact details, or security policies are available for analysis. The domain is Austrian, but no further registrant or organizational data is provided. The technical infrastructure appears to be running on an Apache server, but no additional technology stack or CMS details are discernible. The security posture cannot be evaluated due to lack of accessible content and absence of security headers or SSL details. Overall, the site is not currently usable for end users or for compliance and security assessment.

J

Joonbot

joonbot.com

47

Joonbot is a technology company offering a no-code chatbot builder platform designed to help businesses improve lead generation, sales, and customer engagement. The website positions Joonbot as an easy-to-use SaaS solution with pre-built templates, integrations, and analytics capabilities, trusted by over 5,000 companies. The digital infrastructure is built on WordPress with Elementor and Yoast SEO, hosted on DigitalOcean, and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and FirstPromoter. The website is well-optimized for SEO, mobile responsive, and provides a professional user experience. Security posture is good with HTTPS enforced and domain registration consistent with business claims, though some security headers and privacy compliance elements are missing. Overall, the website is trustworthy and professionally maintained but would benefit from publishing privacy and cookie policies and enhancing security headers.

The website nudgify.com is currently inaccessible, serving a 403 Forbidden error page protected by Cloudflare. Due to this access restriction, no substantive content, business information, or user-facing features are available for analysis. The domain is registered with Cloudflare since 2018, indicating a legitimate registration age and consistent hosting provider. However, the lack of accessible content prevents evaluation of the company's services, privacy compliance, or security policies. The presence of Cloudflare Insights indicates some level of analytics tracking, but no privacy or cookie policies are published. Overall, the site appears to be protected by a Web Application Firewall or access control, limiting visibility into its operations.

W

WiREG mbH

wireg.de

54

WiREG mbH is a regional economic development organization focused on strengthening the business environment in the Flensburg and Schleswig region of Germany. The website presents a professional and comprehensive overview of their services including business promotion, sustainability checks, site development, funding advice, and coworking spaces. Their target audience includes regional and Scandinavian companies as well as startups. Technically, the site is built on TYPO3 CMS with modern web technologies and includes multimedia content such as embedded Vimeo videos and SVG graphics. The site is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and secure form handling, though it lacks explicit security policies and cookie consent mechanisms. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

G

GECKO.DK ApS

geckobooking.dk

65

GECKO.DK ApS operates a professional and flexible online booking and administration system primarily targeting Danish businesses across various sectors. The company offers modular SaaS solutions that integrate booking, payment, marketing, and document management functionalities. With over 1000 customers and more than 20 million bookings processed, GECKO holds a solid market position in Denmark. The website reflects a mature digital presence with comprehensive content, customer testimonials, and clear contact information, supporting its credibility. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Bootstrap for responsive design, and analytics tools such as Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security best practices are observed with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with detailed privacy and cookie policies, indicating GDPR adherence. However, the absence of WHOIS data limits domain trust analysis. Overall, the website presents a low-risk profile with professional security and privacy practices. Strategically, GECKO should consider enhancing transparency by resolving WHOIS data visibility and implementing additional security headers. Continued focus on security, privacy, and customer support will sustain trust and competitive advantage in the SaaS booking market.

L

LOGISTA d.o.o.

tehnologista.hr

34

Tehnologista.hr is an e-commerce platform operated by LOGISTA d.o.o., a Croatian company founded in 2022. The website focuses on selling technology products with services such as free delivery within Croatia and a 14-day return policy. The company targets Croatian consumers interested in technology retail, positioning itself as a local player in the e-commerce sector. The website demonstrates a good level of digital maturity, employing modern tracking and consent management tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for GDPR compliance. Hosting and DNS services are professionally managed, with transparent WHOIS data matching the business claims. Security posture is solid with HTTPS enforced and anti-CSRF cookies in use, though some security headers could be improved. Privacy compliance is strong, with comprehensive cookie and privacy policies and a designated Data Protection Officer contact provided. Overall, the website is professional, trustworthy, and compliant with relevant regulations.

G

Grad Kastav

inolab-kastav.eu

40

inoLAB Kastav is a Croatian regional project focused on fostering youth innovation and entrepreneurship within the urban agglomeration of Rijeka. The project is led by Grad Kastav and partners with local innovation associations, supported by EU funding. The website serves as an informational and engagement platform offering workshops, mentoring, and events to young innovators aged 15-24. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted by Plus Hosting Grupa d.o.o., and uses modern web technologies. Security posture is adequate with HTTPS enabled but lacks some security headers and privacy compliance elements such as privacy and cookie policies. The site is accessible without WAF or blocking mechanisms and contains no adult or questionable content, targeting a general youth audience. Overall, the website is professional and credible but would benefit from enhanced privacy and security practices.

K

KASPI - poduzetnički inkubator

kaspi.hr

15

KASPI is a modern entrepreneurial incubator based in Croatia, founded in 2022, serving startups, entrepreneurs, craftsmen, freelancers, and digital nomads. It offers incubation programs, affordable workspace rental, mentorship, and networking opportunities. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is well-branded and consistent, with good content quality and user experience. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Social media presence on Facebook and Instagram supports engagement and trust. Overall, the business appears legitimate and well-positioned regionally with support from EU funds and local partners.

Ö

Österreichischer ReiseVerband

oerv.at

39

The Österreichischer ReiseVerband (ÖRV) is a well-established Austrian travel industry association representing major travel agencies, tour operators, and tourism companies. It serves as a neutral platform for industry networking, lobbying, and the development of future-oriented solutions. The website reflects a professional and consistent brand presence, targeting tourism professionals and stakeholders in Austria. Technically, the site is built on WordPress with modern plugins like Elementor and Rank Math SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the site is trustworthy and professionally maintained, supporting the association's mission effectively.

S

SACKA

sacka.eu

41

SACKA (Slovenská Asociácia Cestovných Kancelárií a Cestovných Agentúr) is a Slovak non-profit association representing travel agencies and tour operators. The organization focuses on supporting its members by providing industry news, legal guidance, consumer information, and advocacy to promote tourism development in Slovakia. The website serves as a portal for members and travelers, offering verification services, event calendars, and a free infoline. Technically, the website uses modern JavaScript libraries such as FullCalendar, Popper.js, and integrates Google Tag Manager and Smartsupp Live Chat for analytics and customer support. The site is hosted by WebSupport s.r.o., a known Slovak registrar and hosting provider. Security posture is good with HTTPS enforced, cookie consent implemented, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy policy and terms of service pages, as well as a security policy or vulnerability disclosure mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

I

Italieonline s.r.o

ita.travel

36

Ita.travel is an established online travel agency specializing in holidays in Italy, offering a wide range of accommodations including apartments, hotels, and campsites. The company has been operating since 1997 and is a member of several reputable European travel associations, which enhances its market credibility. The website targets travelers interested in Italian destinations, providing services such as booking, travel insurance, and group trips. The business model focuses on direct online bookings with a strong emphasis on Italian holiday experiences. Technically, the website employs modern web standards including responsive design, WebP images, and JavaScript frameworks. It integrates Google Tag Manager and Google Analytics for marketing and analytics purposes, with a clear cookie consent mechanism indicating GDPR compliance. The site is well-structured with good SEO and accessibility features, providing a positive user experience across devices. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is limited due to TLD restrictions, but the domain appears consistent with the business claims. Overall, the security posture is solid but could be improved with additional headers and published security policies. The overall risk assessment is low, with the website demonstrating professionalism, compliance, and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining transparency in privacy practices to further strengthen user trust and security posture.

E

Exevio Ltd.

exevio.com

41

Exevio Ltd. is a Croatia-based small technology company specializing in corporate IT solutions including web development, loyalty platforms, app and game development, and quality assurance services. Founded in 2013, the company positions itself as a trusted partner for corporate clients seeking tailored IT solutions. The website reflects a professional and consistent brand image with clear service offerings and client partnerships. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and has good SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is well addressed with accessible privacy, cookie, and terms policies, including a cookie consent mechanism and GDPR indicators. Business credibility is supported by ISO certifications and EU funding acknowledgments. Overall, the website is trustworthy and professionally maintained with moderate user tracking and good content quality.

H

Hochschule für öffentliche Verwaltung und Finanzen Ludwigsburg

hs-ludwigsburg.de

67

The Hochschule für öffentliche Verwaltung und Finanzen Ludwigsburg is a public higher education institution in Germany specializing in public administration and finance. The website serves multiple audiences including prospective and current students, researchers, and professionals seeking continuing education. It offers detailed information on degree programs, research projects, events, and student services. The institution maintains a solid market position as a regional university with a focus on public sector education and training. Technically, the website is built on TYPO3 CMS, employs modern web standards including responsive design and asynchronous script loading, and is hosted on a reputable academic network (belwue.de). The site demonstrates moderate to good performance and SEO optimization, with a clear navigation structure and mobile-friendly design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. However, explicit security headers and incident response contacts are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy policies and terms of service are present and comprehensive, supporting a strong compliance posture. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features to further strengthen the security and user experience.

O

OZG-Taskforce

ozg-taskforce.de

40

The OZG-Taskforce website serves as a digital platform for a significant intermunicipal network focused on the digitalization of public administration in Baden-Württemberg, Germany. It connects over 1,000 professionals from municipalities, administrations, and government offices, facilitating knowledge exchange and collaboration around the Onlinezugangsgesetz (OZG). The site prominently features information about upcoming conferences, news updates, and partner links, positioning itself as a central hub for digital transformation in local government. Technically, the site is built on WordPress with a modern, responsive design and good accessibility features, hosted on German infrastructure. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance.

M

MHpower.sk

mhpower.sk

41

MHpower.sk is a Slovak-based small business specializing in modern energy solutions including photovoltaic systems, air conditioning, heat pumps, and electrical installations. The company offers comprehensive services from design to installation and maintenance, targeting both residential and commercial customers. The website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, positioning the company as a reliable local provider in the renewable energy sector. Technically, the site is built on WordPress with a modern theme and SEO plugin, hosted by a local provider with DNSSEC and HTTPS properly configured. However, the absence of privacy and cookie policies and lack of security headers indicate areas for compliance and security improvement. No forms or analytics scripts were detected, suggesting minimal data collection and tracking. Overall, the site is accessible, well-structured, and trustworthy but would benefit from enhanced privacy and security practices.

S

SchemaRabbit

schemarabbit.com

54

SchemaRabbit is a specialized SaaS platform providing AI-driven schema markup generation and maintenance services to improve website visibility across traditional and AI-powered search engines. The company targets businesses and website owners aiming to enhance SEO performance with structured data. The platform offers a free audit and paid subscription tiers, positioning itself as a leader in future-proofing search visibility. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Analytics, Google Tag Manager, Hotjar, and Google reCAPTCHA, indicating a mature digital infrastructure. Performance and mobile optimization are excellent, supporting a high-quality user experience. Security posture is good with HTTPS enforced and anti-bot measures in place, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data reveals an unusual future domain creation date, which slightly impacts trust but does not detract from the professional presentation and business legitimacy. Overall, the website scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance due to missing cookie policies.