Security Directory

H

Hyperwave GmbH

hyperwave.com

40

Hyperwave GmbH is an established Austrian technology company specializing in intranet and private cloud solutions designed to facilitate efficient and secure information management within enterprises. With over 20 years of market presence, the company offers a range of services including document management, knowledge management, collaboration tools, and consulting services. The website targets businesses seeking robust data and information processing solutions, emphasizing ease of use, security, and adaptability. Technically, the website is built on a modern stack including Apache, Bootstrap, and JavaScript with Lottie animations, hosted via World4You DNS services. While the site is mobile-optimized and well-structured with good SEO practices, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and proper HTTPS configuration, which undermines user trust and data security. Performance metrics are unavailable, suggesting potential monitoring gaps. From a security perspective, the site implements some security headers but lacks a valid SSL/TLS setup, OCSP stapling, and DNSSEC, exposing it to potential risks. No explicit security policies or incident response contacts are published, indicating gaps in security governance and transparency. Privacy compliance is partially addressed with cookie consent mechanisms and a privacy policy, but no data protection officer or vulnerability disclosure information is provided. Overall, the website presents a professional business front with solid content and branding but requires urgent improvements in security infrastructure and transparency to enhance trustworthiness and compliance. Strategic recommendations include immediate SSL certificate deployment, DNS record corrections, and publication of security and incident response policies to align with best practices and regulatory requirements.

Y

YTMP3

jobrocker.com

37

The website jobrocker.com operates as an online YouTube to MP3 and MP4 conversion service branded as YTMP3. It targets a broad audience including casual listeners, educators, and content creators by providing a free, fast, and easy-to-use tool without requiring registration or payments. The site emphasizes speed, audio quality, and simplicity, positioning itself as a reliable alternative to other converters. Technically, the site uses standard web technologies with Cloudflare CDN and Google Analytics for tracking, but lacks HTTPS encryption, which is a significant security concern. The absence of cookie consent and privacy compliance mechanisms further impacts user privacy. The domain is very new, registered in early 2025, consistent with the site's recent launch. Security posture is weak due to missing SSL and security headers, and no incident response or security policy information is provided. Overall, the site offers functional service but requires urgent security improvements to protect users and enhance trust.

UniCredit Bank Austria AG operates as a major financial institution in Austria, providing a wide range of banking services including retail, corporate, and private banking. The website targets private customers, corporate clients, and private banking customers with comprehensive offerings such as accounts, credit cards, loans, insurance, and investment products. The bank is part of the UniCredit Group, indicating a strong market position and enterprise scale. The website is professionally designed with consistent branding and rich content, supporting a high level of user engagement and trust. Technically, the website employs modern JavaScript libraries and third-party services such as Tag Commander for tag management and Genesys for customer service. Hosting is supported by Akamai CDN infrastructure, enhancing availability and performance. However, the site suffers from slow load times and lacks a valid SSL certificate, which is a critical security flaw for a banking website. Accessibility and SEO optimizations are well implemented, and mobile responsiveness is good. Security posture is weak due to the absence of HTTPS, missing security headers, and no HSTS policy. While no immediate vulnerabilities are detected, these gaps expose the site to risks and reduce user trust. Privacy compliance is strong with clear privacy and cookie policies, GDPR adherence, and consent mechanisms in place. Business credibility is high, supported by certifications and transparent legal information. Overall, the site is a professional and comprehensive banking portal but requires urgent security improvements, especially SSL/TLS implementation, to meet industry standards and protect user data effectively.

D

Doka GmbH

doka.com

40

Doka GmbH is a global leader in formwork and scaffolding solutions, serving the construction industry with a broad portfolio of products and digital services. The company operates worldwide with a strong presence in Finland and is part of the Umdasch Group. The website reflects a mature business with comprehensive content, multiple language support, and customer engagement portals. Technically, the site uses modern web technologies and frameworks but lacks a valid SSL certificate, which is a significant security concern. Privacy compliance is well addressed with clear policies and consent mechanisms. The overall security posture is weak due to missing HTTPS, which impacts trust and user safety. Strategic improvements in SSL deployment and security hardening are recommended to enhance the site's credibility and protect user data.

O

OMV Petrom

petrom.com

40

OMV Petrom is a large, mature energy company primarily operating in Romania, with a focus on oil and gas exploration, production, refining, and retail services. The website serves as a corporate portal providing news, financial results, and information about strategic initiatives such as sustainability and electric mobility. The company is part of the OMV Group, a well-established parent organization. Technically, the website uses modern web technologies including jQuery and a CDN service (ZENEDGE), with Azure DNS hosting. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. Security headers are present but cannot compensate for the missing SSL/TLS encryption. Privacy compliance is minimal, with no explicit privacy or terms of service pages found, though a cookie consent mechanism is implemented. Contact information is limited to a contact page and search form, with no direct emails or phone numbers publicly listed. Overall, the website is professionally designed and provides relevant business content but requires urgent improvements in security and privacy compliance to meet modern standards.

S

sincosinco.com

sincosinco.com

37

The website sincosinco.com is currently a parked domain primarily serving advertising content through Google Adsense and Bodis. There is no active business presence or descriptive content about services or products. The domain is mature, registered since 2011, and managed by Porkbun LLC, indicating stable ownership but no active commercial use. Technically, the site lacks HTTPS support and security best practices, resulting in a low security posture. Performance is poor with a high page load time, and there is minimal mobile or accessibility optimization. Privacy compliance is lacking, with no cookie consent or GDPR indicators. Overall, the site appears to be a placeholder rather than a functional business website.

B

Broken Rules

brokenrul.es

35

Broken Rules is an independent game development studio established in 2009, specializing in designing, developing, and publishing original digital games. The website showcases multiple award-winning titles, targeting gamers and digital entertainment audiences. The business model focuses on creative game production and distribution across multiple platforms including Apple Arcade, Nintendo Switch, Steam, and itch.io. The company maintains a consistent and professional brand presence with high-quality content and clear navigation. Technically, the website is hosted on an Apache server with basic HTML5 and CSS3 technologies. However, it lacks modern security implementations such as HTTPS, HSTS, and security headers, which significantly impacts its security posture. Performance data is unavailable, but the site appears to have basic mobile optimization and accessibility features. SEO is reasonably well implemented with proper meta tags and Open Graph data. From a security perspective, the absence of SSL/TLS encryption is a critical vulnerability, exposing users to potential data interception risks. No security policies, incident response contacts, or vulnerability disclosure mechanisms are publicly available, indicating a low maturity in security governance. The DNS configuration lacks DNSSEC and CAA records, further reducing domain security assurance. Overall, the website is functional and professional in content and design but requires urgent security improvements to protect users and enhance trust. Strategic recommendations include enabling HTTPS, implementing security headers, and establishing clear privacy and incident response policies.

epunkt GmbH is an established Austrian employment agency specializing in job placement and career coaching services. With a domain age of 22 years and a strong presence in Austria, the company targets job seekers and employers, offering personalized career advice and access to a broad range of job opportunities. The website is professionally designed, content-rich, and provides clear navigation and contact information, supporting a positive user experience and trustworthiness. Technically, the site uses nginx as the server and integrates NewRelic for performance monitoring. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to potential risks. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the business is credible and well-positioned in its market, but immediate remediation of security issues is essential.

S

Spark

agi-world.com

37

The website agi-world.com serves as a minimal landing page for the company now branded as Spark, which has a long history of over 50 years in marketing transformation and creative production services. The business is positioned as a trusted partner delivering localized marketing solutions. The site itself is minimalistic, with no forms, contact details, or privacy policies, and primarily directs visitors to the main corporate site sparkbrighterthinking.com. From a technical perspective, the site is hosted on Amazon S3 with CloudFront CDN, uses basic HTML5 and CSS3 technologies, and includes a video background and SVG logo for branding. Mobile optimization is basic but functional. However, the site lacks HTTPS support, security headers, and any analytics or tracking technologies, indicating a low level of digital maturity. Security posture is weak due to the absence of SSL/TLS encryption, no HSTS, and no security headers. There are no detected vulnerabilities such as subdomain takeover or SSL vulnerabilities, but the lack of HTTPS is a critical issue. Privacy compliance is poor, with no privacy or cookie policies present, and no GDPR compliance indicators. Business credibility is moderate based on the company's history and branding but is weakened by the lack of contact information and policies on this domain. Overall, the site presents a basic online presence with significant room for improvement in security, privacy compliance, and content richness. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

Austro Control GmbH is the Austrian national air navigation service provider responsible for ensuring aviation safety, air traffic control, and aeronautical information management. The company serves a broad audience including pilots, airlines, airports, and government agencies, positioning itself as a key player in the transportation and government sectors. Their services include air traffic control, pilot licensing, flight weather services, and drone regulation. The website reflects a professional and comprehensive digital presence with strong branding and trust signals such as industry awards and certifications. Technically, the site uses modern web technologies like Bootstrap and jQuery but suffers from critical security shortcomings due to the absence of a valid SSL certificate and lack of TLS protocol support, which undermines secure communications. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and authoritative but requires urgent improvements in SSL/TLS security to protect users and maintain credibility.

N

Netural GmbH

netural.com

40

Netural GmbH is a mature and reputable digital services provider based in Austria, specializing in digital transformation, web and mobile app development, augmented reality, and eCommerce solutions primarily for B2B clients. The company has a strong market position supported by multiple industry awards and a professional online presence. Technically, the website uses modern web technologies and a CMS (Storyblok), with content optimized for mobile and SEO. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, indicating good GDPR compliance. Overall, the business credibility is high, but urgent security improvements are needed to protect data and enhance trust.

B

Boyden

boyden.com

36

Boyden is a globally recognized leadership and talent advisory firm specializing in executive search, interim management, and leadership consulting services. The company operates through a broad international network with over 75 offices in more than 45 countries, serving a diverse range of industries and markets. Their website reflects a professional and comprehensive presentation of their services, targeting corporate clients seeking high-level talent solutions worldwide. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery. While the site is well-structured with good SEO and mobile optimization basics, performance data is unavailable. The absence of a valid SSL certificate and lack of modern TLS protocols represent significant technical and security shortcomings. Despite strong security headers and cookie consent mechanisms, the invalid SSL undermines overall security posture. From a security perspective, the site demonstrates awareness of best practices through implemented headers and cookie policies but critically fails in SSL deployment, exposing users to potential risks. No incident response or vulnerability disclosure information is provided, indicating gaps in security transparency and readiness. The WHOIS data supports the legitimacy of the domain and business identity, with no suspicious patterns detected. Overall, Boyden's website is professionally designed and content-rich, supporting its market position as a leading talent advisory firm. However, urgent remediation of SSL/TLS issues is necessary to ensure secure user interactions and maintain trust. Enhancements in security transparency and incident response communication would further strengthen their security posture and compliance.

The website osram-continental.com currently serves as a parked domain with a prominent banner indicating it is for sale. There is no active business content, company description, or contact information beyond a sales phone number. The embedded iframe references automotive lighting technology keywords, suggesting the domain may have been intended for or associated with automotive lighting products or services, but no direct business operations are evident on the site. Technically, the site uses basic HTML, CSS, and JavaScript with Google Adsense for monetization. The hosting appears to be on DigitalOcean based on IP addresses. Performance is slow with a high load time and minimal content size. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and lack of security headers or DNS security features. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site lacks professionalism and trust indicators, making it unsuitable for business or customer engagement in its current state.

The website myzone.app currently serves as a parked domain page indicating that the domain is registered but not linked to any hosting service. It promotes web hosting packages from Zone.eu in multiple languages, targeting domain owners who need hosting services. The site is basic in content and design, with no privacy or cookie policies, no contact information, and no active forms or data collection. Technically, the site uses standard HTML, CSS, and JavaScript but lacks a valid SSL certificate and modern TLS protocols, resulting in no HTTPS support. Security posture is weak due to missing SSL and security headers, although SPF and DMARC records are properly configured. Overall, the site is functional as a parked domain but lacks essential security and compliance features.

e-Boks Group operates Denmark's leading digital mailbox platform, serving millions of users with secure digital post and document management services. The company is well-established, owned by reputable parent companies Nets and PostNord, and targets both private individuals and businesses. Their platform supports secure communication with public authorities and private entities, leveraging MitID for authentication and providing mobile app access for convenience. Technically, the website employs modern JavaScript frameworks and integrates Cookiebot for privacy compliance, but critically lacks a valid SSL certificate, exposing users to security risks. The absence of HTTPS and security headers significantly lowers the security posture score. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, the website is professionally designed with excellent content quality and user experience, but urgent improvements in SSL/TLS configuration and security headers are necessary to enhance trust and security.

P

Partnership for European Environmental Research

peer.eu

36

The website peer.eu represents the Partnership for European Environmental Research (PEER), a collaborative network focused on environmental research and sustainable development. The site targets researchers and policymakers, providing information on research projects, publications, and strategic research areas. The business model centers on knowledge sharing and policy support within the environmental research sector. Technically, the site is built on TYPO3 CMS with a professional design and structured content, but suffers from moderate performance and lacks a valid SSL certificate, which is a critical security flaw. The security posture is weak due to the absence of HTTPS, security headers, and modern TLS protocols. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the site is credible but requires urgent security improvements to protect user data and enhance trust.

Expedia Group operates a leading B2B travel technology platform offering comprehensive solutions to partners across various travel-related industries. Their website reflects a mature enterprise with a strong market position, extensive partner ecosystem, and a focus on delivering technology-driven growth and traveler experience enhancements. Technically, the site is built on Adobe Experience Manager with integrations for marketing and analytics, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy policies are present and GDPR compliant, but contact information is not prominently displayed. Security posture is weak due to missing SSL and security headers, exposing the site to potential risks. Overall, the site is professional and content-rich but requires urgent security improvements.

The website studenteats.com is a domain marketplace landing page hosted by Atom, offering the premium domain StudentEats.com for sale. The business focuses on domain sales, branding contests, and related services targeting startups and businesses in the food and student demographic sectors. The platform provides multiple purchase options including escrow services and highlights strong buyer interest to build trust. Technically, the site uses modern JavaScript frameworks and New Relic for monitoring but suffers from a critical lack of HTTPS and valid SSL certificates, which severely impacts security posture. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional and professionally designed but requires urgent security improvements to protect users and enhance trust.

S

State Employees' Credit Union

ncsecu.org

40

State Employees' Credit Union (SECU) is a large, well-established financial cooperative serving over 2.8 million members primarily in North Carolina. The website presents a comprehensive suite of financial products including savings, loans, credit cards, mortgages, and insurance, supported by a professional and consistent brand presence. The site is built on Adobe Experience Manager and integrates Adobe marketing and analytics technologies, reflecting a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which is a significant risk for a financial institution handling sensitive member data. While security headers and privacy policies are present, the lack of cookie consent mechanisms and incident response information indicates room for improvement in privacy compliance and security transparency. Overall, the website is trustworthy and credible but requires urgent remediation of its SSL/TLS configuration to meet industry security standards.

Opus Dei is a well-established non-profit Catholic prelature focused on spiritual formation and evangelization. The website serves as a comprehensive resource hub offering spiritual texts, news, multimedia content, and subscription services targeted at the Catholic faithful and spiritual seekers. The organization maintains a strong digital presence with official social media channels and multilingual support. Technically, the website employs modern web technologies including service workers and progressive enhancement features, hosted behind Cloudflare DNS. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture. Privacy policies are comprehensive and GDPR compliant, with clear data protection officer contact information. The website's performance is slow, but mobile optimization and accessibility are good. Overall, the site is professional and trustworthy but requires urgent security improvements.

О

ООО "Айкюсофт"

iqsoft.company

47

ООО "Айкюсофт" is a Russian technology company specializing in software development and integration, primarily serving financial institutions and businesses requiring advanced IT solutions. Their product portfolio includes modules for the National Payment Card System, Escrow services, and AML monitoring systems, positioning them as a niche player in fintech. The company maintains partnerships with notable payment processors and financial service providers, enhancing its market credibility. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. However, the absence of HTTPS and security headers significantly undermines the site's security posture. No advanced frameworks or CMS platforms are detected, indicating a relatively simple but functional technical infrastructure. Security evaluation reveals critical vulnerabilities due to lack of SSL/TLS encryption, missing security headers, and absence of domain-level protections such as DNSSEC and DMARC. While the company holds PCI DSS certifications, the website itself does not reflect strong security practices, posing risks to user data confidentiality and trust. Overall, the business appears legitimate and established with consistent WHOIS data and clear contact information. Strategic improvements in website security and privacy compliance are essential to enhance trust and protect business operations.

E

EU4Business Facility

eu4business.eu

40

EU4Business is a European Union umbrella initiative aimed at supporting small and medium enterprises (SMEs) in the Eastern Partnership countries including Armenia, Azerbaijan, Georgia, Moldova, and Ukraine. The initiative focuses on improving access to finance, providing business development services, and enhancing the business enabling environment. The website serves as an information portal showcasing projects, results, success stories, and reports related to EU support for SMEs in the region. Technically, the website uses modern web technologies including htmx, Google reCAPTCHA v3, and Google Tag Manager for analytics and spam protection. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, though terms of service and security policies are not explicitly found. Overall, the website is professionally designed with consistent branding and clear navigation but requires urgent security improvements to protect user data and enhance trust.

L

Lucid Software Inc.

lucid.co

56

Lucid Software Inc. operates a leading visual collaboration and work acceleration platform designed to empower teams across various industries to innovate and execute faster. The company serves a broad enterprise audience including product, engineering, IT, project management, and executive teams, with a strong presence in the Fortune 500. Their SaaS offerings include virtual whiteboarding, intelligent diagramming, and enterprise accelerators for Agile, cloud, and process improvements. Technically, the website is built on modern frameworks like React and Gatsby, providing a professional and accessible user experience. However, the SSL certificate is currently invalid or missing, which impacts the security posture. Security headers are well implemented, and privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates high professionalism and trustworthiness but should address SSL issues to improve security and user trust.

A

Achmea

achmea.nl

40

Achmea is a mature and large Dutch insurance and financial services company serving approximately 10 million customers. The company emphasizes societal responsibility and sustainability in its business model, offering a broad range of insurance products and financial services through multiple subsidiary brands. The website reflects a professional corporate presence with good content quality and consistent branding. Technically, the site uses modern technologies such as React and Sitecore CMS, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security issue. The security posture is weak due to missing HTTPS, lack of security headers, and incomplete DNS security configurations. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The business credibility is strong, supported by extensive subsidiary networks and transparent corporate information. Overall, the site is functional but requires urgent security improvements to protect user data and maintain trust.

B

BRIX Agency

brixagency.com

40

BRIX Agency is a mature and established web design and development agency specializing in delivering high-quality websites and digital products for tech companies and startups. Their service portfolio includes web design, web development, UI/UX design, branding, automation, AI services, and conversion optimization. The company has a strong market position supported by a professional website, client testimonials, and a portfolio featuring notable clients. Technically, the website is built on Webflow with modern technologies and integrates multiple marketing and analytics tools, though performance is somewhat slow and security headers are lacking. The security posture is basic but functional with HTTPS and OCSP stapling enabled, but improvements such as HSTS and security headers are recommended. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

R

Railsware Products Studio LLC

mailtrap.live

68

Mailtrap.io, owned by Railsware Products Studio LLC, is a mature technology company specializing in email testing and delivery services. It serves a large global audience of developers, QA engineers, and managers with key offerings including Fake SMTP, API, SMTP Relay, and Email API. The company holds registered trademarks in major jurisdictions and maintains a strong market presence with over 900,000 users. Technically, the website is hosted behind Cloudflare, uses modern TLS protocols, and integrates popular analytics and customer support tools. Security posture is good with HTTPS enforced and SPF configured, though improvements such as DMARC, HSTS, and DNSSEC are recommended. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but cookie consent mechanisms are not evident. Overall, the site is professional, trustworthy, and well-structured, with clear contact and business information.

D

DigiTrace GmbH

digitrace.de

40

DigiTrace GmbH is a specialized IT-forensics and IT-security service provider based in Germany, offering a broad range of services including IT forensics, incident response, eDiscovery, and expert IT assessments. The company targets businesses, authorities, auditors, and legal professionals, positioning itself as a trusted expert in IT security and forensic investigations. The website is professionally designed using Joomla CMS and includes detailed service descriptions and contact information, although it lacks some modern security configurations. Technically, the site suffers from the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts its security posture. Other security best practices such as security headers and HSTS are also missing. Privacy compliance is addressed with a comprehensive privacy policy and DMARC/SPF email protections, but no cookie consent mechanism is present. Overall, the site is functional and informative but requires urgent improvements in security infrastructure to meet modern standards.

E

ENSTA Bretagne

ensta-bretagne.fr

40

ENSTA Bretagne is a reputable French engineering school specializing in advanced technologies for defense, maritime, and high-tech industries. It offers a range of educational programs including engineering degrees, masters, specialized masters, and doctoral studies. The institution maintains strong partnerships with government defense bodies and leading industry players, reinforcing its market position as a Grande École with a focus on innovation and applied research. Technically, the website is built on Drupal 10 with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. However, the site suffers from critical security shortcomings, notably the absence of SSL/TLS encryption, which severely impacts its security posture. Performance is suboptimal with slow load times, though mobile optimization and content quality are good. Security-wise, the lack of HTTPS and security headers exposes the site to risks and undermines user trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and institutional reputation. Strategic recommendations include immediate implementation of valid SSL certificates, enhancement of security headers, and performance optimization to improve user experience and security compliance.

S

Scout Monitoring

scoutapm.com

49

Scout Monitoring is a specialized SaaS provider offering application performance monitoring solutions tailored for software engineering teams. Their platform emphasizes ease of use, rapid setup, and comprehensive monitoring features including app metrics, log management, tracing, query analysis, and alerting. The company targets developers and DevOps professionals seeking to optimize application performance and reliability. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance. Hosting is via Amazon AWS infrastructure. However, the site suffers from a lack of a valid SSL certificate, resulting in no HTTPS support, which is a critical security gap. Performance is suboptimal with slow page load times and a high number of resources loaded. Security posture is weak due to missing security headers, invalid SPF configuration, and absence of HSTS and modern TLS protocols. Privacy compliance is reasonably well addressed with a privacy policy, cookie consent, and GDPR indicators. Business credibility is supported by clear branding, testimonials, and active social media presence. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

A

Aternos GmbH

exaroton.com

66

exaroton.com is a specialized service offering high-end, on-demand Minecraft game servers with a unique pay-per-use pricing model. The platform targets Minecraft players and server administrators who desire flexible, customizable, and cost-efficient server hosting. The service is backed by Aternos GmbH, a German company, and integrates features such as DDOS protection, automatic backups, and API access to enhance user experience and operational control. The website demonstrates a professional design with clear navigation and comprehensive content tailored to its niche audience. Technically, the site employs modern web technologies including JavaScript, HTML5, and CSS3, with DNS and CDN services provided by Cloudflare. The platform supports both Minecraft Java and Bedrock editions, offering a wide range of server software and modpacks. Despite good SEO and accessibility practices, the website suffers from a critical security flaw: the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Security-wise, the site has implemented SPF and DMARC DNS records with a strict reject policy, uses Google MX servers for email, and has no subdomain takeover vulnerabilities. However, the lack of HTTPS, TLS protocols, HSTS, and OCSP stapling exposes users to potential risks. Privacy compliance is strong, with a comprehensive privacy policy and terms of service hosted on the parent company domain. Analytics usage is moderate and privacy-conscious, utilizing Matomo. Overall, exaroton.com presents a strong business and technical foundation but must urgently address its SSL/TLS deficiencies to ensure user trust and data security. Strategic improvements in security configuration will elevate the platform's credibility and protect its user base effectively.

L

Les Sherpas

truzzer.fr

40

Les Sherpas is a French education platform specializing in personalized tutoring and online courses for students across various academic levels. The company positions itself as a flexible and quality-driven service provider, leveraging a proprietary platform that integrates messaging and videoconferencing to enhance the learning experience. The website is content-rich, featuring extensive user testimonials and structured data to boost SEO and trust. Technically, the site uses modern web standards and is hosted by o2switch, with moderate performance and good mobile optimization. Security is adequate with HTTPS and valid SPF records, but lacks advanced features such as HSTS and OCSP stapling, and no security headers are present. Privacy compliance is basic, with a privacy policy found but no cookie consent mechanism detected. Overall, the site demonstrates a strong business credibility and user trust, though security and privacy practices could be improved.

Team Farner is a prominent European alliance of independent, owner-led management consultancies specializing in integrated communication. The alliance combines expertise in strategy, creativity, behavioral science, and technology to provide comprehensive communication solutions across various sectors. With a strong presence in Switzerland and multiple partner companies across Europe, Team Farner positions itself as a leading consultancy network focused on impactful and agile communication strategies. Technically, the website is built on modern web technologies including Webflow CMS, HTML5, CSS3, JavaScript, jQuery, and Lottie animations. The hosting is managed by world4you.at, and the site employs TLS 1.2 for secure HTTPS connections. However, performance is somewhat slow, and there are opportunities to enhance security by enabling HSTS, OCSP stapling, and upgrading to TLS 1.3. From a security perspective, the site has valid SPF and DMARC DNS records, uses HTTPS, and shows no signs of subdomain takeover vulnerabilities. Yet, it lacks several security headers and advanced SSL features, which could be improved to strengthen its security posture. Privacy compliance is good with a comprehensive privacy policy, but no explicit cookie consent mechanism was detected. Overall, the website demonstrates a high level of professionalism, rich content, and strong business credibility. The security posture is adequate but can be enhanced. The risk assessment suggests moderate risk with recommendations to improve SSL configurations and implement additional security headers to protect user data and enhance trust.

F

Freie und Hansestadt Hamburg

karriere.hamburg

56

The website karriere.hamburg serves as the official career portal for the Freie und Hansestadt Hamburg, offering a wide range of job opportunities, training programs, and career entry options in the public sector. It targets job seekers, students, and professionals interested in working for the city government. The site is well-branded and professionally presented with clear navigation and relevant content in German. Technically, the site uses modern HTML5 and responsive design techniques but lacks a valid SSL certificate, which is a critical security flaw. Security headers are partially implemented but some settings reduce protection. Privacy compliance is limited, with no cookie consent mechanism despite the presence of tracking scripts. Overall, the site is functional and credible but requires urgent security improvements to protect user data and trust.

Luceda Photonics is a specialized technology company focused on photonic integrated circuit (PIC) design software and services. Their flagship product, the Luceda IPKISS platform, aims to automate and integrate photonic design flows, enabling designers to achieve first-time-right tape-outs. The company maintains a global presence with offices and partners across Belgium, Asia, and North America, serving a niche market of photonic IC designers and engineers. The website reflects a professional and consistent brand image with detailed product, training, and support information. Technically, the website is built on the Odoo CMS platform with modern frontend technologies but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. Security posture is weak due to missing HTTPS, lack of security headers, and outdated SSL/TLS configurations. Privacy compliance is basic with presence of privacy and cookie policies and consent mechanisms, but no visible terms of service or incident response policies. Overall, the website is functional and informative but requires urgent security improvements to protect user data and enhance trust.

N

Neste

nesteoil.com

66

Neste is a leading global company specializing in renewable energy solutions, particularly sustainable aviation fuel and renewable diesel. The company positions itself as a pioneer in mitigating climate change and advancing the circular economy by refining waste and residues into high-quality renewable fuels and raw materials. Their market position is strong as a world leader in sustainable aviation fuel production, targeting businesses and consumers focused on sustainability. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on modern web technologies including React and Next.js, hosted likely on Google Cloud infrastructure. SEO and accessibility practices are well implemented, and the site is mobile optimized. However, performance data is limited but inferred to be moderate. The site uses cookie consent mechanisms and integrates marketing tools such as OneTrust and Visual Website Optimizer. From a security perspective, the site employs strong security headers and HSTS policies, but critically suffers from an invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly undermines its security posture. No explicit security policies or incident response information are published, and no vulnerability disclosure program is evident. Privacy compliance is strong with comprehensive policies and GDPR adherence. Overall, while the business and content aspects are robust and professional, the security weaknesses related to SSL/TLS must be urgently addressed to ensure trust and secure user interactions. Strategic improvements in certificate management and enabling modern TLS protocols are recommended to elevate the security posture and overall website score.

L

Leibniz-Rechenzentrum der Bayerischen Akademie der Wissenschaften

lrz.de

40

The Leibniz-Rechenzentrum (LRZ) is a large, well-established IT service provider dedicated to supporting scientific research and education primarily in Bavaria, Germany. It offers a broad portfolio of advanced IT services including supercomputing, AI and Big Data infrastructure, networking via the Munich Science Network (MWN), IT security, cloud storage, and consulting. The LRZ is positioned as a key regional player with strong partnerships and a focus on cutting-edge technologies. Technically, the website is built on TYPO3 CMS and demonstrates good content quality, navigation, and accessibility, though performance is moderate. Security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which is a critical issue. Privacy compliance is adequate with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in security to protect user data and enhance trust.

A

Agritech Lavrale S.A. - Divisão Lavrale

lavrale.com.br

40

Agritech Lavrale S.A. - Divisão Lavrale is a Brazilian manufacturing company specializing in agricultural machinery and components, with a legacy of approximately 50 years. The company offers a broad range of products including agricultural implements, cabines, military trailers, and spare parts, targeting agricultural workers and farmers. Their market position is established with a consistent brand presence and active social media engagement. Technically, the website is built on a custom or unknown CMS, served by an Apache server, and uses common web technologies such as JavaScript, Google Fonts, and Google Maps API. However, the site lacks HTTPS, which severely impacts its security posture. Security headers are minimal and some are disabled, indicating a need for significant improvements in security practices. Privacy and cookie policies are absent, which raises compliance concerns. Overall, the website provides good content quality and user experience but suffers from critical security and privacy shortcomings.

J

Jugend will sich-er-leben (JWSL)

jwsl.de

40

Jugend will sich-er-leben (JWSL) is a German non-profit prevention program focused on occupational safety and health for apprentices. It provides educational materials, competitions, and media resources primarily targeting vocational schools, teachers, and training companies. The program is affiliated with the statutory accident insurance and the DGUV, positioning it as a recognized entity in the education and government sectors within Germany. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and uses Video.js for media playback. However, the site suffers from a critical security deficiency as it lacks a valid SSL certificate and does not support HTTPS, exposing users to potential risks. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but no terms of service or incident response contacts are found. Overall, the site offers good content and user experience but requires urgent security improvements.

Ö

ÖBB Nightjet

nightjet.com

57

ÖBB Nightjet operates a comprehensive overnight train service connecting over 25 European metropolitan cities, focusing on comfortable, climate-friendly travel options including vehicle transport. The website is well-branded, content-rich, and targets travelers seeking overnight rail journeys across Europe. Technically, the site uses modern web technologies such as ES modules and web components, but performance data is lacking. Security posture is weakened by the absence of a valid SSL certificate and HTTPS support, which is a critical issue. Privacy and terms policies are linked to official ÖBB domains, indicating good compliance practices. Contact information is provided primarily via phone and external contact forms. Overall, the site is professional and trustworthy but requires urgent security improvements.

P

PIER PLUS

pier-plus.de

40

PIER PLUS is a collaborative platform fostering cooperation among universities and research institutes in the Hamburg metropolitan region. It supports six research profiles and provides news, events, and a members area to facilitate networking and joint research efforts. The website is professionally designed with clear navigation and targets academic and research stakeholders in Hamburg. Technically, the site uses JavaScript libraries such as jQuery and sliders like Swiper and Slick, hosted by the University of Hamburg's computing center. However, the site suffers from a critical security deficiency: it lacks a valid SSL/TLS certificate, resulting in unencrypted HTTP access and no HTTPS enforcement. Additionally, no security headers or cookie consent mechanisms are present, which weakens its security and privacy posture. Analytics are implemented via Piwik (Matomo) and Etracker, indicating moderate user tracking. Overall, while the content and business presentation are excellent, the technical and security implementations require urgent improvements to protect user data and enhance trust.

T

THE LÄB - How to LÄND and EXPÄND in Germany

the-laeb.de

40

THE LÄB is a technology-focused startup accelerator based in Karlsruhe, Germany, serving as the international orientation of the CyberLab Startup Accelerator. It supports startups primarily in the IT sector with mentoring, networking, and market entry assistance, targeting international entrepreneurs aiming to establish and expand in Germany, especially in the Baden-Württemberg region. The website is built on Squarespace and hosted by Squarespace, featuring a professional design and good content quality. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Security headers are partially implemented, but modern TLS protocols and advanced security features are missing. Privacy compliance is addressed with a privacy policy and cookie consent banner, though terms of service and security policies are absent. Contact information is clearly provided, including email, phone, physical address, and an embedded contact form. The site links to multiple partner and supporting organizations, reinforcing its credibility and network strength.

A

Akzo Nobel N.V.

akzonobel.com

72

Akzo Nobel N.V. is a global leader in the manufacturing and distribution of paints and coatings, with a rich history dating back to 1792. The company operates in over 150 countries and manages a portfolio of well-known brands such as Dulux, International, Sikkens, and Interpon. Their business model focuses on providing innovative and sustainable surface solutions to a wide range of industries including manufacturing, energy, and transportation. The website reflects a mature digital presence with comprehensive content aimed at customers, investors, and partners worldwide. Technically, the website is built on Adobe Experience Manager (AEM) and leverages modern web technologies including HTML5, CSS3, JavaScript, and various marketing and analytics tools such as Google Tag Manager and Adobe DTM. Hosting is provided via Amazon AWS infrastructure. While the site is mobile-optimized and accessible, performance is somewhat slow with a load time exceeding 8 seconds, indicating room for optimization. From a security perspective, the site employs HTTPS with a valid SSL certificate, SPF and DMARC email authentication records, and no detected vulnerabilities or subdomain takeover risks. However, security headers like HSTS and OCSP stapling are not enabled, and TLS 1.3 is not supported, suggesting moderate security posture. Privacy compliance is strong with clear privacy and cookie policies and an active consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The main risks relate to technical performance and some security hardening opportunities. Strategic recommendations include enhancing SSL configurations, enabling advanced security headers, improving page load times, and maintaining rigorous privacy compliance to sustain trust and regulatory adherence.

M

Marriott

shopmarriott.com

59

ShopMarriott.com is an e-commerce website representing Marriott's branded merchandise retail channel. The site is currently under maintenance, displaying a 403 error page with limited content and contact information. The business operates in the hospitality and retail sectors, targeting consumers interested in Marriott products. Technically, the site is hosted on AWS infrastructure but lacks a valid SSL certificate and HTTPS support, which severely impacts security and trust. The absence of privacy, cookie, and terms of service policies further reduces compliance and user confidence. Security posture is weak due to missing HTTPS and security headers, although email security records like SPF and DMARC are properly configured. Overall, the site is not fully operational and requires significant improvements in security, privacy compliance, and content availability to meet professional standards.

I

IBM

trusteer.com

65

IBM Trusteer is a comprehensive suite of cloud services and endpoint software designed to enhance fraud detection, risk assessment, and user authentication across digital channels. Positioned as a key component of IBM's security portfolio, Trusteer leverages AI, machine learning, and a global intelligence network to provide real-time risk insights and fraud prevention capabilities. The website reflects IBM's enterprise-grade approach with detailed product offerings, case studies, and strong branding consistency. Technically, the site is built on Adobe Experience Manager and hosted on AWS infrastructure, integrating advanced marketing and analytics tools such as Adobe Analytics and Adobe Target. While the security posture is solid with TLS 1.2 and strong cipher suites, there are opportunities to improve HTTPS security by enabling HSTS, OCSP stapling, and DNS security features. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with high professionalism and trustworthiness, suitable for enterprise customers in finance, healthcare, and technology sectors.

L

Lagutogel

rinconolon.com

40

Lagutogel operates as an online platform providing live Hong Kong lottery results and related data, targeting Indonesian lottery players and enthusiasts. The website positions itself as a trusted source for accurate and timely lottery information, supplemented by affiliate links for registration and login to gambling services. Technically, the site leverages AMP technology for optimized mobile performance and is hosted behind Cloudflare, ensuring basic content delivery and security. However, the SSL certificate validity dates appear unusual, and no advanced security headers or email authentication mechanisms like DMARC are implemented. Privacy compliance is minimal, with no visible privacy or cookie policies, which may pose regulatory risks. Overall, the site delivers relevant content with moderate technical maturity but lacks comprehensive security and privacy safeguards.

C

canadianlawyer.ca

canadianlawyer.ca

60

The website canadianlawyer.ca is currently a parked domain with no active business content or services. It primarily serves advertisements through Bodis and Google Adsense, indicating a business model focused on domain parking and monetization rather than providing legal or media services. The site lacks any identifiable company information, contact details, or social media presence, limiting its engagement with users and potential clients. Technically, the site is hosted via Bodis nameservers and does not employ modern security measures such as SSL/TLS encryption, DNSSEC, or security headers, resulting in a low security posture. Performance is suboptimal with a slow page load time and minimal mobile optimization. Privacy compliance is minimal, with a privacy policy page present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site presents a low-trust, low-engagement profile with significant room for improvement in security, user experience, and business transparency.

A

Alfahosting GmbH

alfahosting.de

60

Alfahosting GmbH is a well-established German web hosting provider founded in 1999, offering a broad range of hosting services including webhosting, domains, servers, reseller hosting, and office products such as Microsoft 365. Positioned as a market leader with multiple awards and a strong customer satisfaction rating, Alfahosting targets both beginners and professional users in Germany. Their infrastructure is hosted in Germany, emphasizing security, availability, and green IT initiatives. Technically, the website uses modern JavaScript libraries and tracking tools, with a custom CMS and a moderate performance profile. Security posture is good with strong TLS configuration and SPF/DMARC email protections, but lacks DNSSEC, HSTS, and OCSP stapling, which are recommended for improvement. The company demonstrates GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. Overall, Alfahosting presents a professional, trustworthy, and customer-focused digital presence with room for security enhancements.

D

DKB Grund GmbH

dkb-grund.de

61

DKB Grund GmbH is a German real estate company specializing in property sales, financing, insurance, and investment services. With over 25 years of experience, it serves private and commercial clients across Germany. The website presents a comprehensive portfolio of services including property valuation, financing certificates, and energy-saving advice, supported by a strong regional presence and recognized industry partnerships. Technically, the site uses modern web technologies and analytics tools but currently lacks a valid SSL certificate, which impacts its security posture. The company demonstrates good GDPR compliance with a clear privacy and cookie policy and employs consent management tools. However, there is no explicit security policy or incident response information available. Overall, the website is professionally designed, user-friendly, and trustworthy, but the lack of HTTPS is a critical security gap that should be addressed promptly.

A

ApexBrasil

investinbrasil.com.br

54

ApexBrasil operates as the Brazilian government's official trade and investment promotion agency, providing comprehensive support and information to international investors interested in Brazil. The website serves as a detailed portal showcasing Brazil's economic strengths, key investment sectors, and regional opportunities, positioning ApexBrasil as a critical facilitator for foreign direct investment. Technically, the site is built on Adobe Experience Manager, leveraging Adobe's marketing and analytics tools, but suffers from critical SSL/TLS misconfigurations that undermine its security posture. While security headers are partially implemented, the absence of a valid SSL certificate and modern TLS protocols presents significant risks. Contact information is clearly presented with official emails and physical addresses, enhancing trust. However, the lack of visible privacy, cookie, and terms of service policies indicates compliance gaps. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and maintain credibility.

1

1&1 Telecommunication SE

1und1.com

68

1&1 Telecommunication SE is a major German telecommunications provider offering a wide range of services including internet (DSL and fiber), mobile phone services, TV, and device sales. As a subsidiary of United Internet AG, it holds a strong market position with comprehensive offerings for both private and business customers. The company integrates advanced digital technologies and maintains a modern, responsive website with extensive content and user-friendly navigation. However, the current SSL configuration is invalid, which poses a security risk. The company employs multiple analytics and marketing tools, ensuring data-driven business operations while maintaining GDPR compliance through detailed privacy and cookie policies. Overall, 1&1 demonstrates a high level of digital maturity and customer trust but should address its SSL and security header deficiencies promptly.