Security Directory

Z

Zurich Film Festival

zff.com

60

The Zurich Film Festival (ZFF) is a well-established non-profit cultural organization that hosts an internationally recognized film festival in Zurich, Switzerland. The website serves as a comprehensive platform for festival information, ticket sales, event schedules, and merchandise. It targets film enthusiasts, industry professionals, and cultural supporters, offering a rich program of auteur films, side events, and exclusive memberships. The festival enjoys strong partnerships with reputable brands such as UBS, Mercedes-Benz, and NZZ, reinforcing its market position. Technically, the website is built on modern frameworks including Next.js and React, with integration of Shopify for e-commerce and DatoCMS for content management. It leverages Cloudflare DNS and CDN services, ensuring fast performance and good mobile optimization. The site implements privacy compliance mechanisms such as Cookiebot for cookie consent and maintains comprehensive legal documentation. Analytics and marketing tools like Google Analytics, Facebook Pixel, and Google Tag Manager are used with user consent. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and employs cookie consent for privacy. However, DNSSEC is not enabled, and no explicit security.txt or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is strong but could be improved with additional DNS security and public vulnerability disclosure. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with GDPR. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers. These steps will further strengthen the site's security and trustworthiness for users and partners.

K

Kanne Brottrunk

kanne-brottrunk.de

42

Kanne Brottrunk is a German company specializing in the production and sale of organic fermented bread drink products, with a history spanning approximately 35 years. The website targets health-conscious consumers interested in vegan and organic beverages. The business operates primarily in the retail sector, emphasizing natural and alcohol-free products. The website demonstrates consistent branding and good content quality, supporting its market position as an established organic health beverage provider. Technically, the website employs modern technologies including Google Tag Manager, Cookiebot for GDPR-compliant cookie management, and Google reCAPTCHA for bot protection. The site is served over HTTPS, ensuring secure communication. While no explicit CMS or hosting provider is identified, the site shows moderate performance and good mobile optimization. SEO and accessibility features are basic to good. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, some common security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The site lacks a published security policy or incident response contact, which could enhance trust and compliance. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. The domain registration data is consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve user trust and compliance.

H

Hohenzollern Apotheke

hohenzollern-apotheke.de

50

Hohenzollern Apotheke operates as a local pharmacy business with three physical locations in Münster, Germany, providing retail pharmacy services and customer consultation. The website targets local customers seeking pharmaceutical products and services, emphasizing extended opening hours and good customer service. The business model is retail-focused with a clear local market presence. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for cookie consent management, and Google reCAPTCHA for bot protection. The CMS appears to be ProcessWire, and hosting is managed via DomainControl nameservers, likely GoDaddy. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service pages. No contact information or data protection officer details are found, which limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

S

Stadtwerke Münster

stadtwerke-muenster.de

64

Stadtwerke Münster is a large regional public utility provider based in Münster, Germany, offering essential services such as energy supply, public transportation, water, and waste management. The company positions itself as a local solution provider addressing global challenges, targeting residents and businesses within the Münster region. The website reflects a professional and consistent brand image with good content quality and user experience tailored for its audience. Technically, the site leverages modern technologies including Pimcore CMS, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. Overall, the site demonstrates high trustworthiness and business credibility, with room for enhancements in security policy transparency and incident response disclosures.

I

ibau GmbH

ibau.de

55

ibau GmbH operates a specialized information service focused on tenders and contracts within the construction industry in Germany. The company provides subscription-based access to relevant business opportunities, targeting decision makers in the construction sector. The website is professionally designed, with good content quality and clear navigation, catering to business professionals seeking procurement information. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates marketing and analytics tools such as HubSpot and Hotjar. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not published. The domain registration uses privacy and brand protection name servers, which is typical for such businesses and does not raise concerns. Overall, the website is trustworthy, compliant with GDPR, and provides a professional user experience.

B

BirdLife International

birdlife.org

74

BirdLife International is a globally recognized non-profit organization dedicated to bird conservation and environmental protection. It operates as the largest international partnership for nature conservation, focusing on research, advocacy, and public engagement to protect bird species and their habitats worldwide. The website reflects a mature and professional digital presence, targeting conservationists, researchers, donors, and the general public interested in environmental issues. Technically, the website is built on WordPress and leverages modern technologies including Google Analytics, Cookiebot for consent management, Cloudflare Turnstile for bot protection, and Vimeo for media content. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed in the provided data, the use of reputable third-party services and absence of exposed sensitive data indicate a solid security posture. However, the lack of publicly available WHOIS data and absence of explicit security policies or incident response contacts suggest areas for improvement in transparency. Overall, BirdLife International's website is trustworthy, professionally maintained, and compliant with privacy standards. The primary risks relate to enhancing security header implementation and publishing more detailed security and incident response information to bolster user trust and compliance.

Publicart.ie is a government-supported non-profit platform managed under the Arts Council of Ireland and the Department of Arts, Heritage and the Gaeltacht. It serves as a comprehensive resource for public art in Ireland, providing directories, news, and critical discourse for artists, commissioners, and audiences. The website is positioned as an authoritative source in the Irish public art sector, with a focus on cultural enrichment and community engagement. Technically, the site runs on an older TYPO3 CMS version with integrations such as Cookiebot for consent management and Google Analytics for tracking. While the site is functional and content-rich, it shows signs of aging infrastructure and basic mobile and accessibility support. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, and contact information is minimal. Overall, the site is trustworthy and legitimate but would benefit from technical modernization and enhanced security practices.

G

Gallery Systems

emuseum.com

71

Gallery Systems is a specialized technology company providing online collections management software tailored for museums, galleries, and cultural institutions. Their platform enables digital asset management and sharing of collections, positioning them as a niche B2B software provider in the cultural heritage sector. The website reflects a professional digital presence with consistent branding and relevant content targeting institutional clients. Technically, the site is built on WordPress with modern marketing and analytics integrations such as Marketo and Cookiebot, indicating a mature digital marketing infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though the absence of explicit security headers and public WHOIS data suggests areas for improvement. Overall, the domain appears legitimate but lacks transparency in registration details, which slightly impacts trustworthiness.

E

ESSI

niszczeniedokumentow.eu

10

The website niszczeniedokumentow.eu represents ESSI, a professional Polish company specializing in secure document destruction and data carrier disposal services compliant with RODO and other legal standards. The company operates multiple regional offices and offers a comprehensive range of services including mobile document destruction, equipment sales, and secure storage solutions. The website is well-structured, content-rich, and targets business clients in Poland seeking compliant and secure document disposal solutions. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good SEO practices. Security posture is adequate with HTTPS and consent management but shows minor technical issues such as PHP warnings and lacks explicit security policies or incident response information. Overall, the domain registration is consistent and trustworthy, with no privacy protection masking ownership, supporting the legitimacy of the business. Strategic recommendations include fixing technical warnings, enhancing security headers, and publishing clear security and incident response policies to improve trust and compliance.

F

Fellowes Polska S.A.

fellowes.pl

10

Fellowes Polska S.A. is a well-established manufacturer and global distributor of office equipment, specializing in shredders and ergonomic office devices. The company targets business customers and office users primarily in Poland, maintaining a consistent and professional online presence. The website is designed with good quality content, clear navigation, and is mobile optimized, supporting a positive user experience. Technically, the site employs a modern technology stack including jQuery, Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for analytics and marketing, with a custom or unknown CMS. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are not explicitly confirmed. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive cookie and privacy policies and GDPR consent mechanisms. Business credibility is high, supported by domain age and consistent WHOIS data. Overall, the site scores well in content quality, technical implementation, security, privacy, and business credibility.

I

Innova Semplice SpA

cloud-care.it

67

Innova Semplice SpA operates as a leading Italian hub connecting consumers with providers in the utility, insurance, and financial sectors. Established in 2011, the company has positioned itself as a marketplace facilitating multi-channel interactions between demand and supply, supported by a network of subsidiaries specializing in brokerage and digital services. The website reflects a professional and consistent brand image, targeting both B2C and B2B audiences with clear service offerings and corporate governance transparency. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and standard tracking tools such as Google Tag Manager and Cookiebot for compliance and analytics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

I

IAI

idosell.com

74

IdoSell is a Polish technology company specializing in e-commerce software solutions, enabling businesses to open and manage online stores. The company positions itself as an established player in the Polish e-commerce market, offering SaaS-based online store platforms and related services. The website is professionally designed, mobile-optimized, and includes comprehensive cookie consent mechanisms, reflecting a mature digital presence. Technically, the site leverages modern web technologies including React-based UI components, Google Analytics, Cookiebot for privacy compliance, and various marketing integrations such as LinkedIn Insight and Bing Ads. Hosting is partly on Vercel, indicating use of modern cloud infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are not clearly visible. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but the website content and external references support legitimacy. Overall, the site is safe, business-focused, and compliant with GDPR requirements.

F

Flowly.cz

libristo.pl

71

Libristo.pl is an online bookstore specializing in foreign language books, offering over 22 million titles in more than 100 languages. The business targets readers in Poland seeking foreign literature, providing a loyalty program, a 30-day return policy, and a network of pickup points. The website is professionally designed with a consistent brand presence and good content quality. Technically, it employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent, Alpine.js, Swiper.js, and Tailwind CSS, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain trust assessment but the website's content and technology usage suggest legitimacy. Advertising and analytics integrations are extensive, with multiple third-party ad networks and tracking pixels in use. Privacy compliance is basic, with cookie consent but no clear privacy policy or terms of service found in the provided content.

V

Very Mobile

verymobile.it

70

Very Mobile is a telecommunications brand operating in Italy, offering affordable and transparent 5G mobile telephony plans without binding contracts. It is part of the Wind Tre S.p.A. group, a leading telecommunications company in Italy. The website targets Italian consumers seeking cost-effective mobile services with a simple user experience. Technically, the site leverages Adobe Target for personalization, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. The site is hosted on a secure platform with HTTPS and DNSSEC enabled, reflecting good security practices. However, explicit privacy and terms of service pages were not found in the provided content, suggesting room for improvement in compliance documentation. Overall, the website is professional, trustworthy, and well-positioned in the Italian telecommunications market.

D

DREIKON GmbH & Co. KG

dreikon.de

67

DREIKON GmbH & Co. KG is a modern full-service advertising and digital marketing agency based in Münster, Germany. The company offers a broad range of services including SEO, SEA, web design, e-commerce solutions, graphic design, and marketing consulting. They position themselves as a strategic partner combining traditional advertising expertise with innovative digital marketing approaches, serving primarily small and medium-sized enterprises. Their market position is reinforced by multiple industry certifications such as Google Premier Partner and Top 100 SEO awards. Technically, the website is built on the ProcessWire CMS platform, utilizes Cloudflare for DNS and CDN services, and integrates modern marketing and tracking tools like Cookiebot, Google Tag Manager, and Leadinfo. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation structure. From a security perspective, the website enforces HTTPS, implements cookie consent mechanisms, and does not expose sensitive data. However, there is room for improvement in publishing explicit security policies, incident response contacts, and vulnerability disclosure information. The use of security headers could also be enhanced. Overall, the website presents a low risk profile with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing security transparency and further hardening HTTP headers to improve security posture.

M

Münsterland e.V.

muensterland.com

60

Münsterland e.V. operates as a regional development and promotional organization focused on enhancing the quality of life, economic opportunities, cultural engagement, and tourism in the Münsterland region of Germany. The website serves as a comprehensive portal for residents, businesses, tourists, and cultural participants, offering detailed information about living, working, and visiting the region. The organization positions itself as a key regional player fostering community, innovation, and sustainable growth. Technically, the website is built on a ProcessWire CMS platform, utilizing modern JavaScript libraries such as jQuery, Google Tag Manager, and Bing UET for analytics and marketing. Accessibility features are well implemented, including WCAG options and cookie consent mechanisms, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. However, it lacks explicit security headers and a published security.txt file, which are recommended for improved security posture. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and branding appear professional and trustworthy. Overall, the site presents a low-risk profile with strong content quality and technical implementation but would benefit from enhanced transparency in domain registration and security incident response information.

E

E-goi

e-goi.com

68

E-goi is a marketing automation platform specializing in AI-driven marketing solutions for e-commerce, retail, and service industries. The company offers key services such as email marketing, SMS marketing, and multichannel campaign management, positioning itself as a competitive player in the marketing technology sector. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and Microsoft Clarity. The security posture is solid with HTTPS enforced and security headers implemented, though some minor CSP issues were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, the website is trustworthy and functional but would benefit from clarifying domain registration details and enhancing security policy disclosures.

L

Loacker

loacker.it

71

Loacker is a well-established confectionery brand operating a professional e-commerce platform targeting consumers in Italy and beyond. The website offers a wide range of products including classic wafers and gift packages, leveraging BigCommerce as its platform. The technical infrastructure is modern, utilizing trusted third-party services such as Google Analytics, Trustpilot, and Cookiebot for analytics, reviews, and compliance. The site demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

CrediNet.bg is a Bulgarian online microcredit service specializing in fast loans up to 5000 Bulgarian leva, targeting local consumers seeking quick credit solutions with minimal documentation (only ID card required). The website presents a professional and consistent brand image with a clear business focus on microcredit lending. The technical infrastructure includes modern web technologies, integration with Cookiebot for cookie consent, and Cloudflare DNS with DNSSEC enabled, indicating a secure domain setup. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, limits full compliance and trust signals. Security posture is generally good with HTTPS and DNSSEC, but could be improved by adding security headers and publishing security policies. Overall, the site is safe, well-structured, and serves its business purpose effectively, though improvements in transparency and compliance documentation are recommended.

A

Albolina Film srl

albolina.org

52

Albolina Film srl is a small but leading cinematic production company based in Bolzano, Italy, founded in 2012. They specialize in producing and co-producing films and providing production services in South Tyrol, catering to a multilingual audience in German, Italian, and English. Their mission focuses on connecting their culturally diverse region with Europe and beyond through film. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence, reflecting a mature digital infrastructure. Technically, the site uses modern web technologies including Cookiebot for consent management and Vimeo for video content, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and published security policies could enhance trust. WHOIS data is unavailable due to privacy or query failure, but the website content and contact details support legitimacy. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations, making it a trustworthy digital presence for the company.

C

card complete Service Bank AG

cardcomplete.com

73

card complete Service Bank AG is a leading Austrian financial services provider specializing in credit cards, prepaid cards, and comprehensive payment solutions for private and corporate customers. The company positions itself as a fully integrated card service provider, managing everything from product development to acceptance devices and transaction processing. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information targeted primarily at Austrian customers. Technically, the site employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and ReadSpeaker for accessibility enhancements. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and provides a detailed cookie consent mechanism aligned with GDPR requirements. However, no explicit security policy or incident response contact is publicly available. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness, though the website content and branding strongly indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and transparency of security policies.

C

Cley Spy

cleyspy.co.uk

58

Cley Spy is a small UK-based retailer specializing in the sale of premium binoculars, telescopes, and outdoor equipment. The company targets outdoor enthusiasts and nature observers, offering both new and used products from well-known brands such as Swarovski, Leica, and Zeiss. The website serves as both an online store and a point of information for customers interested in quality optical gear. Technically, the site is built on WordPress with WooCommerce, integrating Google Analytics and Google Tag Manager for tracking, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features are basic. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some advanced security headers and a published security policy or vulnerability disclosure mechanism. The domain WHOIS data is unavailable due to a registration error indicating the domain name violates Nominet UK naming rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but would benefit from improved transparency and domain registration clarity.

P

Prognos AG

prognos.com

75

Prognos AG is a professional consulting and research firm specializing in economic and policy analyses, serving government, public sector, and business clients primarily in Germany and Europe. Their services encompass studies, forecasts, evaluations, and strategic consulting across sectors such as economy, innovation, climate, energy, and infrastructure. The company maintains a strong market position with over 200 experts and multiple European offices. Technically, the website is built on Drupal 10 with modern JavaScript libraries, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract significantly given the professional site presentation. Overall, the site is well-designed, content-rich, and trustworthy, with moderate user tracking via Matomo analytics and compliance with GDPR indicated by comprehensive privacy and cookie policies.

T

Tanec Praha z.ú.

tanecpraha.org

49

Tanec Praha z.ú. is a well-established non-profit organization based in the Czech Republic, dedicated to promoting dance and movement theater through festivals, events, and educational programs. The organization operates multiple related entities including the TANEC PRAHA festival, Czech Dance Platform, and Ponec theater, targeting both professional artists and the general public interested in dance culture. The website reflects a consistent brand and provides relevant content and contact information to its audience. Technically, the website is built on Drupal 7 with a variety of modern front-end libraries and frameworks such as Bootstrap and jQuery. It uses HTTPS with a good SSL configuration and implements cookie consent via Cookiebot, indicating awareness of privacy compliance. The site performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site has HTTPS enabled and secure forms with GDPR consent checkboxes, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website is professional, secure, and compliant with basic privacy standards, serving its cultural mission effectively. Strategic improvements in security headers and privacy policy publication would further enhance its posture.

S

Sinsay

sinsay.com

70

Sinsay operates as an international online fashion retailer targeting women, men, and children across 19 countries. The website serves as a country selector landing page, directing users to localized stores. The business model is e-commerce retail with a focus on affordable fashion. The site demonstrates consistent branding and a professional presentation, indicating a mature market presence. Technically, the website employs modern JavaScript frameworks and third-party services such as Cookiebot for consent management, New Relic for monitoring, and Google Tag Manager for analytics. Hosting is provided via Akamai, suggesting a robust content delivery infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, HTTPS is enforced, and a comprehensive cookie consent mechanism is in place, supporting GDPR compliance. However, no explicit security headers were detected in the HTML content, and no direct contact information for security or incident response was found. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the professional appearance and functionality of the site. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, transparency of contact information, and WHOIS data availability would enhance trust and security posture.

P

PONEC - divadlo pro tanec

divadloponec.cz

49

PONEC - divadlo pro tanec is a well-established cultural institution based in Prague, Czech Republic, specializing in contemporary dance performances, educational programs, and artist residencies. The website reflects a professional and consistent brand presence, targeting a general audience interested in dance and performing arts. The business model revolves around event hosting, ticket sales, and community engagement through workshops and educational offerings. Technically, the site is built on Drupal 7 with modern front-end libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, with clear contact information and partner affiliations, supporting a positive user experience and compliance with privacy regulations.

Homerun is a Netherlands-based technology company specializing in applicant tracking and human resource management software designed for modern teams. Their SaaS platform offers a user-friendly and visually appealing ATS and HR toolset that streamlines hiring, leave tracking, employee data management, and team insights. The company targets growing teams and HR professionals seeking an efficient and personal approach to recruitment and team management. Homerun positions itself as a niche provider with a strong emphasis on user experience and brand culture, supported by positive customer testimonials and high ratings on independent review platforms.

R

Rieker Holding AG

rieker.com

67

Rieker Holding AG is a well-established European footwear manufacturer with a history spanning approximately 150 years. The company operates globally under the brands Rieker and remonte, offering fashionable shoes that emphasize comfort and functionality. Their business model includes manufacturing, retail through online shops, and a dedicated B2B portal for dealers. The website reflects a mature digital presence with multilingual support and clear navigation, targeting consumers seeking quality leisure footwear. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Google reCAPTCHA for bot protection. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned policies. The extensive use of third-party analytics and advertising pixels indicates a comprehensive marketing strategy with good transparency. Overall, the website presents a professional, trustworthy, and secure digital front for Rieker Holding AG. The lack of WHOIS data for the subdomain limits domain registration verification but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and compliance.

C

card complete

completeworld.at

69

complete WORLD is a loyalty and benefits platform associated with card complete, offering exclusive offers in hospitality, culture, and lifestyle sectors primarily targeting card complete customers in Austria. The website integrates with the complete Control app and customer portal, providing a seamless user experience for members to access benefits. The platform demonstrates a moderate to good level of digital maturity, utilizing modern web technologies, CDN hosting, and accessibility tools to enhance user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data slightly impacts trust but the overall branding and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to strengthen trust and compliance.

C

Connex Marketing GmbH

connexgroup.net

55

Connex Marketing GmbH operates as a specialist provider of sales promotion, customer loyalty, and employee motivation solutions primarily targeting businesses in the German-speaking market, particularly Austria. Their offerings include voucher solutions, promotion systems, loyalty programs, and data generation services. The company maintains a professional online presence with consistent branding and clear navigation, supported by social media channels and integrated marketing tools. Technically, the website employs modern web technologies such as Bootstrap, Google Tag Manager, and Cookiebot for consent management, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site is safe for general audiences and compliant with GDPR requirements through detailed cookie consent mechanisms.

C

card complete Service Bank AG

cardcomplete.at

66

card complete Service Bank AG is a leading Austrian financial services provider specializing in credit and prepaid card solutions for private and corporate customers. The company offers a comprehensive suite of payment products including card issuance, acceptance devices, and processing systems, positioning itself as a full-service payment solutions provider in Austria. The website reflects a mature digital presence with clear branding, extensive customer support options, and a focus on secure and convenient payment management through their complete Control app and customer portal. Technically, the website employs modern JavaScript libraries and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized, accessible, and uses HTTPS to secure communications. However, explicit security headers are not evident in the HTML, and no public security policy or vulnerability disclosure program is found, indicating areas for security maturity improvement. From a security posture perspective, the site demonstrates good practices including secure login portals and cookie consent mechanisms, but lacks published incident response contacts and security certifications. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional presentation and business information consistency. Overall, card complete presents a trustworthy and professional online presence suitable for its financial services market, with recommendations to enhance security headers, publish security policies, and improve WHOIS transparency to further strengthen trust and compliance.

T

TaniaKsiazka.pl - księgarnia internetowa i zakupy online

taniaksiazka.pl

77

TaniaKsiazka.pl is a Polish e-commerce platform specializing primarily in books, games, toys, movies, music, and various consumer products including food and health items. The website positions itself as a comprehensive online bookstore with a broad product range and fast delivery services. The business model is retail-focused, targeting general consumers in Poland. The website demonstrates a moderate level of digital maturity with the use of multiple analytics and marketing technologies such as Google Analytics, Microsoft Clarity, Facebook Pixel, and marketing tools like Prefixbox and UseInsider. Cookie consent is implemented, reflecting some compliance with GDPR requirements. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header present, though additional security headers could enhance protection. The absence of WHOIS data and privacy policy reduces transparency and trustworthiness, suggesting areas for improvement. Overall, the website is functional, professionally designed, and serves a large retail audience but would benefit from enhanced compliance and security documentation.

S

Sinsay

sinsay.pl

70

Sinsay operates as an international online fashion retailer targeting women, men, and children across 19 countries. The website serves as a country selection portal directing users to localized stores, emphasizing a broad European presence. The business model focuses on e-commerce retail with a user-friendly interface and clear navigation to enhance shopping experience. The brand maintains consistent visual identity and offers cookie consent mechanisms aligned with GDPR requirements. Technically, the website employs modern JavaScript libraries and third-party services such as Cookiebot for consent management, New Relic for performance monitoring, and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and SEO practices but lacks explicit CMS or hosting provider details. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces domain trustworthiness, though the website content and compliance features suggest legitimate operations. Overall, the website presents a professional and trustworthy e-commerce platform with solid privacy compliance but would benefit from enhanced security transparency and contact information to improve business credibility and user trust.

N

Norsk Hydro ASA

shapesbyhydro.com

67

Shapes by Hydro is a professionally designed content platform operated by Norsk Hydro ASA, focusing on aluminium-related knowledge, design, and industry insights. The website serves as a resource hub for designers, engineers, and industry professionals interested in aluminium applications and innovations. It supports Norsk Hydro's brand positioning as a global leader in the aluminium sector. The technical infrastructure leverages modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, Microsoft Application Insights, and Cookiebot for consent management, ensuring good performance, mobile optimization, and compliance with privacy regulations. Security posture is solid with HTTPS and telemetry integration, though explicit security headers and dedicated security policies are absent. The WHOIS data is missing or unavailable, which is inconsistent with the professional nature of the site and slightly reduces trust. Overall, the site is highly professional, content-rich, and trustworthy, with room for improvement in security transparency and contact information availability.

T

Tabidoo

tabidoo.cloud

64

Tabidoo is a SaaS low-code platform founded in 2016, offering a comprehensive suite of business applications including task management, CRM, project tracking, and document management. The platform targets businesses and teams seeking efficient data management and app creation without extensive coding. Positioned as a competitive alternative to platforms like Notion and Airtable, Tabidoo emphasizes ease of use, affordability, and rapid deployment. The website reflects a mature digital presence with multi-language support and strong branding consistency. Technically, the site leverages modern cloud infrastructure, including Cloudflare DNS and CDN, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, ensuring good performance and compliance. Security posture is strong with HTTPS enforcement, domain transfer protections, and a dedicated security page, though DNSSEC is not enabled and no explicit incident response contacts or security.txt file were found. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility.

P

Przelewy24

przelewy24.pl

74

Przelewy24 is a well-established Polish online payment service provider offering a variety of payment methods including BLIK, Google Pay, and Apple Pay. The website targets businesses seeking to integrate efficient and diverse payment solutions into their e-commerce platforms. The company positions itself as a key player in the Polish online payments market, providing reliable and fast payment processing services. The website content is professional, well-structured, and localized in Polish, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a good level of digital maturity and compliance with privacy regulations. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks some advanced security headers and explicit security policies. No WHOIS data is available due to privacy protection, which is justified for a financial services provider. Overall, the site demonstrates a strong security posture and compliance with GDPR, with room for improvement in transparency and incident response readiness.

N

National Theatre

narodni-divadlo.cz

51

The National Theatre in Prague is a prestigious cultural institution representing the Czech Republic's national identity and European cultural heritage. The website provides comprehensive information about upcoming theatre performances across various genres including drama, ballet, opera, and multimedia shows. It offers ticket sales, subscriptions, and an e-shop for related merchandise. The institution maintains partnerships with prominent companies and media outlets, reinforcing its market position as a leading national theatre. Technically, the website is built using modern web technologies such as React and Next.js, with integration of Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some areas such as explicit privacy policy and security headers could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the presence of official partners and professional content supports trustworthiness. Overall, the website is a well-maintained digital presence for a major cultural institution, with moderate to good security posture and privacy compliance. Strategic improvements in transparency, security headers, and contact information would enhance trust and compliance.

R

Rtone

rtone.fr

61

Rtone is a French product development studio specializing in end-to-end product lifecycle services, from conception to development and management. The company targets businesses and product developers seeking specialized product development expertise. The website is built on WordPress and employs modern digital tools such as Cookiebot for consent management, Matomo and Hotjar for analytics, and Google Tag Manager for marketing integration. The domain is mature, registered since 2007 with OVH, indicating a stable business presence. Technically, the site uses a standard WordPress CMS with Yoast SEO for optimization and includes several third-party scripts for analytics and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and could be improved. From a security and compliance perspective, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is found on the homepage, which slightly reduces privacy compliance and business credibility scores. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are present, supporting the legitimacy of the domain and business. Overall, Rtone presents a professional and trustworthy online presence with room for improvement in transparency and security best practices. Strategic enhancements in published policies and security headers would strengthen compliance and trust.

H

Hydro

hydro.com

75

Hydro is a global leader in aluminium production and renewable energy, operating in over 40 countries with a workforce of 32,000 employees. The company focuses on sustainable business practices, offering low-carbon and recycled aluminium products alongside renewable energy solutions. Their website reflects a mature digital presence with comprehensive global office information and professional branding. Technically, the site employs modern JavaScript frameworks, telemetry via Microsoft Application Insights, and cookie consent management through Cookiebot, indicating a commitment to user privacy and performance monitoring. Security posture is strong with HTTPS enforced and telemetry for error tracking, though explicit security policies and vulnerability disclosures are absent. The WHOIS data for the domain www.hydro.com is missing, which is unusual for a corporate domain and slightly reduces trustworthiness. Overall, the website is professional, secure, and compliant with privacy norms, but could improve transparency around security policies and domain registration details.

B

BICZ a.s.

bicz.cz

64

BICZ a.s. is a Czech Republic based real estate investment company specializing in residential housing projects, property reconstruction, and rental services. The company positions itself as a leading specialist in its sector, targeting investors and clients interested in responsible real estate investment. The website reflects a professional business model focused on property development and management within the Czech market. Technically, the website is built on WordPress with modern plugins and analytics tools such as Google Analytics and Cookiebot for GDPR compliance. The site is mobile optimized and presents good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, though the website content and technical setup appear professional and trustworthy. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

C

CENTROPOL ENERGY, a.s.

centropol.cz

56

CENTROPOL ENERGY, a.s. operates as a reliable energy supplier in the Czech Republic, providing gas and electricity to households and businesses for over two decades. The company emphasizes fair pricing and additional customer benefits, positioning itself as a trusted player in the energy sector. The website reflects a professional digital presence with clear branding and relevant content tailored to its target audience. Technically, the site is built on WordPress with a modern technology stack including Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for bot protection. While the site is mobile-optimized and SEO-friendly, there is room for improvement in accessibility and security headers implementation. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts overall trust. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve credibility and compliance.

W

WICONA

wicona.com

65

WICONA is a well-established company specializing in architectural aluminum systems, serving primarily the construction and architectural sectors. The website reflects a professional B2B business model with a focus on product offerings such as facades, windows, doors, and sliding systems. The company is a subsidiary of Hydro, a global aluminum company, which supports its market position and credibility. The website is targeted at architects, builders, and construction professionals, providing detailed product information and resources. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Microsoft Azure services for hosting and telemetry, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured cookie consent mechanisms. Security-wise, the website enforces HTTPS and includes a Content Security Policy header, but lacks some additional security headers and explicit privacy and terms of service pages. The cookie consent mechanism is comprehensive and GDPR compliant, with detailed cookie categorization and user control. However, the absence of visible contact information and WHOIS data inconsistency slightly reduce trustworthiness. Overall, the website is professional, secure, and compliant, but could improve transparency and contact accessibility to enhance user trust and compliance posture.

F

Accueil - Festival Salamandre

festival-salamandre.org

60

The Festival Salamandre website represents a nature festival event held in Switzerland, targeting a general audience interested in environmental and outdoor activities. The site is built on WordPress and uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, with tracking via Facebook Pixel and Plausible Analytics. The website is well-designed, mobile-optimized, and provides a good user experience with clear event information. However, the absence of visible contact information, privacy policy, and terms of service pages limits its compliance and trustworthiness. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and incident response contacts. WHOIS data is unavailable due to a malformed request, which reduces domain trust and legitimacy assessment. Overall, the site is functional and professional but could improve in compliance and security transparency.

I

IAB Slovakia

iabslovakia.sk

51

IAB Slovakia is the largest Slovak digital association operating in the internet advertising sector. It provides market rules, standards, ethical codes, supports professional networking, educates digital marketing professionals, and measures the traffic of Slovak online media. The website is built on WordPress and integrates modern technologies such as Google Tag Manager, Cookiebot for cookie consent management, Hotjar for user behavior analytics, and Google reCAPTCHA for bot protection. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional content. Security posture is strong with HTTPS enforced and multiple security headers present. Cookie consent is comprehensive and GDPR compliant, with detailed cookie categorization and user control. However, no explicit terms of service or security policy pages were found, and direct contact emails or phone numbers are not exposed on the site, relying on contact forms instead. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website demonstrates a mature digital presence with good security and privacy practices, suitable for its role as a professional industry association.

A

Akeneo

akeneo.com

50

Akeneo is a technology company specializing in Product Information Management (PIM) solutions designed to enhance product experience (PX) and product experience management (PXM) practices. Their platform aims to simplify product data management for businesses, increasing productivity and operational efficiency. The website reflects a mature digital presence with professional design, SEO optimization, and extensive marketing and analytics integrations. Technically, the site is built on WordPress with multiple third-party tools such as Google Tag Manager, Microsoft Clarity, Marketo, and Cookiebot, indicating a sophisticated marketing and data collection infrastructure. Security posture is solid with HTTPS enforced and a Content Security Policy in place, though additional security headers could improve defenses. Privacy compliance is supported by a cookie consent mechanism, but explicit privacy and terms of service pages were not detected in the provided content. WHOIS data is missing or inaccessible, which slightly reduces domain trustworthiness. Overall, the site is professional and business-focused with no content safety concerns.

A

APICIL Santé Prévoyance

apicil.com

69

APICIL is a well-established French social protection group founded in 1938, providing complementary health insurance, provident schemes, savings, and retirement services primarily targeting enterprises and individuals in France. The website mon.apicil.com serves as a client portal and information hub, reflecting the company's strong market position as the third largest social protection group in France. The site is professionally designed, mobile-optimized, and compliant with GDPR regulations, including a comprehensive cookie consent mechanism. Technically, the site is built on WordPress with modern analytics and marketing integrations such as Matomo and Google Tag Manager, ensuring good digital maturity. Security posture is solid with HTTPS enforced and secure authentication cookies, though some security headers are not visibly implemented and no explicit security or incident response policies are published. Overall, the site presents a trustworthy and professional front for APICIL's services, with recommendations to enhance security headers and publish formal security policies to further strengthen trust and compliance.

R

Readymag

readymag.website

73

Readymag is a well-established technology company founded in 2008, offering a SaaS platform focused on website design, prototyping, collaboration, and publishing. The company targets designers and creative professionals seeking an intuitive and powerful design tool. The website demonstrates a mature digital infrastructure with custom fonts, modern JavaScript frameworks, and integration of multiple analytics and marketing tools, all managed with user privacy in mind through Cookiebot consent mechanisms. Security posture is strong with HTTPS enforced and domain registration protections in place, although some security headers could be improved and a formal security policy is not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a medium-sized technology business with a solid market position.

R

Readymag

readymag.com

73

Readymag is a technology company providing a SaaS platform for designing, prototyping, collaborating, and publishing outstanding websites. Established in 2008, it targets designers and creative teams seeking an intuitive and powerful web design tool. The company maintains a strong market position within the niche of design-focused website builders, offering key services that include website creation, prototyping, and team collaboration. The website is professionally designed, mobile-optimized, and demonstrates consistent branding and high content quality. Technically, Readymag leverages modern web technologies, including Google Analytics, Tag Manager, Hotjar, and Cookiebot for tracking and privacy compliance, hosted on Cloudflare DNS with GoDaddy as the registrar. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

C

Campari

campari.com

67

Campari is a globally recognized brand specializing in the production and marketing of the iconic red Italian bitter, Campari. The website serves as a brand promotion platform, providing detailed product information and cocktail recipes targeting adult consumers interested in alcoholic beverages. The site demonstrates a mature digital presence with a consistent brand identity and comprehensive privacy and cookie policies, reflecting compliance with GDPR and other privacy regulations. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Analytics, and Cookiebot for consent management. The site is mobile-optimized and exhibits good SEO practices, although some accessibility features could be enhanced. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and lack of visible incident response or security contact information are areas for improvement. The WHOIS data for the domain is unavailable, which raises some concerns about transparency, but the professional quality of the website and its alignment with a well-known brand mitigate this risk. Overall, the website is reliable and trustworthy for its intended audience, with recommendations to improve security headers and provide clearer contact channels for security incidents.

A

Aller Service

allerservice.dk

72

Aller Service is a Danish media subscription service specializing in providing subscriptions to Allers weekly magazines and other publications in both print and digital formats. The company targets Danish-speaking magazine readers and operates under the parent company Aller Media. The website is professionally designed with a clear focus on subscription services, offering a user-friendly experience optimized for mobile devices. The technical infrastructure leverages modern web technologies including Nuxt.js, Tailwind CSS, and is hosted on Microsoft Azure, indicating a mature digital presence. Security measures such as HTTPS, security headers, and cookie consent mechanisms are implemented, reflecting a good security posture. However, the absence of a public security policy and vulnerability disclosure limits transparency. Overall, the website is trustworthy and compliant with GDPR, with no signs of malicious activity or adult content.