Security Directory

H

Handwerkskammer für München und Oberbayern

hwk-muenchen-bildung.de

67

The Handwerkskammer für München und Oberbayern operates a comprehensive educational portal focused on handcraft training and continuing education in the Munich and Upper Bavaria region. The website offers a broad range of courses including Meisterkurse, Lehrlingskurse, and specialized training, targeting apprentices, skilled workers, and business leaders in the handcraft sector. The institution holds a strong regional market position as a trusted educational provider with clear branding and professional content. Technically, the website is built on the ODAV Content Management System and employs modern web technologies such as jQuery, Bootstrap, and accessibility tools like eyeAble. It integrates analytics via Google Analytics and Matomo, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses best practices such as asynchronous script loading and cookie consent. However, explicit security headers like X-Frame-Options are not visibly set, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business identity, indicating high legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contact information to further strengthen trust and security posture.

S

Sachverständigenradar

sachverstaendigen-radar.de

61

Sachverständigenradar operates a mobile application platform focused on the German crafts sector, providing users with an easy way to find qualified experts locally. The website supports this service with a professional, well-structured web presence that includes app store links and a comprehensive privacy policy. The technical infrastructure is modern, leveraging jQuery, Bootstrap, and a specialized CMS (ODAV), with self-hosted Matomo analytics ensuring privacy-conscious user tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of security headers and explicit incident response policies suggests room for improvement. Overall, the site is trustworthy and well-positioned within its niche, serving a clear target audience effectively.

W

wallstreetONLINE

wallstreet-online.de

69

wallstreetONLINE operates a leading German financial and stock market portal offering real-time market data, news, analysis, and a large community platform for investors and finance enthusiasts. The website targets retail investors and market participants in Germany, providing comprehensive tools and content to support informed investment decisions. The platform is well-positioned as Germany's largest financial community with a broad range of services including stock quotes, news, forums, and mobile applications. Technically, the website employs modern web technologies such as Bootstrap, Highstock charts, and integrates privacy management and consent frameworks, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, integrates consent management, and uses Google Tag Manager with opt-out capabilities, though it lacks explicit security headers and published security policies. Overall, the site demonstrates a strong security posture with room for improvement in transparency and formal security documentation. The domain WHOIS data aligns with the website's business claims, indicating legitimacy and consistency. No blocking or WAF mechanisms were detected, allowing full content access and analysis.

T

TBI Technologie-Beratungs-Institut GmbH

tbi-mv.de

52

The TBI Technologie-Beratungs-Institut GmbH is a regional government-affiliated institution focused on supporting research, development, and innovation in Mecklenburg-Vorpommern, Germany. It provides funding program management, digitalization support for SMEs, and knowledge transfer platforms. The website is built on TYPO3 CMS with modern frontend technologies and includes a cookie consent mechanism respecting user privacy. Contact information is clearly provided, and the site displays trust signals such as EU funding logos and government ministry affiliations. Security posture is solid with HTTPS and privacy-conscious analytics, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-suited for its target audience of regional businesses and research entities.

GSA Gesellschaft für Struktur- und Arbeitsmarktentwicklung is a government-affiliated organization based in Mecklenburg-Vorpommern, Germany, focused on labor market development, vocational training, and business consulting. The website provides news updates, service information, and resources primarily for regional businesses, job seekers, and policymakers. The organization offers services such as funding for training, business consulting, and support for startups and workforce transformation. The site is built on TYPO3 CMS with a moderate technical infrastructure and uses standard web technologies including Bootstrap and jQuery. It employs a cookie consent mechanism and disables analytics tracking by default, reflecting a privacy-conscious approach. Security posture is adequate but could be improved by adding security headers and updating legacy libraries. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a medium-sized public sector entity.

S

servus.at

servus.at

49

servus.at is a small non-profit cultural and technological initiative based in Linz, Austria, focused on demystifying technology through artistic and cultural projects. It supports research projects, organizes the biennial 'Art Meets Radical Openness' festival, and operates an independent open source data center for its members, which include artists, educational institutions, and NGOs. The website is built on Drupal 7 with a moderate technical infrastructure including jQuery, Bootstrap, and Matomo analytics. It is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is good with HTTPS and privacy-aware analytics, but lacks explicit privacy and cookie policies and security headers. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is trustworthy and professional but could improve compliance and security best practices.

O

Openplace s.r.o.

nafialce.cz

64

Na Fialce is a small hospitality and cultural center located in Říčany near Prague, operated by Openplace s.r.o. The center caters to sports enthusiasts, film lovers, and fans of quality food and coffee, offering a variety of services including sports facilities, cultural events, cinema, and dining options. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. However, the absence of WHOIS data and explicit privacy and terms policies limits full trust verification. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and detailed security policies. Overall, the site is safe for general audiences and demonstrates a moderate level of digital maturity.

H

Handwerkskammer für München und Oberbayern

hwk-muenchen.de

68

The Handwerkskammer für München und Oberbayern is a well-established regional chamber of crafts serving approximately 78,000 member businesses. It provides a broad range of services including self-administration, advocacy, training, and consulting to support the craft sector in Munich and Upper Bavaria. The website reflects a strong market position as a key governmental and non-profit entity dedicated to the craft industry. The digital infrastructure is modern, leveraging a specialized CMS (ODAV), popular JavaScript libraries, and comprehensive analytics tools, ensuring good performance, accessibility, and user experience. Security measures are robust with HTTPS, CAPTCHA, and cookie consent mechanisms, although explicit security headers and published security policies could enhance the posture further. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience.

H

Handwerkskammer für München und Oberbayern

handwerkskammer.de

64

The website www.handwerkskammer.de represents a collective initiative of all 53 Handwerkskammern (craft chambers) in Germany, serving as a central platform to harmonize services, digital presence, and communication for the German handcraft sector. It provides resources and information related to training, business management, and digital transformation for its members and the public. The site is well-structured, professionally designed, and targets a broad audience including members, businesses, and the general public interested in the craft industry. Technically, the site uses a modern CMS (ODAV), integrates accessibility tools, and employs standard web technologies such as jQuery and Bootstrap. It also uses Google Analytics and Tag Manager for analytics and tracking, with a compliant cookie consent mechanism in place. Security-wise, the site enforces HTTPS, uses bot protection (Friendly Captcha), and manages cookie consent responsibly, though it lacks publicly visible security policies or incident response contacts. Overall, the site is trustworthy, secure, and compliant with GDPR, reflecting a mature digital presence for a governmental sector organization.

I

infoklick.ch, Kinder- und Jugendförderung Schweiz

infoklick.ch

46

infoklick.ch is a Swiss non-profit organization dedicated to promoting youth participation and improving information dissemination in the children and youth sector. With over 25 years of history, it holds a respected position in the Swiss youth promotion landscape. The website provides resources, partner networks, and community engagement opportunities targeting children and young people in Switzerland. Technically, the site is built on TYPO3 CMS, uses standard web technologies, and integrates both Google Analytics and Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and privacy-respecting analytics, but lacks advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy, professional, and content-rich, though improvements in privacy compliance and security policies are recommended.

H

HC SLOVAN BRATISLAVA, A.S.

hcslovan.sk

57

HC SLOVAN BRATISLAVA, A.S. operates a comprehensive official website dedicated to the Slovak ice hockey club HC Slovan Bratislava. The site serves as a central hub for fans and stakeholders, offering ticket sales, news updates, match schedules, player statistics, and merchandise. The business model focuses on fan engagement and community building within the Slovak and regional hockey markets. The website reflects a medium-sized organization with a consistent brand presence and strong local market positioning.

H

Handwerkskammer Schwerin

hwk-schwerin.de

59

Handwerkskammer Schwerin is a regional public institution dedicated to supporting the skilled crafts sector in Westmecklenburg, Germany. The organization focuses on vocational training, continuing education, business consulting, and support services for craftsmen and enterprises. The website serves as a comprehensive portal for apprentices, businesses, and the general public, offering information on courses, legal advice, and funding opportunities. The institution holds a strong market position as an authoritative chamber of skilled crafts with a clear regional focus. Technically, the website is built on the ODAV Content Management System with modern web technologies such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. The site employs HTTPS and a cookie consent manager to comply with privacy regulations. Performance is moderate with well-structured content and clear navigation, supporting a positive user experience. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with granular user controls. However, explicit security headers are not evident, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's CMS and business purpose, indicating legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence for a public institution. It effectively serves its target audience with relevant content and services while maintaining a good security posture. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust.

H

Handwerkskammer Ostmecklenburg-Vorpommern

hwk-omv.de

68

Handwerkskammer Ostmecklenburg-Vorpommern is a regional government-affiliated chamber serving the handcraft sector in the Ostmecklenburg-Vorpommern region of Germany. The organization provides a broad range of services including vocational training, continuing education, business consulting, and technical advice to handcraft businesses, apprentices, and professionals. The website reflects a well-structured and professional digital presence with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the ODAV Content Management System and leverages modern web technologies such as jQuery and Bootstrap. It integrates accessibility tools like Eye-Able and uses a self-hosted Matomo analytics platform, indicating a focus on privacy and user experience. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the website enforces HTTPS and employs CAPTCHA for form protection. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site lacks a published security policy or incident response contact, which could be improved. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its business and community role with minimal security risks and good technical implementation.

G

Grad Zagreb

zagreb.hr

54

Grad Zagreb is the official governmental entity representing the City of Zagreb, Croatia. The website serves as a comprehensive portal for residents, businesses, and visitors, providing access to city news, administrative information, public services, and digital resources across multiple sectors including education, culture, transportation, social welfare, and urban planning. The site is positioned as the authoritative source for municipal governance and citizen engagement in Zagreb. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. It integrates Google Analytics for traffic analysis and Kraken Optimize for performance enhancements. The site is mobile-optimized and features clear navigation structures, multi-level menus, and accessibility considerations. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure policy was found. The WHOIS data confirms the domain's legitimacy and consistency with the official city government entity. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital platform for the City of Zagreb. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen user trust and security posture.

S

Serbia | E-Commerce For All

ecommerce4all.rs

41

The ecommerce4all.rs website serves as a regional informational and resource platform focused on e-commerce development for Serbia and other CEFTA member countries. It provides modules covering e-commerce data, regulations, success stories, payment systems, delivery, and a regional trustmark badge. The platform targets stakeholders interested in e-commerce growth and regulatory compliance within the CEFTA region. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Google Analytics, and GDPR cookie compliance, indicating a moderate level of digital maturity. The design is professional and mobile-optimized, with good SEO practices implemented. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and DNSSEC. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the domain registration data aligns well with the website's regional focus and business purpose, supporting legitimacy. The site does not contain any adult or questionable content and is safe for general audiences.

B

Bosnia and Herzegovina | E-Commerce For All

ecommerce4all.ba

63

The website ecommerce4all.ba serves as a regional informational platform focused on e-commerce development and data for Bosnia and Herzegovina within the CEFTA region. It provides modules covering e-commerce data, regulations, success stories, e-payment, delivery, and a regional trustmark badge. The platform targets stakeholders interested in e-commerce growth and regulatory frameworks in the CEFTA member countries. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, GDPR cookie compliance, and Mailerlite for newsletter management. The design is professional and mobile-optimized, with good SEO practices implemented. Security posture is adequate with HTTPS enabled and secure form handling, but lacks explicit security headers and published privacy or terms of service pages. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and regional partner links. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and expanding direct contact information.

E

E-Commerce For All

ecommerce4all.eu

62

E-commerce for all is a regional resource and information platform focused on key aspects of e-commerce for CEFTA member countries. It provides aggregated e-commerce data, market insights, and readiness indicators tailored to the CEFTA region. The platform serves as an information hub for stakeholders interested in e-commerce development within these countries, offering multilingual support and links to country-specific partner sites. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and GDPR compliance plugins. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit privacy policy, terms of service, and incident response information. The domain registration is consistent and legitimate, registered through a reputable registrar without privacy protection. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

U

Universitat Politècnica de Catalunya - BarcelonaTech

upc.edu

11

The Universitat Politècnica de Catalunya - BarcelonaTech (UPC) is a prominent public university specializing in engineering, architecture, and technology education and research. The website serves a broad audience including prospective and current students, researchers, academic staff, and industry partners. It offers comprehensive information on undergraduate, master's, doctoral, and continuing education programs, as well as research and innovation services. The university holds a strong market position in Catalonia and Spain with international recognition and certifications such as HR Excellence in Research. Technically, the website is built on the Plone CMS platform and employs modern web technologies including Usercentrics for consent management, Google Analytics, Microsoft Clarity for analytics, and Bootstrap for responsive design. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the exact queried domain 'www.upc.edu' was not found, which is unusual but likely due to querying the subdomain rather than the root domain. Despite this, the website's legitimacy is supported by consistent branding, official social media presence, and comprehensive institutional content. Privacy policies and cookie consent mechanisms indicate GDPR compliance. Overall, the website is professional, secure, and trustworthy, serving as a reliable digital presence for the university. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.

Elmont-invest s.r.o. is a Czech Republic based small enterprise specializing in the manufacture and installation of electrical equipment including charging stations for e-bikes, photovoltaic switchboards, and smart home automation. The company maintains a professional web presence built on Joomla CMS with modern frontend technologies and integrates cookie consent mechanisms to comply with GDPR. Their market position is regional with a focus on energy and electrical services, supported by clear contact information and active social media channels. Technically, the website is moderately optimized with good mobile responsiveness and basic SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear trustworthy. Strategic recommendations include improving security headers, publishing privacy and security policies, and verifying domain registration status to enhance trust and compliance.

B

Beat Games

beatsaber.com

63

Beat Saber is a well-established VR rhythm game developed by Beat Games, founded in 2017. The website serves as a comprehensive platform for promoting the game, offering music packs, original soundtracks, and directing users to purchase options across major VR and gaming platforms such as Steam, Meta Quest Store, and PlayStation Store. The target audience primarily consists of VR gamers and music game enthusiasts. The business model focuses on digital sales and downloadable content, supported by a strong social media presence and multiple industry awards that reinforce its market leadership. Technically, the website employs modern web technologies including Bootstrap for responsive design, Typekit for fonts, and HTML5 video elements for multimedia content. Hosting is indicated by Facebook DNS servers, suggesting professional infrastructure. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS (implied by external store links) and does not expose sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are areas for enhancement. The WHOIS data is consistent and trustworthy, with domain registration dating back to 2017, aligning with the company's founding and product timeline. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

N

Nemzeti Foglalkoztatási Szolgálat

munka.hu

49

The Nemzeti Foglalkoztatási Szolgálat website serves as the official Hungarian National Employment Service portal, providing comprehensive employment-related information, job portals, and government labor market programs. It targets Hungarian job seekers, employers, and public sector stakeholders, operating under the Ministry of National Economy. The site leverages modern frontend technologies such as Vue.js and Bootstrap, delivering a good user experience with responsive design and clear navigation. However, it lacks privacy and cookie policies, contact information, and common security headers, which are important for compliance and trust. No blocking or WAF mechanisms were detected, and the domain is longstanding and consistent with government use.

A

Agencija za mobilnost i programe EU-a

mobilnost.hr

57

Agencija za mobilnost i programe EU-a (AMPEU) is a Croatian government agency dedicated to managing and promoting European Union mobility and educational programs such as Erasmus+, European Solidarity Corps, Horizon Europe, and EURAXESS. The agency serves citizens, organizations, students, researchers, and volunteers by facilitating access to EU funding and supporting project implementation. It holds a strong market position as the national contact point for these programs in Croatia, providing comprehensive services including information dissemination, application support, and event organization. Technically, the website is built on Craft CMS with modern frontend technologies including Bootstrap and jQuery. It is hosted by a Croatian registrar and hosting provider, MadNET d.o.o., ensuring local infrastructure alignment. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured navigation. Google Analytics is used for user tracking with a clear cookie consent mechanism in place. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements CSRF protection on forms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy and incident response contact page, which could enhance transparency and preparedness. Overall, AMPEU's website demonstrates a high level of professionalism, compliance with GDPR, and trustworthiness. It effectively communicates its mission and services to its target audience with excellent content quality and user experience. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further strengthen security posture and stakeholder confidence.

O

Obchodné centrum Zemplín

oczemplin.sk

49

Obchodné centrum Zemplín is a regional shopping center located in Michalovce, Slovakia, serving a broad local population with retail shops, dining options, and leasing services. The website reflects a mature business with a clear market position and a focus on providing information about tenants, promotions, and leasing opportunities. Technically, the site uses standard web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics and Smartlook. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though it lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with a privacy policy and cookie banner in Slovak language. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

Olive pizza restaurant

pizzaolive.sk

48

Olive Pizza is a Slovak hospitality business operating multiple restaurant locations specializing in Italian and Slovak cuisine, including pizza, cafe, and brunch services. The website presents a professional and consistent brand image targeting local customers in Slovakia. Technically, the site uses a Bootstrap-based responsive design with common JavaScript libraries and Google reCAPTCHA for form protection. Security posture is moderate with HTTPS enabled and privacy compliance evident through cookie consent and GDPR policies, but the use of an outdated jQuery version and lack of security headers present areas for improvement. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

A

Adafruit Industries

adafruit.com

69

Adafruit Industries operates a professional e-commerce website specializing in unique and fun DIY electronics and kits. The company targets hobbyists, educators, and makers with a broad range of products including Arduino boards, sensors, LEDs, Raspberry Pi accessories, and educational kits. The website is well-branded and positioned as a niche leader in the maker community with a strong focus on educational content and community engagement. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Zencart for e-commerce functionality, providing a responsive and accessible user experience. Security posture is solid with HTTPS enabled and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the provided content. Overall, the site is trustworthy and professional, but WHOIS data is unavailable, which slightly reduces trustworthiness from a domain registration perspective.

P

PRIMOSPORT

shop-primosport.de

53

Primosport operates an e-commerce platform focused on providing team sports equipment, including football, handball, and volleyball products, primarily targeting sports clubs and athletes in Germany. The website branding and content are consistent with a retail business model specializing in sports gear with custom team shops. Technically, the site uses common web technologies such as Google Tag Manager for analytics and Cloudflare for DNS services, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security practices. The security posture is basic, with no detected WAF or blocking mechanisms, but also no advanced security measures clearly implemented. Overall, the site is functional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

S

Stadt Neustadt bei Coburg

neustadt-bei-coburg.de

57

The website www.neustadt-bei-coburg.de serves as the official municipal portal for the city of Neustadt bei Coburg in Germany. It provides comprehensive information about local government services, community life, cultural events, economic development, and citizen resources. The site targets residents, visitors, and local businesses, offering structured navigation and relevant content to support civic engagement and municipal transparency. The business model is that of a government entity focused on public service delivery. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap, FontAwesome, and OpenLayers for maps. It is hosted by netcup GmbH, as inferred from the nameservers. The site demonstrates good mobile optimization, accessibility features, and moderate performance. SEO practices are basic but functional. Analytics are handled via Matomo with a clear cookie consent mechanism, reflecting a commitment to privacy compliance. From a security perspective, the site enforces HTTPS and includes cookie consent banners, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. No WAF or blocking mechanisms interfere with content access. Overall, the website presents a professional, trustworthy, and privacy-conscious municipal portal with room for improvement in security headers and incident response transparency. The risk profile is low, with no critical issues identified.

U

US Federal Contractor Registration (USFCR)

usfcr.com

62

US Federal Contractor Registration (USFCR) is a specialized service provider focused on assisting businesses, nonprofits, and government agencies with federal contracting registrations, including SAM registrations and SBA set-aside certifications. Established in 2009, USFCR has completed over 300,000 SAM registrations, positioning itself as a trusted partner in the federal contracting space. Their service offerings include registration facilitation, compliance monitoring, proposal writing consulting, and vendor verification programs, targeting a broad audience from small to large entities seeking federal contracts. Technically, the website employs a modern technology stack including Bootstrap, FontAwesome, Google reCaptcha, and various analytics and advertising pixels such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted on DigitalOcean and built using HubSpot CMS components, indicating a mature digital infrastructure. The site is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility features. From a security perspective, the site uses HTTPS and implements reCaptcha for form security, but lacks DNSSEC and explicit security headers such as Content-Security-Policy and X-Frame-Options. No privacy or cookie policies were found, representing a compliance gap especially regarding GDPR. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, supporting the business credibility. Overall, USFCR presents a professional and trustworthy online presence with solid business credibility and technical implementation. However, it should improve privacy compliance and security hardening to enhance user trust and regulatory adherence.

The Leibniz Institute for Baltic Sea Research Warnemünde (IOW) is a reputable non-university research institute focused on interdisciplinary marine research, particularly the Baltic Sea ecosystems. It operates under the Leibniz Association umbrella and offers research, data services, and educational activities. The website reflects a medium-sized academic institution with a clear focus on scientific excellence and community engagement. Technically, the site uses a modern CMS (Contao), Bootstrap for responsive design, and Matomo for privacy-conscious analytics. The site is accessible, well-structured, and mobile-optimized, though some SEO and accessibility features could be enhanced. Security posture is solid with HTTPS and email obfuscation but lacks security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the domain registration and WHOIS data align well with the institute's identity, supporting legitimacy and trustworthiness.

U

US Federal Contractor Registration (USFCR)

uscontractorregistration.com

65

US Federal Contractor Registration (USFCR) is a specialized service provider focused on assisting businesses, nonprofits, and government agencies with federal registrations and contracting services. Established in 2009, USFCR has positioned itself as a trusted partner in the federal sector, having completed over 300,000 SAM registrations. Their key offerings include SAM registration and renewal, SBA set-aside program qualifications, federal proposal writing, vendor management, and grant writing services. The company targets a broad audience ranging from small to large organizations seeking to engage with federal contracts and grants. Technically, the website is built on a modern stack leveraging Bootstrap, jQuery, HubSpot CMS, and integrates multiple analytics and marketing tools such as Google Analytics, Bing Ads, Facebook Pixel, and Trustpilot. Hosting is provided by DigitalOcean, and the site employs HTTPS with appropriate security headers, Google reCaptcha for form protection, and a client portal for registered users. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. From a security perspective, USFCR maintains a solid posture with encrypted communications, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact limits transparency in security governance. The WHOIS data corroborates the business legitimacy with a long-standing domain registration and no privacy protection, aligning with the company's stated history. Overall, USFCR presents a professional, trustworthy, and well-maintained online presence suitable for its government contracting niche. Strategic improvements in security transparency and accessibility would further enhance its credibility and compliance posture.

The Long Beach City Prosecutor Doug Haubert website serves as the official online presence for the city prosecutor's office responsible for prosecuting adult misdemeanor crimes within Long Beach, California. The site provides comprehensive information about prosecutorial services, community programs, diversion initiatives, and resources for victims and residents. It targets local residents and community stakeholders, positioning itself as a trusted government service provider. The business model is public service under the government sector, with a medium-sized operational scope and a founding date consistent with the domain registration in 2011. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Language Translator, hosted by GoDaddy. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. SEO practices are adequately implemented, though accessibility features are basic. The presence of multiple external domains, some suspicious, suggests potential security review is warranted. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, enhancing business credibility. No incident response or vulnerability disclosure information is available, which could be improved. Overall, the website is functional, professional, and trustworthy for its intended government service role but would benefit from enhanced security measures and privacy compliance to strengthen its posture and user trust.

Q

Queryly

queryly.com

55

Queryly is a small technology company specializing in cloud-based search and AI solutions tailored for digital media publishers. Their platform enhances content discovery and user engagement by leveraging semantic search, AI-powered chatbots, and recommendation engines. The company has been operational since 2011 and positions itself as an innovator focused exclusively on the publishing sector. The website reflects a professional and consistent brand image with clear business focus and contact information. Technically, the website uses a custom CMS with a tech stack including jQuery, Bootstrap, Google Tag Manager, Google Ads, and Mixpanel analytics. DNS is managed via Cloudflare, but no advanced security headers are detected. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and domain registration protections but lacks important security headers and cookie consent mechanisms, which lowers its privacy compliance score. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable but improvable security posture. Overall, Queryly presents a credible and professional online presence with room for improvement in security best practices and privacy compliance to enhance trust and regulatory adherence.

K

KERA

kera.org

65

KERA is a public broadcasting organization serving North Texas, affiliated with PBS and NPR, providing television and radio programming focused on news, politics, arts, and culture. The website targets a broad audience in the North Texas region and beyond, delivering trusted public media content. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Google Tag Manager, and various analytics tools. The site enforces HTTPS and uses asynchronous loading for performance optimization. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the affiliation with reputable public media organizations supports legitimacy. Overall, the site is professional and trustworthy but could improve transparency on privacy and security policies.

A

Ariete

ariete.store

61

Ariete Store is the official Italian e-commerce platform for Ariete, a brand specializing in small household appliances. The website offers a variety of products for kitchen, cleaning, and coffee preparation, targeting Italian consumers. The business model is retail-focused with an emphasis on direct online sales and customer service via phone. The site integrates modern marketing and analytics tools, including Google Tag Manager, Cookiebot for consent management, and third-party review widgets, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies are not explicitly visible. The absence of a visible privacy policy and terms of service pages is a notable gap in compliance documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website w3c.br represents the São Paulo chapter of the World Wide Web Consortium (W3C), a globally recognized non-profit organization dedicated to developing and promoting web standards. The site serves as a community hub providing information on web standards, accessibility initiatives, and related publications primarily targeting web developers, technology professionals, and accessibility advocates in Brazil. It maintains a strong affiliation with Brazilian internet governance bodies such as NIC.br and CEWEB, reinforcing its legitimacy and local presence. Technically, the website is built on WordPress CMS, leveraging modern front-end technologies including Bootstrap, jQuery, and FontAwesome. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of structured data (JSON-LD) and Open Graph metadata enhances search engine visibility and social media integration. From a security perspective, the site uses HTTPS (implied by domain and best practices), but lacks explicit security headers and published security policies or incident response contacts. No cookie consent mechanism was detected, which may impact privacy compliance. The domain registration data is consistent and legitimate, with no privacy protection masking ownership, and the domain is registered through NIC.br with an expiry in 2025. Overall, the website is professional, trustworthy, and well-positioned within its niche. However, improvements in security headers, privacy compliance mechanisms, and incident response transparency would enhance its security posture and regulatory adherence.

IX.br is a critical Brazilian Internet Exchange Point operated under the NIC.br umbrella, facilitating direct interconnection among Autonomous Systems to improve Internet traffic efficiency, quality, and resilience in Brazil. The website reflects a mature organization with strong ties to national Internet governance bodies such as NIC.br and CGI.br. The platform offers services including traffic aggregation, educational events, and support for network operators. Technically, the website employs modern frameworks like Bootstrap and jQuery, and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. Overall, IX.br presents a professional and trustworthy digital presence aligned with its role in Brazil's Internet infrastructure.

C

Centro de Estudos sobre Tecnologias Web (Ceweb.br) - Departamento do NIC.br

ceweb.br

58

Ceweb.br is a Brazilian non-profit research and policy support entity operating under NIC.br, focused on advancing web technologies, accessibility, and open data initiatives within Brazil. The website serves as a hub for community engagement, educational resources, and project dissemination related to web standards and digital inclusion. It holds a strong market position as a trusted institution affiliated with NIC.br and CGI.br, targeting Brazilian web technology stakeholders and policymakers. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and secure form handling, though it lacks explicit security policy and incident response disclosures. Overall, the site is professional, trustworthy, and compliant with privacy regulations, including GDPR. Recommendations include publishing security policies and enhancing security headers to further strengthen the security posture.

T

Tech-Access Canada

tech-access.ca

47

Tech-Access Canada operates as a national network of 70 Technology Access Centres (TACs) across Canada, providing critical support to entrepreneurs and businesses by facilitating access to emerging technologies and applied research. The organization plays a pivotal role in driving innovation and business growth nationwide, positioning itself as a key enabler in the Canadian technology ecosystem. Their services include technology access, industry collaboration, and innovation facilitation, targeting primarily Canadian businesses and industry stakeholders. The website reflects a medium-sized, well-established non-profit entity founded in 2016, with a clear focus on supporting technology-driven economic development. From a technical perspective, the website is built on WordPress CMS with a modern but somewhat dated technology stack including jQuery 1.11.3 and several popular plugins such as RevSlider and Modern Events Calendar Lite. The site is mobile optimized, accessible, and incorporates SEO best practices. Analytics and tracking are implemented via Google Analytics, Google Tag Manager, and Clicky Analytics, with basic privacy compliance mechanisms including cookie consent and privacy policies. Security posture is generally good with HTTPS enforced and domain transfer protections in place. However, there are areas for improvement such as enabling DNSSEC, upgrading outdated JavaScript libraries, and implementing additional security headers like Content Security Policy. No explicit security policy or incident response information is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy digital presence aligned with its mission. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include technical security enhancements, improved transparency on security policies, and continued adherence to privacy regulations to maintain and strengthen stakeholder trust.

A

Ariete

ariete.net

48

Ariete is an Italian brand specializing in small household and kitchen appliances, targeting general consumers seeking Italian-designed products for home use. The website presents a professional retail and e-commerce platform with a clear focus on product offerings and customer service. The technical infrastructure leverages modern web technologies including Bootstrap, Google Tag Manager, Cookiebot for consent management, and third-party services for chat and search optimization, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism, though the absence of explicit security policies and vulnerability disclosures suggests room for improvement. The lack of WHOIS registration data reduces domain trustworthiness, but the website content and technology usage support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with cookie regulations, but would benefit from enhanced transparency in privacy and security documentation.

B

BBC Studios

bbcstudios.com

65

BBC Studios is a globally recognized media company specializing in the creation and distribution of high-quality content and iconic brands. The website reflects a mature, enterprise-level organization with a strong focus on storytelling, creative talent support, and global media streaming. The company maintains a professional online presence with comprehensive content, clear navigation, and consistent branding. Technically, the site uses modern web technologies including AngularJS, Bootstrap, and integrates advanced consent management tools to comply with GDPR regulations. Security posture is strong with HTTPS enforced and content security policies in place, although additional security headers could enhance protection. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the brand's stature and website quality. Privacy and cookie policies are clearly presented with active consent mechanisms. Overall, the site demonstrates a high level of digital maturity and business credibility.

B

BioBigBox

biobigbox.com

55

BioBigBox operates as a HIPAA compliant digital data management platform, targeting healthcare professionals and organizations requiring secure storage, sharing, and discussion of sensitive digital data. The company appears to be a small-sized entity founded in 2014, with a focused niche in healthcare technology. The website is built using modern front-end technologies including Angular 13 and Bootstrap, hosted on AWS infrastructure, indicating a moderate level of digital maturity. The platform integrates multiple related partner services, enhancing its ecosystem and service offerings. Security posture is moderate with HTTPS implied, but lacks explicit security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic with privacy and terms policies present but no cookie consent mechanism or GDPR explicit indicators. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

W

Wild Media GmbH

wildmedia.eu

56

Wild Media GmbH is a German-based full-service marketing and advertising agency located in Bad Kissingen. The company offers a wide range of services including marketing, web design, print, film production, audio, photography, and event entertainment. Their website is professionally designed using Joomla CMS and incorporates modern web technologies and frameworks such as Bootstrap, Font Awesome, and LayerSlider. The site is mobile optimized and includes GDPR-compliant cookie consent via Usercentrics. Contact information is clearly provided, enhancing business credibility. Security posture is adequate with HTTPS enabled, though some security headers and policies could be improved. Overall, the website reflects a legitimate and professional small business with a solid digital presence.

Unsere Kirche is a German evangelical newspaper providing print and digital content focused on church news, reports, and community services. The website serves as a portal for subscriptions, digital e-paper access, advertising, and community engagement, targeting the evangelical Christian community in Germany. It partners with other evangelical publishers to expand its online content offerings. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Security measures include Google reCaptcha v3 for form protection and anonymized IP tracking in analytics, but lack explicit HTTP security headers and detailed security policies. The WHOIS data is incomplete and malformed, limiting domain trust verification, but the professional presentation and clear contact paths support legitimacy. Overall, the site is well-structured and compliant with GDPR, though improvements in security headers and transparency are recommended.

E

Evangelisches Medienhaus GmbH

digendo.de

60

digendo.de is a German-language digital portal platform operated by Evangelisches Medienhaus GmbH, targeting primarily German-speaking users such as municipalities or community organizations. The platform offers subscription-based access to digital services with a focus on secure user login and account management. The website is professionally designed with consistent branding and provides essential legal and subscription information through linked partner domains. Technically, the site uses modern JavaScript frameworks like Vue.js and Bootstrap for responsive design, delivering a moderate performance experience. Security posture is adequate with HTTPS usage and secure password input features, but lacks explicit security headers and cookie consent mechanisms. No contact information or incident response details are directly available on the login page, which limits transparency. Overall, the site is safe, business-oriented, and trustworthy but could improve in privacy compliance and security best practices.

F

Foreningen kommunal informasjonssikkerhet – KiNS

kins.no

69

Foreningen kommunal informasjonssikkerhet – KiNS is a Norwegian non-profit association dedicated to enhancing information security within municipalities and county municipalities. With over 370 members including public sector entities and companies, KiNS offers training, webinars, tools, and networking opportunities to strengthen cybersecurity and privacy practices in local government. The website reflects a mature organization with strong partnerships with official Norwegian government agencies, indicating a solid market position in the public sector security domain. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Plausible Analytics for privacy-conscious tracking, and Cookie-Script for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. While no CMS or hosting provider is explicitly identified, the technical implementation is robust and well-maintained. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to registry privacy policies for .no domains and does not indicate suspicious activity. Overall, the security posture is good but could be improved with additional transparency and security best practices. The overall risk assessment is low, with the site demonstrating high professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. Strategic recommendations include publishing a security policy, adding incident response contacts, implementing security.txt, and enhancing HTTP security headers to further strengthen the security posture and trust.

E

Evangelische Kirche von Westfalen

kirchenrecht-westfalen.de

62

The website kirchenrecht-westfalen.de serves as an official online legal reference system for the Evangelical Church of Westphalia, providing comprehensive access to church laws, ordinances, and related legal documents. It targets church officials, legal professionals, and members interested in church law. The platform offers systematic navigation, search functionality, and downloadable e-book formats, positioning itself as a trusted resource within its niche. Technically, the site employs Bootstrap for responsive design, Font Awesome for icons, and Matomo (Piwik) for analytics, indicating a modern and privacy-conscious infrastructure. Hosting is managed by SchlundTech, a known German hosting provider. The site is mobile-optimized with good navigation clarity and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting GDPR awareness. However, no explicit privacy policy, terms of service, or security headers were detected, suggesting areas for compliance and security enhancement. No vulnerabilities or suspicious content were found, and the domain registration aligns well with the church's identity, supporting legitimacy. Overall, the site is a professional, secure, and trustworthy resource for church law, with recommendations to improve privacy disclosures and security headers to enhance compliance and user trust.

okaJ is a small non-profit youth organization based in Berlin, Germany, focused on providing an open, catholic, and active community for young people. The organization supports youth groups within the church, offers networking opportunities, spiritual programs, and volunteer engagement. The website reflects a professional and consistent brand image targeting youth and youth groups in the Berlin area. Technically, the site is built on WordPress with common plugins and uses Google reCAPTCHA for form security. While the site is well designed and user-friendly, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain and website appear legitimate and trustworthy for their stated purpose.

Digitale Hochschule NRW (DH.NRW) is a collaborative initiative focused on advancing digital transformation within higher education institutions in the German state of North Rhine-Westphalia. The platform supports cooperation among universities, providing shared digital infrastructure, research support, and services such as a centralized GitLab instance (git.nrw), high-performance computing resources, and open-source AI projects. The website reflects a well-established regional educational consortium with official backing from universities and the Ministry of Culture and Science of NRW. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery. It demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no cookie consent mechanism is present, which are areas for improvement. From a security perspective, the site maintains a solid posture with encrypted connections and no signs of malicious content or vulnerabilities. The WHOIS data is privacy protected, which is common for public sector domains, and the domain's legitimacy is supported by its official university partnerships and government funding. No incident response or vulnerability disclosure policies are published, indicating potential gaps in transparency. Overall, DH.NRW presents a trustworthy, professional, and secure digital presence for a public educational consortium. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security policies, and enhancing accessibility to further strengthen compliance and user trust.

team tietge is a small full service advertising agency based in Offenburg, Germany, specializing in digital and analog corporate communication. The website presents a professional business profile targeting companies seeking comprehensive advertising and communication services. Technically, the site is built on Silverstripe CMS with Bootstrap framework, offering a modern and responsive design with good SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with no detected security headers or explicit SSL configuration details. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but lacks critical trust and security indicators.