High-risk security reports

F

FAUN-Environnement

faun-environnement.fr

49

FAUN-Environnement is a French company specializing in innovative waste collection equipment and related services. The company offers a range of products including B.O.M, Citadines, Balayeuses, and Basculeurs, alongside services such as equipment rental, connected maintenance systems, and data management solutions. The website reflects a medium-sized enterprise with a solid market position in the transportation and manufacturing sectors focused on environmental solutions. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and third-party tools like Google Analytics and Tag Manager for tracking. The site is multilingual, supporting French and English, and demonstrates good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages detected. Overall, the website is professional and trustworthy, though improvements in security and privacy transparency are recommended.

E

Ethical Trading Initiative

ethicaltrade.org

48

The Ethical Trading Initiative (ETI) is a well-established non-profit alliance comprising trade unions, NGOs, and businesses focused on promoting ethical trade and human rights in global supply chains. The website positions ETI as a leading organization in this space, offering membership, training, transparency frameworks, and resources to support responsible business practices. The presence of major retail and NGO members underscores its market position and credibility. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Analytics with IP anonymization, CookiesJSR for cookie consent management, and Vimeo for video content. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers are missing which could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data due to privacy protection is justified given the non-profit nature of the organization. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing direct security contact information to strengthen trust and compliance.

E

EU Travel Tech

eutraveltech.eu

36

EU Travel Tech is a European travel technology organization that serves as a collaborative platform for travel tech companies and stakeholders. The organization focuses on industry advocacy, policy engagement, research, and hosting events to advance travel technology in Europe. The website reflects a medium-sized organization based in Belgium, established around 2019, with a clear focus on the transportation and technology sectors. The site features membership logos of prominent travel companies, indicating a strong market position within the travel tech industry. Technically, the website is built on WordPress with modern plugins such as All in One SEO and uses Google Analytics for tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but there is a lack of advanced security headers and no visible incident response or vulnerability disclosure policies. Overall, the security posture is solid but could be improved by adding security headers and formalizing incident response contacts. The website is professional, trustworthy, and compliant with GDPR basics, making it a credible source for its target audience. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

A

Aktionsbündnis Tourismus Vielfalt

tourismusvielfalt.de

42

Aktionsbündnis Tourismus Vielfalt is a German non-profit coalition of over 30 tourism-related associations representing diverse sectors of the tourism industry. The website serves as a platform for political advocacy, awareness campaigns, and dissemination of position papers to support the tourism sector. Technically, the site is built on WordPress with the Avada theme and uses modern plugins such as Slider Revolution and Borlabs Cookie for cookie consent management. The site is well-structured, mobile-optimized, and uses HTTPS with a good security posture, though some security headers could be improved. Contact is primarily via email, with no phone or physical address prominently listed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

I

impulse4travel

impulse4travel.de

40

Impulse4travel is a German initiative focused on promoting sustainable development in tourism, mobility, and living spaces. Founded in 2020, the platform aims to provide new impulses for the future of tourism by 2025. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. Hosting is provided by Schlundtech, a German hosting provider, which aligns with the website's regional focus. Technically, the site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled and good SSL configuration; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit contact information or social media presence was found in the analyzed content. Overall, the website presents a professional and focused business presence but would benefit from enhanced security and compliance measures.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business-related content, metadata, or structured data is present. The page is a default error display from the Chromium browser, not a functional website. Consequently, no business overview, market position, or services can be identified. The technical infrastructure is limited to Chromium's embedded scripts for error display, with no external hosting or CMS detected. Security posture is minimal, with no HTTPS or security headers evident. Privacy and compliance policies are absent, and no contact or incident response information is available. Overall, the site is non-functional and likely not a legitimate business presence.

The website the-heat-is-on.org currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. There is no accessible content, metadata, or business information available on the site. The domain WHOIS data is suspicious, showing a creation date in the future (September 2025), which is inconsistent with the current date and raises concerns about legitimacy. The site uses SiteGround hosting as inferred from the nameservers but lacks DNSSEC and any visible security headers or SSL/TLS details. No privacy, cookie, or terms of service policies are present, nor is there any contact information or forms for user interaction. Overall, the website appears to be either misconfigured, under development, or intentionally blocked.

D

De Duurzame wijk

deduurzamewijk.nl

47

De Duurzame wijk is a Dutch community-focused platform dedicated to promoting sustainable neighborhood initiatives such as solar panels, clothing banks, and shared resources. The website serves as an informational hub to inspire and inform residents about practical steps and real stories contributing to a sustainable and livable future. The platform appears to be a small-scale, niche project launched recently in 2025, targeting local communities interested in energy and environmental sustainability. Technically, the site is built on WordPress with modern optimization plugins like WP Rocket and Yoast SEO, ensuring good performance and SEO readiness. The site uses HTTPS and implements structured data for enhanced search engine visibility. However, it lacks visible privacy, cookie, and security policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the site is well-designed and content-rich but would benefit from improved privacy and security transparency to enhance trust and compliance.

EPSM is a well-established non-profit trade association representing European Payment Service Providers for Merchants within the SEPA region. The organization serves as a platform for its 65+ members across multiple countries to exchange information, influence policy, and stay updated on regulatory developments. The website reflects a professional and consistent brand image, targeting industry stakeholders and payment service providers. Technically, the site uses common JavaScript libraries and CSS frameworks to deliver a responsive and visually appealing experience, though some modern security and privacy features are lacking. Security posture is moderate with no visible critical vulnerabilities but missing advanced security headers and incident response information. Overall, the site is trustworthy and credible but could improve privacy compliance and security transparency.

I

In2Retail

in2retail.nl

49

In2Retail is a small-sized Dutch company specializing in the deployment and operation of ATMs across several European countries including the Netherlands, Denmark, Ireland, Portugal, and Spain. Their business model focuses on providing cost-free ATM installations with full service contracts, supplemented by advertising opportunities on the ATM screens. The company positions itself as an Independent ATM Deployer, catering primarily to businesses and locations seeking to offer ATM services and advertising to their customers. The website is professionally designed using Joomla CMS and incorporates common web technologies such as jQuery and Bootstrap. It supports multiple languages and provides clear contact information, enhancing user accessibility and trust. From a security perspective, the site uses HTTPS and DNSSEC, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a privacy policy and terms of service, though no cookie consent mechanism is present. Overall, the website demonstrates a good level of digital maturity with room for improvement in security and privacy compliance.

The website at radiustheme.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. As a result, no business information, contact details, or policy documents are available for review. The domain is registered with GoDaddy.com, LLC since 2015 and uses SiteGround name servers, indicating a legitimate registration and hosting setup. However, the lack of DNSSEC and absence of security headers suggest room for improvement in domain and web security configurations. The website's technical infrastructure appears basic with no detectable scripts or analytics, and the content quality is poor due to the access restriction. Overall, the site lacks transparency and publicly available information, which limits trust and business credibility assessments.

Z

Zifera

zifera.io

47

Zifera is a small, Netherlands-based company specializing in green web development and digital carbon footprint analytics. Their business model focuses on providing sustainable web and e-commerce development services alongside a SaaS application that helps organizations monitor, optimize, and compensate their digital carbon emissions. The company is positioned as a niche player with a strong emphasis on environmental sustainability and digital responsibility, supported by client testimonials and media features. Technically, the website is built using modern frameworks such as Astro, hosted with Cloudflare DNS services, and employs privacy-friendly analytics via Simple Analytics. The site demonstrates excellent design quality, mobile responsiveness, and SEO optimization, reflecting a mature digital presence for a small company. However, some security best practices like DNSSEC and security headers are not yet implemented. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. The absence of direct contact emails or phone numbers slightly reduces business credibility. Overall, Zifera presents a trustworthy and professional online presence with a clear business focus on sustainability in technology. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their security posture and compliance standing.

The website www.people.inc is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires human verification via Turnstile captcha. This security mechanism blocks access to the actual website content, preventing extraction of business, contact, or compliance information. The visible page only displays a generic 'Just a moment...' message with no metadata, forms, or business descriptions. The technical infrastructure includes Cloudflare protection but lacks visible security headers or SSL details in the provided data. Due to the content block, the security posture cannot be fully assessed, and no privacy or cookie policies are detectable. Overall, the site appears to be protected but lacks publicly accessible information, resulting in a low trust and content quality score.

C

creditPass GmbH

creditpass.de

43

creditPass GmbH is a well-established German FinTech company specializing in payment security, risk management, and compliance solutions for business customers. Operating since 2003, it offers a modular platform connecting merchants with payment service providers, credit agencies, and identity providers. The company provides a broad range of services including credit checks, SEPA direct debit payment processing, Buy Now Pay Later modules, and cloud integration services. With over 1,500 customers and active participation in industry associations, creditPass holds a strong market position in the European FinTech sector. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, LayerSlider, and Contact Form 7, with Google reCAPTCHA v3 implemented for form security. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and performance could be made. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and a formal security policy or vulnerability disclosure page. Overall, creditPass demonstrates a mature digital presence with good business credibility and trust indicators. However, the absence of cookie consent mechanisms and explicit contact emails or phone numbers slightly reduce privacy compliance and user trust. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security.txt file, and enhancing contact transparency to improve user trust and compliance posture.

The website initiative-online-print.de is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. No business-related information, contact details, or compliance policies are available on the site. The domain WHOIS data is minimal, showing only the domain status as 'connect' and GoDaddy name servers, with no registrant or organizational details. This lack of transparency and accessibility severely limits the ability to assess the business or technical maturity of the site. Technically, the site includes only a Google Fonts stylesheet and no other detectable scripts or analytics. Security posture cannot be evaluated due to lack of data and blocked content. Overall, the site appears inactive or restricted, resulting in a low trust and credibility score.

The website ecommerce-europe.eu is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. This prevents analysis of the business, services, or compliance information. The domain is registered through GoDaddy.com, LLC, a reputable registrar, but no registrant details are available to verify the legitimacy or business claims. The lack of accessible content and metadata indicates either a misconfiguration or intentional access restriction. Technical infrastructure details are minimal, with no scripts, forms, or external links detected. Security posture cannot be assessed due to absence of HTTPS or security headers. Privacy and compliance policies are not found, and no contact information is available. Overall, the site is currently non-functional for public users, limiting any meaningful security or business analysis.

V

Verband Internet Reisevertrieb e.V. (VIR)

v-i-r.de

47

The Verband Internet Reisevertrieb e.V. (VIR) is a German industry association focused on advancing digital technologies in the tourism sector. It serves as a platform for companies and experts in digital tourism, advocating for members in media, politics, and consumer relations. The association emphasizes innovation, startup support, sustainability, and market research, positioning itself as a key player in the digital travel market in Germany. The website reflects a mature digital presence with comprehensive content, events, and partnerships that reinforce its industry leadership. Technically, the website is built on WordPress with modern plugins such as Elementor, Yoast SEO, and Borlabs Cookie for privacy compliance. It uses Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is hosted on kasserver.com and employs HTTPS with good SSL configuration. Performance and mobile optimization are adequate, though accessibility could be improved. From a security perspective, the site follows best practices with HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business claims, indicating legitimacy and trustworthiness. Overall, the site is professional, secure, and compliant with privacy norms, though it could enhance transparency by publishing privacy policies and security incident response information.

S

S&S Communities

sandscommunities.nl

45

S&S Communities is a well-established technology community company based in the Netherlands, providing a comprehensive learning platform, tech conferences, and community events targeted at software professionals and developers. The company operates under the legal entity NLJUG BV and has a strong market presence with over 12 years of experience. Their digital infrastructure is built on WordPress with Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. The domain WHOIS data shows inconsistencies with a future creation date, which warrants further verification. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

F

Flexpedia

flexpedia.nl

45

Flexpedia is a specialized HR and payroll service provider focused on flex employment solutions and backoffice support for Dutch temporary employment agencies (uitzendbureaus). The company positions itself as an expert in ET-regelingen and offers personalized, honest advice and smart HR solutions. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a mature digital presence. The technical infrastructure includes modern tracking and consent management tools such as Google Tag Manager and Cookiebot, ensuring compliance with cookie regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are absent. Overall, the website reflects a trustworthy and professional business with room for improvement in privacy and security transparency.

Z

Zifera

zifera.nl

47

Zifera is a small, Netherlands-based company specializing in green web development and digital carbon footprint analytics. Their services focus on helping organizations develop energy-efficient websites and applications, with additional offerings in e-commerce sustainability and digital carbon analytics. The company provides customized dashboards to monitor and optimize the carbon footprint of digital assets, positioning itself as a niche player in the sustainability technology sector. The website is professionally designed, mobile-optimized, and features clear navigation and relevant content targeted at businesses seeking sustainable digital solutions. Technically, the website leverages modern frameworks such as Astro and is hosted with Cloudflare DNS services. It employs privacy-friendly analytics via Simple Analytics, indicating a commitment to user privacy. The site performs well in terms of speed and accessibility, with good SEO practices evident. However, there is no detected cookie consent mechanism, which is a gap in privacy compliance given the use of analytics scripts. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, no explicit security headers or published security policies were found, and there is no visible incident response or vulnerability disclosure information. These gaps suggest room for improvement in formalizing security posture and transparency. Overall, Zifera's website reflects a credible and professional business with a strong focus on sustainability and technology. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing cookie consent, publishing security policies, adding security headers, and providing clear security incident contacts to enhance trust and compliance.

S

ShopClimb

shopclimb.com

48

ShopClimb is a small business specializing in developing Shopify apps aimed at helping Shopify store owners increase their revenue through trust-building and sales conversion tools. Their product suite includes apps like Trust Badge, Ultimate Product Icons, and Automatic Discounts Pro, targeting a broad range of Shopify merchants from startups to high-traffic stores. The website is built on WordPress using popular plugins such as WPBakery and Slider Revolution, and integrates Google Analytics and Zendesk for analytics and customer support respectively. The site is hosted behind Cloudflare DNS and uses HTTPS with a valid SSL certificate, ensuring secure communication. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy and cookie policies are not present, which is a compliance gap. Overall, the website presents a professional and trustworthy image with good content quality and user experience but lacks some critical privacy and security features.

The website at younet.network currently presents no accessible content beyond minimal HTML structure, indicating it is either inactive, parked, or blocked by security mechanisms. The lack of WHOIS data due to unsupported TLD further complicates trust and legitimacy assessments. No business or contact information is available, and no security or privacy policies are present. Technically, the site lacks modern web features, security headers, and HTTPS, resulting in a low security posture. Overall, the site appears non-operational or under development, with significant gaps in compliance and security readiness.

B

Babaweb

babaweb.fr

47

Babaweb is a French digital agency specializing in bespoke web and digital project development, including showcase websites, e-commerce platforms, virtual tours, and custom digital tools. The company targets businesses and professionals seeking tailored digital solutions, positioning itself as a niche player in the French market. The website is professionally designed, leveraging WordPress with Elementor and Yoast SEO, indicating a mature digital infrastructure. Integration of Google Analytics and Calendly shows a focus on analytics and client engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of public WHOIS data suggests privacy protection, common for small agencies, and no suspicious patterns were detected. Overall, Babaweb presents a trustworthy and professional online presence with good compliance and technical standards.

The website movieplayer.nl currently presents only a minimal placeholder page with no substantive content, metadata, or interactive elements. The domain is registered since 2002 with a reputable registrar, Internet Service Nederland B.V., but the lack of content suggests the site is inactive or under construction. There are no privacy, cookie, or terms of service policies, nor any contact or business information available. Technically, the site lacks detectable technologies, scripts, or security headers, and no HTTPS status is provided. This results in a very low digital maturity and security posture. The absence of content and policies also indicates poor compliance with privacy regulations such as GDPR. Overall, the site poses minimal risk but also offers no trust signals or business credibility.

The website taxatiemoduleonline.nl/admin/login serves as a secure login portal for an administrative module related to property or asset valuation services. Access is restricted exclusively to users with a PowerKraut Google Account, indicating a controlled and limited user base, likely internal staff or authorized partners. The site employs Tailwind CSS for styling and presents a minimalistic, functional design focused on authentication rather than marketing or public information. The domain is registered with a Dutch registrar and has been active since late 2020, consistent with a small or medium-sized enterprise operating in the Netherlands. From a technical perspective, the site uses modern CSS frameworks but lacks visible SEO metadata, structured data, or comprehensive accessibility features. There is no evidence of analytics or tracking scripts, which aligns with the site's restricted access nature. Security posture is moderate; while login is restricted to Google authentication, no security headers or explicit HTTPS enforcement details were found in the provided data. Privacy and cookie policies are absent, which is a compliance gap. Overall, the security posture is basic but functional for an internal admin portal. The lack of public-facing business information, contact details, and compliance documentation limits the site's transparency and trust signals. The domain registration data is consistent and legitimate, with no suspicious patterns detected. Strategic improvements should focus on adding security headers, privacy and cookie policies, and incident response information to enhance compliance and trust.

The website dtcmediainternet.nl currently presents no visible content, metadata, or business information, indicating it may be a placeholder or under construction. The domain is registered since 2013 with RootNet NOC B.V., a reputable Dutch registrar, and DNSSEC is enabled, which are positive indicators of domain legitimacy. However, the lack of any meaningful website content or contact details severely limits the ability to assess the business or its market position. Technically, no technologies, scripts, or security headers are detected, and no HTTPS status is available from the provided data. This results in a very low digital maturity and security posture. There are no privacy or cookie policies, no forms, and no contact information, which raises compliance and trust concerns. Overall, the website is not currently functional as a business or marketing platform.

P

Polflex b.v

polflexbv.nl

36

Polflex b.v is a Dutch employment agency specializing in staffing for technical, production, and cleaning sectors within the Netherlands. Founded in 2018, the company positions itself as a quality-focused matchmaker between employers and job seekers. The website is professionally designed using WordPress with Elementor and WooCommerce, featuring SEO optimization and a clear navigation structure. Contact information including email, phone, physical address, and social media links are prominently displayed, enhancing business credibility. The site includes a contact form protected by Google reCAPTCHA v2 to mitigate spam.

The website i-wise.net is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered since 2006 with Hosting Concepts B.V. d/b/a Registrar.eu and is not privacy protected, indicating some level of transparency in registration. However, the lack of accessible content prevents any detailed analysis of the business, its services, or its security posture. No metadata, scripts, or contact information are available, which severely limits the ability to assess technical maturity or compliance. The security posture cannot be evaluated due to absence of data, but the lack of DNSSEC and unknown SSL status suggest room for improvement. Overall, the site appears offline or restricted, resulting in a low trust and credibility score.

B

Boucles Drôme Ardèche

boucles-drome-ardeche.fr

35

Boucles Drôme Ardèche is a well-established regional cycling event organizer in France, hosting prestigious races such as the Faun Ardèche Classic and Faun Drôme Classic. The website serves as an information hub for participants, fans, and partners, showcasing event details, results, photos, and sponsor information. The business operates primarily through event promotion and sponsorship partnerships, targeting cycling enthusiasts and regional visitors. Technically, the site is built on WordPress with popular plugins and themes, hosted by OVH, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some security best practices observed, though lacking in security headers and dedicated security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and content-rich, but could improve in compliance and security transparency.

P

Ponooc

ponooc.vc

43

Ponooc is a small Amsterdam-based venture capital firm specializing in growth capital investments for start-ups and scale-ups in the sustainable energy and mobility sectors. The website indicates that Ponooc has merged with YARD ENERGY and continues operations as Move Energy, focusing on accelerating the energy transition in the Netherlands. The site provides professional content including news updates, investment announcements, and contact information, targeting entrepreneurs and investors in the green energy space. Technically, the website is built on WordPress with modern SEO and analytics tools, offering a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, but lacks some security headers and published privacy/cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to improve trust and compliance.

T

Think Up Themes

thinkupthemes.com

44

Think Up Themes is a specialized provider of premium WordPress themes, established in 2013 with a significant user base exceeding 5 million downloads. The company offers a variety of themes with a strong focus on customization, responsive design, and user-friendly features such as a powerful theme options panel and page builder. Their market position is that of a niche player in the WordPress theme ecosystem, targeting developers, businesses, and WordPress users seeking high-quality themes with expert support. Technically, the website is built on WordPress, leveraging modern libraries and plugins including UIkit, jQuery, Yoast SEO, and Google Analytics, indicating a mature digital infrastructure with good performance and SEO optimization. Security posture is solid with HTTPS enforced and use of security plugins, though explicit security headers and formal security policies are absent. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and business operations appear legitimate and professional. Overall, the site demonstrates good business credibility and technical maturity but would benefit from enhanced privacy compliance and security transparency.

H

Hyre AB

hyre.se

48

Hyre AB operates a modern, app-based car rental service primarily targeting consumers and businesses in Sweden and the Nordic region. The company offers flexible hourly and daily rentals with a seamless mobile experience, including keyless car access via Bluetooth and integrated payment and insurance. The website reflects a mature digital infrastructure using modern technologies such as React, Next.js, and Google Maps API, providing a fast, mobile-optimized user experience. Security posture is strong with HTTPS, security headers, and secure authentication via BankID, although formal security policies and incident response contacts are not publicly disclosed. Overall, the business presents a trustworthy and professional front with comprehensive privacy and cookie compliance, clear contact information, and strong brand consistency.

S

Software & Support Media

sandsmedia.com

44

Software & Support Media is a well-established media company founded in 2006, specializing in providing technology professionals with comprehensive learning platforms, conferences, and training services. The company targets a broad audience of tech professionals across industries and geographies, positioning itself as a trusted source for technology decisions and investments. Their business model revolves around media content, event organization, and lead generation services, supported by a portfolio of well-known clients and partners. Technically, the website is built on WordPress with Elementor and uses modern web technologies, SEO best practices, and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference.

O

onlinemarktplatz.de

onlinemarktplatz.de

47

onlinemarktplatz.de is a well-established German portal specializing in E-Commerce and online trade news, operational since 1999. It serves as a trusted source for daily updates, practical tips, tools, podcasts, and event recommendations targeted at professionals in the digital commerce sector. The website maintains a strong market position in the German-speaking e-commerce community, offering comprehensive content and a consistent brand presence. Technically, the site is built on WordPress with modern integrations such as Algolia for search, CookieYes for consent management, and Koko Analytics for user tracking, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit published security policies or incident response contacts. Overall, the website demonstrates a high level of professionalism, compliance with GDPR, and a trustworthy online presence.

B

Bundesverband der Dienstleister für Online Anbieter BDOA e.V.

bdoa.de

43

BDOA e.V. is a German non-profit association dedicated to digital education and services, operating since 2003. It serves professionals and organizations interested in digital transformation, offering specialized working groups, events, and cooperative initiatives to promote digital literacy and competence. The website reflects a mature organization with a clear focus on education and advocacy in the digital domain. Technically, the site is built on WordPress with modern plugins for SEO, user experience, and compliance, hosted on Cloudpit infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its niche audience effectively.

S

SmartCom GmbH

smartcom.de

40

SmartCom GmbH is a German-based company specializing in hyperpersonalized dialog marketing solutions leveraging programmatic printing and e-mailing technologies. Their services enable businesses to deliver highly targeted 1:1 marketing campaigns with relevant content at optimal times, enhancing customer engagement and conversion rates. The company positions itself as a specialized provider in the marketing technology sector, targeting businesses seeking advanced personalization in their customer communications. Technically, the website is built on WordPress using the Blocksy theme and integrates modern plugins such as Yoast SEO and Matomo Analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Multimedia content including videos and client logos enhance the user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, which are areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

S

SHI GmbH

shi-gmbh.com

49

SHI GmbH is a German-based company specializing in strategic consulting, custom software development, implementation, training, and support services. Established in 1996, it serves business clients primarily in Germany, positioning itself as a specialized provider in the technology sector. The website reflects a professional business model focused on delivering tailored IT solutions and consulting services. Technically, the site is built on WordPress using the Astra theme, hosted by Hetzner Online GmbH, a reputable German hosting provider. The site employs modern web technologies including jQuery and FontAwesome, and integrates marketing and analytics tools such as Google Tag Manager and Hotjar. Security-wise, the website uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. Cookie consent is implemented via the Borlabs Cookie plugin, indicating some level of privacy compliance, though no dedicated privacy policy or terms of service pages were found. Overall, the site is well-structured, mobile-optimized, and professionally designed, but could improve transparency and security posture by adding privacy and security policies and enhancing security headers.

B

B.i.Team

biteam.de

46

B.i.Team is a German technology company specializing in digital transformation and ERP solutions, particularly leveraging Microsoft Dynamics 365 Business Central. Their business model focuses on providing IT consulting and industry-specific software solutions such as Freshfin for the fruit wholesale sector and KatarGo for wholesale and mail order. The company positions itself as a strategic partner emphasizing the human-centric 'Ermöglicher-Prinzip' to ensure sustainable digital adoption. Technically, the website is built on TYPO3 CMS with modern responsive design and uses SVG icons and slick sliders for UI elements. While the site is professionally designed and content-rich, it lacks visible privacy and cookie policies and explicit contact information, which impacts privacy compliance and user trust. Security headers are not detected, and no incident response or security policy information is provided, indicating room for improvement in security posture. Overall, the domain registration data aligns with the website's business claims, supporting legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

A

Automattic, Inc.

underscores.me

48

Underscores.me is a website offering a starter theme for WordPress developers, maintained by Automattic, Inc., a reputable company in the WordPress ecosystem. The site provides a minimal, well-structured theme framework designed for developers to build custom WordPress themes efficiently. The business model is open source and community-driven, targeting WordPress theme developers globally. The website is technically built on WordPress CMS with modern web technologies including HTML5, CSS3, JavaScript, and jQuery, and uses WordPress.com nameservers for hosting. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the website enforces HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and Google Analytics is installed but not configured, indicating minimal user tracking. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The domain WHOIS data is consistent with the business, showing a long-standing registration by Automattic, Inc., supporting the legitimacy of the site. Overall, the website is safe, professional, and trustworthy, with a strong business credibility and technical foundation. However, it would benefit from improved privacy compliance, security headers, and transparency regarding data protection and incident response. These enhancements would strengthen the site's security posture and regulatory compliance, aligning with best practices for modern web services.

L

La French Tech Lemans

lafrenchtechlemans.com

46

La French Tech Lemans operates a French-language website providing a comprehensive step-by-step guide on creating and optimizing a Google My Business profile to enhance local business visibility and SEO. The site targets local business owners and entrepreneurs seeking to improve their online presence through Google My Business. The business model is informational, focusing on content delivery rather than direct commercial services. The website uses Sitecore CMS and includes standard web technologies such as jQuery and FontAwesome, but some libraries are outdated. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. From a security perspective, the website lacks visible security headers and there is no explicit evidence of HTTPS enforcement in the provided data. The WHOIS lookup failed to return any registration data, which is a significant concern regarding domain legitimacy and trustworthiness. No contact information or social media links are provided, limiting business credibility and user trust. Privacy and cookie policies are minimal, with no consent mechanisms detected, indicating potential GDPR compliance gaps. Overall, the website presents useful content with good design and user experience but suffers from technical and security shortcomings, including missing WHOIS data, lack of security headers, and absence of privacy compliance features. These issues reduce the overall trust and security posture of the site. Strategic improvements in security, privacy compliance, and transparency are recommended to enhance credibility and user confidence.

Š

ŠKODA We Love Cycling France

skodawelovecycling.fr

43

ŠKODA We Love Cycling France is a niche community platform dedicated to cycling enthusiasts including road cycling, mountain biking, and triathlon, associated with the ŠKODA brand. The website serves as a hub for community engagement and brand promotion within the French cycling market. It leverages social media channels and SEO optimizations to maintain a strong presence. Technically, the site is built on WordPress, hosted by OVH, and uses modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and consent management in place, but lacks published privacy policies, terms of service, and security headers, which are important for compliance and trust. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

Euroland operates as a small finance-focused service provider specializing in investor relations and stock portal services. The website targets investors and shareholders, offering access to IR services and a stock portal platform. The business appears niche with a moderate market position in the finance sector, primarily serving Swedish clientele as indicated by the default country code and company name. Technically, the website uses standard web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, but lacks advanced frameworks or CMS detection. The site is moderately optimized for mobile and performance but has basic SEO and accessibility features. Security posture is limited, with no visible HTTPS enforcement or security headers, though Google reCAPTCHA is implemented to protect forms. The absence of WHOIS registration data is a significant concern, impacting trust and legitimacy. Privacy and cookie policies are missing, and no incident response or vulnerability disclosure mechanisms are evident. Overall, the site is functional but requires improvements in security, compliance, and transparency to enhance trustworthiness and professional standing.

B

Bundesverband der Deutschen Spirituosen-Industrie und -Importeure e. V. (BSI)

spirituosen-verband.de

44

The Bundesverband der Deutschen Spirituosen-Industrie und -Importeure e. V. (BSI) is a well-established German industry association representing spirits manufacturers and importers. Founded in 1974, it serves as a political voice and advisory body for its members, covering approximately 85% of the German spirits market. The website provides comprehensive information about the association's values, responsibilities, and industry knowledge, targeting both industry stakeholders and consumers interested in responsible alcohol consumption. Technically, the site is built on TYPO3 CMS, with good mobile optimization and SEO practices, though some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or incident response contacts. Overall, the domain registration is consistent and trustworthy, matching the business profile. The site content is safe but categorized as 'questionable' due to alcohol-related content, targeting a mature audience.

S

SM:ILe Communication

marketing-on-tour.de

49

Marketing on Tour, operated by SM:ILe Communication, is a well-established platform specializing in digital marketing events such as conferences, webinars, cyber weeks, and seminars. With over 20 years of experience, it serves marketing professionals and businesses seeking up-to-date knowledge and networking opportunities in digital marketing. The website is built on WordPress with Elementor and integrates modern tools like hCaptcha and Borlabs Cookie for security and privacy management. While the site is professionally designed and content-rich, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. The security posture is solid with HTTPS and form protection, but could be improved with additional security headers and published policies. Overall, the site is trustworthy, accessible, and provides valuable content to its target audience.

C

ConvertBox | Intelligent On-Site Messages

convertbox.com

43

ConvertBox is a SaaS company specializing in intelligent on-site messaging to help businesses engage visitors, capture leads, and increase conversions through personalized messages, surveys, and funnels. The website is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel. The domain is well-established since 2009, indicating a mature business presence. Security posture is generally good with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, well-designed, and trustworthy but could improve transparency and compliance.

C

carsale24

carsale24.com

49

carsale24 operates as a professional online platform facilitating the sale of used cars primarily in Germany, Austria, and Switzerland. The company connects private sellers with a network of verified dealers, offering a streamlined, secure, and convenient car selling experience. Their business model is commission-based, funded by dealers, and includes value-added services such as premium vehicle appraisals and personalized customer support. The website demonstrates strong market positioning with trust signals including customer testimonials, media endorsements, and certification badges. Technically, the website is built on WordPress with a modern tech stack including the Enfold theme, WP Rocket for performance optimization, and Usercentrics for consent management. The site is well-optimized for SEO and mobile responsiveness, ensuring a high-quality user experience. Analytics and marketing tools such as Google Tag Manager are employed with privacy compliance in mind. From a security perspective, the site enforces HTTPS and integrates consent management, but lacks explicit HTTP security headers and incident response contact details. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern but does not currently undermine the site's legitimacy given the professional content and business presence. Overall, carsale24 presents a trustworthy and mature online service with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around incident response would further enhance their security posture and user trust.

T

Transalley

transalley.com

46

Transalley is a French innovation ecosystem and technopole focused on sustainable mobility and transport technologies, based in Valenciennes. It offers a comprehensive range of services including business incubation, development support, innovation accompaniment, office and workshop spaces, and training. The website reflects a mature digital presence with modern technologies such as WordPress, Bootstrap, and integrated marketing and analytics tools. Security posture is solid with HTTPS and reCAPTCHA protections, though some HTTP security headers are missing. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data reduces transparency but does not significantly detract from the overall trustworthiness given the strong business and partner signals. Strategic recommendations include enhancing HTTP security headers, publishing vulnerability disclosure information, and improving accessibility features.

F

France AutoTech

francecartech.org

40

France AutoTech is a French non-profit association that brings together startups innovating in the automotive mobility sector. The organization focuses on promoting innovation, fostering collaboration among members, and advocating for the ecosystem with media and public authorities. The website serves as a hub for member information, news, podcasts, and events, positioning France AutoTech as a key player in the French automotive tech landscape. Technically, the site is built on WordPress with a range of plugins for media, analytics, and user experience enhancements. The infrastructure is hosted by OVH, a reputable French provider, and uses HTTPS with Google Analytics configured for IP anonymization. Security posture is moderate with room for improvement in security headers and cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, though it lacks explicit privacy and security policy details. Strategic recommendations include enhancing GDPR compliance, implementing security headers, and maintaining up-to-date software.

G

Grupo Domingo Alonso

daxauto.es

43

The website daxauto.es represents a vehicle sales platform focused on second-hand, occasion, and Km 0 vehicles in the Canary Islands, operating under the Grupo Domingo Alonso brand. The business targets customers looking for used vehicles in this regional market, leveraging the reputation of its parent company. The site content is minimal but clearly oriented towards automotive sales with basic branding and meta information supporting its business purpose. Technically, the site uses a custom CMS with Tailwind CSS for styling and includes JavaScript for translation hooks, indicating some level of digital maturity but lacks advanced frameworks or platforms. Performance and mobile optimization are basic but functional. Security posture is moderate; HTTPS is used but no security headers were detected in the provided HTML snippet, and no visible forms or input fields limit attack surface but also reduce interactivity. Privacy and cookie policies are absent, which is a compliance gap. No contact information or incident response channels are visible, limiting user trust and security transparency. Overall, the site is functional but would benefit from enhanced security practices, compliance documentation, and richer content to improve user experience and trust.

F

Formetal d.o.o.

formetal.biz

39

Formetal d.o.o. is a Croatian manufacturing company specializing in the production of galvanized cold-formed profiles and distribution of reinforcements for PVC joinery. Established in 2005, the company targets the Croatian market with a focus on supplying metal profiles for construction and manufacturing sectors. The website serves primarily as an informational portal showcasing the company’s products and brands (Formetal and Tehnometal). Technically, the website uses legacy technologies such as jQuery 1.x and Google Analytics for tracking. The site is basic in design and functionality, with minimal interactive elements and no visible forms or contact details on the homepage. Mobile optimization and accessibility are basic, and SEO practices are minimal but present through meta tags. From a security perspective, the site lacks modern security headers and does not have DNSSEC enabled. The use of an outdated jQuery version introduces potential vulnerabilities. No privacy or cookie policies are present, and no consent mechanisms are implemented, indicating compliance gaps with GDPR and related regulations. The domain registration data is consistent and legitimate, supporting the business’s authenticity. Overall, the website is functional but basic, with moderate business credibility but notable security and compliance weaknesses. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trust and protect business operations.