Security Directory

E

Erblotse

erblotse.de

60

Erblotse.de is a German online platform specializing in inheritance and estate planning services. The website offers users tools to create legally compliant testaments, manage inheritance cases, and access expert advice from legal and tax professionals. It holds a strong market position supported by over 100 cooperation partners and excellent customer reviews, including a 5-star rating on Google and recommendations from Finanztip. The platform targets individuals involved in inheritance matters within Germany, providing accessible and user-friendly online solutions. Technically, the site is built on Webflow CMS, hosted on AWS infrastructure, and integrates modern analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel, all managed with user consent via a cookie banner. The website demonstrates excellent design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs reputable third-party services but could improve by explicitly implementing security headers and publishing incident response contacts. Overall, Erblotse.de presents a trustworthy and professional digital presence with a solid security posture and compliance with GDPR requirements.

B

BDO Cyber Security GmbH

bdosecurity.de

79

BDO Cyber Security GmbH is a specialized cybersecurity consulting and training company operating under the reputable BDO brand in Germany. The company offers services including Cyber Incident Response, Offensive Security, Cyberstrategy consulting, and cybersecurity education through its Cyber Academy. The website targets businesses and organizations seeking professional cybersecurity solutions and training. The market position is that of a focused cybersecurity service provider leveraging the BDO brand's trust and recognition. Technically, the website is built on Kentico CMS, uses modern JavaScript libraries like jQuery, and integrates Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry. The hosting infrastructure appears to be managed by Deutsche Telekom AG, indicating a reliable hosting environment. Security-wise, the site enforces HTTPS with strong security headers and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a public security policy, incident response contact details, and a vulnerability disclosure policy, which are recommended for enhanced transparency and trust. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for cybersecurity services.

B

BDO DIGITAL GmbH

bdodigital.de

69

BDO DIGITAL GmbH is a German-based digital services company specializing in digital transformation, IT advisory, managed services, and customer communications management. It operates as part of the larger BDO group, targeting business clients and enterprises with a focus on consulting and technology solutions. The company holds ISO 27001 certification, indicating a commitment to information security standards. Technically, the website leverages modern technologies including Kentico CMS, Microsoft Azure hosting, Google Tag Manager, and Cookiebot for consent management. The infrastructure is moderately performant with good mobile optimization and basic accessibility features. Analytics are implemented via Microsoft Application Insights and Google Analytics with privacy-conscious configurations. From a security perspective, the site enforces HTTPS, uses anti-CSRF tokens, and provides a comprehensive cookie consent mechanism aligned with GDPR. However, some security headers are not explicitly confirmed, and no public vulnerability disclosure or incident response contacts are found. The WHOIS data is minimal but consistent with the German market presence. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and security posture. Recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility and SEO for better compliance and user experience.

B

BDO Concunia GmbH Wirtschaftsprüfungsgesellschaft

bdo-concunia.de

71

BDO Concunia GmbH Wirtschaftsprüfungsgesellschaft is a medium-sized professional services firm based in Germany, specializing in auditing, tax consulting, legal advice, and advisory services. The company operates as part of the global BDO network, targeting business and public sector clients. The website reflects a professional and consistent brand image with a focus on service offerings and client engagement through a contact form. Technically, the site uses modern web technologies including Kentico CMS, Cookiebot for cookie consent management, Google Tag Manager, and Microsoft Application Insights for telemetry. The site is hosted likely via Deutsche Telekom infrastructure, ensuring reliable DNS and hosting services. Security posture is good with HTTPS enforced and anti-forgery tokens in use, although some security headers are missing. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a solid digital presence with room for improvement in SEO metadata and explicit contact information.

B

BDO AG Wirtschaftsprüfungsgesellschaft

bdo.de

10

BDO AG Wirtschaftsprüfungsgesellschaft is a well-established professional services firm in Germany specializing in auditing, tax consulting, business advisory, and related services. The company targets businesses and professionals seeking expert financial and consulting services. The website reflects a mature digital presence with consistent branding and comprehensive business descriptions. Technically, the site uses a modern tech stack including Kentico CMS, jQuery, Google Tag Manager, Cookiebot for consent management, and Microsoft Application Insights for telemetry, hosted likely on Deutsche Telekom infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for users.

C

Creator Hero

creator-hero.com

57

Creator Hero is a technology-driven influencer storefront platform that enables content creators to build custom storefronts, monetize their influence through affiliate marketing, and establish valuable brand partnerships. The platform offers a comprehensive suite of tools including storefront builders, affiliate marketing programs with high commission rates, brand partnership management, and analytics. Positioned as a leading solution in the influencer marketing space, Creator Hero targets influencers and brands seeking streamlined monetization and partnership opportunities. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as Google Tag Manager and Google reCAPTCHA for analytics and security. The site demonstrates excellent design quality, mobile responsiveness, and SEO optimization, providing a smooth user experience. However, some security headers are missing, and there is no explicit cookie consent mechanism, which are areas for improvement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a good baseline security posture. The absence of detailed WHOIS data slightly reduces trust but is mitigated by the professional website and clear contact information. No critical vulnerabilities or exposed sensitive data were detected. Overall, Creator Hero presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in security headers, privacy compliance, and WHOIS transparency would further strengthen its security posture and user trust.

Z

ZOAA

zoaa.cz

44

ZOAA is a Czech architectural studio specializing in designing hospitality and residential projects. Their website showcases a portfolio of projects including restaurants, hotels, and apartments, emphasizing modern and aesthetic architectural solutions. The company targets private investors and hospitality businesses seeking architectural design services. The website is built on WordPress with modern web technologies and integrates social media and analytics tools. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. WHOIS data is unavailable, which limits domain trust assessment. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

A

ATELIÉR Klein

atelierklein.cz

44

ATELIÉR Klein is a Czech architectural design firm specializing in low-energy and passive family houses as well as commercial buildings. Their services include interior design, project documentation, and energy consulting, with a strong focus on energy efficiency and subsidy program support. The website reflects a small but professional business with consistent branding and a clear market position in the Czech Republic's real estate and energy sectors. Technically, the site is built on WordPress with modern scripts and integrations such as Google reCAPTCHA and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is good with HTTPS and some security best practices, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, GDPR compliant, and provides clear privacy and cookie policies, but lacks explicit contact details and terms of service. The domain WHOIS data is unavailable, likely due to privacy protection, but the website content and partner references support legitimacy.

K

Kapnetix s.r.o.

kapnetix.ai

58

Kapnetix s.r.o. is a technology company specializing in AI-powered tools for motion capture professionals. Their website presents a focused business offering innovative AI solutions such as single camera 3D pose estimation and automated motion capture cleanup, targeting animation teams and game developers. The company positions itself as a niche innovator with a small but experienced team and notable industry awards. Technically, the website is built on Webflow CMS with modern integrations including Google Tag Manager and Leadfeeder for analytics and marketing. The site is well-designed, mobile-optimized, and includes embedded video content to demonstrate product capabilities. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible advanced security headers or published security policies. WHOIS data is unavailable due to privacy protection, which is common for small tech firms. Overall, the site is professional and trustworthy with moderate risk due to limited public security disclosures.

T

TypoConsult A/S

typoconsult.dk

71

TypoConsult A/S is a Danish web agency specializing in energy-efficient and sustainable web solutions using the TYPO3 CMS platform. Established in 2003, the company focuses on delivering high-performance, secure, and user-friendly websites tailored to various industries. Their market position is that of a niche expert in sustainable digital solutions within Denmark, leveraging open source technologies and emphasizing digital sovereignty. Technically, the website is built on TYPO3 CMS with modern libraries such as jQuery and integrates analytics and marketing tools like Google Tag Manager, Simple Analytics, and LinkedIn Insight Tag. The site is well-optimized for performance, mobile responsiveness, and accessibility, hosted via AWS Cloudfront CDN. Security posture is strong with HTTPS enforced and cookie consent managed by Cookiebot, although some security headers could be improved. Privacy compliance is robust with clear cookie policies and GDPR adherence. Overall, the website projects professionalism, trustworthiness, and technical maturity.

SurveyXact is a Denmark-based platform specializing in survey creation and data collection services, targeting business and professional users who require expert support. The website serves as a login portal for users, featuring a modern React and Material-UI frontend design. The platform emphasizes customer support with a clearly displayed phone number for assistance. Technically, the site uses contemporary JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience. However, the absence of visible privacy and cookie policies on the login page indicates gaps in privacy compliance. Security posture is moderate, with HTTPS usage implied but lacking visible security headers or advanced protections. WHOIS data is unavailable, limiting domain trust analysis but the professional presentation supports legitimacy. Overall, the site is functional and business-oriented but would benefit from enhanced privacy disclosures and security hardening.

Eurodesk Hungary, operated by Tempus Közalapítvány, is a well-established non-profit organization providing comprehensive information and support for youth international mobility opportunities, including Erasmus+ programs, scholarships, volunteering, and internships. The website serves as a key information hub targeting young people and professionals working with youth, offering news, newsletters, and detailed mobility information. The organization holds a strong market position as part of the broader Eurodesk European network and maintains partnerships with relevant EU and Hungarian governmental bodies. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, Facebook and TikTok tracking pixels, and reCAPTCHA for security. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and a Content-Security-Policy header, though additional security headers could enhance protection. Privacy compliance is robust, featuring a comprehensive GDPR-compliant privacy policy and an active cookie consent mechanism. No critical security vulnerabilities or blocking mechanisms were detected, and the domain's WHOIS data aligns well with the organization's history and public presence, supporting high legitimacy. However, the site lacks explicit published security policies and incident response contacts, which could be improved to enhance trust and readiness. Overall, Eurodesk Hungary presents a trustworthy, professional, and user-friendly platform with strong compliance and security foundations, well-suited to its non-profit educational mission.

C

CoreTrek AS

elmagasinet.no

11

Elmagasinet.no is a well-established Norwegian industry magazine focused on the electrical sector, operated by CoreTrek AS and affiliated with NHO Elektro. The website serves professionals in the electrical industry by providing news, product updates, job listings, and advertising opportunities. It holds a strong market position as a niche media outlet with a domain age dating back to 2001, reflecting its longstanding presence and credibility in the sector. The content is professionally curated, relevant, and updated, targeting industry stakeholders and professionals. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and performance. The site uses HTTPS with an excellent SSL configuration, though it lacks some advanced security headers. Cookie consent and privacy policies are implemented in compliance with GDPR, enhancing user privacy and regulatory adherence. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, it could improve by publishing explicit security policies and incident response contacts. Advertising is transparently managed through a known plugin, and tracking respects user consent. Overall, the website is trustworthy, professional, and secure, with minor areas for enhancement. The overall risk assessment is low, with recommendations focusing on strengthening security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further enhance trust and compliance.

SurveyXact is a technology-driven platform focused on survey creation and data collection services, supported by Xact experts who provide daily phone assistance. The website demonstrates a moderate level of digital maturity, utilizing modern frontend technologies such as React and Material-UI, ensuring a responsive and user-friendly login experience. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and advanced protections. Privacy and cookie policies are not present on the login page, indicating potential compliance gaps. Overall, the platform appears professional and business-oriented but would benefit from enhanced transparency and security measures.

M

Magna International Inc.

magna.com

73

Magna International Inc. is a leading global mobility technology company with over 65 years of expertise in automotive manufacturing and innovation. The company offers a broad portfolio of products and complete vehicle engineering services, positioning itself as a key player in the transportation sector. Their website reflects a mature digital presence with comprehensive investor relations, ESG initiatives, and career opportunities, targeting automotive industry professionals, investors, and potential employees. Technically, the website is built on the Sitefinity CMS platform and employs modern web technologies including jQuery, Google Tag Manager, and CookiePro for consent management. The site is mobile-optimized, accessible, and SEO-friendly, delivering a professional user experience with multimedia content and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policy disclosures and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a large public company, but the website's content and external references strongly support its legitimacy. Overall, Magna's website demonstrates a strong business and technical foundation with good security hygiene, though improvements in transparency around security policies and incident response are recommended for enhanced trust and compliance.

Z

Zväz obchodu SR

biznis.sk

53

Zväz obchodu SR is a Slovak trade association focused on representing retail and commerce interests within Slovakia. The website serves as a portal for news, legislative updates, member information, and event calendars relevant to the retail sector. It maintains partnerships with various media and industry-related organizations, reinforcing its position as a key player in the Slovak retail trade ecosystem. The domain is well-established since 2003, indicating a mature presence in the market. Technically, the website uses a custom or unknown CMS platform with common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The hosting is likely provided by Websupport, inferred from the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No privacy or cookie policies are present, and no consent mechanisms are detected, which is a compliance gap. From a security perspective, the site benefits from DNSSEC and HTTPS (inferred), but lacks visible HTTP security headers such as CSP or HSTS. There are no exposed sensitive data or obvious vulnerabilities in the HTML content, but the absence of security policies and incident response contacts suggests room for improvement. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen its security posture and regulatory adherence.

G

German Central Committee against Tuberculosis (DZK)

dzk-tuberkulose.de

65

The German Central Committee against Tuberculosis (DZK) operates a professional, well-structured website dedicated to tuberculosis education, research, and prevention. With over 100 years of history, the organization serves patients, relatives, doctors, and health authorities primarily in Germany. The website offers comprehensive resources including guidelines, case reporting, dosage calculators, and an interactive MDR-TB coverage map. The content is high quality, relevant, and presented with clear navigation and consistent branding. Technically, the site leverages modern web technologies such as Webflow CMS, Google Fonts, Matomo Analytics with privacy-conscious configurations, Weglot for multilingual support, and Klaro for cookie consent management. The site is hosted on Webflow’s CDN, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. While explicit security headers are not visible in the HTML, they may be set at the server level. No vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly visible security policy or incident response contact information, which could enhance trust. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively supports its mission to combat tuberculosis through education and collaboration. Strategic recommendations include adding explicit security headers, publishing a security policy, and considering incident response contact details to further strengthen security posture and user trust.

A

Assortion

assortion.com

54

Assortion is a small e-commerce focused SaaS company offering a Shopify app that provides personalized product recommendations to increase average order value through upsells and cross-sells. The company targets Shopify store owners seeking to improve customer engagement and sales performance. The website is professionally designed using Webflow, integrates seamlessly with Shopify, and includes features such as product quick view popups and real-time recommendations. The technical infrastructure is modern and performant, leveraging Google Tag Manager for analytics and Webflow hosting for delivery. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional online presence. Overall, the site is functional and trustworthy from a user perspective but would benefit from improved transparency and security documentation.

CVS Health Corporation operates a comprehensive healthcare platform offering pharmacy services, health insurance plans, and wellness products. The website reflects a large enterprise with a strong market position in the U.S. healthcare sector, integrating subsidiaries like Aetna and CVS Caremark. The digital infrastructure is built on Adobe Experience Manager with advanced analytics and video content delivery, indicating a mature technical environment. Security posture is generally strong with HTTPS and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance indicators are limited in the provided content, suggesting room for enhancement in cookie consent and privacy disclosures. WHOIS data is missing or unavailable, which is unusual for a major corporation and warrants further verification. Overall, the site is professional, trustworthy, and well-optimized for users.

O

Omen

omen.ai

63

Omen is a technology startup focused on delivering AI-powered predictive diagnostics for industrial machines. Their solution aims to modernize maintenance workflows by embedding real-time intelligence inside machines to detect early warning signs of failure. The company positions itself as an innovator in the manufacturing technology sector, targeting industrial operators and maintenance technicians. The website is professionally designed using Webflow CMS and includes modern frontend technologies such as jQuery. It is hosted on Webflow's CDN with HTTPS enabled, ensuring secure access. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are important for compliance and user trust. Contact information is minimal, limited to a careers email address, with no phone numbers or physical addresses provided. No social media presence is linked from the site.

M

micro.company

whatsform.com

57

WhatsForm is a small technology SaaS company founded in 2020, offering a specialized WhatsApp form builder platform that enables businesses to collect customer data directly via WhatsApp. The platform provides a drag-and-drop form builder, ready-to-use templates, and Google form conversion features, targeting businesses and individuals who want to streamline customer engagement through WhatsApp. The company operates independently from WhatsApp/Meta and is part of the micro.company ecosystem. Technically, the website leverages modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, hosted on AWS with Cloudflare CDN for performance and security. The site is mobile optimized and provides a professional user experience with clear navigation and multilingual support. Security posture is strong with HTTPS, Cloudflare protection, and domain transfer lock, but lacks published security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

A

Asia CEO

asiaceosummit.com

60

The Asia CEO Summit website represents a professional event platform focused on convening business leaders and executives in the Asian event industry. The summit promotes economic growth and business collaboration in the region, positioning itself as a premier conference. The technical infrastructure leverages modern JavaScript libraries and a specialized event management platform (SHOWOFF by ASP.events), providing a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS registration data introduces moderate trust concerns, although the website content and branding appear consistent and professional. Overall, the site is functional and business-focused but would benefit from enhanced privacy compliance and security best practices.

E

Edgar Allan

slater.app

55

Slater.app is a technology-focused SaaS platform offering an AI-powered custom code tool designed specifically for Webflow projects. The company, Edgar Allan, positions itself as a productivity enhancer for Webflow developers and designers by providing seamless AI integration to generate and manage custom code without character limits. The platform supports collaboration and aims to reduce development time with AI assistance. Technically, the website is built on Webflow CMS and hosting, utilizing modern web technologies including Google Tag Manager for analytics and Stripe for payment processing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and CSRF tokens present, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. Privacy and terms of service pages are available, but GDPR compliance could be enhanced with better cookie management. Overall, the domain registration is consistent with the business claims, and the site shows no signs of malicious or suspicious activity.

M

Medical Properties Trust, Inc.

medicalpropertiestrust.com

63

Medical Properties Trust, Inc. (MPT) is a large, US-based real estate investment trust specializing in hospital real estate financing. The company operates globally with a portfolio of 392 properties across 9 countries, focusing on sale/leaseback transactions and investments in hospital operators. Their website reflects a mature business with strong investor relations, corporate responsibility, and a clear focus on healthcare real estate capital solutions. The target audience includes hospital operators, investors, and healthcare industry stakeholders. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, reCAPTCHA, and Chart.js. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site uses HTTPS and includes anti-bot measures via reCAPTCHA. There are no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, which slightly reduces trustworthiness but is mitigated by the professional content and stock market presence. Overall, the website presents a professional and trustworthy image with a strong business model and technical foundation. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance.

S

Society of Independent Show Organizers

siso.org

59

The Society of Independent Show Organizers (SISO) is a professional membership organization representing senior leaders from for-profit show organizers. The organization focuses on fostering industry connections, sharing best practices, advocating for the industry, and driving innovation. Their website highlights key events such as the CEO Summit and Leadership Conference, and serves as a hub for members to access resources and networking opportunities. Technically, the website uses modern JavaScript libraries and is built on the SHOWOFF platform by ASP.events, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The WHOIS data is unavailable due to privacy protection, which is common for such organizations. Overall, the site is professional and trustworthy but could improve privacy compliance and explicit contact information.

I

Ilmor Engineering

ilmor.co.uk

65

Ilmor Engineering is a UK-based company specializing in high-performance powertrains and components for automotive, marine, and aerospace sectors. With over 40 years of experience, Ilmor has established itself as a leader in engineering excellence, particularly in motorsports. The company offers a comprehensive range of services including concept and design, simulation, electrical and electronics, manufacturing, build, and test and development. Their market position is strong, supported by certifications such as ISO 9001 and AS9100, and a professional online presence that reflects their expertise and commitment to quality. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Cookie consent management is implemented via CookiePro, indicating attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and publicly available incident response or security policy information. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup for the domain 'www.ilmor.co.uk' failed due to a naming rule violation, likely related to the 'www' prefix, but the base domain 'ilmor.co.uk' is presumably registered and legitimate. This discrepancy slightly impacts the trust score but does not undermine the overall legitimacy of the business. Overall, Ilmor Engineering's website demonstrates a high level of professionalism, technical maturity, and privacy compliance, with minor recommendations to enhance security headers and publish incident response details to further strengthen trust and security posture.

G

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V.

gapao.de

60

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V. (GAPAO) is a small non-profit organization based in Germany focused on the interdisciplinary field of architecture psychology and oncology. The website serves as an educational platform offering training, symposiums, and research projects targeted at professionals in architecture, psychology, and healthcare. The organization collaborates with universities and professional chambers, positioning itself as a niche leader in this specialized domain. Technically, the website is built on Webflow, uses modern web fonts, and includes cookie consent mechanisms, but has a misconfigured Google reCAPTCHA which could expose it to spam risks. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Overall, the site is professional, accessible, and trustworthy with room for improvement in security and compliance details.

U

U.S. Department of Labor, Employment and Training Administration

onetcodeconnector.org

65

The O*NET Code Connector website is a government-sponsored platform developed and maintained by the U.S. Department of Labor's Employment and Training Administration. It serves as an authoritative tool for workforce professionals to identify and match O*NET-SOC occupational codes for job orders, applicants, and unemployment insurance claimants. The site integrates key data from the O*NET database and provides a user-friendly interface for occupation search and job family browsing. The target audience primarily includes workforce professionals and job seekers within the United States labor market. Technically, the website employs legacy JavaScript libraries such as jQuery 3.5.1 and Fancybox 2.1.7, combined with custom CSS and JavaScript. While the site is functional and well-structured, it shows room for modernization, particularly in mobile optimization and accessibility. The site does not appear to use a modern CMS or advanced frameworks, and performance is moderate. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is incomplete or malformed, which slightly reduces trustworthiness, but the official branding and government affiliation strongly support legitimacy. Privacy compliance is partial, with a privacy policy present but no cookie banner or GDPR-specific indicators. Overall, the website is a reliable and professional government resource with good content quality and business credibility. Improvements in security headers, privacy compliance, and technical modernization would enhance its posture and user trust. The domain's WHOIS data gap is a concern but does not outweigh the strong trust signals from the content and affiliations.

U

U.S. Department of Labor, Employment and Training Administration

miproximopaso.org

66

Mi Próximo Paso is a Spanish-language career exploration website sponsored by the U.S. Department of Labor's Employment and Training Administration. It provides optimized career search tools, interest assessments, and access to education and job opportunities, targeting Spanish-speaking students and job seekers. The site is well-positioned as an official government resource with a strong focus on career guidance and workforce development. Technically, the website employs a modern tech stack including Bootstrap 5, jQuery, Font Awesome, and various JavaScript libraries for UI and data visualization. The site is mobile responsive, accessible, and well-structured, offering a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website demonstrates high professionalism and trustworthiness, though improvements in security headers, privacy compliance, and transparency around incident response would enhance its posture. The lack of WHOIS data is mitigated by clear government affiliation and branding.

U

U.S. Department of Labor, Employment and Training Administration

mynextmove.org

66

My Next Move is a government-sponsored career exploration platform developed by the U.S. Department of Labor's Employment and Training Administration and the National Center for O*NET Development. It provides streamlined career search tools, including keyword search, industry browsing, and interest assessments, targeting students and job seekers. The platform offers easy-to-understand career reports and access to apprenticeship opportunities, positioning itself as an authoritative resource in the U.S. labor market. Technically, the website employs a modern and robust technology stack including Bootstrap 5, jQuery, Font Awesome 7, and AnyChart for interactive visualizations. The site is mobile-optimized, accessible, and performs well with fast loading times. It uses secure forms and HTTPS, though explicit security headers and cookie consent mechanisms could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is adequate with a comprehensive privacy policy, but cookie consent is missing. Overall, the website is trustworthy, professional, and well-maintained, reflecting its government affiliation. The lack of WHOIS data is likely due to privacy or registry restrictions, which is reasonable for this type of site. Strategic improvements in security headers, privacy consent, and contact transparency would enhance its security posture and user trust.

N

National Center for O*NET Development

onetcenter.org

68

The National Center for O*NET Development operates the O*NET Resource Center, a U.S. Department of Labor sponsored website providing comprehensive occupational data, tools, and research resources for workforce professionals, developers, and researchers. The site serves as an authoritative portal for accessing current and archived occupational data files, web services, and related career exploration tools. It maintains a strong market position as a trusted government resource with consistent branding and official social media presence. Technically, the website employs a modern technology stack including Bootstrap 5, jQuery, Font Awesome, and AnyChart, ensuring responsive design and good accessibility. The site is mobile optimized and features clear navigation and professional content presentation. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is moderate, with a clear privacy policy but no cookie consent mechanism. Contact information is available primarily via email and contact forms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility consistent with a government-sponsored entity. The lack of WHOIS data is likely due to privacy protection, which is justified for this type of organization. Strategic recommendations include enhancing security headers, publishing incident response information, and implementing cookie consent to improve privacy compliance.

P

PMT Water Engineering

watereng.com.au

44

PMT Water Engineering is an Australian-based manufacturer and facilitator specializing in prefabricated steel water tanks and packaged water treatment systems. The company serves commercial, industrial, and export markets with over 20 years of experience, operating under the parent company Asia Pacific Tanks Pty Ltd. Their website presents a professional image with clear contact information and service descriptions, targeting industrial clients and remote locations both domestically and internationally. Technically, the website is built on WordPress using the Divi theme, incorporating modern technologies such as Google reCAPTCHA v3 for spam protection. Hosting is provided by HostYourServices in Australia, ensuring regional alignment with the business. Security posture is moderate with HTTPS enforced and spam protection active; however, the absence of security headers and published security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

U

U.S. Department of Labor, Employment and Training Administration

onetonline.org

66

O*NET OnLine is a comprehensive U.S. Department of Labor sponsored platform providing detailed occupational information and career exploration tools. It serves a broad audience including job seekers, workforce professionals, students, and researchers by offering extensive data on over 900 occupations. The site is well-structured with multiple search and browse functionalities, crosswalks to other classification systems, and links to partner resources. Technically, the website employs a modern technology stack including Bootstrap 5, jQuery, Font Awesome, and various JavaScript libraries to deliver a responsive, accessible, and user-friendly experience. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site uses HTTPS and secure form handling but lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a comprehensive privacy policy, though cookie consent mechanisms are not evident. Overall, the website presents a low risk profile with strong legitimacy as a government resource. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response contact visibility to further strengthen trust and security posture.

G

Games Farm

games-farm.com

54

Games Farm is a Slovakia-based game development company specializing in high-quality and innovative RPG projects. The company positions itself as a leading RPG game developer in its region, targeting gamers interested in immersive role-playing experiences. Their website showcases multiple game titles with trailers and Steam store links, reflecting a professional and content-rich digital presence. Technically, the site is built on Webflow with modern web technologies and demonstrates good mobile optimization and user experience. However, the absence of privacy and cookie policies indicates a compliance gap, and no advanced security headers were detected, suggesting room for improvement in security posture. The WHOIS data is missing, which raises concerns about domain legitimacy and should be further investigated. Overall, the site is functional and professional but requires enhancements in privacy compliance and security to strengthen trust and regulatory adherence.

H

Hook & Tell

hook-tell.cz

56

Hook & Tell is a Czech content marketing agency specializing in complex industries and challenging content needs. Established since 2015, the agency serves over 200 brands, primarily in the B2B sector, offering expert content creation, LinkedIn profile management, and career communication services. Their website is professionally designed, bilingual (Czech and English), and demonstrates a strong market position with reputable clients such as E.ON and Commerzbank. Technically, the site is built on Webflow with modern libraries and integrates analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, cookie consent, and CAPTCHA protections, though some security headers are not explicitly detected. The absence of WHOIS data reduces domain trust but does not detract from the professional presentation and compliance with GDPR. Overall, the website is secure, privacy-conscious, and well-positioned in its market niche.

U

UKi Media & Events

automotive-interiors-expo.com

66

Automotive Interiors Expo Europe is a well-established trade event organized by UKi Media & Events, focusing on the automotive interiors sector and integrated within the broader Vehicle Tech Week Europe. The website serves as a comprehensive platform for industry professionals, OEMs, suppliers, designers, and engineers to connect, showcase innovations, and access industry news. The business model revolves around event organization, media publishing, and sponsorship facilitation, positioning itself as a key player in the automotive technology ecosystem. Technically, the site employs a modern tech stack including jQuery, Alpine.js, and multiple analytics and marketing tools, hosted on a reliable infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS, domain transfer protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, with extensive user tracking balanced by clear consent. No critical vulnerabilities or suspicious patterns were detected.

V

Voomly - Create, Host, And Launch High-Converting Videos Wit

voomly.com

65

Voomly appears to be a technology company offering a SaaS platform for creating, hosting, and launching high-converting videos. The website content emphasizes video customization to boost engagement and sales, targeting a general audience interested in video marketing solutions. The technical infrastructure leverages modern JavaScript libraries and third-party analytics tools such as Google Analytics, Facebook Pixel, and Bing Ads, indicating a mature digital marketing approach. The site is built on the ClickFunnels platform, which supports marketing funnel creation and hosting. Security posture is moderate with HTTPS enabled and CSRF tokens present, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data raises concerns about domain legitimacy and business credibility. Overall, the site is professionally designed and mobile optimized but requires improvements in privacy compliance and transparency to enhance trust.

C

Connect Center

connectcenter.hu

37

Connect Center is a Hungarian technology company specializing in e-commerce integration solutions, providing a platform that bridges ERP, inventory, invoicing, wholesale price lists, and webshop systems. The company targets e-commerce businesses seeking seamless synchronization between backend systems and online stores. The website is built on WordPress using the Divi theme and incorporates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and reCAPTCHA for security. While the technical infrastructure is solid with HTTPS and standard plugins, the site lacks published privacy and cookie policies, which impacts GDPR compliance. No explicit contact information or security policies are visible, which may affect user trust and compliance transparency. Overall, the site presents a professional business presence with moderate digital maturity but requires improvements in privacy and security disclosures.

B

BuyAndRead AS

buyandread.com

51

BuyAndRead AS operates a digital newsstand platform primarily serving Norwegian and Scandinavian audiences by providing access to digital editions of newspapers, magazines, and other publications. The platform aggregates content from multiple publishers and offers a web-based reading experience with options to purchase full editions or single pages. The website demonstrates a moderate level of digital maturity with use of modern JavaScript libraries, responsive design, and integration of analytics and marketing tools such as Google Analytics and Facebook Pixel. However, the absence of WHOIS registration data and lack of explicit privacy and cookie policies indicate gaps in transparency and privacy compliance. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and clearer incident response contacts. Overall, the platform is functional and professional but would benefit from enhanced compliance and trust signals.

F

Fleming College

flemingcollege.ca

71

Fleming College is a well-established Canadian public educational institution with a domain registered since 2000. The website serves prospective and current students by providing information about college programs and services. The institution targets a broad audience interested in post-secondary education in Canada. Technically, the website uses modern frontend technologies such as Bootstrap, FontAwesome, and jQuery, and integrates multiple analytics and advertising pixels including Google Analytics, TikTok, Snapchat, Amazon Ads, and Facebook Pixel. The site is hosted with a reputable registrar and uses HTTPS, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are not detected in the provided HTML, indicating potential compliance gaps. No contact emails or phone numbers were found in the analyzed content, which may impact user trust and accessibility. Overall, the website demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security best practices.

A

ALPHA Consult

alphacons.eu

36

ALPHA Consult is a European boutique consultancy specializing in strategic management and technology consulting focused on space applications, GNSS, Earth Observation, Intelligent Transport Systems, and UAVs. The company targets businesses, regulators, and European institutions, positioning itself as a leading independent expert in these sectors. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern web technologies including jQuery and Google Analytics, hosted by Aruba S.p.A., with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response or security policies. Overall, the site is trustworthy and professionally maintained, with moderate user tracking and basic privacy compliance.

L

Landeshauptstadt Erfurt

erfurt.de

55

Landeshauptstadt Erfurt operates the official city portal for the capital of Thuringia, Germany, providing comprehensive information and services related to city administration, culture, education, economy, and citizen services. The website serves a broad audience including residents, visitors, and businesses, positioning itself as a central digital hub for municipal engagement and information dissemination. The business model is public sector focused, delivering government transparency and community resources. Technically, the site is built on the IMPERIA CMS platform with a mix of legacy and modern JavaScript libraries such as jQuery and Flexslider, enhanced with accessibility and SEO best practices. The site is mobile optimized and employs privacy-conscious analytics (Matomo) with Do Not Track and cookie consent mechanisms in place, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though there is room for improvement by adding security headers and explicit incident response information. No vulnerabilities or suspicious content were detected. The domain WHOIS data is limited but consistent with institutional hosting, supporting legitimacy. Overall, the website is professional, trustworthy, and well-maintained, fulfilling its role as an official government portal effectively.

W

wbv Distribution

wbv-distribution.de

58

wbv Distribution is a German family-owned logistics and fulfillment service provider specializing in sustainable supply chain solutions. Their key services include E-Commerce Fulfillment, PreFBA logistics, media and advertising logistics, and campaign logistics. The company positions itself as a reliable partner with over 125 years of logistics experience, emphasizing sustainability and certified quality management. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, supporting a high trust level. Technically, the website uses modern frontend technologies such as jQuery and UIkit, with Matomo analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by a German provider (Schlundtech). Security best practices include HTTPS and a cookie consent mechanism with blocking access until consent, though security headers and incident response information are not evident. The security posture is solid but could be improved by adding security headers and publishing a security policy or vulnerability disclosure. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the business claims, and the parent company relationship to wbv Media is clearly stated. Overall, the website is professional, secure, and compliant with GDPR, making it a trustworthy platform for its target B2B audience in logistics and fulfillment.

C

ClickFunnels

clickfunnels.com

70

ClickFunnels is a prominent SaaS platform specializing in marketing funnel creation and management, enabling businesses and entrepreneurs to market, sell, and deliver products online without extensive technical resources. The website demonstrates a professional and consistent brand presence with excellent design and user experience, targeting marketers and small to medium businesses. Technically, the site employs a modern technology stack including jQuery, Video.js, FontAwesome, and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS enforced and CSRF tokens in use, though security headers are not explicitly detected in the provided data. Privacy compliance is limited due to absence of visible privacy and cookie policies, and no contact information is found, which impacts trust and compliance scores. WHOIS data is unavailable, indicating domain privacy or recent registration, which slightly reduces domain trustworthiness. Overall, the site is well-built and functional but would benefit from enhanced transparency and compliance documentation.

Dayforce operates a secure, enterprise-grade Human Capital Management (HCM) platform, providing employees and administrators with access to workforce management tools via a login portal. The website demonstrates a professional and consistent brand presence, with clear navigation and integration of modern web technologies such as jQuery and Bootstrap. The platform supports two-factor authentication through Duo Security, enhancing its security posture. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy, though the website content and branding strongly suggest a legitimate enterprise service. Privacy and terms of use policies are clearly linked, indicating compliance awareness, but cookie consent mechanisms are not present on the login page.

L

Luftmilitært Samfund

luftmils.no

56

Luftmilitært Samfund (LMS) is a Norwegian non-profit organization dedicated to preserving the history, traditions, and interests of the Norwegian Air Force. The organization serves current and former officers and non-commissioned officers by organizing events, marking significant dates, and fostering social connections within the Air Force community. The website reflects a focused mission with professional design and relevant content tailored to its niche audience. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks important security headers and visible privacy or cookie policies, which are critical for compliance and user trust. The absence of contact information and incident response details limits transparency. The WHOIS data is unavailable due to Norid's privacy policies, but the domain and website content appear legitimate and consistent with the organization's mission. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and contact transparency. Strategic enhancements in these areas would strengthen trust and compliance while maintaining the organization's reputable presence.

M

Mansueto Ventures LLC

mansueto.com

65

Mansueto Ventures LLC operates as a prominent publisher of two major business media brands, Inc. and Fast Company. The company focuses on delivering high-quality content, awards, and events that inspire and inform entrepreneurs and business innovators globally. Their market position is strong, supported by a large and engaged audience across print, digital, social, and events. The website reflects a professional media publishing business model targeting entrepreneurs and progressive business leaders. Technically, the website is built on WordPress CMS with modern frameworks like Bootstrap and uses popular libraries such as jQuery and Slider Revolution for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No critical vulnerabilities or exposed sensitive data were detected in the provided content. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional nature of the site suggests a legitimate business presence. Overall, Mansueto Ventures presents a low-risk profile with a strong business and content foundation. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and security posture.

M

Mise Drak

misedrak.cz

54

Mise Drak is a Czech non-profit initiative focused on developing and launching a satellite to support Ukraine by providing high-resolution surveillance imagery. The project is led by Czech space companies clustered in Brno and enjoys support from government officials and international partners. The website is professionally designed, mobile-optimized, and integrates modern web technologies including CAPTCHA and secure payment gateways. However, the absence of WHOIS data and lack of explicit privacy and cookie policies reduce trust and compliance scores. The site uses multiple tracking and advertising tools but maintains a good security posture with HTTPS and CAPTCHA protections. Overall, the project appears legitimate and well-positioned in the Czech space technology and non-profit sectors, though improvements in transparency and compliance documentation are recommended.

S

Seesame

seesame.com

67

Seesame is a Slovak PR agency specializing in meaningful communication and data-driven campaigns. The company positions itself as a creative and analytical partner for businesses seeking effective public relations services. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Cookiebot to enhance SEO and privacy compliance. The technical infrastructure is modern and includes Google Tag Manager and analytics tools, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data raises questions about domain registration legitimacy, but the website content and social media presence support a credible business operation. Overall, the site is professional and trustworthy, with recommendations to enhance security and transparency.

B

Bund der Freien Waldorfschulen

lebentanzen.de

42

The website lebentanzen.de serves as an informational and educational platform dedicated to Eurythmie, a movement art taught at Waldorf schools. It is operated by the Bund der Freien Waldorfschulen and targets teachers, prospective students, and those interested in Eurythmie education. The site provides resources on training institutes, job vacancies, and general information about Eurythmie as a pedagogical and artistic discipline. Technically, the site is built on WordPress using the Divi theme and includes interactive maps via the Ultimate Maps plugin. The infrastructure is modern and mobile-optimized, though some improvements in accessibility and SEO could be made. Security-wise, the site uses HTTPS with a good SSL configuration but lacks several security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-branded, reflecting its niche educational focus.