Security Directory

S

Sameinaða útgáfufélagið ehf.

kjarninn.is

57

Heimildin is an Icelandic independent media company founded in 2023 by the merger of Stundin and Kjarninn. It operates as a digital news platform offering investigative journalism, news articles, multimedia content, and print newspaper issues. The website targets Icelandic readers interested in independent and investigative news coverage. The business model includes subscriptions and donations, positioning Heimildin as a trusted independent media outlet in Iceland.

VšĮ Respublikinė Panevėžio ligoninė is a well-established public healthcare institution in Lithuania, founded in 2007. It provides a broad range of medical services including consultations, diagnostics, treatment, and rehabilitation, serving patients primarily in the Panevėžys region. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive patient education resources. The institution maintains active communication channels including email, phone, and social media platforms, enhancing accessibility and engagement with its audience. The business model is focused on public healthcare service delivery, supported by government and healthcare partners.

V

VšĮ Vilniaus universiteto ligoninė Santaros klinikos

santa.lt

43

VšĮ Vilniaus universiteto ligoninė Santaros klinikos is a leading university hospital in Lithuania providing comprehensive healthcare services including emergency care, specialist consultations, pediatric and adult treatments, and biomedical research. The institution is well-established with a founding date of 1998 and maintains a strong online presence with professional content and clear patient-oriented information. The website demonstrates a moderate to high level of digital maturity, utilizing modern web technologies such as jQuery, Swiper.js, and Google reCAPTCHA to enhance user experience and security. Privacy and cookie policies are clearly presented and GDPR compliant, reflecting a commitment to data protection. Security posture is good with HTTPS enforced and bot protection in place, though some security headers are missing and no explicit vulnerability disclosure or incident response contacts are published. Overall, the website is trustworthy, professional, and safe for general audiences, supporting the hospital's mission and services effectively.

S

Soppart GmbH & Co. KG

soppart.com

10

Soppart GmbH & Co. KG is a medium-sized German company specializing in integrated building technology solutions with a strong focus on renewable energy, including photovoltaics, heat pumps, energy storage, and smart home systems. The company positions itself as a regional market leader in the Bavarian Forest area, offering comprehensive services from planning to installation. Their website reflects a professional and consistent brand image, supported by partnerships with reputable technology providers such as Sonnen and Stiebel Eltron. Technically, the website is built on TYPO3 CMS with modern web technologies and includes standard analytics and social media integrations. Security posture is generally good with HTTPS and privacy compliance, though there is room for improvement in security headers and explicit incident response information. The absence of WHOIS registration data is a notable concern that warrants further investigation to confirm domain legitimacy. Overall, the website and business present a trustworthy and professional front with minor technical and compliance enhancements recommended.

M

McCormick Solar GmbH

mccormick-solar.de

10

McCormick Solar GmbH is a medium-sized German company specializing in photovoltaic solar energy solutions for both private and commercial customers. The company offers a comprehensive range of services including consultation, installation, maintenance, monitoring, and energy storage solutions. Positioned as one of the largest photovoltaic providers in its regional market, McCormick Solar serves over 5,000 customers primarily around northern Lake Constance and the Black Forest region. Technically, the website is built on WordPress CMS, utilizing common libraries such as jQuery, Modernizr, and Google Maps API. The site integrates a consent management platform (Usercentrics) to comply with GDPR requirements and employs Google Analytics and Facebook social plugins for analytics and marketing. The website demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on contact forms, but lacks explicit security headers such as Content-Security-Policy or Strict-Transport-Security. No visible security or incident response policies are published, which could be improved to enhance trust and compliance. The domain registration data is consistent with the business claims, indicating legitimacy. Overall, the website is professional, content-rich, and trustworthy with moderate technical and security maturity. Strategic improvements in security headers and published policies would strengthen the security posture and compliance standing.

Barnmorskan.se is a professionally maintained website owned and operated by Svenska Barnmorskeförbundet, the Swedish Midwives Association. It serves as a communication and information platform dedicated to midwives and those interested in midwifery, providing news, blogs, research articles, and professional portraits. The site targets healthcare professionals and stakeholders in Sweden, positioning itself as a niche media outlet within the healthcare and non-profit sectors. The business model focuses on content dissemination and professional dialogue rather than commercial transactions. Technically, the website is built on WordPress CMS with the Yoast SEO plugin, leveraging modern web technologies such as jQuery and Modernizr. Hosting and domain registration are managed by Loopia AB, a reputable Swedish registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of structured data and canonical tags supports search engine visibility. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. There is no explicit privacy or cookie policy found, which is a compliance gap under GDPR. The site uses an error reporting service (mindiusSentry) indicating some monitoring capability but lacks public incident response or vulnerability disclosure information. Overall, Barnmorskan.se is a credible and trustworthy professional association website with good content quality and technical implementation. However, it would benefit from improved privacy compliance, enhanced security headers, and clearer contact and incident response information to strengthen its security posture and regulatory adherence.

F

FIDUCIAL

fiducial.fr

57

FIDUCIAL is a well-established French company providing a wide range of business services including accounting, legal advice, payroll management, auditing, IT solutions, and office equipment. The website targets business professionals and SMEs in France, offering comprehensive solutions to support business growth and operational efficiency. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy policies are lacking. WHOIS data is not publicly available, likely due to privacy protection, but the website's professional appearance and domain usage suggest legitimacy. Overall, the site presents a trustworthy and credible business front with room for improvement in security and compliance documentation.

W

Wirtschaftsförderungsgesellschaft der Elektrohandwerke mbH (WFE)

wfe-shop.de

43

The WFE-Shop is a specialized B2B e-commerce platform serving the electrical trade sector in Germany. It provides essential work materials such as digital and print protocols, calculation aids, technical and business literature, and promotional items tailored for electrical craftsmen and Innungsmitglieder (guild members). The platform is positioned as a niche leader supporting the electrical trade community with targeted products and services. Technically, the website is built on the Magento platform, leveraging common JavaScript libraries and integrating Google reCAPTCHA and Usercentrics for security and privacy compliance. While the site demonstrates good content quality, navigation, and GDPR compliance, there are areas for security enhancement, notably updating outdated libraries and implementing security headers. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

C

Cortusa Group s.r.o.

cortusa.cz

53

Cortusa Group s.r.o. is a small regional real estate developer based in the Czech Republic, specializing in residential housing projects near Plzeň. The company emphasizes affordable, modern, and energy-efficient homes with a focus on customer satisfaction and proximity to nature. Their website reflects a professional approach with clear contact information, project showcases, and financing options. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and CookieScript for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks visible advanced security headers and explicit security policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for small businesses. Overall, the website is safe, compliant with GDPR, and presents a trustworthy business front.

The EQUATOR Network is a globally recognized non-profit organization dedicated to improving the quality and transparency of health research reporting. It offers a comprehensive library of reporting guidelines, educational toolkits, training courses, and resources aimed at researchers, journal editors, and healthcare professionals. The website reflects a strong market position supported by partnerships with reputable organizations and endorsements from major medical journals. Technically, the site is built on WordPress with common web technologies such as jQuery, Google Analytics, and Cookiebot for consent management. While the site is well-structured and mobile-optimized, it uses an outdated jQuery version which poses a minor security risk. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a public security policy. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and professional, though WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization.

G

GAMET Sp. z o. o.

gamet.eu

41

GAMET Sp. z o. o. is a well-established Polish manufacturer specializing in decorative furniture and door fittings with over 35 years of experience. The company operates internationally, serving manufacturers, retailers, and designers, and is part of the larger Stalmot Group. Their product range includes furniture handles, knobs, hooks, feet, door handles, and technical fittings. The website is professionally designed using WordPress and Elementor, featuring multilingual support and modern web technologies. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a mature digital presence with good business credibility and compliance with GDPR regulations.

M

meine Buchhandlung

buchhandlung.de

68

The website www.buchhandlung.de serves as a German-language platform to help users find local bookstores across Germany. It focuses on promoting the tolino device family, eBooks, books, and audiobooks, positioning itself as a niche retail discovery service. The platform integrates Google Maps for location services, requiring user consent for functional cookies related to map embedding. The site demonstrates a moderate level of digital maturity with use of jQuery, Modernizr, and Google Maps API, and shows good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. However, no direct contact information or incident response details are published, which could be improved for better trust and transparency.

H

HUSS VERLAG GmbH

transport-online.de

55

Transport-online.de is a professional German-language media portal operated by HUSS VERLAG GmbH, specializing in transport and logistics industry news, analysis, and resources. The website targets transport entrepreneurs, freight forwarders, and logistics service providers, offering biweekly publications, newsletters, job listings, and event information. The platform holds a strong market position within its niche, supported by a consistent brand presence and comprehensive industry coverage. Technically, the website is built on Drupal 9 CMS, utilizing modern web technologies including Matomo analytics for privacy-conscious tracking, Google reCAPTCHA for form security, and a Consent Management Platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs standard security measures but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service pages. Overall, the website is trustworthy and professional with a solid business model and technical foundation. Strategic improvements in privacy transparency, security headers, and contact information would enhance compliance and user trust.

C

Civilstyrelsen

hoeringsportalen.dk

54

Høringsportalen.dk is an official Danish government portal managed by Civilstyrelsen, providing a centralized digital gateway for public access to legislative proposals, draft regulations, and consultation responses. The platform aims to increase transparency in the legislative process by offering search capabilities and subscription feeds for hearings. The website is positioned as a trusted government service with a clear target audience including the general public, legal professionals, and government stakeholders. Technically, the website uses a traditional ASP.NET framework with client-side libraries such as jQuery, jQuery UI, and Modernizr. The site demonstrates moderate performance and basic mobile optimization. Accessibility is present but could be improved. SEO and metadata usage are basic, with no advanced structured data or Open Graph tags detected. From a security perspective, the site lacks several modern security best practices such as DNSSEC, security headers, and explicit HTTPS enforcement visible in the content. No privacy or cookie policies are present, and no incident response or vulnerability disclosure information is published. However, no critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is consistent with a legitimate government entity, supporting the trustworthiness of the site. Overall, the website is functional and credible as a government service portal but would benefit from enhanced security measures, privacy compliance, and improved technical modernization to strengthen its posture and user trust.

C

Czech Airlines Technics, a.s.

csatechnics.com

55

Czech Airlines Technics, a.s. is a medium-sized, established provider of aircraft maintenance and technical services based in the Czech Republic. The company offers a comprehensive range of services including base and line maintenance, landing gear overhaul, component maintenance, structural repairs, and CAMO support, targeting airlines and aviation operators. Their market position is supported by a decade-plus domain age and a professional web presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for privacy compliance, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing incident response policies, and enabling DNSSEC to further strengthen trust and security.

Y

young academy rostock

young-academy-rostock.de

55

The young academy rostock is a specialized educational institution focused on the early musical development of gifted children and youth. Affiliated with the Hochschule für Musik und Theater Rostock, it offers workshops, early university studies, and organizes events and competitions to foster musical talent. The website reflects a well-structured, professionally designed platform that effectively communicates its mission and services to its target audience of musically gifted youth, their families, and educators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The WHOIS data aligns with the institution's affiliation, supporting legitimacy. Overall, the site is trustworthy and serves its educational purpose well.

Status.net is a small business resource website founded in 2000, providing useful business templates and educational articles focused on management and organizational topics. The site targets business professionals and organizations seeking practical resources to improve operations and decision-making. Technically, the website is built on WordPress with a moderate technology stack including jQuery and various analytics and advertising scripts. Hosting appears to be on Amazon AWS infrastructure. The site demonstrates good mobile optimization and SEO practices but has basic accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and does not provide a cookie consent mechanism. Privacy compliance is limited, with a basic privacy policy but no cookie or terms of service pages. No direct contact information or security policies are published, which limits transparency. Overall, the domain registration data is consistent and supports the legitimacy of the business. The website content is safe and appropriate for a general audience.

T

Tourismus und Stadtmarketing Husum GmbH

nordsee-congress.de

49

Nordsee Congress is a regional event and tourism marketing organization focused on promoting Husum, Germany as a premier destination for conferences, trade fairs, and congresses. The website provides comprehensive information about venues, hotels, event planning services, and local attractions, targeting event organizers and business travelers. The organization appears established with over 25 years of experience in hosting large events, supported by professional content and a consistent brand presence. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, and Google Tag Manager, with a CMS likely based on LIS CMS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Cookie consent is implemented with an opt-in mechanism, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Contact information is clearly provided, including email, phone, and social media channels, supporting business credibility. Overall, the website is professional, trustworthy, and well-suited for its target audience, with room for improvement in security transparency and accessibility compliance.

T

Tourismus und Stadtmarketing Husum GmbH

husum-tourismus.de

10

The website www.husum-tourismus.de serves as the official tourism portal for Husum and the Husumer Bucht region in Germany. It provides comprehensive information on accommodations, events, cultural activities, and travel services, targeting tourists and visitors interested in the North Sea area. The business operates as a regional tourism marketing organization, facilitating bookings and promoting local attractions. The site demonstrates a consistent brand presence and professional content quality, supported by active social media channels and clear contact information. Technically, the website employs a modern JavaScript stack including Matomo Tag Manager for analytics and Consentmanager.net for GDPR-compliant cookie management. It is built on the LIS CMS platform and hosted with domain control services linked to GoDaddy. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. However, security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements a consent mechanism for cookies, reflecting good privacy compliance. No critical vulnerabilities or exposed sensitive data were found. However, the absence of a published security policy or incident response contact limits transparency. The WHOIS data aligns with a legitimate regional tourism entity, with no suspicious registration patterns. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

Z

Zagrebačka županija

zagrebacka-zupanija.hr

10

Zagrebačka županija is the official regional government entity for the Zagreb County in Croatia, providing a comprehensive digital platform for public information, news, tenders, and administrative transparency. The website serves residents, businesses, students, and stakeholders with timely updates and access to official documents and services. The site maintains a consistent brand identity and includes social media integration to enhance public engagement. Technically, the website employs modern JavaScript libraries such as jQuery and PhotoSwipe, uses Google Fonts, and implements a cookie consent mechanism with anonymized Google Analytics tracking. Accessibility features are thoughtfully integrated, improving usability for diverse users. Security posture is moderate with HTTPS implied and cookie consent in place, but lacks explicit security headers and incident response information. The domain is well-established since 2001, registered with the Croatian academic network registrar CARNET, reinforcing legitimacy. Overall, the site is professional, trustworthy, and serves its government function effectively.

F

Fundacja Polska Koalicja Pacjentów Onkologicznych

pkpo.pl

45

Fundacja Polska Koalicja Pacjentów Onkologicznych is a Polish non-profit coalition that unites oncology patient organizations to provide support, advocacy, and information to cancer patients and their families. The website serves as a hub for resources, cooperation with partner organizations, and public engagement. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and a cookie consent mechanism, hosted by home.pl S.A. The security posture is solid with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the website is professional, trustworthy, and well-positioned in the healthcare non-profit sector in Poland.

Síť pro rodinu, z.s. is a Czech non-profit organization established in 2015 that serves as an umbrella for maternity, family, and community centers. It focuses on promoting family-friendly legislation, supporting family centers, and fostering a family-friendly climate in society and the labor market. The organization offers advocacy, networking, educational events, and family-friendly company audits and awards. The website reflects a stable market position with clear communication and trust indicators such as testimonials and social media presence. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and libraries like Modernizr and FastClick. It is hosted by a Czech hosting provider and shows good mobile optimization and SEO practices. However, it lacks some security headers and privacy compliance elements such as privacy and cookie policies. From a security perspective, the site enforces HTTPS and does not expose sensitive data. No vulnerabilities or malicious content were detected. The absence of security headers and privacy policies are notable gaps. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

A

Arbeitsgemeinschaft Medienwerbung GmbH im Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

elektrobetrieb-finden.de

49

The website www.elektrohandwerk.de/fachbetriebssuche.html serves as a professional platform for locating qualified electrical and information technology craft businesses in Germany. Operated by the Arbeitsgemeinschaft Medienwerbung GmbH under the Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke (ZVEH), it offers a comprehensive search function, certification information, and thematic content aimed at end customers, commercial clients, and public sector entities. The platform holds a strong market position as a trusted intermediary in the energy and electrical craft sector, supported by multiple certifications and a consistent brand presence. Technically, the site is built on the TYPO3 CMS and integrates modern technologies including Google Tag Manager, TikTok Analytics, Usercentrics for consent management, and Google Maps API for geolocation services. The hosting is provided by a German hosting provider (RZone), ensuring regional compliance and performance. The website demonstrates good mobile optimization, SEO practices, and accessibility features, although some accessibility aspects could be enhanced. From a security perspective, the site enforces HTTPS and employs consent management for cookies and tracking scripts, reflecting GDPR compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not evident in the HTML source and could be improved. No direct incident response or vulnerability disclosure policies are published, which is a potential area for enhancement. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. It maintains a good balance between user experience, compliance, and technical implementation, making it a reliable resource for its target audience.

A

Amour Getaways

amourgetaways.com

44

Amour Getaways is a specialized hospitality service provider focusing on unique, romantic travel adventures and events primarily in Puerto Rico and surrounding tropical locations. The company targets couples and groups seeking intimate and exclusive travel experiences, offering services such as tropical getaways, concierge services, romantic vacations, and exclusive retreats. Their market position is niche, catering to luxury and personalized travel experiences with a small business scale. Technically, the website is built on WordPress with modern plugins including Gravity Forms for contact and lead capture, Google Tag Manager, and Google Analytics for tracking. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and employs some best practices such as IP anonymization in analytics and spam prevention in forms. However, it lacks visible security headers and published privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain is unusual and reduces trust slightly, though the site content and contact information appear legitimate. Overall, the website presents a professional and trustworthy front for a small hospitality business but should improve privacy compliance and security hardening to enhance trust and regulatory adherence.

Ř

ŘÍHA

naholou.cz

47

The website 'Na holou' represents a small cultural theatre group based in the Czech Republic, active since at least 2005. It offers information about theatrical performances, photo and video galleries, and contact details primarily via email and Facebook. The business model appears to be focused on local cultural entertainment with a niche audience. Technically, the site is built using RapidWeaver CMS with common JavaScript libraries and Google Fonts, but lacks modern security and privacy features. The site uses HTTP URLs without HTTPS enforcement, lacks privacy and cookie policies, and does not implement security headers or secure forms. Overall, the security posture is weak, and privacy compliance is minimal. The domain age and WHOIS data support the legitimacy of the site as a long-standing small cultural entity. Strategic improvements in security, privacy compliance, and HTTPS adoption are recommended to enhance trust and protect visitors.

V

Verein Standortmarketing Vaduz

erlebevaduz.li

62

Erlebe Vaduz is a non-profit association dedicated to promoting the capital city of Liechtenstein, Vaduz, by providing comprehensive information on local events, shopping, gastronomy, culture, and leisure activities. The website serves as a central marketing platform for local businesses and tourists, offering event calendars, member listings, and visitor guides. The target audience includes tourists, local residents, families, and couples seeking to explore Vaduz. The business model focuses on community engagement and local commerce promotion, positioning itself as a key player in Vaduz's tourism and retail sectors. Technically, the website is built on WordPress using a custom theme and integrates modern technologies such as Gravity Forms for data collection, Instagram Feed Pro for social media content, and Google Maps API for location services. The site demonstrates good digital maturity with responsive design, moderate performance, and SEO optimization. Security measures include HTTPS enforcement, strong SSL configuration, and appropriate security headers, although there is room for improvement in cookie consent mechanisms and published security policies. From a security perspective, the site maintains a solid posture with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive GDPR-compliant privacy policy, but lacks an explicit cookie consent banner. Contact information is clearly provided, enhancing business credibility and user trust. No signs of malicious content or WAF blocking were detected, allowing full content accessibility. Overall, Erlebe Vaduz presents a trustworthy, well-maintained, and user-friendly platform that effectively supports local tourism and commerce. Strategic recommendations include implementing explicit cookie consent, publishing terms of service and security policies, and enhancing accessibility features to further strengthen compliance and user experience.

J

JTRE a.s.

jtre.sk

53

JTRE a.s. is a leading real estate development company based in Slovakia with a strong presence in the Central and Eastern European market. The company specializes in a wide range of real estate projects including residential, office, multifunctional, hotel, retail, and industrial developments. Their website reflects a mature and professional business with a clear market position and extensive project portfolio. The content is well-structured, professionally designed, and targets investors, tenants, and clients interested in real estate development in the region. Technically, the website is built on Drupal 10 with modern JavaScript libraries and tracking tools, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website and business demonstrate high credibility and trustworthiness.

H

Hochschule Wismar

hs-wismar.de

11

Hochschule Wismar is a German University of Applied Sciences specializing in technology, business, and design disciplines. It serves a diverse audience including prospective and current students, researchers, and industry partners. The institution emphasizes interdisciplinary education, practical learning, and strong regional and international collaborations. The website reflects a well-established academic entity with comprehensive services, research initiatives, and student support mechanisms. The presence of subsidiaries such as WINGS and Forschungs-GmbH further supports its academic and commercial activities. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like jQuery and Modernizr, and includes responsive design and accessibility features. The site uses Matomo for privacy-conscious analytics and implements a cookie consent mechanism compliant with GDPR. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and anonymizes analytics data, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the institution's identity, hosted on academic name servers, indicating legitimacy. Overall, the website is professional, secure, and trustworthy, serving its educational mission effectively. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

H

Hochschule für Musik und Theater Rostock

hmt-rostock.de

56

The Hochschule für Musik und Theater Rostock is a regional higher education institution specializing in music, theater, teacher training, and musicology. It plays a significant cultural role in Rostock and the surrounding region by offering diverse educational programs and hosting cultural events. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern JavaScript libraries to deliver a responsive and accessible user experience. The institution maintains active engagement through social media channels and provides comprehensive contact information and privacy policies, supporting trust and transparency. Security posture is solid with HTTPS enforced and obfuscated emails, though improvements can be made by implementing cookie consent mechanisms and security headers. Overall, the website and domain registration data align well, indicating a legitimate and credible educational entity.

U

Universität Greifswald

uni-greifswald.de

59

Universität Greifswald is a historic and research-intensive public university in Germany, founded in 1456. It offers a wide range of academic programs and research initiatives, targeting students, researchers, and international partners. The website is professionally designed, content-rich, and well-structured, reflecting the institution's academic stature and community engagement. Technically, the site uses TYPO3 CMS with modern JavaScript libraries, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and DNSSEC, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the domain and website present a trustworthy and credible digital presence for the university.

W

WERK3 Werbeagentur GmbH & Co. KG

werk3.de

54

WERK3 Werbeagentur GmbH & Co. KG is a small, full-service advertising agency based in Rostock, Germany. The company specializes in marketing strategies, corporate design, campaign conception, and website development, positioning itself as a creative and award-winning agency within the regional media sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking comprehensive marketing solutions. Technically, the website is built on TYPO3 CMS and leverages a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. Analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel are integrated, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. From a security perspective, the website enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website's claims, indicating a legitimate and trustworthy online presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish formal security policies, and improve accessibility to further strengthen its security posture and user trust.

N

Nase Media a.s.

parlamentnilisty.cz

10

ParlamentniListy.cz is a well-established Czech political news and commentary website operated by Nase Media a.s. It offers a broad range of political news, interviews, opinion pieces, and profiles of politicians and institutions. The site targets Czech-speaking audiences interested in politics and current affairs, leveraging advertising and subscription models for revenue. Technically, the site employs modern web technologies including Google services for ads and analytics, Facebook SDK, and a consent management platform to ensure GDPR compliance. The website is mobile-optimized and structured for SEO with JSON-LD data. Security-wise, the site enforces HTTPS and uses reCAPTCHA to mitigate bots, but lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection.

E

European School Education Platform Support

esep-support.eu

57

The European School Education Platform Support website serves as an official support portal for the European School Education Platform, targeting school teachers and education professionals across Europe. It offers a comprehensive set of guides, knowledgebase articles, and release announcements to assist users in navigating and utilizing the platform effectively. The site is multilingual, supporting a wide range of European languages, enhancing accessibility for its diverse audience. The business model focuses on providing informational and support services rather than direct commercial transactions. Technically, the website is built on the DeskPRO helpdesk platform, leveraging modern web technologies including FontAwesome, Google Fonts, and polyfills for broad browser compatibility. The hosting provider is OVH SAS, a reputable European hosting company. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The technical infrastructure is solid but could benefit from additional security headers and enhanced privacy compliance features. From a security perspective, the site enforces HTTPS and uses secure login forms, indicating a baseline security posture. However, it lacks explicit security headers such as Content Security Policy and HSTS, and does not provide publicly accessible security policies or vulnerability disclosure mechanisms. No direct contact emails or phone numbers are provided, limiting direct communication channels. There are no signs of tracking or advertising scripts, which supports user privacy but also indicates limited analytics usage. Overall, the website is trustworthy and professional, serving its educational support purpose well. The main risks relate to the absence of privacy and cookie policies, lack of explicit security headers, and missing incident response information. Addressing these gaps would enhance compliance and security posture, further strengthening user trust and regulatory alignment.

The website www.konferenz-gesundheitswirtschaft.de represents the 21st National Industry Conference on Health Economy organized by BioCon Valley GmbH. It serves as a professional platform for decision-makers from politics, economy, and science to discuss healthcare sector challenges and innovations. The site is well-branded, content-rich, and targets a specialized audience interested in healthcare industry developments and networking. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries like jQuery and Modernizr, offering good mobile responsiveness and SEO optimization. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and formal security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

R

Rescuetrade OHG

rescuetrade.com

54

Rescue Trade OHG is a German-based manufacturer and global distributor specializing in disposable medical bedding products such as blankets, pillows, sheets, and transport sheets. Established in 2004, the company positions itself as a pioneer in the disposable bedding market with a strong focus on hygiene and patient safety. Their products serve a broad audience including hospitals, emergency medical services, ambulances, fire departments, and other public institutions. The company emphasizes compliance with international medical device regulations, holding ISO 13485 certification and FDA registration, which underscores their commitment to quality and regulatory adherence. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI plugins to deliver a responsive and user-friendly experience. The site is well-structured with clear navigation and professional design, although some accessibility features could be enhanced. Performance is moderate with no major issues detected. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The contact form redirects users to a contact page rather than processing data directly, reducing immediate risk. Nevertheless, the lack of published incident response policies, vulnerability disclosure mechanisms, and security.txt files suggests limited transparency in security operations. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and consistency with the business claims. This discrepancy warrants further investigation to confirm domain ownership and trustworthiness. Overall, Rescue Trade OHG presents a professional and credible online presence with strong business and regulatory credentials. The main risks lie in the missing WHOIS data and some gaps in security best practices. Addressing these issues would enhance trust and compliance, supporting the company’s market position as a reliable medical device manufacturer.

R

Rescuetrade OHG

rescuetrade.de

53

Rescue Trade OHG is a German-based manufacturer and distributor specializing in medical disposable products, particularly single-use bedding sets, transfer sheets, and transport cloths for patient care. Established in 2004, the company serves a broad clientele including emergency services, hospitals, care facilities, and governmental agencies worldwide. Their products are certified under ISO 13485 and comply with FDA and MDR regulations, positioning them as a trusted provider in the healthcare sector. The website reflects a professional and consistent brand image with clear business information and downloadable resources for customers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience. While performance is moderate, the site is well-structured with good SEO practices and mobile optimization. However, no CMS or hosting provider details are explicitly detected. Security-wise, HTTPS is implied, and forms use validation scripts, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. Overall, the security posture is adequate but could benefit from enhanced HTTP security headers and explicit privacy controls. The lack of an incident response contact or vulnerability disclosure reduces transparency. The domain WHOIS data is minimal but consistent with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

K

KMR Service GmbH

kmr-fernwaerme.de

47

KMR Service GmbH is a specialized German company providing industrial services and products in the energy sector, focusing on district heating (Nah- und Fernwärme) and related services such as pipe systems, insulation, error detection, and container construction. With over two decades of experience, the company positions itself as a reliable B2B partner serving clients nationwide in Germany, including biogas and agricultural sectors. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and includes GDPR-compliant cookie and privacy policies, demonstrating good privacy practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website is trustworthy, well-maintained, and suitable for its target industrial audience.

B

BioCon Valley® GmbH

bioconvalley.org

48

BioCon Valley® GmbH operates as a regional cluster and network organization focused on the life sciences and healthcare sector in Mecklenburg-Vorpommern, Germany. The company supports industry stakeholders through network management, project initiation, internationalization, and public relations, positioning itself as a key player in the regional healthcare economy. The website reflects a professional and well-structured digital presence, leveraging TYPO3 CMS and modern frontend technologies to deliver content effectively. The site is GDPR compliant with a comprehensive privacy policy and cookie consent mechanism, enhancing user trust and regulatory adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to certifications and consistent branding.

C

Chiesi GmbH

chiesi.de

67

Chiesi GmbH is a well-established pharmaceutical company operating in Germany as part of the international Chiesi Group. The company focuses on developing and distributing pharmaceutical products in key therapeutic areas such as respiratory diseases, neonatology, rare diseases, and transplantation. The website targets healthcare professionals, patients, partners, and job seekers, providing comprehensive information about products, corporate responsibility, and career opportunities. The company holds a B Corp certification, indicating a commitment to sustainability and ethical business practices. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with GDPR and providing a good user experience. The site is mobile optimized, has clear navigation, and integrates tracking and analytics responsibly. Security measures include HTTPS enforcement and standard security headers, with no visible vulnerabilities or exposed sensitive data. The security posture is strong, though the site could benefit from publishing explicit security policies and a vulnerability disclosure framework. Contact information is clearly provided, including phone numbers, physical address, and social media channels, enhancing business credibility. No WAF or blocking mechanisms interfere with content accessibility, and the WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Chiesi GmbH's website reflects a professional, secure, and compliant digital presence aligned with its business objectives and regulatory requirements.

A

Agrokor

agrokor.hr

63

Agrokor Nagodba website serves as an official communication platform for the Agrokor group’s extraordinary administration and financial restructuring process. It provides detailed information about settlement plans, legal proceedings, and updates for creditors and investors. The site targets stakeholders involved in or affected by Agrokor's complex debt restructuring. Technically, the website is built on WordPress with modern JavaScript libraries and plugins, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers could be enhanced. Privacy compliance is strong, with GDPR-aligned cookie consent mechanisms and clear privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-maintained, reflecting the serious nature of the business restructuring.

L

LIEPS GmbH

lieps.de

66

LIEPS GmbH is a well-established advertising agency based in Neubrandenburg, Germany, offering a comprehensive suite of marketing, design, web development, print, and video production services. With nearly two decades of experience, the agency serves a diverse clientele including startups and established businesses, positioning itself as a full-service creative partner. The website reflects a professional and consistent brand image, showcasing client references and a broad portfolio of services. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and TYPO3 CMS, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and incorporates standard SEO and accessibility features, although some advanced security headers could be improved. Analytics and marketing tools such as Google Analytics and Metricool are used with appropriate cookie consent mechanisms in place, indicating good privacy compliance. From a security perspective, the site enforces HTTPS and shows no signs of vulnerabilities or exposed sensitive data. However, there is room for enhancement in security headers and incident response transparency. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection that would obscure legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and formal security policies would further strengthen its posture.

von Tettau | Rechtsanwälte | PartG mbB is a specialized German law firm focusing on renewable energy legal services, particularly in wind energy and photovoltaics. With over two decades of experience, the firm serves a nationwide clientele including project developers, operators, manufacturers, financiers, and investors. Their market position is that of a leading medium-sized law firm in the renewable energy sector in Germany, offering comprehensive legal expertise in planning, environmental, energy, and transactional law. The website reflects a professional and consistent brand image with detailed service descriptions and transparent contact information. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and rocksolid-slider for interactive elements. The hosting is provided by kasserver.com, and the site is optimized for mobile devices with good accessibility and SEO practices. Performance is moderate, with no significant technical debt or vulnerabilities detected in the frontend code. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism limited to necessary cookies, indicating good privacy compliance. However, there is no explicit security policy or incident response contact information published, and security headers are not visibly configured, representing areas for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. The risk profile is low, with recommendations focusing on enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

E

EDF Renewables North America

edf-re.ca

40

EDF Renewables North America operates as a leading independent power producer and service provider specializing in renewable energy projects across Canada and the U.S. Their portfolio includes wind (onshore and offshore), solar photovoltaic, energy storage, and electric vehicle charging solutions. With over 200 employees and offices in major Canadian cities, they have developed nearly 2,000 MW of renewable energy capacity and continue to expand their pipeline. The company emphasizes environmental stewardship and community engagement, aligning with the broader EDF Group's sustainability goals. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, providing a professional and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but is offset by strong branding and external trust signals. Overall, the company presents a credible and mature digital presence in the renewable energy sector.

E

EDF Renewables Australia

edf-re.com.au

49

EDF Renewables Australia is a large energy company specializing in the development, construction, and operation of renewable energy power generation plants including onshore wind, offshore wind, and solar projects. The company positions itself as a major player in the global energy transition, leveraging expertise and innovation to combat climate change. The website reflects a professional and consistent brand presence with clear business focus and target audience in Australia. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO. Security posture is solid with HTTPS and secure forms, though lacking some security headers and visible privacy compliance elements. Overall, the site is trustworthy and well-maintained, though improvements in privacy policy visibility and security headers are recommended.

Z

zone35 GmbH & Co. KG

zone35.de

61

zone35 GmbH & Co. KG is a medium-sized, owner-managed digital agency based in Berlin, specializing in healthcare and welfare sectors. Established in 1999, the company offers strategic planning, crossmedia design, and tailored digital solutions including online consulting platforms such as beranet.de. Their market position is solid within their niche, supported by a portfolio of projects and partnerships with health-focused digital products. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates Piwik/Matomo analytics, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is good with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a positive business credibility profile.

M

Myndigheten för ungdoms- och civilsamhällesfrågor (MUCF)

ungidag.se

45

Ung idag is an official Swedish government web-based monitoring system operated by the Myndigheten för ungdoms- och civilsamhällesfrågor (MUCF). It provides comprehensive statistics and information about the living conditions of young people aged 13-25 in Sweden, serving researchers, policymakers, and the public. The website is well-branded with consistent government agency logos and offers detailed statistical indicators across multiple youth-related domains. Technically, the site uses modern JavaScript libraries, Matomo analytics with a cookie consent mechanism, and is hosted by Loopia AB with HTTPS enforced. However, it lacks some security best practices such as DNSSEC and security headers. Privacy compliance is basic, with no dedicated privacy policy or terms of service pages found. Contact information is clearly provided with official email and phone contacts. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

S

Sturm, Ruger & Co., Inc.

ruger.com

68

Sturm, Ruger & Co., Inc. is a leading American firearms manufacturer with a broad portfolio of products including pistols, revolvers, rifles, and accessories. The company has a strong market position supported by a well-structured website that provides detailed product information, customer service, and investor relations. The website targets firearm consumers, law enforcement, and military sectors, emphasizing responsible firearm ownership. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with good mobile optimization and navigation clarity. Security posture is moderate with HTTPS usage and anonymized analytics but lacks explicit security headers and a cookie consent mechanism. The domain registration is consistent with the company's long history and public business presence, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with basic privacy policies, though improvements in cookie consent and security headers are recommended.

K

KRM AS

krm.no

53

KRM AS is a Norwegian technical vocational school and course center specializing in industrial machinery maintenance and hydraulics. Established in 1991 and accredited as a technical vocational school in 2021, KRM offers a broad range of technical courses both in-person at their Geilo center and online. Their market position is that of a niche, established education provider serving professionals in industrial and energy sectors. Technically, the website uses a modern tech stack including Snapper CMS, jQuery, Foundation CSS, and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers could be improved. No critical vulnerabilities or blocking WAFs were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

V

Vista Analyse AS

vista-analyse.no

53

Vista Analyse AS is a Norwegian social science analysis company specializing in economic analysis, evaluation, advisory, and research services. Established in 2000, it holds a strong market position within the Norwegian public and private sectors, offering a broad range of services across multiple industries including energy, environment, transportation, welfare, and more. The website reflects a professional and consistent brand image with comprehensive content about services, staff, and publications. Technically, the site uses a modern technology stack including ProcessWire CMS, jQuery, UIkit, and Google Analytics, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and basic security headers, though there is room for improvement in explicit security policies and headers. Overall, the site is trustworthy, compliant with GDPR indications, and well-maintained.