Security Directory

C

Costco Wholesale Canada Ltd.

costco.ca

54

Costco Wholesale Canada Ltd. operates a large membership-based wholesale retail business serving Canadian consumers. The website offers a broad range of products including electronics, furniture, appliances, and more, with a focus on delivering warehouse pricing and direct home delivery. The company is a subsidiary of the global Costco Wholesale Corporation and holds a strong market position in the Canadian retail sector. The website is professionally designed, mobile-optimized, and provides a seamless user experience in French Canadian language. Technically, the site leverages modern frameworks such as Next.js and React, with performance monitoring and cookie consent tools integrated to ensure compliance and usability. Security posture is strong with HTTPS enforced, security headers present, and session management implemented. However, explicit security policies and incident response information are not publicly disclosed, which could be improved. Overall, the site is trustworthy and aligns with the business's reputation and scale.

R

Ramco Systems Corporation

ramco.com

74

Ramco Systems Corporation is a global enterprise software provider specializing in cloud and mobile-based solutions including HR & Global Payroll, ERP, Logistics, Enterprise Asset Management, and Aviation MRO software. The company serves over 1000 customers across 35 countries, positioning itself as a significant player in the technology and transportation sectors. Their offerings are infused with AI and ML capabilities, targeting enterprises seeking digital transformation and operational excellence. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Bootstrap, Google Fonts, and multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good performance, mobile optimization, and accessibility, with comprehensive SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are securely implemented via HubSpot, and cookie consent mechanisms are in place, indicating a mature privacy posture. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence consistent with an enterprise-grade software company. The absence of public WHOIS data suggests privacy protection, which is common and justified for such businesses. The site is free from adult or questionable content, and no WAF or blocking mechanisms interfere with accessibility.

K

Kunststoff-Netzwerk Franken e.V.

faszination-kunststoff.de

64

Faszination Kunststoff is an educational initiative by Kunststoff-Netzwerk Franken e.V., focused on promoting careers, training, and studies in the plastics industry. The website serves as a comprehensive platform offering information on vocational training, study programs, career opportunities, and industry knowledge, targeting students, trainees, and companies within the plastics sector primarily in Germany. The platform positions itself as a niche educational resource with a professional and consistent brand presence. Technically, the website is built on WordPress 6.8.2 with modern plugins such as WPBakery Page Builder and Complianz for GDPR compliance. It integrates Google Maps API for interactive location services and uses standard web technologies like JavaScript and jQuery. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests an opportunity to enhance transparency and preparedness. The WHOIS data indicates a consistent and legitimate domain registration aligned with the business purpose. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include implementing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

B

BeachTech

beach-tech.com

72

BeachTech is a German-based company specializing in the manufacturing and distribution of professional beach cleaning machines. The company positions itself as a global provider of environmentally friendly and efficient beach cleaning solutions, targeting municipalities and businesses responsible for beach maintenance. The website reflects a medium-sized enterprise with consistent branding linked to its parent company, Kässbohrer Geländefahrzeug AG. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies and multi-language support indicating a mature digital presence. Security-wise, the site uses HTTPS and implements cookie consent via Cookiebot, but lacks visible security headers and formal security policies, which could be improved. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and partner links suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

L

LookUs Scientific

bilimselprogram.com

48

LookUs Scientific operates bilimselprogram.com, a specialized online platform for creating and managing scientific event programs. The service targets scientific meeting organizers and participants, offering features such as session scheduling, conflict detection, multi-user collaboration, and personal agenda creation. The business model is SaaS-focused, catering to a niche market in Turkey with a small company size and a domain established in 2013. Technically, the website uses modern front-end technologies including Bootstrap and JavaScript libraries, with Cloudflare DNS and Google Analytics integrations. Mobile optimization and user experience are good, though accessibility and SEO are basic. Security posture is moderate but lacks DNSSEC, security headers, and visible HTTPS confirmation in the provided data. Privacy and cookie policies are absent, and no incident response or vulnerability disclosure information is published. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

L

LookUs Scientific

abstractagent.com

43

AbstractAgent™ is a specialized technology platform developed and operated by LookUs Scientific, providing comprehensive solutions for managing scientific conference abstracts. The platform supports online submission, peer review, scoring, publication, and integration with mobile applications and scientific programs. It is positioned as a leading abstract management system in Turkey with a long operational history since 1999 and a large user base. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, and offers mobile apps for iOS and Android. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies. Overall, the website is professional and functional but would benefit from enhanced transparency and security practices.

The website banxa.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any substantive website content, including business descriptions, policies, or contact information. The domain is registered since 2007 with GoDaddy and shows legitimate domain status protections, indicating a stable and established ownership. However, no privacy, cookie, or terms of service policies are detectable in the accessible content. The technical infrastructure relies on Cloudflare for DNS and security, but no further technology stack details are available due to content blocking. Security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates a proactive security measure. Overall, the site is currently not analyzable beyond the WAF challenge, resulting in a low AI score and limited insights.

Eclipse XRAY operates as a specialized blockchain explorer focused on the Eclipse blockchain ecosystem, offering users the ability to explore addresses, transactions, and discover featured decentralized applications. The platform targets blockchain users and developers within the Eclipse network niche, positioning itself as a key utility tool within this emerging blockchain community. The business model centers on providing blockchain data exploration services and promoting ecosystem growth through featured dApps. Technically, the website leverages modern web technologies including SvelteKit and is hosted likely on Vercel, ensuring fast performance and good mobile optimization. The use of Google Analytics indicates moderate user tracking without visible consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and privacy policies indicates room for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information to improve business credibility and user trust.

P

Parameter Research

depinpulse.app

54

DePIN Pulse is a specialized analytics platform focused on Decentralized Physical Infrastructure Networks (DePIN). It aggregates and presents data such as revenue, market capitalization, and ecosystem metrics for DePIN projects, targeting blockchain enthusiasts, investors, and project stakeholders. The platform is operated by Parameter Research and leverages multiple reputable blockchain data providers to deliver comprehensive insights. Technically, the website is built using modern web technologies including React and Next.js, providing a responsive and user-friendly experience. The site is well-structured with good SEO and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is partial with privacy and terms policies present but no cookie consent mechanism. Overall, the platform presents a professional and trustworthy presence in the niche DePIN analytics market.

SAE International is a globally recognized professional association and standards development organization focused on mobility engineering, including aerospace, automotive, and commercial vehicles. Founded in 1905, it serves over 128,000 engineers and technical experts worldwide, providing standards, professional development, publications, and events. The website reflects a mature digital presence with comprehensive content, clear navigation, and a strong brand identity. Technically, the site employs modern analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. WHOIS data is unavailable or privacy protected, which is reasonable for this type of organization but limits domain transparency. Overall, SAE International's website demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

M

MainPost

obermain.de

58

MainPost is a regional news media company serving the Obermain area and surrounding regions in Germany. It provides current news, images, event information, and cultural content with a strong focus on local sports, economy, and culture. The website is well-structured with extensive use of schema.org structured data to enhance SEO and content discoverability. The business operates multiple subsidiary platforms for advertising, digital newspapers, job listings, and other regional services, indicating a diversified media presence. The target audience is the general public interested in regional news and events.

D

Discord

discord.new

70

Discord is a leading technology platform specializing in group chat, voice, and video communication primarily targeted at gamers and online communities. The platform enables users to create customized spaces for social interaction and community building. With a domain age dating back to 2000 and a strong market presence, Discord is recognized as a mature and enterprise-scale service provider in the communication technology sector. The website content is basic but consistent with the brand's focus and audience. Technically, the website leverages modern web technologies including JavaScript, WebSocket for real-time communication, and integrates with major payment processors such as Stripe, Adyen, and Braintree. Hosting and DNS services are provided by Cloudflare, ensuring reliable performance and security. The site shows moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and visible security headers, which are recommended for enhanced security posture. No privacy or cookie policies were found on the analyzed page, indicating potential compliance gaps. No forms or direct contact information were detected, limiting data collection exposure but also transparency. Overall, Discord's website is trustworthy and safe for general audiences, with no adult or questionable content. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response and security policies to improve compliance and user trust.

M

MainPost

mainpost.de

63

MainPost is a well-established regional news media company serving Würzburg, Schweinfurt, Franken, Bayern, and broader Germany. It offers a comprehensive news platform with local sports, economy, culture, and event information. The company operates multiple subsidiary services including digital newspapers, advertising booking, job listings, and special event platforms, positioning itself as a key regional media player. Technically, the website employs modern JavaScript frameworks, consent management via Usercentrics, and integrates advertising and marketing tools such as Stroeer and Taboola. The site is mobile-optimized and uses structured data for SEO enhancement. Security posture is solid with HTTPS and privacy consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site is professional, trustworthy, and compliant with GDPR through consent management, but could improve transparency by publishing privacy and security policies explicitly.

K

Ka News

ka-news.de

60

Ka News is a regional online news media outlet focused on Karlsruhe and the Baden-Württemberg region in Germany. It provides current news, event coverage, lifestyle, sports, and cultural content targeted at a general audience interested in local and regional affairs. The website integrates advertising and subscription paywall services to monetize its content. The company positions itself as a leading regional news source with a consistent brand and professional content quality.

FIDAM (Research Institute of the Diabetes-Academy Mergentheim) is a specialized healthcare research institute focused on diabetes mellitus. Their mission is to improve medical and psychosocial care for people with diabetes through research and educational programs. The website offers multilingual educational software such as KetoAWARE and RenalAWARE, targeting patients and healthcare professionals. The organization positions itself as a non-profit research entity with a clear focus on diabetes education and care. Technically, the website is built with standard HTML5, CSS, and JavaScript, employing multiple responsive stylesheets to optimize for various devices. The site is accessible, with no detected blocking or WAF challenges, and includes a cookie consent mechanism. However, no advanced frameworks, CMS, or analytics tools are detected, indicating a relatively simple but functional technical infrastructure. From a security perspective, the site uses HTTPS (implied by domain), but no explicit security headers or vulnerability disclosures are found. The cookie consent banner indicates some privacy compliance, and a privacy policy is present in German. Contact information is limited to a contact form and one verified email address. No social media or phone contacts are visible. Overall, the security posture is moderate with room for improvement in headers, incident response, and vulnerability disclosure. The overall risk assessment is low, with no signs of malicious content or blocking. Strategic recommendations include enhancing security headers, adding explicit incident response and vulnerability disclosure information, and improving contact transparency. The website is trustworthy and professional, serving a niche healthcare research audience effectively.

D

Deutsche Diabetes Gesellschaft e.V.

deutsche-diabetes-gesellschaft.de

63

The Deutsche Diabetes Gesellschaft e.V. (DDG) is a prominent medical-scientific society in Germany focused on diabetes research, therapy, and prevention. The organization provides education, certification, and advisory services to medical professionals and stakeholders in healthcare and policy. The website is professionally designed, well-structured, and targets healthcare professionals and policy actors. Technically, the site is built on TYPO3 CMS and uses Matomo analytics configured with privacy in mind. Security posture is good with HTTPS and security headers, though explicit security policies and incident response contacts are not found. WHOIS data is unavailable due to privacy or query issues but the website content and external links indicate legitimacy. Overall, the site demonstrates a mature digital presence with strong privacy compliance and professional credibility.

E

European Coalition for People living with Obesity

eurobesity.org

68

The European Coalition for People living with Obesity (ECPO) operates a professional and well-structured website focused on advocacy and support for people living with obesity across Europe. The organization appears to be a small non-profit coalition founded in 2018, with a clear healthcare sector focus. The website uses WordPress with the Divi theme and integrates common web technologies such as Google Fonts, Google Tag Manager, and MonsterInsights for analytics. Hosting and domain registration are consistent with the organization's European focus, registered in the UK via Cloudflare. From a technical perspective, the website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No contact emails or phone numbers were found in the provided content, which limits direct communication channels. Overall, the website is safe and appropriate for a general audience with no adult or questionable content detected. The security posture is moderate but could be improved with better privacy disclosures and security headers. The domain registration is legitimate and consistent with the business claims, supporting trustworthiness. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response and vulnerability disclosure information to enhance compliance and trust.

P

Parameter Research

unleashingdepin.com

51

Unleashing DePIN is a small, focused research and development collective specializing in the DePIN sector of blockchain technology. The organization produces podcasts, articles, and maintains a project directory to support the adoption and understanding of decentralized physical infrastructure networks. Their market position is niche but growing, targeting blockchain developers, researchers, and enthusiasts interested in DePIN. Technically, the website is built on a modern React and Next.js stack, offering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and formal policies such as privacy and cookie policies. Overall, the site is trustworthy but could improve compliance and security transparency.

I

IoTeX

iotex.io

66

IoTeX is a technology company focused on creating an open ecosystem for physical intelligence by integrating data from physical machine networks into collective intelligence to power next-generation AI. The company positions itself as an innovative platform bridging IoT, AI, and blockchain technologies. The website is built using modern web technologies including Framer and is hosted with Cloudflare, indicating a mature technical infrastructure. Analytics tools such as Google Analytics and Featurebase SDK are used for data collection and user tracking. Security posture is generally good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security policies on the website. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security practices.

The website xdcscan.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before access. As a result, no substantive content, business information, or policies are available for analysis. The domain was registered in June 2022 and is managed via PDR Ltd. with Cloudflare DNS services, indicating a legitimate registration but a relatively new presence. The technical infrastructure includes Cloudflare's security mechanisms, but no further technologies or CMS platforms are detectable due to the blocked content. Security posture cannot be fully assessed given the lack of accessible content, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site lacks visible privacy, cookie, or terms of service policies, and no contact or incident response information is provided. The risk assessment is limited by the blocked content, but no explicit security threats or suspicious patterns are evident from the WHOIS data.

B

Bogner

bogner.com

69

Bogner is a premium fashion brand offering exclusive apparel, shoes, and accessories for women, men, and kids through its official e-commerce platform. The website demonstrates a mature digital infrastructure leveraging Salesforce Commerce Cloud, advanced analytics, and global e-commerce solutions to serve an international audience. The site is well-designed, mobile-optimized, and compliant with privacy regulations including GDPR, featuring cookie consent mechanisms and privacy policies. However, the absence of WHOIS registration data for the domain www.bogner.com raises concerns about domain legitimacy that should be further investigated. Security posture is strong with HTTPS enforcement and security headers, but lacks published security policies or incident response contacts. Overall, the site presents a professional and trustworthy front for the Bogner brand, with recommendations to enhance transparency and domain registration clarity.

P

PistenBully

pistenbully.com

73

PistenBully is a leading manufacturer and service provider of piste vehicles and snow grooming equipment, operating under the parent company Kässbohrer Geländefahrzeug AG. The company targets ski resorts and winter sports facilities worldwide, offering manufacturing, maintenance services, and an online spare parts webshop. The website reflects a mature digital presence built on the Neos CMS and Flow PHP framework, with modern tracking and consent management tools such as Google Tag Manager and Cookiebot. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit privacy and terms of service documents are missing, which should be addressed to improve compliance and trust. The domain WHOIS data is unavailable, which slightly reduces trustworthiness but the professional content and branding consistency support legitimacy. Overall, the website is well designed, user-friendly, and serves its business purpose effectively.

C

claro

claro.at

50

claro is an Austrian e-commerce company specializing in sustainable and eco-friendly cleaning products. The company positions itself as a niche leader in the Austrian market, targeting environmentally conscious consumers. Their website is built on WordPress with WooCommerce, providing a modern and user-friendly shopping experience. The site is well-optimized for mobile devices and includes comprehensive privacy and cookie policies compliant with GDPR. Security measures such as HTTPS and security headers are properly implemented, although no explicit security policy or incident response information is publicly available. The absence of WHOIS data due to privacy protection slightly impacts trust but is common for commercial entities. Overall, claro demonstrates a solid digital presence with good business credibility and technical implementation.

Brauerei C. & A. Veltins GmbH & Co. KG operates a supplier-focused website emphasizing sustainable procurement and strong partnerships. The company is a historic and modern private brewery based in Germany, with a well-established market position in premium beer manufacturing. The website serves as a portal for suppliers, providing downloadable compliance documents and contact information primarily via email. Technically, the site uses basic modern web technologies such as Modernizr and CSS, with no advanced frameworks detected. The site is moderately optimized for mobile and accessibility but lacks cookie consent mechanisms and visible security headers. Security posture is adequate with no visible vulnerabilities, but improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks some advanced privacy and security features.

B

Brauerei C. & A. VELTINS GmbH & Co. KG

veltins-kontakt.de

54

The website veltins-kontakt.de serves as a dedicated contact portal for Brauerei C. & A. VELTINS GmbH & Co. KG, a well-established brewery in Germany. It provides a contact form for customers and visitors to reach out directly, with links to the main corporate site and consumer information pages. The site targets a general audience interested in the brewery's products and services, focusing on brand engagement and customer communication. Technically, the site is built on a modern React and Next.js framework, offering good mobile optimization and accessibility, though SEO is basic and could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is supported by a comprehensive GDPR-compliant privacy policy linked externally, but no cookie consent mechanism is present. Overall, the site is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

B

Bayerischer Skiverband e.V.

bsv-ski.de

42

Bayerischer Skiverband e.V. is a well-established regional sports association dedicated to promoting winter sports in Bavaria, Germany. The website serves as an information hub for winter sports enthusiasts, athletes, and member clubs, offering event information, member services, and resources related to skiing and winter sports. The organization maintains a professional online presence with clear branding and consistent content quality. Technically, the website is built on WordPress using the Astra theme and integrates several Google services such as Maps, Fonts, and YouTube, all managed with a robust cookie consent mechanism to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. However, it lacks explicit security policy and incident response pages, which could enhance trust and preparedness. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure framework to strengthen security posture and compliance.

D

DSV-Shop

dsv-shop.de

57

DSV-Shop is an official e-commerce platform offering branded merchandise related to the Deutscher Skiverband, targeting winter sports enthusiasts and fans in Germany. The website is built on the Shopify platform, leveraging modern web technologies and security features such as HTTPS and hCaptcha to protect user interactions. While the site demonstrates good technical maturity and a professional design, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. The absence of clear contact information and security incident response details also represents an area for improvement. Overall, the site is safe, trustworthy, and well-positioned within its niche market but would benefit from enhanced privacy and security transparency.

D

Discord

kasperskyclub.com

71

Discord is a leading technology platform specializing in community communication through voice, video, and text. The analyzed page is an invite to the 'Kaspersky Club' Discord server, targeting IT enthusiasts and users of Kaspersky products. The platform operates at an enterprise scale with a strong market position in online community services. Technically, the site leverages modern web technologies including React and WebSocket, hosted on Cloudflare infrastructure, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, although DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is supported by comprehensive Terms of Service and Privacy Policy pages, though no cookie consent mechanism was found on this invite page. Overall, the website is professional, trustworthy, and safe for general audiences.

A

Allgaeuer Zeitung

allgaeuer-anzeigeblatt.de

54

Allgaeuer Zeitung is a regional media company providing local news, sports, weather, and community information focused on Immenstadt and the Oberallgäu region in Bavaria, Germany. The website serves as a digital news portal with additional services such as subscription management, e-paper access, and advertising platforms. It maintains a consistent brand presence and targets local residents and readers interested in regional news. The company operates multiple related subdomains offering specialized services like event listings, weather updates, and job portals. Technically, the website employs a modern JavaScript-based infrastructure with integrations for consent management (Usercentrics), paywall services (Tinypass/Piano), advertising (Stroeer, Taboola), and push notifications (Cleverpush). Hosting is provided by Schlundtech, and the site is mobile optimized with good SEO practices including structured data markup. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Advertising and tracking are present but managed with user consent. Overall, the security posture is adequate but could be enhanced with additional headers and transparency. The website is safe for general audiences, containing no adult or explicit content. It is trustworthy and professional, with a good balance of content quality and technical implementation. Strategic recommendations include publishing comprehensive privacy and security policies, improving security headers, and providing clear incident response contacts to strengthen compliance and trust.

A

Allgäuer Zeitungsverlag

all-in.de

60

All-In.de is a regional German news website operated by the Allgäuer Zeitungsverlag, providing current news and entertainment content focused on local and international events. The site targets a general audience interested in police, fire brigade, celebrity, and entertainment news, with additional weather information offered through its sub-organization Wetter im Allgäu. The business model centers on digital news publishing with monetization through advertising and subscription services via third-party platforms like Tinypass (Piano). The website demonstrates a moderate to good level of digital maturity, employing modern JavaScript frameworks, consent management platforms, and push notification services to enhance user engagement and comply with privacy regulations.

H

HYLO EYE CARE®

hylo.de

55

HYLO EYE CARE® operates a professional German-language website focused on eye care products, particularly for dry eyes. The company offers a range of specialized eye drops and related products, targeting consumers seeking eye hydration and care solutions. The website is well-branded, consistent, and provides comprehensive product information and educational content. Technically, the site uses modern JavaScript frameworks (Vue.js/Nuxt.js), is hosted on Hetzner servers, and integrates cookie consent and analytics tools compliant with GDPR. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations.

BAUHAUS is a large, established German retail company specializing in home improvement, garden, and DIY products. The website serves as an online shop with features such as product browsing, click & collect, and customer service support. The company maintains a strong market position in Germany with a professional and consistent brand presence. Technically, the website is built on modern frameworks like Next.js and React, optimized for mobile and desktop with good SEO and accessibility features. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected in the HTML. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies in the provided content. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in privacy transparency and security header implementation.

X

Dashboard

xdcdao.org

56

The website www.xdcdao.org serves as a decentralized autonomous organization (DAO) governance dashboard focused on the XDC blockchain ecosystem. It provides functionalities such as proposal management, treasury oversight, and community engagement tools. The platform targets blockchain users and community members interested in decentralized governance. The site is built using modern web technologies including JavaScript modules and Chakra UI, indicating a contemporary technical infrastructure. However, the site lacks detailed business information, contact details, and formal policies, which impacts its overall credibility. Security posture is moderate with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the site is functional and relevant to its niche but requires improvements in transparency, security, and compliance to enhance trust and professionalism.

P

Privacy Protect, LLC

xinfin.org

61

XinFin Network operates as a decentralized, open-source smart contract platform focused on enterprise-friendly blockchain solutions, particularly in trade finance and payments. The platform leverages the XDC Network, a hybrid blockchain with high throughput and low latency, supporting EVM-compatible smart contracts. The business targets developers, enterprises, and blockchain communities, offering tools such as developer documentation, masternode setup, and interoperability bridges. The company maintains a medium-sized presence with a foundation dating back to 2017 and emphasizes community-driven development and partnerships with notable industry players.

D

DePIN Association

depinassociation.com

57

DePIN Association is a small, technology-focused non-profit organization dedicated to expanding and accelerating the adoption of Decentralized Physical Infrastructure Networks (DePIN) through education, advocacy, and industry transformation. The website presents a professional and consistent brand image, highlighting partnerships with various decentralized infrastructure projects and platforms. The technical infrastructure is based on Squarespace, providing a modern and mobile-optimized experience with good SEO and accessibility features. Security posture is solid with HTTPS and HSTS enabled, though additional security headers and privacy policies are recommended. The absence of WHOIS registration data raises concerns about domain legitimacy, but the active website and partner ecosystem suggest a legitimate operation. Overall, the site is safe, professional, and targeted at industry stakeholders interested in decentralized infrastructure.

S

StorX

storx.io

69

StorX is a technology company specializing in decentralized cloud storage solutions that leverage blockchain technology combined with advanced encryption, fragmentation, replication, and global distribution to provide secure and private data storage. Their market position is that of a niche player focusing on privacy-conscious businesses and enterprises requiring resilient and secure cloud storage. The website presents a professional and consistent brand image with clear service offerings including S3 compatible storage, backup and archival, and Kubernetes backup solutions. Technically, the site uses modern web technologies such as Vue.js, integrates with Stripe for payments, and employs Google Tag Manager for analytics and marketing. Hosting is via Cloudflare, providing good performance and security. Security posture is solid with HTTPS enforced and multiple security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial with a privacy policy found but no cookie consent mechanism or terms of service published. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

G

gavias-theme.com

gavias-theme.com

54

The website gavias-theme.com is currently a parked domain with minimal content primarily consisting of advertising blocks and related search iframes. There is no substantive business information, contact details, or service descriptions available. The domain was registered recently in July 2024 and is hosted using Bodis parking services with Google Adsense integration. The technical infrastructure is basic, with no advanced CMS or frameworks detected. Security posture is minimal, lacking security headers and cookie consent mechanisms. The site is accessible without WAF or blocking challenges but offers limited user experience and trustworthiness due to its placeholder nature. Overall, the site does not represent an active business or service at this time.

W

World Obesity Day Europe

woday.eu

57

World Obesity Day Europe is an informational and advocacy website focused on raising awareness about obesity issues within Europe. The site targets a broad audience including the general public, healthcare professionals, and policymakers. It operates primarily as a non-commercial platform to disseminate information and promote related events. Technically, the website is built on WordPress using the Divi theme, hosted by One.com A/S, and employs modern web fonts and media integrations such as Vimeo. Analytics are handled via Fathom Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible policies, which could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.

L

LookUs Scientific Inc.

eco2026.org

57

The website eco2026.org serves as the official platform for the 33rd European Congress on Obesity scheduled for May 2026 in Istanbul, Turkey. It provides comprehensive information about the congress including registration, accommodation, scientific program, and general details. The target audience primarily consists of healthcare professionals, researchers, and academics interested in obesity research and treatment. The business model revolves around event organization and information dissemination within the healthcare sector, specifically obesity research. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience.

The website eco2025.org serves as the official platform for the 33rd European Congress on Obesity scheduled for May 2025 in Istanbul, Turkey. It provides comprehensive information about the event including registration, accommodation, scientific programs, and important dates. The site targets healthcare professionals, researchers, and stakeholders in obesity research and treatment, positioning itself as a reputable event within the European healthcare conference market. The business model centers on event organization and scientific knowledge dissemination, supported by sponsorship and exhibition opportunities. Technically, the website employs a modern tech stack including Bootstrap 5, jQuery, Font Awesome, and Google Analytics, hosted behind Cloudflare DNS services. The site is mobile-optimized with good SEO practices and basic accessibility features. It integrates Google Translate for multilingual support and uses cookie consent mechanisms to comply with privacy regulations. From a security perspective, the site enforces HTTPS and uses Google Tag Manager asynchronously, but lacks DNSSEC and explicit security headers such as CSP or HSTS. No vulnerability disclosure or incident response contacts are provided, which could be improved. The WHOIS data shows privacy protection but aligns reasonably with the event's nature and timeline, indicating legitimacy. Overall, the website demonstrates a solid digital presence with good content quality and business credibility. Security posture is adequate but can be enhanced by implementing DNSSEC, security headers, and publishing security policies. Privacy compliance is basic but present. The site is safe for general audiences and free from suspicious or malicious content.

US Bankcard Services (USBS) is a payment processing company offering credit and debit card processing, POS terminals, and multi-lingual customer support primarily targeting business owners and merchants across various industries. The company positions itself as a leading nationwide payment processor since 1996 and operates under the parent company Elavon, Inc. The website provides comprehensive payment solutions including in-person, online, mobile, and mail or telephone payments, supported by 24/7 customer service. Technically, the website is built on Adobe Experience Manager (AEM) CMS and employs modern web technologies such as Google Tag Manager, reCAPTCHA, and Tealium for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly with structured data and Open Graph metadata enhancing search visibility. Security measures include HTTPS enforcement and use of invisible reCAPTCHA on forms, though HTTP security headers are not explicitly detected. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS domain registration data raises some concerns about domain legitimacy, although the professional branding and association with Elavon mitigate this risk. Overall, the website demonstrates a mature digital presence with strong business credibility and security practices, but domain registration inconsistencies suggest a need for further verification to fully trust the domain's authenticity.

Elavon operates as a division of U.S. Bank, providing global payment solutions primarily targeting European business clients. The company leverages the financial strength and regulatory compliance of its parent, U.S. Bank Europe DAC, to offer commercial payment products including travel and payables solutions. The website reflects a professional and consistent brand presence with clear business focus on payment services. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries, delivering a responsive and user-friendly experience. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and public security policies. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in security and contact information.

Elavon, Inc. operates the website learn.paymentstart.com as a subdomain focused on providing payment solutions and support for merchants in the United States. The site offers quick start guides for various payment devices including Ingenico, Poynt, and Newland, and promotes the Converge Payments Platform. The business targets merchants and businesses requiring payment processing hardware and software solutions, positioning itself as a trusted provider in the finance and payment technology sector. The website content is professionally presented with consistent branding and clear calls to action for customer care and activation assistance. From a technical perspective, the website employs modern analytics and marketing technologies such as Google Tag Manager, Google Analytics, Demandbase, and Pardot. The site is mobile optimized with a responsive design and loads a variety of external scripts to support tracking and marketing efforts. However, there is no evidence of a CMS or hosting provider disclosed. Performance is moderate, and SEO and accessibility features are basic but functional. Security posture is moderate; HTTPS is implied by script sources but no explicit security headers are detected in the provided data. No forms or input fields are present on the page, reducing attack surface. Privacy policy and accessibility statements are linked, but cookie consent mechanisms and terms of service are absent. No vulnerability disclosure or incident response policies are published. WHOIS data for the subdomain is unavailable as expected, but this reduces transparency slightly. Overall, the site demonstrates a reasonable security baseline but could improve in policy transparency and security header implementation. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, publishing comprehensive security and incident response policies, adding cookie consent for GDPR compliance, and enhancing accessibility. These improvements would strengthen trust and compliance posture while supporting the company’s market position as a reliable payment solutions provider.

D

DRESCHER & CIE AG

petersbergertreffen.de

51

DRESCHER & CIE AG operates as an independent financial information service provider with a focus on stock markets and funds. The Petersberger Treffen is an annual investment conference organized by the company since 1999, aiming to increase transparency in the investment fund industry. The website presents professional content targeted at investment professionals and financial service providers, featuring event information, partner links, and media collaborations. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS implied but no visible security headers or incident response policies. Contact information is not explicitly provided on the main site. Overall, the website is professional, safe, and well-branded, but could improve in privacy compliance and security transparency.

G

GYSEV CARGO Zrt.

gysevcargo.hu

71

GYSEV CARGO Zrt. is a medium-sized Hungarian rail freight and logistics company with over 150 years of group experience, offering comprehensive rail, intermodal, and logistics services including warehousing and customs clearance. The company targets freight forwarders, transport operators, and businesses seeking reliable and environmentally friendly transport solutions. The website reflects a professional digital presence with modern technologies such as Google Tag Manager, reCAPTCHA, and a responsive design. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. The company demonstrates compliance with GDPR and provides clear contact information and certifications, enhancing trust. Overall, the site is well-structured, content-rich, and trustworthy, supporting the company's market position as a reliable regional freight service provider.

P

PORR Construct S.R.L.

porr.ro

55

PORR Construct S.R.L. is a Romanian subsidiary of the PORR Group, a leading European construction company with over 150 years of experience. The company specializes in building construction and civil engineering, delivering a wide range of infrastructure projects including roads, bridges, and public facilities. The website reflects a professional and well-established business with clear market positioning and a comprehensive service portfolio. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site demonstrates strong business credibility and compliance with GDPR.

P

PORR GmbH & Co. KGaA

porr.de

54

PORR GmbH & Co. KGaA operates a professional and comprehensive website focused on construction and engineering services in Germany. The company positions itself as a technology leader offering a wide range of services including government services, building construction, infrastructure, and environmental technology. The website is well-structured, multilingual, and targets business clients in the construction and infrastructure sectors. The digital infrastructure is based on TYPO3 CMS with modern web technologies and includes a detailed cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and cookie management, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature enterprise-level business with strong branding and trust indicators.

P

PORR

worldofporr.com

55

The website worldofporr.com serves as a professional construction industry magazine for PORR, a well-established construction and infrastructure company. It provides blog articles and technical insights on various construction projects, targeting professionals and stakeholders in the construction and engineering sectors. The site uses TYPO3 CMS and modern web technologies, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. No direct contact information or incident response details are provided, which limits user trust and compliance. Overall, the site is professional and trustworthy but requires improvements in privacy and security transparency.

P

PORR AG

porr-group.com

52

PORR AG is a leading European construction company with over 150 years of history, offering full-service construction and engineering solutions. The website reflects a mature digital presence with comprehensive investor relations, sustainability, and career information. The technical infrastructure is based on TYPO3 CMS with modern web technologies and GDPR-compliant cookie management. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates professionalism, compliance, and strong business credibility.

I

igus

igus.ee

61

igus is a well-established manufacturer and direct retailer specializing in motion plastics, including energy chains, plain bearings, and linear technology. The company targets industrial and manufacturing sectors, offering a broad range of products to improve technology with motion plastics. The website reflects a professional and consistent brand presence with multiple international domains, indicating a global market reach. Technically, the site is built on modern frameworks such as Next.js and React, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though there is room for improvement in security headers and privacy compliance. The absence of visible privacy and cookie policies, as well as explicit contact information, slightly reduces the privacy compliance score. Overall, the website is trustworthy and professional, with a moderate to good technical and security maturity level.