Security Directory

G

Groupama osiguranje d.d.

groupama.hr

56

Groupama osiguranje d.d. is a Croatian insurance company operating as part of the larger French Groupama Group. The company offers a broad range of insurance products including life, motor vehicle, health, and property insurance, targeting both individual and corporate clients in Croatia. The website reflects a professional and consistent brand image aligned with its parent company. Technically, the site uses a combination of established front-end frameworks and libraries such as Bootstrap, jQuery, and Google Analytics for tracking, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data support the legitimacy of the business. The site is safe for general audiences and does not contain any adult or questionable content.

G

GICON® Group

gicon.de

51

GICON® Group is an established international engineering service provider headquartered in Germany, specializing in sustainable engineering solutions across energy, water management, resources, and environmental planning sectors. With over 25 years of experience and multiple subsidiaries, the company emphasizes innovation, sustainability, and responsible resource management. Their market position is solidified by a broad service portfolio and a network of cooperative research partnerships. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Materialize CSS for responsive design and user experience. Hosting appears to be managed by ncluster, a reputable provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks some advanced security headers and does not provide a visible security policy or incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic improvements in privacy compliance and security transparency would further enhance trust and compliance posture.

B

Bo-Tec

bo-tec.de

65

Bo-Tec is a specialized German company focused on the repair and refurbishment of various vehicle gearings and components, serving a niche market of agricultural and industrial vehicle owners. The website is professionally designed using the Jimdo CMS platform, featuring clear navigation, good mobile optimization, and relevant content in German. The company provides detailed contact information and maintains a cookie consent mechanism compliant with GDPR. Technically, the site uses modern web technologies and third-party widgets but lacks advanced security headers and explicit security policies. The security posture is adequate with HTTPS enforced and no visible vulnerabilities. Overall, the website presents a trustworthy and professional business presence with room for improvement in security and compliance documentation.

von Tettau | Rechtsanwälte | PartG mbB is a specialized German law firm focusing on renewable energy legal services, particularly in wind energy and photovoltaics. With over two decades of experience, the firm serves a nationwide clientele including project developers, operators, manufacturers, financiers, and investors. Their market position is that of a leading medium-sized law firm in the renewable energy sector in Germany, offering comprehensive legal expertise in planning, environmental, energy, and transactional law. The website reflects a professional and consistent brand image with detailed service descriptions and transparent contact information. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and rocksolid-slider for interactive elements. The hosting is provided by kasserver.com, and the site is optimized for mobile devices with good accessibility and SEO practices. Performance is moderate, with no significant technical debt or vulnerabilities detected in the frontend code. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism limited to necessary cookies, indicating good privacy compliance. However, there is no explicit security policy or incident response contact information published, and security headers are not visibly configured, representing areas for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. The risk profile is low, with recommendations focusing on enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

O

OMICRON electronics GmbH

omicronenergy.com

10

OMICRON electronics GmbH operates a professional website focused on providing innovative power system testing solutions to the electrical power industry worldwide. The company offers products and services for testing, diagnostics, and monitoring of electrical assets, positioning itself as a specialized B2B provider in the energy sector. The website is built on TYPO3 CMS and integrates modern analytics and cookie consent technologies, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and incident response information are absent. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional content and technology usage. Overall, the website demonstrates good technical and business maturity with room for improvement in security disclosures and registrant transparency.

B

BREITZMANN Edelmetalle & Diamanten GmbH & Co. KG

breitzmann-edelmetalle.de

9

BREITZMANN Edelmetalle & Diamanten GmbH & Co. KG operates as a local precious metals and diamond trading business based in Bayreuth, Germany. The company offers services including buying and selling gold, silver, diamonds, jewelry, and watches, with a focus on immediate cash payments and free valuations. Their market position is that of a trusted local partner for individuals and investors interested in precious metals and stones. The website content is primarily in German and targets local customers seeking reliable precious metal transactions. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, jQuery, Google Tag Manager, Facebook SDK, and Cookiebot for cookie consent management. The site is served over HTTPS, uses Google reCAPTCHA for form security, and integrates tracking tools for analytics and marketing. However, it lacks advanced security headers and comprehensive privacy and security policies, indicating room for improvement in compliance and security posture. From a security perspective, the site benefits from HTTPS encryption and anti-bot measures but does not publish incident response contacts or security policies. No vulnerabilities or suspicious content were detected. The absence of privacy and terms of service pages represents a compliance gap, especially under GDPR. Overall, the site demonstrates a moderate security maturity level with good business credibility but requires enhancements in privacy and security transparency. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing security headers, publishing privacy and terms of service documents, establishing incident response contacts, and improving accessibility and compliance features to enhance trust and security culture.

D

Deutscher Verlag für Gesundheitsinformation GmbH

leading-medicine-guide.de

49

Leading Medicine Guide is a German healthcare expert portal operated by Deutscher Verlag für Gesundheitsinformation GmbH, founded in 2001. The website provides a curated directory of highly qualified German medical specialists and clinics across various medical fields, targeting patients and healthcare consumers seeking expert medical advice and treatment options in Germany. The business model centers on providing trusted healthcare information and facilitating connections between patients and medical professionals. The site maintains a consistent brand presence and good content quality, supporting its niche market position in the German healthcare sector. Technically, the website employs a moderate technology stack including jQuery, Cookiebot for cookie consent management, Matomo for analytics, and Google Tag Manager. It uses HTTPS and includes structured data for SEO and social media integration. The site is mobile-optimized with good navigation and accessibility features, although some improvements in security headers and performance optimization could be made. From a security perspective, the site implements a comprehensive cookie consent mechanism with granular user controls, indicating good privacy compliance efforts. However, no explicit privacy policy or terms of service pages were detected in the provided content, and WHOIS data is missing or domain registration is unconfirmed, which raises concerns about domain legitimacy. No security policy or incident response information is published, and security headers appear absent, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy in content and business presentation but would benefit from enhanced transparency in domain registration, explicit privacy and security policies, and improved security best practices to strengthen user trust and compliance with data protection regulations.

Benekovterm s.r.o. is a Czech company specializing in manufacturing and selling high-quality automatic solid fuel boilers and hybrid heating technologies, including pellet boilers combined with heat pumps and renewable energy solutions such as photovoltaic systems. The company has a long tradition dating back to 1949 and positions itself as a leader in innovation within the Czech energy sector. Their website provides comprehensive product information, customer references, and multiple contact channels, reflecting a mature business presence. Technically, the website uses common JavaScript libraries and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the active and professional website. Overall, the site is trustworthy and well-maintained, serving a clear target audience of residential and commercial customers interested in energy-efficient heating solutions.

A

Arcam

arcam.co.uk

64

Arcam is a UK-based high-fidelity audio equipment manufacturer focused on delivering exceptional sound clarity and depth to music enthusiasts. The website presents a professional brand image with clear messaging targeted at audiophiles and music lovers. The business operates in the technology sector, specializing in consumer audio products. The website infrastructure is built on ASP.NET with integration of modern web technologies such as Cookiebot for privacy compliance and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in content security policies and incident response transparency. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. However, no explicit contact information or terms of service were found on the homepage, which could be improved to enhance business credibility. The WHOIS lookup failed due to domain naming rules, but the website content and branding indicate a legitimate and established business. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional online presence.

S

Správa železnic, státní organizace

novymostvyton.cz

10

The website novymostvyton.cz serves as an official information portal for the new Výtoň railway bridge project managed by Správa železnic, a Czech government transportation authority. It provides detailed project descriptions, visualizations, news updates, and public engagement resources, targeting commuters, urban planners, and the general public interested in Prague's infrastructure development. The site is well-branded, professionally designed, and consistent with government standards. Technically, the site is built on the Liferay CMS platform and employs modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing purposes. The site is mobile-optimized with good accessibility and SEO practices, although some advanced security headers are not explicitly detected. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Cookie consent is implemented in compliance with GDPR, and contact information is clearly provided. Overall, the website demonstrates a solid digital presence for a government infrastructure project with good content quality, technical implementation, and business credibility. Strategic improvements in security policy publication and advanced security headers would further strengthen its posture.

S

Schuelbe Promotion Service GmbH

krones-merchandising.com

50

The KRONES Merchandise Shop is an e-commerce platform operated by Schuelbe Promotion Service GmbH, specializing in branded promotional and fan merchandise for the KRONES brand. The website targets customers and fans interested in purchasing official KRONES products. The business operates in the e-commerce sector with a focused niche market. The website is professionally designed with consistent branding and provides a user-friendly shopping experience. Technically, the site uses the Cosmoshop platform with jQuery and related libraries, delivering moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism via Cookiebot, but lacks advanced security headers and visible contact or security policy information, which could be improved. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and compliance features suggest a legitimate business presence. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security practices.

N

National Rifle Association

nrahq.org

60

The website explore.nra.org represents the National Rifle Association's Explore platform, providing information about NRA clubs, competitions, events, training, and membership programs. The site targets NRA members, law enforcement, youth, and the general public interested in NRA activities. It positions itself as a large, established non-profit organization in the firearms advocacy sector. Technically, the site uses a mix of legacy and modern web technologies including AngularJS, jQuery, Google Tag Manager, and Facebook SDK, indicating moderate digital maturity. The security posture is adequate with HTTPS and asynchronous loading of third-party scripts, but lacks visible security headers and uses outdated libraries, which could pose risks. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

K

KOMFOS Prešov, s.r.o.

cbashop.sk

54

KOMFOS Prešov, s.r.o. operates cbashop.sk, an online grocery shopping platform focused on the Prešov region in Slovakia. The business model centers on providing customers with convenient options for grocery pickup via a drive-in service and home delivery, including free delivery for orders over 50€. The website presents a clear and professional interface with relevant business information and legal documentation, targeting general consumers in the local area. Technically, the site uses a .NET backend with common frontend libraries such as jQuery and Font Awesome, and integrates cookie consent and analytics tools. While the site is functional and moderately optimized for mobile, there is room for improvement in accessibility and SEO.

N

National Rifle Association

nra.org

66

The National Rifle Association (NRA) website serves as the digital presence for one of America's longest-standing civil rights organizations focused on the defense of the Second Amendment. The site targets gun owners, advocates, and members, providing information on membership, training, safety, and advocacy services. The organization holds a strong market position as a leading non-profit in its sector with a large membership base. Technically, the website employs modern JavaScript libraries such as jQuery and AngularJS, integrates multiple analytics and advertising platforms including Google Analytics, Facebook Pixel, and AdRoll, and uses Google Tag Manager for tag management. While the site is accessible and well-branded with good content quality and user experience, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security headers are not evident in the provided data, suggesting room for improvement in security posture. Overall, the domain appears legitimate and privacy protected, which is typical for large non-profits. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and cookie policies, and improving transparency around data protection.

Z

ZOLL Medical Corporation

zoll.com

76

ZOLL Medical Corporation is a well-established healthcare technology company specializing in advanced medical devices and software solutions aimed at saving lives across various care settings including emergency, critical, and non-acute care. The company operates globally with a strong market presence and a comprehensive portfolio of products and services tailored to healthcare professionals, EMS, hospitals, and military sectors. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting their audience effectively. Technically, the website employs modern technologies such as Google Tag Manager, Bootstrap, and Azure DNS hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, aligning with its long operational history.

Benekov is a Czech company specializing in manufacturing and selling high-quality automatic solid fuel boilers and renewable energy solutions, including hybrid pellet boilers and photovoltaic systems. Established in 1949, it holds a strong market position in the Czech energy sector, offering comprehensive services such as installation, servicing, and partner training. The website is professionally designed, providing detailed product information, customer references, and multiple contact channels, targeting domestic customers and businesses interested in energy-efficient heating technologies. Technically, the website employs a modern JavaScript stack including jQuery, bxSlider, Lightbox, and Google Maps API, ensuring a good user experience with mobile optimization and SEO best practices. However, some security headers are missing, and no explicit security policy or incident response information is found, indicating room for improvement in security posture. The site uses HTTPS and has cookie consent mechanisms, reflecting good privacy compliance. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance and detailed company information on the site. This discrepancy lowers the overall trust score and suggests the need for verification of domain ownership. Overall, Benekov's website is a solid representation of a medium-sized energy sector company with good content quality and technical implementation but requires enhanced security measures and domain registration transparency to improve trust and compliance.

P

Pure Silver Creative

clienttasks.com

57

CIARA is a technology portal system used by Pure Silver Creative, providing a login interface for clients or users to access various internal modules and services. The website is built on WordPress with a modern tech stack including Vue.js and several JavaScript libraries, indicating a moderate level of digital maturity. The portal focuses on user authentication and access management, with no public-facing business content or marketing information on the login page. Security posture is adequate with HTTPS enforced and secure form handling, but lacks visible security headers and privacy compliance documentation. Overall, the site appears functional for its intended purpose but would benefit from enhanced security headers and privacy policies to improve trust and compliance.

N

NODIG - TEC s.r.o.

nodig.cz

49

NODIG - TEC s.r.o. is a specialized Czech company operating since 1996, focusing on trenchless pipe laying and renovation services primarily for infrastructure projects. Their market position is that of a niche service provider with a strong local presence, offering a variety of advanced drilling and pipe installation technologies. The website reflects a professional business with clear service offerings and contact channels, targeting developers and businesses in the energy and transportation sectors. Technically, the website uses modern JavaScript libraries such as jQuery and Google services including Analytics and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile optimized and includes SEO best practices, although some accessibility features could be improved. Security posture is adequate with HTTPS and bot protection, but lacks some security headers and explicit incident response information. The absence of WHOIS data is a notable gap in domain legitimacy verification, which slightly lowers trust from a security perspective. Overall, the website is professional and trustworthy, but domain registration transparency should be improved.

S

Správa železnic, státní organizace

sprava-zeleznic.cz

60

Správa železnic is the Czech Republic's state organization responsible for managing the national railway infrastructure. The website serves a broad audience including passengers, suppliers, carriers, and contractors, providing comprehensive information on projects, services, and operational updates. The organization holds a significant market position as the primary railway infrastructure manager in the country, offering services such as infrastructure management, modernization projects, and energy supply for railways. The website content is professionally presented, primarily in Czech, with English alternatives, and includes detailed navigation and rich resources.

A

AG Lungensport in Deutschland e.V.

lungensport.org

10

AG Lungensport in Deutschland e.V. is a well-established non-profit organization dedicated to promoting lung sports and physical therapy for patients with respiratory and lung diseases in Germany. With over 25 years of history, it operates a nationwide network of lung sports groups, provides training and certification for exercise instructors, and offers online programs and educational resources. The organization collaborates with academic institutions and has received notable awards, reinforcing its credibility and impact in the healthcare sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery and Colorbox. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. Analytics are implemented via Piwik (Matomo), indicating a moderate level of user tracking. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks certain security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. The WHOIS data is privacy protected, which is typical for non-profit entities, and no suspicious patterns were detected. Overall, the site demonstrates a solid security posture but could benefit from improvements in privacy compliance and security best practices. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing security policies, and enhancing accessibility features to further strengthen the site's security and compliance posture.

T

Thüringer Theaterverband e.V.

thueringer-theaterverband.de

50

Thüringer Theaterverband e.V. is a regional non-profit organization focused on supporting and promoting theater and cultural activities in the German state of Thuringia. The website serves as a portal for information about events, membership, festivals, and theater-related services. It targets theater enthusiasts, artists, and cultural institutions within the region. The organization maintains a moderate digital presence with integration of social media and a dedicated theater portal partner site. Technically, the website is built on the Contao Open Source CMS platform, utilizing several LMF modules for UI components and sliders. The site employs modern JavaScript libraries such as jQuery and Slick Slider, and it is served over HTTPS with a valid SSL certificate. The site includes a cookie consent mechanism compliant with GDPR, using Matomo for analytics with moderate user tracking. From a security perspective, the website demonstrates good practices including HTTPS enforcement and CSRF protection cookies. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is supported by a DSGVO & Impressum page, but no dedicated privacy officer or vulnerability disclosure information is provided. Overall, the website is professionally designed with good content quality and user experience. It is trustworthy and safe for general audiences. Strategic improvements could focus on enhancing security headers, publishing clear security policies, and providing direct contact information for incident response and data protection inquiries.

D

Delta Reisen

deltareisen.hu

56

Delta Reisen is a Hungarian travel agency specializing in offering travel packages primarily from German and Austrian travel agencies. The website targets Hungarian-speaking customers interested in exotic and worldwide travel destinations, including the Caribbean, Maldives, Seychelles, and Mauritius. The business model focuses on online bookings of travel packages, accommodations, flights, and travel insurance, with a niche market position as an expert in German and Austrian travel offers. The website content is professionally presented with good quality and consistent branding, supported by trust indicators such as Tripadvisor ratings and domain verifications.

D

Delta Reisen s.r.o.

travelio.sk

53

Travelio.sk is a professional online travel agency specializing in offering travel packages from German and Austrian travel agencies to Slovak customers. The company, Delta Reisen s.r.o., positions itself as an expert in this niche market, providing a wide range of services including flights, cruises, honeymoon trips, travel insurance, car rentals, and event tickets. The website is well-branded, with consistent logos and partner references, and includes customer testimonials that enhance trust. The business model focuses on direct representation and online booking convenience, targeting Slovak-speaking travelers seeking quality vacation options abroad. Technically, the website leverages a modern tech stack including jQuery, Bootstrap, Moment.js, and Slick Carousel, integrated within the CeSYS travel agency system platform. It employs standard marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and comprehensive search forms. From a security perspective, the site uses HTTPS with good SSL configuration and basic security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy or incident response contacts, which could be improved. Privacy compliance is well-handled with visible privacy and cookie policies and consent mechanisms. Overall, Travelio.sk presents a trustworthy and professional online presence with a solid business foundation and adequate technical and security measures. Strategic improvements in security policy transparency and header implementation could further enhance its security posture.

H

Hagerty Garage and Social

garageandsocial.com

60

Hagerty Garage and Social operates a premium vehicle storage and social club service targeting car enthusiasts, especially owners of classic, collector, and exotic vehicles. The business model is membership-based, offering climate-controlled garages, 24/7 security, and exclusive social events. The company is positioned as a niche provider with multiple locations in the United States and Canada, supported by its parent company, The Hagerty Group, LLC. The website reflects a professional and consistent brand image with clear service offerings and contact points. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Maps API, and Yoast SEO for optimization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with asynchronous loading of scripts and use of third-party services for analytics and tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks explicit security headers and does not provide visible incident response or security policy information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which impacts domain legitimacy assessment. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and clearer domain registration transparency. Strategic recommendations include implementing security headers, publishing incident response contacts, and verifying domain registration details to improve trust and compliance.

Reallusion is a technology company specializing in 3D character creation and 2D cartoon animation software, targeting media entertainment, metaverse, digital twinning, architectural visualization, and AI simulation sectors. Their product suite includes flagship software such as iClone, Character Creator, Cartoon Animator, and various motion capture and AI-assisted animation tools. The company positions itself as an established player in the digital content creation industry with a medium-sized business profile and a focus on professional users and educators. Technically, the website employs a modern tech stack including Google Fonts, Font Awesome, jQuery UI, and multiple analytics and tracking services such as Google Analytics, Microsoft Clarity, and Crazy Egg. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers are recommended. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in security transparency. Overall, the website is professional and trustworthy in appearance but suffers from incomplete WHOIS data and missing privacy compliance documentation. Strategic improvements in privacy policy publication, security header implementation, and WHOIS transparency would enhance trust and compliance.

P

Platon Technologies, s.r.o.

platon.sk

57

Platon Technologies, s.r.o. is a Slovak IT services company specializing in domain registration, hosting, server management, SSL certificates, mass mailing, and CDN cloud services. With over 15 years of experience, they operate their own infrastructure and data center, targeting businesses and individuals primarily in Slovakia. The website is professionally designed, mobile-optimized, and provides comprehensive product and support information including customer testimonials and clear contact channels. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Google reCAPTCHA for security. Security posture is good with HTTPS enforced and bot protection, though additional security headers could enhance protection. Privacy compliance is evident with a cookie consent mechanism and privacy policy, supporting GDPR adherence. Overall, the site is trustworthy, well-maintained, and reflects a credible business presence.

C

Children's of Alabama

childrensal.org

67

Children's of Alabama is a well-established pediatric healthcare provider based in Birmingham, Alabama, recognized nationally for excellence in multiple specialties. The organization offers a comprehensive range of pediatric services including emergency care, outpatient centers, behavioral health, and patient support through a secure online portal. Their market position is strong, supported by numerous awards and recognitions, reflecting a trusted brand in pediatric healthcare. The website targets parents, patients, healthcare professionals, and donors, providing extensive resources and easy access to services. Technically, the website is built on Drupal CMS with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Crazy Egg. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. The use of secure patient portals and cookie consent mechanisms indicates attention to user privacy and data protection, although explicit security policies and incident response information are not publicly disclosed. From a security perspective, the site enforces HTTPS and employs standard best practices, but could improve by publishing explicit security headers and vulnerability disclosure information. The WHOIS data is unavailable due to privacy protection, which is common and justified for healthcare entities. Overall, the domain and website appear legitimate and trustworthy with a high level of professionalism and compliance. The overall risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response, and ensuring all third-party scripts remain secure and up to date. The website serves as a reliable and professional digital presence for Children's of Alabama, supporting its mission to provide exceptional pediatric care.

I

IRWIN

irwin.com

72

IRWIN is a professional brand specializing in hand tools and power tool accessories, targeting tradesmen and tool users. The website is branded under Stanley Black & Decker, a large and reputable manufacturing company. The site is built on Drupal 10 and integrates modern marketing and analytics tools such as Google Tag Manager, Bazaarvoice, and Acquia Lift, indicating a mature digital infrastructure. Privacy and cookie compliance are well implemented, with a comprehensive cookie consent mechanism and an accessibility statement. However, the WHOIS data for the domain is unavailable or unregistered, which raises concerns about domain legitimacy and registration transparency. Security posture is strong with HTTPS and security best practices observed, but the absence of explicit security policies and contact information for incident response limits full trust. Overall, the website is professional and trustworthy in content and design but requires verification of domain registration and enhanced transparency in security and contact policies.

Jazzmeile Thüringen is a regional cultural festival organization dedicated to promoting jazz music throughout the German state of Thüringen. It operates under the patronage of the Thüringer Staatskanzlei and organizes events year-round, including seasonal jazz festivals and workshops. The website serves as an information portal for upcoming events and partners with various cultural and governmental institutions. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox. The site is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and no incident response or security policies are publicly available. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. WHOIS data is incomplete, limiting trust from a domain registration perspective. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

F

Fagskolen Viken

fagskolen-viken.no

60

Fagskolen Viken is a Norwegian higher vocational college established recently in 2024, providing a wide range of vocational study programs across multiple campuses in the Viken region. The institution targets students seeking practical and career-oriented education to enhance their employability. The website is professionally designed using Drupal 10, featuring good mobile optimization, accessibility, and clear navigation. It integrates modern analytics and marketing tools while maintaining GDPR compliance through a consent management platform. Contact information and social media presence are clearly provided, enhancing trust and engagement. Security posture is solid with HTTPS and privacy policies, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a credible, well-managed educational institution with a strong regional collaboration network.

S

Surfers Against Sewage

sas.org.uk

64

Surfers Against Sewage is a UK-based grassroots environmental charity dedicated to protecting oceans, rivers, and beaches from pollution, particularly sewage and plastic pollution. The organization operates through community engagement, campaigning, data collection, and education, positioning itself as a leading voice in ocean activism within the UK. Their website reflects a mature digital presence with comprehensive content, active campaigns, and multiple avenues for public involvement including membership, fundraising, and volunteering. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Popup Maker, integrating analytics tools like Google Analytics and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. Security measures include HTTPS enforcement and CAPTCHA on forms, though explicit security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data for the domain is unavailable due to a domain naming rules error, which does not impact the legitimacy given the charity registration and consistent branding. Overall, the website demonstrates a strong commitment to transparency, user engagement, and compliance, making it a trustworthy platform for its audience and stakeholders.

D

Delta Reisen s.r.o.

deltareisen.cz

58

Delta Reisen s.r.o. is a Czech travel agency specializing in offering vacations through German and Austrian travel agencies, providing a wide range of travel packages with over one million available dates. The company targets Czech customers seeking high-quality travel experiences with trusted German and Austrian partners. Their business model focuses on travel package brokerage, online booking, and customer support with a medium-sized market presence since 2016. The website reflects a professional and consistent brand image with good content quality and customer trust signals such as reviews and certifications. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Matomo analytics, integrated with a specialized travel system (CeSYS). The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are not explicitly detected. No WHOIS data is available, which impacts transparency and trust. Security-wise, the site shows good practices such as reCAPTCHA on forms and no exposed sensitive data, but lacks a public security policy or incident response information. Privacy compliance is good with GDPR-aligned cookie consent and privacy notices. Overall, the risk is moderate with recommendations to improve WHOIS transparency, security headers, and incident response disclosures. Strategically, Delta Reisen should focus on enhancing security transparency, maintaining up-to-date technology, and expanding trust signals to strengthen market position and customer confidence.

C

Click2Claim s.r.o.

click2claim.eu

49

Click2Claim s.r.o. is a Czech-based company specializing in assisting air passengers with claims for compensation related to flight delays, cancellations, missed connections, and denied boarding. The company offers an online platform for submitting claims and managing the compensation process, targeting primarily Czech and European Union customers. Their market position is that of a niche service provider in the air passenger rights sector, supported by partnerships with various insurance and financial institutions. Technically, the website employs a traditional web stack with jQuery and jQuery UI, integrated with multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Smartlook, and Clixtell. Cookie consent is managed via CookieYes, ensuring GDPR compliance. The site is mobile-optimized and provides a secure login area for clients. However, some technologies like jQuery are outdated and could benefit from modernization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible HTTP security headers and explicit security policies or incident response contacts. No critical vulnerabilities were detected in the HTML content. The absence of WHOIS registrant data is due to EURid privacy policies, but the website content and partner ecosystem support legitimacy. Overall, the website presents a professional and trustworthy front for a small service company in the transportation sector, with good privacy compliance and a moderate to good security posture. Recommendations include updating libraries, enhancing security headers, and publishing explicit security policies to improve trust and compliance.

T

TravelGATE Kft

travelgate.hu

55

TravelGATE Kft operates a specialized cloud-based business travel management system tailored for Hungarian travel agencies and tour operators. Their platform offers comprehensive features including online travel offer search, booking, client and order management, and marketing tools. The company holds reputable certifications and maintains an active social media presence, positioning itself as a trusted provider in the Hungarian travel software market. Technically, the website employs a mix of legacy and modern JavaScript libraries, with room for modernization and security enhancements. Security posture is moderate, with cookie consent mechanisms and no visible vulnerabilities, but lacking advanced HTTP security headers and incident response contacts. Overall, the website is professional, compliant with GDPR, and provides clear business and contact information, supporting a medium-sized enterprise profile.

F

fittkau metallgestaltung gmbh

fittkau-metallbau.de

54

Fittkau Metallgestaltung GmbH is a German small-sized manufacturing company specializing in metalworking, forge, and artistic metal structures. The company presents a professional website built on Joomla! CMS, showcasing a portfolio of projects and providing essential contact information. The website targets architects, construction firms, and clients seeking specialized metal fabrication services. The business holds a reputable market position with recent award recognition, indicating industry credibility. Technically, the website employs legacy JavaScript libraries such as jQuery and MooTools, with moderate performance and basic mobile optimization. The absence of advanced analytics and tracking tools suggests a privacy-conscious approach. However, the lack of visible security headers and outdated libraries indicate areas for technical improvement. From a security perspective, the site uses HTTPS (assumed from base URL), includes a cookie consent mechanism, and provides a privacy policy compliant with GDPR. No incident response or security policy pages are found, and no phone contact is provided, which could limit user trust. No critical vulnerabilities or blocking mechanisms are detected, but updating security practices and technical stack is recommended. Overall, the website is professional and trustworthy with good business credibility but could benefit from technical modernization and enhanced security measures to improve resilience and compliance.

S

Sirius Facilities GmbH

siriusfacilities.com

53

Sirius Facilities GmbH is a prominent German commercial real estate company specializing in flexible leasing of office spaces, storage, production halls, conference centers, and virtual office services. With over 70 locations and a large portfolio, they cater primarily to small and medium-sized enterprises as well as larger firms. Their website demonstrates a mature digital presence with a professional design, comprehensive service offerings, and multiple contact channels. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes privacy compliance tools such as Usercentrics CMP and analytics via Google Analytics and Matomo. Security posture is strong with HTTPS and secure forms, though some HTTP security headers could be improved. The WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and transparent contact information.

B

BRIESE SCHIFFAHRT

briese.de

54

BRIESE SCHIFFAHRT is a medium-sized German maritime shipping company managing a fleet of over 130 multipurpose heavylift vessels. The company operates several divisions including chartering, research vessel management, and crew management, serving clients in the shipping and logistics sectors. The website presents a professional and consistent brand image with clear navigation and relevant content targeting maritime industry professionals and potential crew members. Technically, the site uses NeoCMS with jQuery and related libraries, delivering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and advanced protections on login forms. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy present. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is functional and professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

Verband Pneumologischer Kliniken e.V. (VPK) is a German non-profit association representing pneumological clinics and departments. The website serves as an information hub for members and interested parties, offering medical guidelines, position papers, and event information. The site is built on TYPO3 CMS and uses common web technologies such as jQuery and Font Awesome. It is professionally designed with consistent branding and clear navigation, targeting healthcare professionals in pneumology within Germany. The website is secure with HTTPS and includes a cookie consent mechanism, though it lacks explicit security policies and incident response information publicly. No forms or direct contact emails are exposed on the main page, but a contact page is available. The WHOIS data is minimal but consistent with the website's purpose, indicating legitimacy. Partner logos link to reputable German medical organizations, enhancing trust.

M

Ministerie van Justitie en Veiligheid

prosecutionservice.nl

60

The Netherlands Public Prosecution Service website represents an official government entity under the Ministry of Justice and Security. It provides comprehensive information about its role in supervising police investigations, prosecuting criminal offenses, and managing court proceedings. The site targets a general audience including citizens, legal professionals, and international stakeholders interested in Dutch prosecution services. The business model is a government service with a strong national presence and a large organizational size. The website content is well-structured, professionally designed, and consistent with government branding standards. Technically, the website employs modern JavaScript libraries such as jQuery UI and uses Piwik PRO for analytics, indicating a moderate level of digital maturity. The site is hosted on government infrastructure with HTTPS enforced, ensuring secure communications. Mobile optimization and accessibility features are well implemented, supporting a broad user base. However, some security headers are missing, and no explicit security policy page is published. From a security perspective, the site demonstrates good practices including HTTPS, no visible vulnerabilities, and secure form handling. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Incident response is supported via a vulnerability reporting page, though no direct security contact emails are published. The domain registration data aligns perfectly with the official government entity, reinforcing trust and legitimacy. Overall, the website is a trustworthy, professional government portal with good security and privacy posture. Recommendations include adding security headers, publishing a dedicated security policy, and providing explicit incident response contact details to further enhance security transparency and user trust.

O

Openbaar Ministerie

om.nl

63

The Openbaar Ministerie (OM) website is the official online presence of the Dutch Public Prosecution Service, a key government entity responsible for criminal prosecution and law enforcement leadership in the Netherlands. The site clearly communicates its role, services, and legal authority, targeting citizens, legal professionals, and stakeholders in the justice system. It is published under the Ministry of Justice and Security, reinforcing its authoritative position. Technically, the website employs modern web technologies including JavaScript, jQuery UI, and Piwik PRO analytics, hosted likely on government infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. Privacy and cookie policies are present and GDPR compliant, reflecting a mature digital governance approach. Security posture is strong with HTTPS enforced and no visible vulnerabilities or sensitive data exposure. However, explicit security headers are not detected in the HTML content, and no dedicated security policy or incident response contacts are published, which are areas for improvement. The domain registration aligns perfectly with the government entity, enhancing trust and legitimacy. Overall, the OM website is a professional, trustworthy, and well-maintained government portal with strong content quality and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and providing explicit incident response contacts to further strengthen security and transparency.

B

Berufsverband der Frauenärzte e.V.

bvf.de

56

The Berufsverband der Frauenärzte e.V. (BVF) is a professional association representing gynecologists in Germany, providing a broad range of member services including insurance benefits, professional advice, continuing education through the BVF Akademie, and a members-only online portal. The website is well-structured, professionally designed, and targets medical professionals in the gynecology sector. It maintains a strong market position with approximately 15,000 members and offers relevant content such as news, press releases, and event calendars. Technically, the site is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, FlexSlider, and SlickNav for responsive navigation and interactive elements. The site employs Matomo analytics configured to be cookie-free, demonstrating a commitment to user privacy and GDPR compliance. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its niche audience effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security and trustworthiness.

T

Theater Waidspeicher e.V.

waidspeicher.de

53

Theater Waidspeicher e.V. is a small, established non-profit cultural organization based in Germany specializing in puppet and music theatre. Founded in 1993, it offers a diverse program targeting a broad audience including children and adults, with performances, workshops, and tours. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries and frameworks to provide a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a trustworthy and legitimate online presence aligned with its cultural mission.

ACK.Travel is the official website of the Asociace cestovních kanceláří ČR, a Czech association representing travel agencies. The site provides news, travel information, and resources primarily targeting travel professionals and travelers within the Czech Republic. The content is professionally presented with a clear focus on travel and tourism industry updates and member services. Technically, the website employs common JavaScript libraries such as jQuery and AmCharts for interactive maps and user interface elements, and uses Matomo for analytics tracking. However, the site lacks visible privacy and cookie policies, and no WHOIS data could be extracted due to malformed WHOIS responses, which limits the ability to fully verify domain legitimacy. Security headers and SSL configuration details are not provided in the data, indicating potential areas for improvement in security posture. Overall, the website appears legitimate and professionally maintained but would benefit from enhanced privacy compliance and security transparency.

B

bMC GROUP

salvageapp.com

53

SalvageApp is a specialized web application developed and operated by the bMC GROUP, targeting the marine claims sector. It offers a suite of modules designed to improve information flow, cost transparency, project scheduling, risk management, and reporting for marine salvage and insurance claims. The platform is provided complimentary to bMC GROUP clients, positioning it as a value-added service within a niche maritime insurance market. The website presents a professional and consistent brand image with clear contact information and detailed descriptions of its modules and benefits. Technically, the website is built on the Contao CMS with modern frontend technologies including Bootstrap and jQuery. It demonstrates good mobile optimization and user experience, though some SEO and accessibility features are basic. The site uses HTTPS and includes client login functionality, but lacks visible security headers and DNSSEC is not enabled, indicating room for security improvements. Analytics and tracking are implemented via brand-analytics.de, with a basic cookie consent mechanism in place. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the provided data. However, the absence of DNSSEC and security headers suggests moderate security posture. The domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy. Overall, SalvageApp's website is a credible, well-structured platform serving a specialized business audience with a moderate security posture and good business credibility. Strategic improvements in security headers, DNSSEC, and privacy compliance could enhance trust and resilience.

O

Openbaar Ministerie

openbaarministerie.nl

63

The Openbaar Ministerie (OM) website serves as the official online presence of the Dutch Public Prosecution Service, a key government entity responsible for criminal prosecution and law enforcement leadership in the Netherlands. The site provides comprehensive information about the OM's role, ongoing cases, news updates, and public resources. It targets a broad audience including the general public, legal professionals, victims, and suspects, offering transparency and accessibility to justice-related information. The OM operates under the Ministry of Justice and Security, reinforcing its authoritative position in the national justice system. Technically, the website employs modern web technologies including JavaScript and jQuery UI, with analytics powered by Piwik PRO, reflecting a moderate to advanced digital maturity. The site is hosted on government infrastructure, ensuring reliability and compliance with national standards. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. SEO and metadata are properly configured, enhancing discoverability. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses nonce attributes in scripts to mitigate injection risks. Privacy and cookie policies are clearly presented with consent mechanisms, aligning with GDPR requirements. However, explicit security policy documentation and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the OM website demonstrates a high level of professionalism, trustworthiness, and compliance appropriate for a government justice institution. Strategic recommendations include publishing formal security policies, enhancing security headers, and providing clear incident response contacts to further strengthen security posture and public trust.

T

Thüringer Theaterportal

thueringer-theaterportal.de

52

Thüringer Theaterportal is a regional cultural platform dedicated to providing comprehensive schedules and information about theater performances in Thuringia, Germany. It aggregates event details from local theaters such as Schotte e.V. and Kabarett DIE ARCHE, offering users detailed descriptions, images, and direct links to ticket purchasing on partner websites. The portal targets theater enthusiasts and the general public interested in cultural events within the region. Technically, the website is built on the Contao Open Source CMS and employs a variety of JavaScript libraries including jQuery, jQuery UI, Colorbox, and Select2 to enhance user experience. The site is mobile-optimized with a responsive design and includes accessibility features such as skip navigation links. SEO is basic but functional, with meta tags and structured data present. From a security perspective, the site enforces HTTPS and includes essential cookies with CSRF protection. A cookie consent banner is implemented, allowing users to opt-in for external content such as Google Maps. However, the site lacks several recommended security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for a small regional cultural information service. It complies with GDPR requirements at a basic level and maintains a good balance between usability and security. Strategic improvements in security headers and transparency would enhance its security posture further.

L

LAG Soziokultur Thüringen e.V.

soziokultur-thueringen.de

71

LAG Soziokultur Thüringen e.V. is a regional non-profit association dedicated to representing and supporting socio-cultural initiatives in the German state of Thüringen. The organization provides key services including cultural consulting, education, funding support, public relations, and lobbying to strengthen the socio-cultural landscape. Their market position is that of a leading regional advocate and service provider for socio-cultural actors. The website is professionally designed, content-rich, and well-structured, targeting cultural stakeholders and the general public interested in socio-cultural projects. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Slider, and Google Maps API for enhanced user experience. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and includes CAPTCHA to prevent spam. Cookie consent is implemented with detailed categories, reflecting GDPR compliance. However, there is no publicly available formal security policy or incident response information, which could be improved to enhance trust and preparedness. Overall, the website is trustworthy, safe, and compliant with privacy regulations. It effectively serves its target audience with relevant content and services. Strategic recommendations include publishing a formal security policy, adding a security.txt file, enhancing security headers, and improving accessibility to further strengthen the site's security posture and user experience.

B

Briese Schiffahrts GmbH & Co. KG

briese-research.de

25

BRIESE Research, a division of Briese Schiffahrts GmbH & Co. KG, specializes in the management and chartering of German research vessels, serving scientific institutions and maritime research communities. The company manages a fleet of notable research vessels and collaborates with prominent scientific organizations such as AWI, GEOMAR, and Senckenberg. Their business model focuses on providing comprehensive vessel management, crew recruitment, and logistical support tailored to research needs. The website reflects a niche market position with a medium-sized enterprise footprint in Germany.

D

Darkmay s.r.o.

cestovnysystem.sk

53

Darkmay s.r.o. operates the CeSYS platform, a comprehensive system for travel agencies primarily in Slovakia, offering online tour sales and related services. The company holds a strong market position with over 100 active travel agencies using its data and services. The website is well-structured, professionally designed, and optimized for performance and mobile use. It integrates modern technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform. Overall, the website demonstrates good compliance with privacy regulations and provides clear business and partner information.

A

Argus AS

argus.no

57

Argus AS is a Norwegian company specializing in providing systems and document bases for effective management of system requirements in the construction, transport, and related industries. They offer digital solutions, certification assistance including ISO standards, and support for regulatory inspections. The company has a long-standing presence since 1999, positioning itself as a specialist in compliance and document management within its sectors. The website reflects a business-to-business model targeting companies needing compliance and certification support. Technically, the site uses a custom ASP.NET Web Forms platform with older JavaScript libraries such as AngularJS and jQuery 1.7.1, indicating moderate digital maturity. The site is functional with good content quality but lacks modern security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS usage but missing advanced security headers and vulnerability disclosures. Overall, the website is professional and trustworthy but would benefit from updates to security practices and privacy compliance to reduce risk and enhance user trust.