Security Directory

H

HKL BAUMASCHINEN

hkl-baumaschinen.de

66

HKL BAUMASCHINEN operates a large-scale business specializing in the rental, sale, and servicing of construction machinery and equipment, targeting professional customers in the construction sector across Germany, Austria, and Poland. The website reflects a mature digital presence with integration of marketing automation, analytics, and cookie consent tools, indicating compliance efforts with GDPR and active user engagement strategies. Technically, the site uses Cloudflare DNS and CDN services, Google Tag Manager, and Cookiebot for consent management, but lacks explicit CMS identification and security headers, suggesting room for improvement in security hardening. Security posture is moderate with HTTPS implied but no visible advanced security headers or incident response policies. The absence of explicit privacy policy and terms of service pages is a notable compliance gap. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.

F

Fiera Bolzano Spa

fierabolzano.it

55

Fiera Bolzano Spa is a well-established exhibition center located in South Tyrol, Italy, with a history dating back to 1948. The company organizes 16 trade shows annually and offers extensive exhibition space along with coworking, studio, hotel, and gastronomy services. Positioned as a regional leader in the hospitality and events industry, Fiera Bolzano targets exhibitors, visitors, and event organizers, emphasizing sustainability and quality service. The website reflects a professional and consistent brand image with comprehensive content and multilingual support. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The presence of Cloudflare Turnstile captcha indicates proactive bot protection. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS was detected. Hosting appears to be behind Cloudflare, enhancing performance and security. Security posture is strong with HTTPS enforced, CSRF tokens in forms, and no exposed sensitive data. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly observed and should be implemented for enhanced protection. Privacy compliance is robust, with clear privacy and cookie policies, GDPR adherence, and consent mechanisms in place. Overall, the website demonstrates high business credibility, technical maturity, and security awareness. No critical vulnerabilities or suspicious activities were detected. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance.

T

The International Association of Music Centres

iamic.net

9

The International Association of Music Centres (IAMIC) operates as a global network of music organizations dedicated to promoting and sharing information about the music of various countries and regions. The organization facilitates collaboration and networking among its 33 member organizations worldwide, hosting conferences and providing resources to enhance access and appreciation of music internationally. The website is professionally designed using Squarespace, featuring clear navigation and mobile optimization, though it lacks explicit privacy and cookie policies. Security posture is strong with HTTPS and HSTS enabled, but additional security headers and compliance documentation are absent. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and organizational information suggest a legitimate non-profit entity. Strategic recommendations include improving compliance with privacy regulations, enhancing security headers, and verifying domain registration to strengthen trust.

The website www.humanitas24.eu is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks automated access and requires human verification. Due to this, no actual website content, business information, or contact details are available for analysis. The domain WHOIS data is unavailable or protected, providing no insight into the registrar, registration dates, or registrant details. The site appears to rely on Cloudflare for security and performance, but the lack of accessible content and metadata limits any meaningful assessment of business operations or digital maturity. Security posture is difficult to evaluate fully, but the presence of a Cloudflare WAF challenge indicates some level of protection. However, the absence of visible security headers or policies reduces trust. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the blocked state and lack of information.

SOPHIA is a small social cooperative founded in 2013, focused on social innovation research and project development in South Tyrol, Italy. It operates as a non-profit entity and collaborates with academic institutions and international partners through Erasmus+ projects and conferences. The website presents a professional and consistent brand image with relevant content targeting stakeholders interested in social autonomy and innovation. Technically, the site is built on the Webnode CMS platform, hosted via Amazon Cloudfront CDN, and uses modern web technologies including HTTPS and Google Tag Manager for analytics. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided on the homepage, which may impact user trust and compliance. WHOIS data is unavailable due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the business claims. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

L

lvh.apa

lvh.it

44

The website lvh.it represents lvh.apa, the largest economic association for craftsmen and service providers in South Tyrol, Italy, with over 8,000 members. It serves as an active interest representation body for the local craft industry. The site is built on TYPO3 CMS, indicating a mature and professional technical infrastructure. The design is consistent and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks explicit privacy and cookie policies, as well as security and incident response disclosures, which are critical for compliance and trust in today's regulatory environment. Social media integration is present, enhancing outreach and engagement. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

B

Börsenmedien AG

boersenmedien.com

62

Börsenmedien AG is a leading German media company specializing in financial and economic publishing. Established in 1989, it operates multiple well-known brands such as DER AKTIONÄR, BÖRSE ONLINE, €uro am Sonntag, and €uro, offering magazines, newsletters, reports, books, and a video channel targeting private investors in the German-speaking market. The company maintains a strong market position as one of the largest economic publishers in Germany with a comprehensive portfolio and a large team of financial editors and staff across multiple locations.

B

Bausparkasse Mainz AG

bkm.de

64

Bausparkasse Mainz AG operates as a financial services provider specializing in home savings contracts, loans, and real estate financing primarily targeting consumers in Germany. The company maintains a strong market position supported by high customer satisfaction ratings and multiple industry awards. The website is professionally designed, mobile-optimized, and built on Concrete CMS, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates high business credibility and trustworthiness.

The website atlas-paysages-paca.fr serves as an informational platform presenting a landscape atlas for the Provence-Alpes-Côte d'Azur region in France. It features dedicated subdomains for specific departments, providing geographic and landscape information to the general public. The site is relatively new, established in 2022, and appears to be a small-scale regional resource without commercial or transactional features. Technically, the site uses Bootstrap 5 for layout and styling, indicating a modern but basic front-end framework. Mobile optimization and accessibility are present but limited, and no advanced CMS or analytics tools are detected. Security posture is minimal; no security headers or privacy policies are published, and SSL configuration details are not provided, which suggests room for improvement in security and compliance. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

The website www.onisep.fr is currently inaccessible due to a Cloudflare Turnstile security verification challenge, preventing access to its actual content. ONISEP is known as a French governmental educational portal, but the lack of accessible content limits detailed business and security analysis. The site uses Cloudflare for protection, indicating a focus on security, but no visible security headers or policies can be confirmed. The domain WHOIS data is not publicly available, consistent with privacy protection often used by government entities. Overall, the site appears legitimate but is currently blocked for analysis.

M

Mercedes-Benz Canada

mercedes-benz.ca

73

Mercedes-Benz Canada operates a comprehensive and professionally designed website focused on luxury automotive products including sedans, SUVs, coupes, and electric vehicles. The site targets Canadian luxury vehicle buyers and supports the brand's premium market position with extensive vehicle model information, dealer locator services, and owner support. The technical infrastructure leverages Adobe Experience Manager CMS and Adobe Experience Cloud analytics, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and consent management for cookies, though explicit security policies and incident response information are not publicly detailed. Overall, the website reflects a high level of professionalism and trustworthiness consistent with a global luxury automotive brand.

D

destination.one

destination.one

57

destination.one is a German-based digital platform specializing in destination management for the tourism and hospitality sectors. The platform offers an all-in-one solution for guest information, booking integration, and content management, targeting destination managers and tourism organizations. The website is built on TYPO3 CMS, indicating a mature and flexible technical infrastructure. The site is well-optimized for mobile devices and includes GDPR-compliant cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the website presents a professional and trustworthy digital presence suitable for its niche market.

I

Idego Group

idego.pl

11

Idego Group is a medium-sized technology company specializing in AI and data-driven business solutions. Founded in 2013, it serves multiple sectors including fintech, healthcare, e-commerce, and enterprise data management. The company offers consulting, software, platforms, and tailored AI solutions designed to improve operational efficiency and innovation for its clients. The website reflects a professional and consistent brand image with strong trust indicators such as client logos and testimonials. Technically, the site uses modern web technologies including Bootstrap and Cloudflare DNS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection flags, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is supported by a comprehensive privacy policy and whistleblower policy, but lacks a cookie consent mechanism. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or WAF interference.

S

Swiss Life

swisslife.ch

64

Swiss Life is a well-established financial services company based in Switzerland, with over 160 years of experience providing financial security, insurance, and pension solutions to individuals. The website targets individuals seeking self-determined financial security and offers a professional and consistent brand experience. The company operates in the finance sector and is positioned as a reputable enterprise with a strong market presence. The website is built on Adobe Experience Manager CMS and incorporates modern web technologies including Adobe Helix RUM for performance monitoring and OneTrust for cookie consent management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. No privacy policy or terms of service were found in the provided content, which impacts privacy compliance scoring. The domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness. Overall, the website is professional, secure, and credible, but could improve transparency around privacy and security policies.

E

ELLECOSTA METALL GMBH

ellecosta.it

11

ELLECOSTA METALL GMBH is a family-owned metal construction company based in Brixen, South Tyrol, Italy, with a history dating back to 1957. The company specializes in industrial metalwork, artistic metal creations, and grave-related metal products, serving architects, planners, artists, and private customers. Their market position is that of a trusted regional manufacturer known for combining traditional craftsmanship with modern technology. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, the site uses modern web technologies including Google reCAPTCHA for form security and Iubenda for cookie compliance, running on a CMS likely to be Redaxo. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is compliant with GDPR and provides comprehensive contact and business information, enhancing trustworthiness.

J

Jochims Transport GmbH

jochims-transporte.de

36

Jochims Transport GmbH is a medium-sized German transport company specializing in the transportation and disposal of construction materials and waste. Established in 2000, it operates a large fleet of over 70 semi-trailers and holds transport permits for hazardous and non-hazardous waste across Germany. The company targets construction firms, industrial clients, and municipalities primarily in the Niederrhein and Ruhrgebiet regions. Technically, the website is built using modern web technologies including Livewire and Alpine.js, hosted on rzone.de infrastructure, and offers a responsive, well-structured user experience. Security posture is solid with HTTPS and CSRF protections, though some security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit incident response and vulnerability disclosure policies.

E

Eco-Care Recycling Solutions GmbH

ecocare-recycling.com

41

Eco-Care Recycling Solutions GmbH operates in the plastic recycling sector, focusing on eco-efficiency concepts and the recovery of secondary raw materials from plastics. The company targets businesses requiring sustainable waste management and recycling solutions. Their website is professionally designed using the Contao CMS platform, featuring clear navigation and mobile optimization. However, the absence of WHOIS data and lack of visible contact information reduce trustworthiness. Security posture is moderate with no detected HTTPS confirmation or security headers, and privacy compliance is minimal with no cookie consent mechanism. Overall, the site presents a professional business front but requires improvements in security and transparency to enhance credibility.

O

ORF - Österreichischer Rundfunk

orf.at

73

ORF.at is the official news portal of ORF - Österreichischer Rundfunk, Austria's public broadcasting organization. The website delivers up-to-date news content including text, images, videos, weather, and sports, targeting the general Austrian public and international audiences interested in Austrian news. The site is well-branded and consistent with ORF's identity, reflecting its position as a leading media outlet in Austria. Technically, the website employs modern web technologies such as ES6 JavaScript, WOFF2 fonts, asynchronous script loading, and responsive design, ensuring good performance and accessibility across devices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not found in the provided content. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements fully. Overall, ORF.at is a professional, trustworthy, and technically mature news platform with room for improvement in privacy transparency and security disclosures.

A

Amt der Steiermärkischen Landesregierung

steiermark.at

67

The website www.verwaltung.steiermark.at serves as the official administrative portal for the Steiermark regional government in Austria. It provides comprehensive information and e-government services to citizens and businesses within the region. The portal features detailed navigation to government departments, service offerings, news updates, and contact information, positioning itself as a central hub for public administration in Steiermark. The site targets a broad audience including residents, government employees, and stakeholders seeking official information or services. Technically, the website is built on a custom CMS (ico-cms) and employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and FontAwesome. It integrates privacy-respecting analytics via Matomo alongside Google Analytics and Facebook tracking pixels, balancing data collection with user privacy. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks publicly visible dedicated security policies or incident response contacts. Security headers are not explicitly detected in the HTML content, suggesting room for improvement. No vulnerabilities or suspicious content were identified, and the domain registration aligns with official government credentials, indicating high legitimacy. Overall, the website demonstrates a strong professional and trustworthy presence suitable for a government entity. Strategic recommendations include publishing explicit security and incident response policies, enhancing security headers, and maintaining transparency in vulnerability disclosures to further strengthen trust and compliance.

Z

Zeppelin Rental

zeppelin-rental.de

65

Zeppelin Rental is a large German company specializing in the rental of machinery, equipment, and temporary infrastructure solutions primarily for business customers in the construction and transportation sectors. The website presents a professional and well-structured digital presence, offering detailed product categories and rental assistance tools. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and includes compliance with GDPR through cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its market segment.

B

Bernd Münstermann GmbH & Co. KG

muenstermann.com

50

Bernd Münstermann GmbH & Co. KG is a well-established German manufacturer specializing in custom machinery and solutions for thermoprocess technology, material handling, air purification, automation, and robotics. The company serves industrial clients across various sectors including insulation materials, catalysts, steel processing, and cable manufacturing. With a domain age dating back to 1997 and a subsidiary in the USA, Münstermann holds a strong market position as a leading German special machinery provider. The website reflects a professional and consistent brand image with comprehensive business information and reference projects. Technically, the site is built on Joomla CMS, uses modern JavaScript libraries like GLightbox, and integrates Matomo analytics for privacy-conscious user tracking. However, it lacks some security headers and a cookie consent mechanism, which are areas for improvement. The security posture is solid with HTTPS and domain transfer protection, but DNSSEC is not enabled. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility and business operations.

B

Berlinale Talents

berlinale-talents.de

63

Berlinale Talents is a well-established annual summit and networking platform affiliated with the Berlin International Film Festival, targeting creatives in film and drama series. The website effectively communicates its mission, upcoming events, and partner collaborations, positioning itself as a key player in the international film talent development space. The technical infrastructure leverages modern JavaScript libraries and Cloudflare DNS, ensuring reliable delivery and moderate performance. Security posture is solid with HTTPS and Cloudflare usage, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence with room for enhanced privacy compliance and security transparency.

The website lwspanel.com is currently a placeholder page indicating that the site is under installation and not yet operational. The business behind the domain is Ligne Web Services SAS dba LWS, a French web hosting provider established in 2010. The website content is minimal and does not provide any business details, contact information, or policies. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern security and privacy features. No HTTPS or security headers are detected from the provided data, and no analytics or tracking scripts are present. The security posture is weak due to missing HTTPS and absence of privacy compliance elements. Overall, the website is not yet ready for public use and lacks essential trust and security indicators.

Hondrolife-shop-it.com is a website promoting Hondrolife, a premium dietary supplement aimed at improving joint health and cartilage regeneration. The site targets individuals suffering from joint pain, including athletes and elderly users, and offers the product via direct online sales and selected pharmacies. The website content is well-structured, professionally presented, and optimized for mobile devices, with a clear focus on product benefits and customer testimonials. However, the site lacks critical compliance elements such as privacy and cookie policies, contact information, and security policies, which impacts trust and regulatory adherence. Technically, the site uses basic HTML, CSS, and JavaScript with Microsoft Clarity for analytics, hosted behind Cloudflare DNS services, but lacks advanced security headers and DNSSEC protection. The WHOIS data raises concerns due to a domain creation date set in the future, which is inconsistent with the website's copyright date and undermines legitimacy. Overall, while the business presentation is solid, the security posture and compliance maturity require significant improvement to enhance trustworthiness and regulatory compliance.

Neue Pierrot le Fou operates as a specialized film distribution company focusing on DVD and Blu-Ray releases, primarily targeting German-speaking film enthusiasts and collectors. The website presents a professional and consistent brand image with clear navigation and relevant content about upcoming and available films. The company maintains an active presence on major social media platforms to engage its audience. Technically, the website employs a traditional HTML5 and CSS3 structure enhanced with JavaScript libraries such as jQuery and Video.js for media playback. The site is responsive and includes a comprehensive cookie consent mechanism compliant with GDPR, indicating a mature approach to privacy. However, some modern security headers and updated libraries could improve the technical posture. Security-wise, the site uses HTTPS and provides cookie consent with granular controls, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable but improvable security environment. Overall, the website scores well in content quality, business credibility, and privacy compliance, with moderate technical and security scores. Strategic improvements in security headers, updated libraries, and explicit security documentation would enhance trust and resilience.

D

Département des Bouches-du-Rhône

departement13.fr

67

The Département des Bouches-du-Rhône website serves as the official digital portal for the regional government entity in France, providing extensive information and services related to local administration, social welfare, culture, environment, education, and community engagement. The site targets residents, local officials, associations, and businesses within the department, offering a comprehensive resource for accessing government programs and updates. Technically, the website is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS3, and integrates Matomo for analytics and tarteaucitron.js for GDPR-compliant cookie management. The hosting is provided by ScaleWay, a reputable provider, and the site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and employs domain transfer protection. While explicit security headers and policies are not fully documented, the site avoids exposing sensitive data and uses a consent mechanism for cookies. No critical vulnerabilities or suspicious activities were detected, indicating a solid security posture appropriate for a government website. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

И

Изипей АД

easypay.bg

58

EasyPay AD is a well-established Bulgarian payment services company founded in 2006, providing a broad range of financial services including utility bill payments, money transfers, and payment cards. The company operates both physical payment offices and digital platforms, targeting the general public and businesses within Bulgaria. Their market position is strong, supported by partnerships and certifications such as TUV and PCI DSS, which enhance their credibility and trustworthiness. Technically, the website employs standard web technologies including Bootstrap and jQuery, offering a responsive and user-friendly interface. While the site performs moderately well with good mobile optimization, there is room for improvement in accessibility and SEO. The absence of visible security headers and privacy policies indicates areas where the digital maturity could be enhanced. From a security perspective, the site uses HTTPS (assumed) and does not expose sensitive data visibly. However, the lack of explicit privacy and cookie policies, security headers, and incident response contacts suggests gaps in compliance and security best practices. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to align with modern standards and regulatory requirements.

S

Log in to edit your site

sitemodify.com

60

SiteModify is a technology platform providing website editing services through a secure login portal. The site integrates modern authentication mechanisms including Google OAuth and Google reCAPTCHA Enterprise to protect user access. The platform targets website owners and editors, offering a SaaS model for site management. Technically, the site uses a modern JavaScript stack with jQuery, jQuery UI, and asynchronous module loading, supported by external fonts and analytics services such as Mixpanel. Security posture is generally good with HTTPS enforced and bot protection in place; however, the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, impacting overall business credibility. No contact or compliance information is visible, limiting transparency and user trust.

The website wordpresc.com presents itself as a platform offering WordPress.com related services including website building tools, themes, hosting, and marketing features. The content is professionally structured and targets a general audience interested in website creation. The business model aligns with a platform-as-a-service offering, supported by Automattic, a recognized parent company. The technical infrastructure is modern with use of Google Fonts and Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. The WHOIS data shows inconsistencies with a domain creation date set in the future, which raises concerns about data accuracy or potential domain spoofing. No contact information or privacy compliance mechanisms such as cookie consent banners are present, limiting transparency and user trust. Overall, the site is functional and professional but requires improvements in security posture and privacy compliance.

The website energy-up.it appears to represent a small business in the energy sector based in Italy, with domain registration dating back to 2019. However, the website content is currently inaccessible due to a security challenge page likely implemented by a Web Application Firewall (WAF), which blocks direct access to the underlying content. The visible page is minimal and primarily serves as a redirect with browser integrity checks, indicating a protective security layer is active. Technically, the site uses outdated CMS technologies including Joomla 1.5 and WordPress 2.5, both of which are no longer supported and pose significant security risks. The site lacks modern SEO, accessibility, and mobile optimization features. No privacy, cookie, or terms of service policies are present, and no contact or business information is visible on the page, limiting trust and compliance. From a security perspective, the presence of DNSSEC and HTTPS (implied by the domain) are positive indicators, but the outdated CMS versions and lack of visible security headers or policies reduce the overall security posture. The WAF challenge page protects the site but also limits content accessibility and analysis. No analytics or advertising scripts were detected, suggesting minimal tracking or marketing infrastructure. Overall, the site scores low on content quality, privacy compliance, and business credibility due to blocked content and lack of visible information. Strategic improvements include upgrading CMS platforms, publishing privacy and cookie policies, enhancing security headers, and improving content accessibility to build trust and compliance.

B

Börsenmedien AG

finanzenverlag.de

59

Börsenmedien AG is a leading German media company specializing in financial and investment publishing targeted at retail investors. The company operates multiple well-known print titles and digital platforms, positioning itself as a market leader in the German-speaking financial media sector. The website content reflects a professional and comprehensive media presence with a strong focus on delivering value to private investors. Technically, the website is built with modern web standards, is mobile optimized, and provides a good user experience with clear navigation and structured data for SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and explicit security policies could be improved. The WHOIS data is incomplete or privacy protected, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the website is safe, trustworthy, and well-maintained.

I

Institut Arbeit und Technik

iat.eu

59

Institut Arbeit und Technik (IAT) is a research institute affiliated with the Westfälische Hochschule in Germany, focusing on sustainable innovation, work organization, and social-ecological transformation. It collaborates with regional and international partners including Ruhr-Universität Bochum. The website presents comprehensive research topics, publications, projects, and events, targeting academics, students, and policy makers. Technically, the site uses modern web technologies including jQuery and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-respecting analytics, though some security headers and cookie consent mechanisms are missing. WHOIS data is privacy protected, typical for .eu domains, and does not raise trust concerns given the professional nature of the site.

G

GIGAMED

gigamed.org

58

Gigamed is a regional business incubator and entrepreneurial support organization based in the Hérault Méditerranée area of France. Founded in 2023, it offers tailored services including business incubation, coworking spaces, and innovation development, particularly targeting startups and entrepreneurs in tourism and other sectors. The website reflects a professional and consistent brand presence with clear navigation and relevant content aimed at its target audience of entrepreneurs and investors. Technically, the site is built on WordPress with modern themes and scripts, hosted by OVH sas, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and security policies are absent. Overall, the site is trustworthy and well-positioned for its business purpose.

E

Ebizindia Consulting Private Limited

weddingplanning.in

53

WedPlan, operated by Ebizindia Consulting Private Limited, offers a specialized online wedding planning software tailored for Indian weddings. The platform facilitates comprehensive management of guest lists, invitations, RSVPs, logistics, and event coordination in a collaborative team environment. Positioned as a niche SaaS provider, WedPlan targets professional wedding planners and individuals seeking efficient digital tools for complex Indian wedding ceremonies. The business model is subscription-based with tiered pricing for individual and planner bundles. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, delivering a responsive and user-friendly experience. Structured data enhances SEO and brand visibility. Security posture is moderate with HTTPS usage and form validation but lacks explicit security headers and privacy policies, representing areas for improvement. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

E

Ebizindia Consulting Pvt. Ltd.

ctracker.in

65

CTRACKER is a web-based compliance tracking software designed primarily for small and medium-sized enterprises (SMEs) and Chartered Accountants (CAs) in India. The platform offers a subscription-based SaaS model with a focus on statutory, regulatory, and internal compliance management, featuring automated daily email reminders, team-based task assignments, and mobile-friendly access without the need for app installation. The business is operated by Ebizindia Consulting Pvt. Ltd., a NASSCOM member company, which adds credibility and trust to the offering. The website content is well-structured, professional, and provides clear information about the product, pricing, and benefits, supported by customer testimonials.

Memdir is a cloud-based membership directory software solution developed and offered by Ebizindia Consulting Private Limited, targeting associations, alumni networks, and membership organizations primarily in India. The platform facilitates easy member connection through WhatsApp, phone, and email, with features such as automated greetings, sponsor ads, and QR code check-ins. The website presents a professional and consistent brand image with clear contact information and client testimonials, positioning itself as a niche SaaS provider in the membership management space. Technically, the website is built with standard HTML, CSS, and JavaScript, showing moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS usage. SEO and accessibility are basic but adequate for the site's scope. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks published privacy and cookie policies, security headers, and incident response information, which are notable compliance and security gaps. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns, supporting the legitimacy of the domain and business. Overall, the website scores well on business credibility and content quality but needs improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

N

NS PULSE

nspulse.fr

53

NS PULSE is a small consulting firm founded in 2023 by Nicolas Chagny, specializing in strategy and public relations for projects, organizations, and companies with a positive impact focus. Their expertise spans education, technology, and non-profit sectors. The website presents a professional and consistent brand image with good content quality and moderate technical implementation. However, it lacks explicit privacy, cookie, and terms of service policies, as well as contact information and security policies. The domain registration data aligns well with the business claims, indicating legitimacy. The technical infrastructure uses modern fonts and meta tags but lacks advanced security headers and analytics integrations. Overall, the security posture is moderate with room for improvement in privacy compliance and incident response readiness.

The website is a digital business card for Xavier-Laurent Salvador, a Maître de conférences (HDR) specializing in medieval language and literature, affiliated with Université Sorbonne Paris Nord. It serves as a professional academic profile providing contact details, institutional affiliation, and a downloadable vCard. The site targets academic and research audiences and positions itself as a personal professional presence rather than a commercial business. The content is well-structured, clean, and mobile responsive, with semantic markup to enhance contact data parsing.

W

Wiener Linien

wienerlinien.at

78

Wiener Linien is the primary public transportation provider in Vienna, Austria, offering services including subway (U-Bahn), tram (Bim), bus, and alternative mobility options. The company holds a strong market position as the essential mobility provider for residents and visitors of Vienna. The website reflects a mature digital presence with comprehensive content tailored to its audience, including detailed service information and user support. Technically, the site employs modern web technologies and integrates advanced analytics and monitoring tools such as Dynatrace and Piwik PRO, ensuring performance monitoring and user experience optimization. Security posture is robust with enforced HTTPS, multiple security headers, and cookie consent mechanisms, although a dedicated security policy and incident response contact information are not explicitly published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR.

B

Berlin International Film Festival

berlinale.de

73

The Berlin International Film Festival website serves as the official digital presence for one of the world's leading film festivals. It provides comprehensive information about the festival's profile, programming, awards, partners, and news, targeting film professionals, media, and enthusiasts globally. The site is well-funded by government bodies and principal partners, reflecting its cultural significance and large-scale operations. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and VideoJS for media playback, with a focus on responsive design and accessibility. Analytics are handled via Etracker, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and formal security policies published. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, supporting the festival's prestigious market position.

T

Texas A&M University

tamu.edu

72

Texas A&M University is a large, established public research university founded in 1876, serving students and researchers primarily in the United States. The website reflects a professional and comprehensive digital presence with a focus on education and research. The technical infrastructure includes modern JavaScript libraries and analytics tools such as Google Tag Manager and Microsoft Clarity, indicating a mature digital strategy. Security posture is moderate with HTTPS usage and deferred script loading, but lacks visible security headers in the provided content. Privacy and cookie policies were not detected, suggesting room for improvement in compliance transparency. Overall, the site is trustworthy and well-maintained, consistent with a major educational institution.

N

Gallery of country coats of arms. Select A COUNTRY

near-place.com

59

Near-place.com is a niche informational website providing a gallery of country coats of arms and related geographic information. The site targets a general audience interested in geography and heraldry. It offers a simple user interface with country selection and visual content. The business model appears to be advertising-supported, primarily through Google Adsense. The website is relatively small and was established in 2016, indicating moderate maturity in its niche. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is hosted and registered via Cloudflare, ensuring reliable DNS and HTTPS support. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, it lacks advanced frameworks or CMS indications. From a security perspective, the website uses HTTPS and has domain transfer protections enabled. However, it lacks important security headers and does not enable DNSSEC, which could improve DNS security. There is no visible privacy policy or terms of service, which impacts compliance and trust. The cookie consent banner indicates some GDPR awareness but may not be fully compliant. No contact or incident response information is provided, limiting user trust and security responsiveness. Overall, the website is functional and safe for general users but would benefit from enhanced privacy, security, and compliance measures. Strategic improvements in policy transparency, security headers, and contact information would strengthen its trustworthiness and regulatory posture.

Fake-Shop Detector is a specialized security tool offered as a browser plugin designed to protect online shoppers from fraudulent e-commerce websites by providing real-time detection and warnings. The website is well-positioned in the Austrian market, supported by reputable partners and government funding, and recognized as a test winner by AV Comparatives in 2024. The business model focuses on consumer protection and security awareness in online shopping environments. Technically, the site is built on TYPO3 CMS with modern web standards, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response policies are not publicly documented. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and focused on delivering a niche security service.

C

Creative Europe Desk Ireland

creativeeuropeireland.eu

39

Creative Europe Desk Ireland is a specialized entity supporting Ireland’s culture and audiovisual sectors in accessing EU Creative Europe funding. The website serves as an official information hub providing funding opportunities, application guidance, news, events, and resources. It is positioned as a national desk affiliated with the European Union and the Arts Council, targeting cultural professionals and organizations in Ireland. The business model is non-profit and service-oriented, focusing on facilitating access to EU funds. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework for responsive design. It uses Google Fonts and Fathom Analytics for lightweight, privacy-conscious tracking. The site is well-structured with good SEO and accessibility features, providing a positive user experience across devices. The newsletter subscription form collects personal data with explicit consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers or policies are detected, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence. The WHOIS data is unavailable due to privacy protections or query failure, limiting domain trust analysis, but the site’s content and branding strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, implementing cookie consent mechanisms, and providing vulnerability disclosure information to improve security posture and compliance.

A

Agefiph

agefiph-handinnov.com

65

Agefiph HANDINNOV is a French government-related platform dedicated to organizing calls for innovation projects and consultations, specifically targeting initiatives related to disability. The website serves as a portal for innovators and organizations to participate in Agefiph's innovation funding and consultation processes. The platform is relatively small in scale, consistent with a niche government service, and was established in 2018. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and the Jodit WYSIWYG editor, hosted by OVH sas with Cloudflare DNS services. The site uses HTTPS with a valid SSL certificate, ensuring secure communications.

Zillian S.A. operates the website promoting JACKET™, an innovative advertising technology platform focused on delivering high-impact digital advertising formats with programmatic readiness. The company positions itself as a global adtech innovator, offering fully integrated services from creative development to campaign activation, targeting brands and marketing professionals. The website is multilingual, professionally designed, and provides clear contact channels including a consent-enabled contact form. Technically, the site uses modern web technologies including jQuery and Google Analytics, with good mobile optimization and accessibility features. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a comprehensive privacy policy and legitimate interest assessment documents, though cookie consent is missing. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance transparency.

S

Selectra

stromliste.at

65

Stromliste.at is an Austrian energy comparison platform operated by the Selectra Group, offering free services to compare electricity and gas tariffs and providing expert telephone consultation to help consumers reduce energy costs. The website is professionally designed, mobile-optimized, and rich in relevant content, including guides, tariff comparisons, and customer testimonials. Technically, it is built on Drupal 10 with modern web technologies and integrates Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to NIC.AT quota limits, but the website's business information and trust signals indicate legitimacy. Overall, the site presents a trustworthy and user-friendly service for Austrian energy consumers.

M

mymuesli

mymuesli.de

74

mymuesli is a German-based e-commerce company specializing in personalized organic muesli products. The website offers a high-quality user experience with a focus on organic ingredients and customization, targeting health-conscious consumers. The company leverages Shopify as its e-commerce platform, integrating various third-party services for customer reviews, loyalty programs, and marketing automation. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. The absence of publicly available WHOIS data slightly impacts business credibility but does not detract from the overall legitimacy of the site. Strategic recommendations include publishing security and incident response policies and enhancing transparency around domain registration.

F

Fastweb S.p.A.

fastweb.it

75

Fastweb S.p.A. is a leading Italian telecommunications and energy service provider offering fiber optic and ADSL internet, mobile telephony, and energy solutions for families, businesses, and enterprises. The company positions itself as a major player in Italy's digital transformation, providing bundled services and innovative digital tools such as FastwebAI and a comprehensive customer app. The website reflects a mature digital presence with clear service segmentation and strong branding consistency. Technically, the website employs modern web technologies including responsive design, video backgrounds, SVG icons, and advanced analytics tools like Piwik PRO and Google Tag Manager. The site is optimized for performance and mobile devices, with good accessibility and SEO practices. Security is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms integrated into forms and user interactions. The security posture is strong, with publicly available security policies and responsible disclosure channels, although explicit DPO contact details and a security.txt file are not found. No vulnerabilities or suspicious patterns were detected. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and secure, supporting Fastweb's market position as a reputable telecommunications and energy provider in Italy. Strategic recommendations include enhancing transparency around data protection officer contacts and formalizing vulnerability reporting mechanisms.

K

KIA AUTO AS

kia.ee

61

KIA AUTO AS operates as the official importer and distributor of Kia vehicles in the Baltic region, primarily serving Estonia. The company offers a broad range of Kia models including SUVs, electric vehicles, and passenger cars, supported by a network of 12 official dealerships across Estonia. The website reflects a professional automotive business with a focus on customer engagement through vehicle configuration and comparison tools. Technically, the site employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics and marketing. The site is mobile-optimized and presents a good user experience with clear navigation and branding consistency. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and published security policies or incident response contacts. The extensive use of third-party tracking and advertising services indicates a high level of user data collection, balanced by transparent cookie consent dialogs. Overall, the website is legitimate, professionally maintained, and compliant with regional privacy regulations, though it could improve in explicit security policy disclosures and contact information availability.