Security Directory

F

Fiducial

fiducial.com

72

Fiducial is a financial services company providing a broad range of advisory and operational services including tax, payroll, bookkeeping, retirement planning, pension management, BPO, CFO outsourcing, and merger and acquisition advice. The company targets businesses and individuals seeking expert financial guidance and support. The website reflects a professional and consistent brand image with a focus on trust and reliability in the finance sector. Technically, the site employs modern web technologies such as React and service workers, indicating a moderate level of digital maturity. Google Tag Manager is used for analytics and tracking, but no advanced security headers or explicit privacy policies were detected, suggesting room for improvement in security and compliance. Overall, the security posture is moderate with no critical vulnerabilities detected, but the absence of privacy and cookie policies and security headers reduces the compliance score. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents to improve trust and compliance.

The website porotech.com is currently inaccessible due to a security challenge page implementing a JavaScript-based proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to the site's content. As a result, no business, contact, or policy information is available for analysis. The visible page is minimal, focused solely on verifying the visitor is not a bot, with no SEO or user engagement content. The technical infrastructure includes modern JavaScript features and uses AWS Cloudfront CDN for content delivery. However, no security headers or SSL configuration details are visible in the provided data. Overall, the site’s security posture cannot be fully assessed due to the blocking mechanism, and the lack of accessible content limits the ability to evaluate privacy compliance or business credibility.

G

Getswish AB

swish.com

63

Getswish AB operates the Swish mobile payment service, a widely adopted real-time payment platform in Sweden since 2012. The company targets both consumers and businesses, offering fast, secure payments authenticated via Mobile BankID. The website reflects a mature digital presence with modern technologies such as Vue.js and Contentful CMS, optimized for mobile users. Security posture is strong with HTTPS and secure payment authentication, though some security headers and incident response details are missing. The absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, but the professional website and business information support legitimacy. Overall, the risk is moderate with recommendations to enhance security headers, privacy compliance, and domain registration transparency.

W

WiiSmile

wiismile.com

59

WiiSmile is a French company founded in 2017 that provides externalized employee committee services tailored for small and medium enterprises (TPE & PME). Their business model focuses on enhancing employee benefits and quality of life by aggregating offers typically found in larger company committees. The website positions WiiSmile as a niche player offering meal vouchers, gift checks, team building, and other employee engagement services. The target audience is primarily small business owners and their employees in France. The company maintains a professional online presence with clear branding and trust signals such as embedded Google and Trustpilot reviews.

B

Brittany Ferries

brittany-ferries.com

59

Brittany Ferries operates as a well-established ferry transportation and holiday package provider linking the UK, Ireland, France, Spain, and Portugal. The company targets travelers seeking ferry routes and holiday accommodations in these countries, maintaining a strong market position with a domain age dating back to 1996. The website presents localized versions for different countries, enhancing user experience for diverse audiences. Technically, the site uses Cloudflare DNS and Google Tag Manager for analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and asynchronous tag loading but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service visible. Overall, the site is professional, trustworthy, and content is safe for general audiences.

A

Axxes

axxes.com

71

Axxes is a full-service IT consultancy organization based in the Netherlands, specializing in providing high-tech knowledge and driven consultants to clients at the right time and place. The company targets business clients seeking IT consultancy services and positions itself as an established player in the regional technology sector. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern technologies including Google Tag Manager, Cookiebot for cookie consent, and appears to be hosted behind Cloudflare with Craft CMS as the content management system. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly visible. Privacy compliance is supported by a detailed cookie consent mechanism, but a formal privacy policy and terms of service are not clearly found in the provided content. Overall, the website is trustworthy and safe for general audiences, with extensive use of analytics and marketing tools.

S

SECURTRUCK

securtruck.fr

47

SECURTRUCK is a French company specializing in anti-siphoning technology for fuel tanks, targeting transportation and fleet management sectors. Their flagship product, SECURTANK, uses advanced 3D digital sensors to detect tampering and theft attempts in real-time. The company positions itself as a niche provider with a focus on innovation and ease of installation, emphasizing a non-intrusive, tool-free setup. The website reflects a professional and modern digital presence built on WordPress with Elementor, featuring multimedia content to demonstrate product capabilities. Social media integration and client logos enhance credibility. However, the absence of a privacy policy and explicit security policies indicates room for compliance improvement.

G

Guémas Immopro

guemas.fr

58

Guémas Immopro is a French real estate company specializing in commercial properties such as offices, activity spaces, and parking in cities including La Rochelle, Paris, and Bordeaux. The website is professionally designed using the Wix platform, featuring modern web technologies and a cookie consent mechanism via Usercentrics, indicating some level of GDPR compliance. However, the absence of explicit privacy and terms of service pages and lack of visible contact information limit transparency. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and age, especially given the company's claim of 30 years in business. Security posture is moderate with HTTPS implied but no detected security headers or advanced protections. Overall, the website presents a professional front but would benefit from enhanced transparency and security measures.

F

Förderverein Landesgartenschau Bad Nenndorf 2026

foerderverein-laga26.de

44

The Förderverein Landesgartenschau Bad Nenndorf 2026 is a small non-profit organization dedicated to supporting the Landesgartenschau 2026 event in Bad Nenndorf, Germany. The website serves as an informational and engagement platform for local citizens, clubs, and businesses to participate in the event's development and related projects. The organization emphasizes sustainable and community-focused development of local parks and infrastructure. Technically, the website is built on WordPress with Elementor and Astra theme, employing modern web technologies and a cookie consent mechanism via Borlabs Cookie. Security posture is moderate, with HTTPS enabled but lacking some recommended security headers and formal privacy documentation. No contact emails or phone numbers are explicitly provided in the accessible content, which limits direct communication channels. Overall, the site is professionally designed, mobile-optimized, and trustworthy for its intended audience, but could improve compliance and security practices.

L

LaGaSaGa

lagasaga.de

35

LaGaSaGa is a German cultural storytelling project centered around the character Nennia, the guardian of the Süntelbuchen forests near Bad Nenndorf. The website promotes stories, podcasts, and cultural events related to the Landesgartenschau 2026 in Bad Nenndorf. The site is built on WordPress with modern SEO and multimedia integration, including podcasts on Spotify and embedded YouTube videos. The technical infrastructure is solid, hosted on kasserver.com with HTTPS enabled and uses popular plugins like Yoast SEO and WPBakery Page Builder. Security posture is good with no obvious vulnerabilities or exposed sensitive data, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is professional, trustworthy, and well-branded but should improve compliance and security documentation.

B

betaITS GmbH

beta-its.de

62

betaITS GmbH is a small German managed IT services provider specializing in modern, simple, and customer-friendly IT solutions. Their offerings include managed endpoint services, infrastructure management, Microsoft 365 management, security, backup, and hardware procurement. The company targets businesses seeking comprehensive IT management with a focus on proactive service and operational continuity. The website is professionally designed using modern technologies like Astro, with excellent mobile optimization and clear navigation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact is primarily via Calendly and social media, with no direct emails or phone numbers visible. Overall, the site is trustworthy, well-branded, and content-rich, supporting betaITS GmbH's market position as a reliable managed IT service provider.

T

TC Expo

tcexpo.uz

55

TC Expo is a newly established company (founded in 2024) specializing in exhibition stand design and construction, targeting businesses and organizations that require professional exhibition architecture services. The company positions itself as a leading provider in its sector with international partnerships and a focus on customized, high-quality solutions. The website is built on the Tilda CMS platform, leveraging modern web technologies and CDN hosting for performance and reliability. The site is well-designed, mobile-optimized, and provides a good user experience, although it lacks explicit privacy and cookie policies as well as clear contact information. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response contacts. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

The website ictashkent.com is currently inaccessible due to a 502 Bad Gateway error served via Cloudflare, indicating an origin server failure. The page content is limited to an error message with no business or contact information, policies, or services described. This prevents a full assessment of the company's business operations, market position, or technical infrastructure. The only technology detected is Cloudflare acting as a proxy and WAF. Security posture is weak due to lack of security headers and absence of privacy or cookie policies. No forms, scripts, or analytics are present to evaluate data collection or user tracking. Overall, the site is non-functional and provides no trust or credibility signals.

C

Central Asian Expo Uzbekistan

caexuzbekistan.com

48

CAEx Uzbekistan is a modern international exhibition center located in Tashkent, Uzbekistan, serving as a major business arena in Central Asia. It offers versatile pavilion spaces adaptable for various projects and event formats. The center is a member of prestigious international exhibition associations UFI and IAEE, underscoring its commitment to quality and international standards. The website targets businesses and event organizers seeking exhibition and event hosting services in the region. Technically, the website employs modern web technologies including Swiper.js for interactive galleries, AOS for animations, Google Tag Manager and Yandex Metrika for analytics, and a live chat widget for customer engagement. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. The design is professional, mobile-optimized, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no explicit security headers were detected, which are areas for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact information is clearly provided, but no incident response or vulnerability disclosure policies are available. Overall, the website presents a trustworthy and professional image suitable for its business purpose. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and regulatory adherence.

O

O‘zbekiston Avtomobil Biznesi Uyushmasi

abauzbekistan.uz

47

O‘zbekiston Avtomobil Biznesi Uyushmasi is a national non-profit association uniting automotive manufacturers, component producers, distributors, and dealers in Uzbekistan. The organization aims to develop the automotive industry, promote standards, support export and localization, and represent member interests. The website is professionally designed, content-rich, and targets industry stakeholders and partners. Technically, it uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent mechanism and privacy policy present. Overall, the domain registration aligns well with the business founding date, supporting legitimacy.

C

Centrum Air

centrum-air.com

57

Centrum Air is a private airline company based in Uzbekistan, founded in 2023, offering affordable flight tickets primarily from Tashkent to various regional and international destinations. The website provides a modern booking platform built on Next.js and React, featuring multiple flight routes, schedules, and additional services such as extra baggage, seat selection, and wheelchair rental. The technical infrastructure is contemporary with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and focused on transportation services with a clear market presence in Uzbekistan and surrounding regions.

O

O'zbekiston Savdo-sanoat palatasi

chamber.uz

55

The website represents the Chamber of Commerce and Industry of Uzbekistan, a key governmental institution supporting trade and industry sectors within Uzbekistan. It provides services such as trade facilitation, business registration, and information dissemination to businesses and government entities. The domain is well-established since 2007, reflecting a mature presence in the market. Technically, the site uses modern frontend frameworks like Bootstrap and Vue components, ensuring a responsive and professional user experience. However, there is a lack of explicit privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate, with no detected vulnerabilities but missing best practices. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security measures.

K

Komtrans Tashkent + Futuroad Expo Tashkent

comtrans.uz

49

Komtrans Tashkent + Futuroad Expo Tashkent is a newly established international exhibition platform focused on cargo and commercial transport in Uzbekistan and Central Asia. The website serves as a B2B platform for showcasing products, technologies, and solutions in the commercial transport sector. The event is positioned as a leading regional exhibition with a professional digital presence built on the Tilda CMS platform. The technical infrastructure includes modern web technologies and integration with Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, indicating room for improvement in compliance and security maturity. Overall, the website is functional, professionally designed, and trustworthy, with clear contact information and social media presence. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response policies to strengthen trust and security posture.

T

Tashkent International Auto Show

tias.uz

58

Tashkent International Auto Show (TIAS) is a regional automotive exhibition event based in Uzbekistan, targeting automotive manufacturers, dealers, and lifestyle consumers in Central Asia. The website presents the event professionally with detailed information about the exhibition, participation, and partner programs. The technical infrastructure is built on the Tilda CMS platform, leveraging modern JavaScript libraries and third-party integrations such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy and cookie policies, which are compliance gaps. The domain registration data aligns well with the business purpose and location, indicating legitimacy. Overall, the website is a credible digital presence for the TIAS event but would benefit from enhanced privacy compliance and security best practices.

B

Bundesverband BioEnergie e.V. (BBE)

fachverband-holzenergie.de

48

Fachverband Holzenergie is a German industry association dedicated to promoting sustainable wood energy usage. It operates under the umbrella of Bundesverband BioEnergie e.V. (BBE) and provides advocacy, publications, events, and working groups to support the wood energy sector. The website is professionally designed, content-rich, and targets industry stakeholders, policymakers, and environmental advocates. The association holds a solid market position within Germany's renewable energy landscape, focusing on sustainable forestry and climate protection through wood energy. Technically, the website is built on the Concrete5 CMS platform, utilizing modern JavaScript libraries such as jQuery and LayerSlider for interactive content. The site is mobile-optimized with good navigation and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. Analytics are handled via Matomo, emphasizing privacy compliance with cookie opt-in. Overall, the website presents a trustworthy and professional front for the Fachverband Holzenergie association. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security posture and compliance. The domain WHOIS data is minimal but consistent with the website's German focus, supporting legitimacy. No WAF or blocking mechanisms interfere with content access.

B

Bayerische Staatsforsten AöR

baysf.de

65

Bayerische Staatsforsten AöR is a publicly owned forestry organization under the Free State of Bavaria, managing the entire Bavarian state forest with a focus on sustainable, integrative forest management. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting citizens, forestry professionals, and environmental stakeholders. The organization offers a broad range of services including wood production, hunting, renewable energy, and nature conservation. Technically, the site is built on Drupal CMS, uses Matomo for analytics with user consent, and supports responsive design and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the domain and WHOIS data align with the organization's government affiliation, supporting legitimacy and trust. No critical vulnerabilities or suspicious content were detected.

D

Deutsche Säge- und Holzindustrie Bundesverband e. V.

zukunft-holz.de

58

The website 'Zukunft Holz' represents the Deutsche Säge- und Holzindustrie Bundesverband e. V., a well-established German industry association focused on sustainable wood usage and the sawmill sector. The organization acts as a key intermediary between forestry and wood processing industries, promoting climate protection, employment, and value creation. The site offers comprehensive information, press releases, event details, and project highlights, targeting industry stakeholders, policymakers, and interested public. Technically, the site is built on WordPress with a modern theme and plugins, including SEO and cookie consent tools, ensuring a professional digital presence. Security measures such as HTTPS, hCaptcha, and cookie consent are implemented, though additional security headers could enhance protection. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the site is well-designed, content-rich, and compliant with GDPR, supporting the organization's mission effectively.

E

Experience Boats

experienceboats.com

70

Experience Boats operates a premium boating experience platform offering MasterCraft and Crest Pontoons at luxury destinations across the United States. The company targets consumers seeking watersports, boat rentals, and curated water experiences through a network of experience centers, partners, and verified providers. The website demonstrates a solid digital presence with good content quality, mobile optimization, and accessibility features. Technically, it leverages modern analytics and tracking tools, including Google Tag Manager, Facebook Pixel, and Microsoft Application Insights, and is built on the Umbraco CMS platform. Security posture is strong with HTTPS enforced and secure form handling, though some security headers are missing and no explicit incident response or security policies are published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

S

Schweizerischer Katholischer Presseverein

skpv.ch

49

The Schweizerischer Katholischer Presseverein (SKPV) is a well-established non-profit organization dedicated to promoting Catholic media work in Switzerland. With a history spanning over a century, the organization offers key services including a media kiosk, educational courses for church media professionals, a comprehensive media list, and a historical chronicle of Catholic media. The website reflects this mission with focused content and a consistent brand presence. Technically, the site is built on a modern WordPress platform using the Kadence theme and blocks, ensuring good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

B

b&s creations

bs-creations.ch

48

b&s creations is a small Swiss-based service provider specializing in design, web design, and text content creation. The website presents basic information about their services and showcases client projects, targeting small to medium businesses or individuals seeking creative digital services. The technical infrastructure is based on CMSimple with older jQuery libraries and includes basic interactive elements such as sliders and cookie consent banners. Security posture is limited with no visible HTTPS confirmation or security headers, and no explicit contact emails or phone numbers are provided, relying on a contact form instead. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page in German. Overall, the website is functional but basic in design and security, with room for modernization and enhanced trust signals.

G

ge-webdesign.de

ge-webdesign.de

39

ge-webdesign.de is a small, local web design service provider based in Berlin, Germany, specializing in affordable and technically sound website creation using the CMSimple platform. The website offers CMSimple templates, plugins, and installation services, targeting small businesses and individuals in the Berlin-Brandenburg region. The business emphasizes over 20 years of experience and provides a general license for its templates and plugins. Technically, the website is built on CMSimple 5.21 with jQuery 1.12.4 and standard HTML/CSS, showing good mobile optimization and SEO practices but lacking modern security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by updating libraries and enhancing SSL and header configurations. Overall, the site is accessible without WAF or blocking, contains no adult or questionable content, and demonstrates moderate trustworthiness with room for technical and privacy compliance improvements.

P

Primus-Ofenshop.com

primus-ofenshop.com

62

Primus-Ofenshop.com operates as a specialized e-commerce retailer focused on fireplaces, tiled stoves, and related accessories, targeting consumers in Germany. The company emphasizes professional consulting by stove masters and offers individual stove planning and handcraft services, positioning itself as a trusted regional expert with a broad product range and over 15,000 completed projects. The website is built on a modern WordPress and WooCommerce platform, leveraging Elementor for design and integrating trusted third-party services such as Trusted Shops and MonsterInsights for reviews and analytics. Cookie consent is managed via Cookiebot, reflecting attention to privacy compliance. Security posture is solid with HTTPS enforced and privacy-focused analytics settings, though the absence of explicit security headers and visible privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the site presents a professional and user-friendly experience with moderate risk due to incomplete compliance documentation and domain registration opacity.

S

Stilbetten.de

stilbetten.de

60

Stilbetten.de is a German e-commerce retailer specializing in beds and mattresses, offering a wide selection of quality products to consumers aiming to enhance their bedroom experience. The website is built on a modern WordPress platform using WooCommerce for e-commerce functionality and Elementor for design, hosted on Amazon AWS infrastructure. The site integrates advanced tracking and consent management tools such as Google Analytics, Microsoft Clarity, and Cookiebot, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, although the absence of explicit privacy policies and terms of service pages indicates room for compliance improvement. Overall, Stilbetten.de presents a professional and trustworthy online retail presence with a focus on user experience and privacy-aware tracking.

M

Mundharmonika Berlin

mundharmonika-berlin.de

39

Mundharmonika Berlin is a small local business specializing in the sale and consultation of Mundharmonika musical instruments, as well as live music performances in Berlin. The website serves as a platform for showcasing the business offerings, including an online shop and detailed information about the proprietor's musical background. The business targets music enthusiasts and players of the harmonica, focusing on a niche market within the Berlin area. Technically, the website is built on the CMSimple CMS platform, utilizing standard web technologies such as HTML5, CSS, and jQuery. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. Hosting appears to be provided by a German hosting provider associated with the domain's nameservers. From a security perspective, the website lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user protection. No HTTPS or SSL configuration details were provided, which is a critical area for improvement. The site does not disclose any formal security policies or incident response contacts, indicating a low maturity in security governance. Overall, the website is functional and professional for a small business but requires enhancements in security posture, privacy compliance, and technical modernization to improve trust and user experience.

비

비즈니스포스트 (Businesspost)

chwho.co.kr

56

채널Who is a Korean economic media channel operated by CHANNELWHO, Inc., focusing on people-centered economic analysis and business news. The website offers video content, interviews, and news briefings targeting Korean-speaking business professionals and investors. The business is positioned as a niche media provider with a consistent brand and professional content. Technically, the site uses modern web technologies including Google Tag Manager and Analytics, with hosting likely on AWS infrastructure. Mobile optimization is good, and navigation is clear. Security posture is adequate with HTTPS and secure form handling, but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the site is professional and trustworthy with room for security and privacy improvements.

The website www.ssafy.com represents the Samsung Youth Software and AI Academy (SSAFY), a government-supported educational initiative focused on providing software and AI training to young job seekers in South Korea. The platform offers coding education, IT training, and employment support services, positioning itself as a key player in the national youth employment and technology education sector. The site content is primarily in Korean and targets youth preparing for careers in software and AI fields. Technically, the website employs legacy jQuery 1.11.0 and integrates Google Analytics for visitor tracking. The site loads asynchronously and uses NetFunnel for traffic management. However, the technical implementation is basic with limited modern frameworks or CMS detected. Mobile optimization and accessibility are at a basic level, and SEO practices are minimal but present through meta tags and Open Graph data. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data for the domain is unavailable, which raises concerns about transparency and domain legitimacy despite the active and professional nature of the website. No forms or user input fields are present on the homepage, reducing immediate attack surface but also limiting user engagement features. Overall, the website is functional and serves its educational purpose but requires improvements in privacy compliance, security best practices, and WHOIS transparency to enhance trustworthiness and regulatory adherence.

비

비즈니스포스트

c-journal.co.kr

59

C-journal is a Korean business media platform targeting CEOs and global business leaders, providing management insights and business news. The website positions itself as a leading Korean business media outlet, focusing on delivering valuable content to its target audience. The business is registered under the name 비즈니스포스트 with clear contact information and a physical address in Seoul, Korea. However, the domain WHOIS data shows a future creation date (2025), which is unusual and may indicate a data error or pre-registration status. Technically, the website uses a moderate technology stack including jQuery 1.12.4, vis-network, and Google Tag Manager for analytics. Hosting appears to be on Amazon AWS infrastructure. The site is mobile optimized with good SEO and basic accessibility features. Security headers are present but could be enhanced with stricter policies and updated libraries to improve security posture. Security-wise, the site enforces HTTPS and has a Content-Security-Policy header, but the Referrer-Policy is set to 'unsafe-url', which is not recommended. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are not explicitly found, which is a compliance gap. Overall, the site demonstrates a good security posture but has room for improvement in privacy compliance and security header implementation. The overall risk assessment is moderate with recommendations to update security headers, improve privacy disclosures, and verify domain registration details. The site is trustworthy and professional but should address the noted anomalies and compliance gaps to enhance credibility and security.

K

KoreaWho

koreawho.com

62

KoreaWho is a specialized media platform providing detailed biographical profiles and news about influential leaders in the Korean economy. The website targets business professionals, investors, and researchers interested in Korean corporate leadership. It offers a searchable database of profiles and news articles focusing on executives across various sectors including energy, finance, manufacturing, and transportation. The platform positions itself as a niche authoritative source for Korean business leadership information. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, and Google Fonts. It is mobile-optimized with good SEO practices and moderate performance. The site uses HTTPS and integrates analytics tools like Google Analytics and Naver Analytics, indicating a moderate level of digital maturity. From a security perspective, the site enforces HTTPS but lacks comprehensive security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance or cookie consent. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy front with quality content and good user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Security and privacy practices could be improved to enhance compliance and trustworthiness.

The website bpforum.net serves as the official platform for the 2025 Business Post Finance Forum held in Hanoi, Vietnam, focusing on expanding Korea-ASEAN financial cooperation. Hosted by the Korean media company 비즈니스포스트, the site targets financial professionals, policymakers, and investors interested in ASEAN and Vietnamese financial markets. The business model centers on organizing specialized finance forums to facilitate networking and knowledge sharing. The site content is primarily in Korean with professional event details, speaker introductions, and partner information, reflecting a focused niche audience. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Owl Carousel, and Animate.css, hosted on AWS infrastructure. The site is mobile-optimized with good navigation and design quality, though SEO and accessibility features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical setup. From a security perspective, the domain uses clientTransferProhibited status but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. The absence of privacy and cookie policies indicates compliance gaps, especially under GDPR. No incident response or vulnerability disclosure information is provided. WHOIS data is transparent and consistent with the business, supporting legitimacy. Overall, the site is professionally presented and credible for its business purpose but would benefit from improved security practices and privacy compliance to strengthen trust and regulatory adherence.

V

Verein Vertrauensstelle Kunst und Kultur

vertrauensstelle.at

48

The Verein Vertrauensstelle Kunst und Kultur operates as an independent trust center providing confidential, professional advice and support for individuals affected by abuse of power, harassment, and violence within the arts and culture sector in Austria. The organization also promotes sustainable cultural change through prevention initiatives. Their market position is that of a specialized non-profit entity serving a niche audience within the cultural sector. The website is well-structured, professionally designed, and fully accessible with clear navigation and mobile optimization. Technically, it is built on WordPress with modern plugins and privacy-conscious analytics (Matomo) implemented. Security posture is strong with HTTPS enforced and privacy policies aligned with GDPR requirements, although some security headers and explicit incident response contacts are missing. Overall, the domain registration and WHOIS data are consistent with the organization's claims, supporting legitimacy and trustworthiness.

S

sports4everybody

kitz-extremechallenge.com

49

The website www.kitz-extremechallenge.com represents the World Extreme Run Challenge (WERC), an extreme sports event organized by the non-profit association sports4everybody. The event is held on the famous Kitzbühel Streif ski slope and aims to challenge participants with an up-and-down mountain run. The business model is non-profit, focusing on community engagement and supporting Austrian sports talents. The website content is professionally presented in German, with clear navigation and relevant event information. The site is supported by multiple reputable partners and sponsors, enhancing its credibility. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as jQuery and Owl Carousel. It employs Matomo analytics for user tracking with privacy considerations. The site is mobile-optimized and performs moderately well. However, no CMS or hosting provider details are explicitly detected. Security posture is good with HTTPS enforced and secure form handling, but lacks some security headers and incident response information. From a security and compliance perspective, the site includes a privacy policy and cookie consent mechanism compliant with GDPR. Contact information is clearly provided, but no terms of service or security policy documents are found. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy despite the professional website presence. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is a credible and professional platform for the WERC event but should address WHOIS transparency and enhance security headers and policies to improve trust and compliance.

B

Bundesministerium für Wohnen, Kunst, Kultur, Medien und Sport (BMWKMS)

sportministerium.at

63

The website www.bmwkms.gv.at represents the official online presence of the Austrian Federal Ministry for Housing, Arts, Culture, Media, and Sports (BMWKMS). It serves as a comprehensive information and service portal for citizens, cultural professionals, sports organizations, and media stakeholders in Austria. The ministry provides extensive resources including policy updates, funding opportunities, publications, and contact information. The site is well-branded, professionally designed, and clearly targeted at a broad public audience with interests in government services related to culture, sports, media, and housing. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Bootstrap framework elements indicating responsive design. It uses eTracker for analytics, integrated with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and accessible, with clear navigation and structured content. Hosting details are not explicitly disclosed, but HTTPS is enforced with a strong SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visible in the provided data, and no published security policy or incident response contacts were found. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the Austrian government entity, confirming legitimacy and trustworthiness. Overall, the website is a high-quality, trustworthy government portal with strong privacy and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security and transparency.

S

Stiftung Ehrenkodex

ehrenkodex.ch

64

Stiftung Ehrenkodex operates as a Swiss nonprofit foundation providing a certification and quality seal for nonprofit organizations with Christian values. Their service focuses on ensuring transparency, ethical governance, and effective use of donations. The organization is well-positioned in the Swiss nonprofit sector, leveraging academic models from the University of Basel to underpin their certification process. Their website reflects a professional and trustworthy image, targeting nonprofit organizations and donors seeking assurance of ethical practices. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Tag Manager for analytics and Finsweet Cookie Consent for privacy compliance. The site is mobile-optimized, fast-loading, and accessible, with clear navigation and comprehensive content. Security measures such as HTTPS and standard security headers are in place, though explicit security policies and incident response information are not publicly detailed. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well-handled with a clear privacy policy and cookie consent mechanism. Contact information is transparent and includes multiple channels, enhancing business credibility. Overall, the site scores highly on content quality, technical implementation, security, privacy, and business credibility, making it a reliable and professional digital presence for the foundation. Strategically, the foundation should consider publishing explicit security and incident response policies to further enhance trust and compliance. Additionally, implementing a vulnerability disclosure policy and security.txt file would align with best practices. These steps would strengthen their security posture and demonstrate commitment to transparency and user protection.

B

Bundes-Sport GmbH

austrian-sports.at

61

Bundes-Sport GmbH is a government-affiliated non-profit organization in Austria, established in 2018 to promote and manage funding for sports associations and institutions under the Bundes-Sportförderungsgesetz 2017. The organization plays a pivotal role in supporting both elite and grassroots sports through funding allocation, control, and evaluation. The website reflects a professional and consistent brand presence, targeting sports entities and stakeholders within Austria. Technically, the site is built on WordPress with modern plugins like Elementor and Revolution Slider, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the site demonstrates a mature digital presence suitable for its governmental and non-profit role.

1

100% SPORT

safesport.at

52

SAFE SPORT is a specialized non-profit initiative under the parent organization 100% SPORT, focused on creating safe and inclusive sports environments in Austria. The website offers educational services including e-learning, prevention, intervention, and support through the trusted partner vera* Sport. The platform targets sports officials, trainers, athletes, and guardians, providing resources and a network to promote sports safety. Technically, the website is built on WordPress with a modern theme and plugins supporting learning management and SEO, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response details. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche but important role in Austrian sports safety.

G

Genderkompetenz im Sport

genderkompetenz-sport.at

52

Genderkompetenz im Sport is a specialized Austrian platform dedicated to promoting gender competence within the sports sector. It operates as a non-profit educational and advocacy entity affiliated with the parent organization 100% SPORT and supported by governmental bodies such as the Austrian Federal Ministry (BMKOES). The website offers resources, guidelines, networking opportunities, and event information aimed at sports organizations, trainers, and gender equality advocates. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, with modern plugins like Slider Revolution, ensuring a professional and responsive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. No critical vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a good balance of content quality, technical implementation, security, and business credibility, positioning it as a trustworthy resource in its niche.

J

Jublasurium

jublasurium.ch

45

Jublasurium is a Swiss non-profit organization focused on organizing a national Pentecost camp for youth under the Jungwacht Blauring umbrella. The website serves as an informational and community engagement platform, targeting youth members and supporters within Switzerland. It provides event details, media resources, and social media integration, reflecting a well-established niche presence in the non-profit youth sector. Technically, the site is built on a custom CMS framework called Ongoing Base, utilizing modern web technologies such as HTML5, CSS3, and JavaScript with slick carousel for interactive content. The site is mobile-optimized and performs moderately well, with good SEO practices including structured data markup. Security-wise, the website enforces HTTPS and avoids exposing sensitive data but lacks some security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, though improvements in security headers and privacy mechanisms are recommended.

PŸUR is a German telecommunications provider specializing in internet and TV services, targeting private customers, businesses, and housing industries. The website presents a professional and modern digital presence with clear service offerings and a strong market position as indicated by awards such as 'Testsieger bei connect'. The technical infrastructure leverages modern web technologies including React and Chakra UI, with integrated analytics and tag management tools from Google and Adobe. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data limits full domain legitimacy verification but the overall business credibility remains high based on website content and branding.

G

gravierbude.ch

gravierbude.ch

51

Gravierbude.ch is a small Swiss-based business specializing in personalized engraving products and gifts, targeting both private customers and corporate clients. The company emphasizes regionality and Swiss-made quality, positioning itself as a trusted local provider of unique, customized products. The website is professionally designed, mobile-optimized, and uses modern CMS technology (WordPress with Avada theme) and SEO tools (Yoast). Contact is facilitated via a secure form with Google reCAPTCHA v3, and clear contact details are provided, enhancing customer trust and engagement. However, the site lacks explicit cookie consent mechanisms and visible security headers, which are areas for improvement.

B

Bouldern gegen Krebs

bouldern-gegen-krebs.de

53

Bouldern gegen Krebs is a German non-profit charity initiative organizing bouldering events to support cancer patients and related social projects. Founded in 2020 by Steffen Rieger, the organization leverages sport and community engagement to raise awareness and funds. The website is built on TYPO3 CMS and hosted by agenturserver, featuring a clean, professional design with good navigation and mobile optimization. Contact information and partner logos enhance credibility. However, the site lacks a cookie consent mechanism and visible security headers, indicating room for improvement in privacy and security compliance. No forms or tracking scripts were detected, suggesting minimal data collection and user tracking. Overall, the website is trustworthy and serves its niche audience effectively.

S

Stiftung Leben mit Krebs

rudern-gegen-krebs.de

51

Rudern gegen Krebs is a well-established German non-profit initiative organized by Stiftung Leben mit Krebs, focused on hosting charity rowing regattas to support cancer patients through medically supervised sports therapies. The website demonstrates a strong market position as one of Germany's largest grassroots charity sports events, with extensive participation and reputable sponsorship. Technically, the site is built on WordPress with modern plugins and themes, showing good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and aligned with its charitable mission.

C

Civic Voice

civicvoice.org.uk

69

Civic Voice is a UK-based national charity dedicated to supporting the civic movement in England. The organization focuses on making places more attractive and distinctive by promoting civic pride and supporting local civic societies through training, networking, and policy advocacy. Their website reflects a mature non-profit with a clear mission and active engagement with their community. Technically, the site is built on WordPress with modern plugins and includes a comprehensive cookie consent mechanism, indicating good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

C

Cheltenham Civic Society

cheltenham-battlefield-crosses.org

53

Cheltenham Battlefield Crosses is a small non-profit museum dedicated to preserving and exhibiting WWI battlefield crosses commemorating fallen servicemen from Cheltenham. Managed by Cheltenham Civic Society, the museum offers historical insights and conservation efforts for these fragile artifacts. The website serves as an informative platform for visitors and researchers, providing stories and background on the crosses and soldiers. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, featuring a responsive design and basic accessibility. Security posture is good with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. Overall, the site is trustworthy, well-branded, and professionally maintained, though it lacks explicit contact details and formal security policies.

F

FID Verlag GmbH

gesundheitswissen.de

58

Gesundheitswissen.de is a German health information portal operated by FID Verlag GmbH, providing expert-backed content on health, nutrition, natural medicine, and wellness. The site offers newsletters, webinars, and an online shop, targeting health-conscious German-speaking audiences. The business model focuses on content publishing and community engagement through subscriptions and educational offerings. Technically, the website is built on WordPress, hosted on AWS infrastructure, and employs modern web technologies including FriendlyCaptcha for form security. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and explicit cookie consent mechanisms. Security posture is solid with HTTPS and anti-bot measures but could be enhanced with formal security policies and headers. WHOIS data confirms domain legitimacy and consistency with the business. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Medicproof GmbH

medicproof.de

10

Medicproof GmbH operates as a specialized medical service provider for private health insurance in Germany, focusing on the creation of medical expert assessments and care evaluations. The company processes a high volume of reports daily from its Cologne headquarters, serving insured individuals, medical professionals, and caregivers. Their services include care level assessments, caregiver training programs, and expert evaluations, positioning them as a key player in the private health insurance healthcare sector. The website is built on TYPO3 CMS and uses modern frontend technologies, providing a professional and user-friendly experience with good mobile optimization and clear navigation. Security posture is solid with HTTPS, cookie consent, and secure forms, though there is room for improvement in publishing explicit security policies and incident response details. The site integrates analytics and marketing tools such as Matomo, Mouseflow, and Facebook Pixel with GDPR-compliant consent mechanisms. WHOIS data aligns well with the business claims, showing consistent domain registration and no suspicious patterns. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting Medicproof's market position as a reputable healthcare service provider.