Security Directory

I

InterPflege Westfalen GmbH

inter-pflege.de

46

InterPflege Westfalen GmbH is a small healthcare service provider specializing in ambulatory nursing and elderly care in Dortmund, Germany. Established in 2011, the company offers professional and individualized care services supported by a team of qualified nursing and social care professionals. The website reflects a local market position with clear communication channels and a focus on trust and professionalism. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery, Google Tag Manager, and Borlabs Cookie for GDPR-compliant cookie consent. Hosting is provided by Alfahosting, inferred from the nameservers. The site is mobile-optimized with moderate performance and good SEO practices. Security posture is solid with HTTPS enforced, spam protection on forms, and cookie consent mechanisms. However, there is room for improvement by implementing security headers and publishing explicit security policies or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a trustworthy and professional online presence suitable for its healthcare service business. Strategic recommendations include enhancing security headers, adding incident response information, and improving accessibility features to further strengthen compliance and user trust.

Reisebüro Lauffer Manuela Colloff is a small local travel agency based in Recklinghausen, Germany, specializing in personalized travel consultation and booking services including flights, cruises, and bus travel. The website presents a professional and user-friendly interface with clear contact information and service offerings, targeting general consumers seeking travel planning assistance. Technically, the site employs modern web technologies such as Bootstrap 4, jQuery, Swiper.js, and integrates Google Maps and Matomo analytics, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security policies and incident response contacts suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR requirements, with no signs of malicious content or vulnerabilities detected.

Stilblüte GmbH is a specialized garden and landscaping company based in Blankenhof, Germany, offering a broad range of services including garden design, lawn care, fence construction, path building, and woodcutting. The company targets private, commercial, and industrial clients in the local region and positions itself as an experienced and reliable provider with over 20 years of experience and more than 1000 completed projects. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Bootstrap framework for responsive design. Hosting is provided by netcup, a reputable German hosting provider. The site performs moderately well with good mobile optimization but lacks advanced accessibility features and SEO enhancements beyond basic meta tags. From a security perspective, the site uses HTTPS (implied by URLs and JSON-LD data), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some privacy awareness, but no privacy policy or terms of service pages were found. No incident response or vulnerability disclosure information is provided, and no analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The domain WHOIS data is minimal but consistent with a legitimate hosting provider. The absence of detailed registrant information slightly reduces trust but does not indicate suspicious activity. Strategic recommendations include publishing a privacy policy, adding security headers, and providing incident response contacts to enhance security posture and compliance.

G

Glas- & Solarreinigung Marcel Lange

pv-reinigung-lange.de

53

Glas- & Solarreinigung Marcel Lange is a small certified specialist company based in Mecklenburg Vorpommern, Germany, offering professional cleaning services for solar and photovoltaic installations as well as glass cleaning. The company positions itself as the first certified solar and photovoltaic cleaner in the region, targeting solar panel owners and businesses requiring maintenance to improve performance and longevity of their installations. The website is built on the IONOS MyWebsite platform, featuring a moderate technical infrastructure with basic mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of cookie consent mechanisms and detailed privacy policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

The website www.glaser-metallbau.de currently serves as a redirect or domain parking page managed by Parklogic, with no accessible business content or metadata. There is no evidence of company information, contact details, or service descriptions. The technical infrastructure is minimal, relying on JavaScript redirects and advertising scripts typical of parked domains. Security posture cannot be properly assessed due to lack of content and security headers. The domain WHOIS data indicates use of Parklogic name servers, suggesting the domain is not actively used by the business it purports to represent. Overall, the site lacks transparency, business credibility, and compliance indicators, resulting in a low trust and security score.

H

Hauskrankenpflege "humaniter" Petra Sielaff GmbH

humaniter-kyritz.de

36

Hauskrankenpflege "humaniter" Petra Sielaff GmbH is a small, local healthcare service provider based in Kyritz, Germany, specializing in home nursing and care services since 1994. The company offers a range of services including in-home care, household management, medical nursing, and supportive care, targeting residents in the Ostprignitz-Ruppin region. The website reflects a consistent and professional brand image with clear contact information and service descriptions, positioning the company as a trusted local care provider. Technically, the website employs a traditional tech stack including Bootstrap, jQuery, and various UI plugins such as Slider Revolution and Owl Carousel. The site is moderately optimized for performance and mobile devices but lacks advanced CMS or modern frameworks. Hosting is managed via GoDaddy's domain control services. SEO and accessibility are basic but functional. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and no incident response or security policies are published. There is no cookie consent mechanism or advanced privacy compliance features, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional and trustworthy for its business purpose but requires significant improvements in security posture and privacy compliance to meet modern standards. Strategic enhancements in SSL deployment, security headers, and privacy policies are recommended to reduce risk and improve user trust.

T

THEATERuntendrunter

theateruntendrunter.de

53

THEATERuntendrunter is a small local theater organization based in Germany, providing theatrical performances and cultural events primarily targeted at the local community and theater enthusiasts. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic technical infrastructure. The site uses HTTPS and includes some modern JavaScript polyfills and error monitoring via Sentry, but lacks advanced security headers and privacy compliance documentation. Contact information and formal policies such as privacy or cookie policies are not present, which limits trust and compliance posture. Overall, the site is functional but basic in design and content, suitable for a small cultural entity.

E

Eggeling Bedachungs- und Sanierungs GmbH

dachdecker-eggeling.de

58

Eggeling Bedachungs- und Sanierungs GmbH is a specialized roofing and construction service provider based in Sülzetal, Germany, serving the Magdeburg and Landkreis Börde regions. Established in 1990, the company offers a range of services including roof installation, renovation, roof plumbing, wood construction, chimney repairs, scaffolding, and crane rental. The website reflects a professional and consistent brand image targeting both private and industrial customers. The business positions itself as a leading local expert with a strong focus on quality and customer service. Technically, the website is built using modern web standards with HTML5, CSS3, and JavaScript, hosted on AWS infrastructure. It employs Google Analytics for visitor insights and uses a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Embedded YouTube videos are present but disabled by default due to cookie settings. From a security perspective, the site enforces HTTPS and uses cookie consent to manage privacy. However, it lacks explicit security headers such as Content-Security-Policy and does not publish a dedicated security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no suspicious patterns. Overall, the website demonstrates a solid digital presence with good privacy compliance and a trustworthy business profile. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding incident response contacts to further strengthen trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

mr.sol Alternative Energie und Heizungstechnik is a small, specialized service provider based in Germany focusing on renewable energy heating solutions including biomass heating, solar thermal systems, and sanitary installations. Founded in 1994, the company has a strong local presence in the Leipzig and Markranstädt region, offering expert services in modern heating technologies such as pellet and wood heating systems. The website reflects a professional and consistent brand image with clear contact information and certifications that enhance trust. Technically, the website is built on WordPress using modern plugins and themes such as WPBakery Page Builder and Yoast SEO, indicating a moderate level of digital maturity. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and performance optimization. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and a vulnerability disclosure policy. The contact forms do not have active CAPTCHA protection, which could expose the site to spam. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service. No social media or analytics tracking is evident, which limits user tracking but also reduces marketing insights. Overall, the website is trustworthy and professional with a good business focus but could improve its security posture and privacy compliance to better protect users and enhance credibility.

H

Hertel GmbH Bad Schandau

hertel-gmbh-badschandau.de

49

Hertel GmbH Bad Schandau operates a regional news and analysis platform focused on Bad Schandau and its surroundings, delivering topical content across politics, science, technology, sports, and culture. Founded in 2022, the company positions itself as a local media provider offering comprehensive insights to a general audience. The website employs modern web technologies including Next.js and React, hosted with Cloudflare DNS services, ensuring a contemporary digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content categories. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with cookie and privacy policies present but no active consent mechanism. Overall, the website is safe, professional, and trustworthy, though improvements in security transparency and contact information visibility are recommended.

A

apotheken.de

apotheken.de

71

apotheken.de is a well-established German healthcare and pharmacy information portal offering extensive content on diseases, symptoms, therapies, medications, and pharmacy services including emergency pharmacy locators and medication pre-orders. The website targets the general German-speaking public seeking reliable health information and pharmacy-related services. The business model appears to be based on providing valuable health content and services, likely monetized through advertising and partnerships. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, hosted on Amazon AWS infrastructure. The site is responsive and optimized for mobile devices with good SEO and accessibility features. Security-wise, the website enforces HTTPS, uses security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or suspicious patterns were detected. Overall, apotheken.de demonstrates a strong security posture, good privacy compliance, and high content quality, making it a trustworthy source for health information. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts.

The website motorradautomehr.de serves as a professional landing page for the sale of the domain name motorradautomehr.de. It targets businesses and individuals interested in acquiring this domain, offering direct inquiry options via WhatsApp and a web form, supported by an interactive chatbot. The site is designed with a clean, modern aesthetic, optimized for mobile devices, and provides basic privacy and cookie consent mechanisms. However, it lacks detailed company information, contact details, and terms of service, which limits its business credibility and transparency. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It employs modern browser APIs such as Fetch and Beacon for asynchronous communication and tracking. The performance is moderate with good mobile optimization, but no advanced frameworks or CMS are detected. Accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS (assumed from modern standards though not explicitly confirmed), but no security headers were detected in the provided data. There is no exposed sensitive data or vulnerable libraries identified. The cookie consent mechanism is implemented inline with GDPR requirements, but no explicit security or incident response policies are published. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, the website presents a professional front for domain sales but would benefit from enhanced transparency, improved security headers, and more comprehensive legal and contact information to increase trust and compliance. The AI score reflects moderate content quality and technical implementation but is penalized for missing business credibility and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

TECNI-MOTOSIERRAS

tecnimotosierras.com

59

TECNI-MOTOSIERRAS is a small retail and distribution business specializing as an authorized dealer of STIHL machinery and accessories in Chía, Colombia. The company offers a range of products including chainsaws, brush cutters, hedge trimmers, blowers, and original spare parts, targeting consumers and businesses requiring quality STIHL equipment. The website reflects a professional presence with clear branding and contact information, supporting customer engagement through multiple channels including social media and WhatsApp. Technically, the website is built on the Multiscreensite platform, utilizing modern web technologies such as jQuery, service workers for PWA capabilities, and analytics tools like Snowplow and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and registers a service worker, indicating a baseline of security best practices. Nonetheless, the absence of security headers and lack of explicit privacy and cookie policies highlight areas for improvement in compliance and security posture. The missing WHOIS data for the domain raises concerns about domain legitimacy and transparency, warranting further verification. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and domain registration transparency to improve trustworthiness and regulatory adherence.

The website superguan.net is currently an empty placeholder with no visible content, metadata, or business information. The domain is registered through Alibaba Cloud Computing (Beijing) Co., Ltd. since 2017, indicating a stable registration but no active website presence. There are no privacy policies, contact details, or security measures evident on the site. Technically, the site lacks any detectable technologies, scripts, or frameworks, and no HTTPS or security headers are confirmed. This results in a very low security posture and poor digital maturity. Overall, the site presents a high risk due to lack of content, security, and compliance features, making it unsuitable for trust or business engagement at this time.

A

ac米兰官方网站

shankechuanmei.com

43

The website www.shankechuanmei.com represents a medium-sized manufacturing company based in Jiangsu Province, China, specializing in high voltage leak detection machines primarily for the pharmaceutical and industrial sectors. The company claims a history dating back to 2004 and offers products such as high-frequency high-voltage leak detection equipment and online detection instruments. The website content is primarily in Chinese and targets industrial clients requiring specialized testing equipment. Technically, the site uses common JavaScript libraries like jQuery and Swiper.js and integrates Baidu analytics for tracking. However, the site lacks modern security practices such as HTTPS enforcement and security headers, and no privacy or cookie policies are present. Contact information including phone numbers, email, and physical address is clearly provided, supporting business credibility. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration consistency.

The website idealyun.com is currently inaccessible beyond a WAF security block page powered by SafeLine WAF, indicating the domain does not match the server. The domain is registered with Alibaba Cloud Computing (Beijing) Co., Ltd. since 2017 and appears to be associated with the SafeLine WAF security product by 长亭 (Chaitin). Due to the WAF block, no actual business content, contact information, or policies are accessible, limiting the ability to fully assess the business or technical maturity. The technical infrastructure shows basic modern web technologies but lacks SEO, accessibility, and privacy compliance features. Security posture is moderate given the use of a WAF but lacks visible security headers or policies. Overall, the site is low trust and low content quality due to the block, with a legitimacy score of 75 based on WHOIS data and domain age.

The website '亚洲香蕉视频平台' operates as a free Asian movie streaming platform offering a variety of video content including action, comedy, romance, sci-fi, and horror genres. It targets a general adult audience seeking free video entertainment without advertisements. The platform supports both mobile and desktop viewing and includes user registration and search functionalities. The business model appears to rely on free content delivery possibly monetized through advertising. Technically, the site uses modern web technologies including JavaScript modules, likely built with Vite and a React-like framework. It leverages Cloudflare DNS and Netlify for hosting third-party scripts. SEO is well implemented with comprehensive meta tags and structured data. Performance and mobile optimization are moderate to good, though accessibility features are basic. From a security perspective, the site enforces HTTPS but lacks DNSSEC and security headers. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided. WHOIS data is suspicious with a future domain creation date and registrar-only registrant info, reducing trustworthiness. The site contains adult content without age verification, posing content safety concerns. Overall, the website presents moderate technical quality but significant gaps in privacy, security, and business credibility. Strategic improvements in transparency, security policies, and domain legitimacy are recommended to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.dushiky.com is currently inactive or unregistered as indicated by the WHOIS data and the website returning a 404 Not Found error page. There is no accessible content, business information, or contact details available on the site. The lack of HTTPS and security headers further indicates a minimal or non-existent technical infrastructure. Due to the absence of any business presence or digital assets, the security posture is non-assessable and effectively non-existent. Overall, the domain appears abandoned or unclaimed, representing a high risk for trust and legitimacy. Strategic recommendations include registering the domain properly, deploying a secure website with HTTPS, and establishing clear business and privacy policies to build credibility.

The analyzed URL and domain correspond to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a local error display within the browser rather than an actual website. Consequently, no real business or website content is accessible. The page includes embedded Chromium offline game scripts and styles but lacks any metadata, privacy policies, contact information, or business details. This indicates that the content is not a live website but a browser-generated error page. The technical infrastructure is minimal and specific to Chromium's offline error handling. Security posture cannot be fully assessed due to the absence of a real website context. Overall, this is not a legitimate website but a browser internal page, and no business or compliance information is available.

深

深圳市云网万店电子商务有限公司

suning.com

58

Suning.com is a leading Chinese e-commerce platform specializing in a wide range of consumer goods including electronics, home appliances, digital products, clothing, and more. The website operates as a subdomain of the larger Suning ecosystem, which is a well-established retail and technology conglomerate in China. The platform offers comprehensive services such as local delivery, cash on delivery, customer support, and membership programs, positioning itself as a trusted online shopping destination for Chinese consumers. Technically, the website employs standard web technologies including jQuery and JavaScript, with a moderate performance profile and good mobile optimization. The site is accessible and well-structured, with clear navigation and SEO-friendly metadata. However, there is room for improvement in security headers and privacy compliance, particularly regarding cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. While no critical vulnerabilities were detected, the absence of explicit security headers and limited visible incident response information suggest opportunities to enhance the security posture. The WHOIS data for the subdomain is not available, which is typical for subdomains, but the overall trustworthiness is high given the brand and ecosystem context. Overall, Suning's online shopping platform demonstrates strong business credibility and technical maturity, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would further solidify its market position and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The analyzed domain currently serves a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business information, contact details, or policies are present on the page. The page content is primarily JavaScript and CSS related to the Chrome offline dinosaur game, which is a default error page shown by the browser when the real site cannot be loaded. Due to this, the website lacks any meaningful business or security information, and no trust indicators are available. The domain WHOIS data is privacy protected, providing no registrant details, which further reduces trustworthiness. Overall, the site is not operational or accessible for analysis and should be considered non-functional from a business or security perspective.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

顺企网 is a large-scale Chinese B2B e-commerce platform providing a comprehensive directory of companies, product supply listings, procurement opportunities, and enterprise news. It serves primarily Chinese enterprises across manufacturing, transportation, energy, and retail sectors. The platform offers free services for product and company information publishing and includes promotional services for businesses. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Baidu Analytics for user tracking. The site is mobile-optimized and features a clear navigation structure with extensive categorized listings. Security-wise, the site enforces HTTPS and includes compliance announcements related to chemical industry regulations, but lacks visible security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS registrant data reduces transparency but the presence of official licenses and compliance notices supports legitimacy. Overall, the site is functional, professional, and serves a broad B2B audience in China.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

济南沧浪洗涤有限公司 is a medium-sized laundry and textile cleaning company based in China, founded in 2016. The company offers comprehensive laundry services including washing, drying, ironing, and folding, supported by advanced equipment and a professional workforce. Their market position is regional with established partnerships, particularly with major hospitals, indicating a trusted service provider in the manufacturing and service sector. The website reflects a business-focused approach with clear contact information and service descriptions, targeting a general audience seeking laundry solutions. Technically, the website employs a modern but basic tech stack including Bootstrap, jQuery, and Swiper.js, hosted on Alibaba Cloud. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. SEO optimization is minimal but present through meta tags. From a security perspective, the site lacks critical security headers and cookie consent mechanisms, which lowers its security posture. The domain is registered with Alibaba Cloud and has a consistent registration history aligning with the business age, indicating legitimacy. No incident response or vulnerability disclosure information is available, and privacy compliance is minimal, with no GDPR indicators. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance improvements to strengthen trust and regulatory adherence.

长

长园电力技术有限公司

cygdl.com

54

长园电力技术有限公司是一家专注于电力电缆附件和智能电网设备研发、制造及销售的国家高新技术企业，隶属于上市公司长园科技集团股份有限公司。公司提供1kV-500kV交流/直流电力电缆附件、智能电网设备、恢复电缆本体连接技术、电力系统状态监测及智能运维等产品和解决方案，服务于电力行业及智能电网领域。其市场地位稳固，拥有多项国家及省级认证资质，并参与多个大型工程项目。

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

А

Амбър

pogrebenie.net

51

Амбър е утвърдена траурна агенция в София с над 32 години опит, предлагаща широк спектър от траурни услуги и стоки, включително погребения, кремации, траурен комплекс, кетъринг и поддръжка на гробни места. Компанията разполага с няколко офиса и собствен цветарски магазин, което подсилва тяхната пазарна позиция и доверие сред клиентите. Техническата инфраструктура е базирана на Joomla CMS с използване на популярни библиотеки като jQuery и интеграция на Google Tag Manager и Google Ads за маркетинг и анализи. Сайтът е мобилно оптимизиран и предлага добра навигация и съдържание на български език. От гледна точка на сигурността, сайтът използва HTTPS и има имплементирана GDPR-съвместима политика за бисквитки с механизъм за съгласие. Въпреки това липсват някои важни HTTP заглавки за сигурност и DNSSEC не е активиран, което е препоръчително да се подобри. Липсват публично достъпни политики за сигурност и инцидентен отговор, което е препоръчително за повишаване на доверието и съответствието. Общата оценка на сайта е добра с високо ниво на бизнес достоверност и приемливо техническо изпълнение. Препоръчва се подобряване на някои аспекти на сигурността и публикуване на допълнителни политики за пълна съвместимост и прозрачност.

I

immitec GmbH

immitec.de

44

immitec GmbH is a small German company specializing in sustainable energy and capital concepts, focusing on the development, financing, and operation of solar and energy storage projects. With over 20 years of experience, the company positions itself as a trusted partner combining financing expertise with tangible asset projects. The website reflects a professional and consistent brand image targeting investors and clients interested in renewable energy investments. Technically, the site uses modern frameworks such as Bootstrap and AOS for animations, is mobile-optimized, and hosts fonts locally to ensure GDPR compliance. Security-wise, the site uses HTTPS (implied by og:url), but lacks explicit security headers and cookie consent mechanisms. No forms or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. Overall, the site is well-designed, trustworthy, and secure with minor improvements recommended in security headers and privacy notices.

The website www.cclean-bg.com represents a Bulgarian professional cleaning company named КУУЛ КЛИЙН ЕООД, offering a range of cleaning services including office, home, industrial, facade cleaning, and pest control. The business targets local Bulgarian customers with a focus on professional cleaning solutions. The website content is primarily in Bulgarian and provides phone contact numbers but lacks email or physical address details. The site uses Google Analytics and Tag Manager for tracking but does not display privacy or cookie policies, which impacts compliance and user trust. Technically, the website employs standard JavaScript libraries and Google services but lacks modern CMS or frameworks. The site shows basic mobile optimization and SEO practices but no evident security headers or HTTPS confirmation in the provided data. The WHOIS lookup failed to return domain registration details, raising concerns about domain legitimacy and transparency. From a security perspective, the absence of HTTPS confirmation, security headers, and privacy policies indicates a low security posture. No forms or sensitive data collection points were detected on the main page, reducing immediate risk, but the lack of compliance documentation and domain registration transparency are notable weaknesses. Overall, the site is functional but requires significant improvements in security, privacy, and transparency to enhance trustworthiness and compliance.

ДЕЙМОС ЕООД is a Bulgarian media and telecommunications company offering television and internet services alongside media production. The website is primarily in Bulgarian and targets local consumers interested in analog and digital TV, internet packages, and advertising services. The business operates a service provider model with a local/regional market focus. Technically, the website is built on Joomla CMS with several outdated technologies such as old jQuery versions and deprecated media players, which may pose security and compatibility risks. Security posture is moderate but lacks modern security headers and updated libraries. Privacy compliance is weak due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trust. Overall, the website is functional but requires modernization and improved compliance to enhance security and user trust.

M

Meskay & Femtee (Pvt.) Ltd.

meskayfemtee.net

40

Meskay & Femtee (Pvt.) Ltd. is a Pakistani company specializing in the export of premium quality rice and other grains such as wheat and pulses. Established in 1993, the company emphasizes halal, organic, and food safety standards to serve both domestic and international markets. Their website reflects a professional business presence with clear product offerings, company information, and customer testimonials. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, and is mobile optimized with good navigation and content quality. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data present concerns regarding compliance and domain legitimacy. Overall, the site is functional and business-focused but would benefit from enhanced security and privacy measures.

Р

Рип-Импульс

comimpuls.com

45

Рип-Импульс is a Russian manufacturer specializing in the development, serial production, sales, and after-sales service of radio-electronic measuring instruments primarily serving the defense industry and other industrial sectors. The company has a well-established online presence with a domain registered since 2004, indicating a mature business. Their website showcases product catalogs and emphasizes technical consultation and service support. Technically, the website is built on WordPress using WooCommerce and Elementor, providing a modern and responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent banner is present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

O

Oleimed, Actividades de Saúde, Lda

sapo.pt

56

Oleimed, Actividades de Saúde, Lda is a small healthcare service provider based in Portugal offering a range of medical and therapeutic services including clinical analyses, audiometric exams, physiotherapy, acupuncture, and various medical consultations. The website serves primarily as an informational blog hosted on the SAPO Blogs platform, targeting local patients and community members seeking healthcare services. The business appears to be locally focused with no indication of a larger corporate structure or subsidiaries. Technically, the website is built on a basic blog platform using HTML, CSS, JavaScript, and React.js components provided by SAPO Blogs. It employs Google Analytics and Google Tag Manager for user tracking and analytics. The site is served over HTTPS with good SSL configuration but lacks advanced security headers and comprehensive privacy or security policies. Mobile optimization and accessibility are basic but functional. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and formal security or incident response policies indicates room for improvement. Privacy compliance is limited due to the lack of a dedicated privacy policy and terms of service, although a cookie consent banner referencing SAPO's cookie policy is present. Overall, the website is safe and suitable for general audiences, with content focused on healthcare services. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include implementing privacy and security policies, enhancing security headers, and improving privacy compliance to strengthen trust and regulatory adherence.

J

Just all Design

just-all-design.pt

30

Just all Design is a creative and production agency based in Portugal, specializing in fashion brand development, collection design, ecological production, and local manufacturing. Established in 2008, the company targets fashion brands and designers seeking sustainable and locally produced fashion solutions. The website reflects a professional and consistent brand image with active social media engagement on Facebook, Instagram, and LinkedIn. Technically, the site is built on WordPress using the Divi theme and common plugins such as Contact Form 7 and Jetpack, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or cookie policies. The domain is currently expired for over 5 months, posing a risk to business continuity and trust. Overall, the website is functional and professional but requires urgent domain renewal and enhanced security and privacy compliance measures.

C

Clínica Veterinária Absolut Pets Lda.

absolutpets.com

66

Clínica Veterinária Absolut Pets Lda. operates a veterinary clinic located in Odivelas, Portugal, offering a wide range of veterinary services including general and specialty consultations, diagnostic exams, grooming, pet shop products, and teleconsultations. The clinic targets pet owners in the local region and positions itself as a professional and trusted provider of animal healthcare services. The website is well-structured, professionally designed, and provides clear contact information including phone and WhatsApp links. The business model focuses on direct veterinary care and pet wellness products, serving a small local market segment. Technically, the website employs modern analytics tools such as Google Analytics and PostHog, uses Google Tag Manager, and implements cookie consent mechanisms compliant with GDPR. The site is hosted on a CDN platform and uses service workers to enhance user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, but the website content and business information appear consistent and professional. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in transparency and domain registration clarity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

ANAPO is a Portuguese non-profit association dedicated to representing and defending the egg production sector in Portugal. The website serves as an informational and promotional platform targeting egg producers, industry stakeholders, and consumers interested in egg production, legislation, and benefits. The organization holds a key position in the national market as a sector representative, providing guidance and resources related to egg production and legislation. Technically, the website is built using the Laravel framework and incorporates modern web technologies such as Google reCAPTCHA for bot protection, FontAwesome for icons, and simpleParallax.js for visual effects. The site is mobile-optimized with good SEO practices and moderate performance. It uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF token usage, and a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security policies and headers to improve its security posture further.

The website vmfdigital.com currently serves a 403 Forbidden error page, indicating that access to the content is blocked or restricted. Due to this, no business descriptive content, contact information, or policies are accessible for analysis. The domain is registered since 2008 with a reputable registrar but lacks DNSSEC and advanced security configurations. The absence of privacy, cookie, and terms of service policies, as well as contact details, limits the ability to assess compliance and business credibility. The technical infrastructure appears minimal with no detectable scripts or analytics. Overall, the website is inaccessible for meaningful content or security evaluation, resulting in a low trust and quality score.