Security Directory

A

Addleshaw Goddard LLP

addleshawgoddard.com

69

Addleshaw Goddard LLP is a well-established international law firm serving many of the world's best-known and remarkable clients. The firm provides imaginative legal solutions to pivotal business problems, positioning itself as a trusted advisor in the professional services sector. The website reflects a professional and consistent brand image, targeting corporate clients and businesses seeking legal advisory services. Technically, the website employs modern technologies including Bootstrap, jQuery, Google Tag Manager, and Cookiebot for cookie consent management. It integrates multiple third-party analytics and marketing tools such as Facebook Pixel, Hubspot, and CrazyEgg, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and uses cookies to enhance security such as CSRF protection tokens. However, explicit security headers are not detected, and no visible security or incident response policies are published on the site. The WHOIS data for the domain is missing or unavailable, which is unusual for a professional law firm and may warrant further verification. Overall, the website is professional, secure, and compliant with cookie consent regulations but could improve transparency by publishing privacy policies, contact information, and security disclosures.

E

ECOFIS GmbH

ecofis.de

62

ECOFIS GmbH is a specialized IT service provider focused on delivering IT network, hosting, and security solutions primarily for the Creditreform Unternehmensgruppe. The company leverages its affiliation with the Creditreform group to provide robust IT infrastructure and services, including data center operations and web hosting for group entities. The website reflects a professional corporate presence with clear service offerings and contact information. Technically, the site is built on TYPO3 CMS with modern frontend components and includes a comprehensive cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and cookie management, though there is room for improvement in security headers and incident response transparency. Overall, the domain and website present a trustworthy and credible business entity with strong group backing.

Tief- und Rohrleitungsbau Wilhelm Wähler GmbH & Co. KG is a well-established infrastructure and civil engineering company based in Germany, with a history dating back to 1919. It operates as a subsidiary of the Seier Gruppe and is recognized as a leading player in northern Germany's infrastructure construction sector. The company offers a broad range of services including district heating, pipeline construction, geotechnical engineering, and telecommunications infrastructure. The website reflects a professional and consistent brand image, emphasizing employee development and corporate values. Technically, the site is built on WordPress with modern frameworks like UIkit and integrates SEO and cookie consent tools, indicating a mature digital presence. Security posture is good with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

B

BHK Tief- und Rohrbau GmbH & Co. KG

bhk-rohrbau.de

49

BHK Tief- und Rohrbau GmbH & Co. KG is a well-established German company specializing in pipeline construction, civil engineering, and cable laying services. Founded in 1990 and operating under the parent company SEIER Gruppe, BHK serves regional clients with a focus on quality, reliability, and sustainable infrastructure development. The company offers a broad range of services including house connections, vacuum excavation, horizontal drilling, and network planning, positioning itself as a trusted partner in the energy and transportation sectors. Technically, the website is built on WordPress with modern frameworks such as UIkit and enhanced by SEO tools like Yoast. It employs Google Tag Manager and Cookiebot for analytics and privacy compliance, respectively. The site is mobile-optimized, accessible, and demonstrates good performance and SEO practices. Multiple office locations are clearly presented with comprehensive contact information, supporting strong business credibility. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Overall, the website reflects a professional, trustworthy, and compliant digital presence suitable for its industry and audience. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

E

event IT ApS

event.it

57

event IT ApS is a Danish technology company specializing in providing a flexible and easy-to-use self-service platform for ticket sales and event registrations. Founded in 2011, the company targets event organizers and attendees primarily in Denmark, offering solutions for managing tickets and registrations for various events such as parties, conferences, concerts, and festivals. The website reflects a professional and consistent brand image with clear contact information and a focus on user-friendly event management services. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Cookiebot for cookie consent management, alongside Google Tag Manager for analytics and marketing purposes. The site is secured with HTTPS and implements GDPR-compliant cookie consent mechanisms, demonstrating a commitment to privacy and regulatory compliance. However, the domain's WHOIS data indicates the domain expired recently, which could pose a risk if not renewed promptly. Security posture is adequate but could be improved by adding security headers and publishing formal security policies. Overall, event IT presents a trustworthy and professional online presence with room for enhancements in security and compliance documentation.

B

BTC AG

btc-ag.ch

74

BTC AG is a Swiss-based company specializing in enterprise IT and energy solutions, offering services such as Enterprise Content Management, SAP solutions, business process management, and mobile and energy-related IT services. The company targets business clients and enterprises within Switzerland, positioning itself as an established player in the IT and energy sectors. The website reflects a professional and consistent brand image with a clear focus on business services. Technically, the site uses modern JavaScript libraries including jQuery, Owl Carousel, and AOS for animations, and integrates Cookiebot for cookie consent management. The site is served over HTTPS, indicating a secure connection, and includes Google Tag Manager for analytics and tracking. However, the site lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security headers and incident response information are not evident, suggesting room for improvement in security posture. Overall, the site is functional, professional, and secure in transmission but could enhance compliance and transparency aspects.

B

BTC Software Systems Sp. z o.o.

btc-ag.pl

65

BTC Software Systems Sp. z o.o. is a Polish IT company specializing in software solutions and consulting services primarily for the energy sector and digital transformation projects. The company offers a range of products including automated VAT declaration tools for SAP, data measurement platforms, virtual power plant solutions, and IT training. Their market position is that of a specialized medium-sized player with international subsidiaries and partnerships. Technically, the website employs modern JavaScript libraries such as jQuery, Owl Carousel, and AOS, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the website is trustworthy and professional, with clear contact information and social media presence. WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain trust assessment. Strategic recommendations include enhancing security headers, publishing security policies, and improving SEO metadata.

R

RAKETENSTART

raketenstart.de

67

RAKETENSTART is a German-based digital platform specializing in simplifying company formation and legal services for startups, agencies, and SMEs. The platform offers a comprehensive suite of services including digital creation of company contracts, notarization via video call or in-person, business bank account setup, and ongoing legal consultation through vetted partner lawyers. Positioned as an all-in-one solution, RAKETENSTART targets businesses seeking efficient and paperless company formation with transparent pricing and expert support. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Google Analytics, Facebook Pixel, and Cookiebot for consent management. Hosting is likely via Webflow's infrastructure with Cloudflare CDN and security features such as Turnstile captcha for bot mitigation. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS with strong SSL configuration and integrates cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, the use of Cloudflare and Cookiebot indicates a proactive security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks published incident response policies and security.txt files. Overall, RAKETENSTART presents a trustworthy and professional digital presence with strong privacy compliance and a clear business focus. The absence of direct contact information and detailed security policies suggests areas for improvement to enhance transparency and user trust.

T

Trask

wearetrask.com

70

Trask is an IT consulting and recruitment company targeting IT professionals seeking career advancement opportunities. The website presents a professional image with clear job listings, industry focus, and a strong emphasis on privacy compliance through Cookiebot. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Analytics, Google Tag Manager, and reCAPTCHA for bot protection. The site is well-optimized for mobile and SEO, providing a good user experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and published security policies are absent. The WHOIS data is unavailable, which slightly reduces trust but the website content and external links indicate a legitimate business. Overall, the site is secure, privacy-conscious, and professionally maintained, suitable for its business purpose.

T

Trask solutions, a.s.

thetrask.com

75

Trask solutions, a.s. is a large Czech Republic-based IT services company specializing in digital transformation, cybersecurity, data management, and application integration. The company serves key sectors including financial services, insurance, automotive, and energy, leveraging a team of over 1000 IT experts to deliver innovative technology solutions that drive business growth and operational efficiency. Their market position is supported by partnerships with major clients and a strong digital presence. Technically, the website is built on the Webflow CMS platform and utilizes modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for analytics and consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers. Privacy compliance is robust with a comprehensive GDPR policy and cookie consent mechanisms. However, the absence of a published security policy or incident response contact details represents an area for improvement. The lack of WHOIS registration data raises some concerns about domain registration transparency but does not detract from the professional presentation and trustworthiness of the site. Overall, the risk profile is moderate with strong technical and privacy controls but some gaps in transparency and incident response readiness. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

B

Bit2Me

bit2me.com

83

Bit2Me is a well-established cryptocurrency exchange and financial services platform based in Spain, founded in 2014. It offers a comprehensive suite of services including cryptocurrency buying and selling, wallet management, trading, and educational resources. The platform targets retail and institutional clients seeking secure and efficient crypto transactions. The website demonstrates a mature digital presence with multi-language support and integration of modern web technologies and third-party services such as Stripe for payments and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, domain transfer lock, and use of reputable analytics and error tracking tools. However, DNSSEC is not enabled, which is a recommended enhancement. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, Bit2Me presents a trustworthy and professional online presence with a high level of business credibility and technical maturity.

C

Coroflex by Coroplast Fritz Mueller GmbH & Co. KG

coroflex-cable.com

63

Coroflex by Coroplast Fritz Mueller GmbH & Co. KG is a medium-sized manufacturing company specializing in the development and production of wire and cable solutions primarily for the automotive, industrial, and mechanical engineering sectors. As a subsidiary of the Coroplast Group, it benefits from established market positioning and brand recognition within its industry. The website reflects a professional business-to-business model targeting industrial clients and partners. Technically, the website is built on the TYPO3 CMS platform, utilizing modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant technical debt evident from the provided data. From a security perspective, the website enforces HTTPS and employs a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of security headers and lack of published security policies or incident response contacts indicate areas for improvement. The WHOIS data is notably missing, which raises concerns about domain registration legitimacy and reduces overall trustworthiness. Overall, the website presents a professional and trustworthy front for Coroflex's business operations but would benefit from enhanced transparency in privacy and security policies, improved technical security controls, and verification of domain registration details to strengthen its risk posture and compliance standing.

C

Coroplast Fritz Mueller GmbH & Co. KG

coroplast-group.com

67

Coroplast Group is a globally active family-owned manufacturing company specializing in adhesive tapes, cables, wires, and wire harnesses through its three subsidiary brands. The company targets industrial and commercial clients worldwide, positioning itself as a strong alliance in the manufacturing sector with a consistent and professional brand presence. The website is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The technical infrastructure demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The absence of WHOIS data for the domain is a notable gap, reducing trustworthiness from a domain registration perspective. Overall, the website presents a professional and trustworthy front for a large manufacturing business with room for improvement in security transparency and domain registration clarity.

B

Blue Yonder

flexis.com

75

Blue Yonder is a mature enterprise specializing in AI-powered end-to-end supply chain management solutions. The company offers a comprehensive platform that supports planning, execution, commerce, and returns, targeting businesses seeking to optimize their supply chains with advanced technology. Their market position is strong, supported by a broad portfolio of services and a global presence. Technically, the website leverages modern frameworks such as Next.js and React, hosted and secured via Cloudflare, with good performance and mobile optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable business platform.

H

Diabetes Herbsttagung 2025

herbsttagung-ddg.de

49

The website herbsttagung-ddg.de serves as the official platform for the Diabetes Herbsttagung 2025, an event likely organized by the Deutsche Diabetes Gesellschaft (DDG) targeting healthcare professionals and researchers interested in diabetes. The site provides event-related information and is built on a WordPress CMS with modern design elements and responsive features. The technical infrastructure includes standard WordPress plugins and Cookiebot for cookie consent management, ensuring compliance with basic privacy requirements. Security posture is adequate with HTTPS enforced and denial of ad personalization by default, though the absence of explicit privacy policies and contact information limits full compliance and trust. Overall, the site is functional and professionally presented but would benefit from enhanced transparency and security documentation.

T

The Chocolate on the Pillow Group GmbH

cotp.group

52

The Chocolate on the Pillow Group GmbH operates a hospitality business focused on managing hotels in prime locations within the DACH region. Their website, cotp.group, presents a professional and well-structured digital presence built on WordPress with modern performance and SEO optimizations. The company is relatively new, founded in 2023, and positions itself as a provider of high-quality hospitality concepts. Technically, the site uses recognized tools such as WP Rocket for caching, Cookiebot for cookie consent management, and HubSpot for marketing and analytics integration. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly visible. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service page. Contact information is not explicitly provided on the homepage content analyzed. Overall, the website is safe, professional, and trustworthy, with room for improvement in transparency and security best practices.

Finance in Motion is a medium-sized company established in 2009, specializing in sustainable finance and impact investing. The company offers investment funds and advisory services targeting institutional investors and sustainability-focused stakeholders. The website reflects a professional and consistent brand image with a focus on finance and energy sectors. Technically, the site is built on modern frameworks such as Next.js and React, incorporating privacy-conscious analytics (Matomo) and cookie consent management (Cookiebot). Security posture is good with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and detailed cookie consent mechanism. However, contact information and explicit security policies are not readily found, which could be enhanced to improve trust and transparency.

G

GHOTEL & nestor

ghotel.de

56

GHOTEL & nestor is a medium-sized hospitality business operating multiple hotels in Germany, offering accommodation, event hosting, and dining services. The company positions itself as a reliable and guest-focused hotel chain with a strong regional presence and a parent brand association with The Chocolate on the Pillow Group. The website is professionally designed, multilingual, and optimized for user experience and SEO. Technically, it leverages WordPress with WooCommerce, integrates Google Maps, and uses modern analytics and cookie consent tools. Security posture is good with HTTPS and cookie management, though lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and compliant with GDPR, providing a solid digital presence for the hospitality business.

I

IXON B.V.

ixon.cloud

65

IXON B.V. is a Netherlands-based technology company specializing in cloud-based and edge solutions for machine builders and factories. Their platform enables secure remote access, real-time machine insights, and enhanced service delivery, trusted by over 2,500 customers globally. The company positions itself as a future-proof partner with a strong focus on security compliance including ISO, IEC, and NIS2 standards. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools integrated, providing a responsive and professional user experience. Security posture is strong with HTTPS enforced and cookie consent implemented, though some improvements like DNSSEC and explicit incident response contacts could enhance trust further. Overall, IXON demonstrates a mature digital presence with solid business credibility and compliance awareness.

T

Tanso Technologies GmbH

tanso.de

59

Tanso Technologies GmbH operates a professional website offering sustainability software solutions focused on CO₂ footprint calculation and ESG reporting, targeting industrial SMEs primarily in Germany. The company positions itself as a specialized SaaS provider for corporate and product carbon footprint management, CSRD compliance, and related sustainability reporting frameworks. The website demonstrates a modern technical infrastructure leveraging Webflow CMS, HubSpot forms, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital presence. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and explicit privacy documentation. Overall, the site is professional, well-branded, and trustworthy, with clear contact channels and client references. The risk profile is low, with no blocking or suspicious content detected.

M

M&M Software

mm-software.com

63

M&M Software is a German-based company specializing in custom software development and digital transformation solutions for international clients. Their website presents a professional image powered by TYPO3 CMS and includes modern consent management via Cookiebot, indicating awareness of privacy regulations such as GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy. The technical infrastructure is moderate with use of Google Tag Manager for analytics but lacks visible security headers and explicit contact or privacy policy information. Overall, the security posture is average with room for improvement in transparency and compliance documentation.

T

Transaction-Network

transaction-network.com

59

Transaction-Network operates a digital service ecosystem targeted at industrial producers, aiming to reduce downtime and improve supply reliability. The company positions itself as a neutral platform for manufacturers, offering structured and ready-to-use digital services. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and Cookiebot for privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. The WHOIS data is missing or inaccessible, which raises some concerns about domain legitimacy, but the active and professional website mitigates this risk. Overall, the site scores well on content quality and privacy compliance but could improve business credibility and transparency.

S

Spanflug

spanflug.de

50

Spanflug operates a digital manufacturing platform that connects buyers and contract manufacturers to streamline procurement and production processes, reducing effort by up to 90%. The company targets manufacturing industry professionals seeking efficient sourcing and production solutions. The website is built on WordPress with modern technologies including HubSpot for marketing and Cookiebot for GDPR-compliant cookie consent. The site demonstrates good technical maturity with fast performance, mobile optimization, and SEO best practices. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are absent. Privacy compliance is partial due to missing privacy and terms policies. Overall, the platform presents a professional and trustworthy digital presence aligned with its business goals.

K

KEYPLAYER Interim Management GmbH & Co. KG

keyplayer.de

52

KEYPLAYER Interim Management GmbH & Co. KG is a German-based service provider specializing in interim management, executive search, and placement of non-executive directors. The company emphasizes high recommendation quality and guarantees performance for key leadership positions, targeting businesses in Germany seeking temporary or permanent executive solutions. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It leverages modern JavaScript frameworks and analytics tools, ensuring a fast and mobile-optimized user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism in place. Security posture is good with HTTPS enforced and no exposed sensitive data, though security headers and incident response information are lacking. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

Schunk Sonosystems is a market leader specializing in ultrasonic welding technology for metal and plastic, serving key industries such as automotive, electronics, and medical sectors. The website presents a professional and consistent brand image, targeting industrial manufacturers and B2B clients. The technical infrastructure leverages modern web technologies including Angular framework, with integrated analytics and cookie consent mechanisms via Hotjar, Google Tag Manager, and Cookiebot. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall website quality and business presentation suggest a credible enterprise. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and providing clear contact information for security and compliance inquiries.

C

Coroplast Tape by Coroplast Fritz Mueller GmbH & Co. KG

coroplast-tape.com

66

Coroplast Tape is a subsidiary of the Coroplast Group, specializing in the development and production of innovative adhesive tape solutions targeting sectors such as automotive, trade, building crafts, and industry. The company positions itself as a medium-sized manufacturer based in Germany, with a professional online presence that reflects its business focus and market niche. The website is well-structured, leveraging TYPO3 CMS and integrating modern tools like Cookiebot for privacy compliance and Google Tag Manager for analytics. From a technical perspective, the website demonstrates a mature digital infrastructure with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement by adding explicit security headers and publishing security policies or vulnerability disclosures. The WHOIS data for the domain is unavailable or missing, which slightly reduces trust but is mitigated by the professional and consistent business information presented on the site. No critical vulnerabilities or security issues were detected in the content or configuration. Overall, the website is safe, business-oriented, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and improving transparency with a vulnerability disclosure or security.txt file to further strengthen trust and compliance.

The European Fund for Southeast Europe (EFSE) is a well-established impact investment fund focused on providing tailored debt financing solutions to micro, small, and medium-sized enterprises (MSMEs) in Southeast Europe and the Caucasus. Founded in 2005, EFSE operates as a public-private partnership, aiming to foster inclusive and sustainable economic growth by partnering with local financial institutions. The fund offers a variety of financial products including local currency loans and specialized financing for underserved sectors such as agriculture. Technically, the website is built using modern web technologies including React and Next.js, hosted on Mittwald infrastructure. It incorporates advanced monitoring and analytics tools such as Sentry and Matomo, and employs Cookiebot for GDPR-compliant cookie consent. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. However, it lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. No vulnerability disclosure or incident response information is provided, representing an area for improvement. Overall, EFSE's website demonstrates a high level of professionalism and trustworthiness, with strong business credibility and technical implementation. The absence of some compliance documents and contact details slightly reduces the privacy compliance score but does not significantly impact the overall security posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing transparency with contact information, and establishing a vulnerability disclosure program.

V

Velsa

velsa.de

65

Velsa is a German legal technology company providing a specialized legal tool designed for startups and small to medium-sized enterprises (KMUs). Their platform offers legal checklists, contract templates, and a free initial legal consultation, positioning them as a niche player in the legal SaaS market focused on the German-speaking startup ecosystem. The website is professionally designed using modern web technologies such as Webflow, integrated with multiple marketing and analytics tools including Cookiebot for GDPR compliance, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided by Raidboxes, a reputable provider, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and CSRF protection cookies in place, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a linked privacy policy. However, explicit contact information and terms of service are not readily visible, which could be enhanced to improve business credibility and user trust. Overall, the website demonstrates a mature digital presence with good technical and security practices, suitable for its target audience.

B

Blockpit

blockpit.io

68

Blockpit is a specialized fintech company providing comprehensive crypto tax calculation, portfolio tracking, and tax optimization services. The platform supports a wide range of crypto assets, exchanges, and blockchain protocols, offering country-specific tax reports compliant with local regulations. Positioned as a leading solution in the crypto tax compliance space, Blockpit targets crypto investors, tax advisors, and governmental entities. The website demonstrates a mature digital presence with professional branding, extensive integrations, and strong trust signals including expert-audited reports and positive user testimonials. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Cookiebot for consent management, and multiple analytics and advertising pixels. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is evident through comprehensive policies and cookie consent mechanisms. Despite the lack of publicly available WHOIS data due to privacy protection, the overall legitimacy and trustworthiness of the domain and business are supported by consistent branding, partner relationships, and professional content. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, Blockpit presents a robust, secure, and user-friendly platform with a clear focus on crypto tax compliance and portfolio management, well-positioned in its market niche.

F

FERI Cognitive Finance Institute

feri-institut.de

74

FERI Cognitive Finance Institute is a specialized think tank focused on cognitive finance, providing research, insights, and content primarily targeted at finance professionals and academics. The website positions itself as a knowledge hub with sections like Content Center and Cognitive Finance, supported by a parent company FERI AG and related partner sites in Germany, Switzerland, and Luxembourg. The digital infrastructure uses modern analytics and consent management tools, indicating a mature technical setup. Security posture is adequate with HTTPS and telemetry tools but lacks explicit security policies or incident response information. Privacy compliance is supported by Cookiebot consent management, though no dedicated privacy policy page was found in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

E

Energy Infrastructure Partners

energy-infrastructure-partners.com

55

Energy Infrastructure Partners is a specialized investment firm focused on energy infrastructure projects emphasizing electrification, decarbonization, and energy security. Founded in 2019, the company positions itself as a strategic partner for investments in the evolving energy sector. The website reflects a professional and consistent brand image, targeting investors and stakeholders interested in sustainable energy infrastructure. Technically, the site is built on WordPress, leveraging modern analytics and cookie consent tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website is trustworthy and professionally maintained, though it lacks explicit contact information and published security or incident response policies.

P

pantamedia communication

pantamedia.com

54

Pantamedia communication is a German full-service agency specializing in public relations, advertising, and marketing with over 30 years of experience. The company focuses on serving clients in the political and economic sectors, offering services such as print design, logo design, text design, and web design. The website reflects a professional and consistent brand image targeting businesses and organizations requiring strategic communication and marketing support. Technically, the site is built on WordPress using the Enfold theme and integrates Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks some advanced security headers and explicit security or incident response policies. The absence of WHOIS data for the domain is a concern for domain legitimacy, although the website's professional presentation and compliance measures suggest a legitimate business. Overall, the site scores well in content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

T

TF Bank AB

tfbank.se

62

TF Bank AB is a Swedish financial institution established in 1987, offering retail banking services primarily focused on savings accounts with competitive interest rates and state deposit guarantees. The bank operates across multiple European countries and is publicly listed on Nasdaq Stockholm, indicating a stable market position and regulatory compliance. The website presents clear, professional content targeting Swedish customers interested in secure savings products. Technically, the site employs modern tracking and consent management tools such as Google Tag Manager, Google Analytics, Cookiebot, and Microsoft Application Insights, hosted on a CMS likely Umbraco, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the site reflects a trustworthy and professional banking service with strong legitimacy indicators from WHOIS data and domain age.

F

Fiare Media Tools

fiaremediatools.com

60

Fiare Media Tools operates as a specialized provider of digital tools aimed at news publishing businesses, offering custom content management systems, layout automation, and integrated newsroom solutions. The website presents a professional and consistent brand image targeting media companies seeking to digitize and automate their publishing workflows. Technically, the site employs modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent, and uses HTTPS to secure communications. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacking explicit security headers and formal privacy policies. Overall, the site is functional and well-designed but would benefit from enhanced transparency and security practices.

M

Monri Payments

monri.com

74

Monri Payments is a payment processing company offering a variety of products including advanced registers and secure card transaction services. The company appears established with a domain age dating back to 2000, indicating long-term presence in the payment industry. Their website is built on WordPress, leveraging common plugins such as Gravity Forms for contact forms and Yoast SEO for search optimization. The technical infrastructure includes Cloudflare DNS and GoDaddy as registrar, with SSL properly configured and domain locked with multiple EPP statuses to prevent unauthorized changes. Cookie consent is managed via Cookiebot, demonstrating attention to privacy compliance, although no explicit privacy policy or terms of service pages were detected in the main content.

HERDT-Verlag für Bildungsmedien GmbH is an established German company specializing in IT training and educational media. Their website offers online platforms and training materials targeted at businesses, government agencies, educational institutions, and training providers. The company has a strong market presence with a domain registered since 1998 and operates multiple related domains for e-commerce and campus services. Technically, the website is built on WordPress using the Avada theme, with Cloudflare DNS and Cookiebot for privacy compliance. The site is well-optimized for SEO, mobile, and accessibility, providing a professional user experience. Security posture is good with HTTPS and cookie consent mechanisms, though some improvements like enabling DNSSEC and additional security headers are recommended. Overall, the website is trustworthy, compliant with GDPR, and suitable for its educational audience.

N

norm-4 GmbH

norm-4.com

59

norm-4 GmbH is a full-service digital agency based in Cologne, Germany, specializing in custom digital solutions including websites, online portals, TYPO3 and WordPress CMS, e-commerce platforms, accessible websites, and mobile apps for iOS and Android. The company targets businesses, institutions, and public sector clients, positioning itself as a technologically competent and creative partner. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with modern plugins such as WPBakery Page Builder and Yoast SEO, and it employs Cookiebot for GDPR-compliant cookie consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, norm-4 GmbH demonstrates a solid digital maturity and trustworthy business profile.

S

Brand Identity Design and Visual Communications Design

sparksof.io

59

Sparks of is a brand identity and visual communications design agency based in Helsinki, Finland. The website presents a professional image focused on delivering design services to businesses seeking to establish or enhance their brand presence. The company appears to be a small agency with a clear focus on creative design solutions. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity and compliance with privacy regulations. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of public WHOIS data suggests privacy protection, which is typical for small agencies and does not raise immediate concerns. Overall, the website is well-designed, user-friendly, and trustworthy, but lacks visible contact information and formal privacy or terms of service pages.

M

Maa- ja metsätaloustuottajain Keskusliitto MTK

mtk.fi

55

Maa- ja metsätaloustuottajain Keskusliitto MTK is a professional and advocacy organization serving farmers, forest owners, and rural entrepreneurs in Finland. It holds a central position in representing agricultural and forestry producers, offering key services such as professional representation and support. The website reflects a mature digital presence with a modern CMS (Liferay) and uses contemporary web technologies including React and Google Tag Manager. The site is well-designed, mobile-optimized, and provides a good user experience, although explicit contact and policy pages are not evident in the provided content. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks published security policies or incident response information. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

A

Ardo

ardo.com

62

Ardo is a well-established company specializing in supplying high-quality fresh-frozen vegetables, herbs, and fruits, targeting foodservice, industry, and retail sectors with a strong emphasis on sustainability. The company has a mature online presence with a website built on Drupal 10, integrating modern tracking and consent management tools such as Google Tag Manager and Cookiebot. The website demonstrates good content quality, professional design, and clear navigation, supporting a positive user experience. Security-wise, the site employs HTTPS and domain transfer protections but could enhance security headers and DNSSEC to further strengthen its posture. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, Ardo presents a credible and trustworthy digital footprint consistent with its business claims.

M

Mlinar

mlinar.hr

53

Mlinar is a well-established Croatian bakery and retail food company with a domain registered since 1999, indicating a mature market presence. The website presents a professional design with consistent branding and clear focus on bakery products and retail services. The technical infrastructure includes modern CSS frameworks and JavaScript libraries, with integration of popular analytics and marketing tools such as Google Analytics and Meta Pixel. Cookie consent is managed via Cookiebot, demonstrating attention to privacy compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the website is trustworthy and professionally maintained, serving a general audience with safe content.

T

TF Bank AB

tfbank.fi

72

TF Bank AB operates as a consumer finance bank specializing in loans and savings accounts, primarily targeting Finnish consumers. The website presents a professional image with clear navigation and relevant content describing their financial products. The company is part of the TF Bank Group, with a domain age consistent with its business history since 2012. The technical infrastructure includes modern analytics and consent management tools, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the website demonstrates a mature digital presence suitable for a financial institution, with room for improvement in transparency around security and legal terms.

T

TF Bank AB

halino.fi

71

Halino.fi is a Finnish consumer loan service operated by TF Bank AB, a Swedish financial institution. The website offers unsecured loans up to 6000 euros with quick online application and approval processes, targeting Finnish consumers needing financial support for everyday or celebratory expenses. The business is positioned as a reliable, transparent lender with clear contact information and regulatory compliance. Technically, the site uses modern web technologies including React, jQuery, and Umbraco CMS, hosted likely on Azure, with integrated analytics and consent management tools. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though some HTTP security headers could be improved. Overall, the site is professional, user-friendly, and compliant with GDPR and Finnish regulations.

Svea Bank is a well-established financial services provider operating in Finland, offering financing, debt collection, and payment services. The website presents a professional and consistent brand image with a focus on user privacy and consent management, as evidenced by the comprehensive cookie consent mechanism. The technical infrastructure leverages modern technologies such as Astro framework, Google Tag Manager, and Matomo analytics, indicating a mature digital presence. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit security policies, which are recommended for improvement. The absence of WHOIS data limits domain legitimacy verification, but external verifications and consistent branding support the site's credibility. Overall, the website is functional, compliant with privacy regulations, and targets consumers and businesses in the Finnish financial sector.

L

LINX

linx.net

63

LINX operates as one of the world's largest Internet exchanges, connecting approximately 900 member ASNs across over 75 countries. The company provides critical internet exchange services facilitating network interconnection and traffic exchange for ISPs, enterprises, and network operators. The website reflects a professional and consistent brand presence with a focus on technical and business audiences in the telecommunications sector. The business model is membership-based, positioning LINX as a key player in the global internet infrastructure market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, and Owl Carousel for UI components. It integrates Google Analytics and HubSpot for analytics and marketing, alongside CleanTalk for anti-spam protection and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs cookie consent mechanisms. However, it lacks visible security headers such as Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or malware were detected in the content, but the absence of WHOIS data and security.txt reduces transparency and trustworthiness. Overall, the website is professional and trustworthy from a business and user experience standpoint, but improvements in security transparency and contact information publication are recommended to enhance compliance and user trust.

S

Spring

thisisspring.fi

73

Spring is a Finnish non-profit initiative focused on organizing an ideation competition for youth aged 15 to 19. The competition encourages young teams to develop ideas that positively impact the future, offering prizes such as summer jobs and study trips abroad. The website is professionally designed, multilingual, and provides comprehensive information about the competition, including FAQs, news, and partner acknowledgments. The target audience is clearly defined as Finnish youth and educational institutions. The business model revolves around community engagement and educational empowerment through ideation challenges.

POP Pankki is a well-established Finnish cooperative bank with over 100 years of history, recognized multiple times as Finland's best bank. The website reflects a mature digital presence built on HubSpot CMS, integrating modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Giosg for live chat support. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring comprehensive cookie consent and GDPR-aligned privacy policies. Overall, the site demonstrates high business credibility and trustworthiness.

S

Säästöpankki

saastopankki.fi

73

Säästöpankki is a Finnish savings bank offering retail banking and financial services to Finnish customers. The website presents a professional image with a clear focus on banking services, financial advice, and customer support. The site targets Finnish-speaking users primarily but offers alternate language versions. The business model centers on traditional banking with digital customer engagement. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility is basic. Security posture is strong with HTTPS enforced and CSRF protections, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and legitimate online presence for a financial institution.

S

selecdoo AG

selecdoo.com

67

Selecdoo AG operates a next-generation affiliate marketing platform that leverages AI technology to connect online shops with a large network of publishers, influencers, and content creators. The platform emphasizes commission-based marketing without monthly fees, offering a scalable and fraud-resistant solution for advertisers and publishers alike. The company is positioned as a modern player in the affiliate marketing industry with a strong focus on technology and user experience. Technically, the website is built on a modern stack including Next.js and React, hosted likely on Vercel, and integrates multiple analytics and tracking tools with consent management. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security.txt are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for affiliate marketing activities.

S

Stadtportal koeln.de

koeln.de

65

The website www.koeln.de serves as the official city portal for Cologne, Germany, providing comprehensive information about the city, including events, sightseeing, and leisure activities. It targets residents and visitors, positioning itself as a trusted government-related information hub. The site employs a modern WordPress CMS infrastructure with popular plugins such as Rank Math SEO and Cookiebot for privacy compliance. Hosting appears to be regional, consistent with the domain's geographic focus. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and policies could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains a professional and trustworthy appearance suitable for its audience.