Security Directory

E

Easyfairs GmbH

kpa-messe.de

65

KPA is a specialized trade fair organizer focusing on the plastics industry in Germany, hosting multiple annual events in Ulm, Bad Salzuflen, and Leipzig. The website presents a professional and comprehensive platform for exhibitors and visitors, offering detailed event information, booking options, and digital tools such as event apps. The technical infrastructure is modern, leveraging WordPress with Elementor, and integrates multiple marketing and analytics tools including Google Tag Manager, Bing UET, and LinkedIn Insight. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the website reflects a mature digital presence suitable for a medium-sized event organizer with a strong market position in manufacturing trade fairs.

L

LANACO

tehnoloskicentar.ba

49

LANACO Tehnološki centar is a prominent technology hub located in Banja Luka, Bosnia and Herzegovina, operated by LANACO, the largest private IT system integrator in the country. The center hosts a Tier 4 standard data center, conference facilities, and an educational center offering IT courses and seminars. The website reflects a professional and consistent brand image targeting businesses and IT professionals in the region. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security best practices. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is a reliable digital presence for LANACO's technology center but should enhance privacy and security disclosures to improve trust and compliance.

L

LANACO

station-24.com

48

Station24 is a specialized software solution developed by LANACO, targeting the hospitality industry in Bosnia and Herzegovina and surrounding regions. The platform offers comprehensive modules for order management, administration, kitchen display, and loyalty programs, aiming to streamline restaurant and cafe operations. The website presents a professional image with detailed product descriptions, client testimonials, and partner logos, reflecting a medium-sized business with a solid regional presence. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, ensuring functional and secure user interactions. Security posture is generally good with HTTPS enforced and spam protection on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

L

LANACO

ecoone.ba

47

EcoOne.ba is a professional business software website offering cloud-based ERP and accounting solutions primarily targeting small and medium enterprises in Bosnia and Herzegovina. The platform emphasizes accessibility, security, and ease of use, providing multiple packages tailored to different business needs. The website is well-structured, uses modern web technologies, and includes essential privacy and cookie policies, reflecting a mature digital presence. Security posture is adequate with HTTPS and data center security claims, though explicit security headers and incident response policies are not publicly documented. Overall, the site presents a trustworthy and professional image suitable for its target market.

H

Hanser Verlag

hanser-ecampus.de

45

HANSER eCampus is a digital education platform operated by Hanser Verlag, offering adaptive courses for university students and corporate learners. The platform leverages artificial intelligence to customize learning paths in real-time, enhancing learning efficiency and outcomes. The business is well-positioned in the German education market, recognized by industry awards and providing a broad range of technical and management courses. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS CloudFront, and integrates multiple analytics and consent management tools, ensuring good performance and compliance with GDPR. Security posture is solid with HTTPS and several security headers, though improvements like CSP and HSTS are recommended. Overall, the site demonstrates a professional, trustworthy, and user-friendly digital presence with strong privacy and compliance practices.

H

Hanser eSolutions

hanser-esolutions.de

54

Hanser eSolutions is a German-based provider of innovative software and database solutions focused on quality management (QM), wood, and plastics industries. The company offers expert-curated content combined with practical tools designed to support businesses and institutions in their daily operations and decision-making processes. The website reflects a professional and consistent brand image aligned with its parent company, Hanser Verlag, a reputable German publisher. The target audience primarily consists of companies and institutions seeking specialized software solutions in their respective sectors. Technically, the website is built on a modern stack including Next.js and Storyblok CMS, hosted on a reliable cloud infrastructure with fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and several security headers present, though improvements such as CSP and enhanced XSS protection are recommended. Privacy compliance is well addressed with a clear privacy and cookie policy linked to a centralized Hanser customer center domain, including consent mechanisms. Overall, the site demonstrates a high level of professionalism and trustworthiness with moderate user tracking balanced by privacy considerations.

Q

QZ-online

qz-online.de

62

QZ-online is a specialized German-language online portal dedicated to quality management and quality assurance. It serves professionals and experts in the manufacturing and technology sectors by providing industry news, expert articles, job listings, product announcements, and subscription services for the Fachzeitschrift QZ. The website is positioned as a niche market leader in quality management content within German-speaking regions, supported by a reputable publishing house (Carl Hanser Verlag). The portal targets quality management professionals seeking up-to-date information and expert insights. Technically, the website is built on modern web technologies including React and Next.js, with integrations for cloud-based image hosting (Cloudinary) and multiple analytics and marketing tools such as Google Analytics, LinkedIn Insight Tag, and eTracker. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts to optimize user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It respects user privacy by defaulting to denied consent for tracking cookies and provides a comprehensive privacy policy compliant with GDPR. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, QZ-online presents a professional, trustworthy, and content-rich platform with a solid security posture and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, implementing a vulnerability disclosure program, and enhancing accessibility to further strengthen trust and compliance.

C

Carl Hanser Verlag GmbH & Co. KG

hanser-mediacenter.de

52

The HANSER Mediacenter website serves as a comprehensive B2B media and advertising platform for the Carl Hanser Verlag GmbH & Co. KG, a reputable German publishing company. It offers detailed information on trade magazines, portals, newsletters, and advertising formats targeting specialized industrial sectors such as plastics, automotive electronics, and quality management. The site is well-positioned in the German B2B media market, providing valuable services to advertisers and industry professionals. Technically, the website leverages modern frameworks like Next.js and React, integrates with Google Tag Manager and DoubleClick for advertising, and uses Cloudinary for media assets. The hosting infrastructure appears reliable, with Noris nameservers indicating a German hosting provider. Security-wise, the site enforces HTTPS and includes some security headers, but lacks visible cookie consent mechanisms and published security policies, which are areas for improvement. Overall, the website demonstrates strong business credibility and technical maturity, with minor gaps in privacy compliance and security transparency.

C

Clarion Events Ltd (Defence Division)

clarion-defence.com

68

Clarion Defence operates as a division of Clarion Events Ltd, delivering world-class defence and security events globally. The company focuses on connecting industry leaders and fostering innovation through premier forums and networking opportunities. Their business model centers on event organization and facilitation within the government and defence sectors, positioning themselves as a key player in this niche market. The website content is professional and well-structured, targeting global defence and security professionals. Technically, the website employs a modern technology stack including jQuery, ScriptJS, Google Tag Manager, and OneTrust for cookie consent, built on the SHOWOFF CMS platform. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and incident response disclosures are recommended. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. No critical vulnerabilities or malicious content were detected. Overall, the website presents a professional image with solid business credibility but should address domain registration transparency and enhance security policies to improve trust and compliance.

F

Flexocube

flexocube.de

47

Flexocube is a German-based small business specializing in modular outdoor kitchens designed for balconies and gardens. Their business model combines e-commerce with an online configurator and physical shop presence, targeting both private consumers and businesses. The website is professionally designed using WordPress and Elementor, with a consistent brand image and clear navigation. The company emphasizes product flexibility, quality, and customer satisfaction, supported by testimonials and a 10-year warranty on color fastness. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Cookiebot, HubSpot, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies are missing. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business.

N

Nimbata Call Tracking

nimbata.com

66

Nimbata is a technology company specializing in call tracking and marketing analytics software, enabling businesses to link phone calls to PPC, SEO, and offline campaigns for true marketing attribution. The company targets marketers and businesses seeking to optimize their marketing impact through integrated tools such as Google Analytics 4, Google Ads, HubSpot, and Slack. With a user base exceeding 13,000 marketers across more than 4,300 US cities and 70 countries, Nimbata positions itself as a reliable and scalable SaaS provider in the marketing technology space. Technically, the website is built on WordPress using the Astra theme and incorporates a modern tech stack including HubSpot analytics, Google Tag Manager, Facebook Pixel, Hotjar, and various marketing and retargeting tools. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security measures include HTTPS and a strict Content-Security-Policy, although some improvements are recommended. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms indicates gaps in compliance and transparency. The WHOIS data is missing or indicates the domain may be unregistered or privacy-protected, which raises concerns about domain legitimacy relative to the business claims. Overall, Nimbata presents a professional and trustworthy front with strong technical and marketing capabilities but should address compliance and domain registration transparency to enhance trust and security posture.

S

Spessart Tourismus

spessart-tourismus.de

52

Spessart Tourismus operates as a regional tourism promotion entity focusing on the Spessart region in Germany, emphasizing outdoor activities such as hiking and mountain biking. The website serves as an informational and promotional platform targeting tourists interested in nature and cultural experiences. Technically, the site is built on TYPO3 CMS and integrates modern web technologies including Cookiebot for consent management, Facebook Pixel, and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and SEO practices but lacks visible security headers and explicit contact information, which slightly impacts its security posture and business credibility. Privacy compliance is well addressed through comprehensive cookie consent mechanisms and links to detailed privacy policies. Overall, the website is professional, trustworthy, and safe for general audiences.

E

EMBRAND GmbH

embrand-gmbh.de

54

EMBRAND GmbH is a specialized educational service provider based in Kassel, Germany, focusing on tailored training solutions for medium-sized businesses and the public sector. Their offerings include seminars for leadership and apprentices, AdA certification courses, and recruitment support strategies. The company holds recognized certifications such as AZAV, enhancing their credibility in the education sector. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

S

Spring Studio GmbH

spring.studio

65

Spring Studio GmbH is a small German company specializing in garden design, planning, construction, and maintenance services primarily targeting private clients in Berlin. Their website is professionally designed using Squarespace, featuring modern technologies such as embedded YouTube videos, Google Tag Manager, Facebook Pixel, and multilingual support via Weglot. The company maintains a clear online presence with contact details, social media integration, and GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and incident response information could improve their resilience. Overall, the website reflects a trustworthy and credible business with good technical implementation and privacy compliance.

F

Frontkom

frontkom.no

62

Frontkom is a Norwegian digital agency specializing in marketing and technology services, targeting ambitious businesses and organizations. Their offerings include digital marketing, design, web development, operations, e-commerce, and AI solutions. The company demonstrates a strong market position with a diverse client portfolio spanning commercial, educational, and non-profit sectors. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital infrastructure. Technically, the site leverages WordPress with modern plugins and performance optimizations, ensuring fast load times and good accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with user consent mechanisms implemented. Overall, the site projects high professionalism and trustworthiness, though WHOIS data for the subdomain is unavailable, which is typical for subdomains. Strategic recommendations include enhancing security headers, publishing incident response policies, and maintaining up-to-date software.

I

Innsamlingskontrollen i Norge

innsamlingskontrollen.no

60

Innsamlingskontrollen i Norge is a Norwegian non-profit organization dedicated to ensuring that fundraising activities are conducted responsibly and that donated funds reach their intended purposes. The website serves as a resource for donors and approved fundraising organizations, providing certification, ethical guidelines, and lists of approved and suspicious organizations. The organization maintains a trusted position within the Norwegian fundraising sector, supported by clear contact information and active social media presence. Technically, the website is built on WordPress and employs a mix of JavaScript libraries including jQuery, Vue.js, and Chart.js, alongside Google Tag Manager for analytics and CookiePro for consent management. The site is mobile-optimized with good navigation and content quality, although some technologies like Vue.js are outdated, which could pose security risks. The website uses HTTPS and implements cookie consent, but lacks comprehensive privacy and security policies. From a security perspective, the site benefits from HTTPS and basic privacy compliance mechanisms but lacks advanced security headers and incident response information. The absence of a privacy policy and security headers, along with outdated libraries, represent moderate security concerns. WHOIS data is unavailable, limiting domain ownership transparency, but the website's professional presentation and contact details support its legitimacy. Overall, the website is functional, trustworthy, and serves its non-profit mission well, but improvements in privacy policy publication, security headers, and technology updates are recommended to enhance security posture and compliance.

S

Svensk Hypotekspension

hypotekspension.se

66

Svensk Hypotekspension is a Swedish financial services provider specializing in offering special loans to pensioners who own their homes. The website clearly targets elderly homeowners in Sweden, providing a niche financial product that leverages home equity. The company appears to be established with a professional online presence, including a well-structured website and comprehensive cookie and privacy policies, indicating compliance with GDPR and Swedish regulations. Technically, the website is built using modern web technologies such as React and Next.js, with integration of Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security posture is strong with HTTPS enforced and standard security headers present, although there is room for improvement in accessibility and explicit security policy disclosures. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data for the exact www subdomain was not found, which is typical as the registered domain is likely hypotekspension.se without the www prefix. The website uses extensive third-party marketing and analytics tools, but manages user consent appropriately. Overall, the website presents a trustworthy and professional image suitable for its target audience. Strategic recommendations include enhancing accessibility, publishing security and incident response policies, and providing clearer contact information for security matters.

B

Bank Norwegian – en filial av NOBA Bank Group

banknorwegian.no

74

Bank Norwegian is a Norwegian branch of the Swedish NOBA Bank Group, providing a range of financial products including credit cards, consumer loans, refinancing options, savings accounts, and insurance products. The company targets Norwegian consumers seeking accessible and competitive financial services. The website reflects a professional and consistent brand presence with clear product offerings and pricing transparency. Technically, the site leverages modern web technologies such as React and Material-UI, with media assets hosted on Cloudinary and analytics via Google Tag Manager and Google Analytics. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is strong with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers and incident response information are not publicly visible. WHOIS data is privacy protected, which is typical and justified for a financial institution. Overall, the website demonstrates a mature digital presence with solid business credibility and compliance.

N

Nordax Bank AB (publ)

nordax.se

60

Nordax Bank AB (publ) is a Swedish financial institution specializing in consumer loans, mortgages, and savings accounts, targeting customers who may have been denied loans by larger banks. The bank operates under the parent company NOBA Bank Group AB (publ) and offers competitive interest rates and deposit guarantees backed by the Swedish government. The website demonstrates a professional and modern digital presence using React and Next.js frameworks, with a focus on user experience and accessibility. Security measures such as HTTPS and security headers are properly implemented, and privacy policies indicate GDPR compliance. However, the WHOIS data for the exact domain www.nordax.se is missing, which introduces some uncertainty about domain registration details. Overall, the site is trustworthy and well-maintained, serving a niche market in Swedish retail banking.

A

Addleshaw Goddard LLP

addleshawgoddard.com

69

Addleshaw Goddard LLP is a well-established international law firm serving many of the world's best-known and remarkable clients. The firm provides imaginative legal solutions to pivotal business problems, positioning itself as a trusted advisor in the professional services sector. The website reflects a professional and consistent brand image, targeting corporate clients and businesses seeking legal advisory services. Technically, the website employs modern technologies including Bootstrap, jQuery, Google Tag Manager, and Cookiebot for cookie consent management. It integrates multiple third-party analytics and marketing tools such as Facebook Pixel, Hubspot, and CrazyEgg, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and uses cookies to enhance security such as CSRF protection tokens. However, explicit security headers are not detected, and no visible security or incident response policies are published on the site. The WHOIS data for the domain is missing or unavailable, which is unusual for a professional law firm and may warrant further verification. Overall, the website is professional, secure, and compliant with cookie consent regulations but could improve transparency by publishing privacy policies, contact information, and security disclosures.

Tief- und Rohrleitungsbau Wilhelm Wähler GmbH & Co. KG is a well-established infrastructure and civil engineering company based in Germany, with a history dating back to 1919. It operates as a subsidiary of the Seier Gruppe and is recognized as a leading player in northern Germany's infrastructure construction sector. The company offers a broad range of services including district heating, pipeline construction, geotechnical engineering, and telecommunications infrastructure. The website reflects a professional and consistent brand image, emphasizing employee development and corporate values. Technically, the site is built on WordPress with modern frameworks like UIkit and integrates SEO and cookie consent tools, indicating a mature digital presence. Security posture is good with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

M

Mudcon GmbH

mudcon.de

40

Mudcon GmbH is a certified environmental service provider specializing in the professional disposal and recycling of drilling sludge, primarily serving construction and industrial clients in Northern Germany. The company operates under the parent organization Seier Gruppe and emphasizes sustainability, compliance, and efficiency in its service offerings. The website reflects a strong market position with clear communication of certifications and services. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good SEO, mobile optimization, and user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the digital presence supports a trustworthy and professional business image.

B

BHK Tief- und Rohrbau GmbH & Co. KG

bhk-rohrbau.de

49

BHK Tief- und Rohrbau GmbH & Co. KG is a well-established German company specializing in pipeline construction, civil engineering, and cable laying services. Founded in 1990 and operating under the parent company SEIER Gruppe, BHK serves regional clients with a focus on quality, reliability, and sustainable infrastructure development. The company offers a broad range of services including house connections, vacuum excavation, horizontal drilling, and network planning, positioning itself as a trusted partner in the energy and transportation sectors. Technically, the website is built on WordPress with modern frameworks such as UIkit and enhanced by SEO tools like Yoast. It employs Google Tag Manager and Cookiebot for analytics and privacy compliance, respectively. The site is mobile-optimized, accessible, and demonstrates good performance and SEO practices. Multiple office locations are clearly presented with comprehensive contact information, supporting strong business credibility. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Overall, the website reflects a professional, trustworthy, and compliant digital presence suitable for its industry and audience. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

M

Meco: The #1 newsletter reader | Declutter your inbox

meco.app

52

Meco.app is a technology-focused website offering a newsletter reading application designed to help users declutter their inboxes by reading newsletters outside of traditional email inboxes. The site positions itself as the leading newsletter reader app, targeting users who subscribe to multiple newsletters and seek a streamlined reading experience. The business model appears to be SaaS-based, focusing on user convenience and email management. Technically, the website is built using Framer, with integrations of Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are visible. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No contact or incident response information is provided, which limits transparency and user trust. WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

D

DATAFRETE

datafrete.com.br

60

DATAFRETE is a Brazilian company specializing in digital logistics solutions, offering a Transport Management System (TMS), Business Process Outsourcing (BPO) for freight management, and route optimization services. The company positions itself as a mature player in the transportation sector with over 12 years of experience and a client base exceeding 230 companies. Their platform integrates multiple sales channels and logistics operations to optimize freight costs, improve operational efficiency, and enhance customer experience. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Security posture is generally good with HTTPS and modern technologies in use, but lacks some security headers and explicit privacy and incident response policies. Overall, the business appears credible and established, but improvements in transparency and security documentation are recommended.

I

igus

igus.com

62

igus GmbH is a global leader in the manufacturing and distribution of motion plastics, including cable carriers, polymer bearings, flexible cables, and linear slides. The company targets industrial manufacturers, automation engineers, and robotics integrators with a comprehensive product portfolio and global presence. The website reflects a mature digital infrastructure leveraging modern web technologies such as React and Next.js, integrated with advanced analytics and marketing tools. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. However, the absence of public WHOIS data reduces transparency but does not detract from the overall legitimacy given the brand's global footprint and consistent online presence. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance trust further.

A

All About Automation

allaboutautomation.de

61

All About Automation is a professional event organizer specializing in trade fairs for automation, robotics, and digitalization across 10 locations in the D-A-CH region. The platform connects automation users with solution partners to promote flexible automation and smart production. The website demonstrates a mature digital infrastructure built on WordPress with Elementor, integrating multiple analytics and marketing tools managed via Google Tag Manager and Iubenda for privacy compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is well-positioned as a regional leader in automation trade fairs with consistent branding and good user experience.

V

Villares Metals S.A.

villaresmetals.com.br

71

Villares Metals S.A. is a well-established Brazilian steel manufacturing company with a history spanning approximately 80 years. The company specializes in producing various types of steel including engineering, tool, stainless, high speed, valve steels, and specialty alloys. Their business model focuses on full-service steel production, from raw material selection to delivery, serving diverse industrial sectors such as aerospace, automotive, energy, and medical. The website reflects a mature digital presence with multilingual support, customer portals, and comprehensive corporate information. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforcement, cookie consent management, and CAPTCHA integration, though there is room for improvement in incident response transparency and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, supporting Villares Metals' market position as a reliable industrial steel producer.

Vesuvius is a well-established global leader in metal flow engineering, primarily serving the steel and foundry industries. The company offers a comprehensive range of engineering services and solutions aimed at improving operational efficiency for industrial customers worldwide. The website reflects a mature enterprise with a strong emphasis on investor relations, sustainability, and corporate governance. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in explicit security headers and incident response transparency. Overall, the domain registration and WHOIS data align well with the company's identity, supporting high legitimacy and trustworthiness.

T

Ternium

ternium.com

64

Ternium is a leading steel manufacturer in the Americas, providing a wide range of steel products and innovative solutions to various industries including energy, transportation, and manufacturing. The company emphasizes sustainability and technological advancement, supported by a comprehensive digital presence with multiple regional sites and language options. The website demonstrates a mature technical infrastructure utilizing modern analytics and monitoring tools such as Google Tag Manager and Microsoft Application Insights. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site reflects a large enterprise with consistent branding and high professionalism.

S

SunCoke Energy, Inc.

suncoke.com

73

SunCoke Energy, Inc. is a leading independent producer of high-quality coke primarily serving the steel production industry in the Americas. With over 60 years of experience, the company holds the highest annual coke production capacity in the United States, positioning itself as a market leader. The website targets investors, industry professionals, and potential employees, providing comprehensive corporate governance, investor relations, and sustainability information. The business model focuses on coke production, logistics, and long-term contracts, emphasizing innovation and environmental standards. Technically, the website is built on the Sitecore CMS platform and leverages modern JavaScript libraries such as jQuery, Slick Slider, and Magnific Popup. It integrates Google Tag Manager for analytics and uses Investis Digital's cookie management tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate with potential for improvement. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence. Strategic recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

S

Samarco

samarco.com

64

Samarco is a Brazilian mining company specializing in the production of iron ore pellets with integrated operations in Minas Gerais and Espírito Santo. The company has an established market presence since its founding in 1977 and targets industrial and energy sectors. The website is professionally designed using WordPress with modern SEO and accessibility features, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and standard marketing/tracking tools implemented, though there is room for improvement in security headers and privacy compliance. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and social media presence support the company's authenticity. Overall, the risk is moderate with recommendations to enhance transparency and security practices.

G

GERDAU AÇOS LONGOS S.A.

gerdau.com.br

64

Gerdau Brasil is a well-established steel manufacturing company operating primarily in Brazil, specializing in long steel products. The company has a strong market presence as indicated by its long domain registration since 1995 and consistent corporate branding. The website reflects a professional and industrial focus, targeting business clients in construction and manufacturing sectors. The digital infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, integrated with a consent management platform to ensure privacy compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Overall, the website demonstrates a mature digital presence aligned with corporate standards and regulatory compliance.

C

CBMM

cbmm.com

74

CBMM is a leading supplier and technology partner specializing in niobium products, primarily serving the energy and structural sectors. Established in 2004, the company has a strong market position supported by a professionally designed website that highlights its expertise and product offerings. The website targets industrial and technology sectors interested in leveraging niobium's benefits. Technically, the site uses a modern tech stack including Google Tag Manager, OneTrust for cookie consent, and analytics tools such as Hotjar and LinkedIn Insight, hosted on Azure DNS with Sitecore CMS. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and safe for general audiences.

R

Royal Bank of Canada

avionrewards.com

68

Avion Rewards is a loyalty program operated by the Royal Bank of Canada (RBC), offering customers the ability to earn points on debit and credit card purchases which can be redeemed for travel, shopping, and financial rewards. The website is professionally designed with consistent RBC branding and targets Canadian consumers who use RBC banking products. The program integrates with various partners to enhance rewards and savings opportunities. Technically, the website uses a modern stack including jQuery, Bootstrap, and multiple analytics and marketing tools, hosted likely on Akamai CDN for performance and reliability. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security headers and incident response contacts are not clearly disclosed. The absence of WHOIS registration data is a notable anomaly, possibly due to privacy protection or data source limitations, which slightly impacts trustworthiness. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, making it a credible platform for RBC's loyalty program.

R

RBC Global Asset Management

rbcgam.com

65

RBC Global Asset Management (RBC GAM) is a leading investment management firm operating as a division of the Royal Bank of Canada. The website serves as a landing portal for various investor types including individual investors, investment professionals, and institutional investors across multiple global regions. RBC GAM offers a comprehensive range of investment solutions and is supported by several subsidiaries and affiliates worldwide. The site demonstrates a strong brand presence and clear business focus on asset management services. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, and Google Tag Manager, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and includes accessibility considerations, though some improvements could be made. Performance is moderate with CDN usage for assets. From a security perspective, the site enforces HTTPS and uses secure cookies, but could enhance security headers and server-side HTTPS enforcement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms. However, no explicit security incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and aligned with the business goals of RBC GAM. The lack of WHOIS data for the domain is likely due to it being a subdomain or privacy-protected, but the strong brand and content quality support legitimacy. Strategic recommendations include improving security headers, adding explicit security contact information, and enhancing accessibility features.

R

RBC Wealth Management

rbcwealthmanagement.com

63

RBC Wealth Management operates as a prominent financial services provider specializing in wealth management and tailored financial strategies for high net worth individuals, families, and businesses primarily in the British Isles and Europe. The website reflects a strong brand identity consistent with its parent company, the Royal Bank of Canada, and offers a professional digital presence with clear navigation and relevant content focused on wealth growth and protection. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager, Brightcove video player, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding strongly suggest legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for RBC Wealth Management but would benefit from enhanced transparency regarding privacy policies, security practices, and domain registration details to strengthen user trust and compliance posture.

Royal Bank of Canada (RBC) is a leading global financial institution headquartered in Canada, offering a broad spectrum of financial services including personal and commercial banking, wealth management, capital markets, insurance, and investor services. The website reflects RBC's strong market position as one of the largest banks in Canada and globally by market capitalization, targeting a diverse audience from individual consumers to multinational corporations and governments. The site content is professionally presented with consistent branding and clear navigation, supporting RBC's corporate image and business objectives. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager, Bing Ads, and Conductrics. The site is mobile optimized and accessible, with good SEO practices and performance. Privacy and cookie policies are present with a consent mechanism, indicating compliance with GDPR and other privacy regulations. However, no explicit security policy or incident response information is publicly available. From a security perspective, the site uses HTTPS and employs best practices such as controlled script loading and consent management. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration transparency but is likely due to registry restrictions or privacy protection common for large enterprises. Overall, the security posture is strong but could be improved by publishing security policies and vulnerability disclosure information. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with privacy standards. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and establishing a vulnerability disclosure program to further strengthen trust and security culture.

T

Tramino

tramino.de

57

Tramino is a small German technology company specializing in web-based software solutions for the tourism industry. Founded in 2008 and based in Oberstdorf, Germany, the company offers a broad portfolio of products including content management systems, reservation and hotel management software, digital signage, customer loyalty programs, and event booking systems. Their market position is that of a regional specialist with a strong focus on tourism-related digital services. The website is professionally designed, mobile-optimized, and provides clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and asynchronous loading to ensure good performance and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers and explicit security policies are missing. Overall, the website and business present a trustworthy and professional image suitable for their target audience.

M

mtms Solutions GmbH

ticketorganizer.eu

67

Ticketorganizer.eu is an e-commerce platform operated by mtms Solutions GmbH, specializing in selling tickets for events, concerts, festivals, and sports primarily in Austria and surrounding regions. The website offers a user-friendly interface with event filtering by country and city, supporting multiple languages. The platform integrates modern web technologies such as jQuery, Bootstrap, and Select2, and employs analytics tools like Google Tag Manager and Matomo with user consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a professional and trustworthy front for ticket sales with good privacy compliance.

I

INTERPLAN Congress, Meeting & Event Management AG

interplan.de

53

INTERPLAN Congress, Meeting & Event Management AG is a professional event management company operating primarily in Germany with offices in Munich, Hamburg, Berlin, and Leipzig. The company specializes in congress organisation, exhibition and sponsoring management, hotel services, DMC and event management, delegate management, and association management. Their target audience includes organizations and associations seeking expert event planning and execution services across Europe. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern JavaScript libraries and cookie consent management tools, ensuring GDPR compliance and user privacy. Security posture is good with HTTPS enabled and anonymized analytics, though some security headers are not explicitly detected in the HTML content. Overall, the site is trustworthy, professional, and well-maintained, with no signs of blocking or WAF interference.

A

Aço Verde do Brasil S/A

avb.com.br

47

Aço Verde do Brasil (AVB) is a Brazilian steel manufacturing company specializing in sustainable steel products with a strong emphasis on low CO2 emissions. The company offers a range of steel products including machine wire, rebars (CA-50 and CA-60), steel billets, and industrial gases. AVB positions itself as a leader in sustainable steel production, supported by certifications such as ResponsibleSteel™ and CO2 emission certificates. The website reflects a mature digital presence with multilingual support, investor relations, and sustainability reporting, targeting construction, industrial sectors, and sustainability-conscious stakeholders. Technically, the website is built on WordPress with modern plugins and performance optimizations such as lazy loading and GDPR compliance tools. Hosting appears to be on Microsoft Azure DNS infrastructure. The site is mobile optimized and accessible, with integration of Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical security vulnerabilities or blocking mechanisms were detected. Contact information is comprehensive including emails, contact forms, and physical addresses. The company maintains a professional and consistent brand image with clear navigation and relevant content. Overall, AVB demonstrates a solid business and digital maturity with a focus on sustainability and compliance.

Weidmüller Interface GmbH & Co. KG is a well-established enterprise specializing in industrial connectivity solutions, including products and services for connection technology, automation, and digitalization. The company targets industrial customers, system integrators, and device manufacturers globally, positioning itself as a leader in manufacturing and technology sectors. Their website reflects a mature digital presence with comprehensive product catalogs and solution offerings. Technically, the website employs modern web technologies such as Google Tag Manager and OneTrust for privacy compliance, and it is optimized for mobile and accessibility standards. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance trust and compliance.

V

verlag moderne industrie GmbH

mi-connect.de

60

mi connect, operated by verlag moderne industrie GmbH, is a leading B2B multi-platform media company connecting the industrial sector with experts and technology enthusiasts. The website offers a comprehensive suite of services including lead generation, thought leadership, event organization, and marketing campaigns tailored for industrial clients. The company holds a strong market position in the German industrial media landscape, supported by professional content and a consistent brand presence. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates Google Tag Manager and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies could be improved. Overall, the site is well-structured, mobile-optimized, and trustworthy, with clear contact information and social media presence.

H

Hüthig Medien GmbH

huethig-medien.de

58

Hüthig Medien GmbH is a medium-sized German media company specializing in connecting the industrial sector with experts and technology enthusiasts through independent reporting, marketing campaigns, and events. The company operates a professional website powered by TYPO3 CMS, integrating modern analytics and GDPR-compliant consent management. The site offers comprehensive information about their services including lead generation, thought leadership, and event organization, targeting B2B industrial clients. Technically, the website is well-structured, mobile-optimized, and uses secure HTTPS connections with privacy-focused scripts. However, explicit security policies and incident response information are not publicly available. Overall, the website demonstrates a strong security posture with room for improvement in security headers and vulnerability disclosure. The domain registration data aligns with the business profile, supporting legitimacy and trustworthiness.

A

Australian Prudential Regulation Authority

apra.gov.au

80

The Australian Prudential Regulation Authority (APRA) is the official Australian government prudential supervisor responsible for ensuring the stability, competitiveness, and efficiency of the financial system. The website serves as a comprehensive resource for regulated industries including banking, insurance, superannuation, and financial corporations, providing regulatory standards, consultations, data, and licensing information. APRA holds a key position in Australia's financial regulatory landscape with a large organizational footprint and a clear mandate. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Google reCAPTCHA v3 and Google Tag Manager for security and analytics. The site is well-optimized for mobile and accessibility, with fast performance and professional design. Security posture is strong with HTTPS enforced and secure form handling, although explicit security headers could be verified and a dedicated security policy page would enhance transparency. The WHOIS data is limited due to privacy and registrar policies but aligns with Australian government domain registration norms, supporting legitimacy. No suspicious or malicious indicators were found. The site maintains good privacy compliance with clear privacy and cookie policies and uses consent mechanisms. Overall, APRA's website is a trustworthy, authoritative source for prudential regulation information in Australia, with strong business credibility and technical maturity. Minor improvements in security policy transparency and vulnerability disclosure could further strengthen its security posture.

Y

YouHodler

youhodler.com

73

YouHodler is a fintech platform specializing in cryptocurrency financial services, including trading with leverage, crypto buying and exchange, loans, and a Web3 wallet. The platform targets crypto investors and traders seeking a seamless connection between fiat and crypto assets. The website demonstrates a mature digital presence with modern technologies such as Webflow CMS, Google Tag Manager, and reCAPTCHA, ensuring a secure and user-friendly experience. Security measures include HTTPS enforcement, security headers, and a dedicated security and scam protection page, reflecting a strong security posture. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Overall, YouHodler presents a professional, trustworthy, and comprehensive crypto financial services platform with room for improvement in transparency around domain registration and incident response policies.

A

Aptos, LLC

aptos.com

63

Aptos, LLC operates a professional and comprehensive website focused on providing unified commerce solutions to retail businesses globally. The company positions itself as a leader in retail technology, offering a broad suite of services including point of sale, order management, merchandising, analytics, and cloud services. The website demonstrates a mature digital presence with extensive client testimonials, major retail brand partnerships, and a strong marketing infrastructure. Technically, the website employs modern web technologies and integrates multiple marketing and analytics tools such as Google Tag Manager, Marketo, Algolia, and Adobe Experience Platform. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers and explicit policies are missing. The WHOIS data is notably absent, which raises concerns about domain registration transparency. Despite this, the website's professional content, trust signals, and comprehensive privacy and cookie policies indicate a legitimate and trustworthy business. However, the lack of direct contact emails or phone numbers and absence of a published security policy or incident response contacts suggest areas for improvement. Overall, the website scores well on content quality, technical implementation, and security posture, with minor penalties for missing WHOIS data and security policy transparency. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

E

Exponential Science

dltscience.org

69

Exponential Science is a non-profit foundation launched in 2024 to advance research and innovation at the convergence of blockchain, AI, and other emerging technologies. The organization is led by recognized experts in blockchain and fintech and aims to foster interdisciplinary collaboration among academia, industry, and policymakers. The foundation supports initiatives such as the MiCA Crypto Alliance and DLT Earth, emphasizing regulatory compliance and sustainable technology development. Technically, the website is built on Webflow with modern web technologies, optimized for performance, mobile, and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the organization presents a credible and professional digital presence aligned with its mission.