Security Directory

The Liturgy Office website serves as the official online presence for the Department for Christian Life and Worship under the Catholic Bishops' Conference of England and Wales. It provides liturgical resources, calendars, prayers, and news relevant to the Catholic community in England and Wales. The site targets clergy, church members, and those interested in Catholic liturgy, positioning itself as a trusted non-profit religious resource provider with a long-standing domain since 2001. Technically, the website employs basic web technologies including HTML5, CSS, Google Fonts, and Google Analytics for tracking. The site lacks a modern CMS and advanced frameworks, indicating a simple but functional technical infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS (implied but not explicitly confirmed), but lacks visible security headers and published privacy or cookie policies, which are compliance gaps especially under GDPR. No forms collecting sensitive data are present, reducing attack surface. The WHOIS data confirms domain legitimacy and consistency with the organization's history, supporting trustworthiness. Overall, the website is a credible, safe, and content-relevant resource for its audience but would benefit from enhanced privacy compliance, security hardening, and technical modernization to improve user trust and regulatory adherence.

P

Paulo Fernandes & André Kleegräfe GbR

u21.de

53

U21 mediendesign is a small, owner-operated media design agency based in Hannover, Germany, founded in 1999. The company specializes in responsive web design, Typo3 CMS implementations, SEO, SEA, and app programming, targeting businesses seeking professional digital presence solutions in the Hannover region. Their market position is that of an established regional player with over two decades of experience, offering comprehensive digital services with a focus on quality and client trust. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, FontAwesome, Google reCAPTCHA, and Typekit fonts. The hosting is managed via kasserver.com, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. The site includes a cookie consent mechanism and uses Matomo analytics with transparent data retention policies. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. Cookie consent is granular and GDPR compliant. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns with the business claims, showing a consistent domain age and hosting setup. Overall, the website presents a professional, trustworthy, and compliant digital presence with minor areas for security and technical enhancement. The risk level is low, with recommendations to improve security headers, publish security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

Störungsauskunft.de

xn--strungsauskunft-9sb.de

42

Störungsauskunft.de is a specialized German website providing real-time information on utility outages including electricity, gas, water, district heating, and street lighting. It serves end consumers in Germany by offering outage maps and reporting tools, positioning itself as a niche information portal in the energy sector. The website leverages modern web technologies such as Angular and Google Maps API to deliver an interactive and responsive user experience. Security posture is solid with HTTPS and standard security headers implemented, though it lacks explicit incident response and vulnerability disclosure mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and focused on delivering relevant utility outage information to its audience.

R

rockit GmbH

rockit.at

44

rockit GmbH is a specialized TYPO3 CMS agency based in Vienna, Austria, offering comprehensive web development services including responsive design, accessibility, SEO, and GDPR-compliant solutions. The company holds certifications as TYPO3 integrators and serves a diverse client base including government and large organizations, positioning itself as a trusted technology service provider in the Austrian market. Their business model focuses on delivering tailored TYPO3 websites with ongoing maintenance and quality assurance. Technically, the website is built on a modern TYPO3 CMS platform with a rich technology stack including PHP, TailwindCSS, JavaScript frameworks like Vue.js and Alpine.js, and uses Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is room for improvement in publishing explicit security policies, incident response contacts, and implementing additional HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence with strong compliance and technical maturity. The lack of WHOIS data limits domain trust verification but does not detract from the evident business legitimacy. Strategic recommendations include enhancing security header implementation and publishing formal security policies to further strengthen trust and compliance.

L

Liverpool University Press

liverpooluniversitypress.co.uk

62

Liverpool University Press is a reputable academic publisher specializing in humanities and social sciences. It offers a range of publishing services including books, journals, digital collections, and distribution. The press targets academics, researchers, libraries, and institutions primarily in the UK and Europe. The website reflects a professional and consistent brand image aligned with its academic mission. Technically, the site uses modern JavaScript frameworks, Cloudflare for hosting and security, and integrates Google Analytics for user tracking. Security posture is strong with HTTPS and secure login forms, though it lacks some advanced security headers and explicit cookie consent mechanisms. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

R

rapidmail

emailsys1a.net

55

Rapidmail operates as a German-based email marketing and servicedomain provider targeting businesses and marketers primarily in German-speaking regions. The website presents a professional but basic digital presence with a focus on servicedomain offerings. The technical infrastructure is standard, utilizing modern web fonts and CSS, hosted with DNS Made Easy, indicating a reliable DNS setup. However, the site lacks visible advanced frameworks or CMS indications. Security posture is minimal with no detected security headers or incident response information, and privacy compliance is not evident due to missing privacy and cookie policies. Overall, the site is accessible and safe but would benefit from enhanced security and compliance features to strengthen trust and regulatory adherence.

The website www.kulturplus1.ch is currently inaccessible due to a Cloudflare security challenge page that requires human verification before access. As a result, no business content, contact information, or policies are available for analysis. The site appears to be protected by Cloudflare's Turnstile captcha, indicating a focus on security but limiting visibility into the site's actual content and services. Without access to the underlying website content, it is not possible to assess the business model, market position, or technical infrastructure in detail. The security posture is difficult to evaluate beyond the presence of Cloudflare protection, and no compliance or privacy information is visible. Overall, the site is currently blocked for analysis, resulting in a low AI score and limited insights.

B

Bider & Tanner

biderundtanner.ch

45

Bider & Tanner is a prominent bookstore and music house based in Basel, Switzerland, operating both a physical store and an online shop. The website showcases a wide range of books, music CDs, vinyl records, and cultural event tickets, positioning itself as a key cultural hub in the region. The business targets general consumers interested in literature, music, and cultural products, leveraging a retail e-commerce model complemented by physical store presence. The company enjoys a strong market position as the largest bookstore in Basel's Bankenplatz area.

C

Christoph Merian Stiftung

cms-basel.ch

61

The Christoph Merian Stiftung is a well-established non-profit foundation based in Basel, Switzerland, focused on promoting social cohesion, cultural diversity, and environmental stewardship within the city. The foundation operates through project funding, real estate development, and managing cultural institutions such as a publishing house, museum, and gardens. Their website reflects a strong local presence and commitment to community engagement. Technically, the site is built on modern frameworks including Vue.js and Nuxt.js, powered by Craft CMS, and integrates Google Tag Manager for analytics. The site is performant, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal incident response policies. Privacy compliance is adequate with a comprehensive privacy policy but lacks an explicit cookie consent mechanism. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy organization.

M

MalCare

malcare.com

65

MalCare is a technology company specializing in WordPress security solutions, offering services such as automatic malware scanning, one-click malware removal, and real-time firewall protection. The company targets WordPress website owners and administrators seeking to secure their sites without performance degradation. The website demonstrates a professional digital presence built on WordPress CMS with modern plugins and integrations for marketing and analytics. Security posture is generally strong with HTTPS enabled and no exposed sensitive data, though explicit security headers and policies are not evident in the provided content. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy, cookie policies, and contact information to improve compliance and user trust.

G

Genolve

genolve.com

54

Genolve operates as an AI-assisted design platform specializing in generating AI images, videos, and graphics from user input phrases. The website targets creative professionals and enthusiasts seeking to leverage AI technologies for content creation, offering tools such as AI image and video generators, WordPress plugins, and social media graphic makers. The platform integrates modern web technologies and Google services to enhance user experience and authentication. However, the absence of WHOIS registration data and lack of visible privacy or cookie policies present concerns regarding domain legitimacy and compliance. The site is visually appealing, mobile-optimized, and provides a moderate level of technical sophistication.

J

John S. and James L. Knight Foundation

knightfoundation.org

65

The Knight Foundation is a well-established non-profit organization dedicated to supporting journalism, arts, and community development across American cities with historical ties to the Knight brothers. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design that aligns with its mission and audience. Technically, the site is built on WordPress VIP, leveraging modern analytics and tracking tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partially addressed with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness.

A

Al Jazeera

aljazeera.com

71

Al Jazeera is a globally recognized news media organization founded in 2006 and headquartered in Qatar. It provides comprehensive news coverage, analysis, multimedia content, and live broadcasts targeting a general international audience. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as React, GraphQL, and Firebase, supported by advanced analytics and advertising frameworks. The site is well-optimized for performance, mobile responsiveness, and accessibility, offering a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR standards. Despite the absence of WHOIS data, the domain is associated with a reputable media brand, and no blocking or WAF interference was detected. Overall, the site is trustworthy, professionally managed, and well-positioned in the international media landscape.

T

The Hyperaudio Project

hyper.audio

48

Hyperaudio is a technology-focused company specializing in innovative tools for transcribing, translating, repurposing, and sharing audio and video content. Their platform targets podcasters, educators, conference organizers, and media professionals, offering interactive transcripts and captions to enhance media accessibility and usability. The company has a niche market position supported by reputable clients such as Mozilla, BBC, and Al Jazeera. Technically, the website is built on modern frameworks like Next.js and Material-UI, hosted on AWS infrastructure, and employs privacy-conscious analytics via Plausible. Security posture is adequate with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, though lacking direct contact emails or phone numbers.

S

Stronghold

stronghold.co

67

Stronghold is a fintech company specializing in providing modern payment and financial infrastructure solutions for businesses. Their platform enables instant settlement and interoperability between legacy and new payment networks, positioning them as an innovative player in the financial services sector. The company is recognized by industry leaders such as Visa and IBM, highlighting their market credibility and technological expertise. Their product suite includes ACH payments, merchant financing, card processing, and virtual payment networks, targeting businesses seeking efficient payment tools. Technically, the website is built on the Webflow CMS platform, leveraging a modern tech stack including Google Analytics, Facebook Pixel, Amplitude, and Segment for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. Hosting is managed via Webflow's CDN, ensuring fast content delivery. From a security perspective, Stronghold employs HTTPS with strong SSL configuration and security headers, demonstrating good security hygiene. However, the absence of a dedicated security policy, incident response information, and vulnerability disclosure mechanisms indicates areas for improvement in transparency and security readiness. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms, aligning with GDPR requirements. Overall, Stronghold presents a high-quality, trustworthy online presence with strong business credibility and technical maturity. The main risks relate to enhancing security transparency and incident response readiness to further strengthen stakeholder trust and compliance posture.

The website saverianibrescia.it is currently a placeholder domain sale landing page with minimal content and no business presence. The domain was registered recently in August 2023 and is being offered for sale, indicating no active business operations or services. The technical infrastructure includes basic JavaScript and external advertising/tracking scripts served via AWS Cloudfront CDN. There is no evidence of a CMS or advanced frameworks. Security posture is weak with no HTTPS enforcement or security headers detected, and no privacy or cookie policies are present. No contact information or business credentials are provided, limiting trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.

X

Xaverian Missionaries

saveriani.org

51

The Xaverian Missionaries website serves as the official global portal for the religious missionary organization headquartered in Rome, Italy. It provides multilingual access to regional Xaverian Missionary sites worldwide, reflecting a well-established global network. The site focuses on disseminating information about missionary activities and fostering community engagement within the Catholic missionary context. The business model is non-profit and mission-driven, targeting religious communities and supporters globally. Technically, the website is built on Joomla CMS with Yootheme and UIkit frameworks, indicating a modern and maintainable infrastructure. The site is mobile-optimized, accessible, and includes SEO best practices. Google Analytics is used for visitor tracking, with a cookie consent mechanism in place, demonstrating awareness of privacy regulations such as GDPR. From a security perspective, the site uses HTTPS with good SSL configuration and includes CSRF tokens in scripts, but lacks explicit security headers and published security policies or vulnerability disclosure mechanisms. The absence of WHOIS registrant data reduces domain trust verification, though the website content and structure suggest legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website presents a professional and trustworthy front for the Xaverian Missionaries, with room for improvement in security header implementation and transparency around security policies. The lack of WHOIS data is a notable gap but does not critically undermine the site's credibility given the content and network presence.

M

MissioNET

missionet.org

45

MissioNET is a small non-profit multimedia platform owned by the Xaverian Missionaries, focused on missionary animation and vocational promotion through a video library. The website is built on Joomla CMS with Yootheme and UIkit frameworks, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure is modern and includes Google Analytics for tracking, though lacks some advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as no visible incident response or security policies, indicates gaps in compliance and transparency. Overall, the website is legitimate, professionally presented, and serves a niche religious community audience effectively.

M

Missionari Saveriani

missioneoggi.it

44

Missionari Saveriani operates a comprehensive Italian-language web portal and magazine focused on missionary activities and religious community engagement. The organization provides subscription-based digital and print publications, event information, and community news. The website is well-structured, professionally designed, and targets Italian-speaking audiences interested in missionary work and religious topics. Technically, the site leverages Joomla CMS with modern frontend technologies including Bootstrap and Leaflet.js, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS, CSRF protections, and secure login forms, though explicit security headers and incident response policies are not publicly documented. Privacy compliance is evident with GDPR-aligned privacy and cookie policies, though a consent mechanism is not implemented. Overall, the site is trustworthy, with clear contact information and active social media presence, supporting its legitimacy as a non-profit religious entity.

F

Fondazione Nigrizia

fondazionenigrizia.org

52

Fondazione Nigrizia is a medium-sized Italian non-profit organization dedicated to supporting African humanitarian and development projects. The website serves as a platform for project promotion, donor engagement, event announcements, and membership subscriptions. It leverages WordPress with a modern tech stack including jQuery, Slick Carousel, and GDPR-compliant cookie management plugins. The site is well-structured, mobile-optimized, and provides clear contact channels and privacy policies, reflecting a mature digital presence. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks visible HTTP security headers, which could be improved to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits full trust verification, but the professional presentation and consistent branding support legitimacy. Overall, the website is a reliable and professional digital asset for the organization, effectively balancing user experience, privacy compliance, and functional needs. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

FONDS professionell Multimedia GmbH operates a professional financial media website targeting investors and financial advisors primarily in German-speaking countries. The website offers financial news, investment analysis, and a subscription model for ad-free content, positioning itself as a reputable source in the financial media sector. Technically, the site uses modern JavaScript frameworks such as SvelteKit and implements a comprehensive consent management platform to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, while HTTPS is assumed, explicit security headers and policies are not evident, indicating room for improvement in security posture. The site extensively uses Google Advertising Products and INFOnline GmbH for advertising and analytics, with detailed data retention policies disclosed. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though it lacks explicit contact and security policy information.

H

HANSAINVEST Hanseatische Investment-GmbH

hansainvest.de

59

HANSAINVEST Hanseatische Investment-GmbH is a leading German capital management company specializing in fund administration and comprehensive fund solutions across all relevant asset classes. The company positions itself as a trusted partner for fund partners and asset managers, offering services including insourcing and Luxembourg-based fund solutions through its subsidiary HANSAINVEST LUX S.A. The website is professionally designed, content-rich, and targets institutional investors and potential employees. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, hosted by Schlund Technologies, and optimized for mobile devices. Security posture is strong with HTTPS and GDPR compliance via Usercentrics, though some security headers could be improved. No blocking or WAF challenges were detected, and the domain registration is consistent with the business claims, indicating a legitimate and trustworthy online presence.

F

Festival della Missione

festivaldellamissione.it

56

Festival della Missione is a national cultural event based in Italy, focused on fostering reflection, celebration, and engagement around mission themes. The website serves as a platform for event information, news, videos, and newsletter subscriptions, targeting a broad audience interested in cultural and social mission activities. Technically, the site is built on Joomla CMS with Yootheme templates and UIkit framework, incorporating modern web technologies and standard security practices such as HTTPS and Google reCAPTCHA. Privacy compliance is well addressed with comprehensive cookie and privacy policies, including user consent mechanisms. Security posture is solid but could be improved with additional HTTP security headers and explicit incident response information. Overall, the site presents a professional and trustworthy digital presence aligned with its non-profit cultural mission.

E

Eidgenössisches Institut für Geistiges Eigentum

ige.ch

67

The Eidgenössisches Institut für Geistiges Eigentum (IGE) is the Swiss federal authority responsible for intellectual property rights including patents, trademarks, designs, geographical indications, and copyright. The website serves as a comprehensive portal for individuals, businesses, and IP professionals to access registration services, legal information, and educational resources. It holds a strong market position as the central Swiss government institution in this domain, offering key services such as public registers, online applications, and IP training through its IP Academy. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript frameworks and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Performance is moderate, suitable for a government portal with rich content. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as a Swiss federal entity, enhancing trust. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its target audience with relevant content and services, though it could improve security posture by adding security headers and vulnerability disclosure information.

D

Der SONNTAG

dersonntag.at

67

Der SONNTAG is a Catholic weekly newspaper serving the Austrian region, particularly the Archdiocese of Vienna. It provides cultural, faith-based, and traditional content through its website, e-paper, podcasts, and newsletters. The site targets German-speaking Catholic audiences interested in religious and cultural topics. The business model revolves around media publishing and advertising, with a solid regional market position. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics with privacy-conscious configurations, and employs modern web technologies ensuring good mobile optimization and accessibility. The site is well-structured with SEO best practices and uses JSON-LD structured data to enhance search engine understanding. Security-wise, the site enforces HTTPS, has cookie consent mechanisms, and disables cookies in Matomo by default. However, it lacks explicit privacy policy, terms of service, and security incident response documentation, which are recommended for compliance and trust. No critical vulnerabilities or suspicious domains were detected. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy and security documentation would enhance compliance and user trust further.

H

Hogrefe Psykologiförlaget AB

hogrefe.se

69

Hogrefe Psykologiförlaget AB operates a professional website offering psychological tests and educational materials primarily targeting clinicians, psychologists, HR professionals, and educators in Sweden. The company is part of the Hogrefe Publishing Group and has an established market presence since 2008. Their business model includes e-commerce sales of test materials, digital testing platforms, and educational webinars and courses. The website is well-structured, professionally designed, and provides comprehensive information about their products and services. Technically, the site uses a custom CMS with common web technologies such as jQuery, Google Analytics, and Cloudflare DNS. Mobile optimization and SEO are well implemented, though accessibility is basic. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but could be improved by enabling DNSSEC and adding security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site reflects a credible and trustworthy business with a solid digital presence.

H

Hogrefe Psykologien Kustannus Oy

hogrefe.fi

58

Hogrefe Psykologien Kustannus Oy is a well-established Finnish company specializing in psychological test tools, training, and literature, serving Finnish psychologists and healthcare professionals. As part of the larger Hogrefe Group since 2013, it holds a strong market position in Europe as a leading psychology publisher. The website reflects a professional business model focused on B2B sales and educational services, targeting psychology professionals in Finland. The content is relevant, well-structured, and consistent with the company's branding and market positioning. Technically, the website uses a stable but somewhat dated technology stack centered around jQuery and related libraries, with good SEO practices and basic mobile optimization. The site is accessible without WAF or blocking mechanisms, but lacks modern security headers and explicit privacy or terms of service pages, indicating room for improvement in compliance and security posture. Cookie usage is disclosed but lacks an explicit consent mechanism. Security-wise, the site benefits from HTTPS and no visible sensitive data exposure, but the absence of security headers and incident response information lowers its security maturity. The WHOIS data confirms the legitimacy of the domain and its alignment with the business history and registrant information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie consent policies, adding security headers, publishing incident response and vulnerability disclosure information, and regularly auditing third-party libraries to maintain security and compliance standards.

H

Hogrefe

hogrefe.no

62

Hogrefe is a Norwegian company specializing in providing reliable and quality-assured psychological and clinical testing tools for healthcare, HR recruitment, and educational assessment sectors. The website targets professionals in healthcare, education, and human resources, offering specialized testing products and services. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by plugins such as Yoast SEO and Google Tag Manager, indicating a mature digital infrastructure. The site implements GDPR-compliant cookie consent mechanisms and uses Google Analytics with consent mode, reflecting good privacy practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Overall, the site presents a professional, trustworthy, and well-structured online presence suitable for its business domain.

E

Editions Hogrefe France SAS

hogrefe.fr

65

Editions Hogrefe France SAS operates a professional website offering psychometric tests, clinical and HR evaluation tools, and training services primarily targeting psychologists and HR professionals in France. The company positions itself as a key reference in the psychometric and professional evaluation market, providing a comprehensive range of products and services including digital evaluation platforms. The website is built on TYPO3 CMS, employs modern web technologies, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and secure login mechanisms, although explicit privacy and terms of service policies are not clearly found in the provided content. The absence of WHOIS data reduces transparency but does not significantly detract from the overall legitimacy given the professional presentation and consistent branding. Strategic recommendations include publishing clear privacy and terms policies, enhancing accessibility, and establishing formal security incident response documentation.

H

Hogrefe TEA Ediciones

hogrefe-tea.com

50

Hogrefe TEA Ediciones operates as a specialized publisher and distributor of psychological tests, personality assessments, intelligence and aptitude tests, HR evaluations, and online psychology courses primarily targeting professionals and students in Spain. The website is well-branded and professionally designed, reflecting a medium-sized educational business with a clear market position in the psychology sector. Technically, the site is built as a modern Angular single-page application leveraging FontAwesome icons, Swiper.js for carousels, and Google Fonts, ensuring a responsive and user-friendly experience. Security-wise, the site employs HTTPS with a good SSL configuration and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website demonstrates a solid digital maturity with room for improvement in security transparency and accessibility.

E

Editora Hogrefe CETEPP - Centro Editor de Testes e Pesquisas em Psicologia LTDA

hogrefe.com.br

61

Editora Hogrefe CETEPP is a well-established Brazilian subsidiary of the European Hogrefe Publishing Group, specializing in psychology-related publications and psychometric instruments. The company operates a professional e-commerce platform targeting psychology professionals, educators, and students in Brazil. Their extensive catalog and 75 years of global experience position them as a reputable player in the education and retail sectors. Technically, the website is built on Magento with modern JavaScript libraries and is hosted on AWS infrastructure, offering a moderate performance and good mobile optimization. Security practices include HTTPS enforcement and secure login forms, though there is room for improvement in security headers and privacy compliance mechanisms. Overall, the website is trustworthy and professional, with clear contact information and social media presence enhancing credibility.

T

Testzentrale der Schweizer Psychologen – Hogrefe AG

testzentrale.ch

63

Testzentrale der Schweizer Psychologen – Hogrefe AG operates a professional website focused on the distribution of psychological test procedures, books, journals, and educational services primarily targeting psychologists and academic institutions in Switzerland. The website is well-positioned in the education sector, affiliated with the reputable Hogrefe Verlagsgruppe, and offers a range of services including eTesting platforms, seminars, and consulting. The business model is B2B and B2C, serving professionals and organizations in psychology and related fields. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Tag Manager and ConsentManager for cookie consent. The site demonstrates good digital maturity with structured data for SEO, mobile optimization, and secure HTTPS connections. However, some areas like explicit privacy policies and terms of service pages are missing, which could be improved for better compliance and user trust. From a security perspective, the site enforces HTTPS, uses secure login forms, and implements cookie consent mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data confirms the legitimacy of the domain registration, consistent with the business identity and location in Switzerland. Overall, the website presents a professional and trustworthy digital presence with moderate to good scores in content quality, technical implementation, security posture, and business credibility. Strategic improvements in privacy compliance and security policy transparency are recommended to enhance trust and regulatory adherence.

H

Hogrefe Psykologien Kustannus Oy

hogrefe.com

59

Hogrefe Psykologien Kustannus Oy is a well-established Finnish company specializing in psychological testing tools, training, and literature, serving psychologists and healthcare professionals primarily in Finland. As part of the larger Hogrefe Group since 2013, it holds a strong market position as Europe's largest psychology publisher, offering a broad range of products and services including online testing platforms and scoring services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs a traditional web stack with jQuery and jQuery UI libraries, Google Fonts, and standard CSS resets. While functional and moderately optimized, there is room for modernization and improved mobile responsiveness. The site lacks a CMS indication and does not appear to use advanced frameworks or analytics tools, suggesting a straightforward infrastructure. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit privacy or security policies. The absence of a cookie consent mechanism and vulnerability disclosure information indicates compliance gaps. No blocking or WAF mechanisms were detected, and no suspicious content or vulnerabilities were found in the visible code. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, updated security practices, and improved technical modernization to maintain and strengthen its market credibility and user trust.

E

ETHENEA Independent Investors S.A.

ethenea.link

69

ETHENEA Independent Investors S.A. operates as an independent asset management company specializing in multi-asset investment funds, targeting both private and professional investors primarily in Germany. The website presents a professional and well-structured digital presence, showcasing their key fund offerings such as Ethna Funds and HESPER FUND, along with ESG investment principles. The company positions itself as a strong, independent partner in asset management with a focus on capital preservation and growth across various risk profiles. Technically, the website leverages modern JavaScript libraries, cookie consent management tools, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers and incident response information are not evident. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the overall legitimacy given the professional content and compliance indicators. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving contact information visibility to strengthen trust and compliance further.

3

3Q GmbH

3q.video

73

3Q GmbH is a German-based technology company specializing in professional video streaming and hosting solutions. Their platform offers a comprehensive suite of services including live streaming, video hosting, webcasting, video analytics, and AI-powered video optimization. Positioned as a GDPR-compliant and ISO 27001 certified provider, 3Q targets businesses and organizations requiring secure, scalable, and flexible video infrastructure primarily in Europe but also worldwide. The company operates its own infrastructure, ensuring data sovereignty and reliability. Technically, the website demonstrates a mature digital presence with modern web technologies such as HTML5, JavaScript, HubSpot integration, and Cookiebot for consent management. The proprietary 3Q video player and content delivery network underline their technical capabilities. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, 3Q maintains strong practices including HTTPS enforcement, security headers, GDPR compliance, and ISO 27001 certification. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. Overall, 3Q GmbH presents a trustworthy, professional, and secure platform with strong compliance and business credibility. The website effectively communicates their offerings and supports user engagement through clear contact channels and marketing tools.

M

Mercado Libre

mercadolibre.com.mx

73

Mercado Libre is a leading e-commerce platform in Mexico and Latin America, offering a wide range of products with services including shipping and official stores. The website demonstrates a mature digital infrastructure with modern technologies such as React, New Relic monitoring, and advanced performance optimizations. Security posture is strong with HTTPS enforcement and monitoring, though explicit security policies and privacy disclosures are not prominently found in the analyzed content. Overall, the platform is highly professional and trustworthy, serving a broad general audience with extensive tracking and analytics capabilities.

N

Naturpark Barnim

barnim-naturpark.de

44

Naturpark Barnim operates as a regional nature park jointly managed by Brandenburg and Berlin, focusing on nature conservation, environmental education, and tourism. The website serves as an informational portal for visitors and stakeholders, providing rich content about the park's landscapes, flora, fauna, and cultural heritage. Technically, the site is built on TYPO3 CMS, hosted by a professional hosting provider, and uses HTTPS for secure communication. However, it lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and well-branded but could improve in privacy compliance and security best practices.

CampusVital is a health and fitness initiative focused on supporting employees and members of the Campus Berlin-Buch community in Germany. The website offers a range of onsite and digital health promotion services including fitness courses, wellness programs, and a membership card. The organization collaborates with prominent research institutions and the Techniker Krankenkasse insurance provider, positioning itself as a trusted regional health partner. Technically, the website uses a moderately modern stack with Bootstrap and jQuery, integrates Matomo for analytics, and employs Klaro for cookie consent management, reflecting a reasonable level of digital maturity. Security posture is moderate with no visible security headers and unknown SSL configuration, suggesting room for improvement. Privacy compliance is supported by the presence of a privacy policy and cookie consent mechanism. Overall, the website is professional, well-branded, and trustworthy with no signs of malicious content or blocking mechanisms.

L

Lange Nacht der Wissenschaften (LNDW)

langenachtderwissenschaften.de

49

Lange Nacht der Wissenschaften (LNDW) is a well-established science event organizer based in Berlin, Germany, with a 25-year history. The website serves as an information hub for the event, targeting science enthusiasts, visitors, media, and partners. It provides event details, news, partner information, and newsletter subscription services. The organization appears to be a medium-sized entity operating in the education and non-profit sectors, with a strong local presence and community engagement. Technically, the website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Swiper.js, ensuring good mobile responsiveness and accessibility. The site uses Matomo analytics configured for privacy by disabling cookies, and it implements a cookie consent banner compliant with GDPR requirements. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, confirming legitimacy and consistent domain age. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security policy transparency and security header implementation.

P

Prosegur Brasil

prosegur.com.br

73

Prosegur Brasil is a leading security and cash management services provider operating extensively across Brazil. The company offers comprehensive solutions including cash logistics, intelligent safes, daily deposits, authorized correspondent services, and special cargo transportation. Their target audience primarily includes B2B clients such as small, medium, and large enterprises, especially in finance, retail, industry, and services sectors. The website reflects a strong market position with a large national presence and is part of the global Prosegur group. Technically, the site uses modern technologies such as Google Tag Manager, YouTube API, and a privacy SDK, hosted on Akamai infrastructure, indicating a mature digital presence. The site is well-optimized for SEO and mobile devices, with good accessibility and performance metrics. Security posture is solid with HTTPS enforcement and privacy compliance mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.

P

Prosegur Portugal

prosegur.pt

71

Prosegur Portugal is a leading private security company specializing in alarm systems and security services for residential and business customers. The website presents a professional and comprehensive overview of their offerings, including 24/7 monitoring, police alert services, video surveillance, and access control. The company targets both B2C and B2B segments, emphasizing security technology and customer protection. The digital infrastructure leverages modern technologies such as Google Tag Manager, Microsoft Clarity, and a consent management platform to ensure compliance and user tracking. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear cookie policies and consent mechanisms. Overall, the site reflects a mature, trustworthy business with a solid market position in Portugal.

P

Prosegur UK

prosegur.co.uk

78

Prosegur UK presents itself as a professional security services provider offering integrated security solutions including manned guarding, logistics, alarms, and cybersecurity. The website is well-structured and targets organizations seeking comprehensive security services in the UK market. The company leverages modern web technologies and consent management tools to ensure privacy compliance. However, the WHOIS data indicates the domain www.prosegur.co.uk is not officially registered under Nominet UK due to naming rules violations, which raises questions about domain legitimacy despite the professional appearance and branding consistency. The website lacks direct contact emails and phone numbers but provides a contact form for inquiries. Overall, the digital maturity is moderate with good SEO and mobile optimization but could improve security headers and explicit incident response information.

P

Prosegur

prosegur.us

70

Prosegur is a global security services provider offering integrated solutions including manned guarding, cybersecurity, and risk management, now operating in the USA. The company is recognized internationally for trustworthiness and excellence, holding awards from Newsweek and TIME. Their business model emphasizes hybrid security combining human expertise with advanced technology to deliver adaptive and scalable security solutions tailored to diverse industries. The website targets B2B clients seeking comprehensive security services. Technically, the website employs modern technologies such as Google Tag Manager, HubSpot forms, and Didomi consent management, hosted likely on SAP Commerce Cloud. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy hosted on a partner domain. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response contacts, which could be improved. WHOIS data is unavailable, which slightly reduces trust signals, but the overall legitimacy is supported by branding and external recognitions. Overall, Prosegur's website presents a professional, secure, and privacy-conscious digital presence suitable for its enterprise security services business, with recommendations to enhance transparency around security policies and incident response.

T

Tellpass

tellpass.ch

67

Tellpass.ch is a professionally designed website offering multi-day travel tickets for the Central Switzerland region, enabling flexible travel by bus, train, ship, and mountain railways. The site targets tourists and local travelers seeking convenient access to regional attractions and transportation. The business operates in the transportation and hospitality sectors, providing ticket sales and related services such as vouchers and hotel packages. Technically, the site uses modern JavaScript libraries, SVG graphics, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent, respectively. The website is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent but lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. WHOIS data aligns with the business's regional focus and shows no privacy protection, supporting legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

S

Schnarwiler AG

schnarwiler.ch

57

Schnarwiler AG operates a well-established e-commerce platform specializing in health, beauty, wellness, and sleep products, with a strong Swiss heritage dating back to 1987. The company holds exclusive general representations of top brands and targets consumers seeking natural and high-quality wellness products. The website is professionally designed, multilingual, and offers a comprehensive product catalog with clear navigation and user-friendly features such as customer accounts and shopping carts. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and third-party services including Google Analytics and Facebook Pixel for marketing and analytics. The infrastructure supports mobile optimization and basic accessibility, with moderate performance. Security is robust with HTTPS enforced and a Content Security Policy in report-only mode, although further enhancements are recommended. From a security perspective, the website demonstrates good practices including secure forms and no exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, Schnarwiler AG presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security policy transparency and enhanced security headers would further strengthen their posture.

V

VIZUAL Grafik und Code GmbH

vizual.ch

51

VIZUAL Grafik und Code GmbH is a Swiss-based agency specializing in visual and digital communication, offering services in graphic design, user-friendly websites, and practical applications. The company positions itself as a niche provider focusing on the harmonious integration of form, content, and functionality, targeting businesses and organizations seeking professional digital communication solutions. The website is built on TYPO3 CMS and incorporates modern web technologies such as jQuery, GSAP, and Flickity, reflecting a moderate to advanced digital maturity. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the website and domain registration data indicate a legitimate, professional small agency with a solid online presence.

W

Warner Music Australasia

warnermusic.com.au

10

Warner Music Australasia operates as a major regional division of Warner Music Group, focusing on music production, artist promotion, and brand partnerships within Australia and New Zealand. The website reflects a professional and enterprise-grade digital presence, leveraging modern web technologies such as Webflow CMS, Adobe DTM for analytics, and OneTrust for privacy compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with active consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. The lack of public WHOIS data introduces some uncertainty about domain registration transparency but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site demonstrates a mature digital infrastructure suitable for a large media enterprise.

M

Maniacs Store

maniacsonline.com.au

18

Maniacs Store is an Australian e-commerce platform specializing in heavy music genres such as rock, punk, metalcore, and death metal. The store offers a variety of products including vinyl records, CDs, DVDs, boxsets, and merchandise like T-shirts, jumpers, and caps. Positioned as a niche market leader in heavy music merchandise within Australia, Maniacs Store operates under the Warner Music International umbrella, leveraging a professional Shopify-based infrastructure. The website demonstrates a mature digital presence with modern technologies, good performance, and mobile optimization. Privacy compliance is well addressed with OneTrust cookie consent and a comprehensive privacy policy. Security posture is strong with HTTPS enforcement and standard security headers, although explicit incident response and vulnerability disclosure information are absent. Overall, the site is trustworthy, professionally maintained, and safe for general audiences.