Security Directory

I

Ingram Content Group

ingramcontent.com

71

Ingram Content Group is a leading enterprise in the book industry, providing comprehensive solutions and services to publishers, authors, retailers, and libraries worldwide. Their business model focuses on B2B content distribution and publishing tools, supported by a network of subsidiary platforms such as CoreSource, Ingram iD, and Lightning Source. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to their target audience. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Fonts, jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is via a CDN (Amazon CloudFront), ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. However, no explicit security policy or incident response information is published, and security headers are not explicitly detected. The absence of WHOIS registration data is a concern but does not currently undermine the site's legitimacy given the professional presentation and ecosystem. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, enhancing accessibility, and implementing additional HTTP security headers to further strengthen security posture.

L

LOSAN

losan.cz

59

LOSAN is a Czech Republic-based company specializing in the sale and servicing of computing and office technology. Established since 1998, it offers a broad range of services including warranty and post-warranty repairs, network design and implementation, IT outsourcing, and tailored solutions for schools. The company maintains partnerships with reputable IT brands, enhancing its market credibility. The website reflects a mature digital presence with clear service descriptions and a user-friendly interface. Technically, the website is built on WordPress 5.7, utilizing modern libraries such as jQuery and FontAwesome, and includes a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although some security headers are missing. Hosting and domain registration are consistent with the company's Czech location and history. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of analytics and advertising scripts suggests minimal user tracking, aligning with privacy compliance. Overall, LOSAN presents a trustworthy and professional online presence with solid business credibility and technical implementation. Strategic improvements in security headers and incident response transparency would further enhance its security posture and user trust.

G

Gymnázium Zlín - Lesní čtvrť

gymzl.cz

47

Gymnázium Zlín - Lesní čtvrť is a Czech secondary educational institution providing general and language-focused education with a strong emphasis on international cooperation and language certifications. The website reflects a well-established school with active Erasmus+ participation and multiple language programs. Technically, the site uses common web technologies such as jQuery, bxSlider, and Google Analytics, with a custom or unknown CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data reduces domain trust slightly but does not detract from the legitimacy of the institution. Overall, the website is professional, secure, and compliant with GDPR, serving its educational audience effectively.

S

Střední zdravotnická škola Opava

szsopava.cz

44

Střední zdravotnická škola Opava is a regional secondary healthcare educational institution operated as a contributory organization by the Moravian-Silesian Region in the Czech Republic. The website provides comprehensive information about study programs, student services, courses, and school projects including Erasmus+ mobility. The site targets students, prospective students, and educational stakeholders interested in healthcare education. Technically, the website is built on WordPress with modern plugins and accessibility features, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking some security headers and incident response disclosures. The absence of WHOIS data limits domain legitimacy verification but the website content and contact details support its authenticity. Strategic recommendations include adding security headers, publishing incident response contacts, and verifying domain registration details to enhance trust and compliance.

M

Mateřská škola Eliška, Opava, příspěvková organizace

mseliska.cz

54

Mateřská škola Eliška is a small, regionally funded preschool educational institution located in Opava, Czech Republic. It operates as a contributory organization under the Moravskoslezský kraj regional government, providing early childhood education and specialized support services such as rehabilitation and orthoptics. The website targets parents and guardians in the local community, offering information about classes, events, and organizational details. The business model is public sector focused, emphasizing community service rather than commercial revenue generation. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js for sliders, and Magnific Popup for image galleries, along with accessibility enhancements via ResponsiveVoice. The site is mobile optimized and features good navigation and content structure, though SEO and metadata completeness could be improved. No CMS or hosting provider details were identified. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS as implied by Open Graph URLs, but lacks visible security headers and cookie consent mechanisms. No forms or data collection points were found on the main page, reducing attack surface. The absence of WHOIS data and domain registration details is a concern for trust but does not directly impact the operational security posture. Privacy policy is present and appears GDPR compliant, but no explicit incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy for its intended audience, with moderate technical maturity and some room for security and compliance improvements. The lack of WHOIS data and cookie consent are the main gaps. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving metadata for SEO and social sharing.

M

Metaswitch Networks

opencloud.com

70

Metaswitch Networks is a cloud native communications software provider specializing in voice core, unified communications, and robocall blocking solutions primarily targeting telecommunications operators and service providers. The company is positioned as a pioneering network software vendor and is now part of the parent company Alianza, which is prominently referenced throughout the website. The business model focuses on B2B software solutions that enable operators to modernize and expand their communications services. The website content is professionally presented with clear branding and consistent messaging aligned with the telecommunications industry.

B

Broadcast Sport

broadcastsportevents.co.uk

63

Broadcast Sport is a specialized media company focused on the sports broadcasting industry, offering an online news portal, quarterly magazine, and hosting the Broadcast Sport Summit event. The website targets professionals in sports media including producers, broadcasters, athletes, and brands. The company positions itself as a niche leader in sports media innovation and networking. Technically, the website uses a modern tech stack with jQuery, Google Analytics, and a proprietary CMS (SHOWOFF by ASP.events). It is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

M

Media Business Insight (MBI) Ltd

broadcastsportawards.co.uk

59

The Broadcast Sport Awards website represents a well-established event brand under Media Business Insight (MBI) Ltd, a subsidiary of GlobalData. The site focuses on celebrating excellence in sports broadcasting and production, targeting industry professionals such as broadcasters, production companies, and rights holders. It offers event information, sponsorship opportunities, and showcases past winners and shortlists, positioning itself as a leading UK and Ireland sports television awards event. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Permutive for tracking, built on the SHOWOFF CMS platform by ASP.events. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and consistent branding. However, some improvements could be made in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner or explicit GDPR compliance indicators. Overall, the website is professional, trustworthy, and serves its business purpose effectively. Strategic enhancements in privacy and security policies would further strengthen its compliance and user trust.

B

BOSQAR d.d.

bosqar.com

63

BOSQAR INVEST is a prominent company builder and perpetual capital provider focused on the Central and Eastern Europe (CEE) region. Founded in 2016, the company has rapidly expanded through strategic acquisitions and partnerships, establishing itself as a pan-European leader across multiple industries including business process outsourcing, human resources, and the agri-food sector. The website reflects a mature business with a strong emphasis on sustainability, investor relations, and corporate governance. The company operates several subsidiaries such as Mplus and Workplace, and has launched significant initiatives like sustainability-linked bonds and proprietary AI platforms.

E

Europass Slovenija

europass.si

45

Europass Slovenija operates as the official national portal providing digital tools and services to facilitate employment and education opportunities through standardized documents such as CVs, cover letters, and mobility certificates. Supported by the Slovenian government and the European Union, it targets job seekers, career advisors, employers, and educational institutions. The platform emphasizes accessibility, multilingual support, and official trust signals, positioning itself as a key resource in the Slovenian education and employment ecosystem. Technically, the website is built on WordPress, leveraging modern web technologies including jQuery and Google Fonts, with good mobile optimization and accessibility features. The site is hosted under the Arnes registrar, consistent with Slovenian academic and governmental infrastructure. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is evident through the presence of a privacy policy and cookie banner aligned with GDPR requirements. Overall, Europass Slovenija presents a trustworthy, professional, and well-maintained digital presence with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency could further enhance its security posture and user trust.

I

Institute of RS for VET

npk.si

39

The website npk.si/en represents the National Vocational Qualifications system managed by the Institute of RS for Vocational Education and Training in Slovenia. It serves as an authoritative platform providing information and resources for individuals and companies regarding vocational certification based on work experience and competencies. The site is well-positioned as a government-related educational service with a clear target audience and a medium organizational size. Technically, the site is built on WordPress, uses modern libraries like jQuery, and is hosted under a reputable registrar (Arnes). The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data, though it lacks explicit security headers and incident response information. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Maze Creative

mazecreative.co.uk

61

Maze Creative is a small, remote creative agency specializing in branding and digital product design, operating studios in London and Valencia. The company offers a comprehensive range of services including creative direction, brand identity, UI/UX design, and no-code development. Their market position is that of a specialized boutique agency focused on long-term client relationships and delivering high-quality creative solutions. Technically, the website is built on modern web technologies including Webflow CMS, uses Google Analytics for visitor insights, and implements Google reCAPTCHA for bot protection. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies are not publicly documented. The absence of WHOIS data for the exact domain queried introduces some uncertainty regarding domain registration legitimacy, but the website content and client testimonials strongly indicate a legitimate business. Privacy compliance is partial, with cookie consent present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy with room for improvement in transparency and security documentation.

X

XO Life GmbH

impactmonitor.io

66

XO Life GmbH operates the brite™ platform, a unique meta-platform designed to provide digital product and therapy support for pharmaceutical and medical product companies. The platform serves as a one-stop-shop for digital treatment accompaniment, aiming to improve patient satisfaction, adherence, and engagement. The company targets pharma and medical product manufacturers, healthcare providers, and patients, positioning itself as an innovative leader in the European digital health market. The website is professionally designed, well-branded, and provides comprehensive information about the platform's benefits and partner ecosystem. Technically, the website leverages modern web technologies including Webflow CMS, jQuery, Google Tag Manager, and Microsoft Clarity for analytics, hosted likely behind Cloudflare infrastructure. The site is fast, mobile-optimized, and accessible, with strong SEO practices. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. From a security perspective, the site uses HTTPS and includes CAPTCHA protections on forms, but lacks explicit security headers and published security policies or incident response information. The absence of WHOIS data is a notable anomaly, raising questions about domain registration transparency, though the professional nature of the site and contact details support legitimacy. Overall, the site presents a low risk with good security posture and privacy compliance, but would benefit from enhanced security disclosures and verification of domain registration details.

H

Heureka Group a.s.

heurekadevs.cz

58

HeurekaDevs.cz is a professional technology blog and community platform operated by Heureka Group a.s., a leading e-commerce shopping advisor in Europe. The website focuses on sharing insights, experiences, and developments related to technology and product management within Heureka. It targets developers, product managers, and technology enthusiasts, providing articles, event announcements, and community engagement opportunities. The site is well-branded and consistent with the parent company's identity. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and the Didomi consent management platform. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security practices include HTTPS enforcement and cookie consent, but lack explicit security headers and published security policies. The security posture is solid but could be improved by adding security headers, incident response contacts, and vulnerability disclosure information. Privacy compliance is supported by a cookie consent banner and GDPR-related scripts, though no dedicated privacy policy page was found. The absence of WHOIS data limits domain legitimacy verification, which is a concern for trust but the website content and branding strongly align with the reputable Heureka Group. Overall, the website is professional, trustworthy, and well-maintained, but would benefit from enhanced transparency in privacy and security policies and domain registration data to improve trust and compliance assurance.

К

Кандидат

cndt.uz

24

The website 'Кандидат' offers an HR automation platform focused on recruitment process optimization, primarily targeting HR professionals and companies in Uzbekistan. It provides features such as vacancy management, resume processing, interview scheduling, and analytics, supported by a Telegram bot for candidates. The business operates on a subscription model with clear pricing tiers and emphasizes ease of use and automation benefits. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Swiper.js, with analytics via Yandex Metrika. The site is mobile-optimized and well-structured, though it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the domain registration aligns well with the business claims, indicating legitimacy. The site is safe for general audiences with no adult or questionable content.

C

Care for Innovation e. V.

careforinnovation.com

58

Care for Innovation e. V. is a German-based association focused on shaping the future of the healthcare and nursing sector through digital innovation. The organization acts as a network alliance connecting startups, scale-ups, and established partners across Europe to foster collaboration, pilot projects, and knowledge exchange. Their key services include organizing events such as CFI-Talks and the CESB Rütteltest, providing visibility for innovations, and representing members' interests politically. The website is professionally designed, primarily in German, and targets healthcare innovators and stakeholders in the European market. Technically, the site is built on Webflow CMS, uses modern web fonts, and is hosted on AWS Cloudfront CDN, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from improved transparency in domain registration and enhanced privacy compliance features.

R

Recisio

karaoke-version.com

68

Karaoke-Version.com is an established e-commerce platform specializing in downloadable instrumental and karaoke tracks, offering over 84,000 songs with customization features. The site targets karaoke enthusiasts and musicians globally, providing various product types including custom backing tracks, vocal backing tracks, video karaoke, and instrument-specific versions. The business is operated by Recisio, a company with a history dating back to 2004, positioning itself as a leading source in the karaoke music niche. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, hosted on a dedicated CDN infrastructure for optimal performance. The site is mobile-optimized with excellent design quality and user experience, supporting multiple languages and regional versions. SEO and accessibility practices are well implemented, contributing to strong digital maturity. From a security perspective, the site enforces HTTPS and displays secure payment logos indicating PCI compliance. However, it lacks visible security headers and a cookie consent mechanism, which are important for enhanced security and privacy compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest legitimacy. Overall, Karaoke-Version.com presents a professional and trustworthy platform with a solid business model and technical foundation. Strategic improvements in security headers, privacy consent, and domain registration transparency would further strengthen its security posture and compliance standing.

The website 60grattacielopirelli.org is a professionally designed cultural and institutional platform commemorating the 60th anniversary of the Pirelli skyscraper in Milan. It is curated by Fondazione Pirelli in collaboration with Regione Lombardia, offering digital storytelling, virtual exhibitions, and related publications. The site targets a general audience interested in architecture, history, and regional culture. Technically, it is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and moderate performance. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers and DNSSEC are missing. Privacy compliance is strong with clear cookie consent and linked privacy policies. However, no direct contact information or security policies are published, which could be improved. Overall, the site is trustworthy, well-branded, and serves its cultural mission effectively.

M

mégaphone-internet sàrl

megaphone-internet.ch

46

mégaphone-internet sàrl is a Swiss-based small technology company specializing in web creation and hosting services since 1995. The company targets associations and businesses in Switzerland seeking tailored digital solutions including website creation, e-commerce, content management, hosting, and email marketing. Their market position is that of a local artisan web service provider with a long-standing presence and a professional online presence. Technically, the website uses a modern but minimal tech stack including jQuery, Slick Carousel, and lazy loading with Lozad.js, delivering a good user experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong given the clear company information, physical address, and professional content. Overall, the website is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

MicroPayment.com is currently a parked domain sales landing page offering the premium domain name for sale. The site is brokered by AbdulBasit Makrani and targets domain investors or businesses interested in acquiring the domain. The business model is straightforward domain brokerage with inquiry via email, WhatsApp, or contact form. The website uses modern frontend technologies such as Bootstrap 5, jQuery, and Font Awesome, and integrates Google Analytics for visitor tracking. However, the content is minimal and primarily focused on domain sale inquiry. From a technical perspective, the site is moderately optimized with responsive design and basic SEO elements. The SSL configuration is excellent, enforcing HTTPS, but no advanced security headers were detected. The contact form includes a consent checkbox for data collection, indicating some privacy awareness, though no cookie policy or terms of service pages were found. Security posture is moderate but could be improved by adding security headers and explicit privacy and cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which lowers trust and legitimacy scores. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site is low risk with no adult or explicit content, but the lack of WHOIS data and minimal content limits business credibility. Strategic recommendations include improving security headers, adding comprehensive privacy and cookie policies, and clarifying domain registration status to enhance trust.

I

ISA-RACING

isa-racing.de

49

ISA-Racing is a German-based e-commerce retailer specializing in motorsport accessories and equipment, boasting over 45 years of experience in the motorsport industry. The website offers a broad catalog of more than 25,000 products from top brands, targeting motorsport enthusiasts, racing teams, and automotive professionals. The business model focuses on direct online sales complemented by personal consultation and a service hotline, positioning ISA-Racing as a trusted niche player in the motorsport retail sector. Technically, the website is built on a modern e-commerce platform, likely Shopware 6, utilizing contemporary JavaScript libraries such as jQuery and Bootstrap for responsive design. It integrates Usercentrics for cookie consent management and Trusted Shops for customer trust signals. The site is mobile-optimized and provides a good user experience with clear navigation and professional design, although SEO and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs consent management, but lacks visible security headers like Content-Security-Policy and HSTS, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business, but the absence of WHOIS registrant data and privacy policy pages slightly reduces its credibility. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would strengthen its risk posture and trustworthiness.

V

Venuro AG

venuro.com

65

Venuro AG is a Swiss company specializing in the manufacture of frameless sliding windows, combining precision engineering with advanced materials such as carbon fiber and fiberglass. Established in 1973, the company positions itself as a premium provider of architectural sliding masterpieces, targeting architects and discerning clients seeking innovative and aesthetically refined building solutions. The website reflects a high level of professionalism with rich multimedia content, clear branding, and a focus on craftsmanship and innovation. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as GSAP for animations and Swiper for sliders. It employs a cookie consent mechanism compliant with GDPR, integrates Google Analytics for visitor tracking, and is hosted on a reliable CDN infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in features. However, it lacks visible security headers and published security or incident response policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding strongly indicate a legitimate business. Overall, the security posture is good but could be improved with additional headers and formal policies. The overall risk assessment is moderate to low, with recommendations to enhance domain registration transparency, implement security headers, and publish incident response information to strengthen trust and compliance.

V

Virgin Money UK PLC

virginmoneyukplc.com

73

Virgin Money UK PLC operates as a financial services provider in the United Kingdom, offering a broad range of products including credit cards, mortgages, savings accounts, ISAs, investments, and insurance. The company positions itself as a fair and rewarding alternative to traditional banks, emphasizing social good and customer-centric values. The website reflects a mature corporate presence with dedicated sections for investor relations, corporate sustainability, and community engagement, indicating a well-established market position within the UK banking sector. Technically, the website employs modern web technologies such as jQuery, Adobe Dynamic Tag Manager, and Visual Website Optimizer for marketing and analytics purposes. Evidon consent management scripts ensure compliance with privacy regulations, and the site is mobile-optimized with good accessibility features. Performance is moderate, with a well-structured navigation system and professional design quality. From a security perspective, the site enforces HTTPS and integrates content security policies via Evidon scripts. However, explicit security headers like HSTS and X-Frame-Options are not visibly present in the HTML content. There is no publicly available incident response or vulnerability disclosure information, which could be improved to enhance transparency and trust. The absence of WHOIS data for the domain is a notable anomaly, though the website content and branding strongly suggest legitimacy. Overall, Virgin Money UK PLC's website demonstrates a strong business and technical foundation with good privacy compliance and user experience. Addressing minor security header gaps and publishing incident response details would further strengthen its security posture and trustworthiness.

2

2024 kerschbaumer group I Website by Kings & Cake Werbeagentur

kerschbaumer-trophies.at

56

Kerschbaumer Trophies is a specialized Austrian e-commerce retailer offering a wide range of trophies, medals, and personalized awards with engraving and printing services. The company targets sports clubs, associations, and individuals seeking customized trophies, positioning itself as a niche market leader in Austria. The website demonstrates a professional design with clear navigation and mobile optimization, leveraging modern web technologies such as jQuery, Bootstrap, and lazy loading for performance. Security posture is solid with HTTPS enforced and secure login forms, though it lacks explicit privacy and cookie policies, security headers, and incident response information, indicating areas for compliance improvement. WHOIS data confirms the legitimacy of the domain and business alignment. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

V

Virgin Money UK

virginmoneygiving.com

73

Virgin Money UK is a well-established financial services provider in the United Kingdom, offering a broad range of banking, savings, mortgages, investments, and insurance products. The Virgin Money Giving platform, which supported charity fundraising for over 12 years and raised more than £1 billion, was closed in November 2021. The website reflects a professional and consistent brand presence with comprehensive information about the closure and guidance for users. Technically, the site uses modern web technologies including jQuery, Adobe DTM, Evidon consent management, and Visual Website Optimizer, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS, Content Security Policy, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. The lack of WHOIS data for the subdomain reduces domain registration trust signals but does not detract from the overall legitimacy of the brand. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts.

C

Clearer.io

clearer.io

70

Clearer.io is a technology company specializing in providing advanced, easy-to-integrate applications aimed at enhancing product discovery and optimizing the customer journey for eCommerce businesses. Positioned as an innovative player in the eCommerce technology sector, Clearer.io offers solutions that increase conversions and reduce customer confusion, targeting B2B clients and partners. The website reflects a professional and consistent brand image with clear messaging and partner endorsements. Technically, the site is built on the Webflow platform, leveraging modern JavaScript libraries and animation frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the domain appears legitimate despite privacy-protected WHOIS data, with a strong compliance stance on privacy and user consent.

H

Haufe Group

rudolf.ai

60

The website rudolf.ai represents an AI initiative by the Haufe Group, a well-established German company specializing in legal and business software solutions. The platform focuses on integrating generative AI technologies to enhance user experience and automate routine tasks for professionals in HR, tax, and sustainability sectors. The site demonstrates a mature digital presence with modern technologies such as Webflow CMS, jQuery, and Google Tag Manager, combined with strong privacy and ethical guidelines around AI use. Security posture is solid with HTTPS, bot protection via FriendlyCaptcha, and exclusion of external crawlers, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a reputable business entity.

H

Haufe-Lexware GmbH & Co. KG

advolux.de

68

Haufe-Lexware GmbH & Co. KG operates the Advolux website, offering specialized legal practice management software tailored for law firms in Germany. The company is a subsidiary of Haufe Group SE, a well-established entity headquartered in Freiburg im Breisgau. Advolux provides a comprehensive suite of digital tools including document management, deadline tracking, and integration with the German electronic lawyer mailbox (beA), supporting both cloud and on-premises deployments. The website demonstrates a strong market position with professional branding, extensive feature descriptions, and customer testimonials, targeting legal professionals seeking efficient digital solutions.

A

Alfa Vienna Insurance Group Biztosító Zrt.

alfa.hu

59

Alfa Vienna Insurance Group Biztosító Zrt. is a Hungarian insurance company offering online insurance products and services. The company operates under the brand Alfa Biztosító and is part of the Vienna Insurance Group, a well-established European insurance conglomerate. The website targets Hungarian customers seeking convenient online insurance solutions, emphasizing quality service and fast processing. The business model focuses on direct online sales and customer engagement through digital channels. The company maintains a strong market position in Hungary's insurance sector with a large enterprise footprint. Technically, the website is built on WordPress CMS, utilizing modern technologies such as Bootstrap 5.3, jQuery 3.5.1, and FontAwesome 6.7.2 for UI elements. SEO is enhanced by the Yoast SEO plugin, and user experience is supported by Ajax Search Lite. The site is mobile-optimized and includes cookie consent management via CookieFirst, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerability disclosure or security.txt files were found. The absence of explicit privacy and terms of service pages in the provided content is a compliance gap. Overall, the security posture is moderate but could be improved with better header configurations and transparency. The overall risk assessment is low, with the website appearing legitimate and professionally maintained. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and providing clear incident response contacts to enhance trust and compliance.

S

Stadtmagistrat Innsbruck

innsbruck.at

61

The website www.innsbruck.at serves as the official digital presence for the city of Innsbruck, Austria, encompassing municipal services, tourism promotion, and marketing activities. It targets residents, visitors, and businesses, providing authoritative information and links to related official sites. The business model is governmental and tourism-oriented, positioning itself as a trusted source for local information and services. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. It integrates Matomo analytics for user tracking, reflecting a privacy-conscious approach. The site demonstrates good mobile optimization and user experience, though accessibility and SEO could be further enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No incident response or security policy information is published, indicating room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its governmental role. Strategic improvements in privacy compliance and security practices would enhance its risk posture and user trust.

H

Haufe Group

haufe.com

71

Haufe Group operates a comprehensive corporate website offering a wide range of digital knowledge, software, and consulting services primarily targeting HR, finance, legal, sustainability, and real estate sectors. The company is positioned as a market leader in the German-speaking corporate solutions market, providing both software products and educational services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, jQuery, and Usercentrics for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a mature digital presence with high trustworthiness and business credibility.

H

Haufe Group SE

haufegroup.com

57

Haufe Group SE is a leading B2B provider specializing in integrated business and workplace solutions, including content, software, and training services. The company targets enterprises and professionals primarily in Germany, positioning itself as a key player in the technology sector. The website reflects a mature, professional brand with clear leadership and subsidiary information, supporting its market position. Technically, the site is built on modern web technologies such as Webflow CMS, jQuery, and Swiper.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS, consent management, and encrypted communication options, though some security headers and incident response details could be improved. Overall, the domain appears legitimate despite missing WHOIS registration details, and the site demonstrates strong privacy compliance and business credibility.

B

Bonus Systems Polska S.A.

upbonus.pl

56

Bonus Systems Polska S.A., operating the Up Bonus platform, provides modern motivational and employee benefit solutions primarily targeting HR departments, marketing and sales teams, business partners, and end users in Poland. Their offerings include lunch cards, cafeteria systems, prepaid cards, gift baskets, and benefit management platforms, positioning them as a medium-sized B2B service provider with a solid client base including notable brands like Santander and Geberit. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive content about their services. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is provided by Webflow, ensuring fast performance and good accessibility. Privacy and cookie policies are present and implemented with a consent mechanism, reflecting good GDPR compliance practices. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces transparency and trustworthiness, though the professional presentation and business information mitigate some concerns. Overall, the website demonstrates a mature digital presence with strong business credibility and good technical implementation. Strategic improvements include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

S

Sportstiftung Hessen

sportstiftung-hessen.de

57

Sportstiftung Hessen is a regional non-profit foundation dedicated to supporting young athletes and trainers in the Hessen region of Germany. The foundation provides financial aid, scholarships, and advisory services to foster athletic talent, focusing on Olympic, Paralympic, Deaflympic, Special Olympics, and World Games disciplines. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies including Webflow CMS, Usercentrics for consent management, and accessibility tools like eyeAble. The content is primarily in German and targets athletes, trainers, and sports supporters within Hessen. Security posture is strong with HTTPS enforced and GDPR compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, accessible, and aligned with its mission to promote sports excellence in Hessen.

2

2024 kerschbaumer group I Website by Kings & Cake Werbeagentur

kerschbaumer-trophies.com

50

Kerschbaumer Trophies operates an e-commerce platform specializing in high-quality trophies, medals, and personalized awards primarily targeting sports clubs and organizations in Austria and German-speaking regions. The website offers a broad catalog of products including glass, acrylic, wooden trophies, and specialty trophies by sport, with custom engraving and printing services. The business positions itself as a niche leader with a focus on quality and personalized service, supported by trust signals such as official membership in the Austrian Federal Fire Brigade Association. Technically, the website is built on the JTL Shop platform, leveraging modern JavaScript libraries and Bootstrap for responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS and secure forms, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not currently impact the operational status of the site. Overall, the site is professional, trustworthy, and well-optimized for its market segment.

R

Recisio

karaoke-version.de

63

Karaoke-Version.de is a German-based e-commerce platform specializing in downloadable karaoke and instrumental music tracks, including custom backing tracks and karaoke videos. The site is operated by Recisio, an established company since 2004, offering a large catalog of over 84,000 instrumental playbacks. The platform targets karaoke enthusiasts and musicians seeking personalized music tracks. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, hosted on Recisio's CDN infrastructure, delivering fast and mobile-optimized user experiences. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding explicit security headers and cookie consent mechanisms. Privacy and terms policies are comprehensive and GDPR compliant, but direct contact emails and phone numbers are not publicly listed, relying on contact forms instead. Overall, the site demonstrates a mature digital presence with good business credibility and trustworthy domain registration.

J

Jaccede

jaccede.com

51

Jaccede is a small, collaborative platform dedicated to improving accessibility information for public places, primarily targeting people with reduced mobility and related communities. The website currently displays a paused state message indicating a phase of reinvention and invites community and partner engagement. The platform operates on Webflow and uses Cloudflare services for DNS and CDN, with a moderate technical infrastructure. The website content is minimal but relevant, with no privacy or cookie policies present, and contact is limited to a single email address. Security posture is basic, with domain protections in place but lacking DNSSEC and security headers. Overall, the site is legitimate and consistent with its stated mission but requires improvements in privacy compliance and security best practices.

J

JuBla Sissach

jubla-sissach.ch

52

JuBla Sissach is a well-established non-profit youth organization operating in the German-speaking region of Switzerland. The organization focuses on providing leadership opportunities for young adults and organizing events, camps, and activities for children and youth. Their market position is strong as one of the largest Catholic youth associations in the region, emphasizing community engagement and outdoor experiences. The website effectively communicates their mission and services, targeting families and youth interested in social and recreational activities. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI enhancement libraries, hosted likely on a Swiss cloud provider. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. The site uses HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates good baseline practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks advanced security headers and formal security policies or incident response information. Privacy compliance is supported by a comprehensive privacy policy document, but cookie consent mechanisms are missing. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with a solid business credibility and trustworthy domain registration. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

B

baoo Technologies GmbH

yourhomie.ai

63

homie AI, operated by baoo Technologies GmbH, is a modern SaaS platform providing AI-powered chat assistants designed to enhance customer communication and sales conversion for online retailers and enterprises. The platform emphasizes quick integration, GDPR compliance, and enterprise readiness, positioning itself as a trusted solution for European retail businesses. The website content is professional and well-structured, targeting online shops seeking AI-driven customer support and upselling capabilities. Technically, the website is built on Webflow CMS with integrations including Google Fonts and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. From a security and compliance perspective, the site claims GDPR compliance and hosts data within the EU. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. WHOIS data shows privacy protection usage, consistent with a new tech startup founded in 2024, and domain registration aligns with the business timeline. Overall, homie AI presents a credible, professional online presence with room for improvement in security headers, cookie consent, and incident response transparency. The risk level is low, but addressing these gaps will strengthen trust and compliance.

S

Sven Röhler

roehler.ch

26

The website roehler.ch serves as a personal and professional wiki and documentation platform managed by Sven Röhler, focusing on IT solutions and services primarily for small and medium enterprises (KMU) and private users in Switzerland. The site provides extensive technical content, guides, and links related to Linux, Windows, programming, and IT infrastructure. The market position is niche and local, with a focus on knowledge sharing and IT consultancy. Technically, the site is built on CMSimple 5.12 with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic, with no HTTPS enforcement or security headers detected, and no published privacy or cookie policies, which are critical gaps. No contact information or incident response channels are provided, limiting user trust and compliance. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and professional contact transparency to enhance trust and compliance.

F

Famulus Verpackungen Horst GmbH

famulus.de

55

Famulus Verpackungen Horst GmbH is a well-established German company specializing in the production and sale of gift packaging and related products. With a history dating back to 1874 and over 150 years of family business experience, the company holds a leading market position in presentation cartons and packaging solutions, primarily serving B2B customers such as wine and sparkling wine producers and retailers. Their business model combines e-commerce with wholesale distribution, supported by a comprehensive product catalog and custom printing services. Technically, the website is built on the Shopware e-commerce platform, utilizing modern web technologies including jQuery and various Shopware plugins. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is provided by Timme Hosting, with secure HTTPS connections and no detected blocking mechanisms. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, but lacks explicit security headers and published security or incident response policies. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and functional, but could improve privacy compliance and security transparency to enhance user trust and regulatory adherence.

2

24H Series - Welcome to the world of endurance!

24hseries.com

65

The website www.24hseries.com serves as an informational platform dedicated to endurance racing events, targeting motorsport enthusiasts and fans of endurance series. It provides race updates, championship details, galleries, and newsletters, positioning itself as a niche sports event information site. The technical infrastructure includes modern JavaScript libraries such as jQuery and a cookie consent management system (Cookiebot), indicating a moderate level of digital maturity. The site is accessible over HTTPS and implements basic security practices such as CSRF token usage and cookie consent banners. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Additionally, the lack of privacy policy, terms of service, and contact information limits the site's compliance and trustworthiness. Overall, the site is functional and professionally designed but requires improvements in legal disclosures and security headers to enhance its security posture and compliance.

L

Lexware (implied from URLs and branding)

quicksteuer.de

62

QuickSteuer.de is a German website offering tax declaration software targeted at private individuals seeking a fast and easy way to file taxes. The site is professionally designed, leveraging modern web technologies such as Webflow CMS, jQuery, and integrates Google Tag Manager and Usercentrics for analytics and privacy compliance. The business is positioned as an established player with over 25 years of experience and strong trust signals including TÜV Saarland and Chip magazine certifications. The website is fully accessible with no blocking or WAF challenges detected, and it demonstrates good privacy and cookie consent mechanisms. However, direct contact information and explicit security policies are not published, which could be improved to enhance trust and compliance.

A

axapharm ag

diabetes-care.ch

51

The website www.diabetes-care.ch represents axapharm ag's Healthpro brand, specializing in diabetes care products such as blood glucose meters, test strips, lancets, and related accessories. The company positions itself as a niche healthcare provider offering modern, user-friendly devices with features supporting effective diabetes management. The site targets individuals managing diabetes and healthcare professionals seeking reliable measurement tools. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and Google Analytics for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a valid SSL certificate and anonymizes IPs in Google Analytics, but lacks some security headers and displays minor PHP notices, which could expose information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is comprehensive and transparent, enhancing business credibility. Overall, the site is trustworthy and professionally maintained but would benefit from addressing minor security and privacy gaps.

D

Distribution Innovation

di.no

61

Distribution Innovation is a Nordic technology company specializing in logistics and distribution solutions, focusing on parcel and print media logistics. The company offers software products that enhance logistics efficiency for businesses delivering products to consumers, with a strong presence in Norway, Sweden, and Finland. Their solutions cover distribution execution and planning, supporting a network of over 15,000 couriers and powering major newspaper deliveries in the region. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, Google Tag Manager, and reCAPTCHA for security. The site is well-optimized for performance and mobile devices, with good SEO practices and a professional design. Analytics are implemented via Google Analytics with IP anonymization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks several important security headers and explicit incident response or security policy disclosures. Privacy compliance is partially addressed with a privacy and cookie policy, though no explicit cookie consent mechanism is present. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for businesses in this sector. Overall, the website presents a professional and trustworthy front for a medium-sized Nordic logistics technology company. Strategic improvements in security headers, privacy mechanisms, and transparency around incident response would enhance their security posture and compliance standing.

S

Scalenut

scalenut.com

69

Scalenut is a technology company specializing in AI-powered SEO and content marketing solutions. Their platform offers a unified suite of tools designed to help marketers plan, create, optimize, and track content performance across AI search engines and traditional search platforms. With a user base exceeding one million and endorsements from major global brands, Scalenut positions itself as a leader in the AI-SEO space, combining advanced AI capabilities with expert-led services to deliver measurable growth in organic traffic and brand visibility. Technically, Scalenut leverages modern web technologies including Webflow CMS, Google Analytics, Microsoft Clarity, and various marketing and tracking integrations. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. The use of multiple analytics and tracking tools indicates a data-driven approach to marketing and user engagement. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive information. However, it lacks explicit security policies and incident response contact details, which are recommended for enhanced trust and compliance. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is common for SaaS providers. Overall, Scalenut demonstrates a strong business and technical foundation with high-quality content and user experience. Strategic improvements in security transparency and WHOIS data disclosure could further enhance trustworthiness and compliance posture.

E

Eelume AS

eelume.com

68

Eelume AS is a Norwegian technology company specializing in the development of All-Terrain Autonomous Underwater Vehicles (AUVs) and advanced marine cybernetics. Their products, including the S-Series and M-Series AUVs and underwater hyperspectral imagers, serve sectors such as energy, defense, research, and underwater exploration. The company positions itself as an innovative leader in marine technology, focusing on sustainable and cost-effective oceanic data collection and seabed mapping. The website reflects a professional and consistent brand image with comprehensive product information and a clear target audience of marine professionals and organizations. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google reCAPTCHA Enterprise for form security and Cloudflare services for hosting and CDN. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, explicit security headers are not visibly implemented, and there is no cookie policy or terms of service page detected, which are areas for improvement. From a security perspective, the site uses HTTPS and integrates advanced bot protection on its contact form, indicating a good baseline security posture. The absence of WHOIS registration details suggests privacy protection, common for tech companies, but reduces transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance by adding cookie consent mechanisms, publishing terms of service, and enhancing security headers. These steps will strengthen trust and compliance with data protection regulations. The website is professional, trustworthy, and well-suited for its business purpose, with minor technical and compliance improvements recommended.

R

Robert-Enke-Stiftung

robert-enke-stiftung.de

59

The Robert-Enke-Stiftung is a German non-profit foundation dedicated to promoting open dialogue about depression and other mental illnesses, as well as supporting suicide prevention projects. The website reflects a strong commitment to mental health awareness through educational initiatives, social engagement opportunities, and partnerships with prominent sports organizations. The foundation targets a broad audience including individuals affected by mental health issues, students, and the sports community. The business model is centered on non-profit activities, fundraising, and community outreach. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Lottie animations, and SVG graphics. It is hosted on a CDN ensuring fast performance and excellent mobile optimization. The site includes a cookie consent mechanism compliant with GDPR, enhancing privacy compliance. Navigation is clear and content is professionally presented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses a cookie consent banner, but lacks explicit security policy pages or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistent domain registration with no suspicious patterns, supporting the legitimacy of the organization. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a non-profit organization focused on sensitive health topics. Strategic improvements could include publishing a dedicated security policy, vulnerability disclosure information, and enhancing security headers to further strengthen the security posture.

Studierendenwerk Thüringen is a public law institution dedicated to supporting students in Thuringia, Germany, by providing essential services such as student housing, university dining facilities, financial aid administration, counseling, and cultural programs. The organization serves multiple universities in the region and is a key player in the local education support ecosystem. The website reflects a well-structured and professional digital presence with clear navigation and comprehensive service information tailored to its student audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and ConsentFriend for cookie management, hosted on Robhost servers. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner adhering to GDPR requirements. Overall, the site is trustworthy, accessible, and professionally maintained, supporting the organization's mission effectively.