Security Directory

B

Bike-Arena

bikearena.cz

44

Bike-Arena is a specialized retail business based in Příbram, Czech Republic, focusing on the sale and servicing of bicycles, electric bikes, and cycling accessories. The company operates both an e-commerce platform and a physical store, offering additional services such as bike rental, maintenance, and test rides. Their market position is that of a regional expert catering to recreational, sport, and competitive cyclists. The website is well-structured, professionally designed, and provides comprehensive product and service information targeted at cycling enthusiasts. Technically, the website employs modern JavaScript libraries including jQuery, jQuery UI, and Select2, alongside Google Tag Manager and analytics tools. It is mobile-optimized with responsive design and includes cookie consent mechanisms aligned with GDPR requirements. The site uses HTTPS, ensuring encrypted communications, but lacks some recommended HTTP security headers which could enhance protection. From a security perspective, the site demonstrates good practices such as secure login forms and consent management but does not publish explicit security policies or incident response contacts. The absence of WHOIS data reduces transparency slightly but is mitigated by clear business contact information and a physical address. No critical vulnerabilities or exposed sensitive data were detected. Overall, Bike-Arena presents a trustworthy and professional online presence with moderate technical maturity and a solid security posture. Strategic improvements in security headers and transparency around security policies would further strengthen their risk profile.

S

Smartim, s.r.o.

smartim.cz

46

Smartim, s.r.o. is a Czech Republic-based small business specializing in comprehensive online marketing services including SEO, PPC, web design, social media marketing, and analytics. With over 14 years of experience, they serve businesses seeking to improve their online presence and marketing effectiveness. The website is professionally designed, content-rich, and well-structured, targeting primarily Czech businesses. Technically, the site uses modern JavaScript libraries such as jQuery and AOS for animations, and integrates Google Tag Manager and LinkedIn Insight for marketing analytics. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and explicit incident response policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and detailed contact information support legitimacy. Overall, the site is a credible and effective marketing platform with room for security enhancements.

H

HFO Health Facility Operations Services GmbH

vamed-gesundheitsberufe.at

51

The website www.vamed-gesundheitsberufe.at represents the career portal for the healthcare facilities operated by VAMED care in Austria. The company operates a large network of 24 healthcare facilities including rehabilitation centers, nursing homes, acute care, and occupational health services, positioning itself as a leading healthcare provider in Austria. The site targets healthcare professionals and job seekers interested in careers within these facilities. The business model focuses on healthcare service provision and workforce recruitment within Austria's healthcare sector. Technically, the website employs modern JavaScript libraries such as jQuery and Modernizr, uses Matomo for privacy-conscious analytics, and is mobile optimized with good accessibility and SEO practices. The site is served over HTTPS, though lacks some advanced security headers which could improve its security posture. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. However, the absence of WHOIS data for the domain reduces trust signals and raises questions about domain registration transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance security readiness. Overall, the website is professional, content-rich, and trustworthy from a user perspective, but the lack of WHOIS data and some missing security headers suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and clarifying domain registration details to improve trust and compliance.

H

HFO Health Facility Operations Services GmbH

vamed-care.at

50

The website www.vamed-care.at represents the healthcare facilities of VAMED care Austria, operated by HFO Health Facility Operations Services GmbH. It showcases a network of 24 healthcare and rehabilitation centers across Austria, emphasizing medical and therapeutic excellence with a patient-centered approach. The site targets patients, healthcare professionals, and potential employees, offering comprehensive information about their services, locations, and corporate values. The business model focuses on providing integrated rehabilitation and medical care with a strong emphasis on quality and patient safety. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, with a Matomo Tag Manager for analytics, indicating a privacy-conscious approach. The site is mobile responsive, well-structured, and optimized for accessibility and SEO. However, no CMS or hosting provider details are explicitly detected. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. No explicit security headers were detected in the HTML source, and there is no visible vulnerability disclosure or incident response contact information. The absence of WHOIS data for the domain reduces trust slightly, but the professional presentation and comprehensive contact details support legitimacy. Overall, the website is a professional, trustworthy digital presence for a large healthcare provider in Austria. Strategic improvements in security headers and incident response transparency would enhance its security posture and compliance.

C

Cushman & Wakefield

cushmanwakefield.com

66

Cushman & Wakefield is a global leader in commercial real estate services, offering a broad portfolio of services including agency leasing, asset services, capital markets, tenant representation, and valuation. Founded in 1917 and headquartered in Chicago, the company operates at an enterprise scale with a workforce of approximately 52,000 employees. The website reflects a mature digital presence with comprehensive content, strong branding, and global reach. Technically, the site uses modern technologies such as jQuery, Google Tag Manager, Vidyard, and Coveo search, and is likely built on the Sitecore CMS platform. Security posture is solid with HTTPS and Content-Security-Policy headers, though some advanced security headers and explicit vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with cookie consent and privacy policies aligned with GDPR. The WHOIS data is unavailable, which limits domain registration trust analysis, but the overall site professionalism and market presence strongly indicate legitimacy.

Poznej Příbram is the official tourism portal for the city of Příbram, Czech Republic, providing comprehensive information on local attractions, cultural events, restaurants, accommodations, and outdoor activities. The website targets tourists, families, and culture enthusiasts, positioning itself as a key regional resource supported by the municipal government. Technically, the site employs modern JavaScript libraries such as jQuery, Flatpickr, and Google Maps API to deliver interactive features including a trip planner and event calendar. The site is mobile-optimized with good navigation and content relevance, though some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a government tourism site. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements, though it could benefit from improved security headers and clearer contact information.

Actu 77 s.r.o. is a Czech Republic based small technology service provider specializing in Joomla CMS programming, IT consulting, and hosting management. The company has been operating since 2003 and offers a range of services including custom software development, hosting configuration, Windows OS consulting, and graphic design. The website reflects a professional business with clear contact information and a portfolio of partner sites, positioning it as a niche player in the Joomla CMS support market. Technically, the website uses modern frontend technologies such as Bootstrap 5, jQuery, Video.js, and Redactor editor, and integrates Google Analytics for user tracking. The site is mobile optimized with moderate performance and basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacking security headers and explicit privacy or cookie policies. WHOIS data confirms domain legitimacy and consistency with the business information presented on the site.

B

Bike-Arena

bike-arena.cz

44

Bike-Arena is a specialized retailer and service provider for bicycles and e-bikes located in Příbram, Czech Republic. The company offers a broad range of products including bicycles from brands like Trek, Giant, and Maxbike, alongside accessories, rentals, and maintenance services. Their business model combines e-commerce with a physical storefront, targeting cycling enthusiasts and local customers. The website is well-structured, providing clear navigation, product categories, and informative blog content to engage visitors. Technically, the website employs modern JavaScript libraries such as jQuery, jQuery UI, and Select2, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS with good SSL configuration, ensuring secure data transmission. Cookie consent mechanisms are implemented, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices including secure login forms and consent management. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the professional presentation and contact transparency support legitimacy. No signs of WAF or content blocking were found, allowing full content access. Overall, Bike-Arena presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would further enhance their security posture and trustworthiness.

H

HFO Health Facility Operations Services GmbH

vamed-care.com

45

VAMED care operates a network of over 60 healthcare facilities across Germany, Austria, Switzerland, and the Czech Republic, specializing in acute medical care, rehabilitation, nursing, and prevention. With a workforce exceeding 13,000 employees, the organization emphasizes medical and therapeutic excellence, aiming to improve patient well-being and quality of life. The website reflects a professional healthcare provider targeting patients, medical professionals, and potential employees, offering detailed information about services and career opportunities. Technically, the website employs modern web technologies including jQuery 3.6.0 and custom JavaScript for interactive features such as cookie consent management and image sliders. The site is mobile-optimized with good SEO practices and a clear navigation structure. However, no CMS or hosting provider details are evident, and no advanced frameworks are detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and explicit incident response or security policy disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and professional. Overall, the website presents a trustworthy and professional healthcare service provider but would benefit from enhanced transparency in domain registration, improved security headers, and clearer contact information for security and compliance inquiries.

K

Kovohutě Příbram

kovopb.cz

41

Kovohutě Příbram is a Czech company specializing in the recycling of lead, precious metals, electronic waste, and lithium batteries, alongside manufacturing lead and tin-based products. The company holds a significant regional position in the recycling and manufacturing sectors, serving both businesses and individuals with a broad product and service portfolio. The website is built on WordPress with modern plugins and technologies, offering good content quality and user experience. Security posture is adequate with HTTPS and cookie consent implemented, though improvements are needed in privacy policy publication and security headers. The absence of WHOIS data limits domain trust assessment but does not detract from the professional presentation and business credibility. Strategic recommendations include enhancing privacy compliance and security best practices to strengthen overall trust and compliance.

S

Sportovní zařízení města Příbram

juniorklubpribram.cz

39

Junior Klub Příbram is a local multi-genre cultural club located in Příbram, Czech Republic, offering a variety of events including concerts, lectures, theatre, and children's activities. The club also provides venue rental services for corporate and private events. The website reflects a community-focused business model targeting a broad audience including families and local residents. The site is professionally designed with good content quality and clear navigation, supporting mobile responsiveness and basic accessibility. Technically, the site uses jQuery and custom JavaScript with CSS styling, served over HTTPS with a valid SSL certificate, but lacks advanced security headers and detailed security policies. Privacy compliance is addressed with a cookie consent mechanism and a basic privacy policy page, indicating awareness of GDPR requirements. However, the absence of WHOIS data and explicit company contact emails or phone numbers slightly reduces business credibility. Overall, the site is trustworthy and functional but could improve in security posture and transparency.

A

ARSY line, s.r.o.

webproskoly.cz

57

ARSY line, s.r.o. operates the website www.webproskoly.cz, providing specialized web hosting and content management solutions tailored for Czech primary and kindergarten schools. The company offers a subscription-based model with no upfront investment, focusing on modern, accessible, and legislatively compliant web platforms. Their services include modules for photo galleries, news updates, event calendars, and integration with school meal systems, targeting educational institutions in the Czech Republic. The website demonstrates a professional and consistent brand presence with strong customer testimonials and clear contact information. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, and proprietary CMS components. It is optimized for mobile devices and accessibility, with good SEO practices and performance. The site uses HTTPS and consent-based cookie management, reflecting a good security posture, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with HTTPS enforcement and CAPTCHA on forms, but lacks explicit published security policies or incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website is a well-executed niche educational service platform with good technical and security practices, though improvements in transparency around security policies and WHOIS data availability would enhance trust and compliance.

M

MK Fruit s.r.o.

mkfruit.cz

44

MK Fruit s.r.o. is a well-established Czech wholesale company specializing in fresh fruit, vegetables, and dairy beverages. The company maintains strong partnerships with domestic and EU growers and serves a diverse clientele including hospitals, schools, and retail chains. Their business model emphasizes high-quality fresh produce combined with comprehensive logistics and customer service. The website reflects a professional digital presence built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. Security measures include HTTPS, reCAPTCHA on forms, and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site is trustworthy and compliant with privacy regulations, supporting the company's credibility in the retail sector.

C

Conseil de la protection sociale des indépendants (CPSTI)

secu-independants.fr

50

The Conseil de la protection sociale des indépendants (CPSTI) website serves as an official French government portal dedicated to providing social protection services for independent workers. It offers comprehensive information and services related to social contributions, health reimbursements, retirement planning, mediation for disputes, and social aid. The site is well-positioned as a trusted intermediary between independent workers and major social institutions such as Urssaf, Ameli, and Assurance Retraite. The target audience is clearly defined as independent workers in France, and the business model revolves around public service and support.

C

Centrum pro rodinu a sociální péči z. s.

prorodiny.cz

54

Centrum pro rodinu a sociální péči z. s. is a well-established non-profit organization based in Ostrava, Czech Republic, dedicated to supporting families, relationships, individuals with disabilities, caregivers, and seniors. The organization offers a broad range of services including counseling, education, social support, and community engagement, with a strong focus on inclusivity and social welfare. Their website reflects a mature digital presence with rich content, active event calendars, and social media integration, positioning them as a trusted local entity in the social care sector. Technically, the website employs modern JavaScript libraries and Google Analytics with consent management, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern that slightly impacts trustworthiness, though the website content and social presence strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving its target audience effectively.

S

siri-tec

siri-tec.ch

57

siri-tec.ch is a small Swiss company specializing in event technology services including lighting, sound, acoustics, video technology, project management, rental, sales, and repair services. The company also offers exclusive restoration and repair of Technics SL-1210MK2 / SL-1200MK2 turntables. The website targets event organizers and technical professionals primarily in Zurich, Switzerland. The business model is service-oriented with a regional focus and a niche in high-quality event technology and repair services. Technically, the website uses a simple tech stack including jQuery and p5.js for interactive elements. The site has basic SEO and mobile optimization but lacks advanced accessibility features. No CMS or hosting provider information is evident. Performance is moderate with no major technical issues detected in the HTML content. From a security perspective, the website lacks visible security headers and does not display privacy or cookie policies, which impacts compliance and trust. No incident response or security contact information is provided. There is no evidence of tracking or analytics services, which reduces privacy concerns but also limits business intelligence capabilities. The site appears safe with no adult or questionable content. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and enhanced technical modernization to increase trust and user experience.

F

FUN CONNECTION | Bergsportschule

func.at

39

Fun Connection is a small regional mountain sports school based in Tirol, Austria, specializing in adventure activities such as canyoning, climbing, high ropes courses, biking, freeride, and school and corporate events. The website is professionally designed using WordPress and WooCommerce, supporting multilingual content and providing clear contact information and social media presence. The technical infrastructure includes modern plugins and analytics tools like Matomo, with HTTPS enforced and cookie consent implemented, reflecting good privacy compliance. Security posture is moderate with room for improvement in security headers and regular plugin updates. Overall, the website presents a trustworthy and professional business with a clear focus on outdoor adventure tourism.

F

FUN CONNECTION GMBH

fun-construction.at

45

FUN CONNECTION GMBH operates the website fun-construction.at, specializing in playground construction, climbing path building, and outdoor fun parks primarily in Tirol, Austria, and Bavaria, Germany. The company positions itself as a regional expert with over three decades of experience, offering services such as Spielplatzbau, Niederseilgartenbau, Klettersteigbau, and wood construction. The website is content-rich, professionally designed, and targets municipalities, schools, and families seeking specialized outdoor recreational construction services. Technically, the site is built on WordPress with modern plugins like Slider Revolution and Fusion Builder, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. WHOIS data confirms the legitimacy and consistency of the business registration with the website claims. Overall, the site demonstrates a mature digital presence with room for security and compliance enhancements.

F

Ferienhof Gassner

ferienhof-gassner.at

37

Ferienhof Gassner is a small family-run organic farm located in Mondsee, Austria, offering modern holiday apartments with scenic lake views and recreational amenities such as a heated pool and playground. The website targets families, singles, and seniors seeking a nature-oriented vacation in the Salzkammergut region. Technically, the site is built on WordPress with popular plugins like WPBakery and Slider Revolution, and it supports multiple languages via Google Translate. The site is moderately optimized for performance and mobile devices, with good SEO practices. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and formal security policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and suitable for its hospitality business purpose.

Praxis Frauenarzt Dr. Stierle is a specialized gynecology and obstetrics medical practice located in Salzburg, Austria. The practice offers comprehensive healthcare services including pregnancy care, preventive examinations, fertility counseling, and menopause management. The website positions the practice as a trusted local provider serving all insurance types with a focus on patient care throughout all life phases. The digital presence is professional, with clear service descriptions and contact information, targeting women seeking gynecological services in Salzburg. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site reflects a legitimate, trustworthy medical practice with no signs of blocking or malicious activity.

S

SportClinic Zurich

sportclinic.ch

62

SportClinic Zurich is a specialized healthcare provider focusing on sport surgery and sport medicine services in Zurich, Switzerland. The clinic operates multiple physical locations across Zurich, offering a comprehensive range of treatments including physiotherapy, rehabilitation, diagnostics, and medical consultations. The website is professionally designed, well-structured, and targets patients seeking specialized sport medicine care. Technically, the site uses modern JavaScript libraries such as jQuery and Flatpickr, integrates Google Maps for location display, and is built on the PC3 CMS platform. Security-wise, the site enforces HTTPS, includes a cookie consent mechanism compliant with GDPR, and does not expose sensitive data. However, formal security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

I

Il Giornale d'Italia

ilgiornaleditalia.it

69

Il Giornale d'Italia is a national Italian news media outlet providing real-time news and video content covering politics, economy, culture, sports, and more. The website targets Italian-speaking audiences interested in comprehensive news coverage. It operates primarily on an advertising revenue model with a strong presence on major social media platforms. Technically, the site uses a mix of modern and legacy web technologies including jQuery, Bootstrap 3, and Google Analytics, indicating moderate digital maturity. The site is mobile responsive to a basic degree and implements cookie consent mechanisms to comply with GDPR. Security posture is good with HTTPS enforced and no major vulnerabilities detected, though some legacy libraries and lack of advanced security headers suggest room for improvement. Overall, the website is safe, professional, and trustworthy with moderate business credibility and good content quality.

C

Culligan Suomi

culligan.fi

53

Culligan Suomi is a specialized provider of tailored water and coffee solutions for workplaces including offices, schools, hospitals, and restaurants in Finland. The company offers environmentally friendly water dispensers featuring advanced purification technologies such as Firewall® UV-C and BioCote® protection. Their market position is strong within the Nordic region, supported by a comprehensive product portfolio and ongoing service and maintenance offerings. The website reflects a mature digital presence with modern technologies and good SEO practices. Security posture is solid with HTTPS enforcement and use of reputable analytics and marketing tools, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a professional and trustworthy business with moderate to high digital maturity.

C

Culligan Norge

culligan.no

55

Culligan Norge is a professional B2B provider specializing in water dispensers and coffee machines tailored for workplaces such as offices, schools, hospitals, and restaurants in Norway. The company emphasizes environmentally friendly and technologically advanced solutions, including UV-C water purification and antimicrobial surface protection. Their market position is strong with over 5000 business customers and a broad product portfolio supported by installation and maintenance services. Technically, the website is built on WordPress with modern frameworks and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates professionalism, trustworthiness, and compliance with privacy regulations, making it a credible digital presence for the business.

C

Culligan Estonia OU

culligan.ee

56

Culligan Estonia OU operates a professional website focused on providing high-quality water supply and filtration solutions to businesses and households in Estonia. The company positions itself as a trusted partner offering consultation, installation, maintenance, and product delivery services. The website reflects a regional market presence with consistent branding and clear business messaging. Technically, the site is built on WordPress using modern technologies such as Bootstrap, jQuery, and integrates analytics and marketing tools like Piwik PRO, Google Tag Manager, and OneTrust for cookie consent. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy page. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile use.

C

Culligan Latvia SIA

culligan.lv

56

Culligan Latvia SIA operates as a trusted provider of high-quality water treatment solutions, specializing in water softening, filtration, and purification systems for both residential and commercial customers in Latvia. The company positions itself as a reliable partner offering personalized consultation, equipment installation, and ongoing maintenance services. The website reflects a professional and consistent brand presence, targeting businesses and households seeking water quality improvements. Technically, the site is built on WordPress with modern frameworks and plugins, including Contact Form 7 and Yoast SEO, and integrates advanced analytics and marketing tools such as Piwik PRO and Google Tag Manager. The site is mobile-optimized and includes a comprehensive cookie consent mechanism via OneTrust, demonstrating good privacy compliance practices. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks explicit security policies or vulnerability disclosure mechanisms. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

C

Culligan Middle East

culliganmiddleeast.com

59

Culligan Middle East is a professional water solutions provider specializing in hydration products and services for businesses and homes across the Middle East. Their offerings include advanced water coolers, filtration systems, bottled water delivery, and maintenance services, supported by innovative technologies such as Firewall® UVC purification and BioCote® antimicrobial surfaces. The website demonstrates a strong market position with a large customer base and trusted brand presence. Technically, the site is built on WordPress with modern frameworks and includes comprehensive SEO and tracking implementations. Security posture is good with HTTPS and secure forms, though some security headers and policies could be improved. Overall, the site is well-designed, user-friendly, and trustworthy, though domain WHOIS transparency is lacking, which slightly impacts trust. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and improving WHOIS transparency where possible.

C

Culligan Australia

culligan.com.au

58

Culligan Australia is a well-established provider of hydration solutions, offering a wide range of water dispensers, filtration systems, and related services tailored for businesses and homes across Australia. The company positions itself as a trusted innovator with a strong commitment to sustainability and hygiene, serving over 6 million households and 3.5 million offices globally. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and analytics integrations. Security posture is solid with HTTPS and reCAPTCHA implementations, though explicit privacy and cookie policies are not detected, indicating room for compliance improvement. Overall, the site demonstrates a mature business with a strong market position and good technical infrastructure.

C

Culligan Water (Ireland) Ltd

culligan.ie

58

Culligan Water (Ireland) Ltd operates a professional website offering a comprehensive range of hydration solutions including bottled water coolers, mains-fed water coolers, flavoured water dispensers, instant taps, and more. The company targets businesses and homes in Ireland, providing flexible rental plans, maintenance, and nationwide delivery. The website reflects a strong market position with clear branding, customer testimonials, and sector-specific offerings. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced analytics and marketing tools such as Google Tag Manager, Piwik PRO, and Visual Website Optimizer. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers could be improved. Privacy compliance is partial with cookie consent present but no visible privacy or terms of service pages in the provided content. Overall, the site is professional, user-friendly, and trustworthy, though WHOIS data is unavailable, limiting domain trust verification.

C

Culligan Belgium

culligan.be

61

Culligan Belgium operates as a regional provider of water treatment solutions, specializing in water coolers, water softeners, and filtration systems for both residential and business customers. The company maintains a professional online presence with a well-structured website optimized for multiple languages and regions within Belgium. Their market position is supported by consistent branding and a clear focus on water-related products and services. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as HubSpot, Google Analytics, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and use of reCAPTCHA, although some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility, with no signs of malicious activity or content blocking.

C

Culligan Polska

culliganwoda.pl

62

Culligan Polska is a newly established company (2024) specializing in providing high-quality water dispensers and water treatment solutions for both residential and commercial customers in Poland. As a branch of the international Culligan brand, it leverages a strong market position with a focus on convenience and safe drinking water access. The website is professionally designed, targeting businesses and households, and offers clear information about its products and services. The company maintains active social media presence and uses modern digital marketing and analytics tools to engage its audience. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Bootstrap, and Contact Form 7 for user interactions. It integrates Cookiebot for GDPR-compliant cookie consent management, Google Tag Manager, and Piwik Pro for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, DNSSEC is not enabled, and some HTTP security headers are not explicitly set, representing areas for improvement. No security policy or incident response information is publicly available, and no vulnerability disclosure mechanism is found. The domain registration is consistent with the business launch, registered through a reputable registrar without privacy protection, indicating transparency. Overall, the website demonstrates a good security posture and strong privacy compliance, with comprehensive cookie management and clear business information. Strategic recommendations include enabling DNSSEC, adding explicit security headers, publishing a security policy, and establishing a vulnerability disclosure process to enhance trust and security maturity.

C

Culligan Magyarország

culligan.hu

57

Culligan Magyarország is a medium-sized business specializing in providing water dispensing and treatment solutions tailored for offices, schools, hospitals, restaurants, and various business environments in Hungary. The company is part of the global Culligan brand, offering both bottled and network water dispensers along with hospitality water systems and related services. Their market position is solid within the Hungarian B2B sector, targeting corporate and institutional clients with a focus on hydration solutions. Technically, the website is built on WordPress, leveraging modern technologies such as jQuery, Bootstrap, and popular plugins like Yoast SEO and Contact Form 7. The site integrates advanced analytics tools including Piwik PRO and Google Tag Manager, alongside a robust cookie consent mechanism via OneTrust, demonstrating a mature digital infrastructure. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. The use of Google reCAPTCHA and cookie consent aligns with best practices for user data protection. No critical vulnerabilities or exposed sensitive data were detected. However, there is room for improvement by implementing a Content-Security-Policy header and enhancing accessibility features. Overall, the website presents a trustworthy and professional front with comprehensive privacy and cookie policies, clear contact information, and consistent branding. The domain registration data corroborates the legitimacy of the business, with no suspicious patterns. The risk profile is low, and the site complies well with GDPR requirements. Strategic recommendations include strengthening security headers, maintaining up-to-date software, and continuous security auditing to sustain and improve the security posture.

C

Culligan Suisse

culligan.ch

60

Culligan Suisse operates a professional website focused on water treatment solutions including water softeners, water fountains, and purifiers targeting both private individuals and businesses in Switzerland. The company positions itself as a global leader in water treatment with a long-standing presence since 1979. The website is well designed, mobile optimized, and uses modern web technologies such as WordPress CMS, jQuery, Bootstrap, and Google Tag Manager. Cookie consent mechanisms and trust widgets are implemented to enhance user trust and comply with privacy expectations. However, explicit privacy policies, terms of service, and security policies are not found in the provided content, which represents a compliance gap. Security posture is generally good with HTTPS enabled but lacks explicit security headers and incident response information. Overall, the website is trustworthy and professional but could improve transparency and security documentation.

S

Sporteo

sporteo.cc

53

Sporteo is a German-based small business specializing in international sports management, focusing on holistic sport management and brand enhancement, particularly in football. The website presents a professional and consistent brand image with good SEO optimization and structured data, indicating a mature digital presence. Technically, the site is built on WordPress with modern scripts like jQuery and lazy loading for performance, though some technical improvements are possible. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance measures.

S

SEFE

sefe.eu

68

SEFE is a European energy company focused on securing reliable energy supply through trading, sales, infrastructure, and services across gas, power, and hydrogen sectors. The company positions itself as a key player in enhancing energy security and accelerating the transition to a low-carbon future in Europe. Their website reflects a professional and comprehensive digital presence with detailed sections on company strategy, sustainability, portfolio, and career opportunities. Technically, the website employs modern web technologies including ES6 JavaScript modules, jQuery, and integrates a GDPR-compliant cookie management platform (Usercentrics). Google Tag Manager is used for analytics and tracking, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and shows evidence of good security practices, although explicit security headers are not fully visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were found. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations.

etermin GmbH operates an online appointment scheduling platform primarily targeting German-speaking businesses and service providers. Their solution integrates appointment booking functionality into existing websites and Google search results, positioning them as an innovative player in the SaaS scheduling market. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technical infrastructure includes modern JavaScript libraries such as jQuery and tracking tools like Google Analytics and Bing Ads, indicating a mature digital presence. Privacy and cookie policies are implemented with GDPR compliance, reflecting attention to regulatory requirements. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Security posture is moderate with HTTPS enforced but lacks visible security headers and explicit security policies. Overall, the website demonstrates a solid business and technical foundation but would benefit from improved transparency and security hardening.

T

Tiszántúli Református Egyházkerület

ttre.hu

40

The Tiszántúli Református Egyházkerület website serves as the official online presence of a Hungarian regional Reformed Church district. It provides comprehensive information about church activities, news, tourism, and spiritual resources targeted primarily at Hungarian-speaking church members and the broader community interested in religious heritage. The site is well-branded and consistent with its organizational identity, featuring clear contact details and a GDPR-compliant cookie consent mechanism. Technically, the website employs a custom CMS with common JavaScript libraries such as jQuery and Alertify.js, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It lacks advanced security documentation but does not exhibit any critical vulnerabilities or suspicious behavior. The domain WHOIS data aligns well with the organizational identity, supporting legitimacy and trustworthiness.

Ifjúsági Ház Debrecen is a small non-profit community center established in 2011 in Debrecen, Hungary, focused on providing cultural, leisure, and youth-oriented programs and services. The website serves as an information portal for events, room rentals, and community activities targeting children, youth, and young families. The business model revolves around community engagement and event hosting, supported by local partnerships. Technically, the site is built on WordPress with a moderate tech stack including jQuery and several plugins for galleries and news tickers. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. Security posture is adequate but could be improved with formal policies and enhanced headers. Overall, the website is professional, trustworthy, and content-rich for its target audience, with clear contact information and consistent branding. The domain age and WHOIS data align well with the business history, supporting legitimacy.

E

ERF Medien

music-loft.ch

55

MUSIC Loft is a Swiss media platform under the ERF Medien group, focusing on deep and meaningful music and cultural conversations. The website promotes music through podcasts, events, and curated content, targeting a German-speaking audience interested in thoughtful media. The platform maintains a niche position in the media industry with a focus on music and cultural dialogue. Technically, the site is built on WordPress with modern frameworks like UIkit and uses JW Player for media playback. It integrates multiple analytics tools including Matomo and Plausible, balancing data collection with privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy with no signs of malicious activity or adult content.

Ö

Österreichischer Handballbund

oehb.at

57

The Österreichischer Handballbund operates as the official Austrian Handball Federation, providing governance, promotion, and organization of handball activities within Austria. The website serves as an information hub for players, fans, and clubs, offering news, event details, and resources related to handball. It holds a strong national position as the authoritative body for the sport in Austria. Technically, the website employs a modern technology stack including jQuery, Owl Carousel, Font Awesome, and a proprietary CMS by Internetkonzepte.at. It integrates Google Analytics and Google Tag Manager for analytics, alongside Adition for advertising and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with moderate performance and good SEO practices. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its posture.

E

ERF Medien

radio-erf-plus.ch

51

ERF Medien Schweiz operates Radio ERF Plus, a Christian 24-hour radio station providing inspirational content for listeners in Switzerland. The website serves as a platform to promote the radio service, offer downloadable programming, newsletters, and facilitate donations to support broadcasting costs. The organization positions itself as a niche media provider focused on faith-based content with a clear target audience of Christian listeners. The business model is non-profit, relying on donations and community support. Technically, the website is built on WordPress with modern libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and multiple tracking protections, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, reflecting a mature digital presence for a small media entity.

R

Rogy und Rogy Wirtschaftsprüfungs- und Steuerberatungs GmbH

rogyundrogy.at

48

Rogy und Rogy Wirtschaftsprüfungs- und Steuerberatungs GmbH is a well-established, family-run tax consulting and auditing firm based in Vienna, Austria, with over 40 years of experience. The company offers a broad range of financial services including tax declarations, social insurance consulting, business advisory, auditing, and specialized services for small and micro-entrepreneurs. Their market position is that of a trusted local expert catering primarily to small and medium-sized enterprises and self-employed individuals. The website is professionally designed, content-rich, and compliant with GDPR and cookie regulations, targeting German-speaking Austrian clients. Technically, the website uses a proprietary CMS (Internetkonzepte.at CMS) and incorporates modern JavaScript libraries such as jQuery and Owl Carousel for UI enhancements. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are missing. Overall, the security posture is good with no detected vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the business history. No WAF or blocking mechanisms interfere with content access. The strategic recommendation includes enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance. The website demonstrates a high level of professionalism and trustworthiness suitable for its business domain.

F

Franz Neubauer Ges.m.b.H.

mercedes-benz-werkstatt.at

46

Franz Neubauer Ges.m.b.H. operates as an authorized Mercedes-Benz and smart vehicle service center located in Vienna, Austria. The company provides comprehensive automotive repair, maintenance, bodywork, and parts sales services, targeting Mercedes-Benz vehicle owners seeking quality and authorized service. The website reflects a small-sized, family-owned business with a clear focus on automotive transportation services. Technically, the site uses a CMS from Internetkonzepte.at and common JavaScript libraries such as jQuery and Modernizr, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-structured, supporting the business's credibility and customer engagement.

F

Forum Werteorientierung in der Weiterbildung e. V.

forumwerteorientierung.de

48

Forum Werteorientierung in der Weiterbildung e. V. is a German non-profit organization dedicated to promoting ethical and value-oriented practices in the continuing education sector. The organization provides a quality seal and a professional code of conduct to its member organizations, aiming to enhance transparency and integrity in the education market. The website serves as an informational platform showcasing members, partners, sponsors, and providing updates on seminars and news relevant to the sector. Technically, the website is built on WordPress with common plugins and libraries such as jQuery and Owl Carousel, hosted on rzone.de servers. It demonstrates moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though it could improve in security policy transparency and technical security hardening.

D

Dachverband der Sozialversicherungsträger

sozialversicherung.at

71

The website www.sozialversicherung.at serves as the official portal for the Austrian social insurance umbrella organization, the Dachverband der Sozialversicherungsträger. It provides comprehensive information and services related to social insurance benefits, healthcare providers, employers, and contact options. The portal targets insured persons, employers, healthcare providers, and the general public, positioning itself as a central government service platform. The content is well-structured, primarily in German, and includes privacy and cookie policies compliant with GDPR. Technically, the site uses modern JavaScript libraries including jQuery 3.6.0 and Jakarta Faces framework, with analytics powered by Piwik PRO. The site is hosted securely with HTTPS and includes cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with no evident vulnerabilities or exposed sensitive data, although explicit security headers could be improved. Contact information is available mainly via contact forms and physical address; no direct emails or phone numbers are explicitly listed in the HTML. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance appropriate for a government entity.

The website www.sammeln-baerchen.de serves as a promotional platform for Bärchen® products, operated by BIPEM GmbH & Co. KG. It facilitates consumer engagement through a point collection system tied to product purchases, allowing users to upload receipts, collect points (Tatzen), redeem prizes, and participate in prize draws. The site targets German consumers, particularly families or individuals interested in Bärchen® products. The business model focuses on marketing and brand loyalty enhancement through interactive campaigns. Technically, the site employs a modern frontend stack including jQuery, Bootstrap, FontAwesome, and Swiper, managed via the StormCMS content management system. The site is mobile-optimized with a responsive design and includes cookie consent mechanisms compliant with GDPR. However, some areas such as security headers and incident response policies are not explicitly detailed. From a security perspective, the site uses HTTPS (implied by domain and standard practice), but no explicit security headers were detected in the HTML content. There is no visible incident response or vulnerability disclosure information. The cookie consent and privacy policy implementations indicate a good level of privacy compliance. No critical vulnerabilities or suspicious content were found. Overall, the website presents a professional and trustworthy front for the promotional campaign, with good content quality and user experience. Security posture is moderate with room for improvement in headers and explicit policies. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party components.

A

ASVÖ Salzburg

asvoe-sbg.at

52

ASVÖ Salzburg is a regional non-profit umbrella sports association representing over 380 member clubs in Salzburg, Austria. It provides advisory and service functions, supports sports clubs with legal, tax, and sports-specific questions, and manages various projects and funding programs. The website reflects a well-established organization with a clear focus on community sports development and member support. The target audience includes sports clubs, officials, trainers, and athletes within the Salzburg region. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery, fancybox, and slick slider for enhanced user experience. The site is mobile-optimized and includes a cookie consent mechanism via Usercentrics, demonstrating compliance with GDPR requirements. Google Analytics 4 is used for visitor tracking with consent. From a security perspective, the site enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a regional non-profit sports association, with good content quality, technical implementation, and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

W

WOMEN'S EHF EURO 2024

catchthespirit2024.com

50

The website catchthespirit2024.com serves as the official digital platform for the Women’s EHF EURO 2024 Handball Championship, providing comprehensive event information including news, schedules, host city details, ticketing links, and multimedia content. It targets handball fans and event attendees, positioning itself as the authoritative source for the championship. The site leverages WordPress CMS with popular plugins such as Elementor and Yoast SEO, and integrates Cookiebot for GDPR-compliant cookie consent management. External partnerships for ticketing and merchandise are clearly linked, enhancing the user journey for event participation. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, with multilingual support via WPML. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is partial due to missing explicit privacy and terms of service pages. No direct contact information or incident response details are published, which could impact user trust and compliance. Overall, the website presents a professional and trustworthy front for the event, with good content quality and user experience. However, enhancing privacy disclosures, security headers, and contact transparency would strengthen compliance and security posture. The domain registration is consistent with the event timeline and shows no suspicious patterns, supporting legitimacy.

B

Bary

bary.app

46

Bary is a French company specializing in digital transformation for the transportation sector, offering a bespoke B2B e-commerce platform that enables transporters to sell their services online. Supported by major transport groups and federations, Bary positions itself as a trusted partner for transport companies seeking to modernize and grow their business. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to transporters and shippers. Technically, the site is built on WordPress with modern libraries and frameworks, integrating marketing and analytics tools such as HubSpot and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site demonstrates high business credibility and compliance with privacy regulations.

T

Tempologis

tempologis.fr

42

Tempologis is a French transportation and logistics group comprising subsidiaries Auto Express Moderne (AEM) and Transports Pluviaud Organisation (TPO). The company offers tailored transport and logistics solutions including road freight, specific transport, warehousing, packaging, and related services. It is a member of the ASTRE network, enhancing its market reach and service quality. The website demonstrates a mature digital presence with modern technologies, SEO optimization, and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but does not detract from the business legitimacy evidenced by certifications and customer testimonials.