Security Directory

A

ASD - AeroSpace and Defence Industries Association of Europe

asd-europe.org

69

ASD - AeroSpace and Defence Industries Association of Europe is a leading European industry association representing aerospace, defense, security, and space sectors. The organization connects over 4,000 companies across 21 countries, providing advocacy, standards development, and networking services. Their website reflects a professional and comprehensive digital presence, targeting industry professionals and stakeholders. The site uses modern web technologies including Next.js and React, with privacy-conscious analytics via Matomo and a robust cookie consent mechanism powered by Cookiebot. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit security policies and incident response information are not publicly detailed. Overall, the domain appears legitimate and consistent with an established industry association, despite the lack of WHOIS data due to privacy protection. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust and compliance.

C

Clear Vision For You

clearvisionforyou.com

62

Clear Vision For You is a healthcare-focused website affiliated with Johnson & Johnson Vision, providing comprehensive information and resources about eye health treatments and vision care solutions. The site targets a general audience seeking education on conditions such as myopia, cataracts, dry eye, and laser vision correction, and offers tools like a 'Find a Doctor' feature to connect users with eye care professionals. The website is professionally designed with consistent branding and high-quality content, reflecting the stature of its parent company in the healthcare industry. Technically, the site leverages modern web technologies including React and Next.js frameworks, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent management. The content is well-structured, mobile-optimized, and accessible, ensuring a positive user experience. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, although the website's content and external links strongly associate it with Johnson & Johnson Vision. From a security perspective, the site uses HTTPS and includes privacy and cookie policies indicating GDPR compliance. Nonetheless, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or suspicious content were detected, and the site maintains a good security posture overall. Overall, Clear Vision For You presents a trustworthy and authoritative resource for eye health information, but should enhance transparency around domain registration and strengthen security policies to further build user trust and compliance assurance.

C

Clear Vision For You

jjvision.com

62

Clear Vision For You is a healthcare-focused website operated under the Johnson & Johnson Vision brand, providing comprehensive information and resources related to eye health, vision correction, and treatments such as myopia management, contact lenses, laser vision correction, dry eye treatment, and cataract surgery. The site targets a general audience seeking trusted eye care information and facilitates finding local eye doctors. Technically, the site is built on modern web technologies including Next.js and React, with integrations for analytics and cookie consent, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, but the strong branding and professional content support legitimacy. Overall, the site demonstrates a mature digital presence aligned with enterprise healthcare standards.

F

Fibery

fibery.io

74

Fibery is a technology company offering a modular SaaS platform designed to replace scattered business tools with a unified, customizable company operating system. Their platform targets startups, product companies, software development firms, and digital agencies, providing features such as no-code app creation, flexible database schemas, collaborative documents, and AI-powered automation. Fibery positions itself as a niche player with a strong emphasis on customization and integration, supported by a tiered subscription model including free and enterprise plans. Technically, Fibery employs modern web technologies including React and Next.js, hosted on AWS infrastructure. The website demonstrates excellent performance, mobile optimization, and SEO practices, with comprehensive structured data enhancing search visibility. Privacy-respecting analytics and minimal tracking are used, reflecting a mature digital strategy. From a security perspective, Fibery maintains a strong posture with HTTPS enforcement, SOC 2 certification, GDPR compliance, and advanced platform permissions. However, there is room for improvement in publishing explicit vulnerability disclosure policies and incident response contacts. No critical vulnerabilities or exposures were detected in the analysis. Overall, Fibery presents a professional, trustworthy, and technically sound online presence with a solid business foundation. Strategic recommendations include enhancing transparency around incident response and cookie consent mechanisms to further strengthen compliance and user trust.

J

Johnson & Johnson | Vision PRO

tecnisodysseyiol.com

70

Johnson & Johnson Vision Professional operates a comprehensive website dedicated to the TECNIS Odyssey™ intraocular lens product line, targeting eye care professionals and surgeons. The site provides detailed product information, clinical data, safety instructions, and multimedia testimonials, reinforcing its position as a leading healthcare provider in ophthalmic surgical solutions. The website leverages modern web technologies including Next.js, React, and Contentstack CMS, ensuring a responsive and accessible user experience. Security measures such as HTTPS, Google reCAPTCHA Enterprise, and cookie consent mechanisms are implemented, reflecting a mature security posture. However, the absence of WHOIS data limits domain registration transparency, though the strong corporate branding and external trusted links support legitimacy. Overall, the site demonstrates high professionalism, good privacy compliance, and effective user engagement tools.

C

CARAVANA

caravana.de

52

CARAVANA operates as a German online marketplace specializing in the sale of motorhomes and caravans, connecting buyers with dealers across Germany. The platform offers tools such as smart filters, a configurator, and dealer finder to facilitate the purchase process for end consumers interested in recreational vehicles. The website is professionally designed with a consistent brand presence and targets the transportation sector within Germany. Technically, the site is built using modern frameworks like Next.js and React, hosted on webgo.de infrastructure, and employs Matomo for analytics. While the site demonstrates good content quality and user experience, it lacks visible privacy and cookie policies, explicit contact information, and security headers, which are important for compliance and trust. The security posture is moderate with HTTPS usage implied but could be improved by adding security headers and incident response information. Overall, the domain appears legitimate with consistent hosting and no suspicious WHOIS data, but the absence of key compliance documents and contact details suggests room for improvement in privacy and security transparency.

DBtune is a technology company specializing in AI-powered automated tuning of PostgreSQL databases. Their platform dynamically optimizes database server parameters to improve performance, reduce costs, and increase productivity for a wide range of workloads and machine sizes. The company targets enterprises and database professionals seeking to enhance PostgreSQL efficiency without manual tuning effort. Their market position is supported by reputable clients and positive testimonials, positioning DBtune as a leading innovator in database performance optimization. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Google Cloud infrastructure with DNS managed by Google Domains. The site employs advanced analytics tools including Microsoft Clarity, HubSpot, and Google Analytics, indicating a mature digital marketing and user tracking strategy. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of technical maturity. From a security perspective, the site enforces HTTPS with domain status locks to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response information are published, and no vulnerability disclosure program or security.txt file is found. Overall, the security posture is solid but could be enhanced with additional transparency and DNS security. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. The domain registration is consistent with the business profile, showing a stable and legitimate presence since 2018. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

Supplyframe is a well-established global engineering network specializing in Design-to-Source Intelligence solutions that empower manufacturers, suppliers, and procurement professionals in the electronics industry. The company offers a suite of software products aimed at optimizing new product introductions, strategic sourcing, quoting, and digital marketing to a global engineering audience. With a strong market position supported by partnerships with major industry players and a parent company Siemens, Supplyframe demonstrates a mature business model focused on B2B SaaS and digital platform services. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. The presence of analytics and marketing tools such as Google Analytics, HubSpot, and Clearbit indicates a data-driven approach to user engagement and marketing. Privacy and cookie compliance mechanisms are implemented effectively, reflecting awareness of GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and some security headers, although there is room for improvement by enabling DNSSEC and additional headers like CSP and HSTS. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business history and domain age, supporting legitimacy and trustworthiness. Overall, Supplyframe's website reflects a professional, secure, and compliant digital presence suitable for its enterprise audience. Strategic recommendations include enhancing DNS security, publishing explicit security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

Q

Query Digital, s.r.o.

query.cz

63

Query Digital, s.r.o. is a Czech Republic-based web studio specializing in the development, operation, and consulting of web applications. The company serves a business clientele, including notable brands, and positions itself as a small but professional and trusted service provider in the technology sector. Their website reflects a modern, well-structured digital presence built on Next.js and React, with strong mobile optimization and user experience. Privacy and cookie policies are clearly presented and GDPR compliant, enhancing trust. Security posture is good with HTTPS and consent mechanisms, though some security policy documentation and incident response contacts are missing. WHOIS data is unavailable, which slightly impacts domain trust but does not detract from the professional appearance and business legitimacy of the site.

U

University of California Press

ucpress.edu

63

University of California Press is a well-established academic publisher affiliated with the University of California. The website serves as a platform for promoting scholarly books, journals, and publishing services targeting academics, researchers, students, librarians, and authors. The site demonstrates a strong market position within the academic publishing sector, offering a wide range of disciplines and resources. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Google Analytics and Tag Manager for tracking. The design is professional, mobile-optimized, and accessible, providing a positive user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though privacy compliance could be improved by adding cookie consent mechanisms and explicit terms of service. Overall, the website is trustworthy and credible, reflecting the reputation of its parent institution.

C

Coordinator ODIS s.r.o.

odis.cz

52

Coordinator ODIS s.r.o. is a regional public transportation coordinator serving the Moravian-Silesian Region in the Czech Republic. The company provides comprehensive services including timetables, fare and tariff information, updates on transportation changes, maps, and practical travel information. The website targets public transportation users in the region and supports digital ticketing through an e-shop and a mobile app called ODISapp. The company is positioned as a key regional transportation service provider with strong ties to local government entities.

M

MOL Group

molcampus.hu

65

MOL Campus is the corporate headquarters of MOL Group, Hungary's leading energy company. The website showcases the building as a symbol of sustainability and innovation, offering visitor experiences such as the SkyDeck and various employee services. The site is well-designed, mobile-optimized, and uses modern web technologies including Next.js and React. It integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel with appropriate cookie consent mechanisms. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website reflects a mature digital presence aligned with MOL Group's corporate identity and sustainability commitments.

S

Sky

skyaccessibility.sky

71

Sky Accessibility is a dedicated platform by Sky, a leading UK and Ireland media and telecommunications company, focused on ensuring all products and services are inclusive and accessible to customers with various impairments. The website offers detailed information on accessibility features, support services, and collaborations with recognized organizations to enhance user experience for people with disabilities. The platform is well integrated with Sky's corporate ecosystem, reflecting a strong market position and commitment to accessibility. Technically, the website leverages modern web technologies including React and Next.js, supported by Contentstack CMS and Adobe Launch for analytics and tag management. The site demonstrates good performance, mobile optimization, and excellent accessibility compliance, aligning with its mission. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent management platform. From a security perspective, the site uses HTTPS with a strong SSL configuration and includes consent management scripts. While explicit security policies and incident response contacts are not found, no vulnerabilities or security issues are evident in the content. The WHOIS data confirms the domain's legitimacy and consistency with Sky's corporate identity. Overall, Sky Accessibility presents a professional, trustworthy, and user-focused digital presence with strong compliance and technical maturity. Strategic improvements could include publishing explicit security policies and vulnerability disclosure information to further enhance trust and security posture.

V

Vertek

vertek.com.br

54

Vertek is a Brazilian company specializing in ophthalmological and veterinary products, targeting healthcare and veterinary professionals. The website is built using modern web technologies including React and Next.js, and incorporates Google Tag Manager for analytics. The site is accessible and mobile-optimized with a clean design, but contains minimal textual content and lacks key compliance documents such as privacy and cookie policies. Security posture is basic with no detected security headers or incident response information, and no contact details are provided on the homepage. Overall, the website presents a professional but minimal online presence with room for improvement in compliance and security transparency.

A

Amsterdam University of Applied Sciences

amsterdamuas.com

72

Amsterdam University of Applied Sciences (AUAS) is a large, well-established higher education institution in the Netherlands offering a wide range of bachelor's, master's, and exchange programmes primarily in English and Dutch. The university emphasizes applied research with societal impact and maintains strong international collaborations such as the U!REKA European university alliance. The website reflects a professional and comprehensive digital presence, targeting prospective students, researchers, and international applicants. The content is rich, well-structured, and accessible, supporting a positive user experience.

F

Folkhem

folkhem.se

51

Folkhem is a Swedish real estate developer specializing in the construction and sale of sustainable wooden houses and apartments. Established in 1998, the company positions itself as an innovator in climate-smart housing with a focus on natural materials and craftsmanship. Their market presence is primarily in Stockholm, Sundbyberg, and Uppsala, targeting environmentally conscious homebuyers. Technically, the website is built on modern frameworks such as Next.js and React, utilizing Google Tag Manager for analytics and Klaro for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though there is room for improvement in DNSSEC and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive business reputation.

G

Gemeente Rotterdam

rotterdam.nl

73

Gemeente Rotterdam operates the official municipal website providing comprehensive information, news, and services to residents, entrepreneurs, visitors, and government stakeholders. The site serves as a central hub for accessing public services such as parking registration, waste management, passport applications, and local government contact. It holds a strong market position as the authoritative source for municipal information in Rotterdam, Netherlands. Technically, the website leverages modern web technologies including React and Next.js frameworks, ensuring good mobile optimization, accessibility, and SEO practices. Integration of third-party tools like ReadSpeaker enhances accessibility, while Kameleoon supports marketing and user experience optimization. The site demonstrates moderate to good performance and a consistent, professional design. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs security headers. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Privacy compliance is well addressed with clear cookie and privacy policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor gaps in published security governance documentation. Strategic recommendations include publishing security policies, establishing incident response contacts, and enhancing security headers to further strengthen the security posture.

B

Betway Limited

betway.co.za

70

Betway Limited operates a well-established online gambling platform offering sports betting, casino games, live casino, vegas games, and esports betting. The company holds a Malta Gaming Authority license and maintains a strong market presence through official partnerships with major sports clubs such as Arsenal, Manchester City, Chelsea, and Atlético de Madrid. The website is professionally designed, mobile-optimized, and provides comprehensive user engagement through various welcome offers and promotions. Technically, the platform leverages modern web technologies including React and Next.js, supported by a robust analytics and advertising infrastructure with Google Tag Manager, Snowplow, Adobe Alloy, and multiple ad networks. Security posture is strong with HTTPS enforcement, domain transfer protections, and reputable certifications like eCOGRA and IBIA. Privacy and cookie policies are comprehensive and GDPR compliant, although explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available. Overall, Betway presents a trustworthy and professional online gambling service with a mature digital presence.

I

International Biathlon Union

biathlonworld.com

66

The International Biathlon Union (IBU) operates the official website www.biathlonworld.com, serving as the authoritative source for biathlon sport information globally. The site provides comprehensive services including event calendars, results, athlete profiles, news, videos, and live streaming options, targeting biathlon fans, athletes, and sports professionals. The website demonstrates a consistent and professional brand presence with good content quality and user experience. Technically, the website leverages modern web technologies such as React and Next.js, with Contentful as the CMS. It integrates Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes several security headers, reflecting a good security posture. However, the absence of a published privacy policy, terms of service, and explicit contact information for security incidents or data protection officers represents compliance gaps. The lack of WHOIS data reduces domain trust slightly but does not undermine the apparent legitimacy of the site. Overall, the website is a reliable and professional platform for biathlon sport information, with recommendations to improve privacy compliance, transparency, and accessibility to further strengthen trust and security.

N

News and Media Holding a.s.

cas.sk

56

Nový Čas is a leading Slovak online daily newspaper operated by News and Media Holding a.s., providing current news, scandals, crime, and sports coverage. The website is well-branded and targets a general audience interested in Slovak and international news. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Tag Manager and Gemius analytics, and employs privacy management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and some privacy tools in place, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, with room for improvement in privacy and security transparency.

T

Teoxane

teoxane.com

65

Teoxane is a healthcare company specializing in aesthetic medicine products such as dermal fillers and skincare solutions, targeting medical professionals and aesthetic practitioners. The website is built using modern web technologies including React and Next.js, indicating a contemporary digital infrastructure. However, the provided HTML content is minimal and appears to rely heavily on client-side rendering, which limits the immediate availability of content and metadata. Security posture is limited based on the available data, with no visible security headers or privacy policies detected. Tracking technologies such as Google Tag Manager and Pingdom are used, but privacy compliance is weak due to the absence of cookie and privacy policies. Overall, the website presents a moderate risk profile with room for improvement in security and compliance transparency.

M

Motiva Enterprises LLC

motiva.com

66

Motiva Enterprises LLC is a major energy company headquartered in Houston, Texas, specializing in refining, distributing, and marketing petroleum products across the Americas. As North America's largest refinery operator and fully owned by Aramco, Motiva plays a critical role in energy security and economic prosperity. The website reflects a mature digital presence built on modern web technologies such as Next.js and React, offering a professional and user-friendly experience with comprehensive content about their operations, community involvement, and career opportunities. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and explicit incident response information. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms could be improved. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the site demonstrates strong business credibility and technical maturity with room for security enhancements.

T

Timme Hosting GmbH & Co. KG

timmehosting-status.com

61

Timme Hosting GmbH & Co. KG is a German hosting service provider offering a range of services including webhosting, managed servers, cloud solutions, backups, and object storage. The company appears to be newly established in 2024, with a domain registration consistent with this timeline. The website serves primarily as a status page, providing uptime and incident information for its various services, demonstrating operational transparency. Technically, the website is built using modern frameworks such as Next.js and React, with Cloudflare DNS services and Cloudinary for image hosting. The site is well-optimized for mobile devices and performs well, with clear navigation and good content relevance. However, it lacks some SEO and privacy compliance features such as privacy and cookie policies. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but it lacks DNSSEC and important security headers. There is no published security policy or incident response contact information, and no vulnerability disclosure mechanism is evident. These gaps suggest room for improvement in security posture and compliance. Overall, the website is professional and trustworthy for its purpose as a status page, but it would benefit from enhanced privacy compliance, security policies, and contact information to improve user trust and regulatory adherence.

V

Volleyball World

volleyballworld.com

66

Volleyball World operates as an official digital platform providing comprehensive coverage of professional volleyball, including live streaming, rankings, schedules, and player profiles. The website targets volleyball fans and sports enthusiasts globally, positioning itself as an authoritative source for volleyball content. Technically, the site leverages modern web frameworks such as React and Next.js, supported by a robust analytics and advertising ecosystem including Google Analytics, Microsoft Clarity, and various ad networks. The site demonstrates excellent design quality, mobile optimization, and user experience, reflecting a mature digital presence. From a security perspective, the website enforces HTTPS and employs bot mitigation techniques like Cloudflare Turnstile captcha. However, explicit security headers such as Content-Security-Policy are not clearly documented, and no security or incident response policies are publicly visible. Privacy compliance is limited, with no clear privacy or cookie policies detected, which may expose the site to regulatory scrutiny. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the website content and branding suggest an official affiliation with volleyball governing bodies. Overall, Volleyball World presents a professional and trustworthy front for volleyball media content but should improve transparency in privacy, security policies, and domain registration information to enhance trust and compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and verifying domain registration details to assure visitors and partners of legitimacy.

S

Slovenská volejbalová federácia

slovakvolley.sk

39

The Slovenská volejbalová federácia (Slovak Volleyball Federation) operates as the national governing body for volleyball in Slovakia, providing comprehensive information on competitions, teams, and volleyball-related news. The website serves volleyball players, fans, clubs, and the broader sports community in Slovakia, positioning itself as an authoritative source for volleyball activities and events. It offers services including competition management, event organization, player registration, and fan engagement through ticket sales and a fan shop. Technically, the website is built using modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience across devices. The site demonstrates good performance and SEO practices, with appropriate meta tags and structured navigation. Security is well-managed with HTTPS enforcement and standard security headers, although explicit privacy and cookie policies are not found, which is a compliance gap. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. However, the absence of published incident response or vulnerability disclosure policies limits transparency. The site integrates multiple trusted partner domains and maintains a strong social media presence, enhancing its credibility. Overall, the website is professional, secure, and trustworthy, but it would benefit from improved privacy compliance documentation and clearer contact information to enhance user trust and regulatory adherence.

N

Národné športové centrum

narodnesportovecentrum.sk

57

Národné športové centrum (NŠC) is a Slovak government-affiliated organization dedicated to supporting sports development, athlete diagnostics, education, and sports information systems. The website serves as a comprehensive portal for news, events, athlete profiles, educational resources, and multimedia content, targeting athletes, sports professionals, and the general public interested in Slovak sports. The organization is positioned as a key national sports authority with official backing from the Ministry of Tourism and Sports of Slovakia. Technically, the website is built using modern web technologies including Next.js and React, with integrations for Google Analytics, Facebook Pixel, and Osano CMP for cookie consent management. The site is mobile-optimized, well-structured, and uses HTTPS with good SSL configuration. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the site follows good practices such as HTTPS enforcement, use of reCAPTCHA on forms, and cookie consent mechanisms. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is good with a clear privacy policy and cookie consent. Business credibility is strong due to official government affiliation, clear contact information, and consistent branding. Overall, the website presents a professional, trustworthy, and content-rich platform with moderate to good technical and security posture. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

G

Grünecker GmbH

gruenecker-haustechnik.de

61

Grünecker GmbH is a small, regionally focused company based in Germany specializing in heating, sanitation, and home technology services since 1993. Their website presents a professional image with detailed service offerings, regional sponsorships, and partner collaborations, positioning them as a trusted local expert. The technical infrastructure leverages modern web technologies such as Next.js and React components, providing a responsive and user-friendly experience. However, the site lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and trust. Overall, the security posture is moderate but could be improved with standard best practices. The website is safe, free from adult or questionable content, and fully accessible without WAF or blocking mechanisms.

H

Ligen, Vereine, Verbände, Hallen und News | handball.net

handball.net

69

handball.net is a German sports media platform specializing in handball-related content including leagues, clubs, live scores, and news. It targets handball fans and stakeholders primarily in Germany, offering schedules, live tickers, and news coverage. The website uses modern web technologies such as React and Next.js, integrates advertising via Smart Ad Server, and employs consent management tools to ensure GDPR compliance. Performance monitoring is handled by New Relic, and social media content is embedded via Flockler. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, no direct company contact information or detailed business registration data is publicly available on the site.

S

Slovenská volejbalová federácia

svf.sk

40

Slovenská volejbalová federácia (SVF) is the official governing body for volleyball in Slovakia, providing comprehensive information about volleyball competitions, teams, news, and events. The website serves volleyball players, fans, and the sports community in Slovakia, offering services such as competition management, ticket sales, and a fan shop. The federation holds a significant position as the national authority for volleyball, supported by partnerships with major brands and sponsors. Technically, the website is built on modern web technologies including Next.js and React, hosted by Webglobe, and optimized for mobile devices with good design and navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing explicit privacy and cookie policies, though a cookie consent mechanism is present. WHOIS data shows an anomalous future domain creation date, which slightly reduces trust but does not detract from the overall legitimacy of the site. The content is safe, sports-focused, and suitable for a general audience.

E

EMPRESA MEDIA, a.s.

tyden.cz

60

Týden.cz is a well-established Czech media company operating since 2006, providing comprehensive news coverage across various domains including domestic and international affairs, science, economy, sports, culture, health, and lifestyle. The company operates multiple magazine brands and partners with TV Barrandov, offering both online content and subscription-based magazines. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, and integrates advertising and analytics tools like Google Adsense and Google Tag Manager. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, Týden.cz presents a professional, trustworthy, and user-friendly platform for Czech news consumers.

Bistro.sk is a well-established online food delivery platform operating primarily in Slovakia, founded in 2013 and owned by the Takeaway.com Group B.V. The platform connects consumers with local restaurants and stores, offering convenient online ordering and delivery services. It holds a strong market position in Slovakia with a large network of over 2,400 partner restaurants and stores. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy documentation, including GDPR compliance and cookie consent mechanisms. Social media presence and trust indicators such as a bug bounty program and ethics hotline further enhance its credibility. Technically, Bistro.sk leverages modern web technologies including Next.js and React, integrated with advanced analytics and marketing tools like Google Tag Manager, Snowplow, and FullStory. The platform is hosted on robust infrastructure likely managed by Just Eat Takeaway, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed. Overall, Bistro.sk demonstrates a mature digital presence with strong business credibility and security practices. The platform effectively balances user experience, privacy compliance, and technical sophistication, making it a trustworthy service for food delivery in Slovakia.

S

Supabase

supabase.in

69

Supabase is a technology company providing a comprehensive Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The platform is positioned as a leading open-source alternative in the backend-as-a-service market, with a strong developer focus and growing adoption by notable companies. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and demonstrates excellent performance and mobile optimization. Security posture is good with HTTPS enforced and domain protections in place, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but should enhance transparency around privacy and security to improve compliance and user trust.

N

Národné športové centrum

sportcenter.sk

58

Národné športové centrum (NŠC) is a Slovak government-affiliated organization dedicated to supporting and developing sports activities, athletes, and sports diagnostics in Slovakia. The website serves as a comprehensive portal for news, events, athlete profiles, educational resources, and diagnostic services. It targets athletes, sports professionals, and the general public interested in sports development. The organization operates under the Ministry of Tourism and Sports of the Slovak Republic, positioning itself as a key national sports institution. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Google Analytics, Facebook Pixel, and Osano for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Hosting is provided by nichosting.sk, a Slovak hosting provider, which aligns with the local focus of the organization. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent is managed via a reputable CMP (Osano). While some security headers are not explicitly detected in the HTML, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are present and comprehensive, indicating good compliance with GDPR. Overall, the website is professional, trustworthy, and well-aligned with its government sports center mission. It provides a rich user experience with clear navigation and relevant content. Recommendations include enhancing security headers and publishing a dedicated security policy to further strengthen trust and compliance.

H

Headout Inc.

headout.com

55

Headout Inc. operates a sophisticated online platform that enables travelers and locals to discover and book curated tours, events, and experiences worldwide. The company positions itself as a mobile concierge service offering high-quality experiences at competitive prices with 24x7 customer support. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of explicit privacy and cookie policies and lack of WHOIS transparency are notable gaps. Overall, the platform is professional, trustworthy, and well-positioned in the hospitality sector.

R

RiffReporter

riffreporter.de

65

RiffReporter is a German cooperative media platform dedicated to independent journalism, focusing on topics such as climate, environment, science, society, and technology. The website presents itself as a professional and well-branded journalistic outlet with a clear target audience of general readers interested in in-depth analyses and reports. The business model revolves around cooperative journalism, providing direct reporting and analysis without intermediary publishers. Technically, the site is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS and CDN services, and uses Matomo for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies and does not provide clear contact information or security incident response details, which are areas for improvement. Overall, the site is trustworthy and professional but could enhance its compliance and transparency aspects.

U

urbnups UG (haftungsbeschränkt)

urbnups.com

68

urbnups UG (haftungsbeschränkt) operates a travel and experience discovery platform that enables users to find, save, and share unique local moments and travel destinations. The company targets travelers and local explorers seeking authentic experiences, positioning itself as a niche community-driven platform with mobile app support. The website is well-designed, mobile-optimized, and uses modern web technologies such as React, Next.js, and Material-UI, hosted on Hetzner with Cloudflare DNS. Security is robust with HTTPS, security headers, and no detected vulnerabilities. Privacy policies are comprehensive and GDPR compliant, though direct contact emails and phone numbers are not publicly listed, relying on contact forms instead. Social media presence on Instagram, Facebook, and LinkedIn supports community engagement. Overall, the platform demonstrates a mature digital infrastructure and trustworthy business presence.

B

Budapest Főváros Önkormányzata

enbudapestem.hu

58

Énbudapestem is an official digital news and cultural portal operated by the Budapest municipal government, providing residents and visitors with timely news, cultural insights, and community updates about Budapest. The website is well-branded with consistent use of Budapest city logos and links to the official Budapest.hu domain, establishing strong trust and legitimacy. Technically, the site is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, although explicit incident response and vulnerability disclosure information are absent. Privacy compliance is good, with accessible privacy and cookie policies and a consent mechanism in place. Overall, the website presents a professional, trustworthy, and user-friendly platform for Budapest-related content.

H

Hall-Wattens Tourismus

hall-wattens.at

57

Hall-Wattens Tourismus operates as the official tourism organization for the Hall-Wattens region in Tirol, Austria, providing comprehensive information and services to tourists including accommodation booking, event promotion, and activity guidance. The website is professionally designed with excellent content quality, targeting travelers interested in seasonal vacations and cultural experiences in the Austrian Alps. Technically, the site leverages modern web technologies such as Next.js and React, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and appropriate security headers, alongside a robust cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data limits domain trust assessment, though the website's professional presentation and clear contact details support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance.

U

urbnups UG (haftungsbeschränkt)

urbnups.app

68

urbnups UG (haftungsbeschränkt) operates a travel and experience discovery platform focused on providing users with local insider tips, popular attractions, and personal recommendations. The platform supports community sharing of unique moments and offers AI solutions for business partners. The company is positioned as a niche player in the travel and local experience market, targeting travelers and local experience seekers primarily in Germany. The business was founded in 2021 and maintains a small company size with a consistent and professional online presence. Technically, the website is built using modern web technologies including React, Next.js, and Material-UI, hosted by Hetzner Online GmbH. The site is optimized for mobile devices, loads quickly, and incorporates privacy-conscious analytics via Matomo. The presence of comprehensive privacy and cookie policies indicates a good level of GDPR compliance. However, direct contact information such as company emails or phone numbers is not publicly listed, relying instead on a contact form. From a security perspective, the site enforces HTTPS, uses standard security headers, and shows no visible vulnerabilities or exposed sensitive data. The domain registration is transparent and consistent with the business age and profile, enhancing trustworthiness. There is no published security policy or incident response information, which could be improved to strengthen security posture. Overall, urbnups presents a trustworthy, well-implemented digital platform with good privacy and security practices. Strategic improvements in security transparency and direct contact information could further enhance trust and compliance.

K

Klassik Radio

klassikradio.de

57

Klassik Radio operates as a German-based classical music streaming and radio broadcasting service, offering curated music channels, live concert events, and premium ad-free subscriptions. The website is professionally designed with excellent content quality and user experience, targeting classical music enthusiasts and general audiences interested in cultural music content. Technically, the site leverages modern frameworks such as Next.js and React, with mobile optimization and SEO best practices well implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the domain and website present a trustworthy and mature digital presence in the media sector.

R

Rausgegangen GmbH

zentrale.events

61

Rausgegangen GmbH operates the website zentrale.events as a centralized platform for event organizers, venues, and artists primarily in Germany. The platform offers integrated services including event publishing, ticketing, and targeted marketing, positioning itself as one of the largest event recommendation platforms in Germany. The business model leverages a freemium approach with additional marketing services, targeting cultural professionals and event goers. Technically, the site is built using modern web technologies such as React and Next.js, with privacy-conscious analytics via Matomo and a comprehensive cookie consent mechanism provided by Iubenda. The website is mobile-optimized and well-structured, providing a good user experience.

N

nph Kinderhilfe Lateinamerika e.V.

nph-kinderhilfe.org

61

nph Kinderhilfe Lateinamerika e.V. is a well-established non-profit organization dedicated to improving the lives of children in Latin America and Haiti through education, protection, and family support. With a history dating back to 1954, the organization operates with a clear mission to provide safe environments and opportunities for children to grow and thrive. The website reflects a professional and consistent brand image, targeting donors, supporters, and stakeholders interested in child welfare. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Directus as a CMS. It demonstrates good performance, mobile optimization, and SEO practices. The presence of Google Tag Manager indicates moderate user tracking for analytics and marketing purposes. From a security perspective, the site uses HTTPS with strong SSL configuration and includes essential security headers. However, there is no explicit security policy or incident response information publicly available, which could be improved. The WHOIS data is unavailable due to query failure or privacy protection, which is common for non-profits but slightly reduces trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

P

Strong Random Password Generator

passwordsgenerator.com

47

The website www.passwordsgenerator.com offers a free online tool for generating strong, random passwords based on current security standards. It targets general internet users seeking to improve their password security by providing customizable password generation options. The site is built on modern web technologies including Next.js and React, hosted on Vercel, and uses PostHog for analytics. The technical infrastructure is modern and optimized for fast performance and mobile responsiveness. However, the site lacks visible privacy, cookie, or terms of service policies, and does not provide contact or company information, which limits transparency and trust. Security posture is moderate with no visible security headers and no HTTPS confirmation in the provided data, though no obvious vulnerabilities or sensitive data exposures are present. The absence of WHOIS registration data is a notable concern, reducing trustworthiness and raising questions about domain legitimacy. Overall, the site functions well as a utility but would benefit from improved compliance and transparency measures.

C

Coloring Labs

coloringlabs.com

57

Coloring Labs is a small technology company specializing in the development of family-friendly coloring apps for iPad users, targeting children and parents. Their market position is niche, focusing on creative and educational digital content for kids. The website presents a professional and consistent brand image with clear messaging about their app offerings. Technically, the site is built using modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. However, accessibility features are basic and could be improved. From a security perspective, the website benefits from HTTPS encryption but lacks important security headers and formal security policies such as privacy or cookie policies. The use of PostHog analytics indicates moderate user tracking without visible consent mechanisms, which may raise privacy compliance concerns. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The absence of detailed business registration data and security policies suggests room for improvement in transparency and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and expanding contact information to build greater trust and compliance.

B

BotTalk

bottalk.io

60

BotTalk is a specialized AI voice solution provider targeting news publishers and media companies. Their platform aggregates multiple leading text-to-speech providers into a single audio hub, enabling easy integration, paywall support, and audio monetization through advertising partnerships. The company positions itself as a niche leader with a clear focus on enhancing user engagement and subscription value through audio content. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and integrates analytics and form services for marketing and support. Security posture is good with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

Z

Zweckverband Abfallwirtschaft Region Trier (A.R.T.)

art-trier.de

61

The Zweckverband Abfallwirtschaft Region Trier (A.R.T.) is a regional public waste management authority responsible for waste disposal services in Trier and surrounding districts in Germany. The website serves as an information and service portal offering waste collection schedules, customer portals, educational content, and contact information. The organization targets residents and businesses within its jurisdiction, providing essential public services related to waste management and recycling. The website is well-structured, professionally designed, and includes a cookie consent mechanism compliant with GDPR regulations. Technically, the site is built using modern web technologies including React, Next.js, and Material-UI, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site reflects a trustworthy and legitimate public service entity with clear contact information and transparent privacy practices. There are no indications of malicious activity or compliance issues. Strategic recommendations include enhancing security headers, publishing explicit security policies, and adding incident response contacts to improve trust and compliance further.

I

idealo

idealo.it

72

idealo.it is a well-established Italian price comparison website operated by idealo internet GmbH, a reputable company based in Germany. The platform offers consumers the ability to compare prices across thousands of online stores, access product reviews, and receive price alerts. It targets general consumers in Italy looking for the best deals across various product categories. The website demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, with strong mobile optimization and accessibility features. Security practices include HTTPS enforcement, content security policies, and GDPR-compliant consent management, though explicit security policies and incident response details are not publicly disclosed. Overall, idealo.it presents a professional, trustworthy, and user-friendly e-commerce service with a strong market position in Italy.

M

Nationales Onlineportal für berufliche Weiterbildung | mein NOW

mein-now.de

63

The website mein-now.de serves as a national online portal dedicated to vocational training and career development in Germany. It offers online tests, tools, and information on further education, funding, and consulting services. The portal targets citizens, institutions, and companies, positioning itself as a key resource for professional development within the German education sector. Technically, the site employs modern web technologies such as Next.js and web components, hosted on infrastructure linked to official German labor agency domains, indicating a robust and professional digital presence. Security-wise, the site uses HTTPS and modern JavaScript modules but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and professionally designed but would benefit from enhanced privacy compliance and security best practices.

DoNoHarm is a small US-based software company founded in 2019, specializing in niche software products such as Monocle, Kleio, and WaterCooler, targeting developers and businesses needing specialized tools. The website is built on a modern React/Next.js stack, hosted via bunny.net, and demonstrates good mobile optimization and user experience. However, the site lacks explicit contact information and comprehensive privacy or security policies. Security posture is moderate with no detected WAF or blocking mechanisms but missing security headers and DNSSEC. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

X

X-BIONIC®

x-bionic.com

68

X-BIONIC® is a technology-driven sportswear brand specializing in high-performance base layers and sports apparel, with a focus on Swiss engineering and Italian manufacturing. The company targets athletes and sports enthusiasts across multiple disciplines including trail running, cycling, triathlon, and wintersports. The website is a modern e-commerce platform built on Shopify and Next.js, featuring advanced tracking and consent management tools to comply with GDPR regulations. Security posture is strong with HTTPS and security headers implemented, though some areas such as incident response and vulnerability disclosure could be improved. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive policies suggest a legitimate business. Overall, the site offers a secure, user-friendly shopping experience with good privacy compliance.