Security Directory

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.bg

53

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access systems and scaffolding with over 125 years of tradition. The company operates internationally with localized websites, including this Bulgarian version, targeting industrial and commercial customers requiring safe and innovative access solutions. The website reflects a professional and consistent brand image, offering detailed product and service information, supported by a modern TYPO3 CMS infrastructure. The technical stack includes standard web technologies and analytics tools such as Matomo and Facebook Pixel, with a GDPR-compliant cookie consent mechanism in place. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

K

KRAUSE-Werk GmbH & Co. KG

krause-systems.rs

55

KRAUSE-Werk GmbH & Co. KG is a well-established German manufacturer specializing in access technology and occupational safety products, with over 125 years of tradition. The company operates internationally, providing climbing systems, scaffolding, and safety services primarily targeting industrial and commercial customers. Their website, localized in Serbian, reflects a professional and consistent brand image with clear contact information and a comprehensive cookie consent mechanism, demonstrating compliance with GDPR regulations. Technically, the site is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, and integrates analytics tools such as Matomo and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy.

R

Race Space Ltd

racespace.com

58

Race Space Ltd operates an online race event management platform targeting race directors and endurance athletes. The company offers a SaaS solution for race entry, event management, and registration technology, positioning itself as a niche technology provider in the endurance sports sector. The website branding is consistent and professional, with a clear focus on inspiring a new generation of athletes and supporting race organizers with growth tools like the Race Space Accelerator. Technically, the website employs modern JavaScript libraries including RequireJS, jQuery, and Bootstrap, alongside Facebook SDK and Google Tag Manager for marketing and analytics. The site is mobile-optimized with asynchronous script loading to enhance performance. However, some accessibility features could be improved, and explicit security headers are not detected in the HTML source. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, relying instead on a contact form. The absence of WHOIS data for the domain is a concern, as it suggests either privacy protection or a registration anomaly, which impacts trustworthiness. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and privacy compliance would enhance trust and security posture.

I

intecsoft GmbH & Co. KG

intecsoft.de

58

intecsoft GmbH & Co. KG is a well-established IT consulting and software development company based in Germany, with a subsidiary in Switzerland. The company specializes in digital transformation services, offering a broad portfolio including business process optimization, business intelligence, cloud infrastructure, SAP development, and embedded systems. Their target audience includes businesses and public sector organizations primarily in German-speaking countries. The company demonstrates a strong market position supported by long-term experience, recognized certifications such as ISO/IEC 27001, and partnerships with major technology providers like Microsoft, SAP, and Oracle. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap and JavaScript ES modules. The infrastructure is hosted via domaincontrol.com nameservers, indicating professional hosting. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and ISO 27001 certification, but could be improved by adding explicit security headers and incident response contact details. No WAF or blocking mechanisms were detected, allowing full content access. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. No vulnerability disclosure or security.txt files were found. Contact information is clearly presented, enhancing business credibility. Overall, intecsoft presents a professional, trustworthy, and secure digital presence aligned with its business objectives. Strategic improvements in cookie consent and security headers would further enhance compliance and security posture.

F

Fabasoft AG

fabasoft.com

75

Fabasoft AG is a well-established European technology company specializing in digital business process design and cloud-native enterprise content, records, and business process management solutions. Their flagship platform, the Fabasphere, integrates AI capabilities with secure cloud services to support organizations in digital transformation. The company targets enterprise and government sectors, emphasizing European data sovereignty and compliance. Technically, the website is built on Drupal 10 with modern frameworks and demonstrates excellent performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit incident response and vulnerability disclosure policies are absent. The absence of WHOIS data for the domain is a notable anomaly that impacts trust assessment. Overall, Fabasoft presents a professional, secure, and compliant digital presence with room for improvement in transparency around security incident handling.

C

Computacenter

computacenter.com

81

Computacenter is a leading independent technology and services provider focused on delivering IT infrastructure, cloud, security, and managed services to large corporate and public sector clients. The company emphasizes sustainability, customer-centricity, and long-term value creation, supported by numerous industry awards and partnerships with major technology vendors. The website demonstrates a mature digital presence with modern technologies, responsive design, and rich content including customer stories and news updates. Security posture is strong with HTTPS and bot protection, though explicit security headers and policies are not evident in the provided data. Privacy compliance documentation such as privacy and cookie policies are not clearly found, which is a gap for regulatory adherence. WHOIS data is unavailable, possibly due to privacy or registry restrictions, but the website's professional presentation and trust signals support legitimacy. Overall, the site is well-structured and trustworthy, serving an enterprise audience effectively.

citeq is a municipal IT service provider for the city of Münster and surrounding public sector entities. The organization offers comprehensive IT services including consulting, system operation, application development, and network infrastructure support. Positioned as a key digitalization partner for local government and public institutions, citeq supports a broad range of clients including schools and neighboring municipalities. The website reflects a professional and consistent brand image aligned with public sector standards. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. Overall, citeq demonstrates a mature digital presence suitable for a government IT provider.

CharismaTeam GmbH is a German software company specializing in the development of application assistants, workflow management systems, and custom software solutions primarily targeting public administration and business clients. The company has established a niche market position supported by recognized innovations such as the Innovationspreis-IT awards in 2016 and 2017 and strategic partnerships with notable firms like Wolters Kluwer. Their business model focuses on delivering turnkey software systems and consulting services to streamline digital application processes and workflow automation. Technically, the website is built on the webEdition CMS platform, utilizing Bootstrap and jQuery, though some technologies are dated. The site is moderately optimized for performance and mobile use, with good SEO practices but limited accessibility features. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and older JavaScript libraries are in use. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

U

University of California San Diego

ucsd.edu

52

University of California San Diego (UCSD) is a leading public research university located in La Jolla, California. The website serves a diverse audience including prospective and current students, faculty, researchers, and the general public. UCSD offers a broad range of academic programs, research initiatives, and student life services, positioning itself as a top-tier institution with a strong emphasis on innovation and community engagement. The site reflects a mature digital presence with comprehensive content and consistent branding aligned with the university's mission and values. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely on university-managed infrastructure. The use of Cascade CMS is inferred, supporting content management needs. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs standard security headers, though DNSSEC is not enabled, representing a minor security gap. No explicit security policy or incident response contacts are published, which could be improved. The site uses multiple third-party scripts for analytics and marketing, with moderate user tracking levels. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, UCSD's website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for an enterprise educational institution. Strategic improvements in privacy compliance and domain security would enhance its security posture and user trust.

E

Elevar

getelevar.com

69

Elevar is a technology company specializing in conversion tracking and analytics solutions for eCommerce brands, particularly those using Shopify. The company offers a SaaS platform that enables marketers and analysts to deploy data layers, connect to over 40 marketing channels, and ensure accurate conversion tracking with server-side tagging. Positioned as a trusted solution by over 6,500 direct-to-consumer (D2C) brands, Elevar focuses on improving marketing performance through enhanced data accuracy and integration capabilities. Technically, the website is built on WordPress with Visual Composer and integrates modern web technologies including Google Tag Manager, HubSpot analytics, and Cloudflare DNS services. The platform demonstrates good mobile optimization and SEO practices, although performance is moderate. Security measures include HTTPS, invisible Google reCAPTCHA, and domain status protections, but could be enhanced by enabling DNSSEC and implementing additional security headers. From a security and compliance perspective, the site lacks explicit privacy and cookie policies, as well as incident response and security policy disclosures. No contact emails or phone numbers are directly provided, which may impact user trust and compliance with privacy regulations. The domain WHOIS data is consistent with the business claims, showing a mature registration since 2016 without privacy protection, indicating transparency. Overall, Elevar presents a professional and credible online presence with strong business credibility and technical infrastructure. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Ordersify is a small, Vietnam-based company specializing in developing Shopify apps focused on order automation and logistics. Their product suite includes tools such as Order Printer, Automation Tags, Product Alerts, and others, serving over 12,000 merchants globally. The company positions itself as a niche SaaS provider within the e-commerce ecosystem, leveraging Shopify's platform to deliver value-added services that help merchants automate order management and increase sales through notifications and integrations with marketing platforms. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various analytics and customer support tools like Google Analytics, Hotjar, and HelpScout Beacon. The site is hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic with a privacy policy and cookie consent modal present, but no advanced GDPR indicators or data protection officer information. Overall, the website is professional, well-branded, and trustworthy with clear business information and social media presence. Recommendations include enhancing DNS security, publishing security policies, and improving privacy compliance transparency.

W

Willy-Brandt-Schule Gießen

wbs-giessen.de

48

The Willy-Brandt-Schule Gießen is a vocational educational institution located in Gießen, Germany, offering a broad range of educational programs including Fachoberschule, Modeschule, Berufsfachschule, and dual vocational training. The school targets students, parents, and local businesses, positioning itself as a key regional provider of vocational education. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and email obfuscation, but lacks advanced security headers and a cookie consent mechanism. Contact information is clearly presented, enhancing trust and credibility.

H

Hartmann Holzbau GmbH & Co. KG

hartmann-holzbau-hessen.de

48

Hartmann Holzbau GmbH & Co. KG is a well-established family-owned company specializing in ecological timber construction with over 100 years of tradition in the Hessen region of Germany. The company offers a range of services including house building, timber construction, renovations, and engineering timber works, focusing on sustainable and regional building practices. Their website reflects a professional and consistent brand image with clear contact information and multiple certifications that reinforce their market credibility. Technically, the website is built on TYPO3 CMS with modern front-end libraries such as jQuery, Owl Carousel, and Bootstrap, providing a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although some accessibility features could be improved. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks important security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. There is no visible incident response or vulnerability disclosure information, which could be improved to strengthen trust and preparedness. Overall, the website presents a trustworthy and professional image with solid business credibility and technical implementation. Strategic improvements in privacy compliance and security policies would further enhance their security posture and regulatory adherence.

A

Animals' Angels

animals-angels.de

53

Animals' Angels is a German-based non-profit organization dedicated to the welfare of farmed animals, with a particular focus on protecting animals during transport. The organization operates internationally, advocating for improved animal welfare laws and raising public awareness through reports, publications, and monitoring activities. Their website is professionally designed using TYPO3 CMS, featuring clear navigation, multilingual support, and integration with privacy compliance tools such as Usercentrics. The organization maintains active social media channels and provides transparent contact information, enhancing trust and engagement with supporters. Technically, the website employs modern frameworks and analytics tools like Matomo, ensuring good performance and privacy-conscious tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, Animals' Angels presents a credible, well-maintained digital presence aligned with its mission and audience.

Busy Rooms Limited operates a cloud-based Central Reservation System (CRS) and related hospitality technology solutions targeting hotel groups, independent hotels, resorts, vacation rental companies, and destination organizations globally. The company positions itself as a scalable, adaptable, and brandable platform that integrates multiple hospitality functions including booking engines, channel management, revenue management, and property management. Their market presence spans over 80 countries with partnerships with major industry players such as Expedia, Hotelbeds, Oracle Opera, and Infor. Technically, the website is built on modern frameworks including October CMS and Bootstrap, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though HTTP security headers and explicit security policies are absent. WHOIS data is unavailable, which slightly reduces trustworthiness but the overall business credibility remains high due to transparent contact information and industry partnerships.

A

Allianz Global Assistance

allianztravel.com

61

Allianz Global Assistance operates a comprehensive travel insurance website offering a variety of travel protection plans including trip cancellation, emergency medical coverage, rental car insurance, and 24/7 assistance services. The company is positioned as a global leader in travel protection, serving millions of customers annually with a strong brand presence and multiple trust indicators such as industry awards and customer testimonials. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to travelers seeking insurance solutions. Technically, the site leverages modern web technologies including AngularJS, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Adobe DTM, and VWO. Hosting appears to be via Akamai CDN, ensuring fast performance and global availability. Security best practices are observed with HTTPS enforcement, CSRF protection, reCAPTCHA integration, and consent management via OneTrust, although explicit security policies and vulnerability disclosure mechanisms are not publicly documented. The security posture is strong with no evident vulnerabilities or exposed sensitive data, and privacy compliance is robust with comprehensive privacy and cookie policies. However, the absence of WHOIS registration data for the domain is a notable anomaly that reduces transparency but does not detract from the overall legitimacy given the strong brand and content consistency. Overall, the website presents a low risk profile with high professionalism and trustworthiness, suitable for its target audience of travelers seeking reliable insurance coverage and assistance services.

The website buntogel-buktibayar.org operates as a niche platform showcasing jackpot payment proofs related to online gambling games such as Pragmatic Play, PG Soft, and various lottery pools. It targets mature audiences interested in gambling results and payment verifications. The site uses a basic technical stack including Bootstrap and jQuery, with images hosted on external CDNs like DigitalOcean Spaces and gifyu.com. Despite functional content and search features, the site lacks fundamental privacy, cookie, and terms of service policies, and does not provide any contact or security incident response information. Security posture is weak with no HTTPS enforcement or security headers detected. The WHOIS data is suspicious, showing a domain creation date in the future and no registrant details, which undermines trust and legitimacy. Overall, the site presents basic content quality and technical implementation but falls short on security, privacy compliance, and business credibility.

The website RTP SLOT BUNTOGEL provides RTP statistics and slot game pattern information primarily targeting Indonesian online slot players. It serves as an informational and referral platform linking to external gambling sites. The technical infrastructure uses common frontend libraries such as Bootstrap, Swiper.js, and Animate.css, hosted on DigitalOcean Spaces CDN. However, the site lacks advanced SEO, accessibility, and security features. The security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. WHOIS data is unavailable due to unsupported TLD WHOIS, reducing trust and transparency. Overall, the site is functional but basic, with significant gaps in security and compliance.

E

Edchemy Solutions India Private Limited

edchemy.com

64

Edchemy Solutions India Private Limited operates a comprehensive digital education platform designed to support institutions, teachers, and students. The platform offers a wide range of services including live online classes, recorded video publishing, digital assignments, attendance management, and student relationship management. Trusted by over 150 educational institutions globally, Edchemy positions itself as a robust and user-friendly solution for automating and streamlining educational administration and learning processes. The company targets K-12 schools, universities, and distance education providers primarily in India. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Owl Carousel, and integrates popular analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized with a clean design and clear navigation, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies. From a security and compliance perspective, the absence of privacy and cookie policies and lack of WHOIS registration data are notable gaps. No forms or incident response contacts are present, limiting transparency in data handling and security incident management. The website content is safe and appropriate for a general audience with no adult or questionable material detected. Overall, Edchemy presents a credible and professional educational technology business with room for improvement in privacy compliance and security best practices. Further verification of domain registration and implementation of comprehensive privacy and security policies are recommended to enhance trust and compliance.

S

sophyapp

sophyapp.com

55

sophyapp is a specialized SaaS platform targeting physiotherapists and other therapists, enabling them to create and share personalized exercise programs with patients via a web application and a free patient app. The platform offers a large exercise catalog, video coaching, and feedback mechanisms to improve patient motivation and treatment outcomes. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Technically, it is built on WordPress with modern libraries and frameworks, and uses Matomo for analytics, ensuring moderate user tracking with privacy considerations. Security posture is generally good with HTTPS and cookie consent, though explicit security headers are not detected and no public security policy or incident response contacts are found. The WHOIS data is missing or unavailable, which is unusual and slightly reduces trust, but the overall business presence and content quality are strong. The site is linked to its parent company hoferdigital and partners like treatsoft.at, indicating a credible business ecosystem.

H

hoferdigital gmbh

hoferdigital.at

54

hoferdigital gmbh is a small Austrian IT service provider specializing in IT solutions, IT security, and software development for small and medium-sized enterprises (KMUs). The company emphasizes personal relationships, quality, and competence, positioning itself as a trusted regional partner. Their business model includes product management and partnerships with related brands such as treatsoft, sophyapp, and hardsoft. The website is professionally designed, mobile-optimized, and provides clear contact information and partner links. Technically, the site runs on WordPress with modern libraries and frameworks, including Bootstrap and Matomo for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable, which limits domain trust assessment, but the website content and business presence appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility.

P

Pandia

pandia.com

63

Pandia operates as an online directory platform connecting users with creative service providers specializing in graphic design, web design, app development, SEO, and video production. The website positions itself as the largest graphic designer index on the web, targeting businesses and individuals seeking creative professionals globally. The platform offers categorized listings by country and service type, facilitating straightforward connections between clients and service providers. The business model is primarily marketplace/directory-based, focusing on ease of discovery and engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slick Slider, and star rating plugins, ensuring a responsive and user-friendly experience. The site is mobile-optimized and uses HTTPS with embedded secure iframes for forms. However, there is a lack of advanced security headers and cookie consent mechanisms, which are important for compliance and security posture. Analytics are implemented via Clicky, indicating moderate user tracking. From a security perspective, the site benefits from HTTPS and CSRF token usage but lacks explicit security policies, incident response contacts, and security headers. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. No contact emails or phone numbers are provided, limiting direct communication channels. Privacy policy and terms of use are present but cookie compliance is missing, which may impact GDPR compliance. Overall, while the website is functional, content-rich, and professionally designed, the unclear domain registration status and missing security and privacy compliance elements present moderate risks. Strategic improvements in domain legitimacy verification, security header implementation, and privacy compliance would enhance trust and security posture.

S

Shenzhen Trustoo Technology Co., Ltd.

trustoo.io

64

Trustoo.io is a technology company operating a Shopify product reviews application designed to help over 10,000 merchants boost sales, increase conversion rates, build trust, and generate user-generated content. The company positions itself as a leading provider in the e-commerce SaaS space, targeting Shopify merchants seeking to enhance their online store credibility and customer engagement. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with integrated analytics and SEO optimization. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and formal privacy or incident response disclosures. Overall, the business appears legitimate but would benefit from enhanced transparency and compliance documentation to strengthen trust and regulatory adherence.

L

Loloyal

loloyal.com

61

Loloyal is a loyalty and rewards program provider focused on Shopify merchants, offering features such as points programs, referral incentives, VIP tiers, and customizable reward panels. The company is rebranding under the Trustoo.io brand to provide broader retention solutions. The website is professionally designed using WordPress and WooCommerce with Elementor, integrating modern web technologies and marketing tools like Google Tag Manager and Calendly. The platform targets small to medium-sized e-commerce businesses seeking to enhance customer engagement and retention through loyalty programs. Technically, the website demonstrates a solid infrastructure with HTTPS enabled and a modern tech stack, though some improvements in security headers and privacy compliance mechanisms are recommended. The absence of WHOIS registration data is a notable anomaly, potentially impacting trustworthiness, but the site maintains strong branding consistency and partner relationships. Analytics usage is moderate, with Google Analytics present but not fully configured. Security posture is generally good with no obvious vulnerabilities detected, but the lack of published security policies and incident response information suggests room for maturity. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site presents a low to moderate risk profile with recommendations to enhance transparency and security practices.

C

CSC AppealTrack®

appealtrack.com

64

CSC AppealTrack is a specialized real estate appeal management software platform designed to assist teams in assessing property appeal strength, managing appeals, and consolidating related documents and payments. The platform is branded under CSC Global, a recognized entity in corporate services. The website serves primarily as a secure login portal for existing users, with limited public-facing content on this page. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and other libraries, and uses ASP.NET MVC framework conventions. Security measures include HTTPS usage and anti-forgery tokens, but visible security headers and privacy policies are absent, indicating room for improvement in compliance and transparency. Overall, the site is professional and business-focused with no signs of malicious activity or adult content.

D

Deutscher Reiseverband

drv-netzwerkstatt.de

42

The DRV-Netzwerkstatt website represents a professional event platform affiliated with the Deutscher Reiseverband, focused on networking and knowledge exchange within the tourism industry. The site targets industry professionals and offers biannual events to foster cross-sector collaboration. The business model centers on event hosting and community building, supported by a small but consistent team with clear contact channels and social media presence. Technically, the website is built on TYPO3 CMS, hosted by Schlund Technologies, and incorporates modern web standards including responsive design and Google Tag Manager for analytics. The site performs moderately well with good SEO and accessibility basics, though some improvements in security headers and explicit policies could enhance its posture. Security-wise, the site enforces HTTPS and provides cookie consent mechanisms, indicating GDPR awareness. However, it lacks publicly visible security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or suspicious elements were detected, and the WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy standards. Strategic improvements in security transparency and policy publication would further strengthen its risk profile and user trust.

T

treatsoft

treatsoft.at

53

treatsoft is a cloud-based practice management software tailored for therapeutic professionals in Austria, including physiotherapists, dietitians, masseurs, and psychotherapists. The company positions itself as a comprehensive solution for appointment scheduling, billing, accounting, and documentation, emphasizing ease of use and cloud accessibility. The website reflects a mature digital presence with modern technologies such as WordPress, Bootstrap, and Matomo analytics, supported by a cookie consent mechanism compliant with GDPR. The parent company is hoferdigital, which is clearly indicated on the site, enhancing corporate credibility. Technically, the website is well-structured, mobile-optimized, and uses secure HTTPS connections. Security best practices are partially implemented, with encrypted data transport and cookie consent, but some HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to NIC.AT restrictions limits domain trust assessment, but the website's professional content and clear contact information mitigate concerns. Overall, treatsoft demonstrates a strong security posture and compliance with privacy regulations, providing a trustworthy platform for its target audience. Strategic improvements in security headers and publishing a security.txt file would further enhance its security maturity.

A

Advanzia Bank

tarjetayou.es

60

Tarjeta YOU is an online credit card service operated in partnership with Advanzia Bank, targeting residents in Spain. The website offers a no-annual-fee Mastercard Gold credit card with flexible payment options and travel insurance. The business model focuses on digital-first credit card issuance and management without requiring customers to change banks. The site is well-branded, professional, and provides comprehensive legal and privacy information, enhancing trustworthiness. Technically, the website uses AngularJS and Bootstrap frameworks, integrates Google Tag Manager for analytics, and employs Usercentrics for cookie consent management. Hosting includes Microsoft Azure Blob Storage for legal documents. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate with room for improvement. Security posture is solid with HTTPS enforced and digital signature integration, but lacks some security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with GDPR-aligned policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for an online financial product, with minor technical and security enhancements recommended to further strengthen its posture.

B

BUNTOGEL

klikdisini.pro

49

BUNTOGEL is an Indonesian online gambling platform specializing in lottery (togel), slot games, and live casino offerings. It positions itself as a trusted bandar togel with large jackpots and multiple game providers. The website infrastructure uses common web technologies including jQuery, Bootstrap, and Cloudflare DNS services. However, the domain WHOIS data shows inconsistencies with a future creation date, which raises concerns about legitimacy. Security posture is moderate with HTTPS usage but lacks advanced security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies. The site collects sensitive user data including banking details via registration forms. Overall, while the platform appears operational and professionally designed, the domain inconsistencies and lack of transparency in privacy and security policies present risks.

J

JobCute

jobcute.com

59

JobCute is a Thai-based online job portal offering a wide range of job listings across multiple industries and regions within Thailand. The platform facilitates job seekers to upload resumes and apply easily, while employers can post job vacancies to attract qualified candidates. The website is bilingual, supporting Thai and English languages, targeting primarily the Thai job market. Technically, the site employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and OneSignal for push notifications. The site is served over HTTPS with a valid SSL certificate, ensuring secure data transmission. However, the absence of visible privacy and terms of service pages and the lack of WHOIS registration data raise concerns about compliance and domain legitimacy. Overall, the site presents a professional and functional job search experience but would benefit from enhanced transparency and security practices.

B

Beae JSC

lumise.com

60

Lumise.com is a specialized e-commerce website offering a comprehensive product designer tool tailored for personalization stores. The company, Beae JSC, founded in 2017 and based in Vietnam, provides a robust platform enabling businesses to design, sell, and print custom products efficiently. Lumise holds a strong market position with over 6500 customers and a high customer satisfaction rating. The website features demos, add-ons, and extensive resources to support its user base. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS, ensuring a modern and responsive user experience. Security posture is solid with HTTPS and domain protection statuses, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Lumise.com presents a professional, trustworthy, and business-focused digital presence.

A

ARTAJASATEKNIK

artajasateknik.com

59

ARTAJASATEKNIK is a small Indonesian technology business specializing in the sale and installation of CCTV, PABX, networking equipment, and related services primarily serving the Malang Raya region. The company operates an e-commerce enabled website built on WordPress, offering a product catalog, blog content, and customer engagement via WhatsApp. The website demonstrates moderate digital maturity with use of modern frameworks like Bootstrap and integration of Google Analytics and Facebook SDK for marketing and tracking. Security posture is adequate with HTTPS and domain transfer protections, but lacks published privacy and cookie policies, as well as vulnerability disclosure mechanisms. Overall, the website is functional and professional but could improve compliance and security transparency.

M

Medijump

medijump.com

58

Medijump operates as a global medical tourism marketplace, connecting patients with vetted clinics and hospitals worldwide. The platform offers detailed procedure listings, pricing, and personalized enquiry services, positioning itself as a specialized player in the healthcare tourism sector. The website demonstrates a professional design with good content quality and user experience, supported by recognized medical accreditations that enhance trust. Technically, the site uses modern technologies such as Google Tag Manager and Bootstrap, with HTTPS enabled and basic security measures like CSRF tokens in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. Overall, the site is functional and trustworthy from a user perspective but requires improvements in transparency and privacy compliance to strengthen its security posture and business credibility.

P

Phuket Surgery

phuket.surgery

45

Phuket Surgery is a specialized online platform established in 2017 that facilitates medical tourism in Thailand, focusing on connecting patients with reputable medical providers in locations such as Phuket and Bangkok. The platform offers services including procedure search, personalized quotes, and booking assistance, positioning itself as a trusted marketplace for international patients seeking healthcare services in Thailand. The website is professionally designed with good content quality, clear navigation, and consistent branding, targeting medical tourists and patients interested in cosmetic and other medical procedures. Technically, the website is built on WordPress using Elementor and several modern web technologies including jQuery, Bootstrap, and Google reCAPTCHA for form security. SEO is well implemented with Yoast SEO plugin and structured data in JSON-LD format. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and employs Google reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and privacy compliance mechanisms such as cookie consent banners are missing. WHOIS data is unavailable or privacy protected, which is common but reduces transparency. No critical vulnerabilities or suspicious content were found. Overall, Phuket Surgery presents a credible and professional online presence for medical tourism services in Thailand, with recommendations to enhance security headers, privacy compliance, and transparency to further strengthen trust and compliance.

R

Recolize

recolize.com

72

Recolize is a small technology company specializing in personalized product recommendation software and web development services for e-commerce businesses. The company presents itself as a team of experienced software architects offering project management and software development primarily in PHP, JavaScript, and Python. Their flagship product, Recolize Recommendations, integrates personalized recommendations into various e-commerce platforms with ease. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies with user consent mechanisms. Security measures include HTTPS and Google reCAPTCHA on forms, though explicit security headers are not detected. The absence of WHOIS registration data is a notable anomaly, reducing trustworthiness slightly, but the overall business presence and content quality suggest legitimacy. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed.

R

RE Marketing

remarketz.com

53

RE Marketing is a Singapore-based digital marketing agency specializing in SEO, PPC, conversion optimization, and web design & development services primarily targeting businesses in Southeast Asia. The company positions itself as a leading integrated digital communications agency with a strong focus on enhancing online customer journeys and building connected brands. The website reflects a professional and modern digital presence, leveraging WordPress CMS with popular plugins such as Elementor and Yoast SEO to deliver a responsive and SEO-optimized experience. Multiple client case studies and testimonials reinforce their market credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and content-rich website mitigates some risk. Contact mechanisms include phone, email, and multiple web forms secured with Google reCAPTCHA.

M

MyMediGroup

mymedigroup.com

53

MyMediGroup operates as a comprehensive online marketplace and referral platform specializing in medical tourism. Founded in 2018 and part of Digital Broker Ventures, it offers clients worldwide the ability to compare and book medical procedures across multiple regions through its subsidiaries. The platform emphasizes ease of use, transparency, and value, providing services such as direct booking, travel and accommodation assistance, and bypassing hospital waiting lists. The website is professionally designed with consistent branding and a clear focus on healthcare services for international patients. Technically, the website is built on WordPress using popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution. It employs modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies. No direct contact information for security incidents or data protection officers is provided. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy and registration transparency. However, the professional web presence and active social media links support the business credibility. Overall, MyMediGroup presents a solid business offering in the healthcare sector with a good digital presence but would benefit from enhanced security practices, clearer privacy compliance, and improved transparency regarding domain registration and contact information.

A

aBit Private Limited

abit.bt

56

aBit Private Limited is a Bhutanese IT solutions company specializing in website development, cloud server solutions, hospitality software, IT infrastructure, and digital marketing. The company targets businesses in Bhutan seeking professional IT services to enhance their online presence and operational efficiency. The website reflects a well-established local market position with over 1000 clients and a strong portfolio. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and social media SDKs, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA but lacks advanced security headers and formal privacy policies, which are areas for improvement. Overall, the site is professional and trustworthy with clear contact channels and business legitimacy.

B

Barebells Functional Foods France SAS

vitaminwell.fr

45

Vitamin Well France operates as an e-commerce platform specializing in vitamin-enriched functional beverages targeted at health-conscious and active consumers. The brand is well-established with a domain age of over a decade, supporting its market presence in France. The website is professionally designed, mobile-optimized, and provides comprehensive customer engagement features including reviews, newsletter subscription, and social media integration. Technically, the site leverages WordPress with WooCommerce, enhanced by modern JavaScript libraries and marketing tools such as Google Tag Manager and Klaviyo. Security posture is strong with HTTPS, security headers, and a consent management platform ensuring GDPR compliance. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good privacy and security practices.

CSC is a global enterprise specializing in registered agent, compliance, tax, fund administration, capital markets, and digital brand and cyber-risk solutions. The company targets Fortune 500 corporations and large enterprises, providing comprehensive business services across more than 140 jurisdictions. Their market position is strong, supported by a consistent brand presence and trust indicators such as BBB accreditation and client testimonials. The website content is professional, well-structured, and designed to serve a sophisticated B2B audience. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Optimizely for analytics and optimization. The site is mobile-optimized, accessible, and SEO-friendly, delivering a good user experience with moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are absent. The WHOIS data is notably missing or unavailable, which is unusual for a domain of this profile and introduces some uncertainty regarding domain registration transparency. However, the website content and external trust signals strongly support the legitimacy of the business. Privacy and cookie policies are present with consent mechanisms, indicating compliance with data protection regulations. Overall, CSC presents as a credible, enterprise-level business with a mature digital presence. The main risk lies in the lack of WHOIS transparency and absence of published security policies, which should be addressed to enhance trust and compliance.

G

Global Environment Facility

thegef.org

70

The Global Environment Facility (GEF) website serves as the official platform for an international partnership focused on environmental funding and sustainability initiatives. The site provides comprehensive information about the organization's structure, funding mechanisms, projects, and stakeholder engagement. It targets governments, NGOs, civil society, and private sector partners globally. The website is professionally designed with clear navigation and rich content, reflecting a mature digital presence. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries and frameworks such as jQuery and Bootstrap. It integrates Google Analytics and Tag Manager for tracking and uses responsive design techniques to ensure good mobile usability. While performance is moderate, the site is accessible and well-structured. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers in the HTML source, which could be improved. No vulnerability disclosure or incident response information is publicly available, which is common for such organizations but could be enhanced for transparency. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. The lack of WHOIS data due to privacy protection is justified given the organization's international nature. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around incident response.

S

SAARC Development Fund

sdfsec.org

47

The SAARC Development Fund (SDF) website represents a regional financial institution dedicated to promoting integration and economic cooperation among SAARC Member States. Established in 2010 and headquartered in Thimphu, Bhutan, SDF operates through three funding windows—Social, Economic, and Infrastructure—supporting over 90 projects across member countries. The website content is well-structured, professionally designed, and targets government entities, NGOs, and regional stakeholders interested in development initiatives. Technically, the site is built on WordPress using modern libraries such as Bootstrap and jQuery, with mobile optimization and basic SEO practices in place. Security measures include HTTPS and Google reCAPTCHA, though additional security headers are absent. The absence of WHOIS data limits domain trust verification, but the official SAARC affiliation and consistent branding support legitimacy. Privacy and cookie policies are missing, which impacts compliance scores.

S

SAARC Cultural Centre

saarcculture.org

48

The SAARC Cultural Centre website serves as the official online presence of a regional governmental/non-profit organization dedicated to promoting cultural cooperation among SAARC member states. The site provides information on upcoming cultural events, announcements, publications, and resources, targeting cultural communities, researchers, and the general public interested in South Asian culture. The organization is positioned as a key regional cultural institution with a focus on heritage and artistic collaboration. Technically, the website is built on WordPress CMS using Bootstrap and jQuery frameworks, with integration of Google Fonts and Font Awesome for styling and icons. Hosting and domain registration are managed through GoDaddy.com, LLC, with DNS hosted on reseller infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers such as Content-Security-Policy or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, including email, phone, and physical address, along with official social media links. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which can be improved by adding policies and security headers. There is no indication of adult or questionable content, and no WAF or blocking mechanisms interfere with content access.

D

Digital Broker Ventures

dbventures.io

55

Digital Broker Ventures is a Singapore-based technology investment and development company focused on transforming online marketplaces in Southeast Asia. They build and invest in digital platforms across sectors including real estate, healthcare, media, and emerging technologies like NFTs and metaverse land transactions. Their portfolio includes notable partners such as FazWaz Group, MyMediTravel, and Thaiger Media Group, positioning them as a significant regional player with a strong ecosystem approach. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO, WPBakery, and Slider Revolution. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, with HTTPS enforced and Google reCAPTCHA implemented for form security. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and DNSSEC. From a security perspective, the site shows a solid baseline with HTTPS and domain registration protections but is missing explicit privacy and cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is present, indicating room for improvement in transparency and security governance. Overall, the website is professional and trustworthy with a moderate to good security posture. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and establishing incident response contacts to enhance compliance and trust.

A

Amtivo Group Limited

amtivo.com

79

Amtivo Group Limited is a professional certification services provider specializing in ISO and industry certifications. The company operates globally with multiple subsidiaries and offers expertise, tools, and technology to support businesses on their certification journey. Their market position is that of a trusted and impartial certification partner, supported by recognized awards such as the 2024 Feefo Gold Trusted Service Award. The website reflects a medium-sized enterprise with a clear business model focused on certification and compliance services. Technically, the website is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. Hosting is provided via Oracle Cloud, ensuring reliable infrastructure. Security posture is good with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and no security.txt file is present. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-optimized for its target audience of business owners seeking certification services.

V

Vitamin Well

vitaminwell.de

56

Vitamin Well Deutschland operates a professional e-commerce website offering functional, low-calorie vitamin-enriched beverages targeting health-conscious consumers in Germany. The brand, founded in 2008 in Sweden, has established a solid market presence with multiple product lines and international reach. The website is built on WordPress with WooCommerce, leveraging modern web technologies and third-party marketing and analytics tools such as Google Tag Manager, Klaviyo, and Usercentrics for GDPR-compliant consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is moderate due to the presence of a cookie consent mechanism but lack of visible privacy and terms policies. Contact is available via a contact form but no direct emails or phone numbers are published. Overall, the site is professional, trustworthy, and safe for general audiences.

T

T&M Hansson IT AB

hanssonit.se

50

T&M Hansson IT AB is a Swedish technology company specializing in Linux server administration, virtual machines, VPS hosting, and IT consultation services. With a customer base exceeding 5000 globally, the company positions itself as a trusted provider of simplified IT solutions, particularly focusing on Debian-based Linux systems and Nextcloud virtual machines. Their business model combines product sales via an e-commerce shop and personalized support and consulting services. The website reflects a small-sized enterprise with consistent branding and a professional online presence. Technically, the website is built on WordPress 6.8.3, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates security features like Google reCAPTCHA v3 and a cookie consent mechanism, indicating awareness of privacy and security best practices. The site is mobile-optimized with good SEO and accessibility fundamentals, though some improvements in security headers and explicit privacy documentation could enhance its posture. Security-wise, the site enforces HTTPS and uses encrypted contact forms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the exact domain www.hanssonit.se suggests it may be a subdomain or alias, which slightly reduces trust but is mitigated by the professional content and client testimonials. Overall, the website presents a credible and professional technology service provider with a solid digital infrastructure. Strategic enhancements in security transparency and WHOIS domain registration clarity would further strengthen trust and compliance.

N

Nextcloud

nextcloud.com

70

Nextcloud is a leading open source content collaboration platform offering a comprehensive suite of products including file storage, real-time document editing, video conferencing, groupware, and AI-powered assistant tools. The company targets enterprises, public sector organizations, service providers, education, and home users, positioning itself as a market leader in privacy-focused, self-hosted cloud collaboration solutions. The website reflects a mature, professional business with a strong global presence and a large user base. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel. It employs performance optimizations like WP Rocket and integrates Matomo for privacy-respecting analytics. The site is mobile-optimized, accessible, and SEO-friendly, demonstrating a high level of digital maturity. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms. However, DNSSEC is not enabled, and some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of a security.txt or explicit vulnerability disclosure page is noted. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and a professional security posture. Strategic improvements in DNS security and security header implementation would further enhance trust and resilience.

The website partnerconsole.net serves as a login portal for 'The Console', a customer console service operated by Domain Directors Pty Ltd under the trading name TPP Wholesale. The business appears to be a medium-sized Australian technology company specializing in domain wholesale and management services. The site is primarily targeted at business customers and resellers who require access to domain management tools. The domain has been registered since 2010, indicating a stable and established presence in the market. Technically, the website uses a traditional tech stack including jQuery 1.12.4, Bootstrap, and multiple analytics tools such as Google Analytics and Microsoft Clarity. Hosting is likely on Amazon AWS infrastructure, inferred from DNS servers. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. The absence of modern frameworks or CMS suggests a custom or legacy platform. From a security perspective, the site enforces HTTPS and has domain status flags to prevent unauthorized domain transfers or deletions. However, it lacks DNSSEC, security headers, and uses an outdated jQuery version with known vulnerabilities. No privacy or cookie policies are present, and no contact or incident response information is visible, which limits compliance and user trust. Analytics usage is moderate but lacks visible consent mechanisms. Overall, the website is functional and moderately secure but would benefit from improvements in security best practices, privacy compliance, and user trust elements. The domain registration data supports the legitimacy of the business, with no suspicious patterns detected.