Security Directory

U

Universidad CEU San Pablo

uspceu.com

58

Universidad CEU San Pablo is a prominent private university based in Madrid, Spain, offering a wide range of undergraduate, postgraduate, and doctoral programs. It positions itself as a leading educational institution with a strong tradition and international outlook, supported by accreditations such as WSCUC/WASC. The website is professionally designed, mobile-optimized, and provides comprehensive information for prospective students, including academic offerings, admissions, and international programs. The presence of detailed privacy and cookie policies with consent mechanisms indicates good compliance with data protection regulations. Technically, the site uses modern web technologies including ASP.NET WebForms, jQuery, Bootstrap, and Cookiebot for consent management, hosted on a CMS platform (DNN). Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The lack of WHOIS data is unusual but does not detract significantly from the trustworthiness given the strong branding and external references. Overall, the site reflects a mature digital presence suitable for a large educational institution.

H

Hinrichs & Partner

stb-hinrichs.de

66

Hinrichs & Partner is a German tax consultancy firm providing personalized and professional tax advisory and accounting services to a broad range of clients from small businesses to large enterprises. The firm emphasizes digital client engagement through its Kanzlei-App and maintains a strong commitment to environmental sustainability. The website is built on WordPress with modern plugins and technologies, offering a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie management, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website and domain registration indicate a trustworthy and legitimate business with active operations and a professional online presence.

S

Starthaus Bremen

starthaus-bremen.de

58

Starthaus Bremen is a regional consulting and support organization focused on assisting startups and entrepreneurs in Bremen and Bremerhaven. The website provides comprehensive information about consulting services, financing options, mentoring programs, and a rich calendar of events designed to support business founders and growing companies. The platform positions itself as a central hub for startup support in the region, emphasizing free consultations and a strong network of partners. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and FontAwesome, built on the SixCMS content management system. Accessibility features such as text zoom and high contrast modes are implemented, enhancing usability. However, explicit privacy and cookie policies are not found, and no security headers or incident response information are present, indicating areas for improvement in security and compliance. Overall, the website is professional and content-rich, but could benefit from enhanced security posture and privacy compliance to strengthen trust and regulatory adherence.

F

FHnet

eu-strategie-fh.net

57

FHnet operates as a collegial network of German universities of applied sciences focused on advancing EU research activities and funding participation. The platform serves as an information hub and strategic collaboration space for its members, primarily targeting academic and administrative staff involved in EU projects. The website is professionally designed, content-rich, and consistent with its educational and non-profit mission. Technically, it leverages WordPress with modern libraries such as Bootstrap and Leaflet.js, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with a privacy policy and cookie information, but lacks an explicit consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, with moderate technical and security maturity.

L

Land Rheinland-Pfalz

rlp.de

65

The website www.rlp.de serves as the official internet portal for the state government of Rheinland-Pfalz, Germany. It provides comprehensive information about the state, its government, current news, thematic focuses, and public services. The portal targets citizens, businesses, and other stakeholders interested in the region. It is positioned as a trusted government source with a broad range of services including news dissemination, social media engagement, and access to government departments. Technically, the site is built on TYPO3 CMS with Bootstrap framework, ensuring a modern, responsive, and accessible user experience. Hosting is managed via Versatel, a reputable German ISP. The site demonstrates good performance and SEO practices, with multilingual support and clear navigation. From a security perspective, the site enforces HTTPS and employs secure forms, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and a published security or incident response policy. Privacy compliance is strong with a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the site is a professional, secure, and trustworthy government portal with minor areas for improvement in security transparency and cookie management.

I

IVBM GmbH

ivbm-gmbh.de

57

IVBM GmbH is a small German real estate service company specializing in property management, asset management, and real estate valuation. The company operates primarily in Bremen and Hannover, targeting real estate owners and investors seeking professional management and valuation services. Their website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress with Bootstrap and uses a GDPR-compliant cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-maintained, supporting the company's credibility in its niche market.

B

Bernd Pfelzer

ra-pfelzer.de

38

Bernd Pfelzer operates a professional legal and notary practice based in Bremen, Germany, offering services primarily in tenancy law, inheritance law, traffic accident law, and debt collection. The website is designed to serve local clients seeking legal counsel and notary services, presenting clear contact information and service descriptions. The business is positioned as a small, specialized legal entity with a focus on personal client service. Technically, the website is built on WordPress using Bootstrap and FontAwesome, hosted on kasserver.com. It demonstrates good mobile optimization and moderate performance. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency in security governance. No tracking or advertising scripts were detected, indicating minimal user tracking and a privacy-respecting approach. Overall, the site is trustworthy and professional but could improve in privacy compliance and security best practices.

R

Roistat

roistat.com

45

Roistat is a mature SaaS company founded in 2014, specializing in marketing analytics and automation solutions targeted at CEOs, marketers, business analysts, and sales leaders. The platform offers a comprehensive suite of tools including summary reports, lead generation, multichannel analytics, and CRM integrations, positioning itself as a key player in marketing intelligence. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the site leverages modern web technologies such as jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO practices and accessibility features. Tracking is implemented via Yandex.Metrika and VK retargeting pixels, reflecting moderate user tracking practices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. However, incident response and vulnerability disclosure policies are not publicly available. Overall, Roistat presents a trustworthy and professional online presence with a strong business model and technical foundation. Strategic improvements in security policies and transparency could further enhance its risk profile and customer confidence.

M

monbillet.ch

monbillet.ch

58

monbillet.ch is a Swiss online ticketing platform specializing in cultural events, festivals, and performances primarily in the French-speaking regions of Switzerland. The website offers detailed listings of venues and seasonal events, serving a general audience interested in theater, music, and cultural experiences. The platform positions itself as a regional niche player with a focus on hospitality and cultural event ticketing. Technically, the site employs modern web technologies including Bootstrap for responsive design, FontAwesome for icons, and Matomo for analytics with privacy-conscious tracking. The website demonstrates good design quality, clear navigation, and mobile optimization, contributing to a positive user experience. However, the absence of explicit privacy and cookie policies, as well as missing security headers, indicates gaps in compliance and security best practices. The security posture is moderate, with HTTPS usage and anonymized analytics being positive factors, but lacking formal security policies and headers. Overall, the site is legitimate and trustworthy based on WHOIS data and content alignment, but improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

U

Universidade de Vigo

uvigo.es

64

The Universidade de Vigo is a public higher education institution located in Galicia, Spain, offering a broad range of undergraduate, postgraduate, and doctoral programs. It serves a diverse audience including students, academic staff, researchers, and international participants. The website reflects a well-established academic institution with a strong regional presence and international orientation. Technically, the site is built on Drupal 8, leveraging modern web technologies and providing a responsive, accessible user experience. Security posture is solid with HTTPS enabled and privacy mechanisms in place, though some security headers could be enhanced. The domain WHOIS data is privacy protected, which is typical for institutional domains, and the website content aligns well with the domain's regional and institutional identity. Overall, the site is professional, trustworthy, and compliant with relevant privacy regulations.

J

Jaguar Land Rover Limited

jaguar.in

59

Jaguar Land Rover Limited operates the www.jaguar.in website as the official digital presence for Jaguar luxury vehicles in India. The site offers comprehensive information on vehicle models, electric vehicles, special vehicle operations, and ownership services, targeting affluent customers interested in premium automotive products. The website is built on a robust technical infrastructure leveraging Adobe Experience Manager, modern JavaScript frameworks, and integrates advanced analytics and marketing tools such as Adobe Target and Google Tag Manager. Security posture is strong with HTTPS enforced, consent-based tracking, and no evident vulnerabilities. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site reflects a mature, professional, and trustworthy digital asset aligned with Jaguar's global brand standards.

É

État de Vaud

vd.ch

64

The website www.vd.ch is the official portal of the Canton of Vaud, Switzerland, serving as the authoritative source for government information, administrative services, and public communication. It targets residents, businesses, and local authorities within the canton, providing comprehensive e-government services and up-to-date news on cantonal activities. The site is well-branded, professionally designed, and offers clear navigation and accessibility features. Technically, the site is built on TYPO3 CMS with Bootstrap framework, integrating modern analytics tools such as Matomo, Google Tag Manager, and Mouseflow for user behavior insights. The infrastructure supports secure HTTPS connections and includes cookie consent mechanisms, reflecting a mature digital presence. Mobile optimization and SEO practices are well implemented, ensuring good user experience across devices. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The domain registration aligns with the official government entity, confirming legitimacy and trustworthiness. Overall, the website demonstrates a strong security posture and high business credibility, with minor gaps in transparency around security policies. It is a safe, professional, and reliable resource for its intended audience.

U

Universidade de Vigo

uvigo.gal

62

The Universidade de Vigo is a public university located in Galicia, Spain, offering a wide range of undergraduate, postgraduate, and doctoral programs. It maintains a strong focus on innovation and internationalization, serving students, academic staff, researchers, and companies. The website reflects a well-established institution with comprehensive academic and institutional information, targeting a broad academic audience. Technically, the site is built on Drupal 8, leveraging modern web technologies including Google Analytics and Font Awesome, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, employs standard security headers, and anonymizes IPs in analytics, indicating a solid security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of malicious content or blocking mechanisms.

P

Pratiche.it S.r.l

pratiche.it

70

Pratiche.it S.r.l operates a leading online service platform in Italy specializing in the provision of official documents related to conservatory, land registry (catasto), Public Vehicle Registry (P.R.A.), and registry office (anagrafe) services. The website targets private individuals, professionals, and companies seeking quick and easy access to these documents online. The company positions itself as the number one service in its sector within Italy, offering a streamlined digital experience for document requests. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. Hosting is provided by Aruba S.p.A., a reputable Italian hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and accessibility. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses secure cookies for session management. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a strong privacy posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Pratiche.it presents a professional and trustworthy online presence with a solid foundation in security and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, improving accessibility, and adding terms of service to enhance legal clarity and user trust.

The Greek Energy Forum is a non-for-profit organization established in 2013, focusing on the energy sector in Greece and the wider Southeast European region. It offers services such as hosting events, publishing research and opinions, and providing memberships to energy professionals and stakeholders. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Cookiebot for cookie consent, and Google Analytics for tracking. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data, and the login form relies on client-side validation only. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit GDPR compliance statements or data protection officer contact found. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy from a content perspective but would benefit from improved security and transparency regarding domain registration.

Cavalleri Comunicazione is a small Italian communication agency specializing in communication strategies, brand and product communication, public relations, digital PR, international press office, events, fairs, and media planning. The company targets businesses and organizations seeking professional communication services and maintains a consistent and professional online presence. The website is built on WordPress using common frameworks and libraries such as Bootstrap and jQuery, with SEO optimization via Yoast and cookie compliance through Iubenda. The technical infrastructure is modern and mobile-optimized, though some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. WHOIS data is missing or privacy protected, which slightly reduces trust but is offset by the professional site and compliance features. Overall, the website is trustworthy and well-maintained, suitable for its business purpose.

D

digistats

digistats.ch

55

digistats is a Swiss-based privacy-focused web analytics provider offering a Google Analytics alternative that emphasizes user privacy by avoiding cookies, IP tracking, and fingerprinting. The company targets website owners who require GDPR, CCPA, and PECR compliant analytics solutions that are lightweight and easy to integrate. Their service includes real-time analytics, behavior tracking, geographic and technology insights, and adblocker-resistant data collection. The business model is subscription-based with a free 14-day trial and no credit card required, positioning digistats as a niche player in the privacy analytics market with a strong Swiss data protection emphasis. Technically, the website is built with modern web technologies including JavaScript and Bootstrap, likely running on Laravel backend as inferred from CSRF tokens. The site is fast, mobile-optimized, and well-structured with clear navigation and professional design. Hosting appears to be Swiss-based, supporting their privacy claims. The site uses HTTPS with strong SSL configuration and includes CSRF protection. However, explicit security headers are not detected, and no public security or incident response policies are published. From a security perspective, digistats demonstrates good practices by avoiding cookies and IP storage, reducing privacy risks. The presence of CSRF tokens and HTTPS is positive, but the absence of published security policies and vulnerability disclosure mechanisms is a gap. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration aligns with the website's Swiss privacy focus, enhancing legitimacy. Overall, digistats presents a trustworthy, professional, and privacy-compliant analytics service with strong technical and business foundations. Strategic improvements include publishing security policies, adding security headers, and providing explicit incident response contacts to further enhance trust and security posture.

P

PLR.Les Libéraux-Radicaux PRR Bienne

prr-bienne.ch

49

The website represents the local branch of the Liberal-Radical Party (PLR) in Bienne, Switzerland, serving as an informational and engagement platform for party members, voters, and the general public interested in local politics. It provides news, event agendas, party vision, elected officials information, and donation options. The site targets residents and politically engaged citizens in the Bern canton region. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Cookie consent is implemented with a high privacy standard, and Google Analytics is used with user opt-in. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, suitable for its non-profit political organization context.

V

Vergic AB

psplugin.com

60

Vergic AB operates the Vergic Engage platform, a digital-first customer engagement solution designed to improve customer experience and revenue through personalized digital interactions. The company targets businesses and public organizations seeking to enhance their digital customer service and sales channels. The platform offers a comprehensive suite of tools including live chat, chatbots, video, digital voice, and collaboration features, supported by APIs and integrations with major CRM and contact center systems. Recently acquired by Puzzel, Vergic maintains a strong market presence with reputable clients primarily in Sweden and the Nordic region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses several security best practices, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Overall, Vergic presents a professional and trustworthy digital presence with a solid business model and technical foundation. The main risk lies in the lack of WHOIS transparency, which should be investigated further. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining rigorous third-party script audits to ensure ongoing security and compliance.

H

HTML Codex

htmlcodex.com

60

HTML Codex is a specialized provider of free and premium HTML website templates, targeting web developers, designers, and businesses seeking customizable and developer-friendly templates. The company operates a WordPress-based website with a clear market position as a top designer and publisher of free HTML templates since its domain registration in 2019. The business model revolves around offering both free and paid templates, supported by advertising and premium sales. Technically, the website employs modern web technologies including Bootstrap, jQuery, and WordPress plugins such as Yoast SEO and Mailchimp integration, ensuring good SEO and user experience. Hosting and DNS are managed via Cloudflare, providing reliable performance and security.

D

Digital Partners Group

dpgroupcorp.com

54

Digital Partners Group is a technology company specializing in the development and production of proprietary technology-based products primarily focused on improving digital environments and fostering closer connections between companies and people. Founded in 2010, the company has evolved from mobile platform consultancy to multi-industry digital product development, offering solutions such as user analytics (Undato), subscription management (Sindyk Smart), mobile site optimization (Sindyk Speed), custom software development, and SEO services. The company targets digital actors and businesses seeking advanced technological solutions to enhance their digital presence and user engagement. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics for user tracking. Hosting and DNS services are provided via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile optimized with a professional design and clear navigation, though accessibility features are basic. SEO optimization is good with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers like Content-Security-Policy. No privacy or cookie policies are published, and no incident response or security policy information is available. Google Analytics is used without visible cookie consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and trustworthy with a moderate security posture and good business credibility. However, improvements in privacy compliance, security headers, and explicit security policies are recommended to enhance trust and regulatory adherence.

A

ASB Deutschland e.V.

wuenschewagen.de

43

Der Wünschewagen is a non-profit project operated by ASB Deutschland e.V. that fulfills last wishes of terminally ill people by providing free transportation to their desired locations. Established in 2014, it operates 23 regional vehicles across Germany, supported by nearly 2,000 volunteers and funded exclusively through donations. The website is professionally designed, mobile-optimized, and provides comprehensive information about the project, donation options, volunteer opportunities, and regional contacts. Technically, the site uses Concrete CMS with modern libraries like jQuery, Bootstrap, and Vue.js, and implements cookie consent and third-party content blocking mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site demonstrates high trustworthiness and strong alignment between domain registration and business claims.

S

SAGAFLOR AG

gruen-erleben.de

70

SAGAFLOR AG operates the website gruen-erleben.de, a well-established German retail platform focused on gardening products, tips, and services. The company emphasizes quality rooted in gardening tradition and offers a variety of services including product sales, gardening inspiration, a job board for the green sector, and gift vouchers. The website targets gardening enthusiasts and consumers interested in horticulture, positioning itself as a trusted and quality-focused brand in the German retail gardening market. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery, and Splide.js for interactive sliders. It integrates multiple analytics platforms including Google Analytics 4 and Matomo, and uses marketing tools like Elfsight widgets and UserWay for accessibility enhancements. Hosting appears to be managed via Deutsche Telekom infrastructure, ensuring reliable performance and security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the HTML, the overall security posture is good with no exposed sensitive data or vulnerable libraries detected. The site lacks a published security policy or incident response contact, which could be areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It provides a positive user experience with clear navigation and relevant content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.

Š

Škoda Auto Deutschland GmbH

skoda-auto.de

69

Škoda Auto Deutschland GmbH operates the official German website for the Škoda automotive brand, providing comprehensive information about their vehicle models, financing options, after-sales services, and electric mobility solutions. The company is a large, well-established player in the transportation sector in Germany, with a strong market presence and a broad portfolio including electric vehicles. The website targets both individual consumers and business customers, offering tools such as vehicle configurators, dealer locators, and financing calculators. Technically, the website employs a modern technology stack including React, Bootstrap, and jQuery, hosted on a reliable infrastructure likely powered by Microsoft Azure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with extensive use of structured data and meta tags. Performance is moderate, with good loading times and responsive design. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contact details. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website presents a low-risk profile with strong trust indicators and professional digital maturity. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen the security posture.

C

CUPRA

cupra.de

67

CUPRAofficial.de is the official German website for CUPRA, a premium automotive brand specializing in sporty and electric vehicles. The website offers comprehensive information about CUPRA's vehicle lineup, electric mobility solutions, financing, leasing, and after-sales services. It is clearly positioned as a premium brand under the Volkswagen Group umbrella, targeting automotive customers in Germany interested in modern, sporty, and electric vehicles. The site features a professional design, clear navigation, and is optimized for mobile devices. Technically, it is built on Adobe Experience Manager and hosted on Volkswagen Group's cloud infrastructure, integrating advanced marketing and analytics tools such as Google Tag Manager and Adobe Analytics. Security posture is strong with HTTPS enforced, security headers present, and cookie consent managed via OneTrust. However, explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

Dynapps is a specialized Odoo ERP implementation partner operating primarily in France and Europe. The company offers tailored ERP solutions to automate and optimize business processes across multiple sectors including retail, energy, healthcare, manufacturing, and logistics. Recognized as a leading Odoo Gold Partner and awarded Best Odoo Implementation Partner in Europe 2024, Dynapps demonstrates strong market positioning and expertise. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on the Odoo platform with modern web technologies and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, security headers, and ISO 27001 certification, though some improvements are recommended such as publishing a security policy and incident response contacts. Overall, the site is trustworthy, business-focused, and compliant with GDPR regulations.

Dynapps is a professional and leading Odoo implementation partner specializing in digitalizing business processes through tailored Odoo ERP solutions. The company holds a strong market position as the largest Odoo implementer in Europe and has been recognized as the Best Odoo Partner in Europe 2024. Their services cover a broad range of industries including technology, energy, manufacturing, retail, and healthcare, targeting innovative companies seeking efficient ERP solutions. The website is well-designed, mobile-optimized, and provides comprehensive information about their offerings and certifications. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap, FontAwesome, and integrates analytics and marketing tools like Google Tag Manager, Cookiebot, and Leadinfo. The site demonstrates good performance, accessibility, and SEO practices. Security-wise, Dynapps has achieved ISO 27001 certification, enforces HTTPS, and implements cookie consent mechanisms, reflecting a mature security posture. However, some security headers are not explicitly detected, and incident response contacts are not publicly listed. Overall, the website and business present a trustworthy and professional image with strong compliance and security practices. The domain WHOIS data is privacy protected, which is common and justified for this business type. No critical vulnerabilities or suspicious patterns were found. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security integrity.

T

Top Light GmbH & Co.KG

orange-one.de

41

Orange One is a German-based lighting brand operating under the parent company Top Light GmbH & Co.KG. The company specializes in high-quality, innovative lighting solutions primarily targeting B2B customers such as architects, light planners, and retailers. Their product portfolio includes architectural and indoor lighting designed for both private and commercial applications. The website reflects a professional and consistent brand image with clear business contact information and a partner program to support business customers. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and slick slider for UI elements. It is mobile responsive and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details are explicitly detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS (implied by domain and external links), but no explicit security headers were detected in the provided HTML content. Cookie consent is implemented, supporting GDPR compliance. No incident response or security policy pages were found. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a trustworthy and professional business presence with moderate technical maturity and basic privacy compliance. Security posture can be improved by implementing recommended HTTP headers and formalizing security policies.

A

ARMSTARK® Zubehörshop

armstark-shop.de

55

ARMSTARK® Zubehörshop is a German e-commerce platform specializing in wellness products including whirlpools, swim spas, saunas, and infrared cabins. The website targets consumers and businesses interested in wellness and spa accessories, offering a range of products with a focus on quality and customer service. The business claims 30 years of experience and provides nationwide customer support in Germany. The site is built on the Shopware CMS platform and uses modern web technologies including JavaScript frameworks, Google Tag Manager, and FriendlyCaptcha for bot protection. The website is mobile optimized and accessible with clear navigation and professional design. Security posture is good with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and published privacy or cookie policies. No direct contact information or incident response channels are visible in the provided content. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

F

FCCN, Unidade FCT

fccn.pt

68

FCCN, Unidade FCT is a Portuguese digital services unit under the Fundação para Ciência e Tecnologia (FCT), providing technological infrastructure and services to the scientific and academic community in Portugal. The organization manages the national research and education network (Rede RCTS) and offers key services such as online learning platforms, secure file sharing, and digital content publication. The website reflects a strong market position with strategic partnerships and a clear focus on supporting research and education through technology. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and user experience tools such as Google Analytics, Hotjar, and Cookie Script for compliance and tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not publicly detailed. Overall, the site is professional, accessible, and trustworthy, serving a specialized audience effectively.

S

SINDYK

sindyk.com

59

Sindyk is a Colombian technology startup specializing in digital media solutions, focusing on audience growth, content monetization, and mobile site optimization for media companies across Latin America. With over 15 years of domain registration and 8+ years of active business presence, Sindyk offers a suite of products including Smart, Conecta, Speed, Turbo, and Codea to help clients manage subscriptions, optimize content delivery, and enhance user engagement. The company maintains a professional web presence with clear branding, client testimonials, and a dedicated team showcased with LinkedIn profiles. Technically, the website uses modern frameworks like Bootstrap and integrates Google Analytics and Adsense for marketing and tracking purposes. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published privacy policies, which are areas for improvement. Overall, the website is well-designed, mobile-optimized, and trustworthy, though privacy compliance needs enhancement.

T

Top Light GmbH & Co.KG

top-light.de

43

Top Light GmbH & Co.KG is a well-established German manufacturer and retailer specializing in premium bathroom lighting and illuminated mirrors. The company holds a strong market position as a leader in its niche, supported by multiple industry awards and a professional online presence. Their business model includes both B2B and B2C channels, with a dedicated online shop and comprehensive customer support. The website reflects a mature digital infrastructure utilizing modern web technologies and integrates Google Analytics for performance insights. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Security posture is adequate but could benefit from explicit security headers and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

F

FDP Stadt Zürich

mehblau.ch

60

FDP Stadt Zürich operates a political party website focused on promoting liberal political positions and candidates for local elections in Zürich. The site provides downloadable political agenda documents, blog posts, podcasts, and donation options, targeting residents and voters interested in liberal politics. The website uses a modern technical stack including ASP.NET WebForms, Bootstrap, jQuery, and integrates social media and tracking tools such as Facebook Pixel and Google Analytics. Security posture is moderate with HTTPS enforced and CAPTCHA on forms, but lacks some security headers and a vulnerability disclosure policy. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the site is professional, trustworthy, and well-branded, serving its political communication purpose effectively.

The website e-latts.lv operates as an online grocery retail platform serving primarily Latvian consumers. It offers a wide range of food and household products with a focus on convenience through online ordering and delivery services. The business is represented by Latvijas tirgotaju savieniba, SIA, a Latvian legal entity, indicating a legitimate commercial presence in the local market. The website's content is rich with product listings, promotions, and categories tailored to grocery shopping needs. From a technical perspective, the site employs common web technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel for UI components and animations. It integrates Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site appears moderately optimized for performance and mobile usage, though accessibility features are basic. No CMS or hosting provider details were identified. Security posture shows room for improvement. While HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected in the provided data, and no explicit privacy or cookie policies are visible. The WHOIS data is incomplete but consistent with the business entity and location. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a professional and functional e-commerce platform with moderate technical maturity and business credibility. Enhancements in security headers, privacy compliance, and transparency would strengthen trust and compliance posture.

H

HES-SO Fribourg

hefr.ch

68

HES-SO Fribourg is a prominent higher education institution in Switzerland, offering a range of academic programs including bachelor, master, and postgraduate education across four specialized schools. The institution emphasizes innovation, research, and international collaboration, positioning itself as a key regional player in education and applied sciences. The website reflects a professional and consistent brand image aligned with its parent organization HES-SO. Technically, the site employs modern web technologies such as Bootstrap, Google Tag Manager, and Axeptio for cookie consent, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, serving its audience effectively.

S

SIA DEPO DIY

depo.ee

51

DEPO is a well-established retail chain operating primarily in the Baltic region, focusing on home improvement, garden, food, and related retail sectors. The company maintains a professional online presence with a multilingual WordPress-based website, offering both physical store information and online shopping options. The website is well-structured, with clear navigation and consistent branding, targeting a general consumer audience in Estonia and neighboring countries. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Maps API, supported by popular WordPress plugins such as WPBakery and Yoast SEO, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The site does not contain any adult or questionable content and maintains a good level of privacy compliance with GDPR considerations. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain a strong security posture.

D

DEPO DIY LT UAB

depo-diy.lt

51

DEPO DIY LT UAB is a medium-sized retail company operating primarily in Lithuania and the Baltic region, specializing in home improvement, gardening, food products, pet supplies, and construction materials. The company maintains multiple physical store locations and an online presence, targeting general consumers interested in DIY and home-related products. The website is built on WordPress with multilingual support, leveraging common plugins such as WPBakery Page Builder and Yoast SEO to enhance user experience and search engine visibility. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could improve resilience. The domain registration is consistent with the business age and shows no suspicious patterns, though the registrar being an academic institution is unusual but not necessarily problematic. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, making it a reliable digital asset for the company.

N

Nano IT SIA

nano.lv

57

Nano IT SIA operates as the leading hosting service provider in Latvia, specializing in web hosting, email hosting, domain registration, VPS, and server colocation services. The company targets Latvian businesses and individuals requiring reliable and scalable hosting solutions. Their market position is strong, supported by a large client base managing over 30,000 domains and a reputation for responsive customer support. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies including jQuery, Bootstrap, Select2, and FontAwesome, integrated with WHMCS for client management and e-commerce functionality. The site is mobile-optimized and uses Google Tag Manager for analytics and advertising tracking, with a robust cookie consent mechanism ensuring GDPR compliance. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and mentions advanced data center protections such as DDoS mitigation and 24/7 monitoring. However, explicit security policies and incident response details are not publicly disclosed. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns with the business claims, reinforcing domain legitimacy. Overall, Nano IT SIA presents a trustworthy and professional online presence with strong business credibility and compliance posture. Strategic improvements could include publishing detailed security policies and enhancing HTTP security headers to further strengthen their security posture.

Dynapps is a Swiss-based expert partner specializing in Odoo ERP implementation and custom software development, serving a broad range of industries including manufacturing, healthcare, energy, and retail. The company holds a strong market position as the leading Odoo Gold Partner in Switzerland and has been recognized as the Best Odoo Partner in Europe 2024. Their business model focuses on delivering tailored digital solutions to SMEs and large enterprises, leveraging local expertise combined with international standards. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and detailed service offerings. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap and FontAwesome, and integrates analytics and marketing tools like Google Tag Manager, Google Analytics, Cookiebot, and Leadinfo. The site is mobile-optimized and accessible, with good SEO practices and performance. Privacy compliance is well addressed with explicit privacy and cookie policies and consent mechanisms. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business claims, supporting legitimacy and trustworthiness. Overall, Dynapps demonstrates a mature digital infrastructure and a strong security posture with room for improvement in formal security policy disclosures. The website is safe, professional, and trustworthy, making it a reliable partner for Odoo ERP solutions in Switzerland and Europe.

U

Universitatea Transilvania din Brașov

unitbv.ro

62

Universitatea Transilvania din Brașov is a well-established public university in Romania with a strong academic and research presence. The website reflects a mature digital infrastructure built on Joomla CMS, integrating modern JavaScript libraries and Google services for enhanced user experience and security. The institution provides comprehensive academic programs, research opportunities, and cultural activities, targeting students, researchers, and academic partners. The website is professionally designed, mobile-optimized, and regularly updated with news and events, supporting its market position as a leading educational institution in the Central Region of Romania. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended.

U

Universidade da Beira Interior

ubi.pt

68

Universidade da Beira Interior (UBI) is a Portuguese public higher education institution located in Covilhã, Portugal. It offers a wide range of undergraduate, graduate, and doctoral programs, alongside active research and innovation initiatives. The university targets students, researchers, academic staff, and international candidates, positioning itself as a regional leader with international partnerships such as UNITA. The website reflects a well-established academic institution with comprehensive educational services and student support.

H

HETS Fribourg

hets-fr.ch

63

HETS Fribourg is a Swiss higher education institution specializing in social work education, research, and continuing education. The website clearly targets students, professionals, and researchers interested in social work, offering bachelor and master programs, research projects, and service prestations. The institution holds a solid regional market position in Fribourg, Switzerland, with a professional and well-branded online presence. Technically, the website uses modern technologies including Umbraco CMS, Bootstrap, and integrates analytics and consent management tools such as Microsoft Clarity and Axeptio. The site is mobile-optimized and accessible with good SEO practices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

F

Falstaff

falstaff-living.com

64

Falstaff LIVING is a German-language online magazine focused on interior design, architecture, culinary arts, and luxury lifestyle. It operates as part of the Falstaff media brand, targeting design and lifestyle enthusiasts primarily in Austria and German-speaking regions. The website features rich editorial content, multimedia elements, and integrates advertising and subscription services. Technically, the site uses modern web frameworks such as Laravel Livewire, Bootstrap, and various JavaScript libraries, ensuring a responsive and engaging user experience. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. Privacy and cookie policies are not explicitly found in the analyzed content, indicating room for compliance enhancement. WHOIS data is unavailable, which slightly reduces trust but the professional presentation and consistent branding support legitimacy.

A

AdMedia

admedia.com

61

AdMedia is a well-established advertising network founded in 1995, specializing in performance marketing solutions across search, native, contextual, mobile, video, and shopping feed channels. The company targets advertisers, publishers, agencies, and affiliate marketers, positioning itself as a leading marketplace outside major engines like Google and Facebook. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the site uses modern frameworks such as Bootstrap and jQuery, hosted on AWS infrastructure, and integrates multiple analytics and tracking tools including Google Analytics and Hotjar. Security posture is solid with HTTPS enabled and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial with a clear privacy policy but lacking a cookie consent mechanism. Business credibility is high, supported by trust indicators like Verisign Secured, AdChoices, and IAB membership. Overall, the site scores well on content, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices.

F

FDP.Die Liberalen Stadt Zürich

fdp-zhstadt.ch

52

FDP.Die Liberalen Stadt Zürich is a local political party organization serving the city of Zurich, Switzerland. The website provides comprehensive information about the party's news, agenda, values, and ways for citizens to engage, including membership and donations. The site targets residents and voters interested in liberal political views and local governance. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and jQuery, and it includes GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and presents a professional and consistent brand image. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

F

FDP.Die Liberalen Stadt Luzern

fdp-stadtluzern.ch

49

FDP.Die Liberalen Stadt Luzern is a local political party organization serving the city of Lucerne, Switzerland. The website provides political news, event agendas, membership information, and contact details aimed at residents and voters interested in the party's activities. The organization operates as a non-profit entity focused on political engagement and information dissemination within the local government sector. The website is well-branded and consistent with the party's identity, targeting a general audience with clear navigation and relevant content. Technically, the site is built on TYPO3 CMS and leverages modern web technologies including Bootstrap, jQuery, and Google Fonts. It employs a cookie consent mechanism compliant with GDPR using the Tarteaucitron library and integrates Google Analytics for visitor tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the website enforces HTTPS and uses cookie consent to manage tracking. However, it lacks explicit security policy pages, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's claims, showing transparency and legitimacy appropriate for a political organization. Overall, the website presents a professional and trustworthy digital presence for the FDP political party in Lucerne, with room for improvement in security policy transparency and incident response readiness.

P

PLR.Les Libéraux-Radicaux Lausanne

plrl.ch

45

PLR.Les Libéraux-Radicaux Lausanne is a local political party representing liberal-radical interests in Lausanne, Switzerland. The website serves as an information portal for party news, events, membership, and campaigns targeting residents and voters in the Lausanne and Vaud region. The organization operates as a non-profit political entity with a clear focus on local governance and community engagement. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap and jQuery, and includes a cookie consent mechanism compliant with GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, no explicit security policy or incident response information is published, representing an area for improvement. WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the website's claims. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations.

F

FDP.Die Liberalen Kanton St.Gallen

fdp.sg

52

FDP.Die Liberalen Kanton St.Gallen is a regional political party representing liberal values in the canton of St. Gallen, Switzerland. The website serves as an information hub for party news, events, membership, and values, targeting local residents and politically engaged citizens. The site is well-branded and professionally maintained, reflecting the party's established presence in the region. Technically, the website is built on TYPO3 CMS, leveraging modern frontend technologies such as Bootstrap, jQuery, and FontAwesome. It integrates privacy-conscious analytics via Matomo and employs tarteaucitron.js for cookie consent management, demonstrating a commitment to GDPR compliance and user privacy. The site is mobile-optimized and features clear navigation and structured content. From a security perspective, the site enforces HTTPS and uses privacy-friendly analytics, but lacks explicit security headers in the HTML response. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the subdomain is likely due to privacy protection or subdomain delegation, which is common for political organizations. Overall, the security posture is good but could be improved with additional headers and published security policies. The overall risk is low given the site's transparency, professional presentation, and compliance efforts. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining up-to-date third-party components to mitigate potential risks.

D

Donne Liberali Radicali Ticinesi

plrt-donne.ch

46

Donne Liberali Radicali Ticinesi is a regional political organization in Ticino, Switzerland, representing liberal radical women. Their website serves as an official communication platform providing news, political updates, event information, and membership engagement. The organization positions itself as an important political entity within the regional government and non-profit sectors. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, and it integrates cookie consent management and Google Analytics for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, with room for improvement in security transparency and formal policies.