Security Directory

B

Behinderten- und Rehabilitationssportverband Hamburg e.V.

brs-hamburg.de

60

Behinderten- und Rehabilitationssportverband Hamburg e.V. (BRS Hamburg) is a regional non-profit sports association dedicated to promoting disabled and rehabilitation sports in Hamburg, Germany. The website serves as an information hub for athletes, clubs, medical professionals, and interested parties, offering news, sports offers, training, and educational resources. It maintains a clear market position as a specialized organization in the non-profit sports sector focused on accessibility and inclusion. The site provides comprehensive contact options and maintains active communication channels including newsletters and social media.

R

Rough Water& GmbH

dsv-swimandmore.de

51

Swim+More is a specialized German media platform operated by Rough Water& GmbH, focusing on aquatic sports including swimming, water polo, synchronized swimming, and diving. The site provides news, event coverage, training tips, and athlete profiles targeting the German aquatic sports community. It maintains partnerships with recognized brands and the German Swimming Federation (DSV), enhancing its credibility and market position within the niche sports media sector. The business model includes subscription-based premium content and advertising revenue streams.

C

ColorDruck Solutions

pmg.de

56

ColorDruck Solutions is a well-established German printing company specializing in high-quality sheet-fed and digital printing services. With a history dating back to 1996 and being part of the Print Media Group GmbH, the company serves industrial clients, publishers, and associations with a comprehensive portfolio including printing, finishing, logistics, and fulfillment. The website reflects a professional and modern digital presence built on WordPress, featuring strong branding and clear communication of services and contact channels. Technically, the site uses contemporary web technologies and complies with GDPR and cookie consent requirements, although some security best practices like DNSSEC and security headers could be improved. Overall, the security posture is good but could benefit from enhanced policies and incident response transparency. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Quality Council of India (QCI) is a well-established autonomous national body founded in 1996 under the Ministry of Commerce and Industry, Government of India. It operates as a public-private partnership with key industry associations to promote quality standards, accreditation, and certification across various sectors in India. The organization holds a strong market position as the authoritative accreditation body with multiple specialized boards and divisions. The website reflects a professional and consistent brand image targeting government entities, industry stakeholders, and quality professionals. Key services include accreditations, certifications, training, and quality promotion initiatives.

pen.sec AG is a German-based IT security company specializing in penetration testing, cyber security consulting, and related services. With over 20 years of experience, the company positions itself as a full-service partner for businesses seeking to protect their digital assets. Their market position is strengthened by memberships in recognized cybersecurity clusters such as the Allianz für Cybersicherheit and IT-Sicherheitscluster e.V. The website presents a professional image with detailed service offerings and customer testimonials, targeting primarily German enterprises concerned with IT security risks. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO and cookie management. The site is well-optimized for SEO and mobile devices, with good performance and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service pages. Overall, the security posture is solid, with strengths in penetration testing and incident response services. The lack of explicit privacy and vulnerability disclosure policies are areas for improvement. The domain WHOIS data aligns with the business claims, showing no suspicious patterns. The site is safe for general audiences and free from adult or questionable content.

P

Projekt 29 GmbH & Co. KG

projekt29.de

62

Projekt 29 GmbH & Co. KG is a well-established German full-service provider specializing in data protection, information security, and compliance consulting and solutions. Founded in 1996 and headquartered in Regensburg, the company serves over 4500 customers across various industries, offering services such as external data protection officers, IT compliance, ISO 27001 and TISAX certification support, and e-learning platforms. Their market position is strengthened by memberships in key industry associations and certifications, positioning them as a trusted partner for businesses seeking regulatory compliance and security assurance. Technically, the website is built on a modern WordPress CMS with professional design, responsive layout, and integration of relevant plugins and tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, Projekt 29 demonstrates a strong commitment to privacy compliance and business credibility, making it a reliable service provider in its domain.

V

VISTEC Internet Service GmbH

vistec.net

46

VISTEC Internet Service GmbH is a well-established German internet service provider based in Wiesbaden, with over 25 years of experience. The company offers a broad range of services including internet access, IT service, server housing, data backup, security solutions, telephony, and web hosting. Their business model focuses on providing reliable and secure internet and IT infrastructure services primarily to business customers, emphasizing close customer relationships. The website is professionally designed using WordPress and Elementor, optimized for mobile devices, and includes SEO best practices. Technically, the site uses modern web technologies but lacks some advanced security configurations such as DNSSEC and security headers. The security posture is adequate with HTTPS enabled and domain transfer protections in place, but there is room for improvement in publishing security policies and incident response information. Overall, the domain is legitimate, consistent with the business claims, and the website content is safe and professional.

C

Consensus Shipyard

ipc.space

66

Interplanetary Consensus (IPC) is a blockchain scaling framework designed to enable horizontal scalability through hierarchical subnets and customizable consensus algorithms. The website serves as a comprehensive technical documentation portal targeting developers and organizations building decentralized applications that require scalable and performant blockchain infrastructure. The platform leverages modern web technologies such as React, Next.js, and GitBook, ensuring a fast, mobile-optimized, and accessible user experience. Security practices are robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is basic with cookie consent and a privacy policy present. Overall, the website reflects a technically mature and trustworthy project with room for improvement in business transparency and security disclosures.

Welcome Center Schwarzwald-Baar-Heuberg is a regional service organization focused on supporting international skilled workers and local companies in the Schwarzwald-Baar-Heuberg region of Germany. The center offers multilingual consulting, seminars, and assistance with recruitment and integration of foreign professionals. It operates under the auspices of regional economic development and the local Chamber of Industry and Commerce, supported by the Baden-Württemberg Ministry of Economy, Labor, and Tourism. The website reflects a professional and consistent brand presence with clear contact channels and active social media engagement. Technically, the website is built on WordPress using modern plugins such as WPML for multilingual support, Contact Form 7 for forms, and Bootstrap for responsive design. It employs hCaptcha for bot protection and Fathom Analytics for privacy-focused visitor tracking. The site is moderately performant and mobile-optimized, though accessibility features are basic. SEO is present but could be enhanced with more comprehensive metadata and structured data. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms, but lacks visible security headers and explicit security or privacy policies. No vulnerability disclosure or incident response information is provided. The WHOIS data is consistent with the website's regional and organizational claims, indicating legitimacy. No suspicious patterns or privacy protection in WHOIS are noted. Overall, the website is trustworthy and professionally maintained but would benefit from improved privacy compliance documentation and enhanced security headers to strengthen its security posture and user trust.

S

Stadt Frankfurt am Main

stadt-frankfurt.de

54

The website frankfurt.de serves as the official city portal for Frankfurt am Main, providing comprehensive information and services related to municipal administration, citizen services, cultural events, and city politics. It targets residents, visitors, and businesses in Frankfurt, offering multilingual support and extensive navigation to various city departments and services. The portal positions itself as a trusted government resource with a large-scale digital presence and active social media engagement. Technically, the site employs modern web technologies including Bootstrap utilities, FontAwesome icons, media players, and translation scripts, ensuring good mobile optimization and accessibility. The site loads with moderate performance and includes SEO-friendly metadata and Open Graph tags, enhancing discoverability and social sharing. From a security perspective, the site enforces HTTPS and uses secure libraries, but lacks visible security headers and published security or incident response policies. No vulnerability disclosure or security.txt files were found. Privacy and cookie policies are not evident, which is a compliance gap. Contact information such as emails and phone numbers are not explicitly presented, limiting direct communication channels. Overall, the site is a professional and trustworthy government portal with good content quality and technical implementation. However, it would benefit from enhanced privacy compliance, explicit security policies, and clearer contact information to improve user trust and regulatory adherence.

S

Seeberger Professional GmbH

seeberger-b2b-shop.de

51

Seeberger Professional GmbH operates a B2B e-commerce platform targeting business customers in the food retail sector in Germany. The website serves as a login portal for customers to access ordering services. The business is positioned as a medium-sized regional player with a focus on professional clients. The platform is built on legacy ASP.NET Web Forms technology with basic mobile optimization and moderate performance. Security measures include standard ASP.NET anti-CSRF tokens and POST-based login forms, but lack modern security headers and bot protections. Privacy compliance is supported by a comprehensive privacy policy, though cookie consent mechanisms are absent. Overall, the site demonstrates moderate business credibility but could benefit from technical modernization and enhanced security practices.

D

Domains By Proxy, LLC

bnncollege.org

48

BNN College is a small-scale media and news website providing latest news and updates primarily in categories such as automobile, journal, and general news. The website operates on a WordPress CMS platform with a moderate technical infrastructure including common plugins like Yoast SEO and uses Cloudflare for DNS services. The site is well-branded with consistent design and regularly updated content authored by identified contributors. Security posture is adequate with HTTPS enabled and domain status locks in place, but lacks advanced DNS security features like DNSSEC and does not publish detailed security or incident response policies. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific indicators. Advertising is managed via Google Adsense and tracking is performed by TrackTheTech, indicating moderate user tracking. Overall, the website is functional, moderately secure, and credible but could improve privacy and security transparency.

R

Rough Water& GmbH

roughwaterand.com

46

Rough Water& GmbH is a German startup specializing in modern sports management with a focus on water sports. The company acts as an innovation driver and spokesperson for the German Swimming Federation, organizing national and international events and providing services in digitalization, marketing, communication, and consulting. Their website is professionally designed, mobile-optimized, and provides clear contact information, reflecting a credible and focused business entity. Technically, the site is built on WordPress with modern frameworks and plugins, hosted likely on a German hosting provider. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but terms of service and incident response information are missing. Overall, the website presents a trustworthy and professional image suitable for its niche market.

B

BNN College

borl.in

48

BNN College operates as a niche news and updates website primarily focused on social benefits, government policies, and financial relief programs across multiple countries. The website is built on WordPress and employs modern web technologies including Yoast SEO, jQuery, and Cloudflare DNS services. The content is regularly updated and professionally presented, targeting a general audience interested in financial and governmental news. The business model relies on content publishing and advertising revenue, with Google Adsense integrated for monetization. Technically, the website demonstrates a moderate level of digital maturity with good mobile optimization and SEO practices. The use of HTTPS and reputable hosting and DNS providers contributes to a solid technical foundation. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies, which poses a risk for regulatory adherence. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks explicit security policies and incident response information. No critical vulnerabilities or suspicious patterns were detected, and the domain age supports legitimacy. Overall, the website presents a moderate security posture with recommendations to enhance privacy compliance and security best practices. Strategically, BNN College should prioritize implementing comprehensive privacy and cookie policies, enable DNSSEC, and adopt security headers to improve trust and compliance. Enhancing transparency around security and incident response will further strengthen its credibility and user confidence.

B

Bharat PetroResources Limited

bharatpetroresources.in

52

Bharat PetroResources Limited (BPRL) is a medium-sized Indian energy company specializing in upstream oil and gas exploration and production. As a wholly owned subsidiary of Bharat Petroleum Corporation Limited, BPRL plays a strategic role in securing crude supply and expanding the parent company's portfolio. The website reflects a professional corporate presence with relevant content targeting industry stakeholders, investors, and partners. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and GSAP, and is built on ASP.NET Web Forms, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure form tokens, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the site is trustworthy and well-maintained, with room for improvement in security and privacy transparency.

R

Rough Water& GmbH

germanaquatics.de

51

Swim+More is a specialized German media platform operated by Rough Water& GmbH, focusing on aquatic sports including swimming, water polo, synchronized swimming, and diving. The website offers news, event coverage, training tips, and athlete profiles targeting German-speaking aquatic sports enthusiasts and professionals. It operates a subscription model alongside advertising partnerships with recognized brands such as DSV, Speedo, and Aquafeel. Technically, the site is built on WordPress with WooCommerce for subscription management, enhanced by modern frameworks like Foundation and various JavaScript libraries. SEO is well-implemented using Yoast SEO Premium, and GDPR compliance is addressed through Borlabs Cookie consent management. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. No WAF or blocking mechanisms interfere with content accessibility. Overall, the site presents a professional, trustworthy, and user-friendly experience with moderate user tracking primarily via Google Analytics and Tag Manager.

I

Startseite

idm2025.de

50

The website idm2025.de serves as the official platform for the Internationale Deutsche Meisterschaften Deutsche Jugend- und Junioren-Meisterschaften im Freiwasserschwimmen 2025 held in Rostock, Germany. It provides comprehensive event-related information including schedules, results, downloadable official documents, and greetings from relevant officials. The target audience primarily consists of athletes, officials, organizers, and swimming enthusiasts interested in the event. The business model is focused on event information dissemination and participant support within a niche sports domain. Technically, the website is built on the Joomla CMS platform, utilizing standard Joomla scripts and FontAwesome for icons. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. Hosting appears to be via German providers consistent with the event's location. No advanced analytics or tracking tools are detected, indicating a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and Strict-Transport-Security. There is no visible cookie consent mechanism, which is a GDPR compliance gap given the site's European audience. No incident response or security policy information is published, and no contact emails or phone numbers are provided on the main pages. These factors suggest a moderate security posture with room for improvement. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, privacy compliance improvements, and clearer contact information to increase trust and compliance with European regulations.

V

vhs Landkreis Gießen

vhs-kreis-giessen.de

53

vhs Landkreis Gießen is a regional adult education institution providing a broad range of local and digital educational offerings to residents of Landkreis Gießen, Germany. The website clearly communicates its mission and services, targeting learners interested in accessible and community-based education. The organization maintains a professional online presence with consistent branding and active social media channels. Technically, the site is built on WordPress using Elementor and Bootstrap, ensuring responsive design and moderate performance. SEO and metadata are well implemented, enhancing discoverability. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and suitable for its educational purpose.

C

Comoedienhaus Wilhelmsbad

comoedienhaus.de

62

Comoedienhaus Wilhelmsbad is a cultural event venue located in Hanau, Germany, offering events in a baroque ambiance. The website is built on WordPress using popular plugins such as Modern Events Calendar Lite and Borlabs Cookie for cookie consent management. The site demonstrates a good level of technical maturity with HTTPS enabled and a responsive design optimized for mobile devices. However, it lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance and user trust. Security posture is moderate with HTTPS but missing security headers and incident response information. Overall, the site is functional and professional but could improve in privacy and security transparency.

vhs Hanau is a public adult education institution serving the city of Hanau, Germany. It offers a wide range of educational courses across categories such as languages, culture, health, career development, and basic education. The website is built on TYPO3 CMS with a modern frontend framework, providing a good user experience and clear navigation for its target audience of adult learners and community members. The institution is well-positioned locally with affiliations to regional and national Volkshochschule associations, enhancing its credibility and trustworthiness. Technically, the site uses standard web technologies and is mobile optimized, though performance is moderate. Security posture is average with no visible advanced security headers or incident response contacts, and privacy compliance is weak due to missing policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy transparency.

M

Magistrat der Stadt Hanau

festspiele-hanau.de

59

The Brüder Grimm Festspiele Hanau website represents a well-established cultural event organized by the Magistrat der Stadt Hanau. It provides comprehensive information about the 41st festival season, including detailed event schedules, ticketing options, workshops, and partner acknowledgments. The site targets families, schools, and cultural enthusiasts, positioning itself as a key regional cultural event with strong local government and sponsor support. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted likely under the city’s infrastructure, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and privacy-respecting analytics, though some security headers are not explicitly detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is evident. Overall, the site is professional, trustworthy, and user-friendly, with no signs of malicious content or security risks.

M

monta Klebebandwerk GmbH

monta.de

49

Monta Klebebandwerk GmbH operates as a manufacturer and supplier of adhesive tapes tailored for various industrial and packaging applications. The company targets a B2B audience including industry users, packaging specialists, printers, converters, and packaging machine manufacturers. Their website reflects a medium-sized enterprise with a focus on sustainability and product innovation, offering tools like a product finder and detailed technical information. The multilingual site supports German, English, French, Spanish, and Italian, indicating a European market focus. Technically, the website employs modern JavaScript libraries, Cookiebot for consent management, and Google Analytics for tracking, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS and consent-based tracking, but lacks advanced security headers and explicit security policies. Privacy compliance is supported by a comprehensive cookie consent mechanism, though a formal privacy policy page was not detected in the provided content. Overall, the site is professional, trustworthy, and well-structured, but could improve transparency and security documentation.

G

gurado GmbH

gurado.de

58

gurado GmbH operates a leading voucher system platform tailored for businesses of all sizes, primarily in Germany. Their services include online voucher sales, event ticketing, coupon campaigns, and customer loyalty programs. The company positions itself as a comprehensive SaaS provider enabling businesses to efficiently manage and sell vouchers and related products both online and on-site. The website is professionally designed, content-rich, and targets a broad business audience including retail, hospitality, wellness, and leisure sectors. Technically, the site is built on TYPO3 CMS, hosted on AWS infrastructure, and employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration and hosting details align well with the business claims, indicating legitimacy and trustworthiness.

I

Initiative – Die Stadtretter

die-stadtretter.de

58

The website 'Initiative – Die Stadtretter' serves as a knowledge transfer and collaboration platform primarily targeting municipalities, economic development agencies, and city marketing organizations in Germany. It positions itself as a niche network facilitating exchange of best practices and tools for urban development projects. The site is built on a modern WordPress infrastructure using the Enfold theme and several plugins for events management, user membership, and SEO optimization. Accessibility is a key focus, evidenced by a comprehensive custom accessibility tool integrated into the site. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though explicit security headers and formal security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation.

R

Raaberbahn Cargo GmbH

raaberbahncargo.at

51

Raaberbahn Cargo GmbH is a medium-sized, dynamically growing rail freight logistics company operating primarily along the Danube corridor between Austria and Hungary. Founded in 2011 as a wholly owned subsidiary of GYSEV CARGO Zrt., it provides national and international rail freight services, including export-import and combined transport. The company emphasizes efficiency, safety, and quality in its operations and maintains an integrated management system covering these aspects. The website is professionally designed, mobile-optimized, and provides clear business information and social media links, reflecting a mature digital presence. Technically, the site uses modern frontend technologies and integrates Google services for analytics and security, including reCAPTCHA and Tag Manager. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to NIC.AT restrictions, but the domain appears legitimate and consistent with the business history. Overall, the site presents a trustworthy and professional image suitable for its business sector.

L

LookUs Scientific

kongrem.com

58

Kongrem.com is a website operated by LookUs Scientific, providing GDPR-compliant privacy policy and legal notification solutions tailored for event and congress websites. The site emphasizes privacy, security, and responsive web design to ensure compliance with EU regulations. The business targets event organizers and partners who require legal and privacy infrastructure for their web presence. Technically, the site uses standard web technologies including jQuery, Google Analytics, and Google Tag Manager, hosted behind Cloudflare DNS services, with SSL enabled ensuring secure connections. The website is moderately optimized for mobile and basic in accessibility and SEO. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced security headers and explicit incident response information. No cookie consent mechanism was detected despite cookie usage claims. Overall, the domain is long-established and trustworthy, with no blocking or WAF challenges detected.

D

Domains By Proxy, LLC

apothem.network

50

Apothem.Network serves as the official testnet platform for the XinFin blockchain ecosystem, providing essential services such as network statistics, masternode management, block explorer, and wallet access. The website targets blockchain developers, masternode operators, and users interested in testing and interacting with the XinFin network in a non-production environment. It positions itself as a critical infrastructure component supporting the broader XinFin ecosystem. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and FontAwesome, hosted behind Cloudflare DNS services. The site is moderately optimized for mobile devices and includes Google Analytics for user tracking. However, it lacks advanced SEO and accessibility features and does not implement DNSSEC or security headers, which are recommended for improved security posture. From a security perspective, the site uses HTTPS and domain registration protections such as EPP locks and privacy-protected WHOIS. Nonetheless, the absence of DNSSEC, security headers, and formal privacy or cookie policies indicates room for improvement in compliance and security best practices. No forms or direct contact information are provided, limiting user engagement and transparency. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and clearer contact channels to improve trustworthiness and regulatory adherence.

D

Domains By Proxy, LLC

xinfin.network

51

XinFin.Network operates as a blockchain platform providing the XDC MainNet infrastructure, including network statistics, masternode hosting, block explorer, web wallet, and developer APIs. The platform targets blockchain users and developers seeking decentralized finance and enterprise blockchain solutions. The website demonstrates a moderate level of digital maturity with a modern frontend stack using Bootstrap and jQuery, mobile optimization, and integration of Google Analytics for user tracking. Hosting and DNS are managed via reputable providers including Cloudflare and GoDaddy, with domain privacy protection in place. From a security perspective, the site uses HTTPS and enforces domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data, indicating room for improvement in hardening the web presence. Privacy and cookie policies are absent, which may impact compliance with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency and user trust. Overall, the website is functional and professional but lacks some critical compliance and security features. The domain registration is consistent with legitimate blockchain projects, and the site links to multiple official subdomains and partner resources. The risk level is moderate with recommendations to enhance security posture and privacy compliance to improve trust and regulatory adherence.

E.INFRA GmbH is a medium-sized German company specializing in electrotechnical and communication technology solutions. With over 200 employees and multiple regional offices, the company offers a broad range of services including plant construction, energy and switchgear systems, security technology, network technology, media technology, IoT and sustainability solutions, as well as maintenance and service. Their business model focuses on B2B services targeting organizations requiring complex electrical and communication infrastructure. The website is professionally designed, mobile-optimized, and provides comprehensive information about their offerings and corporate presence. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and FontAwesome, with client-side validation and cookie consent mechanisms implemented. While the site performs moderately well and is mobile-friendly, there is room for improvement in accessibility and SEO optimization. Security-wise, the site uses HTTPS but lacks explicit security headers like CSP and HSTS, which are recommended to enhance protection. No incident response or vulnerability disclosure information is publicly available. The WHOIS data is unavailable, which reduces transparency and trust slightly; however, the professional presentation, multiple physical locations, and active social media presence support the legitimacy of the business. Privacy compliance is well addressed with a detailed privacy policy and cookie consent banner, indicating adherence to GDPR requirements. Overall, the website presents a trustworthy and professional image with moderate technical maturity and security posture. Strategic improvements in security headers, WHOIS transparency, and accessibility would further strengthen their digital presence and trustworthiness.

The website www.costcopaymentprocessing.ca represents Elavon Canada Company, a large payment processing service provider partnered with Costco Canada. The site offers a range of payment solutions including online, mobile, and in-person payments, with a focus on secure, fast, and reliable transaction processing. The business targets Canadian businesses seeking payment processing services and emphasizes customer satisfaction and operational efficiency. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including phone numbers and a contact form protected by Google reCAPTCHA. Privacy and cookie policies are present and indicate GDPR compliance. Technically, the site uses Adobe Experience Manager CMS and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Invoca, and Tealium. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers are not detected in the HTML source. WHOIS data is unavailable, suggesting privacy protection or a new domain registration, which slightly impacts trust but is common for this business type. Overall, the website is trustworthy, well-maintained, and aligned with industry standards for payment processing services.

R

Raaberbahn AG

raaberbahn.at

61

Raaberbahn AG is a regional private railway company operating in Austria's Burgenland region with cross-border services. It provides passenger transportation, ticketing, customer service, and network access services. The company is a subsidiary or closely affiliated with GYSEV Zrt., a larger railway operator. The website is professionally designed using TYPO3 CMS and modern web technologies, offering comprehensive information and services to passengers, partners, and job seekers. Privacy and cookie policies are well implemented with user consent mechanisms. Security posture is good with HTTPS and secure forms, though some security headers could be improved. WHOIS data is not publicly available, which slightly reduces transparency but does not detract from the overall legitimacy given the official contact details and business context. Overall, the site is trustworthy, well-maintained, and serves its audience effectively.

G

GYSEV CARGO Zrt.

gysevcargo.hu

71

GYSEV CARGO Zrt. is a medium-sized Hungarian rail freight and logistics company with over 150 years of group experience, offering comprehensive rail, intermodal, and logistics services including warehousing and customs clearance. The company targets freight forwarders, transport operators, and businesses seeking reliable and environmentally friendly transport solutions. The website reflects a professional digital presence with modern technologies such as Google Tag Manager, reCAPTCHA, and a responsive design. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. The company demonstrates compliance with GDPR and provides clear contact information and certifications, enhancing trust. Overall, the site is well-structured, content-rich, and trustworthy, supporting the company's market position as a reliable regional freight service provider.

P

PORR s.r.o.

porr.sk

48

PORR Slovakia (porr.sk) is a well-established construction company operating as part of the multinational PORR Group. The company provides a broad range of construction services including engineering, infrastructure, building construction, asphalt production, and specialized construction skills. The website reflects a mature business with over 18 years of domain age and consistent branding aligned with the parent company. Technically, the site uses TYPO3 CMS and modern web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and incident response policies are not publicly disclosed. Privacy compliance is strong, with GDPR-aligned cookie policies and data protection statements. Overall, the website is professional, trustworthy, and suitable for its target audience of construction clients and partners.

P

PORR Construct S.R.L.

porr.ro

55

PORR Construct S.R.L. is a Romanian subsidiary of the PORR Group, a leading European construction company with over 150 years of experience. The company specializes in building construction and civil engineering, delivering a wide range of infrastructure projects including roads, bridges, and public facilities. The website reflects a professional and well-established business with clear market positioning and a comprehensive service portfolio. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are lacking. Overall, the site demonstrates strong business credibility and compliance with GDPR.

P

PORR S.A.

porr.pl

57

PORR Poland is a well-established construction company operating as part of the larger PORR Group. The company offers a wide range of construction services including infrastructure, civil engineering, building construction, rail construction, power plant construction, hydraulic engineering, and specialized equipment services. The website reflects a mature business with a strong market position in Poland and connections to European markets. Technically, the site is built on TYPO3 CMS with modern web technologies and includes comprehensive cookie consent mechanisms and analytics integration. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

P

PORR GmbH & Co. KGaA

porr.de

54

PORR GmbH & Co. KGaA operates a professional and comprehensive website focused on construction and engineering services in Germany. The company positions itself as a technology leader offering a wide range of services including government services, building construction, infrastructure, and environmental technology. The website is well-structured, multilingual, and targets business clients in the construction and infrastructure sectors. The digital infrastructure is based on TYPO3 CMS with modern web technologies and includes a detailed cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and cookie management, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature enterprise-level business with strong branding and trust indicators.

P

PORR Schweiz

porr.ch

55

PORR Schweiz is a well-established, international construction company with over 150 years of experience and a strong presence in Switzerland and other European countries. The company offers a broad range of construction services including building construction, civil engineering, infrastructure, tunnel construction, and environmental technology. The website reflects a professional corporate identity aligned with its parent company PORR AG, showcasing a comprehensive service portfolio and multiple country-specific sites. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is well addressed with a detailed privacy and cookie policy. Overall, the website projects high business credibility and trustworthiness.

P

PORR a.s.

porr.cz

56

PORR a.s. is a well-established large enterprise operating in the construction and infrastructure sector in the Czech Republic, with a strong international presence under its parent company PORR AG. The company offers full-service construction solutions including transport and engineering structures, building construction, and special competencies. The website reflects a professional corporate identity with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and privacy-conscious embedded content. No critical vulnerabilities or compliance gaps were detected. Overall, the site projects high trustworthiness and business credibility.

igus® México S. de R.L. de C.V. operates a professional and comprehensive website focused on industrial automation components such as energy chains, polymer bushings, cables for motion, linear technology, and robotic automation products. The company targets industrial manufacturers and automation professionals in Mexico, leveraging a B2B business model with direct online sales and configurator tools. The website reflects a strong market position as a subsidiary of the global igus GmbH brand, offering extensive product information, digital tools, and customer engagement features.

igus® (India) Pvt. Ltd. is a subsidiary of igus GmbH, specializing in manufacturing and supplying high-performance polymer components for motion applications such as energy chains, polymer bearings, flexible cables, and linear slides. The company targets industrial sectors including automation, robotics, and manufacturing, providing both products and digital configurator tools to enhance customer experience. The website reflects a strong market position with comprehensive product offerings and a global footprint supported by localized country domains. Technically, the website employs modern web technologies and analytics tools, ensuring good performance, mobile optimization, and SEO. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's industrial focus.

igus® ApS is a well-established manufacturer and developer of high-performance polymer products including energy chains, flexible cables, maintenance-free bearings, and linear systems. The company operates a professional and comprehensive website targeting industrial customers, engineers, and manufacturers primarily in Denmark but with a global presence through multiple country-specific domains. The site offers extensive product information, configurators, CAD data, and digital services, reflecting a mature digital infrastructure. Technically, the website uses modern JavaScript libraries, analytics tools, and secure HTTPS protocols, ensuring good performance and user experience. Security posture is strong with appropriate headers and no visible vulnerabilities, although public security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a high level of business credibility.

igus GmbH operates the website igus.cl as a localized Chilean presence offering advanced motion plastics solutions including cable carriers, linear bearings, and automation components. The company is a global leader in manufacturing technical plastics for motion with a strong B2B focus serving diverse industrial sectors. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Google Tag Manager, and Piwik PRO analytics, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response contacts are not found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the parent company's branding and market positioning.

I

IFZA Offshore Limited

ifzaoffshore.com

62

IFZA Offshore Limited is a Seychelles-based offshore corporate services provider, fully owned and operated by IFZA Dubai. The company specializes in the formation and maintenance of offshore entities such as International Business Companies (IBC), International Trusts, and Foundations under Seychelles jurisdiction. Their market position is that of a niche, regulated offshore service provider targeting entrepreneurs and businesses seeking tax-efficient and confidential offshore structures. The website is professionally designed, mobile-optimized, and provides clear contact channels including phone, email, and a contact form. Technically, the site is built on WordPress with common plugins and uses Cloudflare DNS, but lacks DNSSEC and some security headers. The security posture is moderate with HTTPS enabled and no visible sensitive data exposure, but no published security or incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite use of Google Analytics. Overall, the domain registration is consistent with the business claims and founding date, enhancing trustworthiness.

Allgäu Outlet is a regional retail business specializing in outlet sales of sportswear, fashion, and accessories from well-known brands. The company emphasizes value shopping with discounts up to 70% and promotes sustainability through a large photovoltaic installation. The website is built on the webEdition CMS platform and uses modern web technologies such as Bootstrap, FontAwesome, and CookieFirst for consent management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with cookie consent implemented but lacks visible security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible without WAF interference. Overall, the business appears legitimate with a moderate trust level and good privacy compliance. Strategic improvements could focus on enhancing security headers, publishing terms of service, and providing clearer contact information.

Heinrich-Heine-Universität Düsseldorf (HHU) is a prominent public university in North Rhine-Westphalia, Germany, founded in 1965. The website serves as a comprehensive portal for students, faculty, staff, and the public, offering detailed information about academic programs, research centers, university governance, and services. The site targets a broad audience including prospective and current students, researchers, and administrative personnel. HHU positions itself as a key educational and research institution with a strong regional and national presence. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, and FontAwesome for icons. The site is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and shows evidence of organizational security roles such as an Information Security Officer. However, explicit security headers are not detected, and there is no public vulnerability disclosure or security.txt file. Privacy policies are comprehensive and GDPR compliant, though a cookie consent mechanism is not clearly visible. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The domain WHOIS data aligns well with the university's identity and history, supporting the legitimacy of the site. No suspicious patterns or privacy protections obscure ownership details. The site is trustworthy, professionally maintained, and free from adult or questionable content, making it safe for general audiences.

Heinrich-Heine-Universität Düsseldorf (HHU) is a well-established public university in Germany, founded in 1965, offering a broad range of educational and research services across multiple faculties. The website serves as a comprehensive portal for students, staff, and the public, providing detailed organizational information, academic resources, and campus services. The university maintains a strong digital presence with official social media channels and a modern, well-structured website built on TYPO3 CMS. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, and FontAwesome, and integrates Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though improvements are recommended in security headers and cookie consent compliance. Overall, the site is professional, trustworthy, and well-aligned with the university's public institution status.

B

BNP PARIBAS

commercialcards.bnpparibas

67

BNP Paribas Commercial Cards website serves as a professional portal offering a range of corporate payment solutions including procurement cards, virtual cards, and travel-related payment services. The site targets corporate clients and businesses, positioning itself as part of the large international banking group BNP Paribas. The business model focuses on providing secure, efficient payment methods integrated with modern technologies such as Apple Pay. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and FontAwesome. SEO and mobile optimization are well implemented, though accessibility is basic. Security posture is strong with HTTPS enforced and domain registration protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is adequate with visible cookie and privacy policies, and GDPR considerations are addressed. Overall, the site is trustworthy, professional, and well-maintained, with minor areas for improvement in security and contact transparency.

S

Slagalica - Zaklada za razvoj lokalne zajednice

zaklada-slagalica.hr

46

Zaklada Slagalica is a Croatian non-profit foundation dedicated to the development of local communities through philanthropy, grants, and community projects. Established in 2008, it maintains a strong local presence with transparent donation practices and active engagement with civil society organizations. The website reflects a professional and consistent brand image, targeting NGOs, donors, and local stakeholders. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on SiteGround, and optimized for mobile and SEO. Security posture is good with HTTPS and reCAPTCHA integration, though improvements in security headers and incident response transparency are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves its community-focused mission effectively.

O

Oriental Motor U.S.A. Corp.

orientalmotor.com

64

Oriental Motor U.S.A. Corp. operates as a manufacturer specializing in motion control products, targeting industrial and manufacturing sectors requiring motors and automation solutions. The website presents a professional and consistent brand image, integrating modern marketing and analytics tools such as HubSpot and Google Analytics. The technical infrastructure is based on standard web technologies with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though security headers and incident response information are lacking. Privacy and cookie policies are not evident in the provided content, indicating room for compliance improvement. The absence of WHOIS data limits domain legitimacy verification, but the website's professional presentation suggests a legitimate business presence.