Security Directory

M

Markant

voila-startups.com

52

voila-startups.com is a professional platform operated under the Markant brand, designed to connect startups and innovators with one of the largest retail networks in Germany and Europe. The website facilitates product presentation to over 200 retail partners, offering startups a streamlined and cost-free channel to access retail shelves. The business model centers on enabling innovation diffusion within the retail sector, targeting startups seeking market entry and growth. The platform is moderately sized and founded in 2019, consistent with the domain registration data. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and tracking tools such as Facebook Pixel and Jentis for analytics and marketing. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting and domain registration are managed by Deutsche Telekom AG, a reputable provider, ensuring stable infrastructure. From a security perspective, the site employs HTTPS and integrates cookie consent mechanisms, reflecting basic privacy compliance. However, it lacks explicit privacy and terms of service pages, security headers, and incident response contact information, which are areas for improvement. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious patterns were found in the WHOIS data, indicating a trustworthy domain. Overall, voila-startups.com presents a solid business and technical foundation with moderate security posture. Strategic enhancements in privacy documentation, security headers, and contact transparency would elevate its compliance and trustworthiness, supporting its role as a credible startup-to-retail platform.

N

Národní sportovní agentura

agenturasport.cz

59

Národní sportovní agentura is a Czech government agency dedicated to the development and support of sports within the Czech Republic. The agency operates as a key national authority, providing funding programs, regulatory oversight, and strategic initiatives to enhance sports infrastructure and athlete development. The website reflects a professional government presence with clear branding, structured data, and active social media engagement. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and maintaining good performance and accessibility standards. Security posture is strong with HTTPS and security headers implemented, though some improvements in cookie consent and vulnerability disclosure are recommended. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

P

PLAY.CZ

play.cz

55

PLAY.CZ is a Czech Republic-based online media platform specializing in streaming a wide variety of radio stations. The website offers users access to numerous radio channels categorized by genre and region, along with related news and magazine content. The platform targets general audiences interested in online radio and music content. Technically, the site is built on WordPress CMS, leveraging popular JavaScript libraries and Google services for analytics and advertising. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a publicly accessible privacy policy and direct contact information, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the website's content and technical setup suggest legitimacy. Overall, PLAY.CZ is a well-established media platform with moderate digital maturity and a solid security posture, suitable for its business model.

B

Blue / Yellow

blue-yellow.lt

59

Blue / Yellow is a Lithuanian non-governmental organization established in 2014 that provides critical supplies and support to Ukrainian soldiers and volunteers in their fight against Russian aggression. The organization operates multiple fundraising campaigns focused on drones, medical aid, vehicles, and training, positioning itself as a key humanitarian aid facilitator with a strong presence in Lithuania and active media coverage. The website is built on WordPress with modern web technologies and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional, trustworthy, and well-branded, serving a general audience interested in supporting Ukraine.

Т

Таблеточки

tabletochki.org

66

Tabletochki is a well-established Ukrainian non-profit charitable foundation dedicated to supporting children with cancer and their families. Founded in 2012, it operates as a leading pediatric oncology charity in Ukraine, providing direct aid, hospital support, medical education, and advocacy. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement channels including social media and donation platforms. Technically, the site is built on WordPress, uses modern web technologies, and is hosted behind Cloudflare for performance and security. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional HTTP security headers could be implemented. Overall, the site is professional, trustworthy, and well-positioned to serve its mission and audience.

T

Toplage Immobilien GmbH

toplage-immobilien.de

45

Toplage Immobilien GmbH is a regional real estate brokerage firm based in Kiel, Germany, specializing in property sales, rentals, and related consulting services. The company is part of the larger wankendorfer Unternehmensgruppe, which enhances its market position and resource access. The website is professionally designed using TYPO3 CMS and targets property buyers, sellers, and renters in Schleswig-Holstein with clear service offerings and contact options. Technical infrastructure includes modern JavaScript libraries and privacy-conscious analytics via Matomo with cookies disabled. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a trustworthy and professional real estate business with strong compliance to GDPR and user privacy.

A

Adlershorst Immobilien GmbH

adlershorst-immobilien.de

41

Adlershorst Immobilien GmbH is a medium-sized German real estate company specializing in property sales, condominium and rental building management, and in-house skilled trades such as painting, plumbing, and electrical services. The company targets property owners, tenants, and investors primarily in Hamburg and surrounding regions. Their website is built on TYPO3 CMS and employs modern JavaScript libraries, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides detailed contact information for multiple team members, enhancing user trust and engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information are absent. Overall, the website presents a professional and trustworthy image with no detected vulnerabilities or suspicious content.

A

ADLERSHORST Baugenossenschaft eG

adlershorst.de

41

ADLERSHORST Baugenossenschaft eG operates as a large regional housing cooperative in the northwest of the Hamburg metropolitan area, managing over 5,600 residential units and serving more than 9,200 members. The company focuses on providing rental housing, new construction projects, property management, and investment opportunities, targeting tenants, prospective tenants, property owners, investors, and cooperative members. Their market position is strong within their regional niche, supported by a comprehensive digital presence and member engagement through reports and social media. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, delivering a responsive and well-structured user experience. Hosting appears to be managed by a German provider (WTNet), ensuring good performance and regional compliance. The site implements HTTPS and cookie consent mechanisms, reflecting GDPR awareness and privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data and DNS configuration are consistent with a legitimate business entity, enhancing trustworthiness. Overall, the website presents a professional, secure, and privacy-conscious digital front for ADLERSHORST Baugenossenschaft eG, with room for improvement in formal security documentation and transparency. The risk profile is low, with no signs of malicious activity or content safety concerns.

I

IHK-Bildungszentrum Karlsruhe GmbH

ihk-biz.de

73

IHK-Bildungszentrum Karlsruhe GmbH operates as a key educational institution focused on professional development and continuing education in the Technologieregion Karlsruhe, Germany. The website offers a broad range of courses including Praxisstudiengänge, IHK-certified exams, seminars, and online training, targeting professionals, trainees, leaders, founders, and trainers. The company is positioned as a competence center affiliated with the IHK Karlsruhe, providing trusted and comprehensive educational services. Technically, the website is built on WordPress CMS with modern JavaScript libraries such as jQuery and Slick Slider, and employs Borlabs Cookie for GDPR-compliant consent management. The site is mobile-optimized, accessible, and SEO-friendly, with integrations for Google Analytics and Facebook Pixel for marketing and analytics purposes. Hosting appears to be managed via your-server.de nameservers, indicating a professional hosting environment. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks a publicly available dedicated security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but consistent with the business profile, showing no suspicious patterns. Overall, the security posture is good but could be enhanced by adding explicit security policies and incident response information. The website content is safe for general audiences, with no adult or questionable content. Contact information is clearly provided, including phone, email, and physical address, alongside active social media channels. The site demonstrates a high level of professionalism, trustworthiness, and user experience quality, making it a reliable resource for professional education in the region.

M

Mama Labels

mamalabels.com

51

Mama Labels operates an e-commerce platform specializing in personalized name labels for children and seniors, targeting parents and caregivers. The website offers a variety of products including stick-on and iron-on clothing labels, shoe labels, name stamps, and value packs. The business positions itself as a niche leader with a focus on durable, waterproof, and easy-to-use labeling solutions. The site is built on the PrestaShop CMS and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Smartlook, indicating a mature digital marketing strategy. The website is well-structured with good SEO practices and mobile optimization, providing a positive user experience.

S

SDMB, o. p. s.

broumovsko.cz

61

The website www.broumovsko.cz serves as a comprehensive regional tourism and cultural information portal for the Broumovsko region in the Czech Republic. It provides detailed information on local attractions, events, accommodation, gastronomy, and nature, targeting tourists and local visitors interested in exploring the region. The site is supported by public and EU funds, indicating a non-profit or government-affiliated entity focused on regional development and tourism promotion. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as jQuery and Slick Slider for interactive elements. It integrates Google Analytics and Facebook Pixel for visitor tracking and marketing purposes. The site is mobile-optimized and features multi-language support, enhancing accessibility for international visitors. From a security perspective, the site uses HTTPS and standard tracking tools but lacks some advanced security headers like Content-Security-Policy and X-Content-Type-Options. There is no visible security.txt or vulnerability disclosure policy, and privacy and cookie policies are not clearly presented, which may pose compliance risks under GDPR. The absence of WHOIS data reduces transparency about domain ownership, though the website content and EU co-financing statements support its legitimacy. Overall, the site is well-structured, content-rich, and professionally presented, with moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and reduce risk.

F

Freie und Hansestadt Hamburg Senatskanzlei

leistungen-fuer-arbeitgeber.de

60

The website 'Leistungen für Arbeitgeber' is an official German government service provided by the Freie und Hansestadt Hamburg Senatskanzlei. It supports employers who employ or wish to employ people with severe disabilities by offering online application services for individual assistance and funding through the Integration Office. The site targets employers across Germany and is positioned as a trusted, accessible, and official resource. Technically, the site uses modern web technologies including JavaScript libraries for video playback and sliders, and is hosted on PlusServer infrastructure. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, serving an essential government function.

]

]init[ AG

init.de

61

The website www.init.de represents ]init[ AG, a medium-sized German technology company specializing in digital services for government and enterprise sectors. Their business model focuses on consulting, creating, implementing, and operating digital solutions that facilitate societal progress through digitalization. The company holds a C5:2020 certification, demonstrating a high standard of cloud security compliance. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. Analytics are implemented via etracker, with moderate user tracking. Security posture is strong with HTTPS and cloud certification, though some security headers and explicit incident response contacts are missing. Privacy compliance is adequate but could be improved with a more explicit cookie consent mechanism. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

G

GHMP

ghmp.cz

64

GHMP (Galerie hlavního města Prahy) is a prominent municipal gallery in Prague specializing in modern and contemporary art. The website showcases exhibitions, educational programs, online collections, and cultural events, positioning GHMP as a key cultural institution serving a broad general audience. The business model focuses on public engagement through exhibitions, workshops, and publishing activities, supported by commercial rentals and an e-commerce platform. The website reflects a medium-sized organization with consistent branding and strong trust indicators including official municipal affiliation and comprehensive privacy compliance. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Slick Slider, and Marquee3k for interactive content. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing, alongside a GDPR-compliant cookie consent mechanism. The site is mobile-optimized with good accessibility and SEO practices, delivering a moderate performance experience. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit security headers and publicly available security or incident response policies, which are recommended for enhanced protection and transparency. No vulnerabilities or exposed sensitive data were detected in the content. Overall, GHMP's website is professional, content-rich, and compliant with privacy regulations, though the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency. Strategic improvements in security policy disclosure and WHOIS data availability would further strengthen trust and security posture.

Pecka.TV is a Czech-based internet television service operated by VELUS Invest SE, offering affordable IPTV packages with over 160 channels, including popular Czech and international content. The service emphasizes flexibility with no contracts, multi-device support, and features such as ad skipping and cloud DVR. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Cookiebot for consent management. Social media presence is active on Facebook, Instagram, and YouTube. Security posture is good with HTTPS and consent mechanisms, though some security headers and policies are not explicitly published. The domain registration is consistent with the business profile and country, indicating legitimacy. However, explicit privacy policy and terms of service documents were not found in the provided content, which could be improved for compliance and trust.

O

OP JAK

opjak.cz

64

OP JAK is the official web portal for the Jan Amos Komenský Operational Program, a government-funded initiative focused on research, development, and education in the Czech Republic. The website serves as a comprehensive information hub for grant calls, projects, seminars, and news related to the program. It targets research organizations, educational institutions, and applicants seeking funding opportunities. The site maintains a strong market position as an authoritative source for this EU co-financed program. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and utilizes several plugins for event management, SEO, and cookie compliance. The infrastructure is hosted by Active24, with SSL properly configured ensuring secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, minor backend PHP warnings and the absence of explicit security headers suggest areas for improvement. No critical vulnerabilities or malicious content were detected. Privacy policies and cookie policies are comprehensive and accessible. Overall, OP JAK presents a trustworthy and professional online presence with moderate technical sophistication and good compliance posture. Strategic improvements in backend code hygiene and security headers would enhance its security posture further.

B

Bushman

bushman.cz

67

Bushman.cz is a well-established Czech e-commerce retailer specializing in outdoor and casual clothing and accessories for men, women, and children. Founded in 1999, the company has expanded its presence across multiple European countries with localized domains. The website offers a comprehensive product catalog, including clothing, footwear, and camping accessories, supported by customer service and newsletter subscription features. Technically, the site leverages modern analytics, marketing tools, and a secure HTTPS infrastructure with Cloudflare DNS and CDN services. Security posture is solid with secure login forms and cookie consent management, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site presents a professional, trustworthy, and user-friendly experience with extensive tracking and marketing integration.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

max-planck.de

62

The Max-Planck-Gesellschaft website represents a leading German non-profit research organization focused on fundamental scientific research across 84 institutes. The site targets researchers, academics, students, and the general public interested in science. It offers extensive information on research, career opportunities, publications, and innovation initiatives. Technically, the website employs modern JavaScript frameworks, a modular AMD architecture, and a professional CMS (JustRelate CX Cloud). It is hosted on infrastructure consistent with the organization's domain and uses HTTPS with cookie consent managed by Usercentrics. Security posture is strong with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages in the provided content, but cookie consent mechanisms are in place. Overall, the website is professional, trustworthy, and well-structured, reflecting the organization's high credibility and market position.

A

Actency

actency.fr

63

Actency is a leading French digital agency specializing in Drupal-based web solutions, cloud applications, and digital factory services. With a team of 250 experts and over 18 years of experience, the company positions itself as a market leader in Drupal solutions, serving a broad range of clients including government, media, and sports federations. Their business model focuses on consulting, technical assistance, project management, and cloud & DevOps services, targeting businesses seeking scalable and innovative digital platforms. The company maintains multiple offices across France, reinforcing its regional presence and client accessibility. Technically, the website is built on Drupal 9 and incorporates modern web technologies such as Matomo for analytics, Hubspot for forms, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the website's professional content, client references, and active social media presence support its legitimacy. Privacy and cookie policies are comprehensive and GDPR-compliant, indicating a strong commitment to data protection. Overall, Actency demonstrates a robust digital presence with a focus on quality, security, and compliance.

A

AKAFÖ Akademisches Förderungswerk A.ö.R.

akafoe.de

56

AKAFÖ Akademisches Förderungswerk A.ö.R. is a regional non-profit student services organization serving the Bochum area and nearby campuses. It provides a broad range of services including student housing, financial aid (notably BAföG), cultural programs, inclusion services, and childcare. The website is well-structured, professionally designed, and targets students and stakeholders in higher education institutions in Germany. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes multilingual support via Google Translate. Analytics are implemented using Matomo and Google Analytics with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant, and serves its audience effectively.

P

Projektträger Jülich

ptj.de

49

Projektträger Jülich (PtJ) is a leading German project funding agency affiliated with Forschungszentrum Jülich, specializing in managing and implementing innovative government-funded research and innovation programs. With over 50 years of experience, PtJ holds a strong market position in the government and energy sectors, offering services such as project funding, strategic development, monitoring, communication, and procurement. The website reflects a professional and comprehensive digital presence, targeting government bodies, research institutions, and companies seeking funding. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Matomo analytics, ensuring excellent performance, mobile optimization, and accessibility. Security posture is strong, supported by ISO certifications and HTTPS enforcement, though explicit security headers could be enhanced. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, PtJ demonstrates high business credibility and trustworthiness with consistent branding and detailed service information.

A

Andersen Construction

andersen-const.com

55

Andersen Construction is a well-established general contractor and construction management firm operating primarily in the Pacific Northwest of the United States, with offices in Portland, Seattle, Boise, and Eugene. Founded in 1950, the company emphasizes collaborative delivery methods such as Design-Build, Integrated Project Delivery (IPD), and Construction Management/General Contracting (CM/GC). Their business model focuses on serving commercial, industrial, healthcare, education, and multifamily housing sectors with a strong reputation for integrity, safety, and client-first service. The website reflects a medium-sized, employee-owned company with a consistent brand and a professional online presence. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Elfsight widgets for enhanced user experience and social proof. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy compliance. The absence of explicit privacy and cookie policies and lack of security incident contacts indicate gaps in compliance and security transparency. Security posture is adequate but could be improved by implementing standard security headers and providing clear data protection and incident response information. The WHOIS data is unavailable, which raises concerns about domain legitimacy despite the professional content and strong business signals. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance disclosures. Strategic recommendations include improving privacy and cookie policies, adding security headers, establishing incident response contacts, and clarifying domain registration details to enhance trust and compliance.

O

Over The Top SEO

overthetopseo.com

62

Over The Top SEO (OTT) is a specialized SEO agency established since 2015, focusing on elite and luxury SEO services with an emphasis on exclusive partnerships and AI-driven SEO strategies. The company positions itself as a top-tier SEO provider with a unique business model targeting businesses seeking significant online growth. The website demonstrates a professional design and consistent branding, supported by structured data and social media presence, indicating a mature digital footprint. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and MonsterInsights, ensuring good SEO optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data reduces domain trustworthiness and raises questions about domain registration legitimacy. Overall, OTT presents a credible business front with room for improvement in privacy compliance and security best practices.

O

Organ and Tissue Donor Program and the Donate Life Missouri Registry

donatelifemissouri.org

72

Donate Life Missouri is a state government-affiliated non-profit program dedicated to organ, eye, and tissue donation awareness and registry management. The website serves as an educational platform and registration portal for Missouri residents, providing comprehensive information about donation types, consent, and donor stories. It holds a strong market position as the official organ donor registry for Missouri, backed by the Missouri Department of Health and Senior Services. The site targets potential donors, families, and healthcare professionals, facilitating donor registration online, at DMV locations, or by mail. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, ensuring good SEO and analytics integration. It uses HTTPS with a valid SSL certificate and employs Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with a moderate performance profile. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement in security hardening. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and domain status protections. There is no evidence of exposed sensitive data or vulnerabilities in the HTML content. However, the absence of a published security policy, incident response contacts, and cookie consent mechanisms suggests gaps in compliance and transparency. The WHOIS data is consistent with the website's official nature, showing a domain age appropriate for the business history and no privacy protection, which aligns with the public nature of the service. Overall, the website is professional, trustworthy, and serves its public health mission effectively. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would enhance its security posture and regulatory compliance, further strengthening user trust and operational resilience.

L

LUTHER Rechtsanwaltsgesellschaft mbH

luther-lawfirm.com

72

LUTHER Rechtsanwaltsgesellschaft mbH is a large, internationally active German law firm headquartered in Cologne, specializing in economic and tax law advisory services. The website reflects a professional and comprehensive digital presence with detailed information about their competencies, international offices, and news updates. The technical infrastructure is based on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, and incorporates privacy-conscious analytics via Matomo with cookies disabled. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit privacy or terms of service pages in the provided content. WHOIS data is unavailable or privacy protected, which is common for professional firms but reduces transparency. Overall, the website is well-designed, user-friendly, and trustworthy for its target audience of business professionals seeking legal services.

A

Acceleraid GmbH

acceleraid.ai

72

Acceleraid GmbH is a German technology company specializing in AI-driven solutions for digital sales, marketing, and customer service. Their platform automates personalized customer lifecycle management across multiple channels, offering services such as customer data integration, predictive audience segmentation, campaign automation, and personalization engines. The company has a strong market presence with notable clients in finance, telecommunications, and e-commerce sectors, supported by multiple industry awards and certifications. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is robust with GDPR-aligned policies and cookie management. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

W

WEBGAINS

webgains.com

66

WEBGAINS operates as a service-first affiliate marketing network connecting advertisers, agencies, and publishers globally. The company emphasizes outstanding service and partnership-driven growth, supporting over 1,800 brands and 250,000 publishers. Their platform is built on WordPress with modern web technologies and includes multilingual support and GDPR-compliant consent management. The website demonstrates professional design, clear navigation, and strong branding consistency, including B Corp certification as a trust indicator. Security posture is good with HTTPS and consent management, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy based on website content and business presence.

A

Animals’ Angels e. V

shop-animals-angels.de

37

Animals’ Angels e. V operates a German-language non-profit e-commerce website focused on animal welfare, specifically protecting farm animals during transport. The site offers informational materials and merchandise, with proceeds supporting their projects. The organization maintains a clear market niche with a dedicated target audience of animal lovers and supporters. Technically, the website runs on the modified eCommerce Shopsoftware platform, uses HTTPS, and includes modern JavaScript libraries like jQuery and Slick Slider, providing a good user experience with mobile optimization. Security posture is adequate with HTTPS and secure form handling, but lacks explicit security policies, vulnerability disclosure, and cookie consent mechanisms, which are areas for improvement. Overall, the domain and WHOIS data appear legitimate and consistent with a small non-profit entity. The website is trustworthy, professionally presented, and privacy-conscious with minimal tracking.

A

Anstalt für Kommunale Datenverarbeitung in Bayern (AKDB)

akdb.de

67

AKDB (Anstalt für Kommunale Datenverarbeitung in Bayern) is a large, well-established public sector IT service provider specializing in digital solutions for municipalities and public administration in Bavaria, Germany. Their offerings include comprehensive software suites for finance, personnel, citizen services, social services, traffic, building authorities, and cloud IT services, supported by consulting and training. The company leverages a BSI-certified data center and has a strong reputation with over 500,000 positive online service ratings. Technically, the website is built on TYPO3 CMS with modern JavaScript and SEO optimizations, hosted on Colt networks, ensuring reliable infrastructure and good performance. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though explicit incident response contacts and security.txt are absent. Overall, AKDB demonstrates high professionalism, trustworthiness, and digital maturity, serving a critical role in government digital transformation.

S

Symplicity Corporation

symplicity.com

68

Symplicity Corporation operates as a specialized software provider focused on higher education institutions, delivering solutions that enhance student engagement, career readiness, employability, disability services, wellbeing, and conduct case management. The company is positioned as a trusted partner for over 1000 universities across the UK, Europe, and globally, offering a suite of integrated platforms such as Access, Advocate, CareerHub Core, and UniHub. Their business model centers on B2B SaaS, targeting universities and educational organizations to streamline student services and improve outcomes. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including jQuery, FontAwesome, and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional design and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and provides clear privacy and cookie policies with user consent mechanisms, indicating compliance with GDPR. However, the absence of explicit security headers and vulnerability disclosure policies suggests areas for improvement. The lack of WHOIS data reduces transparency and trustworthiness, though the website content and external references support legitimacy. Overall, Symplicity's digital presence reflects a mature and professional organization with strong market positioning in the education technology sector. Strategic enhancements in security transparency and direct contact information could further strengthen trust and compliance.

U

University of California San Diego

ucsd.edu

52

University of California San Diego (UCSD) is a leading public research university located in La Jolla, California. The website serves a diverse audience including prospective and current students, faculty, researchers, and the general public. UCSD offers a broad range of academic programs, research initiatives, and student life services, positioning itself as a top-tier institution with a strong emphasis on innovation and community engagement. The site reflects a mature digital presence with comprehensive content and consistent branding aligned with the university's mission and values. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Tag Manager and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely on university-managed infrastructure. The use of Cascade CMS is inferred, supporting content management needs. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs standard security headers, though DNSSEC is not enabled, representing a minor security gap. No explicit security policy or incident response contacts are published, which could be improved. The site uses multiple third-party scripts for analytics and marketing, with moderate user tracking levels. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, UCSD's website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for an enterprise educational institution. Strategic improvements in privacy compliance and domain security would enhance its security posture and user trust.

P

Pandia

pandia.com

63

Pandia operates as an online directory platform connecting users with creative service providers specializing in graphic design, web design, app development, SEO, and video production. The website positions itself as the largest graphic designer index on the web, targeting businesses and individuals seeking creative professionals globally. The platform offers categorized listings by country and service type, facilitating straightforward connections between clients and service providers. The business model is primarily marketplace/directory-based, focusing on ease of discovery and engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slick Slider, and star rating plugins, ensuring a responsive and user-friendly experience. The site is mobile-optimized and uses HTTPS with embedded secure iframes for forms. However, there is a lack of advanced security headers and cookie consent mechanisms, which are important for compliance and security posture. Analytics are implemented via Clicky, indicating moderate user tracking. From a security perspective, the site benefits from HTTPS and CSRF token usage but lacks explicit security policies, incident response contacts, and security headers. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. No contact emails or phone numbers are provided, limiting direct communication channels. Privacy policy and terms of use are present but cookie compliance is missing, which may impact GDPR compliance. Overall, while the website is functional, content-rich, and professionally designed, the unclear domain registration status and missing security and privacy compliance elements present moderate risks. Strategic improvements in domain legitimacy verification, security header implementation, and privacy compliance would enhance trust and security posture.

B

Barebells Functional Foods France SAS

vitaminwell.fr

45

Vitamin Well France operates as an e-commerce platform specializing in vitamin-enriched functional beverages targeted at health-conscious and active consumers. The brand is well-established with a domain age of over a decade, supporting its market presence in France. The website is professionally designed, mobile-optimized, and provides comprehensive customer engagement features including reviews, newsletter subscription, and social media integration. Technically, the site leverages WordPress with WooCommerce, enhanced by modern JavaScript libraries and marketing tools such as Google Tag Manager and Klaviyo. Security posture is strong with HTTPS, security headers, and a consent management platform ensuring GDPR compliance. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good privacy and security practices.

V

Vitamin Well

vitaminwell.de

56

Vitamin Well Deutschland operates a professional e-commerce website offering functional, low-calorie vitamin-enriched beverages targeting health-conscious consumers in Germany. The brand, founded in 2008 in Sweden, has established a solid market presence with multiple product lines and international reach. The website is built on WordPress with WooCommerce, leveraging modern web technologies and third-party marketing and analytics tools such as Google Tag Manager, Klaviyo, and Usercentrics for GDPR-compliant consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is moderate due to the presence of a cookie consent mechanism but lack of visible privacy and terms policies. Contact is available via a contact form but no direct emails or phone numbers are published. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Verband Maritime Wirtschaft Deutschland e.V.

vmwd.org

56

The Verband Maritime Wirtschaft Deutschland e.V. (VMWD) is a German maritime industry association formed from the merger of two predecessor organizations. It represents the interests of the maritime economy at national and European political levels and provides a range of member services including information dissemination, seminars, research projects, and certification services. The website is professionally designed, primarily in German with English support, and uses TYPO3 CMS with modern frontend technologies such as jQuery and Slick Slider. Privacy and cookie policies are implemented with GDPR compliance, and the site uses HTTPS with Google Analytics for minimal user tracking. However, the WHOIS data for the domain is unavailable due to a malformed request, limiting the ability to verify domain registration legitimacy. No direct contact emails or phone numbers are found, but a contact form is available. Overall, the site is secure and professional but could improve transparency and security headers.

V

Verband Maritime Wirtschaft Deutschland e.V.

bvww.org

56

The Verband Maritime Wirtschaft Deutschland e.V. (VMWD) is a German maritime industry association formed from the merger of two prior organizations. It represents the interests of the maritime economy at national and European political levels and provides member services including information, seminars, and research projects. The website is professionally designed using TYPO3 CMS and modern frontend technologies, with good mobile optimization and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for such organizations. Overall, the site is trustworthy and well-positioned as a maritime industry representative body.

A

A.S.O. UK

aso-uk.com

53

A.S.O. UK is a recently established, medium-sized mass participation events company in the UK, specializing in triathlon, cycling, and running events. It operates as a subsidiary of the well-known Amaury Sport Organisation, leveraging strong brand recognition and a prestigious portfolio of events including the Cancer Research UK London Winter Run and adidas Manchester Marathon. The company targets a broad audience ranging from amateur fitness enthusiasts to professional athletes and corporate clients seeking bespoke event experiences. Technically, the website is built on WordPress with modern plugins and SEO tools, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and domain lock statuses, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional and trustworthy digital presence aligned with the company's market position.

C

CECONOMY

ceconomy.de

56

CECONOMY is a leading European retail platform specializing in consumer electronics, operating prominently through its subsidiary MediaMarktSaturn. The website serves multiple audiences including investors, customers, media representatives, and job seekers, providing comprehensive corporate, financial, and sustainability information. The business model centers on retail and services in consumer electronics with a strong market position in Europe. Technically, the site uses modern web technologies including Google Tag Manager and Usercentrics for consent management, hosted on Akamai CDN infrastructure, ensuring good performance and compliance with GDPR. Security posture is solid with HTTPS and consent mechanisms, though lacking explicit security policy and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, supporting the enterprise's credibility and transparency.

T

TEDi

tedi.com

64

TEDi is a retail company operating a network of shops offering a variety of consumer goods. The website provides comprehensive information about the company, including its history, quality standards, sustainability initiatives, expansion conditions, and store locator services. The site targets a general audience interested in retail shopping and potential business partners for expansion. The business model focuses on retail sales through physical stores with an international presence, primarily in Germany and neighboring countries. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery and Slick Slider for enhanced user experience. The site is mobile optimized, SEO friendly, and includes multilingual support. Performance is moderate with good accessibility features, although some improvements could be made. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks published security policies, incident response information, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial domains. Overall, TEDi's website demonstrates a professional and trustworthy online presence suitable for its retail business. Strategic recommendations include publishing security policies, enhancing accessibility, and providing direct security contact information to improve transparency and trust.

E

European Climate Foundation

europeanclimate.org

64

The European Climate Foundation is a well-established philanthropic organization founded in 2007, dedicated to catalyzing climate action across Europe through partnerships and grantmaking. The website reflects a mature digital presence built on WordPress with modern technologies such as jQuery, Slick Slider, and Matomo analytics, indicating a moderate to good level of digital maturity. The site is professionally designed with clear navigation and relevant content targeting stakeholders in climate action, NGOs, policymakers, and the general public. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in DNS security and security headers. No critical vulnerabilities or suspicious indicators were found. Overall, the website demonstrates high trustworthiness and professionalism, supporting the organization's mission and credibility.

P

Official website of Paris Tours cycling race

paris-tours.fr

59

The website www.paris-tours.fr serves as the official digital platform for the Paris Tours cycling race, providing comprehensive information about the event, including news, team details, live coverage, and media contacts. It targets cycling enthusiasts, sports fans, and media professionals, positioning itself as a key source for race-related content. The site leverages modern web technologies and tracking tools to deliver a rich user experience and advertising capabilities. However, the absence of WHOIS registration data and explicit privacy and terms of service policies slightly detracts from its overall trustworthiness. The site is well-structured, mobile-optimized, and integrates social media channels effectively, enhancing its outreach and engagement.

A

Amaury Sport Organisation (ASO)

paris-roubaix.fr

61

The Paris-Roubaix official website serves as the authoritative digital platform for one of cycling's most iconic races, managed by Amaury Sport Organisation (ASO). It provides comprehensive race information, multimedia content, team details, rankings, and event-related news, targeting cycling enthusiasts, media, and participants globally. The site is well-branded, professionally designed, and integrates modern digital marketing and analytics tools, ensuring a rich user experience across devices. Technically, the website employs contemporary JavaScript libraries, Google Tag Manager, Facebook SDK, and Google DoubleClick for advertising, alongside a responsive design and accessibility features. The presence of a robust cookie consent mechanism demonstrates compliance with GDPR and privacy regulations. The site uses HTTPS with strong SSL configurations, and security headers are likely implemented, contributing to a solid security posture. While WHOIS data is unavailable, likely due to privacy protection or registry policies, the website's affiliation with recognized organizations such as UCI and ASO, along with consistent branding and secure infrastructure, supports its legitimacy. No critical vulnerabilities or security issues were detected during analysis. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response procedures, and vulnerability disclosure programs to enhance transparency and trust further.

A

Amaury Sport Organisation (ASO)

letour.fr

10

The website www.letour.fr is the official digital platform for the Tour de France 2025, operated by Amaury Sport Organisation (ASO). It serves as a comprehensive source for race information, media content, merchandising, and fan engagement. The site targets cycling enthusiasts, media, and tourists interested in the event. The business model revolves around event promotion, media distribution, and official merchandise sales, positioning ASO as a leading organizer in the global cycling sports industry. Technically, the site employs modern JavaScript frameworks and integrates multiple third-party analytics and advertising services, including Google Tag Manager, Facebook SDK, and TikTok Pixel. It uses HTTPS with strong SSL configuration and implements cookie consent mechanisms, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a rich user experience with clear navigation and professional design. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and cookie consent but lacks explicit visible security headers in the HTML source. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. However, no direct contact information or security incident response details are publicly available. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and registration details. Despite this, the website's branding, content quality, and partner references strongly indicate it is an official and trustworthy source. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional platform for its audience.

4

4SELLERS

4sellers.de

62

4SELLERS is a German-based company specializing in innovative ERP software solutions tailored for e-commerce businesses. Their platform aims to optimize trading processes and enhance online sales success, positioning them as a significant player in the e-commerce software sector. The website is professionally designed, leveraging HubSpot CMS and integrating modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security measures such as HTTPS and security headers are properly implemented, indicating a solid security posture. However, the absence of explicit privacy policies, terms of service, and contact information represents gaps in compliance and user trust facilitation. Overall, the site is accessible and trustworthy but would benefit from enhanced transparency and compliance documentation.

Y

YOUCOOK

youcook-food.com

48

YOUCOOK is a German-based food retail brand specializing in delivering authentic Asian street-food style ready meals that can be prepared quickly at home or office. The company emphasizes high-quality ingredients without artificial preservatives and targets consumers seeking convenient, tasty meals. The website is built on TYPO3 CMS and integrates common web technologies such as jQuery and Slick Slider for UI enhancements. Social media presence and customer testimonials enhance brand trust. However, the absence of WHOIS data for the domain raises questions about domain registration legitimacy, although the website content and linkage to the Heristo Gruppe parent company support its authenticity. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy policies are present but basic, with GDPR compliance indicated through linked pages. Overall, the site is professional and functional but could improve security and compliance transparency.

P

Pon Holdings B.V.

pon.com

62

Pon Holdings B.V. is a well-established multinational family business headquartered in the Netherlands, specializing in transportation and mobility solutions. With over €10 billion in annual turnover and 11,300 employees worldwide, Pon operates through multiple clusters including bike leasing, automotive wholesale and retail, and luxury car dealerships. The company emphasizes sustainable and efficient mobility, serving millions of customers with innovative services such as bike subscriptions and shared mobility solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive corporate information. Technically, the site is built on WordPress with modern libraries and is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is good with a detailed privacy statement and terms of use, but lacks a cookie consent mechanism. Overall, Pon.com is a trustworthy and professional corporate website representing a major player in the transportation industry.

PCC WebShop is a Bosnia and Herzegovina-based e-commerce retailer specializing in electronics and household appliances. The website offers a broad product catalog including computers, laptops, monitors, printers, televisions, and small appliances, targeting general consumers in the region. The platform supports user accounts, shopping cart functionality, and promotional deals, positioning itself as a local online electronics retailer. Technically, the site employs common web technologies such as jQuery, Slick Slider, Facebook SDK, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. The website is mobile-optimized with a good user experience and clear navigation. Security-wise, the site uses HTTPS and includes anti-forgery tokens in login forms, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site does not contain adult or NSFW content and maintains a safe content rating.

H

Home Connect GmbH

home-connect.com

73

Home Connect GmbH operates a global smart home platform enabling users to control household appliances from multiple brands via a unified app. The company is positioned as a technology provider within the smart appliance ecosystem, supported by the BSH Group. The website offers comprehensive information about the app, supported appliances, partners, and customer support services, targeting consumers interested in smart home convenience. Technically, the site employs modern JavaScript frameworks, Adobe Experience Platform Launch for analytics, and is optimized for mobile devices with good SEO and accessibility practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust assessment, but branding and external references support legitimacy. Overall, the site is professional, secure, and privacy-conscious, serving as a credible digital presence for Home Connect.

B

BSH Home Appliances Ltd

bosch-home.cl

67

Bosch Home Chile operates as a regional branch of the global BSH Home Appliances group, offering a wide range of high-quality home appliances including cooking, refrigeration, laundry, and coffee machines. The website serves as a comprehensive portal for product information, customer service, and authorized sales channels, positioning Bosch as a trusted brand in the Chilean market. The digital infrastructure leverages modern analytics and tag management technologies, ensuring effective user tracking and marketing optimization while respecting user privacy through consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain legitimacy verification, but the professional branding and official partnerships support the site's authenticity. Overall, the site demonstrates a mature digital presence with good content quality and user experience.

B

Bundesministerium für Wirtschaft und Energie

energiewechsel.de

68

The website energiewechsel.de is an official German government campaign platform managed by the Bundesministerium für Wirtschaft und Energie (Federal Ministry for Economic Affairs and Energy). It focuses on promoting energy efficiency, renewable energy, and climate protection through comprehensive informational content, funding program details, and public engagement initiatives. The site targets a broad audience including citizens, businesses, and municipalities in Germany, aiming to facilitate the energy transition. Technically, the site employs modern web technologies such as JW Player for video content, Slick Slider for UI elements, and etracker for analytics, hosted on managed IP infrastructure. It demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS, includes privacy and cookie policies with user consent mechanisms, and provides a data protection officer contact, though explicit security headers could be enhanced. No vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, serving as a reliable government resource for energy transition information.