Security Directory

L

Landesnetzwerk Weiterbildungsberatung Baden Württemberg

lnwbb.de

46

The Landesnetzwerk Weiterbildungsberatung Baden Württemberg (LN WBB) is a regional network providing free, neutral, and personalized continuing education counseling services to individuals in Baden-Württemberg, Germany. The website serves as a portal to locate advisory centers, access FAQs, and obtain information about continuing education opportunities. It targets individuals seeking guidance on professional development and lifelong learning. The business operates as a non-profit network with a focus on accessibility and regional presence. Technically, the website is built on WordPress 6.8.1 using the Enfold theme and several plugins including Yoast SEO for search optimization, Borlabs Cookie for consent management, and Maps SVG for interactive maps. The site demonstrates good mobile optimization, accessibility features, and SEO practices. The use of modern JavaScript libraries and structured data enhances its digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no explicit security headers were detected, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found in the analyzed content. The domain registration is consistent with the website's purpose and age, supporting legitimacy. Overall, the website presents a professional, trustworthy, and user-friendly platform for continuing education counseling in the region. Strategic improvements include publishing privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen compliance and trust.

L

Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd

lel-web.de

63

The Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd operates as a regional government agency providing comprehensive information, advisory services, and publications related to agriculture, nutrition, and rural development in Baden-Württemberg, Germany. The website serves a diverse audience including agricultural professionals, policymakers, educators, and the general public interested in these sectors. It offers thematic content ranging from market data to quality assurance tools and educational programs, positioning itself as a trusted regional authority. Technically, the website employs modern web technologies such as jQuery, jQuery UI, FontAwesome, and lazy loading for images, indicating a moderate level of digital maturity. The CMS appears to be custom or proprietary, tailored to the institution's needs. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes security tokens in forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy compliance and security transparency to enhance user trust and regulatory adherence.

B&W NetworX GmbH & Co. KG is a small regional IT service provider based in Sinzheim, Germany, specializing in Windows and Unix/Linux technologies. Their business model focuses on delivering IT consulting, infrastructure services, data protection consulting, and ERP solutions to local businesses. The website is professionally designed with clear navigation and content relevant to their target audience. Technically, the site runs on WordPress 4.9.23 with common plugins such as Contact Form 7 and a cookie notice, indicating basic digital maturity. However, the WordPress version is outdated, which may expose the site to security vulnerabilities. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The absence of WHOIS data is a significant concern, as it prevents verification of domain legitimacy and age, impacting trustworthiness. Overall, the site is functional and professional but would benefit from technical and security improvements.

Z

Zimper Media GmbH

messe-kommunal.de

53

Messe KOMMUNAL is a well-established professional trade fair organized by Zimper Media GmbH, targeting municipal decision-makers such as mayors and administrative officials. The event features over 140 exhibitors, a comprehensive program of lectures, and networking opportunities, positioning itself as a key platform for municipal innovation and collaboration in Germany. The website reflects a mature digital presence with modern technologies and clear branding. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Truyo

truyo.ai

66

Truyo is a mature technology company founded in 2011, specializing in AI governance and compliance solutions. Their platform offers comprehensive tools to identify, assess, and mitigate AI risks, ensuring organizations adopt AI responsibly and in compliance with evolving regulations. The company targets enterprises and organizations seeking to manage AI usage, risk, and regulatory compliance effectively. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced features such as AI model validation, data de-identification, and framework assessments. The site is well-optimized for SEO, mobile-friendly, and uses reputable third-party services like Google Tag Manager and HubSpot for analytics and marketing. Security-wise, the site enforces HTTPS, uses security headers, and shows no signs of vulnerabilities, although DNSSEC is not enabled. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, Truyo presents a professional, trustworthy, and technically sound digital presence aligned with its business focus on AI governance.

Y

Yrittajat.fi

suomenyrittajat.fi

60

Yrittajat.fi is a prominent Finnish organization advocating for entrepreneurs, providing member services, information, and training. The website is professionally designed with clear navigation and multilingual support, targeting Finnish entrepreneurs and business members. The technical infrastructure is based on WordPress with modern technologies such as Google Tag Manager and OneTrust for cookie consent, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Overall, the website presents a trustworthy and professional digital presence aligned with its business objectives.

C

ClickEshop

clickeshop.cz

61

ClickEshop.cz is a Czech-based technology company specializing in providing professional web and e-shop creation services through a proprietary CMS platform. Established in 2010, the company has a strong market presence with over 10,000 projects completed and offers a comprehensive suite of services including web hosting, email hosting, customizable templates, and tailored web design solutions. The website is well-structured, targeting small to medium businesses and individuals seeking accessible and professional online presence solutions. Multi-language support through sister domains enhances its regional reach. Technically, the website employs modern web technologies such as jQuery and custom JavaScript, with a proprietary CMS platform. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Hosting is managed via their own nameservers, indicating control over infrastructure. However, some technical improvements are recommended, including the implementation of security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims, supporting trustworthiness. Overall, the security posture is adequate but could be improved to meet higher compliance standards. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing security headers. These improvements will strengthen trust, compliance, and security culture, supporting sustainable business growth.

Š

Školský Portál Raabe

skolskyportal.sk

58

Školský Portál is a Slovak educational portal operated by Školský Portál Raabe, providing a wide range of educational content, news, forums, event calendars, job listings, and resources targeted at educators and schools in Slovakia. The portal is well-established since 2009 and partners with recognized educational publishers such as Raabe and Expol Pedagogika. Technically, the website uses a modern tech stack including OpenCart CMS, Bootstrap, jQuery, and Google services for analytics and security. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA on forms, and implements GDPR-compliant cookie consent mechanisms, although some security headers could be improved. Overall, the site is trustworthy, professional, and compliant with privacy regulations, making it a reliable resource for its target audience.

A

Academian

academian.com

60

Academian is a well-established EdTech company founded in 2003, specializing in delivering innovative digital learning solutions and services. Their offerings include strategic consulting, technology solutions, publishing, learning design, and staffing solutions, targeting K-12 learners, higher education, workforce upskilling, and EdTech sectors. The company emphasizes digital transformation and DEIB (Diversity, Equity, Inclusion, and Belonging) commitments, positioning itself as a partner for educational institutions and organizations seeking transformative learning experiences. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular JavaScript libraries for enhanced user experience. SEO and mobile optimization are well implemented, though accessibility could be improved. Security posture is good with HTTPS and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with privacy and cookie policies, but lacks explicit consent mechanisms. Overall, the website reflects a credible and professional business with strong market positioning in the EdTech industry.

S

Spring

thisisspring.fi

73

Spring is a Finnish non-profit initiative focused on organizing an ideation competition for youth aged 15 to 19. The competition encourages young teams to develop ideas that positively impact the future, offering prizes such as summer jobs and study trips abroad. The website is professionally designed, multilingual, and provides comprehensive information about the competition, including FAQs, news, and partner acknowledgments. The target audience is clearly defined as Finnish youth and educational institutions. The business model revolves around community engagement and educational empowerment through ideation challenges.

I

Iltalehti

il.fi

62

Iltalehti is a leading Finnish news media website operated under Alma Media, offering comprehensive news coverage including sports, entertainment, health, and lifestyle content. The site targets Finnish-speaking audiences and operates a subscription-based premium content service called Plus. Technically, the website employs modern web technologies, including responsive design, custom fonts, and asynchronous loading of scripts, ensuring good performance and mobile optimization. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website is professional, trustworthy, and well-established, but could improve transparency and compliance aspects.

POP Pankki is a well-established Finnish cooperative bank with over 100 years of history, recognized multiple times as Finland's best bank. The website reflects a mature digital presence built on HubSpot CMS, integrating modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Giosg for live chat support. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring comprehensive cookie consent and GDPR-aligned privacy policies. Overall, the site demonstrates high business credibility and trustworthiness.

S

Säästöpankki

saastopankki.fi

73

Säästöpankki is a Finnish savings bank offering retail banking and financial services to Finnish customers. The website presents a professional image with a clear focus on banking services, financial advice, and customer support. The site targets Finnish-speaking users primarily but offers alternate language versions. The business model centers on traditional banking with digital customer engagement. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility is basic. Security posture is strong with HTTPS enforced and CSRF protections, but could benefit from additional security headers and published security policies. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and legitimate online presence for a financial institution.

Alma Media is a leading Finnish media company focused on sustainable growth by providing content and services that benefit users in everyday life, work, and leisure. The company operates a broad portfolio of media outlets and digital services, including advertising and specialized sectors such as automotive, housing, and recruitment. The website reflects a mature digital presence with comprehensive investor relations, corporate responsibility, and career information. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and Sentry for analytics and error tracking. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates professionalism, trustworthiness, and a solid business foundation.

M

Maaseudun Tulevaisuus

maaseuduntulevaisuus.fi

68

Maaseudun Tulevaisuus is a well-established Finnish media company specializing in rural and agricultural news, offering a variety of services including news articles, digital magazines, and weather and forestry services. The website is professionally designed, mobile-optimized, and targets rural professionals and Finnish readers interested in agriculture and related topics. Technically, the site uses modern frameworks such as Next.js and React, integrates multiple analytics and advertising technologies, and complies with GDPR through a comprehensive cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response page. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate and credible media entity.

E

Elisa Oyj (implied by social media links and registrar)

mesta.net

45

Mesta.net is a Finnish media website specializing in entertainment news, including television, movies, books, and music. The site targets Finnish-speaking audiences interested in cultural content and provides news articles, reviews, and interviews. The website is built on WordPress and integrates common digital marketing and tracking tools such as Google Tag Manager and OneTrust for cookie consent. Social media presence is linked primarily to Elisa Oyj's official channels, suggesting a connection or partnership. The domain is well-established, created in 1999, and uses HTTPS for secure communications.

M

MobiiliSuomi Oy

mobiili.fi

57

Mobiili.fi is a Finnish media website specializing in mobile phones and mobile technology news, reviews, and tips. Established in 2007 and operated by MobiiliSuomi Oy, it serves Finnish-speaking mobile technology enthusiasts with a comprehensive range of articles and price comparison affiliate links. The website leverages WordPress CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and OneSignal push notifications, supported by Cloudflare DNS services. The site demonstrates good content quality, professional design, and clear navigation optimized for mobile devices. Security posture is solid with HTTPS enforced and Cloudflare DNS, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is transparent and consistent with the business profile, supporting legitimacy. Overall, Mobiili.fi is a trustworthy and well-maintained media portal with moderate technical sophistication and good privacy practices.

M

Muropaketti

muropaketti.com

59

Muropaketti.com is a Finnish media website published by Otavamedian, focusing on comprehensive coverage of games, movies, series, information technology, and mobile devices. The site targets technology and entertainment enthusiasts primarily in Finland, offering news, reviews, interviews, and product tests. It operates on a WordPress CMS with a modern tech stack including Google Tag Manager, Google Ad Manager, and a consent management platform to ensure GDPR compliance. The website demonstrates good SEO practices and mobile optimization, providing a professional user experience with clear navigation and relevant content. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No privacy policy or terms of service pages were detected in the provided content, which is a notable gap in compliance documentation. Overall, the domain is legitimate, well-established since 1999, and the website is trustworthy with extensive advertising and analytics integrations.

L

LiveRamp

faktor.io

77

LiveRamp is a leading enterprise technology company specializing in data collaboration and identity resolution platforms. Their platform enables marketers and partners to connect people, data, and devices securely across digital and physical environments, facilitating people-based marketing. The company targets enterprise clients across multiple industries and maintains a strong market position with comprehensive product portfolios including Live/Identity, Live/Access, Live/Connectivity, and Live/Insights. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to business users. Technically, the website is built on WordPress with modern performance and SEO optimizations such as WP Rocket and Yoast SEO. The infrastructure leverages Cloudflare for domain registration and AWS for DNS services, indicating a robust hosting environment. The site is mobile-optimized and accessible, with no detected blocking or WAF challenges. Analytics and marketing tools are integrated responsibly with consent mechanisms in place. From a security perspective, the site enforces HTTPS with strong domain registration protections and uses multiple security-related scripts for privacy management. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, LiveRamp's website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise technology provider. Strategic recommendations include enabling DNSSEC, publishing detailed security policies, and establishing a vulnerability disclosure program to enhance trust and security posture.

J

Jobly

monster.fi

56

Jobly.fi is a prominent Finnish digital recruitment platform offering a wide range of job listings across multiple sectors and regions. As part of Alma Media's Alma Career division, it holds a strong market position with over 25 years of experience in digital recruitment. The platform targets a broad audience including students, unemployed individuals, career changers, and professionals, providing services such as job search, employer profiles, recruitment campaigns, and CV search. Technically, the website is built on Drupal CMS and integrates modern marketing and analytics tools like Google Tag Manager, Adform, and Permutive, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and employs secure form practices but lacks published security policies and incident response contacts, indicating room for improvement. Overall, Jobly.fi demonstrates a mature digital presence with good content quality, technical implementation, and business credibility, though enhancing security transparency and compliance documentation would strengthen its posture further.

L

Lampa Studio d.o.o.

lampa.ba

61

Lampa Studio d.o.o. is a Bosnia and Herzegovina-based technology service provider specializing in web design, custom web development, eCommerce solutions, and mobile applications. Founded in 2011, the company targets businesses and organizations seeking modern, user-friendly digital solutions with a focus on usability and contemporary design. Their market position is supported by a strong portfolio of regional clients and active social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and CSRF tokens present, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a credible business entity.

N

Nettimökki

nettivuokraus.com

65

Nettimökki operates as Finland's largest and most comprehensive online marketplace for vacation cottage rentals, offering over 6,300 listings across the country. The platform targets Finnish vacationers seeking diverse lodging options from rustic laavus to luxury villas. The website provides advanced search capabilities, user account management, and promotional tools for cottage owners. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and integrates with third-party services for analytics and advertising. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and consent management, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises questions about domain registration transparency but does not detract from the site's professional appearance and functionality. Overall, Nettimökki presents a mature digital presence in the hospitality sector with room for improvement in compliance documentation and security transparency.

G

Gransy, s.r.o.

clickeshop.com

62

ClickEshop.com is a professional ecommerce and website building platform operated by Gransy, s.r.o., established in 2010. The company offers a comprehensive content management system with integrated web hosting, email services, and customizable graphic templates targeting small to medium businesses and individuals seeking easy-to-use webshop solutions. The platform boasts over 10,000 projects and more than a decade of experience, positioning itself as a reliable player in the ecommerce technology sector. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript with jQuery, and features a proprietary CMS tailored for ecommerce. Mobile optimization and SEO practices are well implemented, though performance is moderate. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced protections such as DNSSEC and security headers. Privacy compliance is partial, with terms of service present but no explicit cookie or privacy policy pages. Contact information is clearly provided, including phone, email, and a contact form, enhancing business credibility. Overall, the site is accessible, professional, and safe for general audiences.

D

Domelia, s.r.o.

domelia.sk

57

Domelia, s.r.o. operates Domelia.sk, a Slovak online platform facilitating connections between households, helpers, and companies for various domestic services including childcare, cleaning, tutoring, senior care, handyman, and health & beauty. The platform supports multiple user types with free and premium membership models, serving a medium-sized market with over 15 years of operation. Technically, the website employs modern JavaScript libraries, Bootstrap framework, and integrates analytics and consent management tools, delivering a good user experience with mobile optimization and SEO considerations. Security posture is solid with HTTPS and cookie consent, though improvements in security headers and incident response transparency are recommended. WHOIS data confirms legitimacy and consistency with business claims. Overall, Domelia.sk presents a professional, trustworthy, and well-maintained service platform in the Slovak domestic help market.

P

Pelcro

pelcro.com

68

Pelcro is a technology company offering an all-in-one subscription management platform tailored for businesses selling digital memberships, subscriptions, magazines, and newspapers. Positioned as a niche SaaS provider, Pelcro targets digital content businesses seeking streamlined subscription and membership management solutions. The website is professionally designed using the Wix platform, integrating marketing and analytics tools such as HubSpot and Google Analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security posture is solid with HTTPS enforcement, security headers, and secure cookie handling, although explicit security policies and vulnerability disclosures are absent. Overall, the website demonstrates a trustworthy and professional presence with good privacy compliance and user experience, suitable for its business model and audience.

Kelvin Power Tools is a well-established UK-based specialist supplier of professional power tools and accessories, serving trade users since 1977. The company offers a wide range of top brands including Bosch, DeWalt, Festool, and Paslode, positioning itself as a trusted retailer in the construction and professional tools market. Their website reflects a mature e-commerce platform with a focus on customer service, free delivery, and product variety. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and multiple analytics and tracking tools such as Google Analytics, Bing UET, and Smartlook. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved. From a security perspective, the site uses HTTPS and integrates reCAPTCHA v3 for form protection, indicating a reasonable security posture. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and trust signals such as Trusted Shops ratings and secure payment options support its credibility. Overall, Kelvin Power Tools presents a professional and trustworthy online presence with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, cookie consent, and publishing explicit security policies to enhance user trust and regulatory compliance.

C

Corazon Latino

corazonlatino.com

69

Corazon Latino is a UK-based e-commerce retailer specializing in handmade silver jewellery for women and men. The company emphasizes traditional craftsmanship, unique artisan partnerships, and high-quality sterling silver products hallmarked by the London Assay Office. Their market position is that of a niche artisan jewellery provider with a strong focus on customer service, fast UK delivery, and a money-back guarantee. Technically, the website is built on the Shopify platform using the Impulse theme, integrating modern marketing and analytics tools such as Google Tag Manager, Klaviyo, and Trusted Shops. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced and standard security headers, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data slightly reduces trust but does not outweigh the strong business and technical indicators. Overall, the website presents a professional, trustworthy, and user-friendly e-commerce experience.

S

Solarplexius

solarplexius.co.uk

65

Solarplexius is a well-established company specializing in car window tinting and sun protection products, serving a broad European market with localized websites. Their business model focuses on e-commerce sales of custom-fit sunshades that block sunlight and reduce heat inside vehicles. The company has a strong market presence with over 500,000 customers and a history dating back to 1988. Technically, the website is built on WordPress with WooCommerce and modern JavaScript frameworks like Vue.js, supported by various marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear contact channels and trust signals like Trusted Shops certification.

M

Moonlight Design Ltd

moonlightdesign.co.uk

66

Moonlight Design Ltd operates a UK-based e-commerce website specializing in designer interior and exterior lighting products. The company targets consumers and businesses seeking high-quality lighting solutions, offering free UK delivery as a key service. The website presents a professional and consistent brand image with active social media engagement across multiple platforms. Technically, the site employs common analytics and tracking tools such as Google Analytics and Microsoft Clarity, and demonstrates good mobile optimization and SEO practices. However, the absence of visible privacy and terms of service policies, combined with a lack of advanced security headers, indicates room for improvement in compliance and security posture. The WHOIS lookup failed due to domain naming rule violations, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced security and compliance measures.

A

Coming Soon 14

aura-apps.com

51

The website aura-apps.com currently serves as a minimal placeholder 'Coming Soon' page with no substantive business content or contact information. The domain was registered in 2019 and uses Cloudflare DNS services, indicating some level of technical infrastructure, but no CMS, analytics, or security policies are present. The site employs Bootstrap 4 for styling but lacks advanced technical or SEO optimizations. Security posture is weak due to absence of security headers, privacy policies, and incident response information. No contact or business details are provided, limiting trust and credibility. Overall, the site appears to be in early development or inactive state, offering minimal insight into the business or services planned.

Z

Zoko

zoko.io

64

Zoko is a specialized SaaS platform designed to empower Shopify merchants by integrating WhatsApp as a primary sales, marketing, and customer support channel. The platform offers advanced features such as AI-powered product catalogs, WhatsApp broadcasts with superior engagement rates compared to email, and seamless payment collection within WhatsApp. Positioned as a market leader in WhatsApp commerce tools for e-commerce brands, Zoko targets growing Shopify stores seeking to enhance customer engagement and drive repeat revenue. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Fonts, Google Tag Manager, PostHog, Dreamdata analytics, and PartnerStack for affiliate marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with embedded video content and a comprehensive cookie consent mechanism. The technical infrastructure reflects a mature digital presence suitable for a SaaS business. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent and privacy policies are present and GDPR compliant, indicating a good privacy posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and secure digital front for Zoko's business. The lack of WHOIS data due to privacy protection is common and justified for this business type. The site is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing security transparency and contact information to further build trust and compliance.

S

selecdoo AG

selecdoo.com

67

Selecdoo AG operates a next-generation affiliate marketing platform that leverages AI technology to connect online shops with a large network of publishers, influencers, and content creators. The platform emphasizes commission-based marketing without monthly fees, offering a scalable and fraud-resistant solution for advertisers and publishers alike. The company is positioned as a modern player in the affiliate marketing industry with a strong focus on technology and user experience. Technically, the website is built on a modern stack including Next.js and React, hosted likely on Vercel, and integrates multiple analytics and tracking tools with consent management. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security.txt are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for affiliate marketing activities.

E

EMAS geprüftes Umweltmanagement

emas.de

44

The website www.emas.de serves as an authoritative information portal for the European Eco-Management and Audit Scheme (EMAS), primarily targeting organizations interested in environmental management and sustainability in Germany and Europe. It provides comprehensive resources including news, events, publications, and access to software and platforms supporting EMAS implementation. The site is well-positioned as a government/non-profit sector resource with strong trust indicators such as official branding and testimonials from recognized organizations. Technically, the website is built on TYPO3 CMS with modern frontend technologies including jQuery, Bootstrap, and Slick Carousel. It is hosted on DomainControl nameservers, uses HTTPS, and demonstrates good mobile optimization and accessibility. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure information, which are areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website presents a low risk profile with a strong professional and trustworthy presence. Strategic recommendations include implementing cookie consent mechanisms, adding security headers, and publishing security policies to enhance compliance and trust.

D

Deutscher Nachhaltigkeitskodex (DNK)

deutscher-nachhaltigkeitskodex.de

59

The Deutscher Nachhaltigkeitskodex (DNK) website serves as a comprehensive platform providing free support for companies, especially small and medium-sized enterprises (SMEs), to comply with the EU's Corporate Sustainability Reporting Directive (CSRD). It offers a modular suite of services including a digital reporting platform, checklists, helpdesk support, and sector-specific guidance. The DNK is backed by the German Federal Ministry for Economic Affairs and Climate Action (BMWK) and developed by the Council for Sustainable Development (RNE), positioning it as a trusted and authoritative resource in the sustainability reporting domain. Technically, the website employs modern web technologies such as Bootstrap and jQuery, integrates Google Maps for interactive features, and uses Consentmanager.net for GDPR-compliant cookie management. Analytics are handled via Piwik (Matomo), reflecting a moderate level of user tracking balanced with privacy considerations. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent and professional design that enhances user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers like Content-Security-Policy are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the site's official nature, supported by government and recognized sustainability organizations. Overall, the site demonstrates a strong security posture with room for improvement in explicit security policies and incident response disclosures. The overall risk assessment is low, with the site presenting a trustworthy, professional, and compliant platform for sustainability reporting. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date third-party components to sustain and improve the security and compliance posture.

The website 'Wasser-Risiko-Check' is a public service platform operated by Stadtentwässerungsbetriebe Köln, aimed at providing residents and building owners in selected municipalities of North Rhine-Westphalia with an online tool to assess flood risks related to heavy rain, high water, and groundwater. The platform offers an interactive map, a questionnaire, and downloadable PDF forms to help users understand their building's vulnerability and potential protective measures. The project is publicly funded and cooperates with multiple local municipalities, positioning itself as a niche governmental risk advisory service. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, OpenLayers for mapping, and Usercentrics for GDPR-compliant consent management. The site is mobile-optimized and provides a user-friendly interface with clear navigation. However, no CMS or advanced frameworks were detected, and hosting appears to be managed via generic servers. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and integrates consent management, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is well addressed with clear privacy and cookie policies. Business credibility is supported by clear branding, contact email, and governmental cooperation, though no phone contacts or social media links are provided. Overall, the website is a trustworthy, well-structured public service tool with good content quality and privacy compliance. Security posture is adequate but could be enhanced by adding security headers and incident response information. The domain WHOIS data is minimal but not suspicious, consistent with a public service project. Strategic recommendations include improving security headers, adding terms of service, and enhancing transparency around security policies.

S

StEB Köln

hw-karten.de

49

The website hw-karten.de is a government-affiliated platform operated by StEB Köln, providing flood hazard maps and related public safety information primarily for residents and local authorities in Germany. It offers interactive GIS-based mapping services focusing on flood, groundwater flooding, and heavy rain events. The site is well-branded with consistent government imagery and provides links to official resources and publications. Technically, the site is built using modern JavaScript frameworks such as Vue.js and Vuetify, with mapping functionality powered by OpenLayers and Visdom libraries. The hosting appears to be managed via known server providers, with no blocking or WAF detected, ensuring full accessibility.

S

StEB Köln (Stadtentwässerungsbetriebe Köln)

regenkompass.de

51

The Regenkompass website is a public sector initiative managed by StEB Köln, focusing on sustainable rainwater management and climate adaptation strategies for the city of Cologne. It serves as an informational platform targeting residents and stakeholders interested in environmental urban planning, offering detailed content on green roofs, facade greening, de-sealing, and rainwater usage. The site positions itself as a local leader in promoting sustainable urban water management practices. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, and Usercentrics for cookie consent, complemented by Google Analytics 4 for user tracking. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be with Your-Server.de, a known German hosting provider. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data is minimal but consistent with the official nature of the site. Strategic recommendations include enhancing security headers, publishing incident response contacts, and expanding transparency on security policies.

S

Stadtentwaesserungsbetriebe Koeln, AoeR

parkweiher.koeln

65

The website 'parkweiher.koeln' is an official public service platform managed by the Stadtentwässerungsbetriebe Köln, AöR, focusing on the 15 urban park ponds in Cologne. It provides comprehensive information about the ponds, their ecological importance, recreational activities, and related multimedia content. The site targets local residents and visitors interested in nature and urban green spaces. Technically, the site employs modern web technologies including Matomo for privacy-conscious analytics and Usercentrics for GDPR-compliant cookie management. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent blocking third-party content until approval, though some security headers could be improved. WHOIS data aligns well with the website's public service nature, showing consistent registration details and no suspicious patterns. Overall, the site demonstrates a mature digital presence for a government entity with strong privacy and compliance adherence.

K

kr3m. media GmbH

kr3m.com

56

kr3m. media GmbH is a German-based company specializing in providing HTML5 gaming platforms primarily targeting large publishers and media companies. Their flagship product, the Playground, enhances reach through SEO, customer engagement, and subscription generation. The company positions itself as a market leader in the HTML5 games sector with a focus on white-label partnerships. Technically, the website is built on WordPress with modern plugins such as WooCommerce and Elementor, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the domain age and WHOIS data support the legitimacy of the business. Recommendations include improving privacy compliance, adding security headers, and publishing clear contact and incident response information.

T

The Stepstone Group

stepstone.com

66

The Stepstone Group is a large, global technology company specializing in AI-driven job marketplaces and programmatic recruitment marketing solutions. Operating over 20 brands in more than 30 countries, it serves employers and jobseekers worldwide. The company emphasizes innovation, customer-centricity, and sustainability in its business approach. The website reflects a mature digital presence built on WordPress with modern JavaScript frameworks and privacy-conscious analytics. Security posture is strong with HTTPS and secure forms, though some security headers and incident response contacts could be improved. The absence of WHOIS data is a concern but does not detract significantly from the professional and trustworthy online presence. Overall, the company appears credible and well-positioned in the recruitment technology sector.

weber.cloud is a German-based managed hosting and cloud solutions provider operating since 2016 with a strong focus on data sovereignty and high-quality service. The company offers specialized hosting services including Managed Hosting, AI Hosting, custom cloud solutions, and professional IT services, targeting businesses, online shops, and public institutions primarily in Germany. Their infrastructure is hosted in their own data center in Balingen, Germany, emphasizing compliance with German data protection laws. Technically, the website is well-implemented using modern frameworks like Bootstrap and jQuery, with good performance and mobile optimization. Security posture is solid with HTTPS, secure forms, and cookie consent mechanisms, though some improvements like DNSSEC and security.txt are recommended. The domain WHOIS data aligns well with the business claims, showing legitimacy and consistency. Overall, the website reflects a professional, trustworthy, and compliant cloud service provider with a clear market niche.

weber.cloud, operated by weber.digital GmbH, is a German-based managed hosting and cloud solutions provider founded in 2016. The company operates its own data center in Balingen, Germany, emphasizing data sovereignty, GDPR compliance, and high-quality managed hosting services including specialized TYPO3 hosting, shop hosting, AI hosting, and professional services. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content targeting businesses, online shops, and public institutions. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and analytics tools like Google Analytics and Facebook Pixel, with a strong focus on privacy and cookie consent mechanisms. Security posture is good with HTTPS enforced and secure form handling, though DNSSEC is not enabled and some security headers are missing. The domain registration is consistent and transparent, reinforcing trustworthiness. Overall, the website reflects a mature, professional cloud hosting provider with strong regional presence and compliance focus.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bawue-zu-tisch.de

62

The website 'Baden-Württemberg zu Tisch' is an official government platform managed by the Ministry of Nutrition, Rural Areas and Consumer Protection of Baden-Württemberg. It promotes regional food products, sustainable nutrition, and community engagement aligned with the state's nutrition strategy. The site targets residents of Baden-Württemberg across all age groups and provides information on projects, offers, news, and downloadable resources related to nutrition and sustainability. The platform is well-branded, consistent, and trustworthy, featuring endorsements from government officials and accessibility options such as easy language and sign language.

E

edudip

edudip.com

59

Edudip is a German-based company founded in 2010 that provides interactive webinar software and online training solutions. The platform targets training leaders, presenters, and participants, offering a collaborative and engaging learning experience. The website demonstrates a professional and consistent brand presence, with a focus on ease of use, interactivity, and corporate branding options. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies and plugins to enhance user experience and SEO. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

S

Städtische Volkshochschule Hechingen

vhs-hechingen.de

51

The Städtische Volkshochschule Hechingen operates as a municipal adult education provider offering a wide range of courses and community learning opportunities. The website reflects a well-maintained digital presence with a focus on accessibility, user engagement, and comprehensive educational content. The institution holds an AZAV certification, underscoring its commitment to quality education. Technically, the site is built on TYPO3 CMS with modern libraries such as jQuery and Bootstrap, and integrates a GDPR-compliant cookie consent mechanism via Klaro. Analytics are handled through Matomo, respecting user privacy. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though security headers could be improved. Overall, the site is trustworthy, professional, and serves its regional educational mission effectively.

The Universalschlichtungsstelle des Bundes is an official German federal arbitration body providing neutral dispute resolution services to consumers and businesses. The website clearly communicates its mission to help resolve disputes out of court, targeting both consumers and companies. It operates as a government-affiliated entity, offering services such as case submission and informational resources. The site is built on TYPO3 CMS with modern web technologies and includes multilingual support, enhancing accessibility and user experience. Technically, the website employs a solid infrastructure with TYPO3 CMS, Bootstrap 5, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and a published security policy are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain registration data aligns well with the website's official nature, supporting legitimacy. However, the absence of terms of service and incident response information suggests areas for improvement in transparency and security readiness. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, and establishing a vulnerability disclosure process to enhance trust and security posture further.

L

Landeszentrum für Ernährung Baden-Württemberg

landeszentrum-bw.de

60

The website lern-bw.de serves as the official online presence of the Landeszentrum für Ernährung Baden-Württemberg, a government-affiliated center dedicated to nutrition education and promoting sustainable, health-conscious community catering. It targets a broad audience including educators, caregivers, nutrition professionals, parents, and seniors. The site offers educational materials, event information, and certification programs such as the BeKi certificate for nutrition-conscious kindergartens. The platform is positioned as a regional authority in nutrition education within Baden-Württemberg, supported by the Ministry of the Interior for Digitalization and Municipalities.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

von-daheim.de

61

The website 'Von Daheim BW' is a regional campaign operated by the Ministry for Nutrition, Rural Areas, and Consumer Protection of Baden-Württemberg, Germany. It aims to promote awareness and consumption of regional food products by highlighting the families and stories behind these products. The site targets consumers within the Baden-Württemberg region and serves as an informational platform to strengthen local product recognition and support. The campaign is positioned as a government initiative with a clear focus on regional food and consumer education. Technically, the website employs a proprietary CMS used by Baden-Württemberg state agencies, leveraging jQuery and jQuery UI libraries, and integrates Matomo analytics for privacy-conscious user tracking. The site is moderately performant, mobile-optimized, and accessible, with basic SEO practices in place. Hosting appears to be managed by state infrastructure, ensuring reliability. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism that restricts cookies to technically necessary ones by default. However, explicit security headers and incident response policies are not published, representing areas for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data aligns with the official government entity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR principles, though it could enhance transparency by publishing detailed security and incident response policies. The site is safe for general audiences, with no adult or questionable content detected.

L

Landeszentrum für Ernährung Baden-Württemberg

ernaehrung-bw.de

60

The website 'lern-bw.de' represents the Landeszentrum für Ernährung Baden-Württemberg, a regional government-affiliated center focused on nutrition education and promoting sustainable, healthy community catering. It targets a broad audience including educators, catering professionals, parents, and seniors. The site offers educational materials, events, and information to support nutrition education across various life settings. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Matomo for analytics, and Google Maps API. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. WHOIS data is minimal but domain appears legitimate for a government-related entity. Overall, the site is professional, trustworthy, and safe for general audiences.