Security Directory

E

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG

eurobaustoff-forum.de

51

EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG operates a professional industry forum and networking platform focused on the construction retail sector in Germany. The website EUROBAUSTOFF FORUM serves as a hub for shareholders, suppliers, service providers, and representatives of the EUROBAUSTOFF central office to connect and stay informed about industry innovations and exclusive forum conditions. The business model centers on cooperation and service provision within the building materials trade, offering exhibitions, digital communication platforms, and educational opportunities to its members. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap 5, enhanced by Usercentrics for consent management and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. No blocking or WAF mechanisms were detected, indicating open accessibility. From a security perspective, the site uses HTTPS and consent management but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website presents a professional, trustworthy, and well-maintained digital presence aligned with the company's business objectives. Strategic improvements in security policy transparency and technical security headers would enhance the security posture further.

M

musica viva - Die Konzertreihe des BR für zeitgenössische Musik

br-musica-viva.de

70

musica viva is a prestigious concert series organized by Bayerischer Rundfunk, focusing on contemporary music in Munich. It is recognized as one of the world's leading forums for contemporary music, collaborating closely with the Bavarian Radio Symphony Orchestra and Choir. The website effectively promotes upcoming concerts, ticket sales, and related cultural content, targeting music enthusiasts and concertgoers primarily in Germany. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Usercentrics CMP for privacy compliance. It uses trusted ticketing partners and integrates analytics responsibly with user consent. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with excellent content quality and user experience.

S

Symphonieorchester des Bayerischen Rundfunks

br-so.de

70

The Symphonieorchester des Bayerischen Rundfunks (BRSO) operates a professional and comprehensive website focused on classical music concerts, ticket sales, educational outreach, and media content distribution. The orchestra enjoys a strong market position in Germany and internationally, supported by a reputable parent company, Bayerischer Rundfunk. The website targets classical music enthusiasts, families, students, and the general public interested in orchestral music. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR, providing a positive user experience and clear business credibility.

K

Klassik Radio

klassikradio.de

57

Klassik Radio operates as a German-based classical music streaming and radio broadcasting service, offering curated music channels, live concert events, and premium ad-free subscriptions. The website is professionally designed with excellent content quality and user experience, targeting classical music enthusiasts and general audiences interested in cultural music content. Technically, the site leverages modern frameworks such as Next.js and React, with mobile optimization and SEO best practices well implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the domain and website present a trustworthy and mature digital presence in the media sector.

E

EWV Energie- und Wasserversorgung GmbH

ewv.de

45

EWV Energie- und Wasserversorgung GmbH is a regional energy and water utility company based in Stolberg, Germany, focusing on sustainable and climate-friendly energy solutions including electricity, gas, heating, photovoltaics, and e-mobility. The company targets both private and business customers within its service region, emphasizing local partnerships and environmental responsibility. The website is built on TYPO3 CMS and integrates modern technologies such as Usercentrics for GDPR-compliant cookie consent, Google Tag Manager, and Meta Pixel for marketing and analytics. The digital infrastructure supports customer engagement through an online portal and product finders, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not published. Overall, the website is professional, trustworthy, and well-structured, supporting the company's regional market position and sustainability goals.

K

kununu

kununu.com

74

kununu is a leading employer review platform in the German-speaking region, providing anonymous company ratings, salary information, and workplace culture insights to job seekers and employees. The platform is owned by XING SE, a well-known professional networking company. The website targets users looking for transparent employer information to make informed career decisions. Technically, kununu employs modern web technologies including React with Next.js, and integrates advanced analytics and consent management tools such as Piwik PRO, Google Tag Manager, and Usercentrics CMP. The site is well-optimized for mobile devices and offers a professional user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, implements key security headers, and manages user privacy effectively through cookie consent mechanisms. However, the absence of publicly available WHOIS data is unusual and warrants further verification. Overall, kununu demonstrates a mature digital presence with strong privacy and security practices, making it a trustworthy platform for its users.

exali AG is a digital insurance provider specializing in tailored insurance solutions for freelancers, self-employed professionals, and companies primarily in the IT, media, consulting, and e-commerce sectors. Operating since 2008, exali offers modular insurance products such as IT liability, media liability, consulting liability, e-commerce insurance, D&O insurance, and cyber insurance. The company emphasizes fast online contract conclusion, personal expert support, and worldwide business protection, serving over 20,000 customers across 28 European countries. The website reflects a professional, well-structured digital presence with strong trust signals including customer testimonials and an eKomi Gold certification. Technically, the website employs modern JavaScript libraries including RequireJS, jQuery, and Google Tag Manager, with asynchronous loading and lazy loading of images to optimize performance. Usercentrics is integrated for consent management, ensuring GDPR compliance. The site is mobile-optimized and SEO-friendly, with clear navigation and comprehensive content. Security posture is good with HTTPS enforced and consent-based tracking, though explicit security headers and incident response policies are not publicly disclosed. The WHOIS data for the domain www.exali.at is unavailable, which slightly reduces the domain trustworthiness score. However, the overall business credibility and website quality remain high. No WAF or blocking mechanisms were detected, allowing full content accessibility and analysis. Overall, exali AG presents a mature digital insurance business with a strong market position in Europe, leveraging technology for efficient customer service and compliance. Strategic improvements could include publishing detailed security policies and incident response information, and ensuring WHOIS transparency to enhance domain legitimacy.

Life Radio GmbH & Co.KG operates a professional media website focused on radio broadcasting, podcasts, news, and events primarily serving the Austrian market. The website offers multiple streaming channels, podcast episodes, and promotional campaigns targeting a general audience interested in music and regional news. The company maintains a consistent brand presence across social media and digital platforms, supporting its market position as a regional media broadcaster. Technically, the website employs modern JavaScript frameworks and integrates third-party services such as Usercentrics for consent management and AdsWizz for advertising. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site enforces HTTPS and uses a consent management platform, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and WHOIS domain registration data introduces some trust concerns. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website presents a professional and trustworthy media platform with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

I

idealo.de

flights-idealo.co.uk

65

Flights-idealo.co.uk is a UK-targeted flight price comparison website operated by idealo internet GmbH, a well-established company in the online price comparison market. The platform aggregates flight offers from numerous airlines and travel agents, providing users with a comprehensive and user-friendly interface to find cheap flights quickly. The website is part of the idealo brand family, which operates multiple regional sites, enhancing its market presence and trustworthiness. Technically, the site employs modern web technologies including React, Apollo GraphQL, and styled components, ensuring a responsive and performant user experience. The use of HTTPS and consent management tools like Usercentrics demonstrates a commitment to security and privacy compliance. However, the WHOIS data for the domain is unavailable due to a domain registration error related to naming rules, which does not appear to impact the legitimacy or operation of the site. Security posture is good but could be improved by adding explicit security headers and publishing a security policy. Overall, the site is professional, trustworthy, and well-positioned in the flight comparison market.

I

idealo

idealo.fr

66

idealo.fr is a leading French price comparison platform offering consumers the ability to compare prices, read product reviews, and receive price alerts across a wide range of product categories. The website is professionally designed, mobile-optimized, and provides a seamless user experience with features such as wishlists and price alerts. The platform targets general consumers looking for the best deals online and operates within the e-commerce sector. Technically, the site leverages modern web technologies including React with Next.js, and integrates consent management tools to comply with GDPR regulations. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable gap but does not detract significantly from the overall legitimacy given the professional web presence and branding consistency. Overall, idealo.fr demonstrates a mature digital infrastructure and a trustworthy e-commerce service.

I

idealo

idealo.es

68

idealo.es is a well-established Spanish price comparison website offering consumers the ability to compare prices and find the best deals across a wide range of product categories. The platform is part of the idealo group with multiple country-specific sites, indicating a strong European market presence. The website leverages modern web technologies including React and Usercentrics for consent management, ensuring a contemporary and user-friendly experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, although explicit privacy and terms of service pages were not detected in the provided content. Overall, idealo.es demonstrates a mature digital infrastructure suitable for its e-commerce comparison business model.

I

idealo internet GmbH

idealo.co.uk

70

idealo.co.uk is a prominent UK-based price comparison website offering consumers access to over 650,000 products from thousands of retailers. The platform provides comprehensive price comparison, product search, price alerts, and shopping advice, positioning itself as a leading player in the UK e-commerce market. Owned by Axel Springer SE, idealo demonstrates strong market presence and brand consistency. Technically, the website employs modern web technologies including React with Next.js, and integrates consent management platforms to ensure GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, delivering an excellent user experience. Security-wise, idealo enforces HTTPS, uses security headers, and manages user login states securely, though it lacks a publicly available dedicated security policy or incident response information. Overall, idealo.co.uk is a trustworthy and professional e-commerce platform with a mature digital infrastructure.

I

idealo

idealo.at

71

idealo.at is a leading Austrian price comparison website offering consumers access to over 100 million offers from more than 18,000 shops. The platform provides comprehensive purchase advice and expert opinions to help users make informed buying decisions and save money. It operates as part of the idealo group, which has multiple localized sites across Europe. The website is well-branded, professionally designed, and targets general consumers in Austria seeking competitive pricing on a wide range of products. From a technical perspective, idealo.at employs modern web technologies including React (Preact), Next.js for server-side rendering, and advanced consent management tools to ensure GDPR compliance. The site is optimized for performance and mobile responsiveness, providing a smooth user experience. Security best practices are observed with HTTPS enforcement, secure cookie handling, and no visible vulnerabilities or exposed sensitive data. While explicit WHOIS data is unavailable due to privacy protection, the website's consistency, trust signals, and compliance with privacy regulations indicate a mature and legitimate business. However, the site lacks publicly available security policies or vulnerability disclosure mechanisms, which could be improved to enhance transparency and incident response readiness. Overall, idealo.at demonstrates a strong digital presence with robust technical infrastructure and a solid security posture, making it a trustworthy platform for consumers. Strategic recommendations include publishing detailed security policies, implementing a security.txt file, and providing clear security contact channels to further strengthen trust and compliance.

I

idealo

idealo.it

72

idealo.it is a well-established Italian price comparison website operated by idealo internet GmbH, a reputable company based in Germany. The platform offers consumers the ability to compare prices across thousands of online stores, access product reviews, and receive price alerts. It targets general consumers in Italy looking for the best deals across various product categories. The website demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, with strong mobile optimization and accessibility features. Security practices include HTTPS enforcement, content security policies, and GDPR-compliant consent management, though explicit security policies and incident response details are not publicly disclosed. Overall, idealo.it presents a professional, trustworthy, and user-friendly e-commerce service with a strong market position in Italy.

A

audiowest media GmbH

audiowest.de

43

audiowest media GmbH is a modern audio marketing company based in Germany, specializing in radio and online audio advertising across multiple regional radio stations in Nordrhein-Westfalen. The company targets advertisers seeking to reach over one million daily listeners through classical radio, online audio, podcasts, and cross-media campaigns. The website is built on WordPress with Elementor and uses modern plugins and SEO techniques to present a professional and user-friendly experience. The technical infrastructure includes lazy loading, Google Analytics, Google Tag Manager, and a Usercentrics cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved and broken image lazy loading issues fixed. Privacy compliance is basic with cookie consent but no visible privacy or terms policies. Overall, the site is trustworthy and professional, serving a medium-sized media business with a clear market position in regional audio advertising.

B

Bitkom

aidaq.berlin

55

The website aidaq.berlin represents a professional event platform for the AI & Data Summit and Quantum Summit, organized under the Bitkom umbrella. These summits focus on cutting-edge trends in AI, data, and quantum computing, targeting industry leaders, decision-makers, and experts primarily in Germany and Europe. The business model centers on event hosting, networking, and knowledge exchange, positioning itself as a major European event in the technology sector. The domain is newly registered in late 2023, aligning with the event timeline for 2024 and 2025, and is hosted with reputable infrastructure and registrar services. Technically, the site is built on Drupal 10 CMS with modern JavaScript libraries and integrates Google Tag Manager and Usercentrics for analytics and consent management, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR consent mechanisms in place. Overall, the security posture is good but could be enhanced by publishing explicit security policies and incident response contacts. The site shows no signs of malicious activity or suspicious content. Business credibility is high, supported by consistent branding, social media presence, and transparent domain registration. The site is safe for general audiences and does not contain adult or questionable content.

B

Bitkom e. V.

bitkom.org

59

Bitkom e. V. is the leading German industry association representing the information and telecommunications sector. The organization acts as a think tank and advocacy group, providing market data, events, and policy consultation to its members and stakeholders. The website reflects a mature digital presence with comprehensive content, including podcasts, events, and research reports, targeting industry professionals, policymakers, and the public interested in digital transformation in Germany. Technically, the site is built on Drupal 10 with modern libraries and includes a consent management platform for privacy compliance. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and explicit incident response information are lacking. The WHOIS data is unavailable, which slightly reduces domain trust, but the overall professionalism and transparency of the site support its legitimacy.

Ö

Öffentliche Versicherung Oldenburg

oeffentlicheoldenburg.de

55

Öffentliche Versicherung Oldenburg is a regional insurance provider based in Oldenburg, Germany, offering a comprehensive range of insurance products and services to private customers, businesses, and farmers. Their market position is strong within the Niedersachsen region, focusing on traditional insurance lines such as motor, property, liability, health, and retirement products. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audiences. Technically, the website employs modern JavaScript frameworks, deferred CSS loading, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized and uses structured data to enhance SEO and business information visibility. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit incident response contacts and a vulnerability disclosure policy, which are recommended for enhanced security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The risk level is low, but improvements in security transparency and accessibility could further strengthen their digital maturity.

W

Wirtschaftsbetriebe Duisburg - AöR

wb-duisburg.de

62

Wirtschaftsbetriebe Duisburg - AöR is a large municipal utility and infrastructure service provider for the city of Duisburg, Germany. The organization manages a broad range of public services including waste disposal, street cleaning, wastewater management, road and bridge construction, municipal real estate, playgrounds, green spaces, and cemeteries. The website serves as a comprehensive portal for residents and businesses to access these services, including online scheduling, information, and customer portals. The site is well structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Storyblok CMS. It integrates third-party services like Usercentrics for cookie consent management and uses legacy jQuery 1.12.4, which may pose some security risks. Performance is moderate with good SEO and accessibility features. The site uses HTTPS and has basic security best practices but lacks explicit security headers and a published security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. However, the use of an outdated jQuery version and absence of a vulnerability disclosure mechanism are areas for improvement. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website represents a trustworthy and professional municipal service portal with a solid business credibility score. Strategic recommendations include upgrading legacy libraries, publishing security policies, and enhancing security headers to further strengthen the security posture and compliance.

V

VHS – Deutscher Volkshochschul-Verband Herten

abschlussmachen.de

47

The website 'abschlussmachen.de' is an educational platform operated by the VHS – Deutscher Volkshochschul-Verband Herten, targeting individuals seeking to complete their school leaving certificates in several German cities. It offers information, consultation, and contact options including phone and WhatsApp, positioning itself as a regional adult education provider. The site is well-branded, consistent, and provides relevant content tailored to its audience. Technically, the site is built using RapidWeaver with UIkit framework, leveraging modern JavaScript libraries and Google Analytics for tracking. Hosting is likely provided by 1&1 IONOS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and a GDPR-compliant cookie consent mechanism (Usercentrics). However, it lacks explicit security headers, a published security policy, and incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the site presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include adding security headers, a terms of service page, and a vulnerability disclosure policy to enhance trust and security posture.

C

CK FISCHER

fischer.sk

55

CK FISCHER is a Slovak travel agency specializing in holiday packages to Mediterranean and exotic destinations for 2025. The website offers last minute and first minute deals, family and wellness holidays, and special travel services. It targets general consumers seeking quality travel experiences with a broad range of destinations and services. The site is professionally designed with consistent branding and good content quality. Technically, it uses modern JavaScript frameworks including Vue.js, integrates Google Tag Manager, reCAPTCHA, and Usercentrics for cookie consent, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and bot protection, but lacks explicit security policies and vulnerability disclosure. Privacy compliance is basic with cookie consent but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professional, suitable for its business domain.

K

KARTAGO Tours

kartagotours.hu

55

KARTAGO Tours is a Hungarian travel agency specializing in holiday packages, last minute and first minute travel deals, and family-friendly club hotels. The website targets Hungarian-speaking travelers and offers a broad range of travel destinations primarily in Europe, North Africa, and the Middle East. The business operates under the DER Touristik Group umbrella, indicating a strong market presence in Central Europe. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and bot protection via reCAPTCHA, though explicit security and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for travel bookings.

K

Kartago SK

kartago.sk

54

Kartago SK operates as a Slovak online travel agency specializing in vacation packages, last minute deals, and first minute offers targeting Slovak-speaking travelers. The website presents a professional and modern interface with a focus on multiple international destinations, leveraging a Vue.js-based frontend and integrating key marketing and analytics tools such as Google Tag Manager, Google Analytics, and Usercentrics for cookie consent management. The business model centers on providing comprehensive travel services including flight bookings and holiday packages, positioning itself as a regional player in the hospitality and transportation sectors. Security measures include HTTPS enforcement and reCAPTCHA integration, though the absence of security headers and formal privacy and terms of service pages indicates room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EXIM S.A.

exim.pl

58

EXIM S.A. operates the website exim.pl, a prominent Polish travel agency and tour operator specializing in holiday packages, last minute deals, and flight tickets. Positioned as the fifth largest tour operator in Poland, EXIM targets Polish travelers seeking diverse vacation options including exotic destinations, group travel, and customizable plans. The website is professionally designed with a clear focus on user experience, offering rich content and easy navigation. Technically, the site leverages modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager, Usercentrics for consent management, and employs reCAPTCHA for bot protection. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

D

Dertouristik RO

dertour.ro

57

DERTOUR Romania operates as an online travel agency specializing in vacation packages, last minute deals, and exclusive hotel offers primarily targeting Romanian customers. The website is professionally designed with a clear focus on travel services, offering a wide range of destinations and booking options. The technical infrastructure leverages modern JavaScript frameworks, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforcement, cookie consent, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly available. Overall, the website presents a trustworthy and professional front for DERTOUR's travel services in Romania.

S

Stadtwerke Duisburg AG

stadtwerke-duisburg.de

62

Stadtwerke Duisburg AG is a well-established regional utility provider in Germany, offering essential services such as electricity, gas, water, and district heating to private customers in Duisburg. The company boasts a long history of over 170 years, positioning it as a trusted energy supplier in its market. The website reflects a professional and consistent brand image, targeting local consumers with relevant service information. Technically, the site is built on TYPO3 CMS and incorporates modern web technologies including jQuery, Bootstrap, and various tracking and marketing tools. The presence of a cookie consent mechanism via Usercentrics indicates attention to privacy compliance, although explicit privacy and terms of service documents were not found in the provided content. Security-wise, the site uses HTTPS and includes multiple third-party scripts for analytics and advertising, but lacks visible security headers and explicit security policies. Overall, the website is functional and professional but could improve transparency and security posture by publishing comprehensive privacy policies, terms of service, and security contact information.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacation bookings targeting German-speaking customers in Switzerland, Germany, and Austria. The site offers detailed information about cruise experiences, ships, destinations, and booking options, supported by a modern Adobe Experience Manager CMS infrastructure. The technical setup includes advanced tracking and consent management tools such as Adobe DTM and Usercentrics, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed via cookie consent but lacks visible privacy and terms of service pages. Overall, the website is trustworthy, well-branded, and serves a large enterprise in the transportation and hospitality sectors.

X

Xella

ytong.cz

62

Xella.cz represents a Czech manufacturing company specializing in construction materials or related products, as inferred from the domain and branding. The website is built using modern web technologies such as Angular and integrates cookie consent management via Usercentrics, indicating compliance awareness with GDPR. However, the website content in the provided snapshot is minimal, likely due to client-side rendering, and lacks visible contact information, privacy policy, or terms of service pages. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Technically, the site uses Google Tag Manager for analytics and has a moderate performance and mobile optimization level. Security headers and explicit SSL configuration details are not visible in the provided data, limiting the security posture assessment. Overall, the site appears legitimate but would benefit from improved transparency and security practices.

A

Ashampoo

ashampoo.com

69

Ashampoo is a well-established software manufacturer specializing in multimedia, system, productivity, security software, games, and mobile applications. The company targets PC users seeking efficient and powerful software solutions. Their business model revolves around direct online sales and licensing, supported by a professional e-commerce platform. The website reflects a mature digital presence with modern technologies such as Alpine.js, Livewire, and integration of consent management and tracking tools. Security posture is strong with HTTPS, CSRF protection, and secure login forms, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, user-friendly, and compliant with privacy regulations, though the lack of WHOIS data slightly impacts trust metrics.

C

CEWE FOTOKNIHA - fotoobrazy, fotky a ďalšie fotoprodukty | CEWE.sk

cewe.sk

61

The website www.cewe.sk represents a regional e-commerce platform specializing in photo products such as photobooks, photo prints, photo gifts, and related services. It targets consumers in Slovakia interested in personalized photo products and offers a dedicated mobile app for photo projects. The business model is retail-focused with a medium-sized market presence and consistent branding. Technically, the site employs modern web technologies including JavaScript ES modules, SVG icons, responsive images, and integrates consent management via Usercentrics. Google Tag Manager and Adobe DTM are used for analytics and marketing tag management, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and published security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the provided content. Overall, the site is professional, user-friendly, and trustworthy but could improve transparency around privacy and security policies.

D

dm drogerie markt, spol. s r.o.

activebeauty.sk

61

ACTIVE BEAUTY is an online magazine operated by dm drogerie markt Slovakia, focusing on beauty, health, lifestyle, family, horoscopes, and contests. The website serves as a content and brand engagement platform targeting general consumers interested in these topics. It leverages a custom CMS with modern web technologies and integrates consent management via Usercentrics to comply with GDPR. The site is well-branded, professionally designed, and offers a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and consent-based script loading, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Business credibility is high, supported by consistent branding and official social media presence.

D

dm drogerie markt

mojadm.sk

65

dm drogerie markt operates a comprehensive online drugstore platform in Slovakia, offering a wide range of cosmetic, health, and household products with convenient delivery and store pickup options. The website reflects a strong market position as a leading retail chain with a well-established brand and customer loyalty programs. Technically, the site employs modern web technologies, including advanced JavaScript frameworks and a robust consent management platform, ensuring a responsive and accessible user experience across devices. Security measures are well implemented with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could enhance trust further. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility, suitable for its large-scale retail operations.

E

energetickesluzby

energetickesluzby.sk

61

Energetickesluzby.sk is a Slovak energy services provider specializing in flexibility of consumption, heating and cooling solutions, lighting, photovoltaics, electromobility, and other related energy services. The website targets a general Slovak audience interested in energy solutions. The business model appears to be service-oriented, focusing on energy commodities and related technologies. The company maintains a consistent brand presence with a professional website built on WordPress using Elementor and Jet plugins, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and third-party integrations such as Google Tag Manager and Cookiebot for analytics and consent management. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and incident response information, which are areas for improvement. Overall, the website is functional, moderately optimized for mobile, and presents a trustworthy business image with no detected malicious or suspicious elements.

G

GASAG AG

gasag.de

57

GASAG AG is a well-established German energy company with a history dating back to 1847. The company provides a broad range of energy-related services including green electricity (Ökostrom), gas tariffs, solar solutions, heating, and mobility services such as electric vehicle charging. The website targets both private and business customers, emphasizing sustainability, fair pricing, and reliability. The company holds a strong market position in Berlin and Germany with a large customer base and a focus on renewable energy expansion. Technically, the website employs modern web technologies including JavaScript modules, Usercentrics for consent management, Google Tag Manager for analytics, and AB Tasty for A/B testing. Hosting is managed via Microsoft Azure DNS, indicating a robust infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site uses HTTPS and integrates consent management, but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the company's claims, showing a legitimate and longstanding domain registration. Overall, GASAG's website reflects a mature digital presence with good security and privacy practices, though improvements could be made by publishing comprehensive privacy and security policies and providing clearer contact information for data protection and incident response.

T

The Conexus Institute

theconexusinstitute.org.au

73

The Conexus Institute is an Australian independent think tank dedicated to improving retirement outcomes through high-quality research and collaboration with industry, regulators, and policymakers. The organization positions itself as a key contributor to retirement policy and superannuation research in Australia, targeting stakeholders in the financial and non-profit sectors. The website reflects a professional and consistent brand image with a focus on delivering relevant content to its audience. Technically, the site is built on WordPress with modern plugins and frameworks, hosted behind Cloudflare, and employs HTTPS with a good SSL configuration. Security posture is solid but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is partial, with a cookie consent mechanism in place but no explicit privacy policy or terms of service pages found. Contact information is limited but includes a verified company email and a contact form. Overall, the website is trustworthy, content-rich, and professionally maintained, with room for improvement in privacy and security disclosures.

T

The Good Media Network GMN GmbH

dokumentale.de

63

The website www.doxumentale.de represents The Good Media Network GMN GmbH, hosting the International Documentary and Media Festival Berlin. It serves as a platform for documentary film enthusiasts and media professionals, offering festival programming, ticket sales, and editorial content. The site is well-branded and consistent, targeting a niche cultural audience with a focus on documentary films and social themes. Technically, the site is built on TYPO3 CMS with Bootstrap, integrating modern tools such as Matomo for analytics, Facebook Pixel for marketing, and Stripe for secure payment processing. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and published security policies. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No direct contact emails or phone numbers are found on the homepage, but social media presence is active. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security transparency and incident response readiness.

Hans-Böckler-Stiftung is a German non-profit foundation affiliated with the German Trade Union Confederation (DGB), focusing on labor participation, research funding, and scholarships. The website serves as an information portal for its institutes and services, targeting researchers, students, and labor organizations. The foundation maintains a solid market position within the non-profit sector in Germany, supported by multiple specialized research institutes. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with integration of a consent management platform (Usercentrics) and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. Security posture is moderate, with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional and trustworthy, though it could improve transparency by publishing privacy policies, terms of service, and incident response contacts.

B

Business Angels Netzwerk Deutschland e.V. (BAND)

business-angels.de

44

Business Angels Netzwerk Deutschland e.V. (BAND) is a German non-profit association serving as a central network and promoter for business angels and their investment culture in Germany. The organization supports innovative start-ups seeking capital and provides expert and qualification networks for early-stage financing. The website is professionally designed using WordPress CMS, with a moderate performance profile and good mobile optimization. It integrates modern technologies including Google Analytics and a GDPR-compliant consent management platform (Usercentrics). Security posture is solid with HTTPS enforced and privacy compliance well addressed, although explicit security policies and incident response information are not published. The site maintains a high level of trustworthiness with consistent domain registration data and clear business information.

D

Deutscher Mittelstands-Bund (DMB) e.V.

mittelstandsbund.de

61

The Deutscher Mittelstands-Bund (DMB) e.V. is a well-established German federal association representing small and medium-sized enterprises (SMEs), freelancers, and self-employed professionals. Founded in 1982, it advocates for the economic and political interests of over 33,000 member companies with more than 800,000 employees. The organization offers a broad range of services including political representation, curated information on funding programs, networking events, and advantageous framework contracts for its members. The website reflects a professional and comprehensive digital presence, targeting SMEs and entrepreneurs in Germany with clear membership and contact information.

O

OeAD - Austria's Agency for Education and Internationalisation

studyinaustria.at

53

The website studyinaustria.at is an official educational portal managed by OeAD, Austria's Agency for Education and Internationalisation, a government-owned non-profit entity. It provides comprehensive information and services for international students interested in studying in Austria, including study programmes, institutions, scholarships, and visa guidance. The site is well-positioned as an authoritative source in the education sector, targeting prospective students globally. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, a consent management platform (Usercentrics), and Matomo analytics for privacy-conscious tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and integrates privacy-compliant cookie consent. No vulnerabilities or exposed sensitive data were detected. However, the site could improve by publishing explicit terms of service, vulnerability disclosure policies, and direct security contact information. Overall, the website presents a low-risk profile with strong trust indicators, professional content, and compliance with GDPR. Strategic recommendations include enhancing transparency around security incident response and expanding legal documentation to further bolster user trust.

K

Kifli.hu

kifli.hu

75

Kifli.hu is a large Hungarian online supermarket offering a wide range of grocery products including fresh, organic, and specialty items with home delivery service. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, supported by robust performance and mobile optimization. Security measures include HTTPS, security headers, and a consent management platform, although explicit privacy and security policies are not directly found on the site. Overall, the platform is professional and trustworthy, serving a general to mature audience with some alcohol product offerings.

W

Winkhaus Polska Beteiligungs spółka z ograniczoną odpowiedzialnością sp.k.

winkhaus.pl

64

Winkhaus Polska is a large manufacturing company specializing in innovative window and door hardware, multipoint locks, and intelligent access control systems. The company targets B2B customers including window and door manufacturers, installation firms, industrial and commercial clients, and public institutions. Their market position is strong as a leader in the Polish market with a comprehensive product portfolio and active customer engagement through portals and social media. Technically, the website is built on a modern SAP Hybris CMS platform, utilizing Google Tag Manager, Usercentrics for consent management, and other contemporary web technologies. The site is mobile-optimized with good SEO and accessibility features, though some accessibility enhancements are recommended. Security posture is solid with HTTPS enforced and consent management implemented. However, some security headers are missing or not explicitly detected, and no public security policy or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. The lack of WHOIS data limits domain trust analysis, but the site’s professionalism and contact transparency support legitimacy. Strategic improvements in security headers and incident response transparency are advised.

W

Winkhaus UK Ltd

winkhaus.co.uk

69

Winkhaus UK Ltd operates a professional and comprehensive website showcasing their manufacturing expertise in window technology, door locking systems, and access control solutions. The company targets door and window manufacturers, installers, and end customers, emphasizing innovation, security, and customer success. The website demonstrates a strong UK market presence with award-winning products and a digital partner portal to support business operations. Technically, the site uses modern web technologies including Google Tag Manager and Usercentrics for consent management, and is built on a SAP Hybris CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. Security posture is strong with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data was unavailable due to querying a subdomain, but the domain is legitimate and consistent with the business. Overall, the website reflects a trustworthy and professional business with solid digital maturity.

I

illwerke vkw AG

vkw.at

70

illwerke vkw AG operates as a regional energy provider in Vorarlberg, Austria, offering a broad portfolio of energy-related services including electricity, natural gas, biogas, heating solutions, photovoltaic system planning and installation, and e-mobility products. The company targets households, businesses, agricultural customers, and institutions with a focus on sustainable and renewable energy solutions. Their market position is that of a trusted, established regional supplier emphasizing energy efficiency and customer service. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and consent-based analytics, though explicit security headers and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a positive user experience and business credibility.

U

Ultimate Fighting Championship (UFC)

ufcfightclub.com

71

UFC Fight Club is an official membership platform targeting MMA enthusiasts, offering exclusive benefits such as pre-sale ticket access, travel discounts, dining deals, and premium experiences. The website reflects a strong brand presence consistent with UFC's global reputation and leverages modern web technologies including React, Material-UI, and major analytics and marketing tools. The technical infrastructure is robust, hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some HTTP security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and a consent management platform in use. Overall, the site is professional, trustworthy, and well-aligned with UFC's business model and audience.

P

Pacovis AG

naturesse.com

60

naturesse is a well-established brand specializing in sustainable, plastic-free, and compostable packaging solutions for the food industry and gastronomy sectors. With over 20 years of experience and a strong backing by the Swiss family-owned Pacovis AG, the company offers a broad portfolio of over 700 climate-friendly products made from renewable raw materials. The website reflects a professional and consistent brand image, targeting environmentally conscious businesses in the food sector across Europe. Technically, the site is built on TYPO3 CMS, integrates modern analytics and consent management tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent mechanisms, though some security headers are not explicitly detected. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the comprehensive business information and certifications presented. Overall, the website and business demonstrate a mature digital presence with room for minor security enhancements.

Raflaamo.fi is a Finnish hospitality platform operated by HOK-Elanto, offering a comprehensive nationwide selection of restaurants and event venues. The website facilitates online reservations, event information, and customer loyalty benefits, targeting the general public in Finland. The platform is well-positioned in the Finnish market as a leading restaurant reservation service with a strong brand presence and consistent content quality. Technically, the website leverages modern frameworks such as Next.js and React, integrates mapping via Leaflet.js, and employs Usercentrics for cookie consent management. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service pages are not detected in the provided content, which impacts privacy compliance scoring. Contact information such as emails and phone numbers are not clearly presented, which may affect user trust and support accessibility. Overall, the website is professional, secure, and credible, with room for improvement in privacy transparency and contact accessibility.

S

Sokos Hotels

sokoshotels.fi

66

Sokos Hotels is a well-established Finnish hotel chain with a strong market presence and a diverse portfolio of hotels across Finland and Tallinn. The company offers a variety of hotel types catering to different customer needs, including leisure and business travelers. Their business model focuses on direct hotel bookings, loyalty programs, and corporate travel services, positioning them as a trusted and sustainable hospitality provider in the region. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supporting Sokos Hotels' brand reputation.

P

Paul Bauder GmbH & Co. KG

bauder.de

47

Paul Bauder GmbH & Co. KG operates as a leading European manufacturer specializing in roofing systems including flat roofs, pitched roofs, green roofs, and photovoltaic solutions. The company targets architects, planners, roofers, and both industrial and private builders, positioning itself as a market leader in the energy and construction sector. Their website reflects a professional business model focused on manufacturing and supplying high-quality roofing materials and services. The presence of multiple localized websites indicates a broad international market reach.