Security Directory

A

Alpas

alpas.ai

59

Alpas is a technology startup founded in 2020 that offers an AI-powered sourcing automation platform targeting manufacturing companies and procurement professionals. Their solution enables faster supplier discovery, procurement spend reduction, and enhanced supplier transparency through a 360° supplier view. The website is built on WordPress, uses modern technologies including Cloudflare DNS and Google APIs, and implements a cookie consent mechanism via Termly. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and no explicit security or privacy policies are published. The domain registration is privacy protected but consistent with the company's startup profile. Overall, the website presents a professional and trustworthy image with strong business credibility and good technical implementation.

N

NEB - Die Niederbarnimer Eisenbahn

neb.de

54

NEB - Die Niederbarnimer Eisenbahn operates as a regional railway service provider in the Brandenburg and Berlin area, offering passenger transport, ticketing, and travel information services. The website is well-structured, professionally designed, and targets regional commuters and travelers. It provides detailed information about train lines, tickets, excursions, and service updates. The digital infrastructure is based on TYPO3 CMS, enhanced with modern web technologies and accessibility features, ensuring a good user experience across devices. The website employs Cookiebot for cookie consent management and integrates Google Analytics for traffic analysis, reflecting a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and Cloudflare DNS usage, although some security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations, though explicit privacy policy and terms of service pages were not detected in the provided content.

A

abcPremium GmbH

shop-mbs.de

65

The website shop-mbs.de is an e-commerce platform operated by abcPremium GmbH, based in Heidelberg, Germany. It offers a range of products primarily targeting German-speaking customers. The site is built on the Magento platform, utilizing various extensions such as Amasty modules and Stripe payment integration, indicating a moderately mature technical infrastructure. The presence of Cookiebot for cookie consent demonstrates attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enforced and Cloudflare DNS usage, but lacks visible security headers and incident response information. Overall, the site is functional and professional but could improve transparency and compliance documentation.

T

Tenhil GmbH & Co. KG

tenhil.de

61

Tenhil GmbH & Co. KG is a well-established German HR technology company specializing in recruiting solutions. The company operates multiple well-known online job portals and career fairs, leveraging advanced AI technology recognized by the German Federal Ministry of Research. Their business model focuses on connecting candidates with suitable employers through a broad network of online platforms and SaaS solutions. The company holds a strong market position with over 30 years of expertise and multiple subsidiary brands. Technically, the website is built on WordPress with Elementor, uses Cloudflare for DNS and CDN, and integrates modern SEO and analytics tools. Security posture is good with HTTPS and consent management in place, though explicit security headers and incident response policies are absent. Overall, the website is professional, GDPR compliant, and trustworthy, with no signs of blocking or suspicious activity.

I

IT Jobs & Stellenangebote - IT-Jobs.de

it-jobs.de

63

IT-Jobs.de is a German-focused IT job listing and matching platform targeting IT professionals seeking employment opportunities. The website offers a matching machine to help users find suitable IT jobs and facilitates applications to current job offers. The platform positions itself as a niche player in the German IT job market, providing specialized services for IT professionals. Technically, the website employs AngularJS for frontend rendering, uses Cloudflare for DNS and hosting, and integrates Google Tag Manager and Consent Manager for tracking and GDPR compliance. The site is moderately optimized for performance and mobile devices, with good SEO practices. Security-wise, HTTPS is enforced, and consent management is implemented, but there is a lack of published privacy policies, terms of service, and explicit contact information for security incidents. The WHOIS data shows consistent domain registration with Cloudflare nameservers, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

kalaydo.de is a well-established German job portal offering a broad spectrum of job listings across multiple sectors, targeting job seekers ranging from students to experienced professionals. The platform provides user-friendly search features, email alerts, and localized job offers, positioning itself as a reliable resource in the German employment market. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Azure CDN with Cloudflare DNS, ensuring good performance and scalability. Security measures including HTTPS, security headers, and consent management are properly implemented, reflecting a mature security posture. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, kalaydo.de presents a professional, trustworthy, and user-centric service with moderate tracking and marketing integrations managed under GDPR compliance.

Y

Yourfirm GmbH & Co. KG

yourfirm.de

70

Yourfirm GmbH & Co. KG operates a leading German online job board specializing in employment opportunities within the Mittelstand sector. The platform targets skilled professionals and medium-sized companies, offering job listings, employer services, and career advice. With over one million monthly job seekers and strong user recommendations, Yourfirm holds a prominent market position in its niche. Technically, the website leverages modern frameworks such as React and Next.js, hosted behind Cloudflare DNS, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, comprehensive security headers, and GDPR-compliant consent management. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site demonstrates a mature digital presence with strong branding and trust signals, supporting its credibility and user engagement.

S

stellenanzeigen.de GmbH & Co. KG

stellenanzeigen.de

70

stellenanzeigen.de GmbH & Co. KG operates a leading German job board platform established in 1995, offering a wide range of job listings, career advice, salary comparison tools, and employer profiles. The website targets job seekers and employers primarily in Germany, positioning itself as a trusted and award-winning recruitment service provider. The platform's business model centers on online job advertisements and value-added career services. Technically, the site leverages modern web technologies including React and Next.js, hosted on Azure with Cloudflare DNS, ensuring fast performance and mobile optimization. Security is robust with HTTPS and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, with extensive social media engagement and recognized industry certifications.

Rheinische Post Online is a well-established German news media website providing up-to-date news content with a dual business model: free access supported by advertising and a subscription-based premium service called RP+. The website targets a general audience interested in regional and national news. The site is professionally designed with consistent branding and offers clear user choices regarding consent and subscription options. Technically, the site uses modern web fonts, asynchronous loading of analytics scripts, and Cloudflare DNS services to ensure performance and security. The presence of Google Tag Manager indicates structured analytics and marketing efforts. Security posture is solid with HTTPS enforced and consent mechanisms implemented, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.

H

Hüttig & Rompf GmbH

huettig-rompf.de

58

Hüttig & Rompf GmbH is a well-established German company specializing in personalized real estate financing advisory services. Founded in 1988 and part of the Bilthouse Gruppe, the company offers customers access to financing offers from over 500 banks and extensive partnership networks with real estate distributors. Their website demonstrates a mature digital presence with modern technologies such as Nuxt.js and TYPO3 CMS, and integrates consent management and analytics tools to ensure privacy compliance. Security posture is solid with HTTPS and Cloudflare DNS, though explicit security policies and incident response contacts are not published. Overall, the company presents a professional and trustworthy image with comprehensive content and user-friendly navigation.

M

MaklerWerft - Webseiten für Immobilienmakler

maklerwerft.de

74

MaklerWerft Beratungsgesellschaft mbH operates a professional website offering specialized digital marketing and web solutions for real estate agents in Germany. Their services include website systems, CRM automation, SEO, SEA strategies, and content marketing tailored to the real estate sector. The company positions itself as an expert niche provider with a strong focus on client success and digital transformation in real estate marketing. Technically, the website is built on WordPress using the Enfold theme, integrates privacy-compliant analytics via Matomo, and employs Cloudflare DNS services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and consent management, though explicit privacy and security policy pages are missing. Overall, the site is professional, well-structured, and optimized for SEO and mobile use, targeting real estate professionals and property owners. The domain registration data aligns with the business claims, indicating legitimacy and consistency.

S

SevenRooms

sevenrooms.com

67

SevenRooms is a well-established hospitality software company founded in 2007, offering an all-in-one CRM, marketing, and operations platform designed to help restaurants and hospitality venues increase sales and enhance guest experiences. The company serves a global clientele including independent restaurants, hotel F&B outlets, and entertainment venues, positioning itself as a leader in hospitality technology with over 15,000 clients worldwide. The website reflects a mature digital presence with professional design, clear branding, and comprehensive service descriptions. Technically, the website is built using modern frameworks such as Next.js and Builder.io CMS, hosted likely on Vercel, and employs Cloudflare DNS. Performance and mobile optimization are excellent, with good SEO and accessibility practices. The site uses marketing and analytics tools like Visual Website Optimizer and Google Tag Manager, indicating a data-driven approach to user engagement. From a security perspective, the site enforces HTTPS, includes a Content-Security-Policy header, and has domain registration protections in place. However, DNSSEC is not enabled, and there is a lack of publicly available security policies, incident response plans, or vulnerability disclosure mechanisms. Privacy compliance is weak due to missing explicit privacy and cookie policies and no visible consent mechanisms. Overall, the website is professional and trustworthy with a strong business credibility score. The main risks relate to privacy compliance and transparency around security practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

The website oxygenforensics.com is currently inaccessible due to a Cloudflare security challenge page that blocks direct content access. This challenge page is designed to verify visitor legitimacy before granting access to the actual website content. As a result, no business-related content, contact information, or policies are visible for analysis. The domain is registered since 2013 with NameCheap, Inc. and uses Cloudflare for DNS and security services, indicating a legitimate and established domain. However, the lack of accessible content limits the ability to assess the company's business model, services, or compliance posture. The technical infrastructure includes modern JavaScript and Web Worker usage for the captcha challenge, but no SEO or accessibility optimizations are evident on the challenge page itself. Security headers and privacy policies are not visible, which is typical for a challenge page but limits security posture evaluation.

S

sandsiv+

sandsiv.com

66

sandsiv+ is a Switzerland-based technology company specializing in Voice of the Customer and Voice of the Employee software solutions. The company offers a modular SaaS platform that integrates multiple feedback channels, advanced AI analytics, and actionable dashboards to help enterprises improve customer experience and employee engagement. Recognized as a global leader in its field, sandsiv+ serves medium to large organizations across various industries including telecommunications, healthcare, finance, and retail. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with integrations of popular marketing and analytics tools such as Google Analytics, Hotjar, HubSpot, and Mautic, supported by Cloudflare DNS services. Security posture is solid with HTTPS enabled and domain registration locked against unauthorized changes, though DNSSEC is not enabled. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Contact information is primarily via forms rather than direct emails or phone numbers. Overall, sandsiv+ presents a credible and professional business with a strong market position in customer intelligence software.

The domain surv.biz is registered since 2016 with privacy protection via Domains By Proxy and hosted with DNS services from Cloudflare. However, the website is currently inaccessible, returning a 404 Not Found error page served by nginx. There is no visible content, metadata, or business information available on the site. This lack of accessible content prevents any meaningful analysis of the business operations, services, or compliance posture. Technically, the site does not present any security headers or HTTPS information in the provided data, indicating potential gaps in security best practices. The domain registration appears legitimate but the absence of a functional website significantly reduces trust and credibility. Overall, the site is not operational or publicly available for evaluation.

The website moveon4.de serves as a minimal placeholder page for the MoveON solution, directing visitors to the main QS company website for detailed information. The site lacks substantive content, contact details, and policy documentation, limiting its utility and trustworthiness. Technically, the site uses Cloudflare DNS services but does not present evidence of advanced security headers or HTTPS enforcement in the provided data. Security posture is minimal with no visible vulnerabilities but also no proactive security measures documented. Overall, the site appears to be a low-content informational redirect rather than a fully operational business site, resulting in a low risk profile but also low business credibility and privacy compliance.

R

ResponsiveVoice.JS AI Text to Speech

responsivevoice.org

64

ResponsiveVoice.JS AI Text to Speech is a technology-focused company providing smart text-to-speech plugins and AI voice synthesis services primarily targeting web developers and businesses seeking to enhance user engagement through voice. The company operates a SaaS business model offering over 51 voices and languages, positioning itself as a popular AI Text-To-Speech API provider. The website is built on WordPress with modern technologies including Google Tag Manager, Facebook Pixel, and Hotjar for analytics and marketing. DNS is managed via Cloudflare, and the domain is registered with GoDaddy.com, LLC since 2014, indicating a mature and stable presence. Security posture is generally good with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers, and no explicit privacy or security policies are published. The site is accessible without WAF blocking or security challenges, but privacy compliance and incident response readiness need improvement. Overall, the website is professional and trustworthy with moderate user tracking and basic advertising transparency.

InMaat Foundation is a small non-profit organization founded in 2014, dedicated to supporting organizations that challenge systemic gender oppression and promote justice and human rights. The website reflects a focused mission with relevant content aimed at social justice advocates and organizations. The foundation maintains a consistent brand presence and offers storytelling and inspirational content to engage its audience. Technically, the website is built on a modern stack likely using Craft CMS, hosted behind Cloudflare DNS, and employs Google Tag Manager for analytics. The site is mobile optimized with good SEO practices but lacks some accessibility features and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. No explicit security or incident response policies are published, which could be improved. Overall, the domain registration is consistent with the organization's history and mission, indicating legitimacy. The site is safe for general audiences with no adult or questionable content.

C

Canada Media Fund

cmf-fmc.ca

67

The Canada Media Fund (CMF) is a well-established Canadian government-funded organization dedicated to fostering, developing, financing, and promoting Canadian audiovisual content across multiple media platforms. The website reflects a strong market position as a key national funding body supporting the Canadian screen industry, offering a wide range of funding programs and industry support services. The target audience includes Canadian media producers, content creators, and industry stakeholders. The business model is centered on public funding and industry development, with transparent communication of annual reports and strategic plans. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, hosted behind Cloudflare DNS services. The site demonstrates good performance, mobile optimization, and accessibility features. SEO is well-implemented with comprehensive metadata and structured data. Security posture is strong with HTTPS, domain locking, reCAPTCHA on forms, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the security posture is mature with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR compliance indicators. The website maintains high professionalism and trustworthiness, supported by consistent branding and active social media presence. The domain WHOIS data aligns well with the website's Canadian identity and business claims, indicating high legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and adding a security.txt file to facilitate vulnerability disclosures. Regular audits of third-party scripts are advised to maintain security integrity.

F

Festival Séries Mania

seriesmania.com

58

Séries Mania is a well-established international festival dedicated exclusively to TV series, held annually in Lille, France, since 2006. The website serves as a comprehensive platform for the festival, its professional forum, and the Series Mania Institute, an educational entity focused on series training. The site targets both general audiences interested in series and industry professionals. It enjoys a strong market position as a key event in the TV series industry with significant partnerships and social media presence. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, Matomo, and Google Tag Manager. It uses Cloudflare for DNS and benefits from HTTPS encryption. The site is moderately performant and well optimized for mobile devices, with good SEO practices and a cookie consent mechanism implemented via tarteaucitron.io. From a security perspective, the site uses HTTPS and has domain registration protections in place. However, it lacks visible security headers, explicit privacy policies, terms of service, and incident response information. No vulnerability disclosure or security.txt files were found. The domain registration data is consistent and supports the legitimacy of the site. Overall, Séries Mania presents a professional and trustworthy online presence with excellent content quality and business credibility. To enhance security and privacy compliance, it should publish clear privacy and security policies and implement additional security headers and vulnerability disclosure mechanisms.

A

Amcrest

amcrestgps.net

57

Amcrest GPS Pro is a medium-sized business specializing in GPS tracking services and device sales, targeting vehicle owners and fleet managers. The website offers activation and purchase options for GPS and OBD devices and provides mobile applications for iOS and Android platforms. Technically, the site is built on modern frameworks such as Angular and Bootstrap, with integration of Google Maps API and analytics tools like Microsoft Clarity and Google Analytics. The site is hosted with reputable providers and uses HTTPS, but lacks visible security headers and privacy policies, which are critical for compliance and trust. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance and security best practices.

T

Famms - Fashion HTML Template

tokox1500.store

56

The website tokox1500.store is a newly created e-commerce platform focused on fashion retail, offering products such as men's shirts and women's dresses. The site uses a basic Bootstrap template with standard e-commerce features including product listings, customer testimonials, and newsletter subscription. The business appears to be a small-scale online retailer with no clear company branding or detailed business information. Technically, the site employs common web technologies like Bootstrap, jQuery, and Font Awesome, and is hosted with DNS services via Cloudflare. However, there is no evidence of HTTPS enforcement or advanced security measures in place. Security posture is weak due to missing security headers and lack of privacy or cookie policies, which also impacts compliance with GDPR and other regulations. Contact information is present but generic and likely placeholder, reducing business credibility. Overall, the site is functional but basic, with significant room for improvement in security, privacy, and business transparency.

DocMorris operates as a leading online pharmacy in Germany, providing a wide range of pharmaceutical products and services including E-Rezept processing, pharmaceutical consultation, and fast delivery. The website is professionally designed with excellent content quality and clear navigation, targeting consumers seeking convenient access to medicines and health products. The company maintains a strong market position in the healthcare e-commerce sector with a large customer base and comprehensive digital services. Technically, the site leverages modern frameworks such as Next.js and React, hosted behind Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable platform for online pharmaceutical purchases.

Z

Zeren Group Energy BV

zolarisenergy.com

66

Zolaris Energy, operated by Zeren Group Energy BV, is a renewable energy company founded in 2023 and based in Amsterdam, Netherlands. The company focuses on sustainable energy solutions derived from natural sources such as sunlight, wind, and geothermal heat. Their website presents a professional image with clear branding and contact information, targeting businesses and stakeholders interested in clean energy. The company positions itself as an integrated energy provider emphasizing sustainability and environmental benefits. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI and animation effects. It is hosted behind Cloudflare DNS services, ensuring good availability and moderate performance. The site is mobile-optimized with basic accessibility features but lacks advanced SEO and security headers. No CMS or analytics platforms were detected, indicating a lean technical footprint. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and important security headers. There are no visible privacy or cookie policies, which represents a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. The absence of tracking scripts suggests minimal user data collection, but also a lack of transparency on data protection practices. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and improved transparency to strengthen trust and regulatory adherence.

Z

Zeren Metal – Gelecek Alüminyum'da

zerenmetal.com

60

Zeren Metal is a Turkish manufacturing company specializing in aluminum products and solutions, targeting various industrial sectors such as automotive, energy, and white goods. The company emphasizes innovation, quality, and sustainability in its production processes. The website reflects a medium-sized enterprise with a professional digital presence built on WordPress and Elementor, showcasing their services and industry expertise. Technical infrastructure is modern with standard CMS and plugins, supported by Cloudflare DNS and HTTPS security. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Overall, the website is functional, well-branded, and serves its business purpose effectively.

P

pide&co

pide-co.com

59

Pide&Co is a small hospitality business based in London specializing in traditional Turkish cuisine including pide, lahmacun, and meze. The website presents a professional and visually appealing design with clear navigation and integration for online ordering via Deliveroo. The business targets local customers seeking authentic Turkish food with options for dine-in and delivery. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. Mobile optimization is good, and the site includes social media links to Facebook, Instagram, and TikTok, enhancing customer engagement. However, the website lacks critical privacy and cookie policies, and no consent mechanisms are present, indicating compliance gaps with GDPR and other privacy regulations. Security headers are not detected, and DNSSEC is not enabled, which could expose the site to certain risks. The WHOIS data shows inconsistencies, notably a domain creation date set in the future, which reduces trustworthiness despite the legitimate business content. Overall, the site is functional and professional but requires improvements in privacy compliance and security hardening to reduce risk and enhance trust.

M

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti.

myzco.com

63

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti. is a diversified Turkish company established in 2014, offering a wide range of services including open-air advertising, media and advertising, IT and software development, automotive and fleet rental, consultancy, logistics, supply, and commodity trading. The company targets business clients seeking comprehensive solutions across these sectors and maintains a moderate market position with a medium-sized enterprise profile. Their website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, with Cloudflare DNS services. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical infrastructure. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. Cookie consent is implemented with an opt-in mechanism, and a privacy policy is present but basic. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business history, supporting legitimacy. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.

G

GET Energy Trading SRL

getenergytrading.com

63

GET Energy Trading SRL is a newly established company (founded 2023) specializing in natural gas trading across key Eastern European markets including Bulgaria, Romania, and Hungary. The company leverages advanced trading tools to provide spot, forward, and structured energy trading solutions. Their website is professionally designed using WordPress and Elementor, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. However, the technical infrastructure lacks some security best practices such as DNSSEC and security headers, and the Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy available. The domain registration is consistent with the company’s recent founding, registered via a Turkish registrar service, with no privacy protection applied. Overall, the security posture is moderate but could be improved by implementing security headers, enabling DNSSEC, and enhancing privacy compliance. The business credibility is supported by clear company information and consistent branding, though contact details are limited to a contact form without explicit emails or phone numbers. Strategic recommendations include improving security configurations, completing privacy compliance, and properly configuring analytics tools to enhance trust and operational insight.

F

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş.

foxcrofthotels.com

59

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş. operates in the hospitality sector, likely providing hotel and tourism services in Turkey. The website is currently a minimal 'Coming Soon' placeholder page with very limited content and no interactive features or detailed business information. The target audience appears to be potential customers or visitors interested in hospitality services, but the site does not yet provide sufficient information to engage or convert visitors. Technically, the website uses basic web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr. It is hosted behind Cloudflare DNS services, but no detailed hosting or CMS information is available. The site shows basic mobile optimization and accessibility but lacks SEO optimization and advanced technical features. Performance is moderate given the minimal content. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, no security headers are detected, and no privacy or cookie policies are present. There are no forms or data collection points to assess for input security. The domain registration is consistent with the business and country, registered in 2020 with a reputable Turkish registrar. Overall security posture is weak due to missing best practices and policies. The overall risk is moderate given the minimal content and lack of security and privacy features. Strategic improvements should focus on enabling HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers and SEO. These steps will improve trust, compliance, and user engagement.

D

Datalynq

datalynq.com

68

Datalynq is a technology company specializing in next-generation case management and market intelligence solutions for the electronics supply chain industry. Their platform provides extensive analytics and real-time data on over 1 billion electronic components, helping businesses optimize supply chain decisions and manage risks effectively. The company positions itself as a key player in supply chain intelligence with a SaaS business model targeting procurement and supply chain professionals. Technically, the website is built on modern web technologies including Webflow CMS, integrated with multiple marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and Apollo.io. The site uses Cloudflare DNS but lacks DNSSEC, and no advanced security headers were detected. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks visible privacy and cookie policies, security policies, and incident response contacts. The absence of DNSSEC and security headers presents moderate security risks. User tracking is extensive via multiple analytics and marketing scripts, but privacy compliance is limited due to missing policies. Overall, the website is professional and credible with moderate security posture. Strategic improvements in privacy compliance, security headers, and DNS security would enhance trust and reduce risk.

S

Stape, Inc.

stape.net

82

Stape, Inc. is a US-based technology company specializing in server-side tracking solutions, primarily leveraging Google Tag Manager and various API gateways for platforms like Meta, TikTok, and Snapchat. Positioned as an industry leader with over 200,000 customers, Stape offers a SaaS platform that simplifies server-side tracking setup, improves data quality, and enhances marketing ROI. Their business model focuses on providing cloud-hosted server infrastructure, integrations, and power-ups to marketers and businesses seeking advanced tracking capabilities. The company maintains a strong market presence with comprehensive customer support, certifications, and a robust online community. Technically, Stape utilizes modern web technologies including React and Next.js, hosted on Google Cloud Platform with Kubernetes for secure and scalable infrastructure. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security-wise, Stape enforces HTTPS, employs recommended security headers, and holds multiple certifications such as SOC 2, ISO 27001, HIPAA, and GDPR compliance. They implement privacy best practices including cookie consent and anonymization features. No critical vulnerabilities or suspicious patterns were detected, though enabling DNSSEC and publishing a security.txt file would enhance security posture. Overall, Stape demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable service provider in the server-side tracking domain.

E

Einstein-Marathon

ulmer-jugendlaeufe.de

52

The website ulmer-jugendlaeufe.de represents the Einstein Jugendläufe, a well-established youth running event held annually in Ulm, Germany. The site is professionally designed using WordPress and Elementor, providing comprehensive information about the event, registration, and results. The business operates in the education and sports event sector, targeting children, youth, families, and schools in the region. The site integrates with partner domains and services such as einsteinmarathon.de and datasport.de for event management and registration. Technically, the website employs modern web technologies including WordPress 6.8.3, Elementor, and Rank Math SEO, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in privacy compliance and security header implementation. The domain WHOIS data aligns with the website's business purpose, showing legitimacy and consistency. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure policy, and enhancing user consent mechanisms to improve compliance and trust.

S

SUN Sportmanagement GmbH

ulmer-klimalauf.de

46

Ulmer Klimalauf is a virtual running event organized by SUN Sportmanagement GmbH, focused on climate protection through community participation. The event encourages participants to collect kilometers by running, walking, or hiking, supporting climate-related projects such as water supply initiatives in Uganda. The website is well-branded, professionally designed, and provides comprehensive information about the event, partners, and sustainability efforts. Technically, the site is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the site is trustworthy and serves its target audience effectively.

Y

yorkwachter

ulmer-muensterturmlauf.de

52

Ulmer Münsterturmlauf is a specialized event website promoting the annual tower running race held in Ulm, Germany. The site provides detailed event information, registration links, news updates, and partner information, targeting runners and sports enthusiasts. The business operates as a small, niche event organizer with a focus on local and regional participants, emphasizing sustainability and community engagement. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure connections. Security posture is good but could be improved with additional security headers and explicit privacy and cookie policies. No direct contact emails or phone numbers are published, relying on contact forms and newsletter signups. Overall, the website is professional, trustworthy, and safe for general audiences.

U

Ulmer Frauenlauf

ulmer-frauenlauf.de

54

Ulmer Frauenlauf is a regional event organizer focused on women's running events in southern Germany. The website provides comprehensive event information, partner promotion, and registration details, targeting female runners and sports enthusiasts. The site is built on WordPress with Elementor and uses modern SEO practices including structured data. Hosting and DNS are managed via Cloudflare, ensuring good performance and security at the infrastructure level. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks under GDPR. Security posture is moderate with HTTPS enforced but missing security headers and vulnerability disclosure. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

U

Ulmer Firmenlauf

firmenlauf-ulm-neu-ulm.de

53

The Ulmer Firmenlauf website represents a regional corporate running event organizer in southern Germany, focusing on the popular AOK Firmenlauf event. The site provides event information and branding but lacks comprehensive business and contact details. Technically, the website is built on WordPress with Elementor and uses Cloudflare DNS for performance and security. SEO is supported by Rank Math, and analytics are implemented via WordPress.com Stats. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but could improve transparency and security practices.

Datasport Germany GmbH operates a professional website focused on sports event timing and registration services, primarily targeting event organizers and participants in Germany. The company offers key services including event timing, registration management, live result publishing, and event organization support. The website is well-branded and consistent with the company's identity, reflecting a medium-sized business with a solid market position in the sports event sector. Technically, the website employs modern frameworks such as Bootstrap and Material Design Bootstrap, uses jQuery for interactivity, and leverages Cloudflare for DNS and CDN services. Analytics are handled via Matomo, indicating a moderate level of user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare services, but lacks explicit security headers and published security policies. Privacy compliance is addressed with clear privacy and cookie policies, though a cookie consent mechanism is absent. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content. The domain registration data aligns with the business identity, supporting legitimacy. Strategic improvements in security policy transparency and privacy consent mechanisms would enhance compliance and trust.

R

RAIDBOXES GmbH

raidboxes.io

70

RAIDBOXES GmbH operates a professional managed WordPress hosting platform based in Germany, serving over 17,000 customers including notable brands. Their offerings include managed WordPress hosting, WooCommerce hosting, and high-traffic solutions, complemented by innovative features like an AI Site Assistant. The company demonstrates a strong market position with consistent branding and a comprehensive digital presence. Technically, the website is built on WordPress with modern Gutenberg blocks, integrates reputable third-party services for analytics and cookie compliance, and shows good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent and privacy policy. Overall, RAIDBOXES presents a trustworthy and mature business with a professional online presence.

R

RAIDBOXES GmbH

raidboxes.de

70

RAIDBOXES GmbH operates a professional WordPress hosting service based in Germany, targeting website creators, agencies, and WooCommerce users. The company offers managed hosting solutions optimized for WordPress performance, security, and sustainability, serving over 17,000 customers including notable brands. Their business model is subscription-based with tiered hosting plans and value-added services such as AI-assisted site creation. Technically, the website is built on WordPress with modern Gutenberg blocks, integrates SEO and cookie compliance tools, and uses Cloudflare DNS. The site is fast, mobile-optimized, and well-structured, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website demonstrates high professionalism, good privacy compliance, and a strong market position in the German WordPress hosting sector.

E

Einstein-Marathon

einsteinmarathon.de

55

Einstein-Marathon is a well-established sports event organizer focusing on one of the largest running events in southern Germany, attracting over 15,000 participants. The website provides comprehensive information about the event, including registration, race details, results, and partner collaborations. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Cloudflare DNS for performance and security. The security posture is adequate with HTTPS and no visible sensitive data exposure, but lacks advanced security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is professional and trustworthy but should improve privacy compliance and security disclosures to enhance user trust and regulatory adherence.

O

ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi

goturkiye.com

66

GoTürkiye is the official travel guide website for Türkiye, providing comprehensive tourism information, travel planning tools, and cultural insights to visitors worldwide. The website targets tourists interested in exploring Türkiye's diverse destinations, sustainable tourism options, cultural heritage, and events. It operates under the legal entity ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi, established in 2018, positioning itself as a trusted and official source for travel information. Technically, the website leverages modern web technologies including Next.js and React, hosted with assets on Google Cloud Storage and DNS managed via Cloudflare. It integrates Google Tag Manager for analytics and Google Maps API for location services. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected, which are areas for enhancement. Privacy and cookie policies are not present in the analyzed content, indicating a gap in compliance with GDPR and other privacy regulations. No contact emails or phone numbers were found, limiting direct communication channels. Overall, the website is professionally designed and credible as an official tourism portal but would benefit from improved privacy compliance, enhanced security configurations, and clearer contact information to strengthen trust and regulatory adherence.

FINE ITALY is an international marketplace event dedicated to wine tourism, organized by Feria de Valladolid, with its first Italian edition scheduled for October 2025 in Riva del Garda, Italy. The platform connects wineries and tourism operators to promote wine tourism destinations and business opportunities in Southern Europe. The website is built on WordPress and uses modern web technologies including LayerSlider and Cloudflare DNS. It features professional design and good content quality but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Tracking technologies such as Google Analytics and Adform are used, indicating moderate user tracking. Overall, the site is legitimate and professionally presented but could improve in privacy and security transparency.

F

Feria Outlet Valladolid

feriaoutletvalladolid.com

58

Feria Outlet Valladolid is a Spanish event organizer specializing in retail outlet fairs offering discounts up to 80% on major brands. The website serves as an information portal for upcoming events, galleries, and participation details, targeting local consumers interested in discounted shopping experiences. The business is relatively new, founded in 2022, and operates primarily in the retail and hospitality sectors within Spain. Technically, the site is built on WordPress using Elementor, with integration of common web technologies such as jQuery and Bootstrap, and hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness. Security posture is adequate with HTTPS enforced and GDPR cookie compliance implemented, though additional security headers and DNSSEC could improve resilience. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though lacking explicit contact emails and terms of service pages.

F

Feria de Valladolid

feriavalladolid.com

65

Feria de Valladolid operates as a regional event venue and organizer based in Valladolid, Spain, hosting a variety of trade fairs, congresses, and public events across multiple sectors including technology, wine, tourism, and sports. The website serves as a comprehensive portal for event information, ticket sales, and venue details, targeting businesses and the general public interested in these events. The company is well-established with a domain age dating back to 1999, indicating a mature presence in the market. Technically, the website is built on WordPress with a modern plugin ecosystem including EventON for event management, Slider Revolution for visual content, and integrations with social media platforms and analytics tools such as Google Analytics and Facebook SDK. The site is hosted with DNS managed by Cloudflare and secured with HTTPS, although DNSSEC is not enabled. Performance and mobile optimization are good, with a professional design and clear navigation. From a security perspective, the site employs HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy compliance is partially addressed with a cookie consent banner, but no explicit privacy policy or terms of service are found on the homepage. Contact information is clearly provided, enhancing business credibility. Overall, Feria de Valladolid presents a professional and trustworthy online presence with room for improvement in security hardening and privacy policy transparency. Strategic enhancements in these areas would strengthen user trust and compliance posture.

A

Amcrest Technologies

amcrest.com

64

Amcrest Technologies is a medium-sized technology company specializing in security and tracking systems, including IP cameras, NVRs, GPS trackers, and cloud video storage solutions. The company operates an e-commerce platform built on Magento, targeting both consumers and businesses seeking reliable surveillance and tracking products. The website demonstrates a consistent brand presence with professional design and clear navigation, supporting a positive user experience. Technically, the site leverages modern web technologies and integrates trusted third-party analytics and marketing tools, though there is room for improvement in security headers and privacy compliance disclosures. The domain registration data aligns well with the company's business claims, indicating legitimacy and stability. However, the absence of explicit privacy, cookie, and security policies suggests a need for enhanced compliance and transparency. Overall, the website is functional, secure, and credible but would benefit from improved privacy and security documentation to meet higher compliance standards.

F

Fondazione Symbola

symbola.net

64

Fondazione Symbola is a well-established Italian non-profit foundation dedicated to promoting Italian quality through sustainability, culture, and innovation. The website serves as a media and research platform publishing reports, news, and organizing events to support Italian excellence. Technically, the site is built on WordPress with Elementor, uses modern technologies, and is hosted behind Cloudflare DNS. Security posture is good with HTTPS enforced and some security headers, though DNSSEC is not enabled. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy detected in the provided content. Overall, the site is professional, trustworthy, and serves a clear non-profit mission.

U

Unblockia

unblockia.com

58

Unblockia is a technology company specializing in monetizing adblock traffic for publishers by displaying Acceptable Ads, thereby recovering lost advertising revenue. The company targets both publishers and advertisers, offering a platform that integrates easily with websites and provides reporting dashboards for performance tracking. Their market position is that of a leading solution in the niche of adblock traffic monetization, supported by partnerships with reputable publishers and compliance with industry standards such as the Acceptable Ads Standard and IAB Europe TCF v2.0. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as Swiper.js and Rellax.js for UI effects. It uses Google Analytics for tracking and Cloudflare for DNS services. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNSSEC implementation. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No public security policy or incident response information is available, and no vulnerability disclosure or security.txt file was found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, Unblockia presents a professional and trustworthy online presence with a clear business focus and good technical implementation. Security posture is adequate but could be improved with additional measures. The site is safe for general audiences and does not contain any adult or questionable content.

Z

Zucchetti Hospitality S.r.l.

verticalbooking.com

65

Vertical Booking, a Zucchetti Hospitality S.r.l. solution, is a well-established provider of hotel booking and central reservation system software, serving over 8,200 properties globally. The company offers a comprehensive suite of modular solutions designed to optimize hotel sales channels and distribution with a strong emphasis on flexibility and integration. Their market position is solid, supported by significant transaction volumes and partnerships with major travel platforms. Technically, the website employs modern JavaScript libraries, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and uses Cloudflare for DNS services. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS, domain protection statuses, and PCI compliance, though improvements could be made by publishing explicit security policies and enabling DNSSEC. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. Overall, the website projects professionalism, trustworthiness, and business credibility.

R

RAIDBOXES GmbH

raidboxes.net

70

RAIDBOXES GmbH operates a professional WordPress hosting platform based in Germany, targeting agencies, website owners, and WooCommerce users. The company offers managed WordPress hosting, high-traffic hosting, and additional services such as email hosting and domain registration. With over 17,000 customers and a strong brand presence, RAIDBOXES positions itself as a reliable and fast hosting provider with a focus on security and sustainability. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Technically, the site leverages WordPress with Gutenberg blocks, Cloudflare DNS, and integrates modern tools like Google Tag Manager and Intercom for analytics and customer support. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements like DNSSEC and explicit security policies could enhance trust. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

S

Studierendenwerk Münster

stw-muenster.de

70

Studierendenwerk Münster is a regional non-profit organization dedicated to supporting students in Münster, Germany, by providing essential services such as student housing, catering, counseling, and event organization. The website reflects a well-established entity with a clear focus on student welfare and academic community support. The organization maintains a strong market position as a key service provider in the education sector within its region. Technically, the website is built on WordPress using Elementor and integrates modern SEO and cookie consent tools, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contact could enhance transparency. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its target audience.