Security Directory

L

LV - Buchweltshop

buchweltshop.de

52

LV.Buch operates an e-commerce platform specializing in books centered around country life, nature, cooking, and lifestyle themes, targeting primarily German-speaking customers. The website is built on a mature Magento 2 platform with a comprehensive technical infrastructure including RequireJS, jQuery, Google Tag Manager, and Usercentrics for cookie consent management. The site demonstrates good digital maturity with modern technologies and integrations for marketing and security, such as invisible Google reCAPTCHA and cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is partial due to the absence of explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

A

Agrarshop

agrarshop.de

48

Agrarshop.de is a German e-commerce platform specializing in agricultural and livestock-related publications, including magazines, literature, and seminars. The website targets professionals in the agricultural sector such as dairy farmers, pig farmers, and equestrian enthusiasts. It operates on a Magento-based platform with a modern technical infrastructure integrating Google Tag Manager, Usercentrics for cookie consent, and Google reCAPTCHA for form protection. The site demonstrates good digital maturity with responsive design and clear navigation. Security posture is solid with HTTPS enforced and CAPTCHA protections, though explicit security headers and incident response policies are absent. Overall, the site is trustworthy and professional, serving a niche market effectively.

S

Schott Music

schott-music.com

68

Schott Music is a historic and leading publisher specializing in classical and contemporary music, offering a wide range of sheet music, books, and digital products. The company targets musicians, educators, and music enthusiasts globally, operating a professional e-commerce platform built on Magento. The website demonstrates a mature digital infrastructure with modern technologies, including Google Analytics, Tag Manager, and Usercentrics for privacy compliance. Security posture is strong with HTTPS, security headers, and CAPTCHA implementations, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain is a notable anomaly that impacts trustworthiness despite the professional presentation and comprehensive privacy compliance. Overall, the site is well-structured, user-friendly, and compliant with GDPR, serving a broad audience with high-quality content and services.

S

Scrubdesignz

scrubdesignz.com

51

Scrubdesignz is a specialized e-commerce business focused on providing high-quality graphics kits, plastics kits, and seat covers for motocross and dirt bikes. Established in 2014 and based in Slovakia, the company targets motocross enthusiasts and professional riders globally. The website is built on the Magento platform, leveraging modern JavaScript libraries and tools such as RequireJS, KnockoutJS, and Slider Revolution to deliver a responsive and visually appealing user experience. Social media integration and Google Analytics are used for marketing and user behavior tracking. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

I

IHK Nürnberg für Mittelfranken

ihk-nuernberg.de

74

IHK Nürnberg für Mittelfranken is a regional chamber of commerce serving the Mittelfranken region in Germany. The organization supports local businesses through advisory services, training, and representation of business interests. Their website reflects a mature digital presence with a structured content hierarchy covering topics such as international trade, sustainability, energy, innovation, and logistics. The target audience includes companies, international professionals, and stakeholders in various sectors. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-respecting Matomo analytics alongside a robust cookie consent mechanism. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The site provides clear contact information including email, phone, and chat support, enhancing business credibility. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

K

Klaveness Footwear

klaveness.no

66

Klaveness Footwear is a specialized retailer focused on prescription, orthopaedic, medical, rehabilitation, and custom footwear, primarily serving the Nordic market. Established in 1999, the company offers a broad range of footwear products tailored for comfort and medical needs, leveraging an e-commerce platform built on Magento 2. The website is professionally designed with clear navigation, mobile optimization, and comprehensive content that targets customers requiring specialized footwear solutions. Technically, the site uses modern JavaScript libraries and Magento's PageBuilder for content management, ensuring a good user experience and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. Overall, the site demonstrates a high level of business credibility and privacy compliance, with clear contact information and social media presence. Recommendations include enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

T

Tapehouse

tapehouse-productions.de

58

Tapehouse is a small media agency based in Cologne and Bonn, Germany, specializing in social media marketing, image films, and audio recordings. The company targets small and medium-sized enterprises in the local region, offering full-service media solutions. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and integrates Google Analytics and Google Tag Manager for visitor tracking. The technical infrastructure is modern and mobile-optimized, though SEO and accessibility features are basic. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks explicit security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance.

D

dlv Deutscher Landwirtschaftsverlag GmbH

dlv-shop.de

69

The website www.dlv-shop.de is an e-commerce platform operated by dlv Deutscher Landwirtschaftsverlag GmbH, specializing in the sale of subscriptions, books, and products related to agriculture, forestry, beekeeping, gardening, and hunting. It targets professionals and enthusiasts in these sectors, offering a broad catalog of specialized media products. The site is built on Magento CMS and employs modern web technologies such as jQuery, RequireJS, and KnockoutJS, with integrations for Google Tag Manager and consent management to ensure GDPR compliance. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content.

D

Diakonie Baden Freiwilligendienste

freuwillig.de

45

Diakonie Baden Freiwilligendienste operates a professional and well-structured website focused on promoting and facilitating voluntary social services such as FSJ and BFD in the Baden region of Germany. The organization targets young people seeking meaningful engagement and career orientation through volunteer programs. The website content is comprehensive, well-branded, and provides clear pathways for application and information. Technically, the site is built on TYPO3 CMS and integrates modern web technologies including Google Tag Manager, Matomo analytics, and accessibility tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy-respecting analytics, though formal security policies and incident response contacts are not published. Overall, the site demonstrates strong GDPR compliance and trustworthy business credibility, making it a reliable resource for its audience.

8a.pl is a leading Polish e-commerce retailer specializing in mountain and tourism equipment, including trekking shoes, climbing gear, ski touring equipment, and mountain clothing. Positioned as the largest mountain and tourism store in Poland, it targets outdoor enthusiasts such as mountaineers, climbers, trekkers, and travelers. The website is built on the Magento platform and integrates a modern technology stack with various marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site demonstrates high professionalism and trustworthiness with clear contact information and consistent branding.

Т

ТОВ Реджері Україна

regery.ua

63

Regery is a Ukrainian-based technology company specializing in domain registration, SSL certificate provisioning, web hosting, and website monitoring services. Established in 2021, the company positions itself as a reliable and cost-effective provider targeting both individual and corporate clients. Their platform offers a comprehensive suite of tools for domain management, security, and hosting, supported by a user-friendly control panel and integration with popular services such as Google accounts for authentication. Technically, the website employs modern JavaScript frameworks and Google Analytics for performance and user behavior tracking, hosted with Cloudflare DNS services ensuring reliable uptime and security. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in implementing security headers and explicit security policies. Overall, Regery demonstrates a mature digital presence with clear business credibility and compliance with privacy regulations.

R

Regery

regery.com

67

Regery is a reputable domain registrar and hosting service provider established in 2017, operating under DEVEXPANSE LTD. The company offers a comprehensive suite of services including domain registration, SSL certificates from multiple trusted brands, web hosting, and website monitoring. Their platform supports multiple languages and currencies, targeting a global audience of individuals and businesses seeking affordable and reliable domain and hosting solutions. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it employs modern JavaScript frameworks and asynchronous loading to ensure fast performance and a smooth user experience. Security is a priority, with HTTPS enforced, multi-factor authentication options, and secure account recovery mechanisms. However, DNSSEC is not enabled, and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Regery demonstrates a strong market position with transparent pricing, active partnership programs, and trustworthy business practices.

T

TAURON Dystrybucja S.A.

tauron-dystrybucja.pl

68

TAURON Dystrybucja S.A. is the largest energy distributor in Poland, providing a wide range of services including network connection, remote meter reading, and customer support for both individual and business clients. The company maintains a professional and comprehensive online presence with clear navigation, multiple service portals, and extensive customer resources. The website is well-structured, mobile-optimized, and integrates modern technologies such as Google Tag Manager, Microsoft Clarity, and various JavaScript libraries to enhance user experience and analytics capabilities. Security measures include HTTPS enforcement, cookie consent mechanisms, and privacy policies aligned with GDPR requirements. Despite the absence of publicly available WHOIS data, the website's branding, content quality, and trust indicators strongly support its legitimacy and market position. Overall, the digital infrastructure reflects a mature and secure environment suitable for a major utility provider.

T

TAURON Polska Energia

tauron.pl

66

TAURON Polska Energia is a major Polish energy provider offering electricity and related services to residential and business customers. The website presents a comprehensive portfolio including energy supply, energy-saving devices, customer service, and digital tools such as an energy consumption calculator and e-invoice services. The branding and content quality are excellent, reflecting a professional and trusted energy company. Technically, the site uses modern JavaScript libraries, consent management tools, and analytics platforms, with a CMS likely based on Sitecore. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are not evident. WHOIS data is unavailable, which slightly reduces trust but is likely due to registry policies rather than malicious intent. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

G

Górskie Ochotnicze Pogotowie Ratunkowe

gopr.pl

56

Górskie Ochotnicze Pogotowie Ratunkowe (GOPR) is a Polish mountain rescue organization dedicated to providing rescue services and safety information in mountainous regions of Poland. The organization operates multiple regional groups with central stations, offering emergency contact numbers, avalanche warnings, and safety education. The website serves as an information hub for tourists, skiers, and hikers, providing weather conditions, avalanche risk updates, and a dedicated rescue application. GOPR is supported by government funding and partners, reflecting its important role in public safety. Technically, the website is built on a modern CMS platform (Vela CMS) and utilizes a variety of JavaScript libraries such as jQuery, FancyBox, and Slick Carousel to enhance user experience. The site is mobile optimized and includes accessibility features, though some improvements in security headers and SEO could be made. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating basic privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit published security policies or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not contradict the legitimacy suggested by the official content and government affiliations. Overall, the site presents a good security posture with room for improvement in formal security documentation and technical hardening. The overall risk assessment is moderate-low, with recommendations focusing on enhancing security headers, publishing incident response policies, and improving WHOIS transparency. The website effectively supports GOPR's mission to provide mountain rescue services and safety information to the public.

H

HD하이드로젠

hdhydrogen.com

57

HD하이드로젠 is a newly established South Korean company specializing in advanced hydrogen energy technologies, including fuel cells and electrolyzers based on third-generation solid oxide technology. As part of the HD Hyundai group, it holds a strategic position in the sustainable energy sector, targeting industrial and commercial markets with innovative carbon-neutral solutions. The website reflects a professional corporate presence with clear navigation and relevant business content primarily in Korean. Technically, the site uses a modern JavaScript stack with libraries like jQuery, Swiper, and GSAP, though no CMS or hosting details are evident. Security posture is moderate, with domain transfer protection but lacking DNSSEC and visible security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or incident response information. Overall, the site is well-branded and consistent with the parent group’s ecosystem, linking extensively to related subsidiaries and partner domains.

H

Hyundai OCI Co., Ltd.

hd-hyundaioci.co.kr

52

Hyundai OCI Co., Ltd. operates as a leading manufacturer in the energy sector, specializing in the production of carbon black and BTX chemical products. The company positions itself as a technologically advanced and competitive player in the carbon black industry, targeting business customers and investors. The website reflects a professional corporate presence with clear branding and comprehensive business information, supported by a family of related companies under the HD Hyundai Group umbrella. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted likely by Gabia, a reputable Korean hosting provider. While the site is accessible and well-structured, mobile optimization and accessibility are basic, and no CMS or advanced frameworks are detected. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is transparent and consistent with the business identity, enhancing trustworthiness.

H

HD현대케미칼

hd-hyundaichemical.co.kr

52

HD현대케미칼 is a South Korean petrochemical company specializing in the production and supply of various energy and chemical products such as LPG, naphtha, aviation fuel, diesel, and aromatic hydrocarbons. The company is part of the larger HD Hyundai conglomerate, with multiple related subsidiaries and partner companies linked through family site connections. The website presents a professional corporate image with clear business information and product descriptions targeted at industrial clients, investors, and potential employees. Technically, the site uses a traditional web stack with jQuery and RequireJS, hosted via Gabia, and employs HTTPS for secure communications. However, there is room for improvement in modern security practices, including the implementation of security headers and privacy compliance mechanisms. The WHOIS data is transparent and consistent with the company's identity, supporting the legitimacy of the domain and business. Overall, the website is well-structured and trustworthy but could enhance its privacy and security posture to align with best practices.

H

HD현대오일뱅크

hd-hyundaioilbank.co.kr

52

HD현대오일뱅크 is a leading South Korean integrated energy company specializing in petroleum refining, petrochemical products, lubricants, and carbon black production. The company operates a large network of gas stations and charging stations nationwide. It holds a strong market position with advanced refining technology and a commitment to ESG principles. The website reflects a professional corporate presence with comprehensive business and sustainability information, targeting investors, customers, and job seekers. Technically, the website uses a traditional tech stack including jQuery 1.8.2, Swiper, TweenMax, and RequireJS, with Google Analytics for tracking. The site is moderately optimized for performance and accessibility, though some modernization opportunities exist. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and explicit cookie consent mechanisms. The WHOIS data is transparent and consistent with the company's identity, registered with a reputable Korean registrar and showing no suspicious patterns. The domain is relatively new but aligns with corporate branding and restructuring. Overall, the site is trustworthy and professionally maintained. Recommendations include updating JavaScript libraries, implementing security headers, adding cookie consent for privacy compliance, and publishing security policies to enhance trust and compliance.

The Las Vegas Convention and Visitors Authority (LVCVA) operates as the official destination marketing organization for Southern Nevada, focusing on promoting tourism, conventions, meetings, and special events. The website reflects a professional and well-structured digital presence, targeting tourists, event planners, and hospitality professionals. It highlights its market position as a leading destination marketing organization, recognized by industry awards. Technically, the site employs a modern technology stack including jQuery, RequireJS, Plyr video player, and Google Tag Manager, hosted on a CMS platform (Simpleview CMS) optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are not explicitly found, indicating room for compliance enhancement. The WHOIS data is unavailable or privacy protected, which slightly reduces domain trust but the website content and design strongly indicate legitimacy. Overall, the site is professional, secure, and credible with recommendations to improve privacy compliance and security headers.

H

HD Hyundai Construction Equipment Co.,Ltd.

hd-hyundaice.com

60

HD Hyundai Construction Equipment Co., Ltd. is a major South Korean manufacturer specializing in construction machinery such as excavators, wheel loaders, backhoe loaders, and other heavy equipment. The company operates globally with a strong brand presence and a comprehensive product portfolio supported by aftermarket services and dealer networks. Their website reflects a professional and well-structured digital presence with multi-language support and integration of modern web technologies. The technical infrastructure includes popular JavaScript libraries, Google Analytics, and Tag Manager for tracking and performance monitoring. Security posture is strong with HTTPS and Content-Security-Policy headers implemented, though there is room for improvement in privacy compliance and incident response transparency. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not overshadow the overall legitimacy indicated by consistent branding and external partner links. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing terms of service and vulnerability disclosure policies, and improving accessibility features to meet broader compliance standards.

Z

Zentrum für Allgemeine Wissenschaftliche Weiterbildung (ZAWiW), Universität Ulm

zawiw.de

68

The Zentrum für Allgemeine Wissenschaftliche Weiterbildung (ZAWiW) at Universität Ulm is a university department dedicated to lifelong learning and educational programs primarily targeting older adults and multiple generations. It offers a variety of educational and research programs including Akademiewochen, Forschendes Lernen, and the Ulmer 3-Generationen-Uni. The website is professionally designed, well-structured, and provides comprehensive information about its services, events, and contact details. It maintains a strong presence in the education sector with a focus on geragogics and participatory science. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and session management, though explicit security headers could be improved. Overall, the site is trustworthy, accessible, and serves its educational mission effectively.

I

InsightCommodity

insightcommodity.com

69

InsightCommodity operates a specialized marketplace platform focused on providing data-driven solutions for energy and commodity markets. Powered by EEX and associated with Deutsche Börse Group, it offers a broad range of services including analytics tools, clearing services, weather and renewables data, and procurement solutions. The platform connects over 35 providers and vendors, targeting energy market professionals and commodity traders. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site is built on Magento 2 with modern JavaScript libraries such as RequireJS and jQuery, and includes GDPR-compliant cookie consent mechanisms. Hosting and domain registration are handled by reputable providers, ensuring a stable infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended such as enabling DNSSEC and adding advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Overall, InsightCommodity presents a trustworthy and professional platform with a strong market position in the energy data sector. Strategic recommendations include enhancing DNS security, publishing incident response contacts, and improving security headers to further strengthen trust and compliance.

K

Kratki

kratki.com

66

Kratki is an established European manufacturer and online retailer specializing in fireplaces, gas heaters, and related heating accessories. Founded in 2002, the company offers a broad range of modern and traditional heating solutions targeting both consumers and businesses. The website is built on the Magento eCommerce platform, leveraging modern frontend technologies such as jQuery and Knockout.js, and is hosted with DNS services provided by Cloudflare. The site demonstrates good mobile optimization, clear navigation, and professional design quality. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, although DNSSEC is not enabled and some security headers are not explicitly confirmed. Cookie consent is managed effectively via Cookiebot, indicating good privacy compliance practices, though no explicit privacy policy or terms of service were found in the analyzed content. Overall, the website is trustworthy, professional, and safe for general audiences.

Slovenská komora stavebných inžinierov (SKSI) is a Slovak professional chamber representing authorized construction engineers. The organization provides membership services, professional examinations, educational programs, and maintains official registers and public portals. The website reflects a national authoritative position within the construction engineering sector in Slovakia, targeting professionals and stakeholders in this industry. Technically, the site uses a modern CMS (BUXUS), standard JavaScript libraries like jQuery and RequireJS, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. WHOIS data confirms legitimacy and consistency with the organization's identity. Overall, the website is a reliable and professional digital presence for SKSI.

I

Ing. Anton Gérer – ATP Journal

e-automatizacia.sk

52

The website www.e-automatizacia.sk serves as an online catalog and information portal dedicated to industrial automation products and services, primarily targeting professionals and companies in Slovakia's automation sector. It features product categories such as control systems, drives, human-machine interfaces, industrial software, and measuring instruments, alongside industry news and the ATP Journal magazine content. The site operates on the BUXUS CMS platform and integrates legacy technologies like jQuery 1.4.2 and RequireJS, with Google Analytics for user tracking. While the design and content quality are good and navigation is clear, mobile optimization and accessibility are basic. Security posture is moderate, with HTTPS presumably enabled but lacking visible security headers and using outdated JavaScript libraries that may pose risks. Privacy compliance is addressed through a cookie consent banner and a basic privacy policy page, though terms of service and incident response policies are absent. Overall, the site is legitimate and consistent with its business purpose but would benefit from technical and security improvements.

I

Ing. Anton Gérer – ATP Journal

atpjournal.sk

53

ATP Journal is a Slovak industrial magazine specializing in industrial automation, informatics, and maintenance. It serves a niche audience of industry professionals and companies in Slovakia, providing news, expert articles, event calendars, and advertising opportunities. The website is professionally designed with consistent branding and regularly updated content, reflecting a stable market position in the Slovak industrial media sector. Technically, the site uses modern JavaScript libraries including RequireJS, jQuery, and Bootstrap, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS and CSRF protections, though explicit security headers and incident response information are lacking. Privacy compliance is well addressed with a GDPR policy and cookie consent banner. No suspicious or malicious content was detected, and partner organizations are reputable industry associations. Overall, the site is trustworthy and professionally maintained.

A

Association Francophones des Soins Oncologiques de Support (AFSOS)

afsos-form.org

50

AFSOS FORM is a specialized digital training platform operated by the Association Francophones des Soins Oncologiques de Support (AFSOS), focusing on supportive oncological care education. The platform offers a variety of learning formats including e-learning modules, serious games, virtual classes, and thematic webinars aimed at healthcare professionals in oncology. The website is built on the Moodle LMS platform and hosted by Scaleway SAS, reflecting a modern and scalable technical infrastructure. The content is primarily in French, with some courses available in English, targeting a niche but important segment of healthcare education in France and French-speaking regions. Technically, the website employs a combination of Moodle, YUI, jQuery, and Bootstrap frameworks, ensuring a responsive and moderately performant user experience. The site is mobile-optimized and accessible at a basic level, with room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no explicit GDPR compliance statements or detailed data retention policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers and DNSSEC would strengthen defenses. The business credibility is high due to the backing of a recognized association and expert validation of content. The website is safe for general audiences, with no adult or explicit content. Strategic recommendations include enhancing security configurations, expanding privacy compliance transparency, and improving SEO and accessibility to broaden reach and trust.

The BDSV website represents the Bundesvereinigung Deutscher Stahlrecycling- und Entsorgungsunternehmen e.V., a leading German steel recycling industry association. The organization serves as a key representative body for companies involved in steel recycling and related environmental services, positioning itself as the largest steel recycling association in Europe. Their services include advocacy, market information, education, and quality assurance, targeting industry professionals and policymakers. The website content is professionally presented, primarily in German, and includes news, events, publications, and interactive tools such as a CO2 calculator. Technically, the site is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and RequireJS. The site is mobile-optimized and features good navigation and SEO practices. Hosting details are limited but the domain is registered with IONOS SE, a reputable registrar. Performance is moderate with no major technical issues detected. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and implementing cookie consent mechanisms to enhance GDPR compliance. No WAF or blocking mechanisms were detected, and no exposed sensitive data was found. The WHOIS data confirms a stable and consistent domain registration dating back to 2007, supporting the legitimacy of the organization. Overall, the website is a credible, professional platform for the steel recycling industry with room for improvement in security and privacy compliance to meet modern standards.

C

CK Turancar

turancar.sk

40

CK Turancar is a Slovakian transportation and travel service provider with approximately 30 years of market presence. Their business portfolio includes a travel agency, bus lines, truck freight transport, and vehicle servicing for buses and trucks. The website reflects a medium-sized company with a professional online presence, targeting both general consumers and businesses requiring transport and vehicle maintenance services. The company maintains active social media profiles and uses structured data to enhance search engine visibility. Technically, the website is built on the BUXUS CMS platform, leveraging modern JavaScript libraries and multiple analytics tools including Google Analytics, Matomo, and Snowplow. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies or incident response information. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Aberdeen Marine Logistics Alliance (AMLA) operates as a collaborative vessel sharing initiative focused on optimizing marine logistics and reducing costs for energy sector operators in the UK. The platform facilitates vessel sharing among members through a structured sharing policy and charge-back mechanism, supported by a facilitator company, Peterson. The website presents a professional and clear description of its services and member companies, targeting marine logistics operators and energy companies. Technically, the site is a static Adobe Muse-generated site hosted via Cloudflare, using legacy JavaScript libraries and basic mobile optimization. Security posture is moderate with HTTPS and DNSSEC enabled but lacks modern security headers and uses outdated jQuery. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

Visit Atlantic City operates as the official convention and visitor bureau for Atlantic City, providing comprehensive tourism information including events, attractions, dining, accommodations, and travel planning tools. The website serves as a central hub for visitors and group travel planners, offering curated itineraries and promotional deals. The organization positions itself as a key regional tourism promoter with a professional and consistent brand presence. Technically, the website employs a modern tech stack with multiple third-party analytics and marketing integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional content and social media presence support its credibility. Overall, the site is well-designed for its audience but would benefit from enhanced privacy compliance and security transparency.

Visit Atlantic City operates as the official destination marketing organization for Atlantic City, providing comprehensive tourism information, event calendars, group travel support, and promotional services. The website targets tourists, event planners, and group travelers, offering a broad range of services to enhance visitor experience and promote Atlantic City as a travel destination. The business model centers on tourism promotion and visitor engagement, positioning itself as a key player in the hospitality sector within the United States. Technically, the website is built on the Simpleview CMS platform, utilizing a modern technology stack including jQuery, RequireJS, Google Tag Manager, and various analytics and marketing tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure supports extensive user tracking and marketing efforts, indicating a mature digital presence. From a security perspective, the site enforces HTTPS and employs several best practices such as asynchronous script loading and no visible sensitive data exposure. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. The absence of privacy and cookie policies, as well as WHOIS registration data, presents compliance and legitimacy concerns that should be addressed. Overall, the website is professional and trustworthy in appearance but requires improvements in privacy compliance and security header implementation. The missing WHOIS data is a notable anomaly that could impact trustworthiness assessments. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and clarifying domain registration details to strengthen business credibility and compliance.

CatchDesMoines.com is a professionally designed tourism and visitor information website focused on promoting Greater Des Moines. It provides comprehensive guides on things to do, events, hotels, restaurants, and resources for meeting planners. The site targets visitors and planners interested in Des Moines tourism, positioning itself as an official resource likely affiliated with the Greater Des Moines Convention and Visitors Bureau. Technically, the site uses a modern tech stack including jQuery, RequireJS, Cloudinary, Vimeo API, and multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized, accessible, and SEO friendly. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and published security policies. WHOIS data is unavailable, which is unusual and slightly reduces trust, but the professional content and branding support legitimacy. Privacy and cookie policies are not explicitly found, indicating a compliance gap. Overall, the site is a credible and well-maintained tourism portal with room for improvement in privacy and security transparency.

Visit Knoxville operates as a regional tourism promotion website providing comprehensive information about events, attractions, accommodations, and dining in Knoxville, Tennessee. The site targets tourists, families, couples, and event planners, positioning itself as a key resource for visitors to the region. The business model centers on destination marketing and visitor engagement through digital content and trip planning tools. Technically, the website employs a modern tech stack including jQuery, RequireJS, and various media and analytics integrations, hosted on a CMS platform known as Simpleview. The site demonstrates good mobile optimization, SEO practices, and user experience design. Security posture is solid with HTTPS enforced and some security best practices observed, though additional headers and integrity checks could enhance protection. Privacy compliance is basic with privacy and cookie policies present, but no explicit GDPR compliance indicators or detailed data retention policies were found. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional presentation and partner integrations suggest a legitimate entity. Overall, the site scores well on content and technical implementation but should address WHOIS transparency and enhance security headers for improved trust.

Atlantic City Sports Commission operates as a regional sports destination marketing organization focused on promoting Atlantic City as a premier location for sports events. The website offers resources such as sports planning guides, venue information, and destination services targeted at sports event planners and organizations. The technical infrastructure is built on a modern stack including RequireJS, jQuery, Vue.js, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized and demonstrates good accessibility and SEO practices. Security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable due to privacy protection, which is typical for this business type. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

V

VISIT Milwaukee

visitmilwaukee.org

66

VISIT Milwaukee operates as the official destination marketing organization for the city of Milwaukee, providing comprehensive tourism information including restaurants, breweries, events, and hotels. The website is designed to serve tourists and visitors planning trips to Milwaukee, offering event calendars, lodging options, and local guides. The business model focuses on promoting Milwaukee as a travel destination, leveraging digital content and interactive maps to engage users. The site positions itself strongly within the hospitality sector, targeting a broad audience interested in travel and local experiences. Technically, the website employs a modern technology stack including RequireJS, jQuery, Plyr video player, and Glide.js sliders, integrated within the Simpleview CMS platform. It uses multiple analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing infrastructure. The site is mobile-optimized with good accessibility features and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and includes some security headers, though explicit Content-Security-Policy and X-Frame-Options headers are not evident. There is no visible exposure of sensitive data or vulnerable libraries. However, the absence of clear privacy and terms of service pages and incident response policies suggests room for improvement in compliance and transparency. The WHOIS data is unavailable due to query failure or privacy protection, but the website's professionalism and trust signals support its legitimacy. Overall, VISIT Milwaukee presents a well-structured, content-rich, and professionally maintained website suitable for its tourism promotion purpose. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and maintaining up-to-date third-party libraries to strengthen security posture and compliance.

Heerema is a well-established company specializing in offshore marine contracting, fabrication, and engineering solutions primarily serving the energy and transportation sectors. The company offers a broad range of services including offshore wind projects, transport and installation, decommissioning, and fabrication services. The website reflects a professional corporate presence with consistent branding and a focus on quality, safety, and social responsibility. The domain age and registration details support the legitimacy and maturity of the business. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and RequireJS. The site is moderately optimized for performance and mobile responsiveness, with basic SEO and accessibility features. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks DNSSEC and visible security headers, which are recommended for enhanced security. There is no publicly available security policy or incident response information, which could be improved to increase trust and compliance. Privacy and cookie policies are present with a consent mechanism, but GDPR compliance indicators are basic. Overall, the website presents a trustworthy and professional image with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.

V

Verlagsgruppe Patmos

patmos.de

66

Verlagsgruppe Patmos operates an online bookstore specializing in psychology, biographies, religion, and spirituality literature, targeting German-speaking audiences. The website is built on Magento 2, leveraging modern JavaScript frameworks and third-party tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and cookie consent management. The technical infrastructure is solid with HTTPS enforced and a mature e-commerce platform. Security posture is good, though the absence of explicit security headers and published privacy or terms policies suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with cookie consent regulations, but would benefit from enhanced transparency and security documentation.

B

Bundesministerium für Arbeit und Soziales (BMAS)

esf.de

62

The website www.esf.de is the official portal for the European Social Fund (ESF) in Germany, operated by the Bundesministerium für Arbeit und Soziales (BMAS). It serves as a comprehensive information and service platform providing details on funding programs, social integration, employment initiatives, and related EU projects. The site targets a broad audience including employees, unemployed persons, educational institutions, entrepreneurs, families, and other social groups. It is positioned as a key government resource for promoting employment and social cohesion through EU funding mechanisms. Technically, the site is built on the Government Site Builder CMS and employs modern web technologies such as jQuery, Bootstrap, RequireJS, and integrates a consent management platform (Consentmanager.net) for GDPR compliance. Analytics are handled via Etracker, with scripts loaded asynchronously to optimize performance. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and uses a consent management platform to handle privacy and cookie policies. While explicit security headers are not visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with a legitimate government domain, showing consistent registration and authoritative name servers. Overall, the website demonstrates a high level of professionalism, compliance, and trustworthiness, making it a reliable source for information on the European Social Fund in Germany.

K

Krames

kramesstore.com

76

Krames is a well-established healthcare company specializing in patient education materials, operating an e-commerce platform under the parent company WebMD Ignite. The website offers both digital and physical educational resources aimed at healthcare providers and patients, reflecting a mature market position since 1974. Technically, the site is built on Magento with a modern tech stack including RequireJS, jQuery, and integrations with marketing and analytics tools such as HubSpot, LinkedIn Insight, and New Relic. Security posture is solid with HTTPS enforced and domain protections in place, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with cookie consent mechanisms and comprehensive policies. Overall, the site demonstrates a professional and trustworthy online presence with extensive marketing and analytics capabilities.

W

Wittener Transport Kontor – Heinrich Stratmann GmbH

logistikeria.de

55

Wittener Transport Kontor – Heinrich Stratmann GmbH (WTK Stratmann) is a well-established, family-run logistics and special transport company based in Germany with a history dating back to 1953. The company operates multiple locations across Germany and has subsidiaries and joint ventures in the Czech Republic and Poland, offering comprehensive transport, warehousing, and distribution services. Their business model focuses on specialized transport solutions with a strong emphasis on safety, quality, and sustainability, supported by multiple certifications including ISO 9001, SQAS, HACCP, GMP+B4, and ISO 14001. The website reflects a professional and consistent brand image targeting business clients requiring specialized logistics services.

A

Aflac

aflac.com

73

Aflac is a leading supplemental insurance provider in the United States, offering a broad portfolio of insurance products including accident, cancer, critical illness, dental, life, Medicare supplement, pet, hospital, and disability insurance. The company targets individuals, families, business owners, brokers, and agents, positioning itself as a market leader in supplemental insurance coverage. The website reflects a mature, enterprise-level business with consistent branding, comprehensive product information, and clear segmentation for different customer types. Technically, the website employs modern web technologies such as jQuery, RequireJS, and asynchronous script loading, alongside integrations with analytics (Dynatrace, Tealium) and chatbot services (Sutherland AI, Pega). The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses best practices like asynchronous script loading and cookie consent mechanisms. However, explicit security headers (CSP, HSTS) are not evident, and no public security or incident response policies are found. The WHOIS data is unavailable, which is unusual but the website's professional presentation and legal disclosures support its legitimacy. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations including GDPR. Recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust further.

K

Klimaschutz- und Energieagentur Niedersachsen GmbH

klimaschutz-niedersachsen.de

55

Klimaschutz- und Energieagentur Niedersachsen GmbH operates as a regional competence center focused on climate protection, energy efficiency, and renewable energy initiatives within Lower Saxony, Germany. The agency provides informational resources, consulting services, and supports various stakeholders including municipalities, businesses, and societal groups. Their market position is that of an authoritative regional agency supported by the Lower Saxony Ministry for Environment, Energy and Climate Protection. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern JavaScript libraries such as jQuery, Foundation-sites, and AOS for animations, alongside RequireJS for module loading. It integrates Google Tag Manager for analytics and CookieFirst for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate public agency domain. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

S

Storm Bowling

stormbowling.com

62

Storm Bowling operates a professional e-commerce platform specializing in bowling equipment and accessories. The website showcases multiple brands and a wide product range targeting bowling enthusiasts. The business model is retail-focused with a medium-sized market presence. Technically, the site uses Magento CMS with modern JavaScript libraries and analytics tools, hosted on DigitalOcean infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced, but lacks visible security headers and privacy compliance mechanisms. WHOIS data is unavailable, which slightly impacts trust but the site content and branding appear legitimate. Overall, the site is functional and trustworthy for its business purpose but could improve privacy and security transparency.

PA Sports is a collaborative sports tourism organization representing 13 member destinations across Pennsylvania, aiming to attract and service quality sports events. The website is professionally designed, mobile-optimized, and uses modern web technologies including RequireJS, jQuery, and Google Tag Manager. The site employs HTTPS and a consent management platform to manage user privacy preferences. However, no explicit privacy policy or terms of service were found on the analyzed page, and no contact information is readily available. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency but does not necessarily indicate illegitimacy given the professional nature of the site. Overall, the website presents a good security posture with room for improvement in privacy compliance and domain registration transparency.

M

Ministrstvo za digitalno preobrazbo

eu-skladi.si

56

The website eu-skladi.si is an official Slovenian government portal managed by the Ministry for Digital Transformation, providing comprehensive information and services related to European Union funds and cohesion policy. It serves as a key resource for Slovenian businesses, public institutions, and citizens seeking funding opportunities, calls for proposals, and policy updates. The site is well-branded, consistent, and professionally maintained with clear navigation and relevant content tailored to its audience. Technically, it is built on the Plone CMS platform with modern frontend technologies such as jQuery, Foundation CSS, and Font Awesome, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent banner but no visible privacy policy page. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing trust and credibility. Overall, the site is trustworthy, safe, and serves its government function effectively.

R

Robert Bosch Stiftung

deutsches-schulportal.de

54

Deutsches Schulportal is a German educational platform affiliated with the Robert Bosch Stiftung, focusing on improving school quality through articles, dossiers, expert opinions, and events. The website serves educators, school leaders, and policymakers with rich, well-structured content and practical resources. Technically, the site is built on WordPress with modern SEO and performance optimizations, including WP Rocket and Yoast SEO, and integrates analytics and consent management tools. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and contact information are lacking. Overall, the site is professional, trustworthy, and well-positioned in the German education sector.

T

Technische Hochschule Ulm

hs-ulm.de

61

Technische Hochschule Ulm is a reputable German university of applied sciences focused on providing bachelor and master degree programs in technology, engineering, and energy sectors. The website serves as an information portal for prospective and current students, researchers, and staff, offering news, events, study programs, and support services. The university maintains a professional online presence with consistent branding and clear navigation. Technically, the site is built on Microsoft SharePoint with modern web technologies like Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. Security posture is solid with HTTPS and secure form handling, though explicit security policies and cookie consent mechanisms are lacking. Overall, the site is trustworthy and well-maintained, reflecting the institution's academic standing.