Security Directory

P

PERBILITY GmbH

concludis.de

52

PERBILITY GmbH operates the website www.mein-helix.de, offering enterprise-grade HR software solutions with a focus on high-volume recruiting through their product concludis. The company targets large organizations requiring efficient applicant management and seamless system integration. The website is professionally designed, multilingual (German and English), and provides comprehensive information about their services including onboarding, apprenticeship management, e-learning, and AI assistance. Technically, the site uses modern web technologies, including Matomo analytics and Leadinfo tracking, with hosting likely provided by Noris Network. Security posture is solid with HTTPS and CAPTCHA protections, though some improvements in security headers and incident response disclosures are recommended. Privacy compliance is mostly met with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-branded, and serves a specialized B2B market segment effectively.

P

PERBILITY GmbH

concludis.com

52

PERBILITY GmbH operates the website www.mein-helix.de, offering enterprise-grade HR software solutions with a focus on high-volume recruiting through their product concludis. The company targets large organizations and enterprises requiring efficient applicant management and seamless system integration. The website is professionally designed, content-rich, and provides clear pathways for engagement such as demo requests. Technically, the site employs modern tracking tools like Matomo and Leadinfo, uses Cloudflare Turnstile CAPTCHA for form security, and is hosted on reputable nameservers. Security posture is strong with HTTPS and security headers in place, though improvements can be made in cookie consent and explicit security policies. Overall, the site reflects a mature digital presence suitable for its market segment.

T

TFG-GRUPPE

tfg-gruppe.de

55

TFG-GRUPPE is a regional partnership of specialized wholesalers serving the civil engineering (Tiefbau) and industrial technology sectors in Germany. The company positions itself as a central partner offering a broad product range and digital services such as the TFG DigitalBox. The website is professionally designed using Drupal 10, with good navigation, mobile optimization, and structured content. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism powered by Usercentrics. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website reflects a mature digital presence supporting the company's regional market leadership.

M

MagicLine GmbH

magicline.com

74

MagicLine GmbH operates a comprehensive SaaS platform tailored for gym and fitness studio management, offering a wide range of features including lead management, training scheduling, payment processing, and integrations with industry partners. The company is positioned as a significant player in the fitness technology sector with over 8,000 customers worldwide and is a subsidiary of Sport Alliance GmbH. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and strong branding consistency. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager and StatusPal for status monitoring. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and a dedicated security problem reporting page, although some security headers could be improved. The absence of WHOIS data limits transparency but does not detract from the overall legitimacy of the business, which is supported by consistent business information, social media presence, and customer testimonials. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, MagicLine GmbH presents a mature digital presence with a strong market position in gym management software, supported by a robust technical infrastructure and a proactive approach to security and privacy.

G

GMK GmbH & Co. KG

gmk.de

55

GMK GmbH & Co. KG is a professional advertising agency based in Bayreuth, Germany, specializing in creative and strategic marketing services including corporate design, content creation, web development, online marketing, and brand building. The company serves a diverse clientele ranging from medium-sized businesses to global players, positioning itself as a full-service agency with a strong regional presence and multiple industry awards. Technically, the website is built on TYPO3 CMS with modern web technologies and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

SCIO

scio.cz

40

SCIO is a well-established Czech education services provider specializing in entrance exams, preparatory courses, and educational testing products for students and schools. With over 30 years of experience, SCIO holds a strong market position in the Czech education sector, offering a broad portfolio of services including national comparative exams for universities and secondary schools, as well as professional tools for educators. The website reflects a professional and user-friendly digital presence with clear navigation and comprehensive content tailored to its target audience of students, parents, and educational institutions. Technically, the site employs modern web technologies, including JavaScript, Google Tag Manager, and CookieHub for privacy compliance, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and professional presentation support legitimacy. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

G

Genoverband e.V.

genoverband.de

54

Genoverband e.V. is a well-established German cooperative association providing auditing, consulting, education, and advocacy services to approximately 2,600 member cooperatives across 14 federal states. The organization specializes in the legal form of registered cooperatives (eG) and offers a broad range of services including economic, tax, and legal advice. The website reflects a professional and comprehensive digital presence with detailed information about the association, its services, news updates, events, and multiple physical office locations. The target audience includes cooperative members, founders, banks, and political stakeholders. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for interactive elements, and it is well optimized for mobile devices with good accessibility and SEO practices. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

L

LifeWatch Belgium

lifewatch.be

59

LifeWatch Belgium is a well-established national research infrastructure supporting biodiversity and ecosystem research. It provides a broad range of scientific data services and collaborates within the European LifeWatch ERIC consortium. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. Privacy and cookie compliance are well implemented, reflecting GDPR adherence. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain registration is consistent and legitimate, registered with BELNET since 2009. Overall, the website presents a trustworthy and authoritative presence in its sector.

V

viacur – Gesellschaft für Interim Management

viacur.de

52

viacur – Gesellschaft für Interim Management is a specialized interim management company focused on the healthcare and social economy sectors in Germany. Their business model centers on providing expert interim managers to help organizations manage projects, processes, and vacancies efficiently, especially during challenging phases. The company emphasizes quality through a rigorous selection process and ongoing training of their experts. The website is professionally designed, built on TYPO3 CMS, and includes a consent management system to comply with privacy regulations. Technical infrastructure appears modern and well-maintained, with no blocking or WAF detected, and the site uses HTTPS with good security practices. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain and website present a trustworthy and professional digital presence with moderate to high security posture.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

empirische-bildungsforschung-bmbf.de

60

The website represents the official framework program for empirical educational research managed by the German Federal Ministry for Education, Family, Seniors, Women and Youth. It serves as a comprehensive informational platform targeting researchers, educators, policymakers, and the interested public, providing access to research priorities, events, publications, and related services. The site is well-branded with consistent government ministry logos and messaging, reinforcing its authoritative position in the education sector in Germany. Technically, the site employs a mature infrastructure including jQuery, Matomo analytics with explicit user consent, and a RedDot CMS backend. The hosting appears to be managed by government-affiliated providers, ensuring reliability and security. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics with opt-in consent. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced protection and transparency. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, making it a reliable resource for its target audience. Strategic improvements in security policy publication and header implementation could further strengthen its security posture.

B

beecode, s.r.o.

unizone.cz

45

Unizone is a specialized digital platform developed by beecode, s.r.o., targeting universities in the Czech Republic. It offers a comprehensive mobile application solution tailored to students, teachers, and university staff, consolidating study agendas, communication, safety alerts, alumni relations, and integration with existing university systems. The platform is well-established, operating since 2016 and deployed at seven Czech universities, supported by positive testimonials and industry awards. Technically, the website is built on modern frameworks like SvelteKit, optimized for mobile and desktop, and delivers a fast, accessible user experience. However, the absence of visible privacy and cookie policies, as well as security headers, indicates areas for compliance and security improvement. The WHOIS data is unavailable due to TLD restrictions, but the domain appears privacy protected, which is justified given the business context and GDPR requirements. Overall, the platform demonstrates strong business credibility and technical maturity with moderate security posture.

E

Ewobox

ewobox.sk

52

Ewobox is a Slovak environmental education portal established in 2019, offering a calendar of events, articles, a knowledge library, and certification information. It targets educators, organizations, and the general public interested in environmental topics within Slovakia. The website is built using modern web technologies including React and JavaScript modules, with a clean and consistent design optimized for mobile devices. Security posture is adequate with HTTPS enabled, though security headers and incident response details are lacking. Privacy and cookie policies are present and GDPR compliant, but no explicit consent mechanism is implemented. Overall, Ewobox presents a trustworthy and professional platform within its niche.

B

Bundesakademie für Kulturelle Bildung

bundesakademie.de

40

The Bundesakademie für Kulturelle Bildung is a prominent German institution specializing in practical professional development and continuing education in the field of cultural education. It offers a wide range of seminars, workshops, conferences, and projects aimed at professionals in arts, literature, music, theater, and museum sectors. The organization holds a strong market position as a leading provider in cultural education within Germany, targeting educators, artists, and cultural institutions. Technically, the website is built on TYPO3 CMS, a robust and widely used open-source content management system, hosted on German infrastructure with reliable DNS providers. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Social media integration is present via Juicer.io, enhancing engagement. From a security perspective, the site uses HTTPS and follows basic security best practices but lacks explicit security headers and publicly available security policies or incident response information. No cookie consent mechanism was detected, which may impact GDPR compliance. No vulnerabilities or suspicious patterns were found in the WHOIS data or site content. Overall, the website is professional, trustworthy, and content-rich, serving its educational mission effectively. Strategic improvements in privacy compliance and security transparency would further enhance its security posture and user trust.

M

Medevio

medevio.cz

61

Medevio is a Czech-based healthcare technology company providing an online platform designed to streamline communication and administrative tasks for medical practices. The platform targets doctors, nurses, clinics, and hospitals, offering services such as patient communication management, appointment scheduling, and integration with various ambulatory information systems. Medevio has established a solid market presence with nearly 2,000 medical professionals and over 600,000 patients using its services. The company offers tiered subscription plans and additional products like a digital call center and telephony services, supporting a SaaS business model. Technically, the website is well-constructed using modern web technologies, including Google Tag Manager and Plausible Analytics for tracking, and is hosted on AWS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security is a priority, evidenced by ISO 27001 certification and the use of HTTPS with cookie consent mechanisms. The contact methods primarily include a secure contact form and social media channels, with no direct emails or phone numbers publicly listed. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. However, the site could improve by adding explicit security headers and publishing a vulnerability disclosure policy. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, Medevio presents a trustworthy and professional digital footprint suitable for its healthcare audience. Strategically, Medevio should focus on enhancing transparency around incident response and vulnerability disclosure to further build trust. Continued investment in security best practices and user privacy will support its growth and reputation in the healthcare technology sector.

K

Kommission für Jugendmedienschutz (KJM)

kjm-online.de

52

The Kommission für Jugendmedienschutz (KJM) website serves as the official platform for Germany's central regulatory authority for youth media protection. It provides comprehensive information on their mandate, regulatory activities, publications, and complaint mechanisms. The site targets children, youth, guardians, educators, and media providers, positioning itself as a trusted government entity in the youth protection sector. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and employs modern web technologies with good mobile optimization and accessibility. Privacy is well respected with Matomo analytics configured to disable cookies and honor DoNotTrack. Security posture is solid with HTTPS and some security headers, though improvements are recommended in header policies and incident response visibility. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.

K

Kommission zur Ermittlung der Konzentration im Medienbereich (KEK)

kek-online.de

52

The Kommission zur Ermittlung der Konzentration im Medienbereich (KEK) is a German regulatory commission focused on ensuring media plurality and preventing concentration of opinion power among private television broadcasters. The website serves as an official platform providing transparency on media ownership, publishing concentration reports, and offering insights into media market developments. It targets regulators, media professionals, researchers, and the general public interested in media diversity. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and employs Matomo analytics configured with privacy considerations. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit policies could be improved. Contact information is clearly provided, including email, phone, and physical address. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.

I

Internet-ABC

internet-abc.de

46

Internet-ABC is a well-established German non-profit educational platform focused on promoting safe and responsible internet use among children, parents, and educators. The website offers a variety of learning modules, quizzes, news updates, and interactive features to engage its target audience effectively. It holds recognized trust certifications such as the Seitenstark Gütesiegel, reinforcing its credibility in the digital education sector. Technically, the site is built on TYPO3 CMS, leveraging modern web standards including responsive design, SVG graphics, and asynchronous JavaScript loading. The platform demonstrates good performance and accessibility, ensuring a positive user experience across devices. SEO practices are well implemented, supporting discoverability. From a security perspective, the site enforces HTTPS and employs secure form handling with anti-CSRF tokens. However, it lacks explicit security policies, incident response contacts, and enhanced security headers, which could be areas for improvement. Privacy compliance is strong with comprehensive privacy and cookie policies, though a cookie consent mechanism is not evident. Overall, Internet-ABC presents a low-risk profile with a strong focus on educational content and user trust. Strategic enhancements in security transparency and cookie consent would further solidify its position as a trusted resource for digital literacy.

D

Die Medienanstalten

die-medienanstalten.de

52

Die Medienanstalten is a German regulatory authority responsible for licensing and supervising private radio and television broadcasters, ensuring media diversity and freedom. The website is professionally designed using TYPO3 CMS and employs Matomo analytics with privacy-conscious settings. The organization maintains a strong market position as a central coordinator for media regulation in Germany, serving private broadcasters and the public. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security best practices, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is trustworthy, content-rich, and serves its regulatory mission effectively.

Euroflorist is a well-established European flower delivery service specializing in online sales of fresh flowers and gifts with a strong presence in Denmark. The company offers same-day delivery services domestically and international shipping to over 140 countries through a large network of florists. The website demonstrates a mature digital infrastructure built on modern frameworks such as Nuxt.js and Vue.js, providing a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data limits domain registration trust verification.

V

CleverFarm

virtualnifarma.cz

63

CleverFarm presents a technologically advanced virtual farm platform aimed at modernizing agricultural practices through digital innovation. The website offers interactive simulation and data-driven insights for precision farming, targeting farmers and agribusiness professionals. The platform emphasizes sustainability, telematics, and economic efficiency in agriculture. Technically, the site leverages Unity WebGL for immersive user experience, integrates Google Analytics for user tracking, and uses modern web fonts and SVG graphics. However, the absence of visible security headers and unclear SSL configuration indicate room for improvement in security posture. The lack of publicly available WHOIS data limits transparency but is likely due to privacy protections. Overall, the site is professional and content-rich but would benefit from enhanced privacy disclosures and security measures.

B

Brilo Team s.r.o.

brilo.team

51

Brilo Team s.r.o. is a Czech Republic based digital agency specializing in web development, e-commerce, marketing, and branding services. The company positions itself as a regional leader helping businesses succeed online with a focus on long-term value and client satisfaction. Their website is professionally designed, mobile optimized, and rich with client references and service descriptions, indicating a mature digital presence. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, Facebook Pixel, and other marketing tools, reflecting a well-integrated digital marketing infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit cookie consent and terms of service pages are missing. WHOIS data is unavailable due to privacy or query failure, but the website content and contact details support legitimacy. Overall, the site is trustworthy, professional, and well-positioned in its market segment.

D

Daimler Buses GmbH

omniplus-on.com

71

OMNIplus ON is a digital service platform operated by Daimler Buses GmbH, focused on providing comprehensive digital solutions for bus and coach fleet management. The platform offers services including fleet monitoring, driver support, procurement management, and data integration, positioning itself as a key enabler for bus and coach companies to optimize operations and vehicle availability. The website reflects a mature digital infrastructure with modern technologies such as React and Material-UI, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though some security headers could be improved. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, aligned with the Daimler brand.

Č

ČESMAD BOHEMIA, z.s.

cesmad.cz

61

ČESMAD BOHEMIA is a prominent association representing road transport companies in the Czech Republic, with a strong market position and extensive membership. The website serves as an information hub, offering services such as training, consulting, lobbying, and job placement through subsidiaries. Technically, the site uses modern web technologies and tracking tools with a consent mechanism, ensuring a moderate to good digital maturity level. Security posture is solid with HTTPS and basic best practices, though explicit security headers and policies are lacking. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

B

Boiron

boiron.com

71

Boiron is a globally recognized leader in homeopathic medicines, offering a range of healthcare solutions focused on personalized and respectful treatment. The website presents a professional and modern digital presence, utilizing contemporary web technologies such as Next.js and Google Tag Manager for analytics and marketing. The content is well-structured and targets patients and healthcare professionals worldwide, emphasizing safety and efficacy in homeopathy. However, the absence of publicly available WHOIS data raises questions about domain registration transparency. Security practices are adequate with HTTPS and cookie consent mechanisms, but the lack of explicit privacy policies and security headers suggests room for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.

S

Shell UK

shell.co.uk

72

Shell UK operates as a major energy and transportation company providing fuel, oils, loyalty rewards, electric vehicle charging, and food and drink services across the United Kingdom. The website reflects a strong corporate presence with comprehensive service offerings and customer engagement through Shell GO+ Rewards and Shell Recharge. The company maintains a large enterprise scale with a well-established market position as part of Shell plc. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and performance monitoring tools, ensuring a good user experience and mobile optimization. Security posture is robust with HTTPS, security headers, and privacy compliance mechanisms in place, including cookie consent and GDPR adherence. No critical vulnerabilities or suspicious patterns were detected, and the website demonstrates high professionalism and trustworthiness. Overall, the site is well-maintained, secure, and aligned with corporate standards.

S

Spreadshop

spod.com

63

Spreadshop operates a mature and well-established ecommerce print-on-demand platform branded as Spreadconnect, enabling merchants to create and sell custom merchandise integrated with major ecommerce platforms such as Shopify, WooCommerce, TikTok, and others. The platform emphasizes fast fulfillment, high-quality printing, and worldwide shipping, targeting both growing brands and seasoned sellers. The website demonstrates a high level of digital maturity with modern web technologies including React and Next.js, supported by Adobe Experience Manager for content delivery. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Privacy compliance is robust with comprehensive privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and extensive trust signals. Strategic recommendations include publishing security policies, adding vulnerability disclosure information, and enhancing direct contact options for security and data protection inquiries.

K

Koenigsegg Automotive AB

koenigsegg.com

70

Koenigsegg Automotive AB is a Swedish manufacturer specializing in high-performance hypercars and megacars, known for their in-house technological innovations and exclusivity. The company targets affluent automotive enthusiasts and collectors, maintaining a strong market position as a niche luxury brand. Their website reflects a professional and modern digital presence built on Drupal 9, optimized for performance and mobile devices, and hosted on Microsoft Azure CDN. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit incident response policies are recommended. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. The absence of WHOIS data slightly reduces trust but does not outweigh the overall professionalism and legitimacy of the site.

Č

ČESMAD BOHEMIA, z.s.

prodopravce.cz

61

ČESMAD BOHEMIA, z.s. is the largest association of road transport carriers in the Czech Republic, representing over 1,700 companies and nearly 25,000 vehicles. The organization provides a broad range of services including information dissemination, professional training, consulting, and operational support such as ferry reservations and toll payments. It holds a significant position in shaping transport legislation and industry standards in the region. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, it employs modern tracking tools like Google Tag Manager and Facebook Pixel with privacy-conscious consent settings. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and published policies. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

C

Cicero Design GmbH

cicerodesign.de

57

Cicero Design GmbH is a small, professional creative agency based in Lutherstadt Wittenberg, Germany, specializing in corporate design, brand development, and web design with their proprietary CMS called CIDEMOS. The company offers a full range of marketing services including print production and advertising technology, targeting businesses and brands across Germany. Their website demonstrates a strong market position with clear service offerings and a consistent brand image. Technically, the site is built on a custom CMS platform with modern web technologies, responsive design, and integration of Google Analytics and Google Maps, all managed with user privacy in mind through a cookie consent mechanism. Security posture is good with HTTPS and CSRF protections, though some security headers and explicit policies are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Semasio

semasio.com

66

Semasio is a technology company specializing in privacy-first advertising solutions that leverage semantic technology and real-time predictive targeting. Their platform offers a suite of products including audience targeting, audience extension, contextual targeting, and media activation services aimed at brands and agencies seeking efficient and privacy-compliant marketing strategies. The website demonstrates a modern, professional digital presence with clear messaging focused on data-driven advertising in a privacy-conscious environment. Technically, the site is built on Webflow CMS, uses Google Fonts, Google Tag Manager, and a Usercentrics consent management platform, indicating a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though the absence of explicit security headers and policies suggests room for improvement. The lack of WHOIS data reduces domain trust slightly, but overall the site appears legitimate and professionally maintained.

R

RWE Turcas Güney Elektrik Üretim A.Ş.

rwe-turcas.com

64

RWE Turcas Güney Elektrik Üretim A.Ş. is a joint venture between the German utility RWE AG and Turkish energy company Turcas, operating a large, efficient, and environmentally friendly gas-fired combined-cycle power plant in Denizli, Turkey. The company holds a significant market position supplying approximately 1.2% of Turkey's electricity and operates from multiple locations including Ankara, Istanbul, and Denizli. The website presents a professional and comprehensive overview of the business, its mission, and its operations, targeting stakeholders in the energy sector and the general public. Technically, the website uses modern web technologies including JavaScript, CSS, SVG, and UIkit framework, with integration of Google Tag Manager and Usercentrics for consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and reduces overall trustworthiness. Despite this, the website content and branding align with a legitimate corporate entity. Overall, the site is professional, secure, and compliant with privacy regulations, but the lack of WHOIS data and explicit security policies suggests areas for improvement to enhance trust and security posture.

R

RWE AG

rwe.asia

68

RWE AG is a major European energy company with a growing presence in China, focusing on renewable energy, energy trading, and technical advisory services. The website highlights its subsidiaries, RWE Supply & Trading (Shanghai) Co. Ltd. and RWE Technology International GmbH, emphasizing their roles in energy infrastructure and trading within China. The company targets industrial, commercial, and public sector clients, leveraging its extensive experience and global footprint. Technically, the website employs modern web technologies including jQuery, UIKit, and Usercentrics CMP for privacy compliance, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with RWE's corporate identity.

B

Begegnungszentrum Wittenberg West e.V.

nachbarschaftstreff.net

49

The website represents the Begegnungszentrum Wittenberg West e.V., a small non-profit organization operating the Nachbarschaftstreff in Wittenberg West, Germany. The organization focuses on fostering community engagement, social support, and intergenerational cooperation through various events and volunteer projects. The website provides comprehensive contact information, event details, and encourages community participation. Technically, the site is built on the CIDEMOS CMS platform, uses modern web technologies including SVG graphics and a Swiper.js slider, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place. Security-wise, HTTPS is enabled, but there is a lack of security headers and no published incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and contact details appear authentic and consistent with a local community organization. Overall, the site is functional, informative, and serves its target audience effectively, but could improve security posture and domain transparency.

L

Leben in Wittenberg

leben-in-wittenberg.de

46

Leben in Wittenberg is a professionally maintained city marketing website promoting the Lutherstadt Wittenberg region as a vibrant place to live, work, and visit. It targets residents, students, and prospective movers with comprehensive information on housing, culture, events, and local businesses. The site leverages modern web technologies including Craft CMS, Splide.js, and Alpine.js, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though explicit security policies are not published. Overall, the website demonstrates strong business credibility and compliance with GDPR, supported by clear contact information and partner endorsements.

R

RWE

rwe.com

69

RWE is a major global energy company with a strong focus on renewable energy and sustainability. With over 125 years of history, it has transformed into a leading supplier of clean, safe, and affordable electricity. The company operates a diversified portfolio including renewable energies such as solar, wind (onshore and offshore), hydrogen, battery storage, and bioenergy, alongside conventional energy sources. RWE also invests in energy transition projects and provides related services including energy trading and procurement portals. The website reflects a mature corporate presence with comprehensive information for investors, partners, and job seekers. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and structured navigation. The CMS appears to be Progress Sitefinity, supporting a robust content management environment. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure policies are not publicly visible, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and well-maintained, supporting RWE's market position as a leading energy supplier. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's credibility given the corporate branding and content quality.

N

Netsite A/S

netsite.dk

63

Netsite A/S is a Danish hosting provider established in 1998, specializing in domain registration, web hosting, DNS services, and email hosting with a strong focus on the Danish market. The company emphasizes stability, security, and customer satisfaction, offering products such as domain monitoring, WordPress hosting, and portfolio management. Their website reflects a professional and trustworthy business with clear contact channels and comprehensive service descriptions. Technically, the site uses modern web technologies including Bootstrap and Font Awesome, with responsive design and accessibility features ensuring a positive user experience across devices. Security posture is solid with HTTPS enforced, secure forms, and privacy-respecting cookie practices, although explicit security policies and incident response information are not published. The absence of WHOIS data limits transparency but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing detailed security and incident response policies and enhancing WHOIS transparency to improve trust further.

S

Socomec

socomec.fr

65

Socomec is a French-based manufacturer specializing in electrical equipment focused on the performance and safety of low voltage electrical networks. The company maintains a strong international presence with multiple country-specific domains and offers products and services tailored to industrial and commercial electrical network operators. The website is professionally designed using Drupal CMS and integrates modern analytics and marketing tools such as Piwik PRO and AB Tasty. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism in French. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data limits full domain trust verification but the website content and structure support legitimacy. Overall, Socomec presents a mature digital presence suitable for its industry and audience.

F

Festival Musica

festivalmusica.fr

48

Festival Musica is an international contemporary music festival based in Strasbourg, France, founded in 2019. The organization focuses on cultural event programming, ticket sales, and community engagement through various media including podcasts and a magazine. The website reflects a professional and consistent brand presence with strong ties to regional and national cultural institutions. Technically, the site uses modern frontend technologies such as Alpine.js and Livewire, hosted by OVH, and integrates privacy-respecting analytics via Fathom. Security posture is good with HTTPS enforced and CSRF protections, though some security headers and explicit privacy mechanisms are missing. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site is trustworthy, well-designed, and serves a general audience interested in contemporary music and culture.

L

Lutherstadt Wittenberg Marketing GmbH

wittenberger-reformationsfest.de

47

The Wittenberger Reformationsfest website is a professionally designed and well-structured platform promoting the 2025 cultural festival in Wittenberg, Germany. It provides comprehensive event information, including schedules, locations, and highlights, targeting visitors interested in historical and religious celebrations. The site is managed by Lutherstadt Wittenberg Marketing GmbH, a small government-related marketing entity. Technically, the site uses modern web technologies including Craft CMS, Splide.js for sliders, and Alpine.js for interactivity, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, with verified contact details and active social media presence.

É

Électricité de Strasbourg

es.fr

63

Électricité de Strasbourg (ÉS) is a regional energy provider serving the Alsace region in France, offering electricity and gas contracts, energy efficiency services, photovoltaic solutions, and green energy offers. The website is professionally designed using Drupal CMS and integrates privacy-conscious analytics (Matomo) and cookie consent mechanisms. Security posture is strong with HTTPS and some security headers, though explicit privacy and terms of service pages are missing. WHOIS data is unavailable, which slightly reduces trust but the website content and domain usage indicate a legitimate business. Overall, the site provides a good user experience with clear navigation and relevant content for its target audience.

P

PICO

pico-interactive.com

62

PICO is a leading virtual reality company specializing in all-in-one VR headsets and immersive interactive experiences. Founded in 2015, PICO has established a strong market presence, particularly in China and globally, offering a range of consumer and enterprise VR products. Their business model includes hardware sales, software platforms, developer support, and community engagement, targeting both end consumers and enterprise clients. The website reflects a mature digital presence with comprehensive product information, localized content, and active marketing efforts. Technically, the website is built on modern frameworks such as React and leverages advanced analytics and marketing tools including Google Analytics, TikTok Pixel, and Facebook Pixel. The hosting infrastructure appears to be managed by ByteDance-related services, ensuring fast performance and good mobile optimization. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, PICO's website demonstrates a high level of professionalism, security, and privacy compliance, supporting its position as a reputable VR technology provider. Strategic recommendations include enhancing transparency around security policies, incident response, and vulnerability disclosure to further strengthen trust and compliance.

F

Festival Musica

festivalmusica.org

48

Festival Musica is an established international contemporary music festival based in Strasbourg, France, founded in 2019. It offers a rich program of events including concerts, podcasts, articles, and community engagement activities. The festival targets a general audience interested in contemporary music and cultural experiences. The website reflects a professional and consistent brand image supported by official cultural partners and regional sponsors. Technically, the site uses modern web technologies such as Alpine.js, Livewire, and Tailwind CSS, hosted by OVH, ensuring fast performance and excellent mobile optimization. Security practices include HTTPS enforcement and CSRF protection, though explicit cookie consent and privacy policy details could be improved. Overall, the site is trustworthy and well-maintained, with a strong social media presence and clear business legitimacy.

D

Digital Scholar

zotero.org

64

Zotero is a reputable open source research management tool developed by the non-profit organization Digital Scholar. It provides free software to help researchers collect, organize, cite, and share research materials. The website reflects a mature, well-branded project with a clear focus on academic users and collaboration. Technically, the site uses modern web technologies including Bootstrap 4, JavaScript frameworks, and supports multiple platforms including desktop and mobile. The site is fast, mobile-optimized, and accessible with a professional design and clear navigation. Security posture is strong with HTTPS enforced and session authentication, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is good with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. WHOIS data is unavailable due to malformed response, but domain expiry date indicates active registration. Overall, Zotero presents a trustworthy and professional online presence aligned with its mission as a non-profit academic tool.

S

Studierendenwerk Bielefeld

studierendenwerk-bielefeld.de

45

Studierendenwerk Bielefeld is a regional public service organization providing essential student services including canteen (Mensa) operations, BAföG financial aid, student housing, and childcare in Bielefeld and surrounding cities such as Detmold, Höxter, Lemgo, and Minden. The website is professionally designed using TYPO3 CMS and optimized with Yoast SEO, targeting students and stakeholders in the education sector. Contact information is clearly presented, and the site offers detailed menus and news updates relevant to its audience. Technically, the site employs modern web technologies including SVG graphics and deferred JavaScript loading, ensuring good mobile responsiveness and accessibility. However, some security best practices such as explicit security headers and cookie consent mechanisms are not evident. The site uses HTTPS, which is a critical security feature. From a security perspective, the website shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response information suggests room for improvement in transparency and preparedness. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is trustworthy and serves its educational mission effectively. Strategic improvements in security headers, privacy consent, and vulnerability disclosure would enhance its compliance and security posture further.

T

Temesis

temesis.com

58

Temesis is a French consulting and training company specializing in digital accessibility, eco-design, and GDPR compliance. Positioned as a niche expert in responsible digital services, Temesis offers consulting, auditing, and training to organizations aiming to improve the inclusivity and environmental impact of their digital services. The company is part of the Ctrl-a group and holds the Qualiopi certification for training quality. The website is professionally designed, mobile-optimized, and accessible, reflecting the company's expertise in accessibility and responsible digital practices. Technically, the site is built using the Hugo static site generator, ensuring fast performance and modern web standards. However, no CMS or hosting provider details are evident, and no analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security posture is moderate; while HTTPS is implied by the URL, no security headers or explicit security policies are found. The absence of privacy and cookie policies is a notable gap in compliance. WHOIS data is unavailable, which raises questions about domain registration legitimacy, though the website content and business information appear professional and trustworthy. Overall, Temesis presents a strong business and technical profile with room for improvement in privacy compliance and security transparency.

P

Prodigi Group Ltd

prodigi.com

61

Prodigi Group Ltd operates a leading global print on demand dropshipping platform, offering businesses and individuals access to a vast catalogue of customizable products through an easy-to-use online platform and API. The company integrates with major ecommerce platforms such as Shopify, Etsy, Wix, WooCommerce, and BigCommerce, enabling seamless order automation and fulfillment. Their business model focuses on local printing with global dropshipping, emphasizing eco-friendly practices and sustainability. The website reflects a mature digital presence with comprehensive product offerings, strong branding, and customer testimonials, positioning Prodigi as a trusted player in the print on demand industry. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Mixpanel, and Segment, and uses responsive design with Tailwind CSS for excellent mobile optimization. The platform dashboard is hosted on a subdomain, indicating a structured service architecture. Performance is moderate with good SEO and accessibility features, supporting a positive user experience. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of explicit security headers and a public security policy or incident response contact suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by verified contact emails, professional content, and trust signals such as Fine Art Trade Guild approval and reputable client logos. Overall, Prodigi presents a professional, secure, and privacy-conscious platform suitable for its target audience. The main risk area is the lack of publicly available WHOIS data, which may be due to privacy protection but warrants monitoring. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen trust and compliance.

T

Techmania Science Center

techmania.cz

63

Techmania Science Center is a well-established interactive science and educational center located in the Czech Republic, founded in 2006. The website presents a professional and comprehensive digital presence showcasing their interactive exhibits, 3D planetarium, science shows, and educational workshops. The business targets families, schools, and science enthusiasts, positioning itself as a regional leader in science education and entertainment. Technically, the website employs modern web technologies including JavaScript, Bootstrap, Google reCAPTCHA, and Cookiebot for consent management, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and session management cookies, though some security headers could be improved. Privacy compliance is strong with a clear GDPR-compliant privacy and cookie policy and active consent mechanisms. Overall, the website is trustworthy, well-maintained, and suitable for its audience.

K

KYOCERA Document Solutions

kyoceradocumentsolutions.cz

57

KYOCERA Document Solutions Czech Republic operates a professional website offering document management and business optimization solutions targeted at Czech businesses. The site is well-branded and uses modern technologies such as Adobe Experience Manager and Google reCAPTCHA, indicating a mature digital infrastructure. However, the absence of WHOIS data and lack of visible contact or privacy policies reduce overall trust and compliance posture. Security measures like reCAPTCHA are in place, but security headers and SSL configuration details are not visible, suggesting room for improvement. Overall, the website presents a credible business front but would benefit from enhanced transparency and compliance documentation.

D

Diplomeo

diplomeo.com

70

Diplomeo is a well-established French educational orientation platform founded in 2011, serving over 300,000 students annually. It specializes in helping users find suitable diplomas, schools, and career paths in France. The platform offers comprehensive services including diploma and school searches, career guidance, event listings, and school reviews, positioning itself as a market leader in educational orientation within France. Technically, the website employs modern web technologies such as Turbo Frames and StimulusJS, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy or terms of service pages detected. Overall, the website is professional, trustworthy, and content-rich, though improvements in security and privacy transparency are recommended.