Security Directory

D

Deutscher Fachverband High School e.V.

dfh.org

49

The Deutscher Fachverband High School e.V. (DFH) is a well-established German non-profit association founded in 2003, representing 13 leading student exchange organizations focused on quality assurance. The website serves as an informational and advisory platform for students, parents, and exchange organizations, offering scholarship information, quality guidelines, and member details. The organization holds a strong market position within the German education sector for international high school exchange programs. Technically, the website is built on WordPress with the Genesis Framework and uses common plugins like Yoast SEO and Contact Form 7, indicating a moderate to good digital maturity level. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, supporting its business credibility effectively.

The Bundesverband führender Schulfahrtenveranstalter e.V. is a German educational association serving as the umbrella organization for leading school trip and educational travel providers in Germany. The website presents the association's mission to support schools and educators by offering professionally organized school trips that comply with legal requirements and provide pedagogical value aligned with educational curricula. The association emphasizes safety, quality, and educational content, positioning itself as a trusted partner for schools across Germany. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and FontAwesome, ensuring responsive design and good user experience across devices. The site is well-structured with clear navigation and relevant content, although no CMS or hosting provider details are evident. Performance is moderate with no major technical issues detected. However, the site lacks explicit cookie consent mechanisms and visible security headers, which are areas for improvement. From a security perspective, the site appears secure with no visible vulnerabilities or exposed sensitive data. The use of HTTPS is assumed but not explicitly confirmed. The absence of incident response contacts or vulnerability disclosure policies suggests room for enhancing security transparency and readiness. The WHOIS data is minimal but consistent with a legitimate domain, supporting the trustworthiness of the site. Overall, the website is professional, trustworthy, and well-suited for its educational audience. Strategic improvements in privacy compliance and security policies would further strengthen its posture and user trust.

B

Bundesverband Deutscher Omnibusunternehmen (bdo) e. V.

bdo.org

49

The Bundesverband Deutscher Omnibusunternehmen (bdo) e. V. is the leading national association representing private and medium-sized bus companies in Germany. It advocates for the interests of the bus industry in public transport, tourism, and long-distance bus services. The website reflects a professional and well-structured digital presence, offering industry news, events, publications, and campaigns targeted at stakeholders and members of the bus sector. The organization maintains a strong market position as the peak body for the German bus industry. Technically, the website is built on Concrete CMS 9.3.9 with modern frontend technologies including Bootstrap, jQuery, and Matomo analytics configured with privacy-respecting settings such as DoNotTrack and disabled cookies. The site is mobile-optimized and offers good accessibility and SEO features. No blocking or WAF mechanisms were detected, allowing full content access. From a security perspective, the site uses HTTPS with good SSL configuration and privacy-conscious analytics. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The WHOIS data is unavailable due to a malformed query response, which limits domain trust verification but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and professional image suitable for its industry audience. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance further.

B

Bundesverband der Deutschen Incoming-Unternehmen e.V.

bvdiu.org

56

The Bundesverband der Deutschen Incoming-Unternehmen e.V. (BVDIU) is a German non-profit association representing incoming tourism companies and Destination Management Companies (DMCs) based in Germany. The organization focuses on promoting Germany as a destination for incoming tourism, providing networking, support, and representation for its members. The website is professionally designed using the Jimdo CMS platform and includes clear navigation, multilingual support, and relevant content about the association and incoming tourism in Germany. Contact information and social media links are prominently displayed, enhancing business credibility. Technically, the website employs standard web technologies including jQuery, Font Awesome, and YouTube APIs, with a moderate performance profile and basic mobile optimization. The site uses HTTPS and implements a GDPR-compliant cookie consent mechanism, reflecting a reasonable privacy posture. However, no advanced security headers were detected, and no explicit security or incident response policies are published. From a security perspective, the site is generally secure with HTTPS enabled and cookie consent in place, but it lacks visible security headers and public vulnerability disclosure information. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and contact details appear consistent with a legitimate German association. Overall, the site presents a trustworthy and professional image suitable for its non-profit business model, with recommendations to enhance security headers, publish security policies, and improve mobile and accessibility features to further strengthen its digital maturity and security posture.

B

Bundesverband der Gästeführer in Deutschland e. V.

bvgd.org

49

The Bundesverband der Gästeführer in Deutschland e. V. (BVGD) is a professional association representing tour guides across Germany. Founded in 1994, it serves as a national umbrella organization for over 250 local and regional associations, representing approximately 7,600 certified and qualified tour guides. The BVGD is active in tourism policy at both the federal and European levels and is a member of several relevant international and national tourism organizations. The website provides information about the association, its services, qualification programs, and member resources, targeting professional tour guides and tourism stakeholders in Germany. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for interactivity, and Matomo for privacy-focused analytics. The site is well-structured with clear navigation and mobile optimization, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security and compliance perspective, the site does not expose sensitive data and uses a privacy-conscious analytics platform. However, the absence of explicit privacy and cookie policies and security headers represents a compliance gap, especially under GDPR. The WHOIS data is privacy protected or unavailable, which is common for non-commercial entities but limits domain trust verification. Overall, the site appears legitimate and professional with moderate risk. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers to enhance protection against common web attacks, and providing clear incident response contact information. These steps will improve compliance, security posture, and user trust, supporting the BVGD's role as a reputable professional association.

B

BundesForum Kinder- und Jugendreisen – Das Forum für Kinder- und Jugendreisen in Deutschland

bundesforum.de

57

BundesForum Kinder- und Jugendreisen is a German forum dedicated to children and youth travel, serving as a community and information platform. The website is built on WordPress using the Colibri theme and several modern JavaScript libraries, indicating a moderate level of digital maturity. The site is accessible via HTTPS and includes social media integration with Facebook and Instagram. However, it lacks visible privacy and cookie policies, contact information, and advanced security headers, which are important for compliance and trust. Overall, the security posture is moderate but could be improved with better policy disclosures and security practices.

M

My Gruau

mygruau.com

56

My Gruau is an e-commerce platform specializing in the sale of spare parts for vehicles transformed by Groupe Gruau, targeting businesses and individuals in France. The website is built on the PrestaShop CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and Doofinder for search functionality. The site offers a professional design with good navigation and mobile optimization, providing users with product catalogs, guides, and account creation features. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure trustworthiness. Security posture is moderate with HTTPS enabled but lacks explicit security headers and comprehensive privacy and cookie policies. Overall, the platform serves as a functional and professional e-commerce site but would benefit from enhanced security and compliance measures.

L

Learnster AB

learnster.com

72

Learnster AB is a Swedish company specializing in Learning Management Systems (LMS) and AI-powered adaptive learning tools designed to orchestrate knowledge for businesses. Their platform targets organizations aiming to enhance employee, customer, and partner knowledge through a modern, scalable solution. The company holds ISO 27001:2022 certification, underscoring its commitment to security and compliance. With over 200 customers and multiple industry recognitions, Learnster positions itself as a trusted partner in the education technology sector. Technically, the website is built on HubSpot CMS, leveraging modern JavaScript libraries and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Intercom. The site is mobile-optimized, well-structured, and provides a professional user experience. Security posture is strong with HTTPS enforced and publicly available GDPR and security policies, although explicit security headers could be improved. The WHOIS data is unavailable or protected, which slightly reduces transparency but does not detract significantly from the overall trustworthiness given the strong business and security indicators on the site. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, Learnster demonstrates a mature digital presence with a solid security foundation and clear business focus. Strategic recommendations include enhancing security headers, publishing an incident response policy, and improving WHOIS transparency to further strengthen trust and compliance.

D

dm drogerie markt

dm-dual.sk

50

dm-dual.sk is a Slovak website promoting dual education programs offered by dm drogerie markt, a well-known retail company. The site targets students interested in combining study with practical work experience in retail. It provides detailed information about study programs, application processes, and showcases testimonials and social media engagement. The business model focuses on education and workforce development within the retail sector, positioning itself as a key player in dual education in Slovakia. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, Google Analytics, and CookieYes for cookie consent management. The site is mobile-optimized with good SEO practices and a moderate performance profile. Accessibility is basic but functional. The site is served over HTTPS with no detected blocking or WAF interference, ensuring secure and reliable access. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with detailed categories and user controls. However, it lacks visible security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The use of third-party scripts is standard but should be regularly audited. Overall, the security posture is solid but could be improved with additional published policies and security headers. Overall, dm-dual.sk presents a trustworthy and professional online presence for dm drogerie markt's dual education initiative. It effectively balances user experience, privacy compliance, and business credibility. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party script security to further strengthen the site's security and compliance posture.

H

HIGH5

highfive.co.uk

70

HIGH5 is an established UK-based sports nutrition brand with over 29 years of experience, offering a range of hydration tablets, energy gels, powdered drinks, and bars. The company targets athletes and fitness enthusiasts, positioning itself as a scientifically formulated and professional brand tested by professionals. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrating multiple marketing and analytics tools such as Google Analytics, Hotjar, Klaviyo, and Trustpilot to enhance customer engagement and trust. The site demonstrates good digital maturity with a responsive design, cookie consent compliance, and a consistent brand presentation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the website reflects a professional and trustworthy e-commerce operation with room for improvement in security transparency and contact information availability.

O

On Your Bike

onyourbike.com

67

On Your Bike is a local retail bicycle shop established in 1983, serving cyclists primarily in London, Birmingham, and East Grinstead. The business focuses on selling quality bike brands and providing bicycle servicing, positioning itself as a trusted local bicycle shop. The website reflects a small-sized retail business with a clear target audience of cyclists in these UK cities. Technically, the website employs modern web technologies such as Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and FontAwesome for icons. The site appears to be moderately optimized for mobile and SEO, with a good design and user experience. However, there is a lack of visible privacy, cookie, and terms of service policies, which impacts privacy compliance and trustworthiness. Security-wise, the site uses HTTPS and some bot protection but lacks visible security headers and detailed security policies, which lowers its security posture score. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration consistency, although the website content and business information appear genuine. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and domain registration transparency.

V

Vitamin Well AB

vitaminwell.com

70

Vitamin Well AB operates a professional and well-branded website offering vitamin-enriched beverages positioned as healthier alternatives to traditional sodas and juices. The company targets health-conscious consumers and athletes with product ranges including Original, Sport, and Zero. The website is built on WordPress with modern front-end technologies and provides a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are present and indicate GDPR compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be added for improvement. The absence of WHOIS data limits domain trust assessment, but the overall digital presence supports legitimacy. No critical vulnerabilities or suspicious content were detected.

N

NF Fleet

nffleet.fi

53

NF Fleet is a Finnish leasing and mobility service provider affiliated with Nordea Finance and Ayvens. The company offers a broad range of leasing solutions for both businesses and private individuals, emphasizing responsible and innovative mobility options including electric vehicle charging and full insurance services. The website reflects a mature business with a domain age of nearly 20 years, consistent with its established market presence. The site is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. Technically, it is built on WordPress with modern plugins and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the website demonstrates high business credibility and trustworthiness with transparent WHOIS data and official contact information.

A

Autorité des marchés financiers

amf-france.org

72

The Autorité des marchés financiers (AMF) is the French financial markets regulatory authority responsible for protecting savings, informing investors, and ensuring the proper functioning of financial markets. The website serves as a comprehensive portal offering regulatory information, news, sanctions, and resources for both professionals and the general public. It holds a strong market position as a key government entity in the finance sector in France. Technically, the website is built on Drupal CMS with modern JavaScript libraries and includes cookie consent management tools. It is mobile-optimized, accessible, and performs moderately well. The site uses HTTPS with good SSL configuration and employs some security best practices, although explicit security headers are not fully confirmed. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. However, WHOIS data is unavailable or malformed, which limits domain registration verification and slightly impacts trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its regulatory and informational role effectively. Strategic recommendations include enhancing security header implementation, improving incident response visibility, and publishing vulnerability disclosure information to further strengthen security and trust.

J

JazzHR

jazzhr.com

79

JazzHR is a technology company specializing in applicant tracking and recruiting software tailored for small to medium-sized businesses. Their platform streamlines hiring processes, enabling companies to find and hire talent efficiently. Positioned as a best-in-class ATS, JazzHR leverages a SaaS business model with a focus on user-friendly, scalable recruitment solutions. The website reflects a mature digital presence with comprehensive content, strong branding, and clear market positioning. Technically, the site is built on WordPress with integrations of modern analytics and marketing tools such as New Relic, Marketo, and Plausible Analytics, indicating a robust infrastructure and commitment to performance and user experience. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit security policies and incident response contacts are not publicly detailed. Overall, JazzHR presents a professional, trustworthy online presence with moderate risk due to missing WHOIS data, which should be monitored.

S

Sisäministeriö

intermin.fi

51

The website represents the Finnish Ministry of the Interior (Sisäministeriö), a key government entity responsible for internal security, including police, rescue services, border control, immigration, and national security. The site serves as an authoritative information portal targeting Finnish citizens, government officials, and stakeholders interested in internal security policies and services. It is well-established with a domain age dating back to 1991, reflecting its longstanding governmental role. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as React and Clay UI, ensuring a responsive and accessible user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, with comprehensive metadata and multilingual support. Hosting appears to be managed by Finnish government infrastructure, ensuring reliability and compliance. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data. However, DNSSEC is not implemented, and some advanced security headers could be added to enhance protection. No security blocking or WAF challenges were detected, indicating open and stable access. Privacy policies and cookie information are clearly presented, aligning with GDPR requirements. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance suitable for a government ministry. It effectively balances user experience, technical robustness, and security, making it a reliable source of information for its audience.

H

Händlerbund Management AG

haendlerbund.de

71

Händlerbund Management AG is a leading German legal service provider specializing in e-commerce compliance, offering a comprehensive suite of services including legal texts, legal advice, and support against warnings. The company serves over 92,000 online presences, positioning itself as a trusted partner for online retailers. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as HubSpot Analytics, Google Tag Manager, and Visual Website Optimizer, ensuring a robust digital presence with good performance and mobile optimization. Security-wise, the site enforces HTTPS, employs consent management for cookies, and integrates secure forms via HubSpot, though explicit security headers could be enhanced. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

B

Business Services von easyCredit

easycredit-ratenkauf.de

52

Business Services von easyCredit operates as a payment service provider specializing in flexible installment and invoice payment solutions for merchants across online shops, point of sale, and direct sales channels. The company is positioned as a market leader in installment payment services, supported by recognized certifications and strong partner networks. Their offerings include a merchant portal, marketing materials, developer resources, and integration plugins for popular e-commerce platforms. Technically, the website is built on WordPress with modern optimization and consent management tools, ensuring a fast, mobile-optimized, and SEO-friendly experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business claims, indicating a trustworthy and legitimate operation.

J

JTL-Software GmbH

jtl-software.de

72

JTL-Software GmbH is a leading German provider of ERP and e-commerce software solutions, serving over 50,000 online retailers. Their product suite includes ERP systems (JTL-Wawi), online shop systems (JTL-Shop), warehouse management (JTL-WMS), and marketplace integrations, positioning them as a comprehensive e-commerce ecosystem provider. The company targets online merchants seeking flexible, scalable software to manage sales, inventory, and logistics efficiently. Technically, the website is built on WordPress with modern frameworks and integrates multiple marketing and analytics tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, well-optimized for SEO and mobile, and compliant with GDPR and cookie regulations.

R

Retail Rocket

retailrocket.cl

66

Retail Rocket is a technology company specializing in e-commerce marketing automation and customer retention solutions. Their platform offers AI-driven personalization, campaign management, and customer intelligence tools designed to increase sales and customer lifetime value. The company targets medium to large enterprises across various sectors including e-commerce, banking, insurance, and SaaS, with a strong presence in Latin America and multiple international regional sites. The website is professionally designed, content-rich, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking technologies such as Google Tag Manager, reCAPTCHA, and LinkedIn Insight Tag. The platform uses Retail Rocket's own tracking and personalization scripts, indicating a well-integrated tech stack. Performance and mobile optimization are good, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Security posture is solid with HTTPS enforced and anti-spam measures in place, but lacks explicit security policy and incident response information. No critical vulnerabilities or suspicious patterns were detected. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, Retail Rocket's website demonstrates a strong business credibility and technical maturity, with minor recommendations to enhance security headers and publish security policies to further improve trust and compliance.

R

Retail Rocket

retailrocket.es

67

Retail Rocket is a Spain-based technology company specializing in retention management and marketing automation platforms for e-commerce and other industries. Their platform leverages AI and big data to personalize customer experiences, increase lifetime value, and automate omnichannel marketing campaigns. The company has a strong market presence with over 1,600 clients worldwide and multiple international localized websites. Technically, the website is built on WordPress with modern marketing and analytics integrations, including Google Analytics, Tag Manager, Optimize, and LinkedIn Insight Tag. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and incident response policies are not publicly documented. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the website is professional, well-structured, and trustworthy, supporting Retail Rocket's position as a credible SaaS provider in the marketing technology space.

D

Der Bund der Selbständigen Deutschland e.V.

bund-der-selbstaendigen.de

64

Der Bund der Selbständigen Deutschland e.V. is a German non-profit association representing the interests of self-employed individuals and small to medium enterprises across 11 federal states. The organization acts as an umbrella body advocating for its members in federal and state politics, providing networking and support services. The website is built on WordPress using the Elementor page builder and Astra theme, reflecting a modern and maintainable technical infrastructure. While the site is accessible and well-structured with good content quality and navigation, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers. User tracking is implemented via Trackboxx, indicating moderate user data collection. Overall, the website is legitimate and professional but could improve in privacy compliance and security best practices.

A

asr Allianz Selbständiger Reiseunternehmen Bundesverband e.V.

asr-berlin.de

58

The asr Allianz Selbständiger Reiseunternehmen Bundesverband e.V. is a well-established German non-profit trade association representing medium-sized independent travel companies including travel agencies, tour operators, and service providers. The organization focuses on political advocacy, networking, consulting, and training to support the tourism industry’s medium-sized enterprises. With over 3,500 member companies and active participation in federal tourism advisory boards, the asr holds a strong market position within the German tourism sector. The website reflects this professionalism with clear navigation, relevant content, and a consistent brand presence.

E

Etisk Handel Norge

etiskhandel.no

51

Etisk Handel Norge operates as Norway's leading network of businesses, organizations, and public entities committed to promoting sustainable and ethical supply chains. Established in 2001, the organization provides membership benefits, training, certification guidance, and project collaboration to ensure responsible international trade practices that respect human and labor rights as well as environmental stewardship. The website reflects a professional and consistent brand presence targeting Nordic stakeholders interested in sustainability and corporate responsibility. Technically, the website is built on WordPress using Elementor and several Jet plugins, supported by modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized with good SEO practices and moderate performance. Hosting appears to leverage CDN services for optimization. From a security perspective, the site enforces HTTPS with a strong SSL configuration and uses standard security practices, though explicit security headers and policies are not fully implemented. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found in the analyzed content. Overall, Etisk Handel Norge's website demonstrates a mature digital presence with strong business credibility and a solid security posture. Enhancements in privacy documentation and security policy transparency would further strengthen trust and compliance.

A

ASICS LDNX

ldnx.co.uk

54

ASICS LDNX is a UK-based event organization specializing in a new 10k running challenge held in Wembley, London. The website presents a professional and well-branded digital presence, targeting runners and sports enthusiasts. It leverages partnerships with recognized brands such as ASICS and integrates social media and event updates effectively. The business model focuses on event promotion, participant engagement, and volunteer coordination. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, cookie consent, and bot management, though explicit security headers and incident response contacts could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

D

Dragon Ride

dragonride.co.uk

56

Dragon Ride is a well-established UK-based cycling sportive event organizer, hosting one of the most iconic and challenging sportive rides in the UK. The website presents a professional and comprehensive digital presence, targeting cycling enthusiasts and participants with detailed event information, training advice, and charity fundraising opportunities. The technical infrastructure is built on WordPress with modern plugins and integrations, including Google Analytics, Tag Manager, and CookieYes for privacy compliance. Security posture is strong with HTTPS, security headers, and bot management in place, though no explicit security policy or incident response information is published. Overall, the site demonstrates good privacy compliance and user experience, with clear navigation and rich multimedia content. However, the WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness. Strategic recommendations include publishing a security policy, adding vulnerability disclosure mechanisms, and continuous monitoring of third-party scripts.

M

Manchester Marathon

manchestermarathon.co.uk

56

Manchester Marathon is a UK-based event organizer specializing in marathon and half marathon races, positioning itself as the UK's second largest marathon event. The website provides detailed event information and participant engagement features, supported by a modern technical infrastructure built on WordPress with integrations such as Google Analytics, Facebook Pixel, Hotjar, and CookieYes for consent management. The site demonstrates good digital maturity with responsive design, SEO optimization, and user-friendly navigation. Security posture is solid with HTTPS enforcement and cookie consent compliance, though improvements in security headers and explicit contact information are recommended. The WHOIS data is unavailable due to domain naming restrictions, but the website's professional presentation and active content indicate legitimacy. Overall, the site is well-maintained and trustworthy, serving a general audience interested in marathon events.

C

Cancer Research UK

londonwinterrun.co.uk

53

The Cancer Research UK London Winter Run website serves as the official platform for a large-scale annual 10k running event supporting cancer research. The event is positioned as the UK's most popular 10k run, attracting a broad audience of runners and fundraisers. The website effectively communicates event details, fundraising opportunities, and community engagement, leveraging strong branding aligned with Cancer Research UK. Technically, the site is built on WordPress with modern plugins and integrates Google Tag Manager and Cloudflare services, ensuring a robust digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though additional security headers could enhance protection. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site reflects a professional, trustworthy, and user-friendly platform supporting a reputable non-profit event.

A

A.S.O. UK

manchesterhalfmarathon.com

59

A.S.O. UK is a UK-based event organizer specializing in sporting events such as marathons, runs, triathlons, and cycling events. The website presents a professional and consistent brand image with clear navigation and relevant content targeting sports participants and enthusiasts in the UK. The business model focuses on event organization and management, with additional opportunities for volunteers and event crew recruitment. The company appears to be newly established in 2024, with a small organizational size and no parent or subsidiary companies identified. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, Google Tag Manager, and several plugins for forms and media display. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Hosting is inferred to be through 123-Reg Limited, consistent with the registrar information. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed with clear privacy and cookie policies, and Google Analytics is used with consent mechanisms denying ad and analytics storage by default. Overall, the website is safe, professional, and trustworthy with no adult or explicit content. The domain registration details align well with the website's business claims, supporting legitimacy. Recommendations include enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies to enhance trust and security posture.

C

CookieCode

cookiecode.nl

72

CookieCode is a Dutch company specializing in providing GDPR/AVG compliance solutions for websites, primarily through a partner-based business model targeting website builders, ICT companies, and marketing agencies. Their key services include tailored cookie banners, detailed cookie declarations, customized privacy statements, and ongoing maintenance and monitoring. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a good level of digital maturity. Technically, the site leverages modern frameworks such as Bootstrap and integrates multiple marketing and analytics tools including Google Analytics, HubSpot, and Elfsight widgets. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site demonstrates a high level of trustworthiness and compliance with privacy regulations.

6

6tematik

6tematik.fr

57

6tematik is a French digital agency specializing in transformation and digital solutions including ecommerce platforms, web development, SEO/SEA, mobile applications, and cloud hosting. The company positions itself as an independent expert agency with a strong client base and a comprehensive service offering tailored to businesses and organizations seeking digital transformation. The website demonstrates a mature digital infrastructure using Concrete CMS, JavaScript libraries, Google Tag Manager, and Matomo analytics, with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though explicit security headers and incident response information are not publicly disclosed. Overall, the site is professional, well-branded, and trustworthy, though WHOIS data is unavailable, likely due to privacy protection.

M

modified eCommerce Shopsoftware

modified-shop.org

62

modified eCommerce Shopsoftware is a German-based open source e-commerce platform offering a GPL-licensed shop system that is free to use and highly customizable. It targets online merchants and developers seeking a flexible and community-supported solution. The platform is supported by a strong developer community and offers professional support and premium modules/templates for enhanced functionality. The website demonstrates a mature digital presence with modern technologies such as PHP 8, responsive design, and integration with major payment and shipping partners like PayPal, Klarna, and DHL. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the lack of publicly available WHOIS registration data and absence of explicit security policies or incident response information slightly reduce trustworthiness from a security perspective. Overall, the platform is well-positioned in the e-commerce software market with a solid technical foundation and active community engagement.

U

United Nations Environment Programme

unep.org

63

The United Nations Environment Programme (UNEP) is a globally recognized authority on environmental issues, operating as a key program under the United Nations. The website reflects UNEP's mission to address climate change, biodiversity, pollution, and sustainable development through comprehensive programs and advocacy. It targets a broad audience including governments, NGOs, and the general public worldwide. The site is well-branded, professionally designed, and offers multilingual support, enhancing its global reach. Technically, the website is built on Drupal 10, leveraging modern web technologies such as asynchronous script loading, Google Tag Manager, and Facebook SDK for enhanced user engagement and analytics. The site demonstrates good performance, mobile optimization, and accessibility features, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reputable third-party scripts responsibly. However, it lacks explicit security headers and a public security policy or vulnerability disclosure page, which are recommended for further strengthening its security posture. The WHOIS data is incomplete, which slightly reduces confidence in domain registration transparency but does not detract from the site's legitimacy given its strong UN affiliation and trust signals. Overall, UNEP's website is a high-quality, trustworthy platform that effectively supports its mission. Strategic improvements in security transparency and WHOIS data completeness would further enhance its credibility and resilience.

Å

Ålands landskapsregering/Ålands polismyndighet

polisen.ax

54

The website polisen.ax serves as the official online presence of the Åland Police Authority, a government entity responsible for law enforcement and public safety in the Åland region. The site provides comprehensive information on police services including crime reporting, permit applications, public safety announcements, and contact details. It targets residents and visitors of Åland, offering content primarily in Swedish. The business model is a government service portal, with a clear market position as the authoritative source for police-related information in the region. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and FontAwesome. It demonstrates good mobile optimization, accessibility, and SEO practices. The hosting environment appears stable with Finnish nameservers, and the site enforces HTTPS, ensuring secure communications. From a security perspective, the site shows a strong posture with HTTPS enabled, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly visible and could be improved. No vulnerability disclosure or security.txt files are present, which could enhance transparency and incident response readiness. Overall, polisen.ax is a trustworthy, well-maintained government website with a strong alignment between WHOIS registration data and website content. It provides valuable public services with a professional and secure online presence. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and maintaining regular audits of third-party scripts to sustain security and compliance.

P

Poliisiammattikorkeakoulu

poliisimuseo.fi

51

Poliisimuseo.fi is the official website of the Finnish Police Museum, operated by the Poliisiammattikorkeakoulu (Police University College). The museum provides free access to police history exhibitions, educational content, and virtual tours, targeting families and the general public. The website is well-structured, multilingual, and professionally maintained, reflecting its government affiliation and cultural mission. Technically, it is built on the Liferay CMS platform with modern JavaScript libraries and offers good mobile responsiveness and accessibility features. Security posture is strong with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the website content, confirming legitimacy and trustworthiness.

P

Poliisiammattikorkeakoulu

polamk.fi

51

Poliisiammattikorkeakoulu is the Finnish Police University College, providing comprehensive police education, research, and development services. It serves as the national authority for police training, offering bachelor's and master's level degrees, continuing education, and specialized courses for police and security professionals. The institution is government-affiliated and well-established since 2008, with a strong presence in Tampere, Finland. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies including React, jQuery, Bootstrap, and Clay UI components. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting appears to be managed through Finnish providers, with secure HTTPS connections and no visible security vulnerabilities. Security posture is solid with HTTPS enforced and no exposed sensitive data. However, explicit security headers and a public security policy or incident response contacts are not evident, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the business entity it represents. It poses low risk and serves its audience effectively, though enhancements in security transparency and incident response readiness would further strengthen its posture.

LIFULL Connect is a prominent global digital marketplaces group specializing in vertical search portals and transaction-based sites across homes, jobs, and cars sectors. The company aggregates millions of ads from thousands of websites, providing users with a streamlined and efficient search experience. Their extensive portfolio includes well-known brands such as Trovit, Mitula, Nestoria, and Dot Property, serving a significant global audience with over 180 million visits per month. Technically, the website is built on WordPress with modern plugins like WPBakery Page Builder and LayerSlider, leveraging Google Analytics and reCAPTCHA for analytics and security. The site employs HTTPS with strong security headers and a cookie consent mechanism, reflecting a mature digital infrastructure. Mobile optimization and SEO practices are good, though accessibility could be improved. From a security perspective, the site demonstrates good practices including HTTPS enforcement, security headers, and bot protection. However, it lacks publicly available security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-positioned in its market. The absence of WHOIS data reduces transparency but does not significantly detract from the site's credibility. Strategic improvements in security policy transparency and direct contact information would further strengthen its security posture and business credibility.

Ritzaus Bureau A/S is a well-established Danish news agency founded in 1998, providing fast and reliable news services. The website serves as a professional platform for news distribution and media content, targeting a general audience interested in current events. The company maintains a strong market position in the Danish media sector, supported by consistent branding and high-quality content. Technically, the website is built on WordPress with integrations of Gravity Forms, Matomo Analytics, HubSpot, and Cookiebot for marketing and compliance purposes. The infrastructure is hosted via One.com with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected, suggesting room for improvement. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. No contact emails or phone numbers were explicitly found in the homepage HTML, which may limit direct user contact options. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with recommendations to enhance security headers and publish a vulnerability disclosure policy for improved transparency.

V

Varsam Försäkring

varsamforsakring.se

60

Varsam Försäkring is a Swedish insurance company specializing in personal and recreational insurance products. Recently integrated into Gjensidige, a leading Nordic insurer with over 200 years of experience, Varsam combines local personalized service with the strength of a large parent company. The company emphasizes direct telephone-based customer service and offers a mobile app for customer convenience. The website is professionally designed using Squarespace, featuring clear navigation, contact information with staff photos, and social media integration. Technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is generally good with HTTPS enforced, but lacks HSTS headers and explicit security policy pages. Privacy compliance is supported by a GDPR-compliant cookie banner and privacy policy page. WHOIS data for the queried subdomain is missing, which limits domain trust verification, but the business affiliation and website content support legitimacy. Overall, the website is well-structured, secure, and trustworthy with room for improvement in security headers and policy transparency.

S

Svenska Sjö

svenskasjo.se

45

Svenska Sjö is a specialized insurance provider focusing on boat insurance in Sweden, owned by members of several of the country's largest boat clubs. The company offers competitive premiums, claims handling, and membership benefits such as discounts and profit sharing. Their market position is that of a niche specialist with a strong community ownership model. Technically, the website is built on WordPress with modern optimization tools like NitroPack and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is performant, mobile-optimized, and well-structured, though it lacks explicit privacy and security policies. Security posture is good with HTTPS enforced but could be improved by enabling DNSSEC and adding explicit security headers. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

Ritzaus Bureau A/S is a well-established Danish news agency founded in 1998, providing fast and reliable news services to media professionals and the general public. The website reflects a strong market position with high-quality content and consistent branding. Technically, the site is built on WordPress with integrations of popular analytics and marketing tools such as Matomo, HubSpot, and Google Tag Manager, supported by a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and domain registration stable, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Sygmat is a French company specializing in the distribution and servicing of heavy machinery for lifting, construction, and industrial handling, notably as the exclusive distributor of Sennebogen equipment in France. The website presents a professional and well-structured digital presence with clear product and application offerings targeted at businesses in construction, port handling, and industrial sectors. The company is part of Groupe Vincent, which is referenced in legal and partner links. Technically, the website uses established but somewhat dated technologies such as Bootstrap 3 and jQuery, with Google Analytics integrated for user tracking. The site is mobile responsive and offers a good user experience with clear navigation and relevant content.

A

Atelier Bruno

atelier-bruno.fr

50

Atelier Bruno is a French company specializing in vehicle branding, signage, and adhesive printing services since 1988. The company offers comprehensive in-house design, production, and installation services targeting businesses seeking to promote their image through mobile and static advertising media. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as an established local player in the transportation and manufacturing sectors. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and hosted on a CDN for fast performance. It is mobile-optimized with good accessibility and SEO practices. Google Analytics is integrated via Google Tag Manager for user tracking, although privacy compliance could be improved with cookie consent mechanisms. Security posture is generally good with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of published security policies or incident response contacts are areas for improvement. The missing WHOIS data reduces domain trustworthiness and should be investigated to confirm domain registration legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing privacy compliance, implementing security headers, and verifying domain registration details to strengthen trust and security posture.

PRESTO GmbH & Co KG is a medium-sized German manufacturing company specializing in industrial waste compactors and recycling technology. Their website reflects a professional and comprehensive presentation of their products and services, targeting industrial and commercial clients seeking efficient waste management solutions. The company emphasizes innovation, cost savings, and customer service through consulting, production, installation, and maintenance offerings. Technically, the website is built on the Contao CMS platform using modern libraries such as jQuery and Bootstrap, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS, CSRF protection, captcha on forms, and a cookie consent mechanism, though some security headers could be improved. The WHOIS data is privacy protected, which is common and justified for this business type, but limits domain ownership transparency. Overall, the site is trustworthy, GDPR compliant, and professionally maintained.

P

Poliisihallitus

poliisi.fi

55

Poliisihallitus operates the official Finnish Police website, providing comprehensive public safety, permit, and crime reporting services to the Finnish population. The website serves as a critical government portal with a strong market position as the national law enforcement authority. It offers key services including passport and ID card applications, crime reporting, and online service access. The technical infrastructure is built on a modern CMS platform (Liferay) with a mature tech stack including React and jQuery, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and no evident vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR adherence. Overall, the site demonstrates high business credibility and trustworthiness consistent with a government entity.

C

Cloud Software Group, Inc.

cloud.com

78

Cloud Software Group, Inc. is a prominent enterprise software provider specializing in virtualization, integration, data management, automation, business intelligence, collaboration, networking, and security solutions. The company consolidates several well-known software brands including Citrix, TIBCO, Jaspersoft, NetScaler, ibi, Spotfire, and XenServer, positioning itself as a leader in the enterprise infrastructure software market. Founded in 2022 and headquartered in Fort Lauderdale, Florida, the company targets large enterprises requiring mission-critical software solutions. The website infrastructure leverages Adobe Experience Manager CMS, integrates modern analytics and consent management tools such as Google Analytics, LinkedIn Insight, and TrustArc, and is hosted on a performant Akamai CDN platform. The site demonstrates good mobile optimization, SEO practices, and accessibility features, reflecting a mature digital presence. However, some security best practices like explicit security headers and published incident response policies are absent. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data for the domain www.cloud.com raises concerns about domain registration legitimacy. This discrepancy suggests either privacy protection or an unregistered domain, which should be verified to ensure trustworthiness. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Cloud Software Group presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.

U

United Nations Environment Programme

unenvironment.org

63

The United Nations Environment Programme (UNEP) is a globally recognized authority on environmental issues, operating under the United Nations umbrella. The website serves as a comprehensive platform for environmental programs focusing on climate action, nature conservation, pollution control, and sustainable development. It targets a broad audience including governments, NGOs, civil society, and the general public. UNEP holds a strong market position as a leading international environmental organization with extensive partnerships and a clear mission. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery, Font Awesome, Google Tag Manager, and Facebook SDK. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure reflects a mature digital presence suitable for a large international organization. From a security perspective, the site enforces HTTPS and uses modern libraries without exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response information, which are recommended for enhanced security posture. Privacy and cookie policies are present and comprehensive, indicating good compliance with GDPR and related regulations. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security transparency and technical optimization. The incomplete WHOIS data does not detract significantly from the site's legitimacy given its strong UN affiliation and consistent branding.

E

Employ, Inc.

employinc.com

80

Employ, Inc. is a prominent technology company specializing in AI-powered hiring solutions and applicant tracking systems. As the parent company of well-known ATS platforms such as JazzHR, Lever, and Jobvite, Employ positions itself as a leader in the recruitment technology space, offering adaptable and intelligent hiring tools to enterprises and HR professionals. The website reflects a mature digital presence with comprehensive content, clear branding, and a focus on AI integration in hiring workflows. Technically, the website is built on WordPress with modern plugins and integrations including Google Tag Manager, Google Analytics, and CookieYes for consent management. The site demonstrates good performance, mobile optimization, and accessibility, supported by structured data for SEO and rich metadata. Security practices include HTTPS enforcement and cookie consent mechanisms, although explicit security headers and vulnerability disclosure policies are not evident. From a security standpoint, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data suggests privacy protection, which is common for commercial entities, though it slightly reduces transparency. Overall, the site is trustworthy, professional, and compliant with privacy regulations such as GDPR. Strategically, Employ should enhance its security posture by implementing recommended HTTP security headers, publishing a security policy, and establishing a vulnerability disclosure program. These steps will strengthen trust and compliance while supporting its enterprise market position.

T

Trade and Development Bank

tdbgroup.org

57

Trade and Development Bank (TDB) is a well-established multilateral development financial institution founded in 1985, focusing on advancing sustainable regional growth and integration in Eastern and Southern Africa. The bank offers a range of financial services including trade finance, project and infrastructure finance, asset management, and environmental and social management systems. It holds a strong market position supported by multiple international awards and recognitions, targeting governments, corporates, investors, and development partners. The website reflects a professional and comprehensive digital presence with detailed business and investor information.