Security Directory

H

Handelsverband Bayern e.V.

hv-bayern.de

63

Handelsverband Bayern e.V. (HBE) is a prominent Bavarian retail trade association representing approximately 60,000 businesses and 330,000 employees, making it a key player in Bavaria's retail sector. The website serves as a comprehensive portal offering legal, economic, educational, environmental, and insurance services tailored to retail businesses. It features active news updates, event calendars, and member services, reflecting a well-established organization with strong regional influence. Technically, the site is built on Weblication CMS, employs eTracker for analytics, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, targeting Bavarian retail businesses effectively.

B

Bundesverband der Dienstleister für Online Anbieter BDOA e.V.

bdoa.de

43

BDOA e.V. is a German non-profit association dedicated to digital education and services, operating since 2003. It serves professionals and organizations interested in digital transformation, offering specialized working groups, events, and cooperative initiatives to promote digital literacy and competence. The website reflects a mature organization with a clear focus on education and advocacy in the digital domain. Technically, the site is built on WordPress with modern plugins for SEO, user experience, and compliance, hosted on Cloudpit infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, serving its niche audience effectively.

S

SmartCom GmbH

smartcom.de

40

SmartCom GmbH is a German-based company specializing in hyperpersonalized dialog marketing solutions leveraging programmatic printing and e-mailing technologies. Their services enable businesses to deliver highly targeted 1:1 marketing campaigns with relevant content at optimal times, enhancing customer engagement and conversion rates. The company positions itself as a specialized provider in the marketing technology sector, targeting businesses seeking advanced personalization in their customer communications. Technically, the website is built on WordPress using the Blocksy theme and integrates modern plugins such as Yoast SEO and Matomo Analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Multimedia content including videos and client logos enhance the user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, which are areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

S

SHI GmbH

shi-gmbh.com

49

SHI GmbH is a German-based company specializing in strategic consulting, custom software development, implementation, training, and support services. Established in 1996, it serves business clients primarily in Germany, positioning itself as a specialized provider in the technology sector. The website reflects a professional business model focused on delivering tailored IT solutions and consulting services. Technically, the site is built on WordPress using the Astra theme, hosted by Hetzner Online GmbH, a reputable German hosting provider. The site employs modern web technologies including jQuery and FontAwesome, and integrates marketing and analytics tools such as Google Tag Manager and Hotjar. Security-wise, the website uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies. Cookie consent is implemented via the Borlabs Cookie plugin, indicating some level of privacy compliance, though no dedicated privacy policy or terms of service pages were found. Overall, the site is well-structured, mobile-optimized, and professionally designed, but could improve transparency and security posture by adding privacy and security policies and enhancing security headers.

D&G-Software GmbH is a German software company specializing in ERP and Warenwirtschaft solutions tailored for shipping, online, and omnichannel retailers. Their flagship product, the D&G-Versandhaus-System VS/4, offers modular, scalable ERP capabilities that integrate multiple sales channels and automate business processes. With over 35 years of experience and more than 340 customers, the company holds a strong market position supported by multiple awards and TÜV SÜD certification. Technically, the website is built on the Websale V8s platform, utilizing modern JavaScript libraries such as jQuery, Bootstrap, Flickity, and Slick for UI components. The site is mobile-optimized, SEO-friendly, and includes structured data for enhanced search engine understanding. Security practices include HTTPS enforcement, CSRF protection on forms, and a comprehensive cookie consent mechanism, though security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests room for maturity. Privacy compliance is well addressed with clear GDPR-aligned policies and user consent mechanisms. Overall, the website and business demonstrate high professionalism, trustworthiness, and technical competence, making it a reliable partner for retail ERP solutions.

A

Automattic, Inc.

underscores.me

48

Underscores.me is a website offering a starter theme for WordPress developers, maintained by Automattic, Inc., a reputable company in the WordPress ecosystem. The site provides a minimal, well-structured theme framework designed for developers to build custom WordPress themes efficiently. The business model is open source and community-driven, targeting WordPress theme developers globally. The website is technically built on WordPress CMS with modern web technologies including HTML5, CSS3, JavaScript, and jQuery, and uses WordPress.com nameservers for hosting. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the website enforces HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and Google Analytics is installed but not configured, indicating minimal user tracking. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The domain WHOIS data is consistent with the business, showing a long-standing registration by Automattic, Inc., supporting the legitimacy of the site. Overall, the website is safe, professional, and trustworthy, with a strong business credibility and technical foundation. However, it would benefit from improved privacy compliance, security headers, and transparency regarding data protection and incident response. These enhancements would strengthen the site's security posture and regulatory compliance, aligning with best practices for modern web services.

D

D’Ieteren Automotive SA/NV

skoda.be

71

The website nl.skoda.be serves as the official online presence for Škoda in Belgium, operated by D’Ieteren Automotive SA/NV. It provides comprehensive information about Škoda's vehicle lineup, including electric models, leasing options, fleet services, and aftersales support. The site targets both individual consumers and professional clients in Belgium, offering tools such as a car configurator and test drive requests. The brand's market position is strong, supported by consistent branding and official social media channels. Technically, the website employs a modern technology stack including React and Bootstrap, hosted on Azure CDN infrastructure. It demonstrates good digital maturity with responsive design, SEO optimization, and structured data markup. Security measures are robust, featuring HTTPS, security headers, and secure script loading, although explicit security policy and incident response information are not publicly available. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain's WHOIS data is restricted due to DNS Belgium policies, but the domain's legitimacy is supported by its association with the official Škoda brand and D’Ieteren Group. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include publishing a dedicated security policy, enhancing accessibility, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

V

Volkswagen Bedrijfswagens

werkenbijvolkswagenbedrijfswagens.nl

60

Volkswagen Bedrijfswagens operates a specialized recruitment website targeting job seekers interested in commercial vehicle roles within the Volkswagen group in the Netherlands. The site offers job listings, candidate registration, and employer information, leveraging official Volkswagen branding and partnerships with Pon and AutomotiveVacaturebank.nl. Technically, the site uses a mature stack with jQuery and Bootstrap, is mobile optimized, and implements cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

Š

Škoda

werkenbijskoda.nl

60

The website www.werkenbijskoda.nl serves as a specialized job portal focused on Škoda automotive dealership vacancies within the Netherlands. It is operated by AutomotiveVacaturebank.nl and VRT Media B.V., under the parent company Pon. The platform offers job listings, search functionalities, and candidate/employer portals tailored to the automotive sector, specifically Škoda dealers. The site is well-branded with official Škoda logos and links to verified social media channels, reinforcing its authenticity and market position as a niche recruitment platform. Technically, the site employs a modern JavaScript stack including jQuery and Bootstrap, with a CMS likely based on Concrete5. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content.

S

SEAT

werkenbijseat.nl

60

The website www.werkenbijseat.nl serves as a dedicated recruitment portal for SEAT automotive dealers in the Netherlands, offering a variety of job vacancies primarily targeting automotive professionals such as mechanics, service advisors, and salespersons. The platform is well-branded with SEAT and Pon affiliations, indicating a strong market position within the automotive recruitment niche. The site provides job search functionalities with filters by category, region, and function, supporting user engagement and candidate registration. Technically, the site employs a traditional web stack with jQuery plugins and Bootstrap, likely running on Concrete5 CMS, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure login forms, but lacks advanced security headers and visible incident response policies. Privacy compliance is basic with cookie consent implemented and a privacy policy present, though GDPR compliance details are minimal. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

A

Audi Nederland

werkenbijaudi.nl

52

The website www.werkenbijaudi.nl serves as a professional recruitment platform dedicated to Audi and its dealer network in the Netherlands. It offers job listings, candidate registration, and employer information primarily targeting automotive sector job seekers. The site reflects Audi's brand values and is operated in partnership with AutomotiveVacaturebank.nl and VRT Media B.V., under the umbrella of Pon, a major automotive group. The content is well-structured, localized in Dutch, and optimized for user experience and SEO. Technically, the site employs a mature tech stack including jQuery, Bootstrap, and Slick Carousel, with a CMS likely based on Concrete5. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious content were detected, and the site maintains a high trust level with consistent WHOIS data and official branding.

V

Van den Udenhout

udenhout.nl

64

Van den Udenhout is a well-established automotive dealership in the Netherlands, specializing in Volkswagen, Audi, SEAT, Škoda, CUPRA, and Volkswagen commercial vehicles. The company holds a strong market position as one of the largest official brand dealers in the country, targeting Dutch consumers and commercial clients seeking new vehicles. The website reflects a professional business model focused on vehicle sales and related services. Technically, the site is built on Wenetic CMS and leverages modern web technologies including Google Tag Manager, Cookiebot for cookie consent, and multiple marketing and analytics tools. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS with DNSSEC enabled and employs Cookiebot for GDPR compliance, but lacks explicit security headers and published security policies. No privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Overall, the website is professional and trustworthy, with room for improvement in transparency and security documentation.

A

Automotive Vacaturebank

vrtmedia.nl

60

Automotive Vacaturebank is a specialized online job board focused on the automotive sector in the Netherlands, offering a comprehensive platform for job seekers and employers. It holds a strong market position as the largest automotive vacancy bank in the country, providing services such as job listings, CV placement, email alerts, and an employer network. The website is professionally designed with good content quality and consistent branding, targeting automotive professionals and companies. Technically, the site uses a custom CMS with common JavaScript libraries and tracking tools like Google Analytics, Hotjar, and Google Tag Manager. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is adequate with HTTPS enforced and secure login forms, but lacks advanced security headers and public incident response information. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though GDPR-specific details are basic. Overall, the domain registration is consistent and trustworthy, with no signs of suspicious activity. The site integrates with multiple partner domains in the automotive recruitment ecosystem, enhancing its business credibility.

A

Automotive Vacaturebank

automotivevacaturebank.nl

61

Automotive Vacaturebank is a specialized online job board focused on the automotive sector in the Netherlands, positioning itself as the largest automotive vacancy platform in the country. The website offers job listings, CV placement, email alerts, and an employer network, targeting job seekers and employers within the automotive industry. The business model revolves around providing a comprehensive recruitment platform tailored to automotive professionals and companies. Technically, the site uses a custom CMS with a jQuery-based frontend, integrating popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile-optimized and features a cookie consent mechanism, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and secure login forms but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the domain registration data aligns well with the website's business claims, supporting its legitimacy.

E

European Association for Cardio-Thoracic Surgery (EACTS)

eacts.org

64

The European Association for Cardio-Thoracic Surgery (EACTS) operates a comprehensive and professionally designed website serving the global cardiothoracic surgical community. The organization focuses on improving patient outcomes through education, research, publications, and community engagement. The website reflects a mature digital presence with extensive content including upcoming courses, clinical guidelines, and news updates. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple tracking and marketing tools while maintaining GDPR compliance through a robust cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism and trustworthiness, supporting its role as a leading healthcare association.

C

CETEx

cetex.org

50

CETEx is a specialized research center affiliated with the London School of Economics, focusing on enabling sustainable, inclusive, and resilient economic and financial system transitions across Europe. The organization produces research, policy analysis, publications, and hosts events targeting policymakers, researchers, and financial institutions. The website reflects a professional and academic tone with a clear market position in the finance and government sectors. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, optimized for mobile and SEO, and uses privacy-respecting analytics (Plausible). Security posture is good with HTTPS enabled and domain protections in place, but lacks some advanced security headers and explicit public security policies. Privacy compliance is strong regarding privacy policy presence but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-branded, and professionally maintained.

W

Wholegrain Digital

wholegraindigital.com

68

Wholegrain Digital is a London-based digital agency specializing in sustainable WordPress website design and development. Established around 2020, the company positions itself as a leader in digital sustainability, combining technical expertise with a commitment to environmental responsibility. Their services include digital strategy, UI/UX design, front-end development, WordPress CMS development, and web performance optimization. The agency serves businesses and non-profits aiming for efficient, low-carbon digital solutions. The website reflects a mature digital infrastructure with modern technologies and strong SEO and accessibility practices. Security posture is good with HTTPS and secure coding practices, though explicit security headers and cookie consent mechanisms are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by visible certifications, client logos, and media mentions. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

Euroland operates as a small finance-focused service provider specializing in investor relations and stock portal services. The website targets investors and shareholders, offering access to IR services and a stock portal platform. The business appears niche with a moderate market position in the finance sector, primarily serving Swedish clientele as indicated by the default country code and company name. Technically, the website uses standard web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, but lacks advanced frameworks or CMS detection. The site is moderately optimized for mobile and performance but has basic SEO and accessibility features. Security posture is limited, with no visible HTTPS enforcement or security headers, though Google reCAPTCHA is implemented to protect forms. The absence of WHOIS registration data is a significant concern, impacting trust and legitimacy. Privacy and cookie policies are missing, and no incident response or vulnerability disclosure mechanisms are evident. Overall, the site is functional but requires improvements in security, compliance, and transparency to enhance trustworthiness and professional standing.

Mittdekkhotell AS operates a leading tire storage and wheel change service chain in Norway, offering services including tire storage (dekkhotell), tire and rim sales, and customer loyalty programs. The company targets private vehicle owners seeking convenient and secure tire management solutions. The website reflects a professional and consistent brand presence with multiple physical locations and a customer portal for service management. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and tracking tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS enforcement and security headers, though the absence of published security policies and incident response information is noted. The lack of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and contact information.

Š

Škoda Norge

skoda.no

69

Škoda Norge operates as the official Norwegian website for the Škoda automotive brand, focusing on providing comprehensive information about their current vehicle models, especially electric vehicles like the Elroq and Enyaq series. The site targets Norwegian consumers interested in purchasing or learning about Škoda vehicles, offering tools such as car configurators, test drive bookings, and dealer locators. Technically, the website employs modern web technologies including React, Bootstrap, and Azure CDN hosting, ensuring a responsive and professional user experience. Analytics and marketing are managed through Google Tag Manager and Adobe Target, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies in the scanned content, which are areas for improvement. The domain WHOIS data is not publicly available, suggesting privacy protection, which is common and justified for corporate domains. Overall, the website presents a trustworthy and professional brand presence with moderate technical and security maturity.

C

Cookie Info Script

cookieinfoscript.com

62

Cookie Info Script is a small technology service providing a free, lightweight JavaScript solution to help websites comply with the EU Cookie Law. The website offers easy-to-use cookie consent banners with customization options, targeting website owners and developers who need to meet regulatory requirements without programming expertise. The business operates on a free service model supported by advertising and donations, positioning itself as a niche player in the cookie compliance market. Technically, the site uses modern web technologies including jQuery, Google Fonts, Google Tag Manager, and analytics services such as Google Analytics and Yandex Metrica. Hosting is provided via Amazon Web Services with Cloudflare CDN, ensuring good performance and security. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is solid with HTTPS enforced and a cookie consent mechanism implemented, though some security headers and explicit security policies are absent. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR compliance clearly indicated. Overall, the domain registration is legitimate and consistent with the business history, enhancing trustworthiness.

S

Software & Support Media GmbH

mad-summit.de

56

MAD Summit is a specialized event organizer focusing on developer experience, API design, software design, and modernization workshops primarily in Germany. The company, Software & Support Media GmbH, positions itself as a niche provider of high-quality training events targeting developers, engineers, CTOs, and tech enthusiasts. The website reflects a professional and consistent brand image with clear calls to action for event registration and detailed program information. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS, reCAPTCHA protection, and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site demonstrates good digital maturity and compliance with privacy regulations. No critical vulnerabilities or suspicious indicators were found, making it a trustworthy platform for its audience.

S

Software & Support Media GmbH

entwickler-konferenz.de

62

The website entwickler-konferenz.de represents EKON 29, a specialized developer conference focused on Delphi programming, organized by Software & Support Media GmbH. The event is scheduled for October 27-29, 2025 in Düsseldorf, Germany, targeting developers and technology professionals interested in Delphi. The site provides detailed event information, ticket offers, and session details, positioning itself as a niche leader in the Delphi developer community. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted behind Cloudflare for performance and security. Security measures include HTTPS, Google reCAPTCHA for forms, and a comprehensive cookie consent mechanism, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent management. Overall, the site is professional, trustworthy, and well-structured, with room for enhancements in security policy transparency and terms of service documentation.

S

Software & Support Media GmbH

software-architecture-summit.de

60

Software & Support Media GmbH operates the Software Architecture Summit, a professional event focused on modern software architecture training and bootcamps held in Berlin and München. The website presents a well-structured, professionally designed platform targeting developers, engineers, and technology enthusiasts. It leverages WordPress CMS with advanced SEO and cookie consent mechanisms, ensuring GDPR compliance and a positive user experience. The technical infrastructure includes modern libraries and integrations such as Google Analytics, Facebook Pixel, and Google Tag Manager, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with transparent privacy practices and clear business information.

G

Global Insight Conferences Ltd

theemailconference.com

64

Global Insight Conferences Ltd operates the Advanced Email Conference website, providing specialized conferences focused on email marketing in the UK and Europe. The company positions itself as a leading independent organizer with over 14 years of market presence, targeting brand-side email marketing professionals. The website is content-rich, professionally designed, and optimized for user experience and SEO. Technically, it leverages WordPress with Elementor, integrates Google Analytics and HubSpot for marketing and analytics, and implements a comprehensive cookie consent mechanism. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS domain registration data is a notable concern that requires verification to confirm domain legitimacy. Overall, the site demonstrates strong business credibility and privacy compliance, but would benefit from enhanced transparency around security policies and incident response.

I

ibi research GmbH

ecommerce-tag.de

56

The ecommerce-tag.de website represents a professional event platform organized by ibi research GmbH, focusing on the E-Commerce-Tag Regensburg 2025. It serves as a central hub for digital commerce stakeholders including retailers, manufacturers, and service providers, offering detailed event schedules, speaker profiles, and sponsorship opportunities. The site demonstrates a mature digital presence with modern web technologies such as Bootstrap, Google Analytics, and Google Maps API integrated for enhanced user experience and functionality. The content is rich, well-structured, and targeted towards a German-speaking audience interested in e-commerce trends and innovations. Technically, the site is hosted on INWX nameservers, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms aligned with GDPR requirements. While some security headers are not explicitly detected, the site follows best practices like IP anonymization in analytics and opt-in cookie consent. No critical vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns well with the website's business purpose, indicating a consistent and legitimate domain registration. Overall, the security posture is solid but could be improved by adding explicit security policies and headers. The privacy compliance is good with a comprehensive privacy policy and cookie consent. The business credibility is high, supported by professional content, detailed speaker information, and reputable sponsors. The site is safe for general audiences with no adult or questionable content detected.

B

BVDW – Bundesverband Digitale Wirtschaft (BVDW) e.V.

bvdw.org

73

BVDW – Bundesverband Digitale Wirtschaft (BVDW) e.V. is a prominent German digital economy association that unites digital professionals and companies to shape the future of digital business and policy. The website showcases a comprehensive range of services including certifications, events, training programs, and advocacy initiatives aimed at fostering innovation and responsible digital transformation. The organization targets digital economy stakeholders primarily in Germany and Europe, positioning itself as a leading industry expert and community hub. Technically, the website is built on WordPress with modern enhancements such as Yoast SEO Premium for search optimization, Borlabs Cookie for GDPR-compliant cookie management, and jQuery and Swiper.js for interactive elements. The site is mobile-optimized, accessible, and performs moderately well, reflecting a mature digital infrastructure. SEO and structured data usage further enhance its discoverability and professional presentation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating good privacy compliance. However, it lacks explicit security headers and a published security.txt file, which are recommended for improved security posture. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection does not detract from the site's legitimacy, supported by consistent branding, social media presence, and partner affiliations. Overall, BVDW's website reflects a trustworthy, professional, and well-maintained digital presence suitable for its role as a digital economy association. Strategic improvements in security headers and incident response transparency would further enhance its security maturity and stakeholder trust.

E

Easy Social Share Buttons for WordPress Team

socialsharingplugin.com

52

Easy Social Share Buttons for WordPress is a specialized software provider offering a comprehensive social media plugin for WordPress websites. The company positions itself as a market leader with a lifetime license business model, targeting WordPress users from beginners to professionals. Their product suite includes social sharing buttons, follower counters, subscribe forms, chat features, and advanced analytics, supported by a professional website with strong SEO and marketing integrations. The company appears to be small but focused on delivering a high-quality, feature-rich plugin with active customer support and continuous updates. Technically, the website is built on WordPress with modern frameworks like Elementor and optimized with WP Rocket, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and some security best practices, though explicit security policies and privacy compliance documentation are lacking. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic improvements in privacy and security policy transparency would enhance trust and compliance.

C

ConvertBox | Intelligent On-Site Messages

convertbox.com

43

ConvertBox is a SaaS company specializing in intelligent on-site messaging to help businesses engage visitors, capture leads, and increase conversions through personalized messages, surveys, and funnels. The website is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel. The domain is well-established since 2009, indicating a mature business presence. Security posture is generally good with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, well-designed, and trustworthy but could improve transparency and compliance.

L

L'Idem Animation School

lidembarcelona.com

62

L'Idem Animation School is an international digital arts educational institution with over 25 years of experience, operating campuses in Spain and France. The website presents a professional and well-structured digital presence, leveraging WordPress with the Divi theme and integrating multiple marketing and analytics tools such as TikTok Pixel, LinkedIn Insight, and Google Tag Manager. While the technical infrastructure is modern and the site is mobile-optimized with good SEO practices, there is a notable absence of publicly available WHOIS domain registration data, which raises concerns about domain legitimacy and registration transparency. Security measures include HTTPS and reCAPTCHA, but the lack of comprehensive security headers and published security policies suggests room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy policy or contact information visible. Overall, the website is functional and trustworthy from a user perspective but requires enhanced transparency and security documentation to strengthen its risk profile.

T

Transalley

transalley.com

46

Transalley is a French innovation ecosystem and technopole focused on sustainable mobility and transport technologies, based in Valenciennes. It offers a comprehensive range of services including business incubation, development support, innovation accompaniment, office and workshop spaces, and training. The website reflects a mature digital presence with modern technologies such as WordPress, Bootstrap, and integrated marketing and analytics tools. Security posture is solid with HTTPS and reCAPTCHA protections, though some HTTP security headers are missing. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data reduces transparency but does not significantly detract from the overall trustworthiness given the strong business and partner signals. Strategic recommendations include enhancing HTTP security headers, publishing vulnerability disclosure information, and improving accessibility features.

F

French Tech mission

lafrenchtech.com

57

La mission French Tech is an official French government initiative dedicated to supporting and promoting the French start-up and scale-up ecosystem both domestically and internationally. The website serves as a central hub for information about the mission's programs, network, and news, targeting entrepreneurs, start-ups, public administrations, and ecosystem actors. It holds a strong market position as a governmental entity facilitating innovation and tech growth in France. The site offers key services including various support programs, networking opportunities, and ecosystem promotion. Technically, the website is built on WordPress with modern technologies such as the French government design system (DSFR), Leaflet for maps, and a robust cookie consent mechanism (Tarteaucitron). The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and implements privacy-compliant cookie consent. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and well-aligned with its governmental mission, with no detected security or privacy red flags.

S

Skoda Ísland

skoda.is

69

Skoda Ísland operates as the official ŠKODA importer and dealer in Iceland, providing a comprehensive range of automotive services including new and used car sales, financing, and after-sales support. The website presents a professional and well-structured digital presence, targeting Icelandic consumers and businesses interested in ŠKODA vehicles. The company leverages modern web technologies such as React and Bootstrap, hosted on reliable CDN platforms, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforced and no exposed sensitive data, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the queried subdomain is a minor concern but does not detract significantly from the overall legitimacy, given the strong branding and consistent contact information. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and verifying domain registration details to bolster trust.

H

Höme

hoemepage.com

63

Höme is a German-based innovative ticketing platform focused on empowering event organizers with full control over their data, advanced marketing tools, and a collaborative network to support a fair event industry. Founded in 2015, the company positions itself as a modern alternative in the event ticketing market, emphasizing data privacy and community impact. The website is built on WordPress with professional theming and SEO optimization, indicating a mature digital presence. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. The domain registration is consistent and stable, hosted by a reputable German provider. Overall, Höme demonstrates a solid business and technical foundation with room for enhanced security transparency and contact accessibility.

B

Bier-glas.de – bier-glas.de

bier-glas.de

69

Bier-glas.de is a German e-commerce website specializing in the sale of beer glasses from various countries, catering to beer enthusiasts and consumers. The site is built on the Shopify platform, leveraging its e-commerce infrastructure and payment systems. The business operates in a niche market segment focused on beer glassware, offering a variety of sizes and styles. The website demonstrates consistent branding and good content quality, targeting a mature audience interested in beer culture. Technically, the website uses modern web technologies including Shopify's Minimal theme, Google Tag Manager, and several marketing and analytics tools. The site is mobile-optimized and performs moderately well. However, accessibility features are basic and could be improved. The hosting and DNS setup are professional, with Google Domains managing DNS and Shopify providing hosting and CDN services. From a security perspective, the site enforces HTTPS and uses Shopify's secure checkout mechanisms. Cookie consent is implemented in compliance with GDPR, but explicit privacy and terms of service pages are missing. Security headers are not fully implemented, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Bier-glas.de presents a legitimate and professional e-commerce presence with room for enhancement in privacy disclosures and security hardening. The risk profile is moderate, with recommendations focusing on policy publication, security header implementation, and contact information transparency.

M

MAN Financial Services Poland Sp. z o.o.

manfs.pl

53

MAN Financial Services Poland Sp. z o.o. operates as a specialized financial services provider focused on offering tailored financing and insurance solutions for MAN vehicles including trucks, vans, and buses within Poland. The company targets business customers ranging from small enterprises to large fleet operators, providing leasing, credit, and rental options for both new and used vehicles. The website reflects a professional and consistent brand presence aligned with MAN's corporate identity. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Flatpickr, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS (implied by canonical URLs), implements a cookie consent mechanism compliant with GDPR, and avoids exposing sensitive data. However, no explicit security headers were detected, and DNSSEC is not enabled for the domain. Incident response and security policy information are absent, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, with a solid privacy compliance posture. The domain registration data supports legitimacy, showing consistent registration history without privacy protection. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing incident response contacts to strengthen security posture and user trust.

W

Wholegrain Digital

websitecarbon.com

58

Website Carbon is a sustainability-focused platform developed by Wholegrain Digital, a UK-based digital agency specializing in sustainable web design. The site offers a free tool to calculate the carbon footprint of websites, aiming to raise awareness and promote greener internet practices. The business operates as a small but influential entity within the technology and energy sectors, providing consultancy services alongside its calculator tool. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins and scripts, ensuring good performance and accessibility. Security posture is solid with HTTPS enforced, though some security headers and cookie consent mechanisms are absent. The WHOIS data for the domain is unavailable, which introduces some transparency concerns despite the legitimate business appearance. Overall, the site is trustworthy and serves a niche market of environmentally conscious web professionals and organizations.

L

Logora

logora.fr

68

Logora is a specialized SaaS company providing a top-rated engagement and discussion system tailored for press and media websites. Their platform offers customizable comment spaces, debates, consultations, and automatic moderation, trusted by over 100 media references. The company emphasizes data ownership, GDPR compliance, and seamless integration with existing websites and mobile applications. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and various JavaScript libraries, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no cookies stored, though improvements could be made in security headers and incident response transparency. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, Logora presents a professional, trustworthy, and technically mature platform with strong privacy and compliance focus.

M

MEGGLE BH

meggle.ba

46

MEGGLE BH operates as a prominent dairy brand in Bosnia and Herzegovina, offering a wide range of dairy products including milk, yogurts, cheeses, butters, and vegan alternatives. The website reflects a mature digital presence with multilingual support and strong branding consistency. Technically, the site is built on WordPress with modern tracking and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is trustworthy and professionally maintained, supporting MEGGLE BH's market position as a leading dairy provider in the region.

L

Lumen d.o.o.

lumen.ba

42

Lumen d.o.o. is a well-established manufacturer and wholesaler of candles, paraffin and electronic lanterns, and decorative products, operating primarily in Bosnia and Herzegovina with a subsidiary in Croatia. Founded in 1986, the company has a strong regional presence and emphasizes environmentally friendly, reusable products. The website reflects a medium-sized business with consistent branding and good content quality, targeting retail and wholesale customers in the decorative and candle product sectors. Technically, the site uses common JavaScript libraries and Google Analytics but lacks advanced security headers and explicit privacy policies, indicating room for improvement in compliance and security posture. The security stance is moderate with no critical vulnerabilities detected but missing some best practices such as security headers and incident response contacts. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Grafotisak d.o.o.

grafotisak.com

51

Grafotisak d.o.o. is a Croatian/Bosnian graphic printing company established in 1983, specializing in the production and distribution of graphic products. The company maintains a professional online presence with a WordPress-based website optimized for SEO and multilingual support. The website demonstrates good design quality, mobile responsiveness, and clear navigation, targeting businesses and individuals seeking printing services. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership verification. The technical infrastructure relies on common WordPress plugins and libraries, ensuring moderate performance and ease of maintenance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and cookie policies, which are critical for compliance and trust. Overall, the business appears credible and established, but improvements in privacy compliance and domain registration transparency are recommended.

A

Antonio Commerce d.o.o. Mostar

antonio-commerce.com

39

Antonio Commerce d.o.o. Mostar operates as a small retail and wholesale business specializing in office supplies, school supplies, sanitary products, banking equipment, and is an importer of Samsonite travel goods. The company targets local businesses and consumers in Mostar and surrounding regions. The website presents basic but functional content with clear navigation and a focus on product categories relevant to their market. Technically, the site uses common JavaScript libraries such as jQuery and tracking tools like Google Analytics and Google Tag Manager, but lacks advanced frameworks or CMS indications. Security posture is moderate with domain registration protections but lacks visible HTTPS enforcement and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is moderately trustworthy but would benefit from enhanced security and compliance features.

C

Campaign Check

campaigncheck.ie

43

Campaign Check is a niche automotive blog launched in 2025, focusing on delivering engaging and informative content about cars, innovations, and technology. The website targets car enthusiasts and general audiences interested in automotive facts and lifestyle tips. The business model centers on content publishing with potential monetization through affiliate links and advertising. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted on Vultr. The site demonstrates good mobile optimization and SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

V

Volkswagen OSB

vwcvie-onlinebooking.com

52

The website vwcvie-onlinebooking.com serves as an online booking platform dedicated to Volkswagen and VW CV vehicle servicing appointments. It targets Volkswagen vehicle owners primarily in Ireland, providing a streamlined interface to select the appropriate service department and book appointments. The platform is relatively new, established in 2022, and operates under the Volkswagen OSB brand, which aligns with the parent company Volkswagen Group. The site’s content is minimal but functional, focusing solely on service booking without extraneous information or distractions. Technically, the website employs a modern but basic technology stack including jQuery, Bootstrap, and the Yii PHP framework. It is hosted under a reputable registrar (123-Reg Limited) with DNS servers from domaincontrol.com, suggesting stable infrastructure. The site is mobile optimized and includes essential meta tags and CSRF protection tokens, indicating attention to basic security and usability. However, the absence of DNSSEC and HTTP security headers points to areas for improvement in security hardening. From a security perspective, the site shows moderate maturity. HTTPS is implied by canonical URLs, and CSRF tokens are present, but no explicit security headers were detected. The lack of a published security policy, incident response contacts, or vulnerability disclosure mechanisms limits transparency and preparedness. Privacy compliance is partially addressed with linked privacy and cookie policies, though no active cookie consent mechanism is implemented. No contact emails or phone numbers are provided, which may hinder user support and trust. Overall, the website is legitimate and consistent with its business purpose, with no signs of malicious activity or suspicious domain registration patterns. The site’s security posture and privacy compliance could be enhanced to better protect users and build trust. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, adding cookie consent mechanisms, and providing clear contact information to improve user confidence and regulatory compliance.

R

Région Occitanie / Pyrénées-Méditerranée

laregion.fr

63

The website www.laregion.fr is the official digital portal of the Région Occitanie / Pyrénées-Méditerranée, a regional government entity in France. It provides comprehensive information about the region's governance, public services, citizen engagement, regional news, and support for local enterprises, agriculture, and associations. The site targets residents, public actors, businesses, and visitors, serving as a key communication and service platform for the regional authority. The business model is that of a government public service portal, with a strong market position as the official regional website.

B

BIC Plein Sud Entreprises

pleinsudentreprises.com

57

BIC Plein Sud Entreprises is a French business incubator focused on supporting innovative startups and entrepreneurs to establish themselves in the region. The website presents a professional and consistent brand image, targeting future startups with services aimed at business creation assistance. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by OVH sas, a reputable provider. The site is moderately optimized for performance and mobile use, with good SEO practices evident. Security posture is adequate with HTTPS enabled, but lacks security headers and DNSSEC, which are recommended for enhanced protection. Privacy and cookie policies are absent, indicating a gap in GDPR compliance. Overall, the site is trustworthy with a long-standing domain registration, but improvements in privacy and security practices are advised.

Š

ŠKODA France

skoda.fr

68

ŠKODA France operates as the official French branch of the Škoda automotive brand, providing a comprehensive range of new and used vehicles, financing solutions, and after-sales services. The website targets both individual consumers and professional clients in France, offering detailed information about vehicle models, promotions, and electric/hybrid options. The company is part of the Volkswagen Group, reflecting a strong market position in the transportation sector. The digital presence is mature, leveraging modern web technologies such as React and Bootstrap, hosted likely on Azure infrastructure, ensuring a responsive and user-friendly experience. Security measures are robust, with HTTPS, security headers, and no visible vulnerabilities, although some security policy documentation is absent. The domain WHOIS data is not publicly available, likely due to privacy protection, which is justified for a large brand. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

B

BEHVA

behva.be

48

BEHVA is a Belgian non-profit association dedicated to historic vehicles, providing advocacy, information, and support to vehicle owners and enthusiasts. The website positions itself as a niche organization focused on transportation heritage within Belgium, offering services such as lobbying, regulatory guidance, and affiliation with related clubs and specialists. The digital infrastructure is built on WordPress with the Divi theme, enhanced by HubSpot marketing tools and Google Analytics for user tracking and engagement. The site demonstrates moderate technical maturity with responsive design and SEO optimizations but lacks explicit privacy and security policy disclosures. Security posture is adequate with HTTPS and some best practices but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

Š

Škoda Polska

skoda-auto.pl

68

Škoda Polska operates as the official online presence for Škoda Auto in Poland, providing comprehensive information on new vehicle models, financing options, certified used cars, and after-sales services. The website targets Polish consumers interested in Škoda vehicles and related services, positioning itself as a major automotive brand in the region. The digital infrastructure leverages modern web technologies including React and Bootstrap, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and multiple security headers are implemented, reflecting a mature security posture. However, the absence of WHOIS data limits domain registration transparency, though the site’s professional presentation and official branding strongly support its legitimacy. Overall, the site demonstrates strong business credibility, good technical implementation, and compliance with privacy regulations, making it a trustworthy platform for customers.