Security Directory

R

Rundschau Online

rundschau-online.de

63

Rundschau Online is a regional news website delivering current news content focused on Cologne and its surrounding region, covering sports, politics, celebrities, and other local interests. The site positions itself as a key regional media outlet with a broad target audience of general news consumers. The business model appears to be advertising-supported, leveraging ad networks such as Taboola for monetization. Technically, the website employs modern web technologies including Nuxt.js (a Vue.js framework) and Tailwind CSS for styling, indicating a contemporary and modular front-end architecture. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR requirements, although explicit privacy and terms of service documents are not clearly found in the provided content. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie security best practices. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration appears legitimate and consistent with the business claims, with no privacy protection or suspicious WHOIS patterns. Overall, the website presents a professional and trustworthy regional news platform with moderate technical maturity and security posture. Improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and trustworthiness.

G

Gottesdienst-Institut der Evang.-Luth. Kirche in Bayern

gottesdienstinstitut.org

51

The Gottesdienst-Institut der Evang.-Luth. Kirche in Bayern is a well-established non-profit institution affiliated with the Evangelical Lutheran Church in Bavaria. It provides consulting, education, and media resources to support church communities, volunteers, and staff in preparing and conducting worship services. The organization has a strong regional presence and a 25-year history, positioning it as a trusted partner within its sector. The website reflects this professionalism with comprehensive content, clear navigation, and a consistent brand identity. The online shop extends its service offering by providing liturgical materials and publications. Technically, the website employs modern web technologies including Matomo for privacy-conscious analytics, a responsive design, and accessible navigation. While no explicit CMS or hosting provider is identified, the site performs well with good mobile optimization and SEO practices. Security measures include HTTPS and privacy-respecting analytics, though HTTP security headers and cookie consent mechanisms could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. The WHOIS data is unavailable due to query failure or privacy protection, which is common and justified for this type of institution. The website maintains transparency with clear contact information and partner affiliations, enhancing trustworthiness. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism if cookies are used elsewhere, and publishing a vulnerability disclosure policy to further strengthen security culture.

L

LUKi e.V.

kirche.social

60

kirche.social is a niche Mastodon social networking instance operated by the non-profit organization LUKi e.V., focusing on Christian, interdenominational, and ecumenical communities. The platform provides a community-driven social experience within the fediverse, emphasizing privacy and open-source technologies. The website is well-structured, with good content quality and clear navigation, primarily targeting German-speaking users interested in church-related social networking. Technically, the site leverages modern frameworks such as React and Mastodon 4.4.8, ensuring a responsive and accessible user experience. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms and terms of service. Overall, the domain WHOIS data is privacy protected, which is justified for this non-profit community platform. The site demonstrates a trustworthy and professional presence within its niche.

V

Verband der Bildungszentren im ländlichen Raum (VBLR)

jung-laendlich-vielfaeltig.de

63

The website jung-laendlich-vielfaeltig.de represents a non-profit educational project led by the Verband der Bildungszentren im ländlichen Raum (VBLR) focused on youth political education and extremism prevention in rural Germany. The project collaborates with schools and the federal 'Respekt Coaches' program, supported by the German Federal Ministry for Family Affairs. The site provides detailed information about the project, its goals, offerings, and contact persons, targeting young people and educators in rural areas. Technically, the site is built on the RoSys® Truevision CMS with Turbolinks, featuring responsive design and moderate performance. Security posture is adequate with HTTPS usage but lacks visible security headers and explicit cookie consent mechanisms. Contact information is clearly presented, but no social media or analytics scripts are detected, indicating a privacy-conscious approach. WHOIS data aligns well with the business purpose, showing no suspicious patterns. Overall, the site is professional, trustworthy, and content-rich, serving its educational mission effectively.

B

beecode, s.r.o.

unizone.cz

45

Unizone is a specialized digital platform developed by beecode, s.r.o., targeting universities in the Czech Republic. It offers a comprehensive mobile application solution tailored to students, teachers, and university staff, consolidating study agendas, communication, safety alerts, alumni relations, and integration with existing university systems. The platform is well-established, operating since 2016 and deployed at seven Czech universities, supported by positive testimonials and industry awards. Technically, the website is built on modern frameworks like SvelteKit, optimized for mobile and desktop, and delivers a fast, accessible user experience. However, the absence of visible privacy and cookie policies, as well as security headers, indicates areas for compliance and security improvement. The WHOIS data is unavailable due to TLD restrictions, but the domain appears privacy protected, which is justified given the business context and GDPR requirements. Overall, the platform demonstrates strong business credibility and technical maturity with moderate security posture.

O

Olomoucký Report

report.cz

51

Olomoucký Report is a regional news media website delivering current news, events, and information focused on Olomouc and the Olomoucký kraj region in the Czech Republic. The site offers a variety of news categories including crime, society, culture, sports, and health, targeting local residents and interested audiences. The business model centers on content provision and advertising revenue, supported by multiple ad networks and tracking technologies. Technically, the website employs modern web technologies, including Google Tag Manager, Facebook Pixel, and responsive design, ensuring a good user experience across devices. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, though security headers could be improved and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages found. Overall, the site is legitimate and professionally maintained, though improvements in transparency and security documentation are recommended.

A

Abenteuer Regenwald e.V.

abenteuer-regenwald.de

53

Abenteuer Regenwald e.V. is a well-established German non-profit organization dedicated to rainforest protection through environmental education targeted primarily at children, youth, and educators. The website offers a rich variety of educational content including articles, quizzes, games, videos, and teaching materials, positioning itself as a leading resource in the German-speaking region for rainforest awareness and activism. The organization actively engages its audience with campaigns and donation drives, supported by a professional and consistent brand presence. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript ES modules. It employs privacy-conscious analytics (Matomo) and cookie consent mechanisms, ensuring compliance with GDPR. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. Hosting details are not explicit but use privacy-focused nameservers. From a security perspective, the site uses HTTPS and secure form submissions but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies. The WHOIS data indicates privacy-protected domain registration consistent with non-profit best practices. Overall, the website presents a low-risk profile with strong educational value and good technical and privacy standards. Strategic improvements could include publishing formal security policies and enhancing security headers to further strengthen trust and compliance.

D

Dikoju

dikoju.de

49

Dikoju is a German research project focused on advancing digital competencies within child and youth welfare services. It is a collaborative initiative between the Arbeitsgemeinschaft für Kinder- und Jugendhilfe (AGJ) and the University of Cologne, funded by the German Federal Ministry of Education and Research. The project conducts empirical studies and develops qualification modules to support professionals in the digital transformation of social services. The website reflects a professional and well-structured digital presence with clear information about the project, partners, advisory board, and funding sources. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user interaction capabilities. The site is hosted on German servers and employs HTTPS with strong SSL configuration, contributing to a secure user experience. Mobile optimization and accessibility are well addressed, although some security headers are missing, which could be improved. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Privacy compliance is adequate with a privacy and cookie policy present, though no explicit cookie consent mechanism is detected. Overall, Dikoju presents a trustworthy and professional online presence suitable for its research and educational mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and implementing cookie consent mechanisms to improve compliance and user trust.

Royale500 is an online gaming platform targeting German-speaking users, offering casino-style games under a license indicated as 'DL'. The website is currently under maintenance, displaying multilingual messages to users. The technical infrastructure leverages modern JavaScript modules and the Vue.js framework, hosted behind Cloudflare DNS services, indicating a moderate level of digital maturity. However, the site lacks visible analytics, tracking, or advanced SEO features, and mobile optimization is basic. Security posture is limited with no visible security headers or SSL configuration details, and no published security or incident response policies. Privacy compliance is minimal, with no privacy or terms of service pages found, though a cookie consent mechanism is present. Overall, the site presents a low trust profile due to limited business information and contact details. Strategic improvements in security, privacy transparency, and business credibility are recommended to enhance user trust and compliance.

The website dipsy.gov.cz serves as the official digital application system for secondary school admissions in the Czech Republic. Operated by the Ministry of Education and the Centrum pro zjišťování výsledků vzdělávání (CZVV), it provides a secure and user-friendly platform for submitting electronic applications, viewing admission results, and accessing related educational information. The site targets students, parents, and educational institutions, positioning itself as a critical government service in the education sector. The business model is a public service, funded and maintained by government entities, ensuring broad accessibility and trust. Technically, the website is built on a modern Angular framework (version 16.2.10) with PrimeNG UI components, delivering a responsive and accessible user experience optimized for both desktop and mobile devices. The use of HTTPS and Google Analytics for traffic monitoring indicates a mature digital infrastructure. The site includes comprehensive privacy and cookie policies aligned with GDPR requirements, reflecting a strong commitment to user data protection. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers and published incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the content. The domain is a gov.cz domain managed by CZ.NIC, which enhances its legitimacy despite the absence of public WHOIS data. Overall, the security posture is solid but could be improved by adding explicit security policies and vulnerability disclosure channels. The overall risk assessment is low, with the site demonstrating high professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and establishing a vulnerability disclosure process to further strengthen trust and resilience.

E

Ewobox

ewobox.sk

52

Ewobox is a Slovak environmental education portal established in 2019, offering a calendar of events, articles, a knowledge library, and certification information. It targets educators, organizations, and the general public interested in environmental topics within Slovakia. The website is built using modern web technologies including React and JavaScript modules, with a clean and consistent design optimized for mobile devices. Security posture is adequate with HTTPS enabled, though security headers and incident response details are lacking. Privacy and cookie policies are present and GDPR compliant, but no explicit consent mechanism is implemented. Overall, Ewobox presents a trustworthy and professional platform within its niche.

I

Iconify OÜ

iconify.design

59

Iconify OÜ operates the website iconify.design, providing an open source framework aggregating over 200,000 vector icons from popular icon sets. The company targets developers and designers seeking a unified icon solution, positioning itself as a niche leader in the technology sector. The business model revolves around open source software, developer libraries, and API services, supported by sponsorships and community engagement. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence for a company founded in 2018 in Estonia. Technically, the site is built using modern technologies including VitePress and JavaScript ES modules, hosted with Cloudflare DNS services. Performance is fast, mobile optimization is excellent, and SEO practices are good. However, some security best practices such as DNSSEC and security headers are not enabled, and no cookie consent mechanism is present. The site uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates a solid posture with HTTPS enforcement and domain transfer protection. The absence of explicit security policies, incident response contacts, and vulnerability disclosure pages indicates room for improvement in transparency and readiness. No vulnerabilities or suspicious patterns were detected in the WHOIS data or site content. Privacy compliance is basic, with a privacy policy present but no cookie consent or GDPR-specific indicators. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security and incident response policies to enhance compliance and user trust.

S

SwiftSpiele

swiftcasino.com

59

SwiftSpiele is an online casino platform targeting German-speaking users, offering a variety of skill and chance games under the SwiftCasino family brand. The website is designed primarily for desktop users with basic mobile support and uses modern JavaScript modules and Cloudflare DNS for hosting and performance. While the site implements cookie consent mechanisms indicating GDPR awareness, it lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. Security posture is moderate with HTTPS enforced but missing explicit security headers and vulnerability disclosures. Contact is limited to an email support address and login forms, with no phone or physical address information provided. Overall, the site appears legitimate and functional but would benefit from enhanced compliance documentation and security practices.

I

Instytut Książki

bookstadion.com

54

BookStadion is a newly launched cultural and educational initiative by Instytut Książki, focused on promoting reading among children and youth through the popular theme of football. The project collaborates with football coaches, professional players, and major Polish clubs to deliver workshops, contests, and reading events that inspire young football fans to engage with literature. The website is modern, built with React and served via CDN, providing a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are well implemented, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enabled, though improvements such as DNSSEC and security headers are recommended. The domain registration is transparent and consistent with the project timeline, enhancing trustworthiness. Overall, the website is a credible and professional platform supporting a niche educational cause.

The website www.playmillion2.com represents an online gambling platform branded as PlayMillion, likely licensed under Malta jurisdiction (license code 'MT'). The site targets a mature audience interested in casino gaming. However, the website content is blocked for the current region (Germany), displaying a message that the site is unavailable in this region. This limits content accessibility and user engagement. Technically, the site uses modern JavaScript ES modules and web components hosted on a third-party domain (service.image-tech-storage.com), but lacks visible content, privacy policies, or security headers. The absence of WHOIS registration data for the domain raises significant legitimacy concerns. No HTTPS or security best practices are evident, and no contact phone numbers or physical addresses are provided, only a support email embedded in the site configuration. Overall, the site exhibits poor content quality, minimal technical implementation, and weak security posture.

M

Messe München GmbH

automatica-munich.com

64

automatica Munich is a globally recognized trade fair specializing in smart automation and robotics, organized by Messe München GmbH. It serves as a premier platform for industry professionals, researchers, and policymakers to explore innovations and trends in automated production. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to its target audience of industry stakeholders. The business model centers on event organization, exhibitor services, and knowledge dissemination, positioning automatica as a market leader in its sector. Technically, the website employs modern JavaScript modules, web components, and integrates advanced search capabilities via ElasticSearch. It leverages cloud hosting and CDN services for performance and scalability, complemented by a GDPR-compliant cookie consent mechanism. Accessibility and SEO practices are well implemented, ensuring broad usability and discoverability. From a security perspective, the site enforces HTTPS and employs cookie consent management, though it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business history and shows no suspicious patterns, enhancing trustworthiness. Overall, automatica Munich's website demonstrates a strong security posture, excellent content quality, and robust privacy compliance, supporting its reputation as a leading industry event. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen defenses.

M

Messe München GmbH

world-of-photonics.com

64

Laser World of Photonics is a leading global trade fair and congress platform organized by Messe München GmbH, focusing on components, systems, and applications in photonics. The website serves industry professionals, exhibitors, and researchers with comprehensive event information, exhibitor directories, and congress details. It maintains a strong market position as a world-leading event in the photonics sector, supported by consistent branding and professional content. Technically, the site uses modern JavaScript modules, web components, and cloud-based hosting with CDN support, ensuring fast performance and excellent mobile optimization. Privacy compliance is robust with a Usercentrics consent management platform and clear privacy and cookie policies. Security posture is good with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Overall, the site is trustworthy, professional, and well-maintained, with no signs of malicious activity or content safety concerns.

OIE AG is a regional energy provider based in Germany, specializing in sustainable and renewable energy solutions including 100% green electricity, gas, and heat electricity tariffs. The company emphasizes regional engagement through initiatives like 'OIE Heimatliebe' and supports local projects in sports, culture, and climate protection. The website is professionally designed using Adobe Experience Manager and modern web technologies, with a focus on customer service and digital accessibility. Security posture is solid with HTTPS and consent management implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a trustworthy and credible regional energy business with moderate technical sophistication and good privacy compliance.

O

Opentracker

opentracker.net

59

Opentracker is a specialized SaaS platform focused on providing e-commerce marketers with automated customer journey reporting and attribution analytics. The company positions itself as a solution to help businesses understand revenue drivers and optimize marketing efforts. The website demonstrates a mature digital presence with modern technologies such as Gatsby, React, and integration with major marketing and analytics tools like Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides rich content including testimonials and case studies, indicating a solid market position with over 800 companies using their services. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks explicit security policies and comprehensive privacy and cookie disclosures. Overall, the business appears credible and professional but would benefit from improved transparency and compliance documentation.

Avail Stores is a small business specializing in building custom ecommerce webstores tailored for schools, companies, and various organizations. The company operates under Avail Labs LLC and has been active since 2020. Their market position is niche-focused, providing bespoke ecommerce solutions rather than generic platforms. The website content clearly communicates their services and target audience, with professional design and consistent branding. Technically, the website leverages modern web technologies including Laravel with Livewire, Tailwind CSS, and Cloudflare DNS services. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. The presence of Google Maps API indicates some location-based functionality, though no physical addresses are listed. From a security perspective, the site enforces HTTPS and uses domain status locks to protect domain integrity. However, DNSSEC is not enabled, and no explicit security headers or published security policies are found. Cookie consent is implemented with secure attributes, but incident response and vulnerability disclosure mechanisms are absent. Overall, the security posture is moderate but could be improved with additional controls and transparency. The overall risk assessment is low to moderate. The business appears legitimate with consistent WHOIS data and no suspicious indicators. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and enhancing contact information transparency to improve trust and compliance.

C

Coinbase

coinbase.com

77

Coinbase is a leading global cryptocurrency exchange platform offering secure buying, selling, and wallet services for digital assets such as Bitcoin and Ethereum. The website targets a broad audience interested in cryptocurrency trading, providing a professional and well-branded user experience. The technical infrastructure leverages modern web technologies including React and JavaScript modules, with strong mobile optimization and accessibility features. Cookie consent and privacy policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident in the provided data. The WHOIS data is unavailable or protected, which is unusual for a major enterprise but does not detract significantly from the site's legitimacy given the strong branding and market presence. Overall, Coinbase's website demonstrates a high level of professionalism, security, and compliance suitable for its enterprise scale and industry.

Yext operates as a leading digital presence platform focused on empowering multi-location brands to manage and optimize their brand visibility across AI and traditional search channels. The company offers a comprehensive suite of services including AI-powered search intelligence (Scout), listings management, knowledge graph content organization, reviews and reputation management, social media amplification, and compliant customer engagement tools. Their market position is strong, supported by a large enterprise customer base including well-known global brands. Technically, the website demonstrates modern infrastructure with React-based front-end, structured data for SEO, and integration with major digital platforms such as Google, Apple, Facebook, and OpenAI. The site is well-optimized for mobile and accessibility, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not publicly detailed. Privacy compliance is good with clear privacy and terms policies, though a cookie consent mechanism is not evident. Overall, the risk profile is low with recommendations to enhance security headers and transparency around incident response. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional and consistent branding and external references.

C

CLAAS

claas.cz

69

CLAAS is a leading enterprise in the manufacturing sector specializing in agricultural machinery such as tractors, combine harvesters, forage harvesters, telehandlers, and balers. The website serves the Czech market with localized content and targets farmers, agricultural businesses, and machinery dealers. The company maintains a strong market position with a professional and consistent brand presence online. Technically, the website is built on modern frameworks like Angular and integrates consent management tools such as Usercentrics, alongside Google Tag Manager for analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security posture is strong with HTTPS, Content Security Policy, and no visible vulnerabilities, although some compliance elements like privacy policy and terms of service pages are missing or not detected. WHOIS data is unavailable from the provided raw output, which raises some concerns but is likely due to privacy protection or query limitations. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation.

M

Messe München GmbH

productronica.com

65

productronica.com is the official website for the world-leading trade fair for electronics development and manufacturing, organized by Messe München GmbH. The site provides comprehensive information about the event, including exhibitor directories, program highlights, and visitor services. It targets industry professionals and companies involved in electronics manufacturing technologies. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern JavaScript modules, cloud hosting, and a consent management platform to ensure compliance and performance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is robust, with clear privacy and cookie policies and a user consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness, supporting the event's global reputation.

M

mas.to

mas.to

69

mas.to is an independent Mastodon server providing a federated social networking platform within the fediverse. It offers users a fast, up-to-date, and engaging environment to participate in decentralized social media. The website demonstrates a consistent brand and clear focus on Mastodon-based social networking services, targeting a general audience interested in privacy-respecting social platforms. Technically, the site employs modern web technologies including Mastodon 4.4.8, React, and ES modules, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, script integrity checks, and nonce usage, although explicit security headers and incident response policies are not published. Privacy compliance is adequate with accessible privacy and terms pages, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency and security documentation.

M

Maglr

maglr.com

61

Maglr is a Netherlands-based technology company offering a no-code SaaS platform for creating interactive digital content such as magazines, reports, brochures, and presentations. The platform targets businesses and organizations seeking engaging, easy-to-share digital storytelling solutions with real-time analytics. The website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and privacy-conscious analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit incident response and vulnerability disclosure policies are absent. The missing WHOIS registration data is a concern and warrants verification to ensure domain legitimacy. Overall, Maglr presents a professional and trustworthy digital presence with room for enhanced transparency in security policies.

Stradasalt is a Norwegian brand under GC Rieber Minerals specializing in environmentally friendly road salt and dust-binding solutions. The company targets road maintenance and municipal clients with a focus on sustainable and chloride-free products. The website reflects a professional B2B supplier with a clear market niche and consistent branding. Technically, the site uses modern web technologies including Matomo analytics and Cookiebot for consent management, ensuring compliance with GDPR and privacy best practices. Security posture is solid with HTTPS, CSRF protection cookies, and domain transfer restrictions, though DNSSEC is not enabled and some security headers are missing. No direct contact emails or phone numbers are provided, relying on a contact form instead. Overall, the site is well-structured, mobile-optimized, and trustworthy, with room for improvement in explicit business contact details and security policy disclosures.

O

OK a.m.b.a

ok.dk

67

OK a.m.b.a is a well-established Danish energy company providing a broad range of energy products including fuel, heating oil, electricity, natural gas, and heat pumps. The company operates over 670 local fuel stations across Denmark, targeting private consumers, businesses, and public sector clients. The website reflects a professional and consistent brand presence with clear business offerings and a focus on local energy supply services. Technically, the website employs modern web technologies including JavaScript modules, Google Tag Manager, Adobe Experience Cloud, and Cloudflare for hosting and security. The site is mobile-optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, although explicit security headers and incident response contacts are not clearly visible. The absence of WHOIS data is a notable gap in domain legitimacy verification, which slightly impacts the overall trust score. Overall, the website is professional, secure, and compliant with privacy standards, serving its target market effectively.

H

Hydrotour

hydrotour.sk

63

Hydrotour is a Slovak travel agency specializing in holiday packages for 2026, including last minute and first moment offers for summer and exotic destinations. The website targets Slovak-speaking travelers seeking vacation options and presents a professional and consistent brand image. The technical infrastructure leverages modern JavaScript modules, Vue.js framework, and WordPress CMS, with integrations for Google Tag Manager and Cookiebot for privacy compliance. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though lacks explicit security policy and incident response information. Overall, the site is trustworthy and compliant with GDPR, with extensive use of analytics and marketing tools.

S

St. Browns GmbH

st-browns.de

62

St. Browns GmbH operates an e-commerce platform specializing in curated, stylish gift box sets targeting customers in Germany. The website presents a professional and consistent brand image with a focus on sustainable and personalized gift packaging. The business model is retail-focused, leveraging Shopify as its platform to deliver a seamless shopping experience. The company integrates multiple marketing and analytics tools such as Facebook Pixel, Klaviyo, Trustpilot, and Lucky Orange to optimize customer engagement and conversion. Technically, the website is built on Shopify with modern JavaScript modules and CDN hosting, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. The site uses HTTPS with strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site follows best practices including HTTPS enforcement, use of hCaptcha for form protection, and no visible exposure of sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website is secure, compliant, and trustworthy, with a moderate to high security posture. The overall risk is low with no critical vulnerabilities detected. Strategic recommendations include publishing a dedicated security policy, providing incident response contact information, and adding a vulnerability disclosure or security.txt file to enhance transparency and trust.

T

Transport Research Arena

traconference.eu

55

The Transport Research Arena 2026 website represents a major European transport research and innovation conference hosted in Budapest, Hungary. It targets a broad audience including researchers, industry professionals, policymakers, and transport stakeholders. The site is professionally designed with clear branding and consistent messaging, emphasizing collaboration and innovation in sustainable transport. Technically, the site uses modern JavaScript frameworks such as Vue.js and PrimeVue, delivering a responsive and visually appealing experience. Security posture is adequate with HTTPS and some security headers, but lacks comprehensive security policies and incident response disclosures. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is credible and trustworthy, supported by strong European and Hungarian governmental partnerships.

A

Advenir Formations (implied from content)

je-roule-en-electrique.fr

63

The website www.je-roule-en-electrique.fr serves as a comprehensive national platform dedicated to electric mobility information and training in France. It targets a broad audience including individuals, students, local authorities, and property managers, offering educational content, training programs under the Advenir Formations initiative, and guidance on financing aids. The platform is supported by reputable partners such as Avere-France, the French Ministry of Ecological Transition, and ADEME, reinforcing its authoritative position in the market. Technically, the site employs modern web technologies including Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices, accessibility, and performance, although some improvements in security headers and explicit privacy documentation are recommended. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and a published vulnerability disclosure policy. The absence of WHOIS registrant data slightly impacts trust but is mitigated by the professional presentation and strong institutional partnerships. Overall, the site is a well-designed, authoritative resource for electric mobility education in France, with moderate technical and security maturity. Strategic enhancements in privacy transparency and security policies would further strengthen its trustworthiness and compliance posture.

PayZen, operated by Lyra Network, is a payment processing platform targeting primarily German-speaking markets, with a focus on businesses requiring payment gateway services. The website content is minimal and primarily serves as a documentation or informational portal without visible user interaction elements such as forms or contact details. The technical infrastructure includes modern JavaScript modules and trusted external libraries, but lacks comprehensive SEO metadata and structured data. Security posture is basic with no visible security headers or DNSSEC enabled, and no explicit privacy or cookie policies are present, indicating potential compliance gaps. Overall, the domain registration data supports legitimacy with consistent registrant information and appropriate domain age. Strategic improvements in privacy compliance, security headers, and content richness are recommended to enhance trust and user experience.

O

Obecní úřad Hrusice

obec-hrusice.cz

10

The website obec-hrusice.cz serves as the official digital presence for the municipality of Hrusice in the Czech Republic. It provides residents and visitors with essential information such as news updates, official notices, contact details, event calendars, and local services. The site is positioned as a local government authority platform, targeting the community and stakeholders within the municipality. The business model is governmental public service, with a focus on transparency and community engagement. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, hosted on Amazon AWS Cloudfront CDN, ensuring good performance and mobile responsiveness. The site employs HTTPS with good SSL configuration and security headers, reflecting a solid security posture. However, it lacks some advanced privacy compliance features such as a cookie consent mechanism and explicit security or incident response policies. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. The domain registration data is consistent and trustworthy, with a long-standing domain age appropriate for a municipal entity. The absence of a vulnerability disclosure policy and incident response contact points are areas for improvement. Overall, the website is professional, trustworthy, and serves its purpose effectively, though it could enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

P

Paradigm Health, Inc.

paradigm.inc

63

Paradigm Health, Inc. operates a sophisticated clinical research platform designed to connect and empower patients, healthcare providers, and sponsors. The company focuses on re-engineering clinical trials to be more patient-centric, enhancing viability and value across the care ecosystem. Their market position is that of an innovator in healthcare technology, targeting stakeholders involved in clinical research. The website reflects a mature digital presence with professional design, clear messaging, and modern technical infrastructure including Webflow CMS and HubSpot marketing tools. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance evidenced by a comprehensive privacy policy and cookie consent mechanisms. However, the absence of explicit terms of service, security policy, and vulnerability disclosure pages indicates areas for improvement. Overall, the site is trustworthy, well-optimized, and aligned with the company's business claims.

E

emundi

emundi.fr

62

emundi is a French-based consulting and training company specializing in responsible digital transformation. It operates as part of the Ctrl-a group, a recognized pioneer in sustainable and accessible digital practices in France. The company offers services including digital maturity diagnostics, expert mobilization across various digital responsibility domains, operational project management, and training programs focused on eco-design, accessibility, AI responsibility, data protection, and sustainable procurement. The website reflects a professional and consistent brand image aligned with its mission to promote efficient, durable, and inclusive digital solutions. Technically, the website is built using modern web technologies such as Vue.js and ES modules, with optimized images and responsive design ensuring excellent performance and accessibility. However, there is no explicit CMS or hosting provider identified. The site lacks some security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. From a security perspective, the site uses HTTPS but does not display advanced security headers or incident response policies. No forms or sensitive data collection points are present on the homepage, reducing immediate risk. The WHOIS data is unavailable, which limits domain trust verification, but the affiliation with Ctrl-a and professional content provide positive legitimacy signals. Overall, emundi presents a trustworthy and professional digital presence with room for improvement in security headers, privacy compliance mechanisms, and transparency regarding security policies. The domain's WHOIS absence is a concern but does not outweigh the positive business and technical indicators observed.

S

SOHO1 Caffé Bistro

soho1caffe.sk

65

SOHO1 Caffé Bistro is a modern hospitality business located in Žilina, Slovakia, offering restaurant dining, café services, brunch, catering, food delivery, and event hosting. The website reflects a small but professional local business with a focus on fresh ingredients and a pleasant atmosphere. The digital infrastructure uses modern web technologies including JavaScript modules, Google Fonts, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and content relevant to its target audience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. WHOIS data confirms the legitimacy of the business with consistent registration details. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and content hygiene are recommended.

Penzion v Jízdárně is a small hospitality business operating a guesthouse in Olomouc, Czech Republic, with a focus on providing accommodation services including rooms and an apartment. The business targets tourists, visitors to Olomouc, and equine sports enthusiasts, offering pet-friendly lodging and proximity to a partner restaurant. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern web technologies such as ES modules, Swiper.js, and Google Fonts, with indications of a SPA framework like Vue.js, though no CMS is explicitly detected. Performance and mobile optimization are good, but accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks security headers and published security policies. Privacy compliance is limited, with no cookie policy or consent mechanism detected, and only basic terms and conditions available. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and functional but could benefit from enhanced privacy and security practices.

U

Univention GmbH

univention.social

10

Univention GmbH operates the Mastodon instance univention.social, providing decentralized social media services powered by the open source Mastodon platform. The company specializes in open source software development focused on digital identity management and IT application integration, with flagship products like Univention Corporate Server (UCS) and UCS@school tailored for educational institutions. Their market position is that of an established mid-sized technology provider serving public sector and enterprise clients primarily in Germany. Technically, the website leverages modern web technologies including React and Mastodon 4.4.8, with media hosted via an S3 proxy. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and script integrity checks, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service visible. WHOIS data is limited due to TLD registry constraints, but website content and contact information support legitimacy. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

J

Jamie Clarke Type

jamieclarketype.com

59

Jamie Clarke Type is a specialized independent typeface design business offering ready-made fonts and custom commissions primarily targeting creative agencies, publishers, and brands. The website showcases a professional portfolio with a strong focus on typography and design services, positioning itself as a niche player in the media and creative sector. The business has been established since 2015, with a consistent online presence and a clear brand identity. Technically, the website is built using modern frameworks like Astro and leverages Cloudflare for DNS and hosting, ensuring fast performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional, with room for enhanced security and privacy practices.

R

Robert Bosch odbytová s.r.o.

bosch.cz

62

Robert Bosch odbytová s.r.o. operates the Czech Republic localized website for Bosch, a global leader in manufacturing and technology solutions. The website targets Czech-speaking audiences with a focus on mobility, household, and industrial products and services. The company is positioned as a large multinational enterprise with a strong local presence, offering a broad portfolio of products and services. The website content is professionally curated, with clear navigation and consistent branding, supporting both B2B and B2C business models. Technically, the website employs modern web technologies including Google Tag Manager for analytics, custom Bosch UI components, and web fonts for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with room for optimization. Privacy compliance is well addressed through comprehensive privacy and cookie policies, including consent management mechanisms. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks explicit security headers and published security policies or incident response information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces trust slightly but does not outweigh the strong legitimacy signals from the website content and social media presence. Overall, the website presents a secure, professional, and user-friendly digital presence for Bosch in the Czech Republic. Strategic improvements in security headers and transparency around security policies would further strengthen trust and compliance.

The analyzed URL is a 404 error page hosted on a subdomain of ffm.to, which is associated with feature.fm, a music marketing platform. The page serves as a standard 'Page Not Found' message with minimal content and no business or contact information. The technical infrastructure uses modern JavaScript frameworks such as Vue.js and Nuxt.js, delivered via a Fastly CDN, and includes tracking scripts like Google Tag Manager and AppNexus. However, the page lacks privacy, cookie, and terms of service policies, as well as any security or incident response information, which limits compliance and trustworthiness. The security posture is minimal with no detected security headers or explicit protections. Overall, the page is accessible and not blocked by any WAF or security challenge, but it provides no substantive business or security information.

E

ESC Olomouc

escolomouc.cz

46

ESC Olomouc operates as a modern equestrian center in the Czech Republic, specializing in hosting show jumping and dressage competitions. The website positions the center as the most exclusive equestrian venue in the country, targeting equestrian sports enthusiasts and competitors. Key services include event hosting, live streaming, and hospitality offerings such as a restaurant. The business is small-sized, founded in 2012, and maintains partnerships with local financial institutions and sports organizations. Technically, the website uses modern frontend technologies like Alpine.js and Swiper.js, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are visible, which may impact user engagement and trust. Overall, the site is professional and content-rich but could enhance privacy compliance and security transparency.

S

Staatsbibliothek zu Berlin and Zentral- und Landesbibliothek Berlin (ZLB)

openbiblio.social

60

OpenBiblio.Social is a specialized Mastodon instance serving the German-speaking library and information professional community. It is hosted and administered by reputable public institutions, namely the Staatsbibliothek zu Berlin and the Zentral- und Landesbibliothek Berlin (ZLB). The platform provides a decentralized social media environment focused on fostering professional dialogue and networking within the library sector. The website content is primarily in German and offers clear guidance on community rules, moderation, and first steps for new users. Technically, the site leverages Mastodon 4.4.8, Ruby on Rails, and modern JavaScript frameworks, ensuring a contemporary and mobile-optimized user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is good with a clear privacy policy, but lacks cookie consent mechanisms and terms of service documentation. Overall, the site demonstrates a high level of professionalism and trustworthiness, supported by institutional backing and open-source transparency.

W

WAREMA Renkhoff SE

warema.com

66

WAREMA Renkhoff SE is a well-established manufacturer specializing in high-quality sun protection solutions such as awnings, blinds, roller shutters, and patio roofs. The company targets both private and business customers across multiple European countries, supported by dedicated portals and multilingual websites. Their market position is strong, supported by consistent branding and a comprehensive product offering. Technically, the website employs modern web technologies including StencilJS and a consent management platform, ensuring good performance, mobile optimization, and GDPR compliance. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given the professional presentation and extensive online presence. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations.

M

opper | Login

mahalo-app.io

55

The website at auth.tbsfrance.com is a login portal for a software subsuite named 'mahalo become opper subsuite'. It appears to serve as an authentication gateway for users of this application. The site uses modern web technologies including Angular 14.3.0 and Angular Material for its user interface, with Roboto font loaded from Google Fonts. The content is minimal and focused exclusively on login functionality, with no additional business or contact information provided. The lack of privacy, cookie, or terms of service policies indicates limited compliance with common data protection standards. The WHOIS lookup for the domain failed, showing no registration data, which raises concerns about the legitimacy and trustworthiness of the domain. Security headers are not present in the HTML content, and no analytics or advertising scripts are detected, suggesting a minimalistic approach to tracking and marketing. Overall, the site is functional but lacks transparency and security best practices.

T

Todon.eu

todon.eu

60

Todon.eu operates as a small, volunteer-run Mastodon instance focused on radical leftist and anti-authoritarian communities, providing decentralized social media services. The platform supports multiple languages and offers enhanced Mastodon features such as increased character limits and custom themes. The website is well-branded and consistent with its community-driven mission, emphasizing privacy and anti-discrimination policies. Technically, the site runs Mastodon version 4.4.8 with a modern tech stack including Ruby on Rails and React. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and privacy-conscious defaults, but lacks formal security policies and some security headers. Overall, the site is trustworthy and safe, with no adult or explicit content. Contact information is limited but present via email. There are no signs of malicious activity or suspicious domains. Strategic improvements include adding a cookie consent mechanism, formalizing security policies, and enhancing accessibility. This positions Todon.eu as a niche but credible player in the decentralized social media space, serving a specific activist audience with a strong privacy and community focus.

T

The Shift Project

territoiresaufutur.org

64

Territoires au Futur is a French non-profit platform operated by The Shift Project, focused on supporting local territorial resilience and ecological transition. It provides diagnostic tools, mobilization campaigns, and educational resources targeting local elected officials and citizens in France. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile devices. Technically, it uses modern JavaScript frameworks (Vue.js), FontAwesome icons, and Matomo analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response policies. Privacy compliance is adequate with a linked comprehensive privacy policy and cookie policy, but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy, well-branded, and aligned with its parent organization, The Shift Project.

J

Jublinis Littau

jublinis-littau.ch

44

Jublinis Littau is a small local non-profit youth organization in Switzerland providing age-appropriate leisure activities for kindergarten children until they transition to the Jubla group. The website serves as an informational portal for parents and children, detailing upcoming group meetings and past events. The content is well-structured, primarily in German, and focuses on community engagement and event announcements. Technically, the site uses modern JavaScript modules and the Livewire framework, indicating a moderate level of digital maturity. Mobile optimization and navigation are good, though accessibility features are basic. Security posture is weak due to the absence of security headers, privacy policies, and contact information for incident response. No analytics or tracking scripts are present, which reduces privacy concerns but also limits data-driven insights. Overall, the site is safe and appropriate for its target audience but lacks formal privacy and security documentation.

S

Suzuki Deutschland GmbH

suzuki.de

68

Suzuki Deutschland GmbH operates as the German subsidiary of the global Suzuki brand, providing information and access to automobiles, motorcycles, and marine products tailored for the German market. The website serves as a corporate and product portal with a professional design and consistent branding. The technical infrastructure leverages modern JavaScript frameworks (likely Vue.js), modular scripts, and a cookie consent management system that complies with GDPR requirements. Hosting is managed via Adacor, a reputable provider, and the site uses HTTPS with good SSL configuration. Security posture is solid with no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and a linked privacy policy. However, the site lacks explicit terms of service and security policy disclosures. Overall, the website is trustworthy, well-maintained, and aligned with the business's market position.