Security Directory

Cebeo is a leading Belgian electrical wholesale distributor specializing in a wide range of electrical materials and solutions for professional customers. Their business model focuses on B2B wholesale distribution with a strong logistics network enabling next-day delivery. The website reflects a mature digital presence built on modern technologies such as React and Next.js, with integrated analytics and consent management tools. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting Cebeo's market position as a reliable supplier in the energy sector.

Villeroy & Boch is a well-established premium manufacturer and retailer specializing in ceramic tableware, bathroom, and wellness products. The company targets a global consumer base seeking high-quality and design-oriented home and lifestyle products. The website reflects a mature digital presence with multiple localized versions, professional design, and comprehensive privacy and cookie policies, indicating a strong commitment to user experience and compliance. Technically, the website employs modern frameworks such as React and Chakra UI, integrates consent management via Usercentrics, and uses Google Tag Manager and Kameleoon for analytics and A/B testing. The site is mobile-optimized and accessible, with good SEO practices and performance. Security measures include HTTPS enforcement, security headers, and bot protection via reCAPTCHA, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable gap, reducing trust from a domain registration perspective. However, the professional website, clear contact information, and consistent branding support the legitimacy of the business. Overall, the website presents a secure and user-friendly experience with room for improvement in transparency around security policies and domain registration details.

W

Weishaupt Verlag

weishaupt.com

9

Weishaupt Verlag is a small Austrian publishing company specializing in non-fiction books, particularly in travel, regional history, culture, and technical subjects. Established in 1980, it operates an e-commerce platform selling its publications directly to customers. The website is professionally designed with clear navigation and product listings, targeting readers interested in specialized literature. Technically, the site uses legacy JavaScript libraries such as jQuery 1.6.3 and Fancybox 1.3.1, indicating some technical debt and opportunities for modernization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks modern security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information appear legitimate and consistent with a small publishing business. Overall, the site scores moderately well in content quality, technical implementation, security, privacy compliance, and business credibility.

C

Cheminées Poujoulat

poujoulat.com

60

Cheminées Poujoulat is a well-established French company specializing in metal chimney flues and stacks, serving residential, commercial, and industrial markets across Europe. The company positions itself as a European market leader with a broad product range and multiple international subsidiaries. The website reflects a mature digital presence with multilingual support and comprehensive product information. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is moderate, with cookie consent mechanisms in place but lacking explicit security headers and dedicated security policies. The absence of WHOIS domain registration data is a notable gap, reducing domain trust verification. Overall, the website is professional and trustworthy but could improve in security transparency and domain registration clarity.

F

Facq

facq.be

10

Facq is a Belgium-based retail company specializing in bathroom and heating products, positioning itself as a sanitary specialist. The website offers an online catalog showcasing the latest trends and product combinations for private customers. The business targets consumers interested in home improvement and sanitary solutions. Technically, the website is built on a modern Next.js and React stack, integrating multiple analytics and marketing tools such as Google Analytics, Hotjar, Mouseflow, and Sendinblue, indicating a mature digital marketing approach. The presence of Cookiebot for cookie consent demonstrates compliance with GDPR regulations. Security-wise, the site enforces HTTPS and uses secure cookies for session and CSRF protection, but lacks explicit security headers and published security policies, which could be improved. The WHOIS data is restricted, which is common for privacy protection, but the website content and technology usage suggest a legitimate and professional business. Overall, the site is well-designed, mobile-optimized, and trustworthy, with room for enhancement in security transparency and contact information availability.

F

fragFINN e.V.

fragfinn.de

64

fragFINN e.V. operates a German-language child-friendly search engine and educational platform targeting children up to 12 years old. The website offers curated, media pedagogue-reviewed content including tips, quizzes, videos, audio, and games designed to provide a safe and educational online environment for children. The organization positions itself as a non-profit entity focused on child safety and education in the digital space. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, leveraging Matomo analytics with cookies disabled to respect user privacy. The site is hosted on servers associated with internet1.de and uses HTTPS with a good SSL configuration. The site is mobile-optimized, accessible, and SEO-friendly, providing a high-quality user experience. From a security perspective, the site employs HTTPS and disables cookies in analytics, but lacks explicit security headers and does not provide visible privacy or cookie policies on the homepage. There is no public vulnerability disclosure or incident response information. WHOIS data is consistent and indicates a legitimate domain registration dating back to 2016, appropriate for the organization's history. Overall, fragFINN.de is a trustworthy, well-maintained educational platform with a strong focus on child safety and content quality. However, it would benefit from publishing explicit privacy and cookie policies, implementing security headers, and providing clear incident response contacts to enhance compliance and security posture.

S

Seitenstark

seitenstark.de

48

Seitenstark is a well-established German non-profit network providing a safe and educational internet environment for children. The website aggregates over 60 child-friendly sites offering diverse content such as games, knowledge, music, and interactive activities. It targets children primarily, with additional resources for parents and educators. The network emphasizes child safety and educational value, positioning itself as a trusted resource in the German child education sector. Technically, the site is built on Drupal CMS and employs modern JavaScript libraries including jQuery 3.7.1, lazy loading with Blazy, and multimedia support with Video.js. The site is mobile-optimized, accessible, and performs moderately well. Hosting is via DomainControl nameservers, indicating a professional hosting environment. SEO and metadata are well implemented, supporting discoverability. From a security perspective, the site uses HTTPS exclusively and loads external resources securely. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. Cookie usage is present but without a clear consent mechanism, which is a minor compliance gap. No vulnerabilities or exposed sensitive data were detected. Overall, Seitenstark presents a low-risk profile with strong content quality and a clear mission. Strategic improvements include implementing explicit cookie consent, publishing security and incident response policies, and providing clearer contact information to enhance trust and compliance.

B

Blinde Kuh e.V.

blinde-kuh.de

49

Blinde Kuh e.V. operates a pioneering German-language child-friendly search engine and educational portal, serving children and families with curated internet content and link tips. Established in 1997, it holds a unique market position as a trusted non-profit educational resource. The website is technically implemented using a custom CMS (BK CMS) with support for Progressive Web App technology, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response information. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit consent mechanism is present. Overall, the site is trustworthy, safe for children, and professionally maintained, though funding challenges are noted as government support ended in early 2024.

N

natureOffice

natureoffice.com

69

natureOffice is a medium-sized German company specializing in sustainability consulting and climate management services for businesses. Their offerings include carbon accounting, emission reduction strategies, carbon offsetting projects certified by recognized standards such as Gold Standard and VCS, and sustainability reporting. The company positions itself as an expert partner helping companies reduce their ecological footprint and comply with evolving sustainability regulations. The website is built on modern technologies including Nuxt.js and Tailwind CSS, hosted with Cloudflare DNS services, and integrates a Usercentrics consent management platform to address GDPR compliance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security headers are not visible in the HTML. Privacy policy and terms of service documents are not found in the provided content, which slightly impacts privacy compliance scoring. Overall, the website is professional, well-designed, mobile-optimized, and trustworthy, targeting companies seeking sustainability solutions. No adult or questionable content is present, and no WAF or blocking mechanisms interfere with content access.

J

Journal Frankfurt

journal-frankfurt.de

62

Journal Frankfurt is a well-established local news media website focused on providing comprehensive coverage of city politics, culture, sports, and lifestyle for Frankfurt residents and visitors. The site offers a broad range of content including news articles, event calendars, restaurant reviews, and subscription services, positioning itself as a key regional media player. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Tag Manager and Google Ads for analytics and monetization, and uses Usercentrics for GDPR-compliant consent management. The site is mobile-optimized and structured with SEO best practices including JSON-LD structured data. Security-wise, the site uses HTTPS with good SSL configuration and enforces cookie consent, but lacks explicit security headers and published security policies. Overall, the website is accessible, professional, and trustworthy with a moderate to good security posture and privacy compliance. Recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features.

T

TokoMoo

tokomoo.com

56

TokoMoo is a small technology business specializing in premium Elementor template kits and WordPress themes, targeting web designers and small to medium businesses seeking professional website templates. The website is built on WordPress with Elementor and uses Cloudflare DNS services. It employs SEO best practices with the Rank Math plugin and includes structured data for organization and author information, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, which are compliance gaps. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.

C

Cambridge University Press & Assessment

admissionstesting.org

66

The website serves as an official notice that the Cambridge Assessment Admissions Testing website is now closed. It provides clear information about the transition of various admissions tests to other organizations such as OCR and UAT-UK, and directs users to relevant external resources. The site is hosted on HubSpot CMS and employs standard marketing and analytics tools including Google Analytics and HubSpot tracking pixels. Privacy and cookie policies are present and appear comprehensive and GDPR compliant. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. WHOIS data for the domain could not be retrieved due to malformed query responses, but the domain is a subdomain of a reputable Cambridge English domain, supporting legitimacy. Overall, the site is professional, informative, and trustworthy, with moderate technical sophistication and good privacy compliance.

C

Cambridge

cambridgeinternational.org

62

Cambridge International Education is a globally recognized provider of international education programs and qualifications for children and young adults aged 3 to 19. As part of the University of Cambridge, it holds a leading market position in the education sector, offering a broad range of services including curriculum development, assessments, teacher training, and research support. The website reflects a professional and comprehensive digital presence aligned with its educational mission. Technically, the website employs a mature technology stack including jwplayer for media, jQuery, Google Tag Manager, and OneTrust for consent management, indicating a modern and compliant infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though some libraries like jQuery are outdated and could benefit from updates. Security posture is strong with HTTPS enforced and consent mechanisms in place, though the absence of explicit security headers and public security policies suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professionally managed, with a high legitimacy score despite the lack of detailed WHOIS registrant data due to privacy protection. Strategic recommendations include enhancing security headers, updating legacy libraries, and publishing security and incident response policies to further strengthen trust and compliance.

O

Oxford, Cambridge and RSA

ocr.org.uk

66

Oxford, Cambridge and RSA (OCR) is a well-established awarding body providing a wide range of educational qualifications including GCSEs, A Levels, Cambridge Nationals, and Cambridge Technicals. The organization operates under the Cambridge Assessment umbrella, positioning itself as a trusted and authoritative provider in the UK education sector. The website offers comprehensive resources, past papers, and support for both students and educators, reflecting a strong commitment to educational excellence and accessibility. Technically, the website employs a mature technology stack including jQuery, JW Player, Google Analytics, Google Tag Manager, and OneTrust for consent management. The site is well-structured with good mobile optimization, accessibility, and SEO practices. The presence of multiple third-party analytics and marketing tools indicates a data-driven approach to user engagement and experience enhancement. From a security perspective, the site enforces HTTPS and integrates consent management for privacy compliance. However, there is room for improvement in implementing additional HTTP security headers and updating legacy libraries such as jQuery. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations. The lack of WHOIS data for the exact queried domain is due to it being a subdomain, which is typical for large organizations. The domain and website content align well, supporting the legitimacy of the entity. Strategic recommendations include enhancing security headers, updating legacy scripts, and continuous privacy compliance monitoring.

C

Cambridge Assessment English

cambridgeenglish.org

63

Cambridge Assessment English operates a professional and comprehensive website dedicated to English language learning and assessment. The organization offers a wide range of products and services including exams, teaching resources, and research, targeting learners, educators, and institutions globally. The website reflects a strong market position as a leading provider in the education sector, particularly in English language assessment. Technically, the site employs a mature technology stack with modern analytics and marketing tools, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and use of reCAPTCHA, though explicit security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR consent. Overall, the site demonstrates high professionalism and trustworthiness, supporting a large enterprise educational entity.

C

Cambridge University Press & Assessment

cambridgeassessment.org.uk

66

Cambridge University Press & Assessment operates the Cambridge Assessment Network and Research website, providing educational assessment qualifications, professional development courses, and research services. The organization holds a leading position in the global education sector, targeting educators, assessment professionals, and learners worldwide. Their business model focuses on delivering high-quality assessment products and professional training, supported by extensive research and innovation. The website demonstrates a mature technical infrastructure, utilizing modern JavaScript libraries such as jQuery and JWPlayer, integrated with Google Tag Manager, Google Analytics, Microsoft Clarity, and Crazy Egg for analytics and user behavior tracking. The site employs OneTrust for cookie consent management, reflecting a commitment to privacy compliance. The design is professional, mobile-optimized, and accessible, with clear navigation and rich content. Security posture is strong, with HTTPS enforced and multiple security headers present. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks publicly available security policies or incident response information, which could enhance transparency and trust. Privacy compliance is well addressed through cookie banners and a comprehensive privacy policy. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's educational mission. Strategic recommendations include publishing explicit security and incident response policies, enhancing vulnerability disclosure transparency, and maintaining up-to-date third-party libraries to sustain security and compliance.

读秀学术搜索是一个基于海量中文学术资源的文献检索和获取平台，面向学术研究人员、学生及图书馆用户，提供统一的异构资源检索服务。网站设计专业，内容丰富，支持多种用户登录方式，并集成了滑动验证码以增强登录安全。技术栈包含jQuery及第三方验证码服务，整体性能和移动端优化表现良好。安全方面，网站采用密码加密和验证码机制，但缺少明显的安全HTTP头和隐私合规提示，存在改进空间。WHOIS信息缺失引发一定的合法性疑虑，但网站具备中国ICP备案和公安备案，显示其合规运营。综合来看，读秀学术搜索是一个可信赖的学术资源平台，但建议加强安全配置和隐私合规措施以提升整体安全和用户信任。

M

ManageXValue

managexvalue.com

71

ManageXValue is a specialized SaaS platform offering quantitative methodologies and tools to help business decision-makers and investment professionals manage growth and risk effectively. The company provides key solutions including Investment Fund Analytics, Quantitative Risk Management, and Strategic Impact Valuation, positioning itself as a niche player in the finance and technology sectors. The website is professionally designed using modern web technologies such as React, Next.js, and Material-UI, with integration of Stripe for payment processing and Google Analytics for user tracking. Privacy and terms of service pages are present, and a cookie consent mechanism is implemented, indicating basic compliance with privacy regulations. Security posture is good with HTTPS and Content-Security-Policy headers, though additional security headers and explicit security policies could enhance trust. The domain registration is consistent with the business founding date and shows no suspicious patterns, supporting legitimacy. Overall, the website demonstrates a solid technical foundation and business credibility, suitable for its target audience of finance and risk management professionals.

V

Vertika Alkalmazásszolgáltató Kft

prim.hu

59

Prim.hu is an established Hungarian online IT magazine operated by Vertika Alkalmazásszolgáltató Kft, founded in 1996. It targets IT professionals and business users with news, articles, event calendars, and newsletters. The site leverages advertising revenue through multiple ad networks and provides a comprehensive cookie consent mechanism compliant with GDPR. Technically, the site uses legacy jQuery and Google Fonts, with moderate performance and basic mobile optimization. Security posture is good with HTTPS and consent management, though some security headers could be improved. No critical vulnerabilities or suspicious WHOIS data were found, supporting the site's legitimacy and trustworthiness.

N

NET Média Zrt.

portfolio.hu

54

Portfolio.hu is a leading Hungarian online financial and economic news portal operated by NET Média Zrt. The website offers a wide range of content including micro- and macroeconomic news, analyses, forums for professionals, financial conferences, industry forums, investor clubs, and trader courses. It targets Hungarian-speaking financial professionals, investors, and the general economic audience. The business model combines advertising revenue with premium subscription content and event services. Technically, the site uses modern JavaScript libraries, Firebase for messaging and analytics, and integrates multiple third-party advertising and tracking services with a consent management platform to comply with GDPR. The site is well-designed, mobile-optimized, and provides extensive financial data and news content.

E

endurit

endurit.com

51

endurit is a Swiss-based technology company specializing in the design, development, and operation of sophisticated web applications, websites, and hosting services primarily for clients across Europe. With over 25 years of experience, the company positions itself as a trusted provider of tailored web solutions from Zurich, targeting small and medium-sized enterprises (KMU) and other organizations. Their service portfolio includes custom web applications, CMS-driven websites, hosting in a Swiss high-security data center, and ongoing support services. The website reflects a professional and consistent brand image with clear contact channels and client testimonials, indicating a strong market presence in their niche.

S

Startupticker

startupticker.ch

59

Startupticker.ch is a well-established Swiss media platform focused on delivering high-quality news, reports, and event information related to the Swiss startup ecosystem. It serves entrepreneurs, investors, and innovation stakeholders by providing timely and relevant content, supported by a network of reputable partners and sponsors. The platform offers a variety of services including news articles, event calendars, venture capital reports, and an ecosystem directory, positioning itself as a key information hub in Switzerland's startup landscape. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Analytics, ensuring a responsive and user-friendly experience across devices. Security-wise, the site uses HTTPS and basic security headers but lacks advanced headers and a formal security policy or incident response contact, which are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance and security best practices.

The analyzed page is a 404 error page from the www.amazon.co.uk domain, indicating the requested URL is not found. Amazon is a global leader in e-commerce, providing a wide range of products and services to consumers and businesses. The page uses Amazon's proprietary JavaScript analytics and tracking technologies, hosted on Amazon's infrastructure. While the page is served over HTTPS, it lacks visible security headers and does not provide privacy or cookie policies on this error page. No contact information or forms are present, limiting user engagement on this page. The domain is a subdomain of amazon.co.uk, a well-established and legitimate domain, with WHOIS data not available due to Nominet UK policies on subdomains.

H

Helmholtz-Zentrum Hereon

hereon.de

61

Helmholtz-Zentrum Hereon is a prominent German research center specializing in climate, coastal, technology, and material sciences. It operates under the Helmholtz Association and serves a scientific and policy-oriented audience. The website is well-structured, featuring multiple institutes and departments with detailed navigation and scientific content. Technically, the site uses the Imperia CMS and Foundation CSS framework, providing a moderate performance and good mobile optimization. However, the site lacks explicit privacy and cookie policies, security headers, and contact information, which impacts its security and privacy posture. No WAF or blocking mechanisms are detected, and the domain appears legitimate and consistent with the institution's profile. Strategic improvements in security and privacy compliance would enhance trust and regulatory adherence.

GERICS (Climate Service Center Germany) operates as a specialized climate service organization providing scientific research, climate impact assessments, and knowledge transfer services primarily focused on climate change adaptation and mitigation. The website presents a professional and content-rich platform targeting researchers, policymakers, and public sector stakeholders interested in climate services. The technical infrastructure is based on the Imperia CMS with interactive maps and climate-related product catalogs, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS likely enabled but lacking security headers and formal privacy or incident response policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy compliance measures.

A

CVCA & SLOVCA AWARDS 2023 – CVCA & SLOVCA Awards 2023

awards2023.eu

54

The website www.awards2023.eu represents the CVCA & SLOVCA Awards 2023, an event likely focused on recognizing achievements in the venture capital and private equity sectors within the Czech and Slovak regions. The site provides information about the awards, nominees, and event details, targeting professionals and organizations in these industries. The business model centers on event organization and promotion, with a small-scale digital presence. Technically, the website is built on WordPress using popular plugins such as Elementor for page building and Yoast SEO for search engine optimization. The site loads Google Fonts and uses FooGallery for image galleries. The performance and mobile optimization are moderate to good, but accessibility features are basic. No advanced frameworks or hosting details are evident from the content. From a security perspective, the site uses HTTPS (implied by resource loading over HTTPS), but no explicit security headers were detected in the provided content. There is no visible privacy policy, cookie consent mechanism, or contact information for security or incident response, which are areas for improvement. The WHOIS data is privacy protected by EURid, which is typical for .eu domains, and no suspicious patterns were found. Overall, the website is functional and professional for its purpose but lacks comprehensive privacy, security, and contact transparency. Strategic improvements in these areas would enhance trust and compliance.

C

CVCA

awards2024.eu

48

The website www.awards2024.eu represents the CVCA & SLOVCA Awards 2024, an initiative jointly organized by CVCA and SLOVCA to promote and support the venture capital and private equity sectors. The site targets industry professionals and stakeholders interested in these awards and the broader finance sector. The business model centers on organizing and publicizing industry awards, positioning itself as a niche player within the Czech and Slovak venture capital ecosystem. Technically, the website is built on WordPress using the GeneratePress theme and Elementor page builder, with SEO enhancements via Yoast SEO. It employs modern web technologies including Google Fonts, jQuery, and FooBox for image lightbox functionality. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and uses standard WordPress security practices but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service pages were found. Overall, the website is professional and trustworthy with a good business credibility score. However, improvements in privacy policy transparency, security header implementation, and contact information disclosure would enhance its security posture and compliance standing.

C

CVCA Slovca Awards 2025

awards2025.eu

52

The CVCA Slovca Awards 2025 website serves as the official platform for the joint awards organized by the Slovak Venture Capital & Private Equity Association (SLOVCA) and the Czech Private Equity & Venture Capital Association (CVCA). The site provides detailed information about the awards, finalists, categories, and event timelines, targeting professionals and stakeholders in the private equity and venture capital sectors in Slovakia and the Czech Republic. The website is well-structured, professionally designed, and optimized for SEO and GDPR compliance, reflecting a mature digital presence for a regional industry event. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Elementor, Slider Revolution, and Complianz GDPR, indicating a modern and maintainable infrastructure. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms, demonstrating attention to privacy and security standards. However, some security headers are missing, and no explicit security or incident response policies are publicly available. From a security perspective, the site shows a good posture with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is typical for such event sites and does not raise immediate concerns. The site lacks a vulnerability disclosure policy and security.txt file, which could enhance trust and transparency. Overall, the website presents a professional and trustworthy front for the CVCA Slovca Awards, with solid technical and privacy compliance foundations. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen its security posture and user trust.

P

Pixelgrade

pixelgrade.com

59

Pixelgrade is a specialized company focused on delivering premium WordPress themes tailored for creative professionals such as designers, photographers, and agencies. Established in 2010, the company has positioned itself as a niche leader in the creative WordPress theme market, offering high-quality, customizable themes with dedicated customer support. Their website reflects a strong brand identity and professional design, targeting a global audience of creatives seeking elegant and functional website solutions. Technically, Pixelgrade's website is built on WordPress with Elementor as a key framework, leveraging modern web technologies including HTML5, CSS3, and JavaScript. The site is hosted with Cloudflare providing DNS and CDN services, ensuring fast load times and good performance. Mobile optimization and accessibility are well addressed, contributing to an excellent user experience. SEO best practices are implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. The domain registration is transparent and consistent with the business profile, with no privacy protection masking ownership. While no explicit security policy or incident response information is published, the site follows good security hygiene. No vulnerabilities or suspicious activities were detected. Overall, Pixelgrade presents a low-risk profile with a mature digital presence, strong business credibility, and good privacy compliance. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a security.txt file to enhance transparency and vulnerability management.

V

Volkshochschule Kaiserslautern e.V.

kochklasse-kaiserslautern.de

44

Kochklasse Kaiserslautern is a cooking school operated under the Volkshochschule Kaiserslautern e.V., offering a variety of culinary education services including in-person and online cooking courses, workshops on food and drink culture, and event-based cooking experiences. The website is professionally designed using WordPress and targets a general audience interested in culinary arts and cooking education within the Kaiserslautern region. Technically, the site uses standard WordPress technologies with jQuery and Modernizr, hosted on servers associated with rzone.de. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and serves its educational purpose effectively.

B

Bezirksverband Pfalz

bv-pfalz.de

54

Bezirksverband Pfalz is a regional governmental organization in Germany focused on political administration, culture, education, health, and environmental protection within the Pfalz region. The website serves as an official portal providing information about its services, events, and regional initiatives. The organization maintains a moderate-sized digital presence with clear navigation and professional content tailored to residents and stakeholders in the region. Technically, the website is built on WordPress with several plugins including WooCommerce and The Events Calendar, supported by Matomo analytics respecting user privacy through consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible platform. Overall, the site reflects a trustworthy and compliant governmental entity with room for technical modernization and enhanced security policies.

The website www.kaiserslautern.de is the official digital presence of the city of Kaiserslautern, Germany. It serves as a comprehensive portal for residents, visitors, and businesses, offering extensive information on municipal services, social programs, cultural events, tourism, education, and urban planning. The site is well-structured with clear navigation and multilingual support, reflecting a mature digital infrastructure typical of a large municipal government entity. Technically, the site is built on the Imperia CMS platform and leverages established JavaScript libraries such as jQuery, Leaflet for mapping, FontAwesome for icons, and AOS for animations. The hosting is managed via DomainControl nameservers, a common registrar service. The website demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site employs HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully detailed, the site shows no signs of exposed sensitive data or vulnerable libraries. Analytics are handled via Piwik (Matomo), indicating a privacy-conscious approach to user tracking. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement. Overall, the website presents a trustworthy and professional government portal with solid content quality and technical implementation. Strategic recommendations include enhancing security transparency, updating legacy libraries, and publishing formal security and incident response policies to strengthen compliance and user trust.

Jugendkulturmeile Kaiserslautern is a non-profit cultural network based in Kaiserslautern, Germany, focused on providing diverse cultural and educational programs for children, youth, families, schools, and social institutions. The network comprises multiple local cultural institutions offering workshops, courses, concerts, and other creative activities to foster artistic development and cultural education. The website is built on WordPress using Elementor and hosted likely by 1&1 IONOS, featuring a modern and responsive design with good navigation and content relevance. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by adding security headers and cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and serves its community-oriented mission effectively.

The website www.sgit.se serves as a portal for Försäkringskassan's coordinated and secure state IT operations, offering standardized IT services tailored for Swedish government agencies. The site presents a professional and consistent brand image aligned with government standards, focusing on services such as application management, IT workplace solutions, and e-identity services for the public sector. The technical infrastructure is built on SiteVision CMS with jQuery and integrates Matomo analytics for user tracking. While the site is mobile-optimized and accessible, it lacks explicit privacy and cookie policies, and no security headers were detected, indicating areas for security enhancement. The absence of WHOIS data for the exact domain suggests it may be a subdomain or alias, but the strong association with Försäkringskassan supports its legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for improved privacy compliance and security posture.

The website www.grafik-design-weibel.de currently displays a critical WordPress error page, indicating that the site is non-functional and inaccessible to users. Due to this, no business description, contact information, or service details are available. The domain is registered with GoDaddy's nameservers, suggesting legitimate registration, but the lack of accessible content severely limits the ability to assess the company's market position or offerings. Technically, the site uses WordPress CMS but suffers from a critical failure that must be resolved to restore functionality. Security posture is weak as no security headers or HTTPS status could be verified, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other regulations. Overall, the site is currently not operational, posing a significant risk to business credibility and user trust.

M

Ministerium für Klimaschutz, Umwelt, Energie und Mobilität Rheinland-Pfalz

aktion-gruen.de

54

Aktion Grün is a government-backed environmental initiative by the Ministry for Climate Protection, Environment, Energy and Mobility of Rheinland-Pfalz, Germany. The website serves as a platform to promote biodiversity conservation, species protection projects, and public engagement across the region. It targets local citizens, municipalities, farmers, and educational institutions to participate in environmental protection efforts. The site is well-branded with official government logos and provides comprehensive information about projects, funding, and participation opportunities. Technically, the website is built on WordPress using the Yoast SEO plugin and Bootstrap framework, ensuring good SEO and mobile responsiveness. It integrates Google Maps for project visualization and uses modern web technologies. Performance is moderate with good accessibility features. However, some security best practices like security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a legitimate German government entity. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance and security transparency. The overall risk is low given the nature of the site and its government affiliation. Strategic recommendations include implementing cookie consent, adding security headers, and publishing a security.txt file to enhance trust and compliance.

The website at bodowinter.com appears to be a basic, small-scale business site with minimal content and limited digital maturity. The domain is well-established, registered since 2010, and hosted via RegistryGate GmbH. The site uses Bootstrap CSS for styling but lacks advanced frameworks or CMS platforms. There is no evidence of privacy, cookie, or terms of service policies, nor any contact information such as emails or phone numbers, which limits user trust and compliance with data protection regulations. Security posture is basic with no DNSSEC enabled and no security headers detected, indicating room for improvement in protecting user data and site integrity. Overall, the site is accessible without WAF or blocking mechanisms but scores low on privacy compliance and business credibility due to missing policies and contact details.

E

escape GmbH

escape-germany.de

65

escape GmbH is a German software development agency with over 20 years of experience specializing in digital enterprise platforms, workflow innovation, and intelligent marketing solutions. The company targets businesses and organizations seeking tailored digital tools and services, offering end-to-end project support from consulting to maintenance. Their market position is supported by a portfolio of reputable clients including BMW, Leica, and Vodafone. Technically, the website is built on the Cellms CMS platform, leveraging jQuery and includes modern analytics tools such as Google Analytics and Matomo. Mobile optimization and SEO are well addressed, though some accessibility features could be improved. Security posture is solid with HTTPS and cookie consent mechanisms in place, but could benefit from enhanced security headers and updated libraries. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Ostbelgienrecht.be is an official terminology portal managed by the German-speaking community of Belgium, providing authoritative legal terminology databases and related resources. The site serves legal professionals, translators, and government officials by offering the Debeterm and minTerm databases, alongside committee information and downloadable legal documents. The portal is developed and maintained by Demetec Sprl, a recognized software company, ensuring professional content delivery and technical stability. The website is well-structured, multilingual, and targets a specialized audience within the governmental and legal sectors. Technically, the site leverages ASP.NET Web Forms, contentXXL CMS, and integrates modern JavaScript libraries and consent management tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses reCAPTCHA for form protection, and provides cookie consent mechanisms, though it could improve by adding advanced security headers like CSP and X-Frame-Options. Overall, the website demonstrates a strong security posture with no evident vulnerabilities or malicious content. The domain registration aligns with the developer company, supporting legitimacy and trust. Privacy compliance is well addressed with clear policies and consent banners. The site is safe for general audiences and maintains a professional and trustworthy online presence.

M

Ministerium der Deutschsprachigen Gemeinschaft

mdg.be

61

The website www.mdg.be serves as the official online portal for the Ministerium der Deutschsprachigen Gemeinschaft, the government ministry responsible for the German-speaking Community in Belgium. It provides digital services primarily for government personnel, civil servants, and school staff, including access to payslips, time records, SAP system access, and remote support. The site is clearly targeted at internal government users and operates as a government service platform. Technically, the website is built with basic HTML, CSS, and JavaScript, with minimal external dependencies and no detected CMS or advanced frameworks. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. Security-wise, the site uses HTTPS for its subdomains and provides a cookie removal script, but no explicit security headers or privacy policies are present, which limits its security posture. The WHOIS data is restricted by DNS Belgium policy, preventing extraction of registrar or registrant details, but the domain's use and content strongly indicate legitimacy as a government entity. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced security headers, privacy compliance documentation, and improved technical modernization.

O

Ostbelgien.Net

ostbelgien.net

62

Ostbelgien.net is a well-established regional lifestyle and real estate portal serving the Ostbelgien region in Belgium. Founded in 2008, it offers comprehensive listings and information on gastronomy, events, travel accommodations, real estate, and leisure activities, targeting both local residents and tourists. The website is professionally designed with consistent branding and provides useful services such as newsletters and interactive maps. Technically, the site runs on ASP.NET Kentico CMS, uses jQuery and Flexslider for UI components, and integrates Google Analytics for traffic monitoring. It employs Cloudflare DNS but lacks DNSSEC and some security headers, indicating room for security improvements. The site uses HTTPS and a cookie consent mechanism compliant with GDPR, reflecting a good privacy posture. However, no explicit security policies or incident response contacts are published, which could be enhanced to improve trust and compliance. Overall, the domain registration data aligns well with the website's business claims, supporting its legitimacy and stable market presence.

Klett Vertrieb operates as a service and distribution portal for multiple Klett publishing brands, targeting the German book retail sector. The website provides current information, catalogs, and contact points primarily for book retailers and partners. The business model centers on representing Klett Verlag im Handel and facilitating orders and deliveries through the SVK GmbH logistics partner. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response details are lacking. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism present. Overall, the site is professional and trustworthy but could improve in transparency and security communication.

The website at createsend1.com currently serves only an error page with minimal content, indicating either a temporary issue or a placeholder state. The domain is well-established since 2007 and registered with a reputable registrar, MarkMonitor Inc., with strong domain status protections, suggesting legitimacy. However, the lack of accessible content, privacy policies, contact information, and security headers severely limits the ability to assess the business or security posture comprehensively. The technical infrastructure appears minimal with only CSS resources loaded from related domains. No evidence of modern analytics or tracking technologies is present in the provided data. Security posture is weak due to missing HTTPS confirmation and security headers. Overall, the site is currently not functional for end users and lacks critical compliance and trust indicators.

E

esistfreitag

esistfreitag.de

49

esistfreitag is a German creative agency established in 2011, specializing in multidisciplinary projects and campaigns that connect brands with people. The company operates beyond traditional agency services by running a city magazine, a curated product store, and an urban space for creativity and events. Their market position is that of a small but established agency with a strong community focus and a modern approach to creative services. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and Lottie animations, hosted on rzone.de servers. The site is mobile-optimized and features video backgrounds and interactive elements, though SEO metadata is minimal. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and SEO could enhance its profile.

EintrachtTech GmbH operates as a technology service provider closely linked to the Eintracht sports club, focusing on delivering digital services and information to its members and the general public. The website serves primarily as an informational portal with links to the club's digital platform. The business appears to be a small-sized entity operating within Germany, leveraging modern web technologies such as Bootstrap and jQuery, hosted on Microsoft Azure infrastructure. From a technical perspective, the website employs a standard ASP.NET MVC framework with a responsive design that caters well to mobile users. However, the site lacks advanced SEO metadata and accessibility features, and performance is moderate. Security practices include the use of HTTPS and CSRF tokens, but there is an absence of explicit security headers and no visible vulnerability disclosure or incident response information. The security posture is moderate with no critical vulnerabilities detected in the provided data, but improvements are needed in cookie consent mechanisms and security header implementation to enhance compliance and protection. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Business credibility is supported by the presence of legal imprint and terms of service pages, though contact information is not directly available on the homepage. Overall, the website is safe for general audiences, with no adult or questionable content detected. The domain registration data aligns well with the website's business claims, indicating legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving SEO and accessibility to strengthen the website's professionalism and compliance.

G

GLOBAL TRADE TECHNOLOGY s.r.o.

pronajemnamiru.cz

34

Pronájem na míru is a Czech Republic-based real estate rental service specializing in high-standard furnished apartments across major cities such as Prague and Ostrava. The website presents a professional and well-structured platform for users to browse and filter rental properties, targeting individuals seeking premium rental accommodations. The business is operated by GLOBAL TRADE TECHNOLOGY s.r.o., as indicated in the website footer and WHOIS data, although the domain registration date appears suspiciously set in the future, which warrants further verification. Technically, the website is built on WordPress using Bootstrap 4 and several plugins including Smart Slider 3. It employs modern web technologies such as jQuery and Google Fonts, and integrates Google Maps API for location services. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating potential GDPR compliance gaps. No incident response or vulnerability disclosure mechanisms are found. The site does not appear to use analytics or tracking services beyond standard WordPress scripts, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration data to strengthen trustworthiness and security posture.

O

OLC Webdesign s.r.o.

olcwebdesign.cz

53

OLC Webdesign s.r.o. is a Czech-based creative agency specializing in professional web design, custom e-commerce solutions, online systems, and mobile applications. Established in 2024 through the merger of two local agencies, it serves a diverse clientele including municipalities and NGOs, positioning itself as a reputable regional player within the OLC Group. The website reflects a modern, well-structured digital presence with strong branding and clear service offerings. Technically, the site leverages modern frameworks like Astro and integrates Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though it lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional content and clear contact information support business credibility. Overall, the site is a high-quality representation of a small technology service provider with room to enhance privacy compliance and security transparency.

U

UP Business Camp

upbusinesscamp.cz

56

UP Business Camp is a well-established annual conference focused on startups, investment, and finance, primarily targeting aspiring entrepreneurs and business professionals in the Olomouc region of the Czech Republic. The event is organized by the Vědeckotechnický park Univerzity Palackého v Olomouci and features a comprehensive program including workshops, keynote speakers, and startup showcases. The website reflects a professional and consistent brand image, supported by strong regional and academic partnerships. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Overall, the site is user-friendly, mobile-optimized, and rich in relevant content, making it a credible platform for its target audience.

V

Vědeckotechnický park Univerzity Palackého v Olomouci

podnikavahlava.cz

58

The website 'Podnikavá hlava' is an educational and entrepreneurial platform managed by the Vědeckotechnický park Univerzity Palackého v Olomouci. It organizes an annual business plan competition aimed at supporting both novice and experienced entrepreneurs in the Czech Republic. The platform offers workshops, expert consultations, and financial prizes, positioning itself as a key regional player in fostering startup growth and innovation. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Technically, it employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring moderate performance and good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, although additional security headers and explicit incident response information are absent. The absence of WHOIS data reduces domain trustworthiness, but the university affiliation and reputable partnerships mitigate this concern. Overall, the site presents a trustworthy and professional front for its educational mission.

Sascha Rösner's website is a German-language personal blog focused on nature, photography, and ecological topics. The site serves a niche audience interested in environmental and wildlife content, with a small-scale business model centered on content publishing and photography. The website is built on WordPress, leveraging multiple plugins for SEO, galleries, and popups, hosted by SchlundTech in Germany. The technical infrastructure is modern and mobile-optimized, with good SEO practices and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response mechanisms. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Contact is primarily via a contact form, with no explicit emails or phone numbers published. Overall, the site is trustworthy and professional, with no signs of suspicious or adult content.