Security Directory

R

Romeofilms

sidliskovysen.sk

41

The website sidliskovysen.sk serves as the official online presence for the documentary film 'RYTMUS sídliskový sen,' focusing on the life and culture surrounding Slovak hip-hop artist Rytmus. The site provides film-related content, including cast, crew, galleries, and related social projects. It targets a general audience interested in music, social issues, and documentary films. The business model revolves around media production and promotion, supported by partnerships with educational and governmental organizations in Slovakia and the EU. Technically, the site uses a traditional web stack with HTML5, CSS, JavaScript, and jQuery, supported by the Nette PHP framework and hosted on Websupport infrastructure. It integrates Google Analytics for tracking and Livechatoo for user engagement. However, the site lacks HTTPS, which is a critical security shortfall. Security posture is moderate with DNSSEC enabled but missing key security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professionally designed but requires improvements in security and compliance to enhance trust and user safety.

O

Oberfrankenstiftung

oberfrankenstiftung.de

54

The Oberfrankenstiftung is a publicly governed foundation focused on promoting welfare in the Oberfranken region of Germany. It supports projects in social, cultural, and scientific fields by allocating funds from its endowment. The website reflects a well-structured and professional digital presence with comprehensive information about its activities, funding opportunities, and recent projects. The foundation positions itself as a key regional non-profit entity with strong ties to local government and cultural institutions. Technically, the website employs standard web technologies such as Bootstrap and jQuery, ensuring responsive design and good user experience. While the site is well-structured and content-rich, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable scripts. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. The WHOIS data aligns well with the website content, showing a consistent and legitimate domain registration. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively. Strategic enhancements in security headers, privacy compliance, and incident response transparency would further strengthen its security posture and user trust.

S

shoddy.site

shoddy.site

68

Shoddy.site is a small independent Mastodon server operated by an individual named Chris, providing a general purpose fediverse social media service. The website serves as an about page describing the service and its administration, targeting general users interested in decentralized social media. The business model is community-driven and personal, with no commercial or enterprise scale indicated. Technically, the site runs on a Glitch-soc fork of Mastodon version 4.3.5, with a modern JavaScript and CSS stack, and is moderately optimized for mobile and accessibility. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and no published security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is trustworthy for its scale and purpose but could improve security and compliance transparency.

U

Useful Collective s.r.o.

logokit.com

64

LogoKit is a technology company providing a reliable and comprehensive API service for accessing high-quality logos and structured brand metadata for companies, stocks, ETFs, cryptocurrencies, and other assets. The service targets developers and businesses such as fintech platforms, job boards, e-commerce sites, and media outlets, offering seamless integration with a single line of code. The company positions itself as a market leader with extensive coverage and a global CDN ensuring fast delivery worldwide. The business operates on a tiered subscription model including a free plan and multiple paid tiers with increasing features and usage limits. Technically, LogoKit employs modern web technologies including Turbo Rails, Stimulus, Tailwind CSS, and integrates analytics via PostHog and Google Tag Manager. Hosting and DNS are managed through Cloudflare, providing performance and security benefits. The website is well-optimized for mobile and accessibility, with professional design and clear navigation. Security practices include HTTPS enforcement and CSRF protection, though explicit HTTP security headers are not evident from the data. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. The security posture is solid with no critical vulnerabilities detected, and the domain WHOIS data supports legitimacy with consistent registration details and appropriate domain age. The company provides clear contact information via email and maintains active social media profiles, enhancing trustworthiness. Overall, LogoKit demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, adding explicit security headers, implementing a cookie consent mechanism to improve GDPR compliance, publishing a security.txt file for vulnerability disclosure, and enhancing transparency around data retention policies.

N

nph Kinderhilfe Lateinamerika e.V.

nph-kinderhilfe.org

61

nph Kinderhilfe Lateinamerika e.V. is a well-established non-profit organization dedicated to improving the lives of children in Latin America and Haiti through education, protection, and family support. With a history dating back to 1954, the organization operates with a clear mission to provide safe environments and opportunities for children to grow and thrive. The website reflects a professional and consistent brand image, targeting donors, supporters, and stakeholders interested in child welfare. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Directus as a CMS. It demonstrates good performance, mobile optimization, and SEO practices. The presence of Google Tag Manager indicates moderate user tracking for analytics and marketing purposes. From a security perspective, the site uses HTTPS with strong SSL configuration and includes essential security headers. However, there is no explicit security policy or incident response information publicly available, which could be improved. The WHOIS data is unavailable due to query failure or privacy protection, which is common for non-profits but slightly reduces trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

C

Christoffel-Blindenmission Deutschland e.V. (CBM)

cbm.de

51

Christoffel-Blindenmission Deutschland e.V. (CBM) is a well-established German non-profit organization dedicated to aiding visually impaired, blind, deaf, and physically disabled people in developing countries. The website clearly communicates its mission, projects, and donation opportunities, targeting donors, churches, and supporters interested in humanitarian and inclusive development work. The organization holds recognized certifications and trust seals, enhancing its credibility. Technically, the website employs modern web technologies including JavaScript, jQuery, and a consent management platform (Usercentrics) to ensure GDPR compliance. Hosting is managed via Ecotel, and analytics are performed using privacy-conscious Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies, incident response contacts, and security headers, which could be improved to enhance trust and resilience. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly platform for the CBM's charitable activities, with minor recommendations to bolster security transparency and incident readiness.

W

WEISSER RING Stiftung

weisser-ring-stiftung.de

50

The WEISSER RING Stiftung is a German non-profit foundation dedicated to supporting victims of crime and strengthening their societal position. The foundation operates through funding projects aligned with its mission, supported by donations and conservative investment strategies. The website presents a professional and consistent brand image, targeting donors, supporters, and victims seeking assistance. Technically, the site is built on Drupal 10, hosted likely by Deutsche Telekom, and uses Piwik analytics with privacy-conscious settings. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the site is trustworthy and well-maintained, reflecting the foundation's reputable standing in the non-profit sector.

Holidu GmbH operates a vacation rental search and booking platform targeting travelers seeking holiday accommodations primarily in Germany and Europe. The website offers a comprehensive search engine with over 15 million listings, positioning itself as a significant player in the hospitality sector. The business model revolves around aggregating and comparing vacation rental offers to facilitate user bookings. Technically, the site employs modern JavaScript frameworks, including React, and integrates multiple analytics and marketing tools such as Google Analytics, Bing Ads, and Taboola. Hosting is managed via Amazon AWS infrastructure, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published on the analyzed page. Privacy compliance is evident through accessible privacy and cookie policies, with GDPR considerations addressed. Overall, the site demonstrates good professionalism, trustworthiness, and technical maturity, though improvements in transparency around security and contact information would enhance credibility further.

P

Pomoc.sk

pomoc.sk

58

Pomoc.sk is a Slovak non-profit helpline and educational platform dedicated to child and youth internet safety, supported by the European Commission and Slovak government bodies. It provides free 24/7 telephone counseling, online chat, and email support, alongside accredited educational programs addressing cyberbullying, online risks, and digital literacy. The organization has a strong market position in Slovakia with over 18 years of experience and recognized partnerships with UNICEF and government ministries. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, Google Analytics for tracking, and a third-party chat widget (Livechatoo). The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and published security or incident response policies. Privacy and cookie policies are absent, representing compliance gaps with GDPR and related regulations. The site does not show signs of vulnerabilities or malicious content but would benefit from improved security best practices. Overall, Pomoc.sk is a trustworthy and professionally presented resource for child internet safety in Slovakia, with solid business credibility but room for improvement in privacy compliance and security posture.

C

Conversion Expert GmbH

conversion.expert

63

Conversion Expert GmbH is a specialized technology service provider focused on A/B-Testing development, consulting, and platform solutions. With over 10 years of experience and hundreds of implemented experiments, they serve companies and agencies of all sizes primarily in Germany. Their business model combines bespoke A/B-Testing implementation services with their proprietary platform ABlyft, targeting expert users seeking high performance and flexibility. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as a trusted expert in the conversion optimization space. Technically, the website employs modern web technologies including Bootstrap, jQuery, and lazy loading for performance optimization. It integrates New Relic for monitoring and analytics, indicating a mature approach to performance and error tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting and domain registration are consistent with the business claims, enhancing credibility. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled and no explicit security headers were detected in the provided data. There is no visible security or incident response policy, and cookie consent mechanisms are absent despite GDPR relevance. These gaps suggest room for improvement in compliance and security posture. Overall, the website is trustworthy, professionally maintained, and business-focused with moderate privacy compliance and good technical implementation. Strategic enhancements in security headers, cookie consent, and explicit security policies would further strengthen their security posture and regulatory compliance.

A

AudioCodes

audiocodes.com

71

AudioCodes is a global enterprise technology company specializing in advanced voice networking and media processing solutions tailored for the digital workplace. Their offerings include Microsoft Teams integration, contact center innovations, meeting room solutions, and Voice.AI products, positioning them as a leading vendor in the telecommunications and technology sectors. The company targets enterprises and service providers, delivering both hardware and SaaS platforms to support unified communications and cloud migration strategies. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript libraries and analytics tools such as Google Tag Manager and ZoomInfo. The site is well-optimized for mobile and accessibility, with comprehensive SEO and structured navigation. Security best practices are observed with HTTPS enforcement and multiple security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR adherence. The absence of WHOIS data reduces some trust but is mitigated by the professional presentation and external validation through partner portals and investor relations. Overall, AudioCodes presents a credible and professional online presence with a robust business model and technical foundation. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosures to further strengthen trust and compliance.

S

StädteRegion Aachen

staedteregion-aachen.de

61

StädteRegion Aachen operates as a regional governmental authority in Germany, providing a wide range of administrative and public services to residents and stakeholders within its jurisdiction. The website serves as a comprehensive portal offering information on governance, history, digital infrastructure, social services, and citizen engagement. The target audience primarily includes local citizens, businesses, and public sector partners. The business model is centered on public administration and service delivery, positioning the entity as a key regional government institution. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as JavaScript and CSS. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Performance is moderate, with room for optimization. Security measures include HTTPS enforcement and standard security headers, contributing to a solid security posture. Security evaluation reveals strengths in encryption and cookie consent mechanisms, though the absence of explicit security policies, incident response contacts, and vulnerability disclosure reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and secure platform for regional government services. Strategic recommendations include publishing detailed security policies, establishing vulnerability disclosure channels, and enhancing contact information for security incidents to further strengthen trust and compliance.

V

Verband der Gründer und Selbstständigen Deutschland e.V.

vgsd.de

64

The Verband der Gründer und Selbstständigen Deutschland e.V. (VGSD) is a non-profit organization dedicated to representing the interests of founders, self-employed individuals, and small businesses in Germany. The website serves as a comprehensive platform offering advocacy, community engagement, educational content, events, and podcasts to support its target audience. The VGSD positions itself as a key lobby group fighting for fair regulations and better conditions for its members. Technically, the website is built on WordPress with modern JavaScript frameworks like Alpine.js and integrates multiple analytics and tracking tools with a strong emphasis on user consent and privacy compliance. Security-wise, the site enforces HTTPS, anonymizes IPs in analytics, and uses consent-based script loading, though it lacks explicit security policy documentation and a vulnerability disclosure mechanism. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

K

K2MATCH LIMITED

k2match.com

62

K2MATCH LIMITED operates a professional international entrepreneurial ecosystem platform focused on developing B2B and B2B2C startups and scaleups into market leaders. The company facilitates connections between startups, investors, corporates, business communities, and expert solution partners, offering growth services and hosting investor lounges and accelerator programs. The website is built on Squarespace, featuring a modern and professional design with good mobile optimization and SEO practices. Security posture is solid with HTTPS and HSTS enabled, though some security headers and privacy policies are missing. WHOIS data is unavailable, which slightly impacts trust but the website content and structure indicate a legitimate business. Overall, K2MATCH presents a credible platform for startup ecosystem development with room for improvement in privacy and security transparency.

JTL-Connect is a professional e-commerce event organized by JTL-Software-GmbH, targeting customers, partners, and interested parties in the e-commerce sector primarily in Germany. The website promotes the 8th JTL-Connect event scheduled for October 2, 2026, in Cologne, providing information and networking opportunities. The company holds a solid market position as an established event organizer within the German e-commerce ecosystem. Technically, the website is built on WordPress with modern SEO practices using Yoast SEO Premium. It integrates multiple analytics and marketing tools such as Google Analytics, Matomo, Facebook Pixel, Microsoft Clarity, and LinkedIn Insight Tag, demonstrating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS, employs Google reCAPTCHA for form protection, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and a published security policy or incident response information, which are areas for improvement. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained. The risk level is low, but strategic enhancements in security transparency and accessibility could further strengthen its posture.

A

Amazon.com, Inc.

amazon.jobs

72

Amazon.jobs is the official global career site for Amazon.com, Inc., a leading enterprise in technology and e-commerce. The website provides a comprehensive platform for job seekers to explore and apply for a wide range of roles including software development, warehouse, and hourly jobs. It reflects Amazon's mission to be Earth's most customer-centric company and highlights its innovative culture and global presence. The site is well-branded, professionally designed, and targets a broad audience of students, professionals, and hourly workers. Technically, the site leverages modern web technologies including React.js, AWS CloudFront CDN, and advanced performance monitoring tools such as Boomerang and AWS RUM. It is hosted on Amazon Web Services, ensuring robust infrastructure and fast performance. The website is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site enforces HTTPS, implements security headers, and uses CSRF tokens to protect forms. Privacy and cookie policies are comprehensive and include consent mechanisms, indicating good privacy compliance. However, there is no explicit security policy or vulnerability disclosure page, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, Amazon.jobs demonstrates a high level of professionalism, security, and compliance suitable for a global enterprise. The site is trustworthy and provides a safe, user-friendly experience for job seekers worldwide.

P

pixelfed.de

pixelfed.de

50

pixelfed.de is a German-based decentralized photo sharing social media platform powered by Pixelfed software. It positions itself as an ethical alternative to centralized platforms, offering features such as photo posts, albums, filters, collections, and federation with other platforms. The platform supports mobile apps, stories, and video content, targeting a general audience interested in privacy-respecting social media. The website is moderately sized with over 76,000 total users and 3,300 active users, indicating a healthy community presence. The business model revolves around providing a federated, open-source social media experience without advertising or centralized control. Technically, the website uses modern JavaScript frameworks including Vue.js and the Plyr video player, with responsive design and good SEO practices. The site is served over HTTPS with a valid SSL configuration and includes CSRF protection tokens, indicating a good security baseline. However, explicit security headers are not detected, and no cookie consent mechanism is present, which are areas for improvement. The site does not appear to use third-party analytics or tracking, aligning with its privacy-focused ethos. From a security perspective, pixelfed.de demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The lack of detailed security policies or incident response contacts is a gap, as is the absence of a vulnerability disclosure or security.txt file. The WHOIS data is minimal but consistent with the website's German origin and business history, with no privacy protection applied. Contact information is limited to an email address for the administrator, with no phone or physical address provided. Overall, pixelfed.de is a trustworthy and well-maintained platform serving a niche community interested in decentralized and ethical social media. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, expanding contact information, and publishing explicit security and incident response policies to further build trust and compliance.

G

Ghostery

whotracks.me

67

Ghostery operates WhoTracks.Me, a privacy-focused platform providing detailed insights into online trackers through an open-source database. The company positions itself as a trusted provider of privacy tools and data transparency, targeting privacy-conscious users and researchers. The website is professionally designed, mobile-optimized, and offers comprehensive content about tracking technologies and privacy protection. Technically, the site uses modern web technologies including Plotly.js for data visualization, and implements strong security measures such as HTTPS and security headers. However, the WHOIS data for the domain is missing, which is unusual but does not detract significantly from the site's legitimacy given its strong brand presence and open-source contributions. Overall, the security posture is strong with no evident vulnerabilities, and privacy compliance is well addressed with clear policies and consent mechanisms.

F

FormBeat

formbeat.com

63

FormBeat is a specialized AI-powered cycling analytics platform designed to help cyclists of all fitness levels improve their training and performance. The company offers a subscription-based SaaS model with monthly and yearly plans, integrating with popular cycling platforms such as Strava, Garmin, and Zwift. The website demonstrates a high level of professionalism, excellent content quality, and a clear focus on user experience and mobile optimization. Technically, the platform leverages modern JavaScript frameworks (Vue.js), cloud CDN hosting, and multiple analytics and marketing tools to deliver a fast and responsive user experience. Security posture is good with HTTPS enforced and CSRF protections, though there is room for improvement in security headers and explicit privacy compliance mechanisms. Overall, the business appears legitimate and well-positioned in the niche cycling analytics market, with strong trust indicators such as testimonials and recognized trademarks.

S

Speed Dial 2

speeddial2.com

52

Speed Dial 2 is a well-established browser extension focused on enhancing the new tab page experience for users of Google Chrome, Firefox, Microsoft Edge, and Brave. With over a decade of presence since 2011 and more than one million downloads, it offers customizable, organized, and productivity-enhancing features including bookmark management and a mobile app. The website reflects a professional and user-centric approach with strong branding and positive user testimonials. Technically, the site employs modern web technologies, asynchronous analytics scripts, and is hosted likely behind Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS and some security headers, though there is room for improvement in explicit cookie consent and published security policies. Overall, the site demonstrates high business credibility and technical maturity, with minor gaps in privacy compliance and incident response transparency.

C

Coloring Labs

coloringlabs.com

57

Coloring Labs is a small technology company specializing in the development of family-friendly coloring apps for iPad users, targeting children and parents. Their market position is niche, focusing on creative and educational digital content for kids. The website presents a professional and consistent brand image with clear messaging about their app offerings. Technically, the site is built using modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. However, accessibility features are basic and could be improved. From a security perspective, the website benefits from HTTPS encryption but lacks important security headers and formal security policies such as privacy or cookie policies. The use of PostHog analytics indicates moderate user tracking without visible consent mechanisms, which may raise privacy compliance concerns. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The absence of detailed business registration data and security policies suggests room for improvement in transparency and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and expanding contact information to build greater trust and compliance.

Michal Šimonfy's website serves as a comprehensive portfolio showcasing his digital and new media artworks, including installations, netart, and public space actions. The site targets art enthusiasts, galleries, and cultural institutions, positioning the artist as an independent creative professional with international recognition and awards. The business model is centered on artistic presentation rather than commercial transactions. Technically, the website employs standard web technologies such as HTML5, CSS, JavaScript, and jQuery, supplemented by Google Analytics and New Relic for monitoring. While the site is functional and moderately optimized, it lacks advanced frameworks or CMS platforms and could benefit from improved mobile responsiveness and accessibility. From a security perspective, the site uses HTTPS but lacks important security headers and formal privacy or cookie policies, which impacts compliance and user trust. No forms or sensitive data collection are present, reducing risk exposure. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and modernization of technical components to improve user experience and regulatory adherence.

K

Kijub-Bergkamen

kijub-bergkamen.de

39

Kijub-Bergkamen operates as a local government youth service platform in Bergkamen, Germany, providing a range of programs and events targeted at children, youth, adults, and institutions. The website serves as a hub for information on youth participation projects, holiday activities, and educational offerings, positioning itself as a community-centric service provider with a clear focus on youth development and engagement. The business model is public sector oriented, emphasizing community service rather than commercial revenue generation. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, and likely the MODX CMS platform, hosted on kasserver.com. It employs responsive design principles and includes cookie consent management via Cookiehero, ensuring compliance with privacy regulations. Performance is moderate with good mobile optimization, though SEO and accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. The absence of a security.txt file and incident response contacts suggests room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and safe for general audiences, with a strong focus on community and youth services. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency to further strengthen trust and compliance.

N

NRW.Mobidrom GmbH

verkehr.nrw

60

Verkehr.NRW is the official traffic information portal for the German state of Nordrhein-Westfalen, operated by NRW.Mobidrom GmbH. The website provides comprehensive real-time traffic updates, routing options for various transport modes including car, bike, public transport, and intermodal solutions, as well as additional services like fuel price comparisons and construction alerts. It serves residents and visitors seeking reliable and up-to-date traffic information within the region. The portal is positioned as a trusted government-affiliated service with a medium-sized operational scope and a focus on transportation sector services. Technically, the website is built on the Liferay CMS platform, leveraging modern web technologies such as OpenLayers for mapping, jQuery, and Clay UI components. The infrastructure appears well-maintained with good mobile optimization, accessibility, and SEO practices. Hosting and domain registration are consistent with the regional focus, and the site uses HTTPS with appropriate security headers, ensuring secure user interactions. From a security perspective, the portal demonstrates good practices including HTTPS enforcement, CAPTCHA protection on contact forms, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit published security policies or incident response contacts, and DNSSEC is not enabled, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, Verkehr.NRW presents a professional, trustworthy, and secure platform for traffic information in Nordrhein-Westfalen. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and providing explicit security and incident response information to further enhance trust and security posture.

G

GL Service gGmbH

gl-service-ggmbh.de

67

GL Service gGmbH is a German non-profit organization focused on social services including employment promotion, youth welfare, catering, and community facility management. The website is professionally designed using WordPress and Gutenberg, with good mobile optimization and clear navigation. The business targets local community members and institutions, providing essential social and municipal services. Technically, the site uses modern web standards and includes structured data for local business identification. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in privacy compliance and incident response transparency. Overall, the site is trustworthy and well-maintained, serving its community effectively.

S

Stadt Bergisch Gladbach

arbeiten-fuer-bergischgladbach.de

61

The website 'arbeiten-fuer-bergischgladbach.de' serves as the official job portal for the municipal government of Stadt Bergisch Gladbach, Germany. It provides comprehensive information on current job openings, apprenticeship and study opportunities, and application procedures. The site targets job seekers interested in public sector employment within the city, emphasizing a diverse range of professions and a strong employer brand supported by employee testimonials. The business model is that of a public sector employer promoting recruitment and workforce development. The site is well-positioned as a trusted municipal resource with a large workforce and a clear focus on community engagement. Technically, the website is built on ASP.NET WebForms with the onpublix CMS platform and uses JavaScript libraries such as slick slider and etracker analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The use of etracker analytics is accompanied by cookie consent, indicating a moderate user tracking level with good privacy compliance. No vulnerabilities or suspicious domains were detected. The WHOIS data shows generic DNS providers without detailed registrant info, but no suspicious patterns were found, supporting a high legitimacy score. Overall, the website is a professional, secure, and compliant municipal job portal with strong business credibility and good user experience. Recommendations include enhancing security headers, publishing security policies, and possibly adding terms of service to improve transparency and trust.

A

Amazon

aboutamazon.es

68

The website https://www.aboutamazon.es/ serves as the official Spanish regional About Amazon site, providing comprehensive information about Amazon's business principles, operations, and impact in Spain. It highlights Amazon's focus on customer obsession, innovation, logistics excellence, and long-term thinking. The site targets a general audience including customers, partners, and potential employees, showcasing Amazon's services such as e-commerce, logistics, AWS, and entertainment. The market position is that of a leading global e-commerce and technology provider with a strong presence in Spain. Technically, the site employs modern web technologies including Polymer web components, TrustArc for consent management, and Chartbeat for analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed privacy and cookie policies with consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations, although WHOIS data is unavailable due to query restrictions. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance transparency and trust.

A

Amazon

aboutamazon.mx

60

Amazon México's About site serves as a corporate information portal tailored for the Mexican market, providing announcements, original content, and data about Amazon's operations in Mexico. The site reflects Amazon's position as a leading global e-commerce and technology company, offering services including retail, logistics, cloud computing, and entertainment. The content is professionally presented in Spanish, targeting consumers, partners, and stakeholders in Mexico. The site is part of Amazon's global network of About sites, supporting brand consistency and regional engagement. Technically, the website employs modern web technologies such as Polymer for custom elements, integrates third-party services like Facebook SDK, YouTube API, Chartbeat analytics, and Adobe DTM for marketing and analytics. The site is hosted likely on Amazon AWS infrastructure, ensuring fast performance and good mobile optimization. SEO and accessibility practices are well implemented, with proper meta tags, structured data, and responsive design. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. There is no evidence of exposed sensitive data or vulnerable libraries. However, the site lacks visible cookie consent mechanisms and explicit security or incident response policies, which are areas for improvement to enhance compliance and user trust. Overall, the site is trustworthy, professionally maintained, and aligned with Amazon's global standards. It effectively communicates Amazon's business and impact in Mexico, though it could improve privacy compliance transparency and provide clearer contact channels for security and privacy concerns.

A

Amazon

aboutamazon.com.br

46

About Amazon Brasil is a corporate informational website representing Amazon's presence and activities in Brazil. It provides news, stories, and facts about Amazon's business, including e-commerce, AWS, entertainment, and logistics. The site targets a general audience interested in Amazon's operations in Brazil and serves as a regional hub linking to international Amazon sites. The business model is primarily technology-driven e-commerce and cloud services, supported by media and corporate communications. Amazon holds a leading market position globally and locally in Brazil, with a strong brand and extensive service offerings.

A

Amazon

aboutamazon.ca

60

The About Amazon Canada website serves as a corporate informational portal for Amazon's operations and initiatives in Canada. It highlights Amazon's core principles, business segments including e-commerce, cloud services, devices, and entertainment, and provides access to localized content and international sites. The site is well-branded, professionally designed, and targets a broad audience including customers, partners, and stakeholders interested in Amazon's corporate story and impact. Technically, the site employs modern web technologies such as Polymer web components, asynchronous loading of third-party SDKs, and integrates analytics tools like Chartbeat and Adobe DTM for performance and marketing insights. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not prominently disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting Amazon's commitment to data protection. Overall, the site demonstrates a mature digital presence consistent with a global enterprise.

A

Amazon

aboutamazon.pl

61

The website www.aboutamazon.pl serves as the official About Amazon regional site for Poland, providing comprehensive information about Amazon's business principles, services, workplace culture, and environmental impact. It targets the general Polish audience and supports multiple languages and regional Amazon sites. The site reflects Amazon's position as a large multinational enterprise with a strong e-commerce and technology services presence. Technically, the site employs modern web technologies including Polymer web components, TrustArc for consent management, Chartbeat analytics, and Adobe DTM for tag management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security-wise, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the site is legitimate, professional, and trustworthy, though it could improve transparency around security policies and vulnerability disclosures.

A

Amazon

aboutamazon.fr

66

About Amazon France is a corporate informational website representing Amazon's presence and activities in France. The site highlights Amazon's core principles, business sectors including e-commerce, cloud services, logistics, and entertainment. It serves as a communication platform for corporate information, sustainability efforts, workplace culture, and economic impact in France. The website is professionally designed with consistent branding aligned with Amazon's global identity. Technically, it employs modern web technologies, including JavaScript, SVG icons, JSON-LD structured data, and integrates consent management and analytics tools. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, serving a general audience interested in Amazon's corporate footprint in France.

A

Amazon

aboutamazon.it

51

About Amazon Italia is a localized corporate website providing news, insights, and information about Amazon's operations, impact, and initiatives in Italy. It serves as a communication platform targeting Italian consumers, employees, partners, and stakeholders interested in Amazon's business activities, sustainability efforts, and employment opportunities. The site reflects Amazon's position as a leading global e-commerce and technology company with a strong presence in Italy, offering services ranging from retail to cloud computing and logistics. Technically, the website employs modern web technologies including custom elements, SVG icons, and integrates third-party services such as TrustArc for consent management and Chartbeat for analytics. The site is hosted on Amazon's infrastructure, ensuring reliable performance and security. It is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS, uses consent management for GDPR compliance, and includes security headers. No vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly detailed, which could be improved. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively supports Amazon's brand and business objectives in the Italian market.

A

Amazon

aboutamazon.in

53

About Amazon India is a corporate informational website providing news, announcements, and facts about Amazon's operations in India. It serves as a communication platform for stakeholders, customers, and the general public interested in Amazon's business activities in the region. The site highlights Amazon's key services including e-commerce, delivery logistics, cloud services, entertainment, and payment solutions, reflecting its position as a leading enterprise in the Indian market. The website is part of the global Amazon brand and is consistent with Amazon's corporate identity and branding standards. Technically, the website employs modern web technologies such as Web Components, asynchronous loading of third-party SDKs (Facebook, YouTube), Google reCAPTCHA for bot protection, and analytics tools like Chartbeat and Adobe DTM. The site is hosted on Amazon AWS infrastructure, ensuring reliable performance and scalability. Mobile optimization and SEO practices are well implemented, although accessibility features could be enhanced. From a security perspective, the site uses HTTPS with excellent SSL configuration and includes security best practices like reCAPTCHA and asynchronous script loading. However, explicit security headers and visible privacy or cookie policies are not found in the provided content, indicating room for improvement in compliance and transparency. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity. The absence of direct contact information and privacy policies slightly reduces privacy compliance scores. Strategic recommendations include adding explicit privacy and cookie policies with consent mechanisms, enhancing security headers, and providing clear contact channels for incident response and data protection inquiries.

A

Amazon

aboutamazon.com.au

60

About Amazon Australia is a corporate informational website representing Amazon's presence and operations in Australia. The site highlights Amazon's core principles, business segments including e-commerce, logistics, devices, and entertainment, and provides links to various regional Amazon sites. The website is professionally designed with consistent branding and targets general consumers and business customers in Australia. It serves as a hub for corporate information, impact initiatives, workplace culture, and sustainability efforts. The parent company is Amazon.com, Inc., a global leader in e-commerce and cloud computing.

A

Amazon

aboutamazon.sg

50

The website aboutamazon.sg serves as the official informational portal for Amazon's operations and presence in Singapore. It highlights Amazon's core principles, business segments including e-commerce, cloud services (AWS), logistics, and entertainment. The site is well-branded with consistent Amazon corporate identity and provides navigation to various international Amazon sites. The technical infrastructure leverages modern web technologies such as Polymer web components, asynchronous loading of third-party SDKs (Facebook, YouTube), and analytics tools like Chartbeat and Adobe DTM. The website is mobile-optimized and SEO-friendly with proper meta tags and structured data. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are not detected in the provided content. WHOIS data is unavailable, likely due to privacy protection, which is common for large enterprises. Overall, the site demonstrates a mature digital presence with high trustworthiness and professional content.

D

Das Kartenhaus

daskartenhaus.info

54

Das Kartenhaus is a small German ticketing service operating since 2021, providing event ticket sales at 8 physical locations and online via affiliate partnerships with platforms like eventim.de. The website is built on WordPress using the Vantage theme and includes standard cookie consent mechanisms compliant with GDPR. The technical infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and DNSSEC. Security posture is adequate with HTTPS enforced but could be improved with additional security controls. No explicit incident response or security policies are published. Overall, the business appears legitimate and trustworthy with clear contact phone information and transparent affiliate disclosures.

B

BotTalk

bottalk.io

60

BotTalk is a specialized AI voice solution provider targeting news publishers and media companies. Their platform aggregates multiple leading text-to-speech providers into a single audio hub, enabling easy integration, paywall support, and audio monetization through advertising partnerships. The company positions itself as a niche leader with a clear focus on enhancing user engagement and subscription value through audio content. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and integrates analytics and form services for marketing and support. Security posture is good with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

C

Contact Privacy Inc. Customer 0164357247

highlightjs.org

56

Highlight.js is a well-established open source project founded in 2012, providing a popular JavaScript syntax highlighting library supporting 192 languages and 512 themes. The website targets developers and technical users, offering comprehensive usage instructions and trusted by major platforms such as Stack Overflow and Discord. The business model centers on open source software distribution with community contributions and GitHub presence. Technically, the site uses modern web technologies including Next.js, Node.js, and Deno, hosted on Netlify, delivering fast and mobile-optimized performance with good SEO and accessibility features. Security posture is solid with HTTPS enforced and domain transfer protections, though explicit security headers and formal privacy/cookie policies are absent. The presence of a dedicated security contact email indicates some incident response readiness. Overall, the site is professional, trustworthy, and technically mature but could improve privacy compliance and security best practices.

L

literaturgebiet.ruhr

literaturgebiet.ruhr

63

literaturgebiet.ruhr is a regional cultural and literary platform based in Germany's Ruhr area, focusing on promoting literature through events, poetry slams, and magazine content. The website serves a niche audience of literature enthusiasts and local cultural participants, operating likely as a small-scale or non-profit organization. The platform offers event information, literary articles, and community engagement opportunities, positioning itself as a key regional player in literary arts promotion. Technically, the website is built on WordPress with modern SEO practices using the Yoast plugin and includes responsive design elements for mobile users. The site uses HTTPS with good SSL configuration and basic cookie consent mechanisms, indicating a reasonable level of digital maturity. However, no advanced security headers or explicit security policies are published, and no direct contact forms or incident response channels are visible. From a security perspective, the site maintains a good posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. Privacy compliance is addressed through accessible privacy and cookie policies, though terms of service and security incident contacts are absent. The site does not employ extensive tracking or advertising technologies, aligning with its cultural and non-commercial nature. Overall, literaturgebiet.ruhr presents a trustworthy and professionally maintained platform with a clear cultural mission. Strategic improvements could include enhanced security headers, explicit incident response information, and expanded contact options to further strengthen trust and compliance.

L

Literatur Rheinland

literatur-rheinland.de

49

Literatur Rheinland is a cultural network platform dedicated to connecting literary institutions, initiatives, and actors within the Rheinland region of Germany. It promotes literary events, publishes a magazine, and offers a literature map highlighting regional literary figures and institutions. The website is built on Drupal 10, featuring modern web technologies and responsive design, ensuring good user experience and accessibility. Social media integration with Facebook, Instagram, and YouTube supports community engagement. Privacy compliance is addressed with a cookie consent banner and a privacy policy in German. Security posture is adequate with HTTPS and cookie management, though some security headers and explicit policies could be improved. Overall, the site serves as a trusted regional literary hub with good content quality and professional presentation.

L

Literaturbüro NRW e.V.

literaturbuero-nrw.de

40

Literaturbüro NRW e.V. is a well-established non-profit organization based in Düsseldorf, Germany, dedicated to promoting literature and culture across North Rhine-Westphalia. Founded in 1980, it supports authors and young talents through events, publications, and educational projects. The organization is publicly funded by the city of Düsseldorf and the state of NRW, positioning it as a key cultural institution in the region. The website reflects this mission with clear content, event calendars, and resources for writers and literature enthusiasts. Technically, the website is built on Drupal 10, indicating a modern and maintainable CMS platform. The site is mobile-optimized, accessible, and well-structured with good SEO practices. Hosting appears stable with known DNS providers. However, there is no visible cookie consent mechanism or advanced security headers, which could be improved to enhance compliance and security posture. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. No incident response or security policy pages are published, and no vulnerability disclosure mechanism is evident. Social media integration is strong, but no analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the security posture is solid but could benefit from additional headers and privacy enhancements. The overall risk is low given the non-profit cultural nature of the organization and the absence of suspicious indicators. Strategic recommendations include implementing cookie consent, publishing security policies, adding security headers, and considering a vulnerability disclosure page to improve transparency and compliance.

K

kajado GmbH

kajado.de

50

kajado GmbH is a small, established digital agency based in Dortmund, Germany, founded in 2014. The company specializes in web design, web development using WordPress, TYPO3, and Laravel, e-commerce solutions including WooCommerce and Magento, and comprehensive online marketing services such as SEO, SEA, content marketing, and social media marketing. They also offer workshops and seminars, serving clients across Germany from Berlin to Berchtesgaden. The website reflects a professional and consistent brand image with clear contact information and strong trust signals including customer testimonials and third-party review integration. Technically, the website is built on WordPress 6.7.2 with popular plugins like Yoast SEO and WPBakery Page Builder, supported by Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized, moderately performant, and SEO-friendly. Hosting appears to be managed via your-server.de based on nameservers. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Security-wise, the site demonstrates good practices but lacks explicit published security policies or incident response contacts. GDPR compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No terms of service or vulnerability disclosure policies were found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The overall risk is low, with recommendations to enhance security headers, publish security and incident response policies, and consider a vulnerability disclosure mechanism to further strengthen trust and compliance.

S

Studio Mitte Digital Media GmbH

smdm.at

60

Studio Mitte Digital Media GmbH is a small Austrian technology company specializing in digital solutions including web and software development, e-commerce, custom software, online marketing, and SEO services. The company positions itself as a creative and strategic partner for businesses seeking tailored digital media solutions, with a strong portfolio of regional clients and partnerships with major platforms such as Shopware and Shopify. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for analytics, indicating a focus on privacy-conscious tracking. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and published security policies. WHOIS data is missing, which raises some concerns about domain registration legitimacy, though the business presence and content suggest a legitimate operation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration clarity.

E

eSlovensko

eslovensko.sk

54

eSlovensko is a Slovak non-profit organization focused on informatization of municipalities and public services, with a strong emphasis on eGovernment and social responsibility projects. The website showcases numerous awards and recognitions spanning two decades, highlighting its established presence and influence in the Slovak public sector. The organization targets government entities, municipalities, and citizens interested in digital public services and social initiatives. Technically, the website is basic, using legacy HTML and CSS without modern frameworks or responsive design, and it relies on Google Analytics for visitor tracking. Security posture is moderate with DNSSEC enabled and a valid domain registration, but lacks visible security headers and privacy compliance documentation. Overall, the site is trustworthy but would benefit from modernization and enhanced privacy and security practices.

H

HP

hp.sk

73

HP's Slovak website serves as a comprehensive portal for consumers and businesses seeking HP's computing and printing products. The site offers detailed product categories, support resources, and account management, reflecting HP's strong market position as a global technology leader. The digital infrastructure leverages Adobe Experience Manager and modern analytics tools, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and security headers are well implemented, although explicit security policies and incident response information are not prominently published. The absence of WHOIS data is noted but likely due to registry or privacy policies rather than malicious intent. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its enterprise scale and audience.

Z

ZURB, Inc.

zurb.com

70

ZURB, Inc. is an established design consultancy founded in 1999, specializing in strategic marketing, branding, and user experience design. The company serves a diverse clientele ranging from startups to large enterprises, offering services such as growth design, design systems, experience design, product innovation, and mobile/web app development. Their market position is strong, supported by notable client logos and a consistent brand presence. Technically, the website is well-built using modern frameworks like Foundation, with Cloudflare DNS and CDN services enhancing performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with integrated analytics tools such as Google Analytics and Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business with a high level of digital maturity.

A

Aktion Mensch e.V.

aktion-mensch.de

67

Aktion Mensch e.V. is Germany's largest private funding organization dedicated to supporting social projects for people with and without disabilities. The organization operates primarily through a lottery business model, funding inclusion campaigns and social initiatives. Their website is professionally designed, accessible, and provides comprehensive information and services to a broad audience interested in social inclusion and disability support. Technically, the site uses modern JavaScript libraries, a tag management system (Tealium), and appears to be built on a CMS platform likely Sitecore. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not evident. Overall, the domain and website content are consistent and trustworthy, reflecting a mature non-profit organization with a strong market position in Germany.

B

Baden-Baden

baden-baden.com

53

Baden-Baden.com is the official tourism portal for the city of Baden-Baden, Germany, providing comprehensive information on local attractions, events, accommodations, dining, and wellness offerings. The website targets tourists and visitors seeking detailed travel and leisure information about the region. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies including JavaScript and CSS. It features a cookie consent mechanism compliant with GDPR, uses hCaptcha for bot protection, and integrates analytics tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS enforced, though some security headers are not evident in the provided data. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation and official branding. Overall, the site is well-structured, accessible, and provides a positive user experience for its target audience.

The website fr.igraal.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This prevents extraction of meaningful business, contact, or policy information. The domain WHOIS data for this subdomain is unavailable, consistent with it being a subdomain rather than an independently registered domain. The page contains minimal HTML content focused solely on verifying the visitor is human before granting access. No privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions. The technical infrastructure relies on Cloudflare for security and DDoS protection, but the lack of accessible content limits further analysis. Security posture cannot be fully assessed due to the blocking mechanism, though the use of Cloudflare indicates some baseline protection. Overall, the site’s risk profile is elevated due to lack of transparency and accessibility, and a full security and compliance evaluation requires bypassing the WAF challenge.