Security Directory

O

onesto GmbH

onesto.de

54

onesto GmbH operates a specialized Order Management System and Internet Booking Engine designed for corporate travel management. Their platform connects organizations with travel agencies and service providers such as airlines, rail, hotels, and car rentals, offering real-time, worldwide booking capabilities. The company emphasizes secure, certified data protection and PCI DSS compliance, positioning itself as a trusted provider in the transportation sector. Their product suite includes flight, rail, car, hotel bookings, and a mobile app for travel management, targeting corporate clients and business travelers primarily in Germany. Technically, the website is built on WordPress with common libraries like jQuery and Slick Carousel, hosted by Schlund Technologies. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. Security certifications such as ISO 27001 and PCI DSS are prominently displayed, indicating a mature security posture. However, the absence of explicit security headers and cookie consent mechanisms suggests areas for enhancement. The security posture is solid with HTTPS enforced and certified frameworks in place, but lacks published incident response or vulnerability disclosure policies. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analysis. Contact information is complete and transparent, supporting business credibility. Overall, onesto GmbH presents a professional, secure, and trustworthy online presence suitable for its B2B business travel management market. Strategic improvements in privacy compliance and security transparency would further strengthen their position and reduce risk.

The RWE Foundation website represents a corporate social responsibility initiative by RWE AG, a major energy company based in Germany. The foundation focuses on sustainable social change through funding charitable projects, supporting education, and providing humanitarian aid. The website is professionally designed, multilingual (German and English), and provides clear navigation to key sections such as funding principles, projects, application forms, and contact information. The presence of an annual report and CEO statement adds to the trustworthiness and transparency of the foundation. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Usercentrics for cookie consent management and Etracker for analytics, demonstrating compliance with GDPR and privacy best practices. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual but the website's professional presentation and corporate backing mitigate concerns. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security headers, publish a security policy and incident response contacts, and consider adding a vulnerability disclosure or security.txt file to improve trust and security culture.

R

RWE Turcas Güney Elektrik Üretim A.Ş.

rwe-turcas.com

64

RWE Turcas Güney Elektrik Üretim A.Ş. is a joint venture between the German utility RWE AG and Turkish energy company Turcas, operating a large, efficient, and environmentally friendly gas-fired combined-cycle power plant in Denizli, Turkey. The company holds a significant market position supplying approximately 1.2% of Turkey's electricity and operates from multiple locations including Ankara, Istanbul, and Denizli. The website presents a professional and comprehensive overview of the business, its mission, and its operations, targeting stakeholders in the energy sector and the general public. Technically, the website uses modern web technologies including JavaScript, CSS, SVG, and UIkit framework, with integration of Google Tag Manager and Usercentrics for consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and reduces overall trustworthiness. Despite this, the website content and branding align with a legitimate corporate entity. Overall, the site is professional, secure, and compliant with privacy regulations, but the lack of WHOIS data and explicit security policies suggests areas for improvement to enhance trust and security posture.

R

RWE AG

rwe.asia

68

RWE AG is a major European energy company with a growing presence in China, focusing on renewable energy, energy trading, and technical advisory services. The website highlights its subsidiaries, RWE Supply & Trading (Shanghai) Co. Ltd. and RWE Technology International GmbH, emphasizing their roles in energy infrastructure and trading within China. The company targets industrial, commercial, and public sector clients, leveraging its extensive experience and global footprint. Technically, the website employs modern web technologies including jQuery, UIKit, and Usercentrics CMP for privacy compliance, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with RWE's corporate identity.

N

NBank

nbank.de

67

NBank is the official investment and development bank of the German state of Niedersachsen, providing a broad range of funding programs, consulting, and support services to individuals, companies, municipalities, and institutions within the region. The website reflects a strong government affiliation with clear communication of its mission to foster growth and quality of life in Niedersachsen. The digital infrastructure is modern and well-implemented, featuring responsive design, accessibility considerations, and integration with consent management and analytics tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. Overall, the website presents a trustworthy and professional front for a large government entity.

C

Clarksons

clarksons.com

73

Clarksons is a leading global maritime consultancy and shipping services provider, recognized as the world's biggest in this sector. Their comprehensive service portfolio includes ship broking, research, finance, digital tools, port services, and green transition advisory, serving clients across 24 countries. The website reflects a mature digital presence with professional design, clear navigation, and multimedia integration, supporting a strong brand image and user engagement. Technically, the site employs modern web technologies and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not evident and WHOIS data is missing, which warrants further investigation. Overall, the site demonstrates high professionalism and trustworthiness, with room for improvement in transparency of registrant data and security disclosures.

D

Dräger Nederland B.V. - Marine & Offshore

draeger-mo.com

62

Dräger Nederland B.V. - Marine & Offshore is a well-established company with over 135 years of experience providing high-quality firefighting, rescue, and safety equipment tailored for marine and offshore industries. Their product portfolio includes fire fighting equipment, rescue gear, safety devices, medical equipment, and comprehensive training services. The company positions itself as a reliable B2B supplier and service provider, supporting clients with installation, maintenance, and certification services. The website reflects a professional and consistent brand image, targeting companies and professionals in the marine and offshore sectors primarily in the Netherlands and internationally. Technically, the website is built with modern web standards, including responsive design and secure HTTPS connections. The site uses Google Fonts and custom JavaScript and CSS but does not reveal a specific CMS. Hosting and domain registration are consistent with the business identity, with DNS hosted by TransIP and domain registered via Key-Systems GmbH. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. No security policy or incident response contact information is published, and no vulnerability disclosure program is evident. Forms include CSRF tokens, indicating some security awareness. Overall, the website is trustworthy, professional, and compliant with privacy regulations, including GDPR, as evidenced by comprehensive privacy and cookie policies with consent mechanisms. The business credibility is strong, supported by certifications and a long-standing market presence. Minor technical and security enhancements could further strengthen the site’s posture.

D

Damen Shipyards Group

damen.com

77

Damen Shipyards Group is a globally recognized family-owned maritime company established in 1927, specializing in shipbuilding, ship repair, and marine equipment supply. The company positions itself as a leader in sustainable and connected shipbuilding, serving diverse markets including defense, offshore energy, public transport, and dredging. Damen operates a large network of shipyards and service hubs worldwide, emphasizing client-driven innovation and lifecycle support services. Technically, the Damen website employs modern web technologies such as React and Next.js, ensuring a responsive and accessible user experience. The site features comprehensive content, multimedia elements, and clear navigation, reflecting a mature digital infrastructure. Privacy and cookie compliance are well implemented, with consent mechanisms and GDPR-aligned policies. From a security perspective, the website enforces HTTPS, utilizes robust security headers, and avoids exposing sensitive data. No critical vulnerabilities were detected in the visible content or scripts. However, the absence of WHOIS registration details is notable and warrants caution, although the website's professional presentation and extensive business information support its legitimacy. Overall, Damen Shipyards Group presents a strong business and digital presence with a high level of trustworthiness and security maturity. Continued vigilance on domain registration transparency and public vulnerability disclosure would further enhance their security posture.

T

TTER Wood Servis s.r.o.

tter.cz

38

TTER Wood Servis s.r.o. is a small Czech company specializing in greenery maintenance services such as hedge trimming, tree cutting, lawn mowing, and winter maintenance. The website serves as a basic informational portal with contact details and a brief description of services, targeting local customers in Prague. The digital presence is minimal with no advanced technical or marketing infrastructure detected. Security posture is weak due to lack of HTTPS verification, security headers, and privacy policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information appear consistent with a small local business. Overall, the site is functional but underdeveloped, with room for significant improvements in security, compliance, and content richness.

Nutrihorse.cz is a Czech website operated by CANVIT s.r.o., specializing in the production and sale of horse feed, vitamins, and supplements. The company targets horse owners involved in breeding, sport, and recreational riding, offering high-quality products developed with modern technology and expert consultation. The website reflects a small but established business with a market presence since 2010 and partnerships in the Czech equestrian sports community. Technically, the site uses standard web technologies including Bootstrap and jQuery, but with somewhat outdated versions. The site is accessible and provides a good user experience with clear navigation and relevant content, although mobile optimization and accessibility are basic. Security posture is moderate but lacks HTTPS enforcement and security headers, and no privacy policy or terms of service are present. Contact information is limited to a physical address, with no emails or phone numbers explicitly provided. Cookie consent is implemented, indicating some attention to privacy compliance. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

N

NexGen IT s.r.o.

lipno-real.com

47

Lipno Real is a specialized real estate business focusing on luxury and investment properties around Lipno Lake in the Czech Republic. The website presents a professional portfolio of houses, apartments, and plots for sale, targeting affluent buyers and investors interested in this recreational area. The business model centers on brokerage and property sales with additional rental services. The company behind the website appears to be NexGen IT s.r.o., likely the developer or operator of the site. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics, Google Tag Manager, Google Consent Mode, and Tawk.to chat widget. The site is mobile-optimized with good SEO practices and moderate performance. SSL is properly configured ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve its security posture. Privacy compliance is basic; no explicit privacy or cookie policies were found, and GDPR compliance indicators are minimal. Contact information is available but limited to an email address and contact forms, with no phone numbers or physical addresses explicitly listed. The WHOIS data for the domain is unavailable, indicating either a very recent registration or privacy protection, which slightly reduces trustworthiness. Despite this, the website content and professional presentation support the legitimacy of the business. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

P

PolyWeb s.r.o.

diskety.cz

48

The website diskety.cz/sign/in is a login portal for PolyPress, a real estate management platform primarily targeting web administrators and real estate agents in the Czech Republic. The business is operated by PolyWeb s.r.o., a small company founded in 2009, with a niche focus on real estate software solutions. The site provides access points for different user roles but lacks public-facing business information or policies on this page. Technically, the site uses a modern but basic tech stack including Bootstrap, jQuery, and Nette framework components, hosted likely via Wedos, a Czech hosting provider. The site is mobile responsive and moderately optimized but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no explicit security headers or vulnerability disclosures present. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the domain registration data is consistent and supports legitimacy. The site contains no adult or questionable content and is safe for general audiences.

E

ExpoFP

expofp.com

64

ExpoFP is a specialized SaaS provider offering floor plan management software tailored for exhibitions, expos, and trade shows. The platform enables event organizers to create interactive 3D floor plans, automate booth reservations and purchases, and provide exhibitors with self-service profile management. The company targets event professionals seeking efficient and user-friendly floor plan solutions, positioning itself as a niche player with a strong client base and industry memberships. Technically, the website employs modern web technologies including Bootstrap, Google reCAPTCHA v3, and integrates marketing and analytics tools such as Intercom and LinkedIn Insight. Hosting and DNS are managed via reputable providers including Cloudflare and GoDaddy. The site demonstrates good mobile optimization, SEO practices, and a professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and implements form validation and bot protection. However, DNSSEC is not enabled, and there is no visible security policy or incident response contact information, which are areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, ExpoFP presents a credible and professional online presence with a solid technical foundation and business model. Strategic enhancements in privacy compliance and security transparency would further strengthen its risk posture and trustworthiness.

M

Mesh Digital Limited

chess-results.com

54

Chess-Results.com is a specialized online platform dedicated to hosting and archiving chess tournament results globally. Established in 2006, it serves a niche audience of chess players, tournament organizers, and enthusiasts by providing access to over 40,000 tournaments. The platform's business model revolves around offering a dedicated service for chess results management and archival, supported by advertising revenue. The website demonstrates consistent branding and good content relevance within its domain.

Borvo.cz is a Czech Republic-based specialized e-commerce retailer focused on chess-related products including chess sets, clocks, figurines, and books. The website demonstrates a professional and consistent brand presence with a clear target audience of chess enthusiasts and clubs. The business model is retail e-commerce with a niche market position supported by customer reviews and product ratings. Technically, the site uses modern web technologies such as Google Tag Manager, Facebook Pixel, and FontAwesome, with responsive design and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with visible cookie and privacy policies, indicating GDPR awareness. However, the absence of WHOIS data reduces the domain legitimacy score and raises questions about domain registration transparency. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced domain registration transparency and additional security headers.

ITS Germany e.V. is a well-established German industry association focused on intelligent transportation systems (ITS). Founded in 2007, it represents the interests of the German ITS industry, facilitating collaboration between industry players, policymakers, and administration. The organization is active in national and international committees and organizes key events such as the Deutscher Tunnelkongress and C-ITS Kongress. The website reflects a professional and consistent brand image targeting industry professionals and stakeholders in the transportation sector. Technically, the website is built on a modern stack including HTML5, CSS3, JavaScript, Bootstrap, and Turbolinks, likely powered by a Ruby on Rails backend with a custom CMS. The site is mobile-optimized with good navigation and moderate performance. Hosting is provided by Vautron Rechenzentrum AG, a reputable registrar and hosting provider. No blocking or WAF mechanisms were detected, and the domain registration is consistent and long-standing. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not explicitly provided), but lacks visible security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is publicly available. The site does not expose sensitive data and does not use tracking or advertising scripts, indicating a privacy-conscious approach. GDPR compliance is partially demonstrated by a privacy policy page, but cookie consent is missing. Overall, the website is trustworthy and professional with a solid business credibility score. Security posture is moderate with room for improvement in headers and incident response transparency. Privacy compliance could be enhanced by implementing cookie consent. The site content is safe for general audiences and focused on industry advocacy and information.

I

ITSDanmark

itsdanmark.dk

55

ITSDanmark is a Danish interest organization established in 2003 that brings together companies, authorities, research institutions, regions, and municipalities working with intelligent transport systems and solutions. The organization serves as a collaborative platform offering news, webinars, and project facilitation to its members. The website reflects a professional and consistent brand presence targeting stakeholders in Denmark's transportation sector. Technically, the site is built on the Umbraco CMS with modern front-end components such as carousels and responsive design, providing a good user experience across devices. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-positioned within its niche but could improve security and privacy practices.

The Schweizerische Mobilitätsplattform ITS-CH is a Swiss-based platform dedicated to promoting the modernization and digitalization of transportation systems. It serves as a collaborative hub for stakeholders from government bodies, economic sectors, research, education, and associations to foster sustainable, ecological, safe, and efficient mobility development across Switzerland. The platform positions itself as a national non-profit entity focused on advancing transportation innovation and cooperation. Technically, the website is built on the Jimdo Creator CMS platform, leveraging standard web technologies such as HTML5, CSS3, and jQuery. The site demonstrates moderate performance and good mobile optimization, with a clean and consistent design. SEO and accessibility features are basic but functional. Hosting is provided by Jimdo, a reputable provider for small to medium-sized websites. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, and no WAF or blocking mechanisms interfere with content access. Overall, the website presents a professional and trustworthy digital presence for ITS-CH, with clear contact information and compliance with privacy standards. Strategic recommendations include enhancing security transparency, adding terms of service, and improving accessibility to further strengthen the platform's digital maturity and stakeholder trust.

Ing. Jiří Škoda operates a professional software development and web design service based in the Czech Republic. The website showcases a portfolio of projects and emphasizes custom software solutions, modern websites, and web applications tailored to client needs. The business targets clients seeking bespoke digital solutions with a focus on quality, clean code, and customer support. Technically, the website employs a modern tech stack including PHP, Symfony, Java, Spring, Vaadin, and front-end technologies like HTML5, CSS3, Bootstrap, and JavaScript frameworks. The site is hosted by REG-WEDOS, a Czech registrar, and uses HTTPS with Google reCAPTCHA for form security. Security posture is good but could be improved with additional HTTP security headers and explicit incident response information. Privacy compliance is addressed with GDPR consent and a cookie policy. Overall, the site is professional, well-structured, and trustworthy with minimal tracking and no advertising.

T

TGO Besitz GmbH & Co. KG

tgo-online.de

57

TGO Besitz GmbH & Co. KG operates a technology and startup center in Oldenburg, Germany, providing office spaces, coworking, seminars, and networking opportunities tailored for startups and technology companies. The website reflects a solid regional market position as a hub for innovation and business development. Technically, the site uses the Limz CMS framework with jQuery and integrates Google Analytics with a GDPR-compliant cookie consent mechanism. The site is well-structured, mobile-optimized, and professionally designed, supporting a positive user experience. Security posture is good with HTTPS enforced and privacy policies in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, business-focused, and safe for general audiences.

A

Advenir Formations (implied from content)

je-roule-en-electrique.fr

63

The website www.je-roule-en-electrique.fr serves as a comprehensive national platform dedicated to electric mobility information and training in France. It targets a broad audience including individuals, students, local authorities, and property managers, offering educational content, training programs under the Advenir Formations initiative, and guidance on financing aids. The platform is supported by reputable partners such as Avere-France, the French Ministry of Ecological Transition, and ADEME, reinforcing its authoritative position in the market. Technically, the site employs modern web technologies including Nuxt.js and Vue.js, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices, accessibility, and performance, although some improvements in security headers and explicit privacy documentation are recommended. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and a published vulnerability disclosure policy. The absence of WHOIS registrant data slightly impacts trust but is mitigated by the professional presentation and strong institutional partnerships. Overall, the site is a well-designed, authoritative resource for electric mobility education in France, with moderate technical and security maturity. Strategic enhancements in privacy transparency and security policies would further strengthen its trustworthiness and compliance posture.

The website www.nus.org.uk is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks automated access and prevents retrieval of meaningful content or metadata. The WHOIS lookup for the domain failed with an error indicating the domain name contains too many parts and cannot be registered, suggesting the queried domain is invalid or a subdomain rather than a registered domain. Consequently, no registrar, creation, expiry, or registrant information is available. The lack of accessible content and WHOIS data severely limits the ability to analyze the business, technical infrastructure, or security posture in detail. The site is protected by Cloudflare's WAF, indicating a security-conscious hosting environment but also restricting automated analysis.

A

Acas

acas.org.uk

71

Acas is a UK government-affiliated organization providing free and impartial workplace advice, training, and dispute resolution services to employers and employees across England, Wales, and Scotland. The website reflects a mature digital presence with a clear focus on accessibility, user experience, and compliance with privacy regulations such as GDPR. The technical infrastructure is based on Drupal CMS, enhanced with modern consent management and analytics tools, ensuring a balance between functionality and user privacy. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness appropriate for a government service.

D

Danone

danone.fr

77

Danone is a large multinational food and beverage company with a strong presence in France, focusing on health through nutrition. The website reflects a mature digital presence using Adobe Experience Manager and modern web technologies, providing rich content about their brands, products, and corporate initiatives. Security posture is good with HTTPS and some security best practices, but lacks explicit security policies and incident response contacts. Privacy compliance is partial with a consent mechanism but no clear privacy or cookie policies found in the analyzed content. WHOIS data is missing or unavailable, which is unusual and slightly reduces trustworthiness, but the website content and branding strongly indicate legitimacy.

N

Nutricia

nutricia.be

73

Nutricia is a well-established healthcare nutrition company focused on providing specialized medical nutrition products and support services in Belgium. Their website demonstrates a professional digital presence with comprehensive content targeting patients, caregivers, and healthcare professionals. The site leverages Adobe Experience Manager CMS and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe Launch. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR requirements. Security posture is good with HTTPS enforced and consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is trustworthy and professionally managed, supporting Nutricia's market position as a leading medical nutrition provider.

D

Danone

danonebelgie.be

77

Danone is a global leader in the food and beverage manufacturing sector, with a strong presence in Belgium and over 120 countries worldwide. The company focuses on delivering health through nutrition, offering a diverse portfolio including dairy, plant-based products, waters, beverages, and specialized nutrition. The website reflects a mature digital presence with comprehensive content, multimedia integration, and multilingual support. Technically, the site is built on Adobe Experience Manager with modern search and tracking technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not clearly published. The absence of WHOIS data is unusual but does not detract from the site's legitimacy given the strong branding and content. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

K

Kenworth Mexicana

kenworth.com.mx

74

Kenworth Mexicana operates as a prominent player in the transportation sector within Mexico, specializing in commercial trucks and related services. The company benefits from a long-established domain since 1999, indicating a mature market presence and stable operations. The website primarily targets businesses and professionals in logistics and transportation, offering products, after-sales services, and financing options. The brand is consistent and well represented digitally, with a professional design and clear branding elements. Technically, the website employs modern web technologies including JavaScript, Cookiebot for cookie consent management, and integrates major analytics and marketing platforms such as Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. Hosting and domain registration are managed by reputable providers, supporting a reliable infrastructure. From a security perspective, the website enforces HTTPS and uses a robust cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, but enhancements in security headers and transparency around security practices are recommended. Overall, the website presents a low-risk profile with good business credibility and compliance posture. Strategic improvements in privacy policy visibility, security headers, and accessibility would further strengthen the site’s trustworthiness and user experience.

D

Dynacraft

dynacraftnet.com

73

Dynacraft, a subsidiary of PACCAR, operates as a specialized supplier of premium OEM components and assemblies primarily serving the transportation manufacturing sector. The company is well-established with a domain age dating back to 2000, reflecting a mature business presence. Their website emphasizes their role in supporting the PACCAR brand with quality manufacturing services targeted at OEM manufacturers and industry partners. The digital infrastructure incorporates modern analytics and consent management tools, indicating a moderate level of digital maturity and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enabled and domain protections in place, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the website presents a professional and trustworthy image consistent with its business model and market position.

N

NewDefinition GmbH

nd-politik.de

52

NewDefinition GmbH operates ND-Politik, a specialized politics management system tailored for politicians and political parties primarily in Germany. The platform offers a comprehensive suite of tools including website content management, online communication via newsletters, member and supporter community features, event and ticket management, CRM, and campaign management. The company targets political organizations from local to federal levels, with a SaaS subscription business model that includes hosting, maintenance, and support. The website demonstrates a consistent brand presence and strong trust signals through references and ISO-certified hosting. Technically, the platform is web-based with a proprietary CMS, leveraging standard web technologies (HTML, CSS, JavaScript). The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Hosting is performed on ISO-certified German servers with secure data storage and daily backups. While HTTPS is implemented with strong SSL encryption, the site lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. From a security perspective, ND-Politik shows a mature posture with GDPR and BDSG compliance, secure data handling, and ISO-certified hosting. However, incident response and vulnerability disclosure policies are not publicly documented, and no security.txt file is present. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security headers and privacy consent mechanisms. The overall risk assessment is low, with the platform well-suited for its political clientele. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing incident response policies to further strengthen compliance and trust.

Spreadshop.nl is a Dutch-language e-commerce landing page offering print-on-demand merchandise creation and sales services. It operates under the Spreadshirt brand umbrella, targeting individuals and small businesses interested in launching their own merchandise shops. The website is simple and primarily serves as a gateway to the partner registration platform hosted on spreadshirt.nl. Technically, the site uses basic modern web standards including custom fonts and responsive design elements but lacks advanced frameworks or CMS detection. Security posture is minimal with no DNSSEC, security headers, or privacy policies present, indicating room for improvement in compliance and protection. Overall, the domain registration is consistent with the business age and shows no suspicious indicators, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

C

Úvod | CIVOP - bezpečnost práce (BOZP) pro firmy

civop.cz

55

The website civop.cz represents a small business specializing in occupational safety (BOZP) services targeted at companies in the Czech Republic. The site is built on WordPress using the GeneratePress theme and incorporates Google Tag Manager for analytics and marketing purposes. The content is professional and relevant to its business domain, focusing on safety consulting and compliance services. Technical infrastructure appears standard for a small business website with moderate performance and good mobile responsiveness. Security posture is basic, with no advanced security headers detected and no visible privacy or cookie policies, indicating room for improvement in compliance and security transparency. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly reduces overall trustworthiness. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and verifying domain registration details to improve business credibility and compliance.

W

Wittener Transport Kontor – Heinrich Stratmann GmbH

logistikeria.de

55

Wittener Transport Kontor – Heinrich Stratmann GmbH (WTK Stratmann) is a well-established, family-run logistics and special transport company based in Germany with a history dating back to 1953. The company operates multiple locations across Germany and has subsidiaries and joint ventures in the Czech Republic and Poland, offering comprehensive transport, warehousing, and distribution services. Their business model focuses on specialized transport solutions with a strong emphasis on safety, quality, and sustainability, supported by multiple certifications including ISO 9001, SQAS, HACCP, GMP+B4, and ISO 14001. The website reflects a professional and consistent brand image targeting business clients requiring specialized logistics services.

L

Lutherstadt Wittenberg Marketing GmbH

wittenberg-marketing.de

49

Lutherstadt Wittenberg Marketing GmbH operates as a regional city marketing organization promoting the cultural, tourism, and business opportunities of Lutherstadt Wittenberg, Germany. The website serves as an information hub for visitors, businesses, and event organizers, highlighting the city's historical significance and current economic vitality. The company positions itself as a key facilitator for tourism, cultural events, and congresses in the region. Technically, the website is built on Craft CMS with modern web technologies including ES modules and CSS3. It employs Matomo analytics with a GDPR-compliant cookie consent mechanism, ensuring privacy-conscious data collection. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, CSRF protection, and no visible vulnerabilities or sensitive data exposure. However, security headers could be improved and formal security policies or incident response information are not publicly available. The WHOIS data aligns with the website content, indicating a legitimate and consistent registration. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's mission effectively. Strategic improvements in security transparency and terms of service publication could further enhance trust and compliance.

L

Lutherstadt Wittenberg: Urlaub zwischen Kultur und Natur

lutherstadt-wittenberg.de

45

The website lutherstadt-wittenberg.de serves as the official regional tourism portal for Lutherstadt Wittenberg, Germany, promoting cultural and natural attractions with a focus on family-friendly tourism. It provides information on events, accommodations, sightseeing, and local services, positioning itself as a key resource for visitors to the region. The site targets a general audience interested in cultural heritage and nature tourism. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and includes multimedia content such as videos and images. The site is mobile-optimized and offers multilingual support including German and English. Security posture is moderate; HTTPS is implied but no explicit security headers or incident response contacts are visible. Privacy and cookie policies are not found in the provided content, indicating a compliance gap. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.

S

Stadt Wittenberg

wittenberg.de

9

The website www.wittenberg.de serves as the official digital presence of the city of Lutherstadt Wittenberg, Germany. It provides comprehensive information about city life, administration, culture, tourism, and public services. The site targets residents, tourists, and local businesses, offering structured navigation and links to partner organizations. The business model is that of a government municipal portal, focusing on information dissemination and citizen engagement. The website is well-branded and consistent with its municipal identity. Technically, the site uses a proprietary CMS (NOLIS) with standard web technologies such as HTML5, CSS, and JavaScript. It is mobile-optimized and accessible, with moderate performance. SEO practices are good, with proper meta tags and structured navigation. However, no advanced frameworks or analytics services were detected. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data is minimal but consistent with the municipal nature of the domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance documentation, security headers, and incident response transparency to improve its security posture and user trust.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is displayed when the browser cannot load the requested website content. This page is not a real website but a built-in error page with embedded Chromium offline game scripts (the T-Rex runner game). Consequently, there is no business information, privacy policies, or contact details available. The page serves as a placeholder and does not represent an actual web presence or business entity. From a technical perspective, the page uses standard HTML5, CSS3, and JavaScript technologies embedded within the Chromium browser environment. It includes scripts and styles related to the offline T-Rex game. There is no evidence of external hosting, CMS, or third-party integrations. The page is optimized for mobile and desktop with responsive design elements but lacks SEO and accessibility features typical of commercial websites. Security posture is minimal as this is a local error page without external connections or forms. No HTTPS or security headers apply in this context. Privacy compliance and business credibility cannot be assessed due to the nature of the content. No WHOIS data or domain registration information is applicable since the domain is an internal Chrome namespace. Overall, this content is safe and free from adult or malicious content but does not represent a legitimate business website. It is recommended to analyze the actual target website URL for meaningful security, compliance, and business insights.

The website sorteersmurf.be is a recently created domain associated with Fost Plus, a Belgian organization focused on recycling education. The site aims to inform visitors about proper recycling practices, specifically what can be placed in blue recycling bags, encouraging users to become recycling champions. The content is minimal and primarily educational, targeting the general public in Belgium. Technically, the site uses modern web technologies including Font Awesome Pro for icons, a loading progress bar library (Pace.js), and a cookie consent management platform (Usercentrics). The domain is registered with Combell nv, a reputable registrar and hosting provider, indicating legitimacy despite the recent creation date. Security posture is moderate with HTTPS implied but lacking visible security headers and detailed security policies. Privacy compliance is basic, with a cookie consent mechanism present but no privacy or terms of service pages found. Overall, the site is functional and safe but would benefit from enhanced security practices and more comprehensive compliance documentation.

S

Scottish Renewables

scottishrenewables.com

67

Scottish Renewables is a prominent industry association representing the renewable energy sector in Scotland. The organization acts as a key voice advocating for renewable energy businesses, working closely with government entities to support industry growth and policy development. Their website reflects a professional and well-structured platform offering membership services, event information, policy updates, and industry statistics. The presence of numerous partner and sponsor logos underscores their established position within the renewable energy ecosystem. From a technical perspective, the website employs modern web standards including HTML5, CSS3, and JavaScript, with good mobile optimization and accessibility features. The site is served over HTTPS, ensuring secure communications, though explicit security headers are not evident from the provided data. Privacy and cookie policies are clearly presented with a consent mechanism, indicating compliance with GDPR requirements. Security posture is moderate; while HTTPS is enforced and privacy compliance is strong, the absence of detailed security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The lack of WHOIS domain registration data is a notable concern, potentially indicating domain registration issues or privacy restrictions, which slightly impacts trustworthiness. Overall, Scottish Renewables presents a credible and professional online presence aligned with its business mission. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to bolster trust and compliance.

P

ProjectNeverland

projectneverland.gr

58

ProjectNeverland is a small creative agency based in Athens, Greece, specializing in full-service graphic and web design solutions including branding, hosting, and digital media. The company showcases a professional portfolio with notable clients, emphasizing a balance between strategy and execution to deliver creative results. The website is built on Joomla CMS with modern web technologies and includes a contact form with spam protection. While the site enforces HTTPS and uses Google Analytics for tracking, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security headers are not detected, indicating room for improvement in security posture. Overall, the website presents a professional and trustworthy image consistent with a legitimate creative agency.

K

Katholische Kirche

akademie-bistum-aachen.de

57

The Bischöfliche Akademie des Bistums Aachen is a well-established educational and cultural institution affiliated with the Catholic Church in Germany. It offers a broad range of workshops, seminars, and events focused on politics, society, theology, ethics, culture, and digital topics, targeting a diverse audience interested in societal discourse and faith-based dialogue. The institution also provides facilities for conferences and guest accommodations, supporting its educational mission. Technically, the website is built on the Alkacon Mercury CMS platform, employs modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks publicly available security policies or incident response contacts, which could be improved. Overall, the domain registration and hosting align with the institution's identity, indicating legitimacy and trustworthiness.

U

Utopia

utopia-lueneburg.de

41

Utopia is a social and sustainable startup incubator and co-working center based in Lüneburg, Germany. It offers a variety of services including co-working spaces, startup incubation, maker spaces, event rooms, and community events. The organization targets freelancers, entrepreneurs, and startups seeking a collaborative and inspiring environment. The website reflects a well-established local business with a strong partner and sponsor network, emphasizing community and sustainability. Technically, the site is built on WordPress with common plugins for SEO and contact forms, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-positioned in its niche.

S

Sparkasse Lüneburg

sparkasse-lueneburg.de

70

Sparkasse Lüneburg is a regional financial institution based in Germany, providing a broad range of banking and financial services to private and corporate customers. The website serves as a comprehensive online banking portal offering services such as account management, loans, credit cards, investments, insurance, and real estate services. The bank positions itself as a trusted local partner with a strong emphasis on customer service and accessibility. The site is well-structured to cater to different customer segments with clear navigation and dedicated sections for private and business clients. Technically, the website is built on a modern CMS platform, likely Adobe Experience Manager, and employs standard web technologies including JavaScript and CSS. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure forms, and has a cookie consent banner indicating awareness of privacy regulations. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is professional, trustworthy, and compliant with relevant privacy laws. It effectively supports the bank's business model and customer engagement strategies. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

V

Verein Technologie-Centren Niedersachsen e.V.

vtn.de

55

The Verein Technologie-Centren Niedersachsen e.V. (VTN) is a well-established non-profit association founded in 1997, dedicated to networking and supporting technology centers across Niedersachsen, Germany. The organization acts as a regional economic promoter by managing projects and initiatives on behalf of the state, fostering innovation and startup growth. The website reflects this mission with clear, professional content targeting technology centers, startups, and regional stakeholders. Technically, the website is built on the limz CMS platform, utilizing jQuery and custom frameworks. While the technology stack is somewhat dated, the site is functional, mobile-optimized, and SEO-friendly. Security is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and the jQuery version is outdated. The security posture is moderate; no critical vulnerabilities or exposed sensitive data were found, but improvements are recommended in updating libraries and enhancing HTTP security headers. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy and explicit cookie consent mechanisms. Overall, the website is trustworthy, professional, and aligned with the organization's mission. The domain registration data is consistent and legitimate, supporting the site's credibility. Strategic recommendations include modernizing the tech stack, improving security headers, and adding explicit security and incident response policies to enhance trust and compliance.

A

Ausbildungsverbund Lüneburg e.V.

xn--al-yka.de

43

Ausbildungsverbund Lüneburg e.V. is a regional non-profit organization dedicated to coordinating apprenticeship training for young people in the Lüneburg area of Germany. The organization collaborates with numerous partner companies to offer up to 30 apprenticeship positions annually, providing services such as candidate pre-selection, apprentice support, and coordination with vocational schools and chambers. Their website reflects a professional and consistent brand image, targeting both prospective apprentices and companies seeking to train new talent. Technically, the website employs modern web technologies including JavaScript libraries like Swiper.js and integrates Google Analytics and Tag Manager for tracking, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, though there is room for improvement in implementing security headers and publishing explicit security policies. Overall, the website is accessible, well-structured, and trustworthy, supporting the organization's mission effectively.

Netsite.app is a professional control panel platform operated by Netsite A/S, a Danish company specializing in domain, DNS, email, and website management services. The website serves as a login portal for customers to access and manage their digital assets. The business is positioned as a niche technology service provider with a clear focus on domain and hosting management. The platform targets existing Netsite customers requiring centralized control over their domains and hosting services. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript. The design is professional and mobile-optimized with a clear and user-friendly login interface. However, the site lacks advanced technical features such as structured data, Open Graph metadata, and visible security headers. Performance appears moderate with no evident technical debt but opportunities exist for improved accessibility and SEO. From a security perspective, the site uses secure password input fields but lacks explicit security headers and documented security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. The absence of privacy and cookie policies indicates a gap in GDPR compliance, which is critical given the nature of the services offered. Overall, the website is trustworthy and professionally presented but would benefit from enhanced security practices, privacy compliance, and transparency measures. Strategic improvements in these areas will strengthen the platform's security posture and regulatory adherence.

N

Netsite A/S

netsite.dk

63

Netsite A/S is a Danish hosting provider established in 1998, specializing in domain registration, web hosting, DNS services, and email hosting with a strong focus on the Danish market. The company emphasizes stability, security, and customer satisfaction, offering products such as domain monitoring, WordPress hosting, and portfolio management. Their website reflects a professional and trustworthy business with clear contact channels and comprehensive service descriptions. Technically, the site uses modern web technologies including Bootstrap and Font Awesome, with responsive design and accessibility features ensuring a positive user experience across devices. Security posture is solid with HTTPS enforced, secure forms, and privacy-respecting cookie practices, although explicit security policies and incident response information are not published. The absence of WHOIS data limits transparency but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing detailed security and incident response policies and enhancing WHOIS transparency to improve trust further.

Kulturouseveru.cz is a regional cultural information portal focused on the Šluknovsko area in the Czech Republic. It provides schedules of cultural events, contact details for organizers, venues, and performers, serving local residents and visitors interested in cultural activities. The website has been operational since 2006, indicating a stable presence in its niche. The business model centers on providing free access to cultural event information, likely supported by local advertising. Technically, the site uses basic HTML and CSS with Google Analytics for visitor tracking. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site lacks modern CMS or advanced frameworks, reflecting a simple but functional infrastructure. Security posture is moderate; HTTPS is assumed but no advanced security headers or protections are evident. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, with no adult or questionable content detected. Recommendations include implementing privacy and cookie policies, enhancing security headers, and improving GDPR compliance to strengthen trust and security.

Elektrika.info is a Czech-based technical and investigative platform focused on electrical engineering topics, safety, and community discussions. It serves a niche audience of professionals and enthusiasts in the electrical engineering sector, providing technical content, discussion forums, and promotional opportunities. The platform is linked closely with related domains such as elektrika.cz and elektrika.tv, indicating a network of specialized resources. The website presents a professional design with clear navigation and relevant content, targeting a specialized technical audience in the Czech Republic. From a technical perspective, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. There is no detected CMS or advanced frameworks, suggesting a custom or lightweight implementation. Security headers and SSL configuration details are not provided, indicating potential areas for improvement. Security posture is moderate; the site implements a cookie consent banner indicating some privacy compliance efforts, but lacks visible privacy policy or terms of service pages. WHOIS data is privacy protected with minimal information, which is common but reduces transparency. No critical vulnerabilities or exposed sensitive data were detected in the content. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, Elektrika.info is a specialized, small-scale platform with good content quality and moderate technical maturity. Security and privacy compliance can be enhanced by adding formal policies, improving security headers, and ensuring strong SSL configurations. The business credibility is supported by clear contact information and consistent branding. Strategic recommendations include improving security posture, enhancing privacy transparency, and expanding accessibility features to strengthen trust and compliance.

O

Oracle Corporation

openjdk.org

60

OpenJDK.org serves as the official community site for the OpenJDK project, an open-source implementation of the Java Platform, Standard Edition. The site is maintained under the auspices of Oracle Corporation, which provides both free GPL-licensed JDK binaries and commercially licensed versions. The platform targets Java developers, open-source contributors, and the broader technology community interested in Java development and innovation. The website offers resources for downloading the JDK, learning about active projects, and contributing to the codebase, positioning itself as a central hub for Java platform collaboration. Technically, the website is built on a custom static site architecture using standard web technologies including HTML, CSS, and JavaScript. It leverages GitHub and Mercurial for source code hosting and integrates privacy-focused analytics via Fathom. Hosting is supported by Akamai CDN infrastructure, ensuring fast content delivery. The site demonstrates good SEO and basic mobile optimization, though accessibility features are moderate. No major CMS or frameworks are detected, indicating a lightweight and stable technical implementation. From a security perspective, the site enforces HTTPS and employs domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is strong with clear privacy and terms of use policies, though no cookie consent mechanism is present despite analytics usage. No direct contact information or incident response contacts are published, which could be enhanced to improve transparency and trust. Overall, OpenJDK.org is a professional, trustworthy, and well-maintained site supporting a critical open-source technology project. The security posture is solid but could benefit from additional hardening measures. Privacy practices are good but could be improved with cookie consent. The site is free of adult or questionable content and serves a general technology audience. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security.txt file, and implementing cookie consent to further strengthen compliance and security.

O

Obec Kamenný Přívoz

kamennyprivoz.cz

49

Obec Kamenný Přívoz operates as the official municipal government website for the village of Kamenný Přívoz in the Czech Republic. The site provides residents and visitors with local government information, community news, event calendars, and administrative documents. It serves a small population with a focus on local services and community engagement. The website is built on WordPress using a specialized municipal theme, indicating a moderate level of digital maturity suitable for local government needs. The technical infrastructure includes modern web technologies such as HTTPS, jQuery, and responsive design, ensuring accessibility and usability across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. The absence of WHOIS data from the CZ.NIC registry is a notable anomaly but does not detract from the apparent legitimacy of the site based on content and structure. Overall, the website is functional, trustworthy, and serves its intended audience effectively, though improvements in security and privacy compliance would enhance its posture.