Security Directory

RWE AG operates a comprehensive transparency platform providing detailed real-time data on electricity generation from its power plants across multiple countries, primarily Germany, the Netherlands, the UK, and the USA. The website serves as a free resource for the public and market participants, showcasing RWE's commitment to transparency and compliance with European energy market regulations. The platform uses modern web technologies including Angular and integrates consent management tools to ensure GDPR compliance. While the site is professionally designed and content-rich, the absence of WHOIS registration data for the domain raises questions about domain legitimacy, although the content and branding strongly align with RWE AG's corporate identity. Security posture is generally strong with HTTPS and consent mechanisms, but could be improved with explicit security headers and incident response information. Overall, the site is a valuable resource with moderate risk due to domain registration opacity.

The RWE Foundation website represents a corporate social responsibility initiative by RWE AG, a major energy company based in Germany. The foundation focuses on sustainable social change through funding charitable projects, supporting education, and providing humanitarian aid. The website is professionally designed, multilingual (German and English), and provides clear navigation to key sections such as funding principles, projects, application forms, and contact information. The presence of an annual report and CEO statement adds to the trustworthiness and transparency of the foundation. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Usercentrics for cookie consent management and Etracker for analytics, demonstrating compliance with GDPR and privacy best practices. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual but the website's professional presentation and corporate backing mitigate concerns. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security headers, publish a security policy and incident response contacts, and consider adding a vulnerability disclosure or security.txt file to improve trust and security culture.

R

RWE Turcas Güney Elektrik Üretim A.Ş.

rwe-turcas.com

64

RWE Turcas Güney Elektrik Üretim A.Ş. is a joint venture between the German utility RWE AG and Turkish energy company Turcas, operating a large, efficient, and environmentally friendly gas-fired combined-cycle power plant in Denizli, Turkey. The company holds a significant market position supplying approximately 1.2% of Turkey's electricity and operates from multiple locations including Ankara, Istanbul, and Denizli. The website presents a professional and comprehensive overview of the business, its mission, and its operations, targeting stakeholders in the energy sector and the general public. Technically, the website uses modern web technologies including JavaScript, CSS, SVG, and UIkit framework, with integration of Google Tag Manager and Usercentrics for consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and reduces overall trustworthiness. Despite this, the website content and branding align with a legitimate corporate entity. Overall, the site is professional, secure, and compliant with privacy regulations, but the lack of WHOIS data and explicit security policies suggests areas for improvement to enhance trust and security posture.

R

RWE AG

rwe.asia

68

RWE AG is a major European energy company with a growing presence in China, focusing on renewable energy, energy trading, and technical advisory services. The website highlights its subsidiaries, RWE Supply & Trading (Shanghai) Co. Ltd. and RWE Technology International GmbH, emphasizing their roles in energy infrastructure and trading within China. The company targets industrial, commercial, and public sector clients, leveraging its extensive experience and global footprint. Technically, the website employs modern web technologies including jQuery, UIKit, and Usercentrics CMP for privacy compliance, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with RWE's corporate identity.

R

Recupel

recupel.be

63

Recupel is a Belgian organization dedicated to reducing electronic waste by promoting repair, reuse, and proper recycling of electrical appliances. The website targets consumers and businesses interested in sustainable waste management solutions. It operates likely as a non-profit or collective organization with a strong environmental mission. The site uses modern web technologies including Drupal 10 CMS, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit privacy policies. The extensive use of major advertising and tracking platforms is balanced by a clear consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for mobile and SEO, serving its audience effectively.

I

Invest North East England

investnortheastengland.co.uk

61

Invest North East England is a strategic inward investment agency supporting businesses to relocate and invest in the North East of England. It operates as part of the North East Combined Authority and provides free support services including a land and property database. The website presents a professional image with sector-specific information, testimonials from major companies, and multiple contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and security plugins, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and well-positioned as a government-related business support platform.

N

North East Combined Authority

northeast-ca.gov.uk

72

The North East Combined Authority (NECA) is a regional governmental body serving the North East England area, focusing on regional governance, economic development, and transport infrastructure. The website serves as an official portal for residents and stakeholders, providing information and resources related to the authority's activities. The site is positioned as a key regional government entity with a medium organizational size and a focus on public sector services. Technically, the website employs modern web technologies including Vue.js, jQuery, Google Tag Manager, Hotjar for analytics, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some technical details such as hosting provider and CMS are not explicitly identified. Performance is moderate, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable due to .gov.uk domain privacy policies, but the domain's legitimacy is supported by its official government TLD and consistent branding. Overall, the website presents a trustworthy and professional digital presence for a government authority, with recommendations to enhance security posture by adding security headers, publishing security policies, and improving privacy policy visibility to strengthen compliance and user trust.

O

Offshore Wind Growth Partnership

owgp.org.uk

58

The Offshore Wind Growth Partnership (OWGP) is a UK-based non-profit organisation dedicated to accelerating the development of the offshore wind supply chain. Founded in 2019, OWGP provides funding and structured business support to UK companies, helping them grow, improve productivity, and compete globally in the offshore wind sector. The organisation also serves as the Industrial Growth Plan Delivery Body, aligning its initiatives with national priorities to support net zero and energy security goals. The website reflects a professional and consistent brand presence with clear messaging targeted at businesses involved or interested in offshore wind supply chain development. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is hosted by GoDaddy and uses HTTPS with good SSL configuration. While the site performs moderately well and is mobile optimized, there is room for improvement in accessibility and security headers. No blocking WAF or security challenges were detected, allowing full content access. From a security perspective, the site employs HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance and user trust. There is no evidence of incident response or vulnerability disclosure mechanisms, which could be enhanced to improve security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional front for OWGP, with strong business credibility and good technical foundations. Strategic improvements in privacy compliance, security headers, and incident response transparency would further strengthen the site's security posture and user trust.

E

Elavon UK

sagepay.com

70

Elavon UK is a well-established payment processing company operating under the parent organization U.S. Bancorp. The company provides a comprehensive suite of card payment solutions and merchant services tailored for businesses ranging from small retailers to large enterprises. Their market position is strong, supported by a large customer base across multiple countries and a wide range of industry-specific payment solutions. The website reflects a mature digital presence with professional design, clear navigation, and detailed service offerings. Technically, the site uses modern frameworks and technologies such as Adobe Experience Manager and Google Tag Manager, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a public security policy could enhance trust further. Overall, the site is trustworthy, compliant with GDPR, and provides multiple contact channels for customer support and sales.

T

Tiny Technologies Inc.

tiny.cloud

73

Tiny Technologies Inc. operates the website tiny.cloud, offering the widely trusted TinyMCE WYSIWYG rich text editor, along with complementary products like MoxieManager and Drive for media and cloud file management. The company targets web developers and enterprises seeking advanced text editing solutions, positioning itself as a market leader with over 1.5 million developers relying on its technology. The business model combines SaaS offerings with licensing options, supported by comprehensive documentation and AI-powered tools to enhance user experience. Technically, the website is built on modern frameworks including React and Gatsby, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and uses CAPTCHA and consent management tools to protect user data and privacy. While DNSSEC is not enabled, the domain registration is consistent and secure, with clientTransferProhibited status preventing unauthorized transfers. No critical vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, tiny.cloud presents a professional, trustworthy, and well-maintained online presence with strong business credibility and compliance with privacy regulations. Strategic recommendations include enabling DNSSEC, publishing a formal security policy, and establishing a vulnerability disclosure program to further enhance security transparency and resilience.

The website www.redcar-cleveland.gov.uk is currently inaccessible due to a CloudFront 403 error indicating that requests are blocked, likely due to traffic or configuration issues. This prevents access to any meaningful content, metadata, or contact information. The domain appears to be a UK government domain based on its naming convention, but no WHOIS data is available to confirm registrar, registration dates, or registrant details. The lack of accessible content and metadata severely limits the ability to assess the business model, services, or technical infrastructure. Security posture cannot be evaluated beyond the detection of a blocking WAF mechanism. Overall, the site is currently non-functional for analysis and requires resolution of the CloudFront error to enable further assessment.

V

Vårgrønn

vargronn.no

63

Vårgrønn is a specialized offshore wind energy company operating primarily in Northern Europe. It is a joint venture between Eni Plenitude and HitecVision, focusing on developing, constructing, operating, and owning offshore wind projects. The company positions itself as agile and ambitious with multiple large-scale projects underway or planned. Technically, the website is built on Webflow with modern JavaScript libraries and translation services, offering a fast, mobile-optimized, and accessible user experience. Security posture is moderate with HTTPS in use but lacking explicit security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trust slightly, but the company's partnerships and detailed project information support legitimacy. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

E

Equinor

statoil.com

77

Equinor is a large international energy company headquartered in Norway, employing approximately 25,000 people with offices in over 20 countries. The company focuses on delivering energy today while developing sustainable energy solutions for the future. The website reflects a mature digital presence with a professional design, modern technology stack including Next.js and React, and a comprehensive cookie consent mechanism indicating attention to privacy compliance. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and detailed security policies are not evident. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include publishing clear privacy and security policies, adding security headers, and providing direct contact information for security and privacy inquiries.

S

SSE plc

sse.com

65

SSE plc is a major UK-based energy company focused on delivering cleaner, homegrown energy through investments in renewable technologies such as offshore wind, hydro, and battery storage. The company operates across multiple segments including renewables, thermal generation, transmission, and distribution, serving a broad audience including investors, customers, and job seekers. The website reflects a mature digital presence with comprehensive investor relations, sustainability initiatives, and career opportunities. Technically, the site uses modern web technologies including Umbraco CMS, Google Tag Manager, and various analytics and tracking tools, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not found. Overall, the website is professional, trustworthy, and aligned with industry best practices, though WHOIS data is unavailable for the www subdomain queried, which slightly impacts domain trust analysis.

MarramWind Ltd is a joint venture between ScottishPower and Shell New Energies UK focused on developing a large-scale floating offshore windfarm off the north-east coast of Scotland. The project aims to deliver up to 3 GW of renewable energy, powering over 3.5 million homes, and contributing to the UK's net-zero targets. The website provides detailed information about the project, partners, vision, and stakeholder engagement opportunities, reflecting a professional and credible business presence. Technically, the website is built on ASP.NET Web Forms and leverages modern JavaScript libraries such as jQuery, Bootstrap, and Modernizr, along with Google Fonts and Google Tag Manager for analytics. The site is mobile-optimized and accessible, though some SEO and security header enhancements could improve its digital maturity. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and a dedicated security policy or incident response contact. The WHOIS lookup failed due to a domain naming rule violation, which may be a querying artifact rather than a true registration issue, as the site is live and professional. Overall, the security posture is moderate but could be strengthened with additional controls and transparency. The overall risk assessment is low, with recommendations to implement security headers, cookie consent mechanisms, and publish security policies to enhance trust and compliance. The site is safe for general audiences and aligns well with its business objectives and market positioning.

ScottishPower Ltd is a major UK energy company specializing in renewable energy generation, network distribution, and transmission. It operates as part of the Iberdrola Group, a global leader in wind energy. The website reflects a professional corporate presence with clear focus on sustainability and green energy initiatives. The technical infrastructure is based on ASP.NET with modern consent management and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which slightly impacts transparency but the website content and external references support legitimacy. Overall, the site is well-structured, compliant with privacy regulations, and serves its target audience effectively.

Not a number is a Dutch digital agency specializing in knowledge digitization to reduce organizational dependency on specialists by making specialist knowledge accessible across the entire organization. Their market position is supported by over 100 partners and multiple detailed case studies showcasing successful digital transformation projects including product configurators, document configurators, and ERP integrations. The company targets businesses seeking to streamline and scale specialist knowledge digitally. Technically, the website uses a modern stack including React and WordPress as a headless CMS, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting a positive business credibility profile.

P

Planetum

planetum.cz

58

Planetum is a Czech educational and cultural organization operating a modern planetarium and multiple observatories. The website provides detailed program schedules, branch information, and educational offerings targeting astronomy enthusiasts and the general public interested in space. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with integration of Google Fonts and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit privacy and security policies. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and operational transparency of the website. Overall, Planetum demonstrates a mature digital presence suitable for its educational mission.

S

SAFRO s.r.o.

safro.bio

55

SAFRO s.r.o. operates the website safro.bio, a specialized retailer focused on fresh organic (bio) food products including fruits, vegetables, and packaged bio groceries. The company targets health-conscious consumers in the Czech Republic, offering both online catalog browsing and a physical store in Prague. The website content emphasizes quality, support for local Czech farmers, and the benefits of organic food. Technically, the site uses a custom CMS with legacy JavaScript libraries like jQuery 1.9.1 and includes Google Analytics for visitor tracking. The site is well-structured with good SEO and mobile optimization but lacks advanced security headers and uses outdated libraries that could pose risks. Privacy compliance is partially addressed with cookie consent and GDPR links, but no explicit privacy policy page was found. Contact information is complete and transparent, enhancing business credibility. WHOIS data is unavailable due to privacy protection, which is typical for small retail businesses. Overall, the site presents a trustworthy and professional image with room for technical and security improvements.

C

Čtenářský deník k maturitě, pro základní školu - Čtenářský-deník.cz

ctenarsky-denik.cz

44

Čtenářský-deník.cz is a Czech educational website providing a large database of literary analyses, summaries, biographies, and study materials primarily targeted at students preparing for maturita exams and basic school students. The platform offers both free and paid downloadable content, positioning itself as a significant resource in the Czech educational market. Technically, the site employs a traditional web stack with JavaScript, jQuery, and integrates multiple third-party advertising and analytics services including Google Tag Manager, Google Analytics, and Gemius Audience. While the site is accessible and functional with a good user experience, it uses an outdated jQuery version and lacks some modern security headers and explicit security policies. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting GDPR awareness. The absence of WHOIS data limits domain trust assessment, but the website's content and partner ecosystem suggest legitimacy. Overall, the site scores moderately well in content quality, technical implementation, security posture, privacy compliance, and business credibility.

A

AMOS KamPoMaturite.cz, s.r.o.

adresarskol.cz

44

AdresářŠkol.cz is a well-established Czech educational directory portal operated by AMOS KamPoMaturite.cz, s.r.o. It provides comprehensive listings of various types of schools across the Czech Republic, including universities, secondary schools, language schools, and vocational institutions. The site also offers educational articles, news, and preparation resources for students. The business targets students, parents, and educators seeking detailed educational information and study support. The portal integrates advertising and promotional partnerships with related educational projects, enhancing its market position as a key educational resource in the region. Technically, the website uses a custom CMS developed by ANAWEb and incorporates common web technologies such as jQuery 1.9.1, Slippry slider, and Fancybox for UI components. It employs Google Fonts and Google Tag Manager for analytics and tracking, along with regional retargeting services. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and good content quality. However, the use of an outdated jQuery version and absence of visible HTTP security headers suggest areas for technical improvement. From a security perspective, the site implements a comprehensive cookie consent mechanism aligned with GDPR requirements and provides a privacy policy. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of WHOIS data limits domain trust assessment, but the professional presentation, clear contact information, and partner affiliations support the site's legitimacy. Advertising practices are standard for educational portals, with no suspicious or malicious elements identified. Overall, AdresářŠkol.cz presents a trustworthy and valuable educational resource with solid content and user experience. Strategic improvements in security headers, technology updates, and domain registration transparency would further enhance its security posture and trustworthiness.

A

AMOS KamPoMaturite.cz, s.r.o.

autoskoly.com

45

Autoskoly.com is a Czech Republic-based online directory and informational portal specializing in driving schools across the country. Operated by AMOS KamPoMaturite.cz, s.r.o., the site offers a comprehensive listing of driving schools categorized by region and license type, supplemented by educational articles and news updates. The business targets individuals seeking driving education and related services, positioning itself as a trusted resource with a long operational history dating back to 1998. Technically, the website employs a custom CMS with a technology stack including jQuery 1.9.1, Slippry slider, Fancybox, and Google Tag Manager for analytics and marketing. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. However, some technical debt is evident due to the use of outdated libraries and lack of modern security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. There is no evidence of advanced security policies or incident response information publicly available. The absence of WHOIS registrant data reduces trust slightly but is likely due to privacy protection. No critical vulnerabilities or adult content were detected, and the site maintains a good overall security posture. Overall, Autoskoly.com presents a professional and trustworthy educational directory with room for technical and security improvements. Strategic recommendations include updating third-party libraries, enhancing security headers, and publishing explicit security and incident response policies to strengthen user trust and compliance.

A

AMOS KamPoMaturite.cz, s.r.o.

jazykoveskoly.com

45

JazykoveSkoly.com is a Czech Republic-based online directory and informational portal specializing in language schools and language courses. Operated by AMOS KamPoMaturite.cz, s.r.o., the site provides comprehensive listings, educational articles, and advertising opportunities targeting students and individuals seeking language education. The website has a consistent brand presence and a good content quality level, serving as a trusted resource in its niche. Technically, the site uses a custom CMS with legacy JavaScript libraries like jQuery 1.9.1, and integrates common web technologies such as Google Fonts and Google Tag Manager. While the site is mobile-optimized and SEO-friendly, there is room for improvement in security headers and updating outdated libraries. The security posture is moderate with cookie consent mechanisms and HTTPS usage, but lacks explicit security policies or incident response contacts. WHOIS data is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance and business legitimacy. Overall, the site is functional and credible but would benefit from enhanced security and compliance measures.

A

AMOS KamPoMaturite.cz, s.r.o.

zakladniskoly.com

45

The website zakladniskoly.com is an established Czech educational portal operated by AMOS KamPoMaturite.cz, s.r.o., providing a comprehensive directory of basic schools in the Czech Republic along with educational articles, exam preparation materials, and related resources. It targets students, parents, and educators, positioning itself as a trusted resource in the Czech education sector since 1998. The site integrates multiple partner domains within the educational ecosystem, enhancing its market presence. Technically, the site uses a custom CMS with common JavaScript libraries such as jQuery 1.9.1, Slippry slider, and Fancybox, along with Google Fonts and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility at a basic level. Cookie consent mechanisms and privacy policies are implemented, reflecting GDPR compliance. From a security perspective, while HTTPS usage is assumed, no explicit security headers were detected in the provided data, and the use of an outdated jQuery version poses potential vulnerabilities. The site employs standard advertising and tracking scripts from known ad networks and retargeting services. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear consistent and legitimate. Overall, the site presents a good balance of content quality, technical implementation, and privacy compliance, with room for improvement in security hardening and modernization of libraries. The risk profile is moderate, primarily due to missing WHOIS transparency and minor technical security gaps.

A

AMOS KamPoMaturite.cz, s.r.o.

ucebniobory.com

45

UcebniObory.com is an established Czech educational portal operated by AMOS KamPoMaturite.cz, s.r.o., providing a comprehensive directory of vocational study fields and specialized schools in the Czech Republic. The website targets students and prospective students seeking detailed information on study programs, entrance exam preparation, and related educational news. It maintains a strong market position supported by a network of related educational domains and projects. Technically, the site uses a custom CMS with common JavaScript libraries and integrates advertising and tracking scripts with consent management. Security posture is moderate with room for improvement in headers and library updates. The absence of WHOIS data for the domain is a notable anomaly that impacts domain legitimacy assessment. Overall, the site offers good content quality, user experience, and privacy compliance, making it a trusted resource for its audience.

A

AMOS KamPoMaturite.cz, s.r.o.

vyssiodborneskoly.com

43

VyššíOdbornéŠkoly.com is an established Czech educational portal operated by AMOS KamPoMaturite.cz, s.r.o., providing a comprehensive directory of higher vocational schools and related educational resources. The site targets students, parents, and educational advisors seeking detailed information about vocational education and entrance exam preparation in the Czech Republic. It maintains a professional presence with clear contact information, privacy compliance, and active social media engagement. Technically, the site uses a custom CMS with legacy JavaScript libraries and integrates multiple advertising and tracking services. Security posture is moderate with room for improvement in headers and updated libraries. The absence of WHOIS data for the domain is a notable anomaly that impacts trust from a domain registration perspective.

A

AMOS KamPoMaturite.cz, s.r.o.

vysokeskoly.com

37

VysokeSkoly.com is a Czech educational portal operated by AMOS KamPoMaturite.cz, s.r.o., providing a comprehensive directory of universities, faculties, and study programs, alongside preparatory resources for entrance exams. The site targets prospective students in the Czech Republic, offering detailed content, news, and advertising opportunities for educational institutions. Technically, the site uses a custom CMS with legacy jQuery and modern UI libraries, integrating multiple third-party advertising and tracking services. Security posture is moderate with cookie consent and privacy policy compliance but lacks visible HTTP security headers and uses outdated libraries. WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and company information appear professional and consistent. Overall, the site is a valuable educational resource with room for technical and security improvements.

Seminarky.cz is a well-established Czech educational platform offering the largest database of academic works including seminar papers, reports, reading diaries, and theses. It targets students and educators primarily in the Czech Republic, providing both free and paid downloadable content. The website has been operating for approximately 25 years and is supported by advertising and educational material sales. Technically, the site uses legacy technologies such as jQuery 1.6.2 alongside modern tracking and advertising tools like Google Analytics and Facebook SDK. While the site is accessible and functional with good SEO and navigation, it lacks some modern security headers and uses an outdated JavaScript library, which could pose security risks. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but explicit security and incident response policies are not publicly available. The WHOIS data is missing, which reduces trustworthiness, but the website's longevity and content quality support its legitimacy. Overall, the site is safe for general audiences and serves as a valuable educational resource.

A

AMOS – KamPoMaturite.cz, s.r.o.

kampomaturite.cz

45

KamPoMaturite.cz is a Czech educational platform specializing in providing comprehensive resources and services for students preparing for secondary school and university entrance exams, as well as maturita exams. The website offers a wide range of study materials, preparatory courses, tests, and counseling services, positioning itself as a key player in the Czech education market. The business model combines e-commerce sales of textbooks and courses with informational content and advisory services, targeting students, parents, and educators. Technically, the website uses a custom CMS developed by ANAWEb and incorporates several third-party technologies including jQuery, Google AdSense, SmartSupp live chat, and various advertising and tracking scripts. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and SEO-friendly metadata. However, some technologies like jQuery are outdated, and security headers are not explicitly present, indicating room for improvement in technical security. From a security perspective, the site uses HTTPS and implements CAPTCHA on its contact form, along with a GDPR-compliant cookie consent mechanism. Despite these strengths, the absence of explicit security headers and the use of older libraries present potential vulnerabilities. The lack of WHOIS data reduces domain trustworthiness, although the website content and business information appear professional and legitimate. Overall, KamPoMaturite.cz is a well-established educational resource with a solid market presence in the Czech Republic. To enhance its security posture and trustworthiness, it should update its technical stack, implement comprehensive security headers, and improve transparency regarding domain registration details.

B

Bundesministerium für Arbeit und Soziales (BMAS)

esf.de

62

The website www.esf.de is the official portal for the European Social Fund (ESF) in Germany, operated by the Bundesministerium für Arbeit und Soziales (BMAS). It serves as a comprehensive information and service platform providing details on funding programs, social integration, employment initiatives, and related EU projects. The site targets a broad audience including employees, unemployed persons, educational institutions, entrepreneurs, families, and other social groups. It is positioned as a key government resource for promoting employment and social cohesion through EU funding mechanisms. Technically, the site is built on the Government Site Builder CMS and employs modern web technologies such as jQuery, Bootstrap, RequireJS, and integrates a consent management platform (Consentmanager.net) for GDPR compliance. Analytics are handled via Etracker, with scripts loaded asynchronously to optimize performance. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and uses a consent management platform to handle privacy and cookie policies. While explicit security headers are not visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with a legitimate government domain, showing consistent registration and authoritative name servers. Overall, the website demonstrates a high level of professionalism, compliance, and trustworthiness, making it a reliable source for information on the European Social Fund in Germany.

The Commerzbank-Stiftung is a reputable non-profit foundation affiliated with Commerzbank AG, focusing on funding projects in culture, social affairs, and science to foster a sustainable and inclusive society in Germany. The website reflects a professional and consistent brand image, providing detailed information about funding opportunities, awards, and current news. The foundation targets non-profit organizations and project initiators seeking financial support and recognition. Technically, the site is built on TYPO3 CMS with modern SEO and user experience features, including responsive design and multimedia content. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates high trustworthiness and business credibility.

S

Social Impact

socialimpact.eu

44

Social Impact is a German-based agency specializing in social innovation projects aimed at addressing societal challenges for a just and sustainable future. The website positions itself as a niche player in the non-profit sector, offering consultancy and project development services focused on social impact. The digital infrastructure is built on TYPO3 CMS, enhanced with modern tracking and consent management tools such as Google Analytics, Google Tag Manager, and Usercentrics for GDPR compliance. The website demonstrates good SEO practices and mobile optimization, though lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but could be improved by adding security headers and publishing formal security policies. Overall, the site is professional and trustworthy with moderate tracking and no suspicious content detected.

N

NBank

nbank.de

67

NBank is the official investment and development bank of the German state of Niedersachsen, providing a broad range of funding programs, consulting, and support services to individuals, companies, municipalities, and institutions within the region. The website reflects a strong government affiliation with clear communication of its mission to foster growth and quality of life in Niedersachsen. The digital infrastructure is modern and well-implemented, featuring responsive design, accessibility considerations, and integration with consent management and analytics tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. Overall, the website presents a trustworthy and professional front for a large government entity.

H

Holii - Holistic Impact Incubator

holii.de

39

Holii - Holistic Impact Incubator is a small educational incubator project affiliated with Leuphana University in Germany, focused on supporting impact-driven startups and founders through a structured program involving design thinking, impact measurement, and financing. The website presents a professional and consistent brand image with clear descriptions of services and partnerships with multiple universities and research institutions. Technically, the site is built on WordPress using Elementor and related plugins, optimized for performance and SEO, and is mobile responsive. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche, but could improve transparency and security practices.

C

Contact & Cooperation Lüneburg e.V.

contact-cooperation.de

48

Contact & Cooperation Lüneburg e.V. is a well-established student consultancy affiliated with Leuphana University in Germany. The organization bridges academic knowledge with practical business consulting, serving a diverse client base from startups to global enterprises. Their business model is non-profit and focuses on providing students with real-world consulting experience while delivering value to partner companies. The website reflects a professional and consistent brand image with comprehensive content and clear navigation, targeting students and businesses alike. Technically, the website is built on WordPress using the Avada theme framework, incorporating modern libraries such as jQuery and FontAwesome. It integrates social media feeds and GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. Hosting appears to be managed by kasserver.com, with proper SSL and security headers in place, contributing to a secure browsing experience. From a security perspective, the site enforces HTTPS, employs security headers, and uses anti-spam measures like honeypot plugins. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and readiness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a trustworthy business presence. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and continuous monitoring of third-party plugins to maintain security posture.

P

Playful Business

moonshot.game

48

Moonshot is a specialized innovation game designed to facilitate creative processes within companies and startups by making innovation playful and engaging. The business operates primarily in Germany and targets corporate clients, trainers, and individuals interested in enhancing creativity and innovation culture. Their offerings include workshops, an academy for training game masters, and a lab for customization, supported by a professional website with strong branding and client trust signals. Technically, the website employs modern JavaScript libraries such as jQuery and particles.js, integrates Mailerlite for marketing forms, and uses Goatcounter for privacy-friendly analytics. The site is mobile-optimized, well-structured, and SEO-friendly. Security posture is good with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear policies, though a cookie consent mechanism is missing. Overall, the website and business present a trustworthy, professional image with no signs of malicious activity or content safety concerns.

F

FabLab Lüneburg e.V.

fablab-lueneburg.org

51

FabLab Lüneburg e.V. is a non-profit community maker and hack space established in 2015 in Lüneburg, Germany. It provides an open MakerSpace equipped with tools such as 3D printers and laser cutters, and a HackSpace focused on Free and Open Source Software (FOSS). The organization operates primarily on donations and memberships, fostering a collaborative environment for technology enthusiasts and hobbyists. The website is well-structured, content-rich, and targets local community members interested in technology and DIY projects. Technically, the website is built on WordPress 6.8.3 with common plugins like Jetpack and All-in-One Event Calendar. It uses modern web technologies including jQuery and Google Fonts, and implements HTTPS with good SSL configuration. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with EU regulations. Analytics are minimal and privacy-conscious, using Jetpack Stats. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. No suspicious or malicious indicators were found. Overall, the site demonstrates a good security posture for its type and size. The overall risk is low, with recommendations to enhance HTTP security headers and publish incident response information. The site is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its community audience.

R

Redeleit und Junker

redeleitundjunker.de

51

Redeleit und Junker is a German design and branding agency specializing in transforming ideas into remarkable brands through services such as branding, web design, print, packaging, photography, and online marketing. The company targets businesses seeking professional creative services and maintains a consistent brand presence online. The website is built on WordPress and integrates modern marketing and analytics tools including Google Tag Manager, Hotjar, and Cookiebot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the website is professional, compliant with GDPR, and trustworthy, with room for improvement in accessibility and explicit security disclosures.

S

Startup Port

startupport.de

37

Startup Port is a regional startup support organization focused on qualifying, networking, and promoting technology and knowledge-based startups in the Hamburg metropolitan region and neighboring German states. It aggregates support offerings from ten universities and research institutions, targeting students, researchers, graduates, and startups. The website is built on WordPress with Elementor and uses privacy-conscious Matomo analytics. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. The domain registration is consistent with the business purpose, though WHOIS details are minimal. Overall, the site presents a professional, trustworthy, and well-structured platform for startup support.

E

Elevator - Startups Lüneburg

startups-lueneburg.de

48

Elevator - Startups Lüneburg is a regional accelerator program based in Lüneburg, Niedersachsen, Germany, focused on supporting startups primarily in the IT and media sectors. Founded in 2017 and operated by Wirtschaftsförderung Lüneburg, it offers coaching, office space, and networking opportunities to startups in early growth phases. The program is free to join and equity-free, positioning itself as a key enabler in the regional startup ecosystem. The website is professionally designed using WordPress and Elementor, with a modern tech stack and multiple Jet plugins enhancing functionality. Consent management is implemented via Usercentrics, reflecting GDPR awareness. However, the absence of a published privacy policy and terms of service represents a compliance gap. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security policies and security headers. Overall, the site is trustworthy and well-positioned but could improve transparency and compliance documentation.

C

Cobot

cobot.me

73

Cobot is a well-established technology company founded in 2010, specializing in coworking space management software. Their platform offers a comprehensive suite of tools including mobile apps, booking systems, invoicing, access control, analytics, and member management. Serving over 90 countries, Cobot positions itself as an intuitive and scalable solution for coworking operators. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site leverages modern web technologies and frameworks, including Ruby on Rails and Google Tag Manager, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, CSRF protections, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure pages are absent. WHOIS data is unavailable due to query failure or privacy protection, but the website's consistency and trust signals support legitimacy. Overall, Cobot presents a credible and professional SaaS business with a solid market position in the coworking software industry.

Luna Giro is a regional online platform affiliated with Sparkasse Lüneburg, offering a suite of financial and lifestyle services including banking account models, cashback programs, travel booking, and ticketing services. The website targets consumers in the Lüneburg region, providing localized benefits and incentives. Technically, the site employs modern web technologies such as the Ionic framework, Font Awesome icons, and integrates Google Tag Manager and Usercentrics for analytics and consent management. The hosting includes Amazon S3 for static assets, indicating a hybrid hosting approach. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and detailed security policies are absent. Contact information is clearly presented, and the site maintains a professional design with good mobile optimization. Overall, the website is trustworthy and well-positioned within its regional banking and service niche.

W

Westsächsische Hochschule Zwickau

whz.de

68

The Westsächsische Hochschule Zwickau is a regional university of applied sciences in Germany offering a broad range of study programs in technology, economics, and quality of life disciplines. The website serves students, prospective students, alumni, and international visitors with detailed information about study offerings, research, and campus life. The institution positions itself as a practical and accessible higher education provider with a strong regional and international profile. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper, and integrates Matomo for analytics. The site demonstrates good mobile optimization, accessibility features including visual aids, and a comprehensive navigation structure. Hosting appears to be managed by academic or regional providers, consistent with the institution's profile. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly detailed, and security headers are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively. Strategic improvements in security transparency and header implementation could further enhance its posture.

Educational Testing Service (ETS) is a globally recognized non-profit organization specializing in educational testing and talent solutions. The company provides a broad range of assessments and measurement services aimed at enabling lifelong learners to be future ready. ETS holds a leading market position in the education sector, serving educators, institutions, and test takers worldwide. Their website reflects a professional and comprehensive digital presence with clear branding and targeted content for their audience. Technically, the ETS website leverages modern technologies including Adobe Experience Manager as its CMS, Adobe Target for personalization, Google Tag Manager, and Segment Analytics for data collection and marketing optimization. The site is well-optimized for mobile devices, has good accessibility features, and employs strong SEO practices. Performance is moderate, with room for further optimization. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, explicit security policy and incident response information are not publicly detailed, representing an area for improvement. Overall, ETS demonstrates a high level of trustworthiness and professionalism. The lack of WHOIS data is mitigated by the organization's established reputation and consistent branding. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include publishing detailed security policies, incident response contacts, and a vulnerability disclosure program to further enhance security posture and transparency.

W

Westsächsische Hochschule Zwickau

techniknacht-zwickau.de

63

The website www.techniknacht-zwickau.de serves as an informational platform for the 'Lange Nacht der Technik' event organized by the Westsächsische Hochschule Zwickau. It targets technology enthusiasts, students, and the general public interested in science and technology events. The site provides event details, images, and partner information, positioning itself as a regional educational event organizer with strong academic and community ties. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper.js, and Magnific Popup for interactive content. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the institution, indicating high legitimacy. Overall, the website presents a low-risk profile with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture and trustworthiness.

WireHeadZ is an eSports association linked to the Westsächsische Hochschule Zwickau, focusing on integrating gaming, academic research, corporate cooperation, and community building. The organization targets students, eSports enthusiasts, and companies interested in innovative event management and talent networking. The website reflects a professional and modern digital presence, leveraging Next.js and Prismic CMS, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is trustworthy and well-positioned within its niche, supported by multiple corporate partners and sponsors.

W

WHZ Racing Team

whz-racingteam.de

56

The WHZ Racing Team website represents a student-led Formula Student racing team affiliated with the Westsächsische Hochschule Zwickau in Germany. The team focuses on designing, building, and competing with innovative racing vehicles in international Formula Student competitions. The site targets students, motorsport enthusiasts, and potential sponsors, providing detailed information about the team, vehicles, events, and contact points. The business model is non-commercial, centered on education, technical development, and motorsport passion. Technically, the website is built on TYPO3 CMS with standard web technologies including jQuery and Magnific Popup. It uses HTTPS and integrates Piwik analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, accessibility and SEO optimizations are basic, and some modern security headers are missing. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the university infrastructure, supporting legitimacy. Overall, the website is trustworthy and professional but could improve privacy compliance and security posture by adding cookie consent, security headers, and clear privacy/security policies.

E

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn

europe-direct.de

43

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn operates as a regional EU information and cultural engagement center serving the Bavarian-Bohemian border region. It provides citizens, students, and local communities with educational events, workshops, and cross-border cooperation initiatives to promote understanding of the European Union and its policies. The organization is part of the EUREGIO network and collaborates with universities, government bodies, and cultural institutions. The website is built on TYPO3 CMS and uses standard web technologies including jQuery and Bootstrap. It features event announcements, educational content, and contact information prominently, targeting a general audience interested in EU affairs.

P

Pfarrbriefservice.de

pfarrbriefservice.de

47

Pfarrbriefservice.de is a specialized website serving the German-speaking church community by providing resources for church newsletters and public relations. The site offers images, texts, advice, and a newsletter subscription service, positioning itself as a trusted non-profit resource in this niche. The business operates with clear contact information and maintains a consistent brand presence, targeting church public relations professionals and volunteers. Technically, the website is built on Drupal 10, leveraging modern libraries such as Matomo for privacy-conscious analytics and Bootstrap for responsive design. Hosting is provided by webhosting-franken.de, and the site demonstrates good mobile optimization and basic accessibility features. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site enforces HTTPS and disables cookies in Matomo to enhance privacy. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is absent. Overall, the website is trustworthy, professionally maintained, and well-aligned with its mission. It poses low risk but could benefit from enhanced security practices and transparency regarding incident response and terms of service.