Security Directory

F

Fairtrade Deutschland

fairtrade-deutschland.de

65

Fairtrade Deutschland operates as a non-profit organization focused on promoting fair trade principles and products within Germany. The website serves as an educational and advocacy platform, providing detailed information about fair trade standards, products, campaigns, and business engagement opportunities. It targets consumers, businesses, and activists interested in ethical and sustainable trade practices. The organization holds a strong market position in the fair trade sector in Germany, supported by consistent branding and comprehensive content. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and consent management tools such as Usercentrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Tracking and analytics are implemented primarily through Google Tag Manager, with user consent mechanisms in place. From a security perspective, the site uses HTTPS and includes consent management but lacks visible security headers and explicit security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding strongly suggest legitimacy. No critical vulnerabilities or adult content were detected. Overall, the website is professional and trustworthy but would benefit from improved transparency in domain registration, explicit privacy and security policies, and clearer contact information to enhance user trust and compliance.

The website www.kaiserwagenticket.de is operated by Wuppertal Marketing GmbH and serves as a ticketing and information platform for cultural and historical tours in Wuppertal, Germany. It offers services such as historic Kaiserwagen rides, city tours, and guided walks, targeting tourists and local visitors interested in cultural experiences. The site is well-branded, with consistent design and good content quality focused on its niche market. Technically, the site uses a CMS called itrium .datentechnik, with client-side technologies including jQuery 1.11.0 and a comprehensive accessibility tool from digiAccess, enhancing usability for users with disabilities. Hosting is provided via rzone.de nameservers, indicating a stable infrastructure. Security posture is moderate with HTTPS enabled and secure login forms, but the use of an outdated jQuery version and lack of security headers present potential vulnerabilities. Privacy compliance is basic, with a privacy policy and terms of service present but no visible cookie consent mechanism. Overall, the site is functional, accessible, and trustworthy but could improve security and privacy features.

S

Stadt Köln

offenedaten-koeln.de

47

Offene Daten Köln is the official open data portal of the City of Cologne, Germany, providing public access to a wide range of municipal datasets to promote transparency and digital engagement. The portal is built on the Drupal 7 CMS with the DKAN open data platform, offering datasets in formats such as CSV, ZIP, WFS, and WMS. The site targets citizens, developers, researchers, and businesses interested in municipal data. It features search functionality, a blog, and user login capabilities. Technically, the website uses a mature but outdated technology stack including Drupal 7 and jQuery 3.1, hosted likely by NetCologne, with Matomo analytics hosted on a city domain to ensure privacy-conscious tracking. The site is mobile optimized with good navigation and consistent branding. However, the use of Drupal 7, which is end-of-life, presents security risks that should be addressed. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks modern security headers and published security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie policy present but no explicit cookie consent mechanism. No vulnerability disclosure or security.txt files were found. Overall, the website is trustworthy and professional, serving as a valuable government resource. Strategic improvements include upgrading the CMS, enhancing security headers, implementing cookie consent, and publishing security policies to strengthen compliance and security posture.

C

CivicActions

getdkan.org

10

GetDKAN is an open source, community-driven platform focused on enabling government agencies and nonprofit organizations to publish and manage open data catalogs. Maintained by CivicActions, the platform leverages Drupal to provide a customizable, API-first solution that supports modern metadata standards and FAIR data principles. The website positions DKAN as a trusted and certified Digital Public Good, emphasizing transparency and accessibility in public data management. Technically, the site uses Drupal CMS, Google Tag Manager, Cloudflare services including Turnstile CAPTCHA for form protection, and Google Fonts, reflecting a modern and moderately performant infrastructure. Security posture is solid with HTTPS enforced and CAPTCHA on forms, but lacks published security policies, privacy and cookie policies, and security headers, which are areas for improvement. The domain registration is consistent and legitimate, with no suspicious patterns detected. Overall, the website is professional, trustworthy, and well-branded, but could enhance compliance and security transparency to improve user trust and regulatory adherence.

P

Politik in Wuppertal

politik-in-wuppertal.de

10

Politik in Wuppertal is a German civic engagement and informational website focused on local politics in the city of Wuppertal. It provides educational content, guides on political participation, and links to official city and partner organizations. The platform is positioned as a local government-related resource aimed at residents interested in municipal governance and civic involvement. Technically, the site runs on WordPress 6.8.3, uses jQuery, and includes accessibility enhancements via a dedicated plugin. Hosting is provided by the German company manitu, ensuring regional compliance and reliability. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. Privacy compliance is supported by a GDPR-compliant privacy policy, but cookie consent is missing. No contact emails or phone numbers are explicitly provided, which may affect user trust and engagement. Overall, the website is professional, accessible, and trustworthy, serving its purpose as a local government information portal effectively.

W

wer denkt was GmbH

werdenktwas.de

10

Wer denkt was GmbH operates a professional digital platform focused on facilitating citizen participation and engagement for municipalities and government entities in Germany. The company offers software tools, consulting, and facilitation services to enable effective public dialogue and participation in local governance. The website is well-structured, with clear navigation and relevant content targeting its audience. The business is positioned as an established provider in the government sector with a focus on digital engagement solutions. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting good digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses privacy plugins but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

P

Packhelp

packhelp.com

10

Packhelp is an established online platform specializing in custom and wholesale packaging solutions, serving a broad range of industries including e-commerce, apparel, health & beauty, and food. Founded in 2017 and based in Poland, the company offers a comprehensive suite of services including design, sourcing, warehousing, and flexible payment options. Their market position is strong, supported by a professional website with extensive product catalogs and international reach. Technically, the website leverages modern frameworks such as Astro and WordPress, integrates advanced analytics and marketing tools like RudderStack and HubSpot, and is hosted behind Cloudflare ensuring good performance and security. Security posture is solid with HTTPS enforced and monitoring tools in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic with cookie consent implemented but lacking visible privacy and terms of service documents. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

N

N/A

mailin.com

5

mailin.com is a long-registered domain currently serving as a parked domain with minimal content primarily consisting of advertising placeholders. The website lacks any clear business description, contact information, or interactive features, indicating it is not actively used for a commercial or service-oriented purpose. The technical infrastructure relies on Bodis DNS and Google advertising technologies, with no detected CMS or advanced frameworks. Security posture is weak, with no security headers or privacy compliance mechanisms beyond a basic privacy policy page. The domain registration is consistent and transparent but does not correspond to an active business presence. Overall, the site presents low trustworthiness and limited business credibility.

M

mymuesli

mymuesli.com

74

mymuesli is a German-based e-commerce company specializing in customizable organic muesli products. The company targets health-conscious consumers who value organic ingredients and personalized food options. The website is professionally designed, leveraging the Shopify platform with integrations for loyalty programs, customer reviews, and marketing automation. The site is well-optimized for performance and mobile devices, providing a seamless user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, mymuesli presents a trustworthy and mature online retail presence with room for improvement in transparency around security and incident handling.

R

RedCart

redcart.pl

10

RedCart is a well-established Polish e-commerce platform founded in 2008, offering comprehensive tools for online store creation, sales management, multi-channel selling, and automation. The platform targets online retailers seeking integrated solutions to streamline their sales and marketing efforts. With over 100,000 stores created, RedCart holds a strong market position in the Polish e-commerce sector. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. The platform is hosted by OVH SAS, a reputable provider, and employs HTTPS with DNSSEC for enhanced security. However, the site lacks explicit privacy and cookie policy pages, which are critical for GDPR compliance. Security posture is good with HTTPS and DNSSEC enabled, but could be improved by adding more security headers and formal security policies. Overall, the website is professional, trustworthy, and content-rich, but should enhance privacy compliance and contact transparency to improve user trust and regulatory adherence.

E

ESSI

niszczeniedokumentow.eu

10

The website niszczeniedokumentow.eu represents ESSI, a professional Polish company specializing in secure document destruction and data carrier disposal services compliant with RODO and other legal standards. The company operates multiple regional offices and offers a comprehensive range of services including mobile document destruction, equipment sales, and secure storage solutions. The website is well-structured, content-rich, and targets business clients in Poland seeking compliant and secure document disposal solutions. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good SEO practices. Security posture is adequate with HTTPS and consent management but shows minor technical issues such as PHP warnings and lacks explicit security policies or incident response information. Overall, the domain registration is consistent and trustworthy, with no privacy protection masking ownership, supporting the legitimacy of the business. Strategic recommendations include fixing technical warnings, enhancing security headers, and publishing clear security and incident response policies to improve trust and compliance.

F

Fellowes Polska S.A.

fellowes.pl

10

Fellowes Polska S.A. is a well-established manufacturer and global distributor of office equipment, specializing in shredders and ergonomic office devices. The company targets business customers and office users primarily in Poland, maintaining a consistent and professional online presence. The website is designed with good quality content, clear navigation, and is mobile optimized, supporting a positive user experience. Technically, the site employs a modern technology stack including jQuery, Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for analytics and marketing, with a custom or unknown CMS. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are not explicitly confirmed. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with comprehensive cookie and privacy policies and GDPR consent mechanisms. Business credibility is high, supported by domain age and consistent WHOIS data. Overall, the site scores well in content quality, technical implementation, security, privacy, and business credibility.

The website at ipex.it is currently inaccessible, returning a 403 Forbidden error page that blocks all content access. This prevents extraction of any meaningful business, security, or compliance information from the site itself. The domain is well-established, created in 2003, and DNSSEC is enabled, indicating a legitimate registration and some level of domain security. However, the lack of accessible content, metadata, contact information, or policies severely limits the ability to assess the company's business model, technical infrastructure, or security posture. No scripts, analytics, or external links were detected, suggesting minimal or no active web presence at this URL. The security posture cannot be fully evaluated due to the blocked content, but the presence of DNSSEC and domain age are positive indicators. Overall, the site appears to be either restricted intentionally or misconfigured, requiring direct contact with the domain owner for further information.

A

Acquirente Unico S.p.A.

ilportaleofferte.it

63

The website www.ilportaleofferte.it is an official Italian public service portal operated by Acquirente Unico S.p.A., designed to provide consumers with a reliable and simple platform to compare electricity and gas tariffs as mandated by Italian energy law. It offers comprehensive information on energy market options including free market offers, PLACET offers, and protection services. The portal integrates secure user authentication via SPID and CIE, enhancing user data protection and personalized service access. The site is well-branded with official logos and legal references, targeting Italian consumers seeking energy supply information and comparisons.

P

Plastic Bank

plasticbank.com

68

Plastic Bank is a well-established non-profit organization focused on reducing plastic pollution through a global bottle deposit program. The website reflects a mature digital presence with a strong emphasis on social impact and environmental sustainability. Their target audience includes environmentally conscious individuals and companies seeking to contribute to plastic recycling and poverty alleviation. The business model is centered on social enterprise principles, leveraging partnerships and community engagement to drive impact. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, supported by Cloudflare for DNS and CDN services. It integrates multiple marketing and analytics tools such as Google Analytics, Visual Website Optimizer, and PostHog, all managed with a comprehensive cookie consent mechanism that aligns with GDPR requirements. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and employs bot protection mechanisms via Cloudflare and Google reCAPTCHA. Cookie management is granular and transparent, enhancing user privacy. However, there is room for improvement in implementing additional security headers and enabling DNSSEC to strengthen DNS security. No critical vulnerabilities or exposed sensitive data were detected. Overall, Plastic Bank's website presents a high level of professionalism, trustworthiness, and compliance with privacy regulations. The absence of direct contact information on the homepage is noted but does not significantly detract from the site's credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further bolster trust and compliance.

T

Treedom s.r.l.

treedom.net

72

Treedom s.r.l. operates an online platform dedicated to environmental sustainability by enabling individuals and companies to plant or gift trees and track their impact. The company positions itself as a niche leader in green business solutions and reforestation projects, targeting environmentally conscious consumers and businesses. The website is professionally designed, mobile-optimized, and provides clear information about its services and mission. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager for analytics, and uses Iubenda for cookie consent management, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and GDPR-compliant cookie consent but lacks explicit security headers and published security policies, indicating room for improvement in security transparency and incident response readiness. Overall, the website is trustworthy and safe, with no adult or questionable content, but the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to strengthen security posture and user trust.

I

Innova Semplice SpA

cloud-care.it

67

Innova Semplice SpA operates as a leading Italian hub connecting consumers with providers in the utility, insurance, and financial sectors. Established in 2011, the company has positioned itself as a marketplace facilitating multi-channel interactions between demand and supply, supported by a network of subsidiaries specializing in brokerage and digital services. The website reflects a professional and consistent brand image, targeting both B2C and B2B audiences with clear service offerings and corporate governance transparency. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and standard tracking tools such as Google Tag Manager and Cookiebot for compliance and analytics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

A

A2A S.p.A.

gruppoa2a.it

46

A2A S.p.A. is a leading Italian multi-utility company specializing in energy, water, environmental services, and sustainable mobility. The company positions itself as a Life Company focused on sustainability and ecological transition, offering a wide range of services including electricity and gas supply, district heating and cooling, water management, waste collection, and electric vehicle charging solutions. The website reflects a mature enterprise with a strong market presence and diversified service portfolio targeting consumers, businesses, investors, and public entities. Technically, the website employs modern web technologies such as Next.js and React, integrates Google Tag Manager for analytics, and uses Dynatrace for performance and security monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly detailed, and no vulnerability disclosure policy or security.txt file is found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility. The domain WHOIS data aligns with the corporate identity, confirming legitimacy. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing performance optimizations to further strengthen the security posture and user experience.

S

Selectra

stromliste.at

65

Stromliste.at is an Austrian energy comparison platform operated by the Selectra Group, offering free services to compare electricity and gas tariffs and providing expert telephone consultation to help consumers reduce energy costs. The website is professionally designed, mobile-optimized, and rich in relevant content, including guides, tariff comparisons, and customer testimonials. Technically, it is built on Drupal 10 with modern web technologies and integrates Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to NIC.AT quota limits, but the website's business information and trust signals indicate legitimacy. Overall, the site presents a trustworthy and user-friendly service for Austrian energy consumers.

G

GazElektrik

gazelektrik.com

63

GazElektrik.com is a Turkish online platform providing comprehensive guides and application services related to electricity, natural gas, telecommunications, insurance, and security systems. The website serves as an information hub and lead generation portal for consumers seeking to manage utility subscriptions, switch providers, and pay bills. It targets residential and commercial users in Turkey, positioning itself as a niche market player with a focus on energy and telecom sectors. The business is linked to the AkıllıTarife.com brand, indicating a broader ecosystem of related services. Technically, the website is built on Drupal 10, hosted by OVH sas, and uses Cloudflare DNS. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with cookie consent implemented and a privacy policy linked in the footer, though no explicit GDPR compliance statements or security policies are found. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

S

Sparkasse

sparkassen-kundenportal.de

63

The website www.sparkassen-kundenportal.de serves as a customer portal for the Sparkasse banking group in Germany, providing users access to regional banking services, offers, and advantages. The portal is designed primarily for Sparkasse customers and supports login functionality to access personalized services. The site is built using modern web technologies including Angular 18 and ASP.NET WebForms, with a CMS identified as onpublix 7. The design is professional, mobile-optimized, and accessible, supporting a good user experience for its target audience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers such as CSP or HSTS are not evident in the provided data, and no published security policy or incident response contacts are found. The site uses Google Tag Manager and TradeDoubler for analytics and affiliate marketing, with moderate user tracking levels. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the domain and website appear legitimate and consistent with a regional banking service portal. The WHOIS data shows the domain uses third-party DNS providers but no privacy protection or suspicious patterns. The site maintains good privacy compliance and business credibility but could improve security posture by publishing security policies and implementing additional HTTP security headers. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and continuing to maintain GDPR compliance and user trust through transparent privacy practices.

S

S-Kreditpartner

skpk.de

72

S-Kreditpartner is a German financial services company specializing in consumer and auto loans, operating fully online and in partnership with Sparkassen banks. The website presents a professional and modern interface built with Next.js and React, integrating Google Tag Manager for analytics. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not found in the provided content. Contact information and incident response details are not clearly visible, which could impact user trust and compliance. Overall, the business appears legitimate and well-positioned in the finance sector, targeting private customers and Sparkassen partners with streamlined online loan services.

B

Bundesverband Gebäudemodernisierung e.V.

bvgem.de

51

The Bundesverband Gebäudemodernisierung e.V. operates a professional German-language website focused on promoting affordable and rapid modernization of residential buildings, particularly single and two-family homes built before 1994. The association provides a network of certified modernization consultants, digital tools such as building quick checks and economic calculators, and educational seminars through its BVGeM-Akademie. The website positions itself as a national non-profit entity dedicated to energy efficiency and climate protection through building modernization. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, using modern front-end technologies including Bootstrap, jQuery, and Swiper.js. Hosting appears to be provided by 1&1 IONOS, inferred from the nameservers. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with no critical errors detected. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks visible security headers and a vulnerability disclosure policy. No cookie consent mechanism was detected, which is a GDPR compliance gap. No contact information or incident response channels are explicitly provided, limiting transparency. No suspicious or vulnerable libraries were found in the HTML content. Overall, the website is trustworthy and professional with a solid business focus but could improve privacy compliance and security posture by implementing cookie consent, security headers, and incident response information. The domain WHOIS data aligns with the business profile, showing no suspicious patterns. The site is safe for general audiences with no adult or questionable content.

D

Deka Investments

deka.de

68

Deka Investments is a well-established financial services provider in Germany, focusing on investment products for private customers. The website presents a professional and consistent brand image, targeting private investors with asset management and investment fund services. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js with PrimeVue and Tailwind CSS, alongside marketing and analytics tools like Adobe Launch and Google Tag Manager, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and nonce attributes on scripts, but lacks explicit security headers and publicly available security policies, which are areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which could impact user trust and regulatory compliance. Overall, the website is trustworthy and professionally maintained, but enhancing privacy disclosures and security headers would strengthen its security and compliance posture.

I

IAI

idosell.com

74

IdoSell is a Polish technology company specializing in e-commerce software solutions, enabling businesses to open and manage online stores. The company positions itself as an established player in the Polish e-commerce market, offering SaaS-based online store platforms and related services. The website is professionally designed, mobile-optimized, and includes comprehensive cookie consent mechanisms, reflecting a mature digital presence. Technically, the site leverages modern web technologies including React-based UI components, Google Analytics, Cookiebot for privacy compliance, and various marketing integrations such as LinkedIn Insight and Bing Ads. Hosting is partly on Vercel, indicating use of modern cloud infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are not clearly visible. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but the website content and external references support legitimacy. Overall, the site is safe, business-focused, and compliant with GDPR requirements.

K

Krajowy Rejestr Opinii SA

trustmate.io

69

TrustMate.io is a Polish-based SaaS platform specializing in online reputation management and review collection for e-commerce and service businesses. The company, Krajowy Rejestr Opinii SA, founded in 2018, offers a comprehensive suite of tools including mediation, detailed ratings, surveys, and integrations with Google and social media to enhance customer trust and SEO performance. The website demonstrates a professional design with clear navigation and modern technology usage, including React and Next.js frameworks, supported by AWS hosting and multiple analytics and marketing tools such as HubSpot and Microsoft Clarity. Security posture is adequate with HTTPS enabled and no visible critical vulnerabilities, though improvements are recommended in DNSSEC and security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business, indicating high legitimacy and trustworthiness.

L

L'Assurance retraite

lassuranceretraite.fr

70

L'Assurance retraite is the official French government portal dedicated to providing comprehensive information and online services related to retirement and social security. It serves both active workers and retirees in France, offering detailed guidance on career, retirement age, payments, and social benefits. The website is well-branded with official logos and maintains a strong presence through social media channels such as YouTube, Twitter, and LinkedIn. The portal emphasizes accessibility and user-friendly navigation, ensuring a positive user experience across devices. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It integrates analytics and performance monitoring tools like ATInternet and AppDynamics, and uses TarteAuCitron for cookie consent management, reflecting a mature digital infrastructure. The website is mobile-optimized and adheres to good SEO and accessibility standards. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit HTTP security headers visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, L'Assurance retraite demonstrates a high level of professionalism, security, and compliance suitable for a government service portal. It provides trustworthy and valuable services to its audience with minimal risk exposure.

A

Akıllı Tarife

akillitarife.com

67

Akıllı Tarife is a Turkish service platform founded in 2015 that offers consumers discounted electricity, natural gas, internet, TV, mobile, alarm systems, and insurance products. The website serves as a comparison and lead generation portal, helping users find cheaper utility and telecommunication services with detailed guides and application forms. The company targets Turkish consumers looking to reduce their bills and manage services efficiently, especially during moving. Technically, the site is built on Drupal 10, hosted by OVH sas, and uses Cloudflare DNS with Google Analytics and Tag Manager for tracking. The site is mobile optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies are missing. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements.

O

Octopus Energy Ltd

octopus.energy

76

Octopus Energy Ltd is a leading UK energy supplier specializing in renewable and smart energy solutions. The company offers a wide range of services including electricity and gas supply, heat pumps, solar panels, batteries, and electric vehicle charging solutions. It is recognized as one of Britain's most awarded energy suppliers and is known for its customer-centric approach and innovative smart tariffs. The website reflects a mature digital presence with comprehensive content, modern technology stack, and strong branding consistency. Technical infrastructure includes React-based frontend, Google Tag Manager, Google Analytics, and Sentry for error monitoring, indicating a well-maintained and performance-optimized platform. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a public security policy could enhance trust further. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and business demonstrate high professionalism, trustworthiness, and market credibility.

A

A2A Energia

a2aenergia.eu

69

A2A Energia is a leading Italian multi-utility company specializing in the supply of electricity and gas for residential and business customers. The company offers a variety of energy solutions including fixed and variable price contracts, photovoltaic installations, and energy efficiency services. Positioned strongly in the Italian energy market, A2A Energia benefits from its parent company Gruppo A2A's extensive infrastructure and market presence. The website reflects a mature digital infrastructure with modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. The company demonstrates strong compliance with GDPR and cookie regulations, providing clear privacy and cookie policies with consent mechanisms. Security posture is robust with HTTPS enforcement and comprehensive security headers, although there is room for improvement in publishing dedicated security and incident response policies. Overall, the website and business exhibit high professionalism, trustworthiness, and a strong market position in the energy sector.

O

OV Energy

ovenergy.it

53

OV Energy is an Italian energy supplier specializing in electricity and natural gas, emphasizing a culture of kindness, listening, and sharing. The website is primarily targeted at the Italian market and presents basic information about the company's services without detailed business or compliance disclosures. The technical infrastructure includes modern JavaScript, service workers for progressive web app capabilities, and Matomo analytics for user tracking. However, the site lacks visible privacy, cookie, or terms of service policies, and no contact information is provided in the analyzed HTML content. Security posture is moderate with no detected vulnerabilities but missing security headers and limited compliance indicators. Overall, the website is functional but basic in content and security maturity, with room for improvement in transparency and user trust elements.

G

Green Network S.p.A.

greennetwork.it

46

Green Network S.p.A. is an established Italian company founded in 2003, originally active in the electricity and gas supply market. As of early 2023, it divested its energy supply business and now focuses on energy efficiency and investments in renewable energy companies. The company holds participations in several subsidiaries operating in the renewable energy sector, positioning itself as a holding and investment entity within the energy industry. The website reflects this transition, providing corporate information and legal details but no direct consumer services or energy supply offerings. Technically, the website uses modern frameworks such as Blazor and Bootstrap, indicating a moderate level of digital maturity. The site is mobile optimized and structured with basic accessibility and SEO features. However, it lacks advanced performance optimizations and visible analytics or tracking tools, suggesting a focus on corporate presence rather than marketing or user engagement. From a security perspective, the website is accessible without WAF or blocking mechanisms, but it lacks important security headers and cookie consent mechanisms, which are critical for GDPR compliance and user data protection. No contact emails or phone numbers are provided, limiting direct communication channels. The WHOIS data is consistent and supports the legitimacy of the business, with a domain age appropriate to the company's history. Overall, the website presents a basic but professional corporate presence with room for improvement in security posture, privacy compliance, and user engagement features. Strategic enhancements in these areas would strengthen trust and regulatory compliance while supporting the company’s business objectives.

NeN Energia is an established Italian energy supplier founded in 2001, offering electricity and gas services with a focus on transparency, simplicity, and customer empowerment. The company provides fixed and variable rate plans, emphasizing 100% green energy sourced from renewables. The website reflects a mature digital presence with modern technologies such as Adobe Experience Manager CMS, Bootstrap, and advanced analytics tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

Illumia S.p.A.

illumia.it

68

Illumia S.p.A. is a prominent Italian energy and telecommunications provider offering electricity, gas, fiber internet, and photovoltaic solutions primarily targeting residential and business customers in Italy. The company positions itself as a modern, customer-centric energy supplier with a focus on competitive pricing and sustainable energy solutions. The website reflects a mature digital presence with comprehensive service offerings, clear navigation, and strong branding consistency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Google Tag Manager, and Trustpilot integrations. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced, use of reCAPTCHA, and cookie consent mechanisms, although explicit security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is well addressed with detailed privacy and cookie policies and GDPR consent management. However, explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

W

Wekiwi Srl

wekiwi.it

66

Wekiwi Srl operates as an innovative energy supplier in Italy, specializing in prepaid electricity and gas services with a unique model where customers pay in advance and receive credits for unused energy. The company emphasizes transparency, sustainability, and digital customer engagement through its mobile app and value-added environmental projects such as tree planting and plastic reduction. The website reflects a mature digital infrastructure built on WordPress and Elementor, with strong SEO and accessibility features. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent, though explicit security policies and incident response information are not published. Overall, Wekiwi presents a trustworthy and professional online presence aligned with its business goals.

IREN.IT is a website offering personalized email address services under the iren.it domain and a collection of related personal domains. The site targets individuals seeking memorable and personalized email addresses, providing webmail access and configuration tutorials. The business appears to be related to the energy sector in Italy, with a domain age dating back to 2010, indicating a mature presence. However, the domain is currently expired, which poses risks to service continuity and trust. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks HTTPS enforcement and security headers, which weakens its security posture. No privacy or cookie policies are present, and no analytics or tracking scripts are detected, indicating minimal user tracking but also a lack of compliance transparency. Security evaluation reveals critical issues such as the expired domain status and absence of DNSSEC, which could expose the domain to hijacking or DNS attacks. The site does not provide direct contact emails or phone numbers, relying solely on a contact form. Overall, the security posture is weak, and privacy compliance is poor. The overall risk assessment is moderate to high due to the expired domain and missing security best practices. Strategic recommendations include immediate domain renewal, enabling HTTPS with valid certificates, implementing DNSSEC, publishing privacy and cookie policies, and adding security headers to improve trust and compliance.

S

Sorgenia S.p.A

sorgenia.it

70

Sorgenia S.p.A is a leading Italian energy company specializing in sustainable and renewable energy solutions including electricity, gas, photovoltaic systems, and fiber internet services. The company targets both residential and business customers with a strong emphasis on green technology and digital customer experience. With over 1 million contracts and 20 years of market presence, Sorgenia holds a significant position in the Italian energy market. The website reflects a mature digital infrastructure using Drupal CMS, modern JavaScript libraries, and integrations with marketing and analytics platforms such as Google Tag Manager, LivePerson, and Trustpilot. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a high level of business credibility.

Księgarnia Naukowa i Medyczna Wojbar is a specialized online bookstore based in Poland, focusing on medical and scientific literature including academic textbooks and foreign language books. Founded in 2022, it serves medical professionals, students, and academics with a niche e-commerce retail model. The website demonstrates a moderate level of digital maturity, employing modern analytics tools such as Google Analytics, Facebook Pixel, and Ceneo integration, alongside a GDPR-compliant cookie consent mechanism. The technical infrastructure is built on the RedCart platform, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and DNSSEC enabled, although some security headers could be improved. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the business appears legitimate and professionally presented, though contact information and formal policies should be added to enhance trust and compliance.

E

Essi

essi.pl

51

Essi.pl is a Polish e-commerce retailer specializing in office equipment such as shredders, laminators, cutters, and air purifiers. The company boasts over 20 years of market presence and offers professional advisory services alongside warranty and post-warranty repairs with door-to-door service. The website targets Polish businesses and office users, providing a comprehensive product catalog and related services. Technically, the site is built on the PrestaShop platform, utilizing common e-commerce modules and tracking tools like Google Analytics and Tag Manager. The site is mobile-optimized with good navigation and content relevance. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy.

F

Flowly.cz

libristo.pl

71

Libristo.pl is an online bookstore specializing in foreign language books, offering over 22 million titles in more than 100 languages. The business targets readers in Poland seeking foreign literature, providing a loyalty program, a 30-day return policy, and a network of pickup points. The website is professionally designed with a consistent brand presence and good content quality. Technically, it employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent, Alpine.js, Swiper.js, and Tailwind CSS, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain trust assessment but the website's content and technology usage suggest legitimacy. Advertising and analytics integrations are extensive, with multiple third-party ad networks and tracking pixels in use. Privacy compliance is basic, with cookie consent but no clear privacy policy or terms of service found in the provided content.

H

home.pl S.A.

todler.pl

53

Todler.pl is a Polish e-commerce retailer specializing in premium, durable toys for children. The website offers a wide range of products including bicycles, scooters, dolls, building blocks, and plush toys from various well-known brands. The business targets parents and gift buyers looking for high-quality children's toys. The domain is well-established since 2011 and hosted by home.pl S.A., a reputable Polish hosting provider. The site uses PrestaShop CMS and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, and MailerLite, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and several security headers present, though DNSSEC is not enabled. Privacy and cookie policies are implemented with consent mechanisms, but GDPR compliance details are minimal. Contact information is available via phone and contact forms, with social media presence on Facebook, YouTube, and Instagram. Overall, the website is professional, trustworthy, and safe for general audiences.

S

SprzedajemyRosliny.pl

sprzedajemyrosliny.pl

52

SprzedajemyRosliny.pl is a Polish e-commerce business specializing in the retail sale of ornamental and fruit trees, shrubs, grasses, and seeds. The website offers a broad assortment of plants including American blueberries, hydrangeas, and ornamental grasses, targeting gardening enthusiasts and retail customers primarily in Poland and Europe. The business is relatively new, with domain registration in May 2023, consistent with the company's founding year. The platform uses the Sky-Shop e-commerce system and integrates modern web technologies such as AngularJS, Bootstrap 5, and jQuery, providing a good user experience with mobile optimization and clear navigation. Technically, the website is hosted likely by home.pl S.A., a reputable Polish hosting and registrar provider. The site enforces HTTPS and implements cookie consent with granular categories, indicating some level of privacy compliance. However, it lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Security headers are not detected, and no published security or incident response policies are found, which suggests room for improvement in security posture. Overall, the website is functional, professionally designed, and trustworthy based on WHOIS data and content analysis. The security posture is moderate but could be enhanced by adding security headers, publishing privacy and security policies, and implementing vulnerability disclosure mechanisms. The absence of contact emails is notable, though a phone number and contact form are provided. The site does not contain any adult or questionable content, making it safe for general audiences.

D

DOZ Sp. z o.o.

doz.pl

10

DOZ.pl is a well-established Polish online pharmacy and health portal offering a wide range of pharmaceutical products, dietary supplements, dermocosmetics, and medical equipment. The platform targets general consumers in Poland seeking convenient online access to health-related products. The website demonstrates a mature e-commerce business model with a strong market position supported by a large product catalog and promotional campaigns. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Hotjar, and AdOcean for advertising and analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and consent mechanisms for cookies and ads, though some security headers could be enhanced. Privacy compliance is basic with cookie consent present but no explicit privacy policy or terms of service detected in the provided content. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, DOZ.pl presents a professional, trustworthy, and user-friendly platform with room for improvement in privacy transparency and security header implementation.

W

webePartners

webepartners.pl

58

webePartners is an established affiliate marketing network based in Poland, operating since 2009. The platform connects publishers and advertisers in the e-commerce sector, enabling publishers to earn commissions by referring products and advertisers to increase sales through affiliate referrals. The website demonstrates a mature digital infrastructure built on WordPress with modern SEO and marketing tools integration. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. The business shows good credibility with client testimonials and transparent operations. Overall, the site is professional, compliant with GDPR, and well-positioned in the affiliate marketing industry.