Security Directory

U

Umweltinstitut München

umweltinstitut.org

50

Umweltinstitut München e.V. is a well-established non-profit organization focused on environmental protection, sustainable agriculture, and renewable energy advocacy in Germany. The website reflects a mature digital presence with comprehensive content targeting environmentally conscious individuals and stakeholders. Their market position is that of a reputable environmental advocacy group with a medium-sized organizational footprint, founded in 1999. Technically, the website is built on WordPress with modern web technologies including jQuery, lazy loading, and cookie consent management via Borlabs Cookie. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate rather than fast. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is partial; while cookie consent is implemented, no explicit privacy policy page was found, which is a compliance gap. Overall, the website is trustworthy and professional, with strong branding and social media integration. The main risks relate to privacy policy absence and missing security headers. Strategic improvements in these areas would enhance compliance and security posture.

S

Slow Food Foundation

slowfood.com

67

Slow Food Foundation operates as a global non-profit movement dedicated to promoting good, clean, and fair food for all. The organization focuses on biodiversity defense, education, and advocacy to influence public decision-makers and the private sector. Their market position is strong within the non-profit food advocacy sector, supported by a large global community and thematic networks. The website reflects a mature digital presence with multilingual support and integration with CRM systems for contact management. Technically, the site is built on WordPress with modern libraries and performance optimizations, though some security headers and explicit policies could be improved. The security posture is solid with HTTPS and anti-bot measures, but lacks a dedicated security policy or incident response contact. Overall, the site is professional, trustworthy, and well-optimized for its audience, though the missing WHOIS data slightly reduces domain trustworthiness.

A

Aurelia Stiftung

aurelia-stiftung.de

64

Aurelia Stiftung is a German non-profit foundation dedicated to the protection of bees and biodiversity. The organization advocates for sustainable agricultural practices, educates the public, and supports targeted projects to prevent ecosystem collapse. Their website reflects a professional and consistent brand image, targeting environmentally conscious individuals and stakeholders interested in biodiversity conservation. The foundation operates primarily through donations and public engagement. Technically, the website is built on WordPress with modern SEO and cookie management plugins, ensuring good performance and mobile responsiveness. The use of HTTPS and a cookie consent mechanism demonstrates a commitment to security and privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, with clear cookie consent management. Contact is primarily via web forms, with no direct email or phone contacts publicly listed. WHOIS data is minimal but consistent with the foundation's profile and domain age. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements could include adding explicit security policies, incident response contacts, and enhancing security headers to further strengthen the security posture.

G

Gaming Aid e.V.

gaming-aid.de

57

Gaming Aid e.V. is a small German non-profit organization dedicated to charitable activities within the gaming community. The website serves as the official online presence, providing information about the organization and its mission. The site targets gamers and supporters interested in contributing to charitable causes related to gaming. The business model is non-profit, focusing on community engagement and aid rather than commercial revenue. The organization appears to be relatively young, founded around 2020, and maintains a consistent brand image across its digital assets. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search engine optimization. It employs common web technologies such as jQuery and integrates hCaptcha for form security. Hosting is provided by hostpress.de, a reputable German hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are well implemented, including structured data and meta tags. From a security perspective, the website enforces HTTPS and uses hCaptcha to protect forms, which are positive indicators. However, it lacks several important security headers that could enhance protection against common web threats. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. The absence of a privacy policy and terms of service pages represents a compliance gap, especially under GDPR regulations. Overall, the website is safe and appropriate for general audiences, with no adult or explicit content detected. The domain registration data aligns well with the organization's stated founding date and hosting provider, supporting legitimacy. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing additional security headers, and enhancing transparency around data protection and incident response to improve trust and compliance.

J

James Printing & Signs

jamesprint.ca

47

James Printing & Signs is a small, family-owned print and signage company based in Bowmanville, Canada. The business emphasizes honesty, integrity, and quality service, offering a range of services including commercial printing, signage, vehicle graphics, graphic design, and laser & CNC cutting. The website reflects a professional and consistent brand image targeting local businesses and customers requiring custom print solutions. Technically, the site is built on WordPress using Elementor and integrates Google Analytics for visitor tracking. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration details align well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

O

Owasco RV Centre

owascorv.com

58

Owasco RV Centre is a medium-sized recreational vehicle dealership located in Clarington, Ontario, Canada. The company offers a wide range of RV sales including new and used units, rentals, parts, service, financing, and storage solutions. Recognized as a top 50 RV dealer in 2024 and 2025, it holds a strong market position locally with a professional and well-structured website that targets consumers interested in RVs across Canada. The business model focuses on retail and service offerings within the transportation sector, leveraging partnerships with parts suppliers and rental services to enhance its value proposition. Technically, the website is built on a custom dealer platform (InteractCP) using Bootstrap and jQuery, integrated with multiple analytics and advertising tools such as Google Analytics, Bing Ads, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. However, some third-party scripts like Facebook Pixel are blocked, which may affect tracking accuracy. The site employs HTTPS with a good SSL configuration but lacks explicit security headers and published security policies. From a security perspective, the website maintains a moderate security posture with HTTPS enforcement and consent management for cookies. There is no visible security.txt or vulnerability disclosure, and incident response information is absent. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and trustworthiness, although the website content and business information appear legitimate and professional. Overall, the website is functional, professional, and serves its business purpose well, but improvements in security transparency, domain registration clarity, and enhanced security headers would strengthen its trust and compliance posture. Strategic recommendations include publishing security policies, implementing security headers, and clarifying domain registration details to improve legitimacy and user trust.

C

Chevrolet Canada

chevrolet.ca

67

Chevrolet Canada operates a comprehensive and professionally designed website serving as the official Canadian portal for Chevrolet vehicles. The site offers detailed product information, promotional offers, build and price tools, and dealer locator services, targeting Canadian consumers interested in Chevrolet's automotive lineup. The business is a subsidiary of General Motors Canada Corporation, reflecting a strong market position in the automotive transportation sector. The website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager CMS and a robust marketing and analytics technology stack including Adobe Launch, Google Tag Manager, Facebook Pixel, and Datadog RUM. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR and Canadian privacy standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and well-optimized for performance and user experience.

D

Dealer Spike

dealerspike.com

65

Dealer Spike is a specialized digital marketing and website platform provider based in Lake Oswego, Oregon, focused on serving dealerships across multiple industries including powersports, marine, trailer, agriculture, truck, and heavy equipment. The company offers a comprehensive suite of services such as responsive website design, inventory management, SEO, SEM, e-commerce, and reputation management, positioning itself as a key player in the dealership digital solutions market. Their website demonstrates a high level of professionalism, modern design, and clear navigation, reflecting a mature digital presence. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Google Analytics, Facebook Pixel, Pardot, and other marketing and analytics tools. The site is well-optimized for performance, mobile responsiveness, and SEO, indicating a strong digital infrastructure. Security practices include HTTPS enforcement and use of reCAPTCHA, though explicit security headers and policies could be enhanced. From a security perspective, the site shows good baseline protections but lacks publicly available security policies or incident response contacts. The absence of WHOIS data reduces transparency and trust slightly, though the overall site and business presence suggest legitimacy. No critical vulnerabilities or suspicious content were detected. Overall, Dealer Spike presents a credible and professional business with a strong digital footprint. Strategic improvements in security transparency and domain registration disclosure would further enhance trust and compliance.

P

Pep Web Digital

pepwebdigital.hr

59

Pep Web Digital is a Croatian small business specializing in innovative and creative web design, hosting, and maintenance services. Founded in 2019, the company targets entrepreneurs and businesses seeking high-performance, secure, and user-friendly websites. Their market position is that of a quality-focused digital agency with a strong emphasis on customer experience and modern web technologies. The website demonstrates a mature digital infrastructure using WordPress CMS, Oxygen Builder, and performance optimization plugins, ensuring fast loading times and excellent mobile responsiveness. Security posture is solid with HTTPS enforcement and spam protection, though there is room for improvement in security headers and formal security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear contact information and legal documentation.

N

North Macedonia | E-Commerce For All

ecommerce4all.mk

62

The website ecommerce4all.mk serves as a regional informational platform focused on e-commerce in North Macedonia and the broader CEFTA region. It provides resources including e-commerce data, regulatory information, success stories, payment and delivery modules, and a regional trustmark badge. The platform targets businesses, policymakers, and consumers interested in e-commerce development within the CEFTA member countries. The site is part of a network of similar country-specific platforms linked to a main hub at ecommerce4all.eu. Technically, the site is built on WordPress using Bootstrap for responsive design, with integrations for Google Analytics, Facebook Pixel, and Mailerlite for marketing and tracking. The site is mobile optimized and has good SEO practices implemented via Yoast SEO. Performance is moderate with no major technical issues detected. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with valid SSL certificates and implements a GDPR cookie consent mechanism. However, it lacks visible security headers and explicit privacy policy or terms of service pages, which are important for compliance and user trust. No WHOIS data was available due to server-side errors, limiting domain registration trust analysis. No vulnerabilities or malicious content were detected in the site content. Overall, the website presents a professional and consistent brand image as a regional e-commerce resource. The absence of WHOIS data and privacy policy pages slightly reduce trustworthiness. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance the site's security posture and compliance standing.

М

МАРнет

marnet.mk

48

МАРнет is a public institution operating as the Macedonian Academic Research Network, providing essential telecommunications infrastructure and domain registration services for the Republic of North Macedonia. It holds a key national position as the official registry for the .mk and .мкд top-level domains, serving academic, research, and institutional clients. The website presents a professional and consistent brand image, with comprehensive information about its services and governance. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers are not clearly detected. The absence of WHOIS data due to server errors limits full domain legitimacy verification but does not detract from the apparent institutional nature of the entity. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations.

W

World Climate Research Programme

wcrp-climate.org

51

The World Climate Research Programme (WCRP) is an international non-profit organization focused on coordinating and facilitating climate research globally. The website presents a professional and authoritative presence with extensive resources, core projects, events, and capacity development initiatives targeting climate researchers, policy makers, and the scientific community. The organization is well-positioned as a key player in climate science coordination with a strong emphasis on collaboration and knowledge dissemination. Technically, the website is built on Joomla CMS with modern frameworks such as Gantry 5 and Bootstrap 5, incorporating Google Analytics and Tag Manager for user tracking. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms. Security-wise, the site shows a mature posture with no exposed sensitive data or vulnerable libraries detected. However, the absence of security headers and formal privacy/cookie policies indicates room for improvement in compliance and defense-in-depth strategies. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization, and the domain appears legitimate based on content and branding. Overall, the website is trustworthy, professional, and well-maintained, serving its audience effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and user trust.

G

Global Energy and Water Exchanges

gewex.org

10

The Global Energy and Water Exchanges (GEWEX) program is a scientifically focused network dedicated to understanding Earth's water cycle and energy fluxes. As a core project of the World Climate Research Programme (WCRP), it holds a reputable position in the climate science community, facilitating research, data analysis, and collaboration among scientists worldwide. The website reflects this mission with comprehensive content, structured panels, and active event coordination. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and Google reCAPTCHA, ensuring functional and secure user interactions. The presence of SEO optimizations and mobile responsiveness indicates a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and anti-bot measures in place, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. The lack of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its scientific affiliations and transparent contact information. Overall, the site presents a professional, trustworthy, and well-maintained digital presence for the GEWEX program.

G

Gamma Group

gammacommunications.nl

76

Gamma Communications is a large telecommunications company based in the Netherlands, offering a broad portfolio of business communication solutions including internet, mobile telephony, Microsoft Teams integration, cybersecurity, and managed networks. The company operates internationally with multiple country-specific domains, indicating a strong market presence in Europe. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital infrastructure. The technical stack is modern, leveraging WordPress CMS with NitroPack optimization and multiple analytics and marketing tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website is trustworthy and business-focused but would benefit from enhanced privacy and security transparency.

S

Sjómaq

sjomaq.org

64

Sjómaq is a non-profit youth project aimed at fostering connections and mutual understanding among young people across Denmark, the Faroe Islands, and Greenland. The initiative is a collaboration among youth organizations in these regions, emphasizing values such as respect, curiosity, equality, and openness to build friendships and cultural understanding. The website serves as an informational and engagement platform for this community-building effort. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Fancybox, and is hosted via AWS Cloudfront CDN, ensuring moderate performance and good mobile optimization. The site includes minimal tracking via Simple Analytics, with no visible cookie consent mechanism, which is a minor privacy compliance gap. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended improvements. No incident response or vulnerability disclosure information is publicly available. The WHOIS data is transparent and consistent with the organization's profile, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, though it could benefit from enhanced security practices and privacy compliance measures.

H

HIBLend

hiblend.eu

49

HIBLend is an educational project focused on enhancing the quality of blended mobility in European higher education. The website serves as an informational platform for stakeholders involved in this EU initiative. The technical infrastructure is based on WordPress with the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is hosted via GoDaddy and uses HTTPS, ensuring basic security standards. However, the absence of privacy and cookie policies, as well as contact information, limits its compliance and user trust. Security posture is adequate but could be improved with additional headers and policies. Overall, the website is professional and relevant to its niche audience but requires enhancements in privacy and security transparency.

G

Google LLC

golang.org

63

The website go.dev is the official site for the Go programming language, an open source project supported and maintained by Google LLC. It serves as a comprehensive resource hub for developers, offering documentation, learning materials, downloads, and community engagement. The site targets software developers and engineering teams seeking to build secure, scalable systems using Go. The business model revolves around providing an open source programming language ecosystem backed by a major technology company, positioning Go as a leading language in cloud and network services, web development, and DevOps. Technically, the site is well-implemented with modern web technologies including HTML5, CSS3, JavaScript, and Google’s own analytics and tag management tools. It is hosted on Google Cloud Platform, ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with clear navigation and professional design. No CMS is detected, indicating a custom-built platform tailored for the Go project. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. It uses Google Analytics and Tag Manager scripts loaded asynchronously, and a cookie consent banner is present to comply with privacy regulations. However, there is no explicit security policy or vulnerability disclosure page, nor contact information for incident response, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, go.dev is a high-quality, trustworthy, and professional website that effectively supports the Go programming language community. It reflects the credibility of Google LLC and provides valuable resources for developers. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing clear security incident contacts to enhance trust and compliance.

W

WorX Printing Cooperative

worxprinting.com

54

WorX Printing Cooperative is a US-based union print shop specializing in print on demand custom merchandise such as American made T-shirts and swag. Established in 2014, the cooperative operates a niche business model focused on union and worker-owned principles, serving union members, organizers, and small businesses. Their services include bulk order printing, online swag shops, and order fulfillment, positioning them as a trusted union cooperative in the retail sector. Technically, the website is built on WordPress using the Divi theme, with modern JavaScript libraries and tracking tools integrated. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enabled and no major vulnerabilities are detected, though DNSSEC is not enabled and security headers are missing, indicating room for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

Z

zone35 GmbH & Co. KG

bkk-ernaehrungscoach.de

50

The website www.bkk-ernaehrungscoach.de is an established German-language online nutrition coaching platform operated by zone35 GmbH & Co. KG. It offers interactive tools such as an online check for calorie needs, motivational training, and weekly newsletters to support users in achieving healthier eating habits. The platform targets health-conscious consumers seeking guidance on nutrition and lifestyle improvements. Technically, the site is built on the TYPO3 CMS framework with a modern tech stack including jQuery and Bootstrap, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and formal security policies. Overall, the site demonstrates good business credibility with clear contact information and trust signals such as user testimonials. No critical vulnerabilities or compliance gaps were detected, making it a trustworthy resource for its audience.

The website 'Zeit für Mich' is a German health promotion initiative operated by BKV - Interessengemeinschaft Betriebliche Krankenversicherung e. V., focusing on strengthening personal resources and promoting a healthy work-life balance. It offers information, online self-assessment tests, and access to quality-approved prevention courses such as relaxation techniques and yoga. The target audience primarily includes working adults interested in health and stress management. The business model is non-profit, supported by statutory health insurance entities in Germany, aiming to provide accessible health resources and course subsidies. Technically, the site is built on WordPress using the Understrap child theme, incorporating jQuery and Google Fonts. The infrastructure appears standard for a small non-profit website, with moderate performance and good mobile optimization. SEO and accessibility are basic but functional. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS as indicated by resource URLs, but no explicit security headers were detected in the provided data. There is no evidence of vulnerability disclosure mechanisms or security policies. Contact information is clearly provided, but privacy and cookie policies are absent, which is a compliance gap. No forms or data collection points were found on the homepage, reducing immediate risk exposure. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

The website 'Ich hab's gecheckt!' is a German health awareness campaign focused on educating the public about metabolic syndrome and promoting a healthy lifestyle to prevent cardiovascular diseases. It is operated by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., a non-profit health insurance interest group based in Berlin. The site provides educational content and an online health check tool to engage users in monitoring their health. The target audience is the general German-speaking public interested in health and wellness. Technically, the website is built on WordPress using the Understrap theme framework with a child theme. It employs common web technologies such as jQuery and Popper.js. The site is served over HTTPS with a moderate performance profile and good mobile optimization. However, it lacks advanced security headers and structured data markup, which could improve SEO and security posture. From a security perspective, the site uses HTTPS and a cookie consent mechanism, but it does not provide a privacy policy or incident response information. No security.txt file or vulnerability disclosure policy is present. The absence of security headers like CSP and HSTS reduces the overall security score. No tracking or advertising scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional with clear contact information and a consistent brand presence. The main risks relate to incomplete privacy compliance and security best practices. Strategic recommendations include publishing a privacy policy, implementing security headers, and providing incident response contacts to enhance user trust and regulatory compliance.

I

Interessengemeinschaft Betriebliche Krankenversicherung e.V. (BKV)

bkv-verein.de

53

The Interessengemeinschaft Betriebliche Krankenversicherung e.V. (BKV) operates as a coalition of company-related health insurance funds in Germany, representing approximately one million insured individuals. The organization engages with political, administrative, and association stakeholders to advocate for its members' interests. The website serves as an information hub, providing news, campaigns, and resources related to corporate health insurance and prevention initiatives. The target audience includes companies with company health insurance funds, insured persons, and relevant policy makers. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including jQuery and Matomo for analytics. The site is hosted on DomainControl nameservers and demonstrates good mobile optimization and SEO practices. Cookie consent is implemented with clear user options and detailed cookie information, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism to manage user privacy preferences. However, explicit security headers and published security policies or incident response contacts are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional and trustworthy digital presence aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to strengthen the security posture and user trust.

The website alleswurscht.li is a government health promotion project operated by the Amt für Gesundheit des Fürstentums Liechtenstein. It provides a rich collection of healthy recipes emphasizing fresh, regional, and seasonal products, curated by a certified nutritionist. The site targets the general population of Liechtenstein, promoting balanced nutrition and healthy lifestyles through accessible content and community engagement via newsletters and a forum. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery, Google Analytics, Google Tag Manager, and Google Maps API. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the security posture is solid but could be enhanced by implementing security headers, publishing incident response information, and adding cookie consent to improve GDPR compliance. The domain WHOIS data confirms official government ownership, reinforcing the site's legitimacy and trustworthiness. No adult or explicit content is present, making the site safe for general audiences. Strategic recommendations include improving security headers, adding cookie consent, publishing security and incident response policies, and enhancing privacy compliance to strengthen trust and regulatory adherence.

S

Správa železnic, státní organizace

novymostvyton.cz

10

The website novymostvyton.cz serves as an official information portal for the new Výtoň railway bridge project managed by Správa železnic, a Czech government transportation authority. It provides detailed project descriptions, visualizations, news updates, and public engagement resources, targeting commuters, urban planners, and the general public interested in Prague's infrastructure development. The site is well-branded, professionally designed, and consistent with government standards. Technically, the site is built on the Liferay CMS platform and employs modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing purposes. The site is mobile-optimized with good accessibility and SEO practices, although some advanced security headers are not explicitly detected. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Cookie consent is implemented in compliance with GDPR, and contact information is clearly provided. Overall, the website demonstrates a solid digital presence for a government infrastructure project with good content quality, technical implementation, and business credibility. Strategic improvements in security policy publication and advanced security headers would further strengthen its posture.

S

Schuelbe Promotion Service GmbH

krones-merchandising.com

50

The KRONES Merchandise Shop is an e-commerce platform operated by Schuelbe Promotion Service GmbH, specializing in branded promotional and fan merchandise for the KRONES brand. The website targets customers and fans interested in purchasing official KRONES products. The business operates in the e-commerce sector with a focused niche market. The website is professionally designed with consistent branding and provides a user-friendly shopping experience. Technically, the site uses the Cosmoshop platform with jQuery and related libraries, delivering moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism via Cookiebot, but lacks advanced security headers and visible contact or security policy information, which could be improved. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and compliance features suggest a legitimate business presence. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security practices.

3

3M

3m.com

73

3M is a large multinational technology and manufacturing company that applies science and innovation to deliver a broad portfolio of products and solutions across multiple industries including automotive, commercial solutions, consumer products, electronics, energy, government, manufacturing, safety, and transportation. The website reflects a mature digital presence with comprehensive content, multimedia elements, and clear navigation tailored to a diverse audience of industrial, commercial, and consumer customers. The company maintains strong branding consistency and trust indicators such as investor relations and sustainability disclosures. Technically, the site uses modern JavaScript frameworks, tag management, and performance monitoring tools, hosted likely on Akamai with IBM WebSphere Portal CMS. Security posture is good with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers and incident response contacts are not evident. WHOIS data is unavailable due to registry restrictions, but the website's professional nature and corporate disclosures support legitimacy. Overall, the site is well-constructed, secure, and compliant with privacy regulations, serving as a reliable digital asset for 3M's global operations.

W

WiT Events

witevents.com

55

WiT Events is a professional event organizer specializing in travel and technology conferences across Asia, Africa, the Middle East, and other regions. Their portfolio includes flagship events such as WiT Seoul, WiT Africa, WiT Japan & North Asia, and The Phocuswright Conference, targeting travel industry professionals, startups, investors, and technology innovators. The website demonstrates a mature digital presence built on WordPress with modern plugins and tracking tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, though improvements in security headers and privacy compliance are recommended. The absence of WHOIS data is a notable anomaly that impacts domain trustworthiness. Overall, the site is professional and content-rich, serving a niche but important market segment.

D

Dr. Rader Immobilien

raderimmobilien.at

53

Dr. Rader Immobilien is a professional real estate company specializing in property brokerage and revitalization in the Kärnten region of Austria. The company emphasizes quality over quantity, offering comprehensive and modern real estate marketing services including home staging. Their market position is that of a specialized regional player with a focus on premium locations and professional service. The website is built on WordPress using the Enfold theme and integrates plugins such as Yoast SEO and Complianz for SEO and GDPR compliance. Hosting is provided by easyname GmbH, a reputable Austrian registrar and hosting provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are found. Overall, the site is professional, compliant, and trustworthy with clear contact information and partner links.

The website fertighausspezialist.at currently presents minimal content, primarily a placeholder or coming soon page with no visible business information, contact details, or policies. The business focus and services cannot be determined from the site content. The technical infrastructure is based on WordPress with a coming soon plugin, using Tailwind CSS and jQuery libraries. Hosting is provided by kasserver.com, consistent with the domain's WHOIS data. Security posture is weak due to lack of security headers, absence of privacy and cookie policies, and no visible contact or incident response information. The site is accessible without WAF or security challenges but lacks substantive content and compliance features. Overall, the site scores low on content quality, privacy compliance, and business credibility, indicating it is either under development or poorly maintained.

A

ACA - The Academic Cooperation Association

aca-secretariat.be

62

ACA - The Academic Cooperation Association is a well-established membership organization founded in 1999, focused on promoting and funding the internationalisation of higher education across Europe and beyond. It serves as a think tank, advocacy platform, and project coordinator for national-level international education organizations. The website reflects a professional and authoritative presence with comprehensive content, clear navigation, and strong branding consistency. The organization benefits from EU Erasmus+ co-funding and maintains active engagement through events, publications, and a monthly newsletter.

H

Harmonie Norge AS

harmonie.no

67

Harmonie Norge AS operates a professional e-commerce website focused on manufacturing and retailing doors, windows, and smart lock solutions primarily for the Norwegian market. The company has a consistent brand presence and offers a range of products including exterior and interior doors, garage doors, and accessories. The website is built on a modern technical stack with JavaScript frameworks, Google Analytics, and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy and terms policies. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

L

Liechtensteiner Alpenverein

alpenverein.li

63

The Liechtensteiner Alpenverein is a regional alpine club focused on organizing mountain sports activities, events, and managing mountain huts in Liechtenstein. The website serves as an information hub for members and interested parties, offering event schedules, membership benefits, and contact details. The club targets hiking and climbing enthusiasts, seniors, and youth within the region. Technically, the site is built on Concrete5 CMS with modern JavaScript libraries like jQuery and Slick Slider, and uses Foundation framework for responsive design. Analytics are handled via Piwik (Sitewalk). Security posture is adequate with HTTPS enforced and email obfuscation, but lacks security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, suitable for its non-profit alpine club purpose.

The Zentrum Allergie und Umwelt (ZAUM) is a reputable academic research institute jointly funded by the Technical University of Munich and Helmholtz Zentrum München. It specializes in allergy and environmental health research, aiming to advance scientific understanding and therapeutic development. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content targeted at researchers, students, and the public. Technically, the site uses TYPO3 CMS and integrates privacy-respecting analytics (Matomo), with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and well-aligned with its academic mission.

B

BKK Dachverband e.V.

bkk-dachverband.de

54

BKK Dachverband e.V. is a German healthcare interest association representing 68 company health insurance funds and four regional associations, collectively covering 9 million insured persons. The website serves as a comprehensive platform for political advocacy, innovation promotion, prevention, and healthcare service information. Technically, the site is built on TYPO3 CMS, employs jQuery, and uses self-hosted Matomo analytics, reflecting a mature and privacy-conscious digital infrastructure. The site is well-structured, mobile-optimized, and accessible, with a strong emphasis on sustainability through green hosting. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the website projects professionalism and trustworthiness appropriate for a healthcare non-profit organization.

L

Leafworks

helpdeskapi.com

51

Leafworks is a small technology company specializing in providing middleware solutions that integrate Zendesk with CRM, ERP, and eCommerce systems. Their website focuses on promoting their Zendesk API middleware product, which automates workflows and enhances support capabilities for businesses using Zendesk. The company targets business clients seeking seamless integration and automation of their customer service platforms. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of Google Tag Manager and CookieFirst consent scripts shows a moderate level of digital maturity and compliance awareness. Security-wise, the site enforces HTTPS and uses best practices like cookie consent, but lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Overall, the website is professional, well-structured, and trustworthy, but could enhance privacy and security transparency to further strengthen its posture.

Z

zone35 GmbH & Co. KG

e-coaches.de

53

The website www.e-coaches.de is a specialized health coaching portal operated by zone35 GmbH & Co. KG, targeting German statutory health insurance members with a variety of free online coaching programs focused on fitness, nutrition, stress management, and more. The platform leverages TYPO3 CMS and integrates multiple JavaScript libraries to provide an interactive user experience. The site is well-structured, mobile-optimized, and includes clear contact information and cookie consent mechanisms, reflecting good privacy compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and anti-CSRF protections in forms. No critical vulnerabilities or suspicious content were detected. Overall, the site presents a trustworthy and professional digital presence in the healthcare coaching niche.

A

Agence Nationale pour l'Information des Jeunes

jugendinfo.lu

48

Jugendinfo.lu is a government-affiliated youth information portal based in Luxembourg, operated by the Agence Nationale pour l'Information des Jeunes. The website provides comprehensive information and services targeted at young people aged 12 to 30, covering education, employment, engagement, housing, health, and daily life. It holds a strong market position as a national youth information service with a clear mission to support and inform the youth demographic. The business model is non-profit and government-supported, focusing on public service and youth empowerment. Technically, the website is built on a modern WordPress CMS platform with popular plugins such as Yoast SEO, WPBakery Page Builder, and Smart Slider 3. It integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. SEO is well addressed through meta tags and structured data. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are found. No vulnerabilities or suspicious activities are evident in the content or technical stack. The WHOIS data confirms domain legitimacy with consistent registration details aligned with the website's government affiliation. Overall, Jugendinfo.lu presents a trustworthy, professional, and well-maintained online presence for youth information in Luxembourg. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

G

Global Pixel

globalpixel.pt

54

Global Pixel is a well-established Portuguese company specializing in web development, graphic design, and digital marketing services with over 15 years of experience. The company targets businesses and organizations seeking professional digital solutions, offering a broad range of services including website creation, online stores, SEO, social media management, and advertising campaigns. Their market position is solidified by a diverse portfolio of reputable clients and a consistent brand presence. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates popular analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a strong SSL configuration and incorporates security best practices such as CSRF tokens and CAPTCHA for forms. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic improvements in security policy transparency and header implementation would enhance the security posture further.

A

Austausch e.V.

austausch.org

64

Austausch e.V. is a well-established non-profit organization based in Germany, focused on fostering active civil society and closer relations between East and West through international cooperation. With over 32 years of experience, the organization collaborates with more than 250 partners across 15+ countries, delivering projects and knowledge transfer initiatives. The website reflects a professional and consistent brand presence, targeting NGOs, activists, and civil society actors. Technically, the site is built on WordPress with Elementor, hosted under a reputable registrar and using Cloudflare DNS for performance and security. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. No critical vulnerabilities or suspicious elements were detected, and the domain registration data aligns well with the organization's claims, supporting legitimacy.

Ž

Železničná spoločnosť Slovensko

zssk.sk

56

Železničná spoločnosť Slovensko (ZSSK) operates as the national railway carrier in Slovakia, providing comprehensive passenger rail services domestically and internationally. The website serves as a primary portal for ticket sales, travel information, and customer support, targeting train travelers in Slovakia and neighboring countries. The company holds a strong market position as the national transport provider with a broad portfolio of services including seat reservations, baggage transport, and special accommodations for disabled passengers. The site is professionally designed with clear navigation and multilingual support, enhancing user experience and accessibility. Technically, the website is built on WordPress with modern technologies such as React and integrates advanced SEO and accessibility plugins. It employs a cookie consent mechanism compliant with GDPR, uses secure HTTPS connections, and integrates third-party marketing and analytics tools like Facebook Pixel and Google Tag Manager. The site demonstrates good mobile optimization and performance, although hosting details are not explicitly identified. From a security perspective, the website enforces HTTPS and uses secure login portals. While explicit security policies and incident response contacts are not published, no vulnerabilities or exposed sensitive data were detected. The site uses cookie consent and privacy policies that align with GDPR requirements. Recommendations include publishing a dedicated security policy and incident response information, and implementing a security.txt file for vulnerability disclosures. Overall, the website presents a low-risk profile with high trustworthiness, professional content, and strong compliance with privacy regulations. Strategic improvements in transparency around security policies and incident response would further enhance its security posture and user trust.

D

Dopravný podnik mesta Žiliny s.r.o.

dpmz.sk

41

Dopravný podnik mesta Žiliny s.r.o. operates as the official public transportation provider for the city of Žilina, Slovakia. The website serves as a comprehensive portal offering schedules, ticketing information, news updates, and additional services such as charter transport and a tourist hostel. The company targets local residents and visitors, positioning itself as a key municipal service provider with a medium-sized operational footprint. The business model focuses on public transit services supported by digital tools like electronic ticketing and journey planning subdomains. Technically, the website employs a traditional web stack with jQuery and Nivo Slider for UI elements, alongside CookieYes for cookie consent management. While the site is functional and moderately optimized for mobile, it lacks advanced CMS indicators and modern frameworks. SEO and accessibility are basic but adequate for the target audience. Analytics integration includes Google Analytics and smartemailing.cz for newsletter management, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements a detailed cookie consent mechanism, supporting GDPR compliance. However, it lacks visible HTTP security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of a terms of service page and limited mobile optimization are minor gaps. Overall, the security posture is moderate but could benefit from enhancements in header policies and formal security disclosures. The overall risk assessment is low, with the website demonstrating legitimacy, consistent business information, and a trustworthy digital presence. Strategic recommendations include implementing security headers, publishing security and incident response policies, improving mobile and accessibility features, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

I

Integrovaný dopravný systém Banskobystrického samosprávneho kraja (IDS BBSK)

idsbbsk.sk

63

The website idsbbsk.sk serves as the official portal for the Integrovaný dopravný systém Banskobystrického samosprávneho kraja (IDS BBSK), a regional integrated transport system in Slovakia. It provides comprehensive information about regional bus services, ticketing options, schedules, and passenger information targeted primarily at residents and travelers within the Banskobystrický region, including seniors and students. The site also supports multilingual access and offers an e-shop for purchasing tickets, reflecting a mature digital presence for a regional public service entity. Technically, the site is built on WordPress CMS with popular plugins such as Yoast SEO and WPBakery Page Builder, leveraging Google Tag Manager and Cookiebot for analytics and privacy compliance. Hosting is provided by WebSupport, with DNSSEC enabled and HTTPS enforced, indicating a secure and reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility could be further improved. From a security perspective, the website employs HTTPS and DNSSEC, uses a cookie consent mechanism compliant with GDPR, and does not expose sensitive data or show signs of vulnerabilities. However, it lacks some advanced security headers and does not provide explicit incident response or vulnerability disclosure information, which could be areas for enhancement. Overall, idsbbsk.sk is a professionally maintained, trustworthy regional government service website with good content quality and technical implementation. It effectively balances user experience, privacy compliance, and security, making it a reliable resource for its target audience.

Н

Національна молодіжна рада України

nycukraine.org

48

Національна молодіжна рада України є національною неприбутковою організацією, що об'єднує молодіжні організації та активістів для сприяння розвитку молоді, їх участі у громадському житті, освіті та зайнятості. Вебсайт демонструє професійний рівень, з чіткою структурою, сучасним дизайном та мобільною адаптацією. Технічна інфраструктура базується на WordPress з використанням популярних плагінів і фреймворків, що забезпечує функціональність і зручність користування. З точки зору безпеки, сайт використовує HTTPS, має стабільну реєстрацію домену, але відсутні деякі сучасні заходи безпеки, такі як DNSSEC та розширені HTTP заголовки безпеки. Відсутність публічної політики безпеки та інцидентного реагування є потенційними прогалинами. Загальний ризик для користувачів низький, сайт не містить шкідливого чи сумнівного контенту, але рекомендується покращити політики конфіденційності та безпеки для підвищення довіри та відповідності GDPR. Рекомендації включають впровадження DNSSEC, додавання політик безпеки, та регулярний аудит плагінів.

Eurodesk Schweiz operates as a non-profit information network dedicated to facilitating mobility opportunities for young people across Europe. The organization provides free and accessible advice on various mobility options including jobs, internships, volunteering, studying, and language learning. It is part of a larger European network with offices in 34 countries, positioning itself as a trusted national resource in Switzerland. The website is professionally designed, multilingual, and offers relevant content targeted at youth and professionals in youth work. Technically, the site is built on TYPO3 CMS and integrates privacy-conscious analytics tools such as Matomo alongside Google Analytics with IP anonymization. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit security policies. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche but could improve in security and privacy transparency.

A

AN E+ JA

juventude.pt

48

AN E+ JA is the Portuguese National Agency responsible for managing and promoting the Erasmus+ program, focusing on youth education, mobility, and strategic partnerships. The agency serves young people, youth organizations, and educational institutions, positioning itself as a key governmental entity facilitating European Union youth initiatives in Portugal. The website reflects a professional and consistent brand image, providing comprehensive information and resources related to Erasmus+ and youth policies. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, ShareThis, Bootstrap, and FontAwesome, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and applies best practices such as rel="noopener noreferrer" on external links and CAPTCHA for form submissions. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for improved security posture. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental mission. Strategic recommendations include implementing security headers, publishing a security policy, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain a robust security and compliance posture.

F

Fundacja Rozwoju Systemu Edukacji

eurodesk.pl

61

Eurodesk Polska is a well-established non-profit organization operated by the Fundacja Rozwoju Systemu Edukacji, serving as the National Agency for Erasmus+ and the European Solidarity Corps in Poland. The website provides comprehensive information and resources for youth and youth workers about European mobility, grants, educational opportunities, and related activities. It holds a strong market position as a trusted national youth information network. Technically, the website uses modern frameworks like Bootstrap and integrates analytics tools such as Google Analytics and Facebook Pixel, ensuring good performance and mobile optimization. Security-wise, the site enforces HTTPS and includes CSRF tokens, but lacks some recommended security headers and a public vulnerability disclosure policy. Privacy compliance is well addressed with clear cookie and privacy policies aligned with GDPR. Overall, the website is professional, trustworthy, and content-rich, with minor areas for security enhancement.

E

Eurodesk

eurodesk.no

56

Eurodesk is a well-established non-profit information service focused on providing youth in Europe with opportunities abroad such as studies, work, volunteering, and exchanges. The organization operates across 36 countries with over 1100 contact points, positioning itself as a key resource for European youth mobility. The website reflects this mission with clear, relevant content and a consistent brand presence, including affiliations with Bufdir and Erasmus+. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses standard web technologies such as jQuery and Google Fonts. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and performance tuning. SEO practices are good, supported by structured data and meta tags. From a security perspective, the site enforces HTTPS and uses plugins to prevent user enumeration, indicating a baseline security posture. However, it lacks important security headers and explicit security or incident response policies. Privacy compliance is partial; while a cookie consent banner is present, no dedicated privacy or terms of service pages were found, which is a compliance gap. Overall, the website is trustworthy and professional, serving its target audience effectively. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and security posture, further strengthening user trust.

G

GO Europe

go-europe.nl

51

GO Europe is a Dutch-based informational platform providing independent EU-related youth mobility information, including volunteering, study, internships, language courses, and youth exchanges. It operates as part of the Eurodesk network and is managed by Stichting Sekondant, a non-profit entity. The website targets young people interested in European experiences and cultural exchange. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, and it uses Google Analytics and Tag Manager for tracking. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and cookie policies in the analyzed content. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and public security policies. Overall, the domain registration data is consistent with the website's purpose and indicates a legitimate and established presence.

C

Canada Learning Code

canadalearningcode.ca

52

Canada Learning Code is a Canadian national non-profit organization dedicated to providing technology education and career development support to Canadians, particularly adults aged 18 and over. The organization offers subsidized workshops, career coaching, certifications, and community engagement programs such as the Career Collective. The website demonstrates a strong market position with partnerships involving major corporations and government entities, supported by a decade-long history of collaboration. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Google Tag Manager, and various analytics and tracking tools. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing an excellent user experience. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be more explicitly implemented. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. The absence of WHOIS data slightly reduces trust but is mitigated by strong trust signals on the site. Overall, the website is professional, trustworthy, and well-maintained.

B

BKK ProVita

bkk-provita.de

56

BKK ProVita is a German health insurance provider specializing in services for families, pregnant women, students, and self-employed individuals. The company positions itself as a reliable partner for lifelong health coverage, offering a range of benefits including alternative medicine reimbursements and preventive health travel programs. The website reflects a strong market position with positive certifications and a clear focus on customer segments. Technically, the site is built on WordPress with Elementor, uses Matomo for analytics, and implements cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS and CAPTCHA protections, though explicit security headers and incident response policies are not evident. Overall, the site is professional, trustworthy, and compliant with privacy norms, though it could improve transparency by publishing privacy and security policies.