Security Directory

E

Esomar

esomar.org

73

Esomar is a globally recognized organization established in 1947, serving as the leading voice for data, research, and insights professionals worldwide. The company operates a membership-based model offering networking, training, events, and ethical standards certification to over 10,000 members across 135+ countries. Their digital presence is robust, leveraging modern web technologies such as React and Next.js, and integrating advanced analytics and marketing tools including Google Tag Manager, Hotjar, and social media pixels. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to its target audience of research and insights professionals. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements like DNSSEC and enhanced security headers could be implemented. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Esomar demonstrates a mature digital infrastructure and strong business credibility, positioning it as a trustworthy and authoritative entity in its sector.

N

NEXTERA tech s.r.o.

anything.cz

65

NEXTERA tech s.r.o. is a Czech technology company specializing in digital transformation solutions for manufacturing firms. Their offerings include custom enterprise information systems, mobile and web application development, production technology measurement, asset inventory management, and data analytics. The company targets manufacturing businesses seeking automation and digitalization to improve efficiency and competitiveness. The website demonstrates a mature digital presence with modern technologies such as React, Node.js, and Docker, and is well optimized for mobile devices. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and policies are not explicitly published. The absence of WHOIS data is a notable gap that impacts domain trustworthiness, but the detailed contact information and client references support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

I

Imper CZ s.r.o.

leady.cz

60

Imper CZ s.r.o. operates the website leady.cz, a B2B lead identification and marketing optimization platform primarily serving Czech and Slovak markets. The company offers services that identify website visitors, providing detailed company and behavioral data to enable timely sales outreach and campaign automation. The business is well-established since 2007 and maintains a professional online presence with comprehensive privacy and cookie policies, reflecting GDPR compliance. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools, including Google Analytics, LinkedIn Insight, and Intercom. Security posture is solid with HTTPS and consent management but lacks some HTTP security headers and a public security policy. Contact information is complete and transparent, supporting business credibility.

L

Wine Tasting Events - Wine & Food Festivals | LocalWineEvents.com

localwineevents.com

52

LocalWineEvents.com is a niche online platform dedicated to listing and promoting local wine tasting events, food festivals, and related culinary experiences. The website targets wine enthusiasts and food lovers seeking unique local events and ticket purchasing options. The business model revolves around event aggregation and ticket sales, positioning itself as a specialized marketplace within the hospitality sector. The site presents a professional design with good content relevance and user experience, optimized for mobile devices and SEO. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Technically, the site employs modern tools such as Google Tag Manager and Google Maps API but lacks visible security headers and privacy compliance mechanisms. Overall, while the platform serves its niche well, it requires improvements in security posture and compliance to enhance trust and credibility.

F

Frank + Grossman Landscape Contractors, Inc.

frankandgrossman.com

45

Frank + Grossman Landscape Contractors, Inc. is a small, established landscaping and janitorial service provider operating primarily in the San Francisco Bay Area. Founded in 2000, the company offers landscape maintenance, landscape construction, and commercial janitorial services targeting commercial and residential clients in the region. The website reflects a professional business presence with clear service descriptions and regional focus. Technically, the site is built on WordPress with Yoast SEO plugin and uses FontAwesome icons, hosted by Hostopia Canada Corp. The domain is longstanding and consistent with the business history, enhancing credibility. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is functional and professional but would benefit from enhanced security and privacy features.

C

Comerica Bank

comerica.com

69

Comerica Bank is a well-established financial services company headquartered in Dallas, Texas, with a history dating back to 1849. The website reflects a large, professional financial institution offering a broad range of services including personal banking, small business banking, commercial banking, and wealth management. The company is recognized for its strong market position and customer-centric approach, with recent awards highlighting its excellence in small business banking and regional banking. The site targets consumers, small businesses, commercial clients, and wealth management customers, providing comprehensive digital services and resources. Technically, the website is built on Adobe Experience Manager (AEM) and employs modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Vimeo for multimedia content. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Security is robust with HTTPS enforced, secure login forms, and no visible vulnerabilities. However, explicit security headers could be more clearly implemented and documented. Privacy compliance is strong, with clear privacy and cookie policies, consent mechanisms, and GDPR compliance indicators. Contact information is readily available, including multiple toll-free phone numbers and a physical address. The WHOIS data is unavailable or protected, which is common for large enterprises, but the domain and website content are consistent with the company's identity. Overall, Comerica Bank's website demonstrates a mature digital presence with strong security, privacy, and business credibility. It effectively supports its diverse customer base with clear navigation, rich content, and multiple service portals.

The website wineshipping.com currently returns a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. The domain is registered with GoDaddy.com, LLC since 1998, suggesting a long-standing registration, but no registrant details or business information are publicly available. The website lacks any visible content, including privacy policies, cookie policies, terms of service, contact information, or business descriptions, which severely limits the ability to assess its business operations or compliance posture. Technically, the site does not enable DNSSEC and does not present any security headers or scripts, indicating minimal security hardening. The site is not optimized for mobile or SEO, and no analytics or marketing tools are detected.

C

Commerce7 Platform Inc.

winedirect.com

63

WineDirect, now rebranded as Commerce7, operates as a technology and e-commerce platform specializing in direct-to-consumer (DTC) sales solutions for wineries. The company provides a SaaS platform that enables wineries to manage customer experiences, sales, and fulfillment services effectively. Positioned as a key player in the winery e-commerce sector, Commerce7 aims to deliver seamless and customer-first experiences across multiple DTC channels. The website reflects this transition with clear branding and service offerings targeted at wineries and wine sellers. Technically, the website is built on WordPress with modern integrations including Google Analytics, HubSpot, FullStory, Hotjar, and LinkedIn Insight Tag, indicating a mature digital marketing and analytics infrastructure. The site uses Oxygen Builder for layout and design, ensuring good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and employs consent management for privacy compliance. However, no explicit security policies or incident response information are published, and security headers are not detected in the provided data. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, though the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. Overall, the website presents a professional and trustworthy front for Commerce7's services, with good privacy compliance and marketing sophistication. The main risk lies in the lack of WHOIS transparency and limited published security policies, which should be addressed to enhance trust and compliance further.

L

Llama Networks LLC

llamanetworks.com

68

Llama Networks LLC is a specialized technology company focused on delivering bespoke digital communication and connectivity solutions tailored to enterprise, off-grid, and mission-critical environments. Their offerings include mobility strategy consulting, telecom expense management, managed network solutions, cellular and IoT data services, and portable connectivity devices such as LlamaBox™. The company positions itself as an expert in providing reliable, customized network connectivity that supports complex operational needs. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery, Google reCAPTCHA v3 for form security, and Swiper.js for interactive elements. The site is mobile-optimized, well-structured, and employs standard SEO and accessibility practices, although some advanced security headers are not explicitly detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not observed, and there is no visible security policy or incident response information. The WHOIS data is missing or not publicly available, which raises some concerns about domain registration transparency but does not necessarily indicate malicious intent given the professional nature of the site. Overall, the website presents a professional and trustworthy front with clear contact information, privacy and cookie policies, and customer testimonials. The absence of WHOIS data and some security best practices suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing a security policy and vulnerability disclosure, and ensuring WHOIS transparency to strengthen trust and compliance.

W

WeShip Express

weshipexpress.com

57

WeShip Express operates as a technology-driven logistics and fulfillment provider specializing in direct-to-consumer shipping solutions for the alcohol beverage industry. The company leverages over 20 years of industry experience and a network of more than 40 connected carriers to offer temperature-controlled, compliant, and efficient shipping services. Their market position is strong within the regulated alcohol shipping niche, emphasizing customer experience and technological integration. Technically, the website is built on WordPress using the Understrap theme and integrates modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Bing UET. The site is mobile-optimized, accessible, and SEO-friendly, with a comprehensive privacy and cookie policy supported by a consent mechanism. However, some security headers are not explicitly detected, and no published security or incident response policies were found. From a security perspective, the site enforces HTTPS and uses reputable third-party scripts, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the professional website and privacy compliance mitigate some risk. Overall, the website presents a mature, professional business with solid technical infrastructure and privacy compliance but would benefit from enhanced transparency in domain registration, contact information, and security policies to improve trust and security posture.

B

Bottle360

bottlethreesixty.com

62

Bottle360 is a specialized technology company providing cloud-based Direct-To-Consumer (DTC) software solutions tailored for wineries. Their platform integrates wine club management, ecommerce, point-of-sale, reservations, and loyalty programs, enabling wineries to streamline operations and enhance customer engagement. The company targets small to medium-sized wineries in the United States, positioning itself as a niche provider with a clear focus on the wine industry. The website reflects a professional and consistent brand image with clear calls to action and comprehensive service descriptions. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user experience enhancements. Hosting appears to be managed via GoDaddy with Cloudflare DNS, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, with structured data and meta tags properly implemented. From a security perspective, the site enforces HTTPS, uses domain locking EPP statuses, and implements cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and some advanced HTTP security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, Bottle360 presents a trustworthy and credible online presence with a solid technical foundation and good privacy compliance. Strategic enhancements in security headers and transparency around security policies would further strengthen their posture.

C

Commerce7

commerce7.com

70

Commerce7 is a medium-sized technology company founded in 2017 that provides customer-centric e-commerce solutions tailored for the alcohol industry, particularly wineries. The website positions itself as a modern commerce platform for wineries, focusing on delivering specialized services to this niche market. The business model revolves around offering a commerce platform that enables alcohol industry businesses to engage customers effectively. The company appears to have a consistent brand presence and targets a mature audience involved in alcohol commerce. Technically, the website is built using modern web technologies such as React and Gatsby, hosted on AWS infrastructure. The site demonstrates good performance and mobile optimization, with a clean and professional design. However, accessibility features are basic, and SEO optimization is good. The domain is registered with GoDaddy.com, LLC since 2017, consistent with the business age and without privacy protection, indicating transparency. From a security perspective, the website uses HTTPS and has a good SSL configuration. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for compliance with regulations like GDPR. No incident response or vulnerability disclosure information is available, and no contact information for security matters is found. These gaps suggest room for improvement in security posture and privacy compliance. Overall, the website is functional, professional, and targeted, but it should enhance its privacy and security policies and provide clearer contact information to improve trust and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing clear incident response channels.

The website at redchirp.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2019 with GoDaddy.com, LLC and uses Amazon AWS DNS servers, indicating a legitimate registration and hosting setup. However, the absence of any accessible content, contact information, privacy policies, or security headers severely limits the ability to assess the business or technical maturity of the site. No scripts, analytics, or social media links are present, suggesting the site is either inactive or intentionally restricted. The security posture cannot be evaluated due to lack of data, and no compliance or incident response information is available.

R

represent.network

represent.network

53

Represent.network is a niche online platform dedicated to highlighting the work of BPOC and (post)migrant visual communicators living and working in Germany. The website serves as a cultural and creative network, providing visibility and connection opportunities for this community. The platform uses modern web technologies including Vue.js and Nuxt.js, and employs privacy-focused analytics via Plausible. The site is accessible and uses HTTPS, but lacks comprehensive contact information, cookie consent mechanisms, and security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for small niche sites but limits transparency. Overall, the site is functional and safe but could enhance trust and compliance by improving security and privacy features.

S

Sounds Like These

soundslikethese.com

58

Sounds Like These is a small creative audio company based in London, established in 2013. The company specializes in creative audio production services targeting a general audience interested in media and audio content. The website is built using modern technologies such as Vue.js and integrates privacy-focused analytics via plausible.io, reflecting a moderate level of digital maturity. The site design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the website lacks critical compliance documents such as privacy and cookie policies, and no contact information is explicitly provided, which may impact user trust and regulatory compliance. Security posture is adequate with HTTPS enabled and domain transfer protection, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the website is legitimate and stable but would benefit from enhanced privacy compliance and security best practices to strengthen trust and reduce risk.

F

Finch & Partners

finchandpartners.com

65

Finch & Partners is a luxury consultancy specializing in brand investment and strategic advisory, with a strong focus on global culture and business connections. The company positions itself as a high-end service provider in hospitality, media, and luxury sectors, targeting discerning clients seeking transformative brand creation and collaboration. The website reflects a mature digital presence with professional design, clear navigation, and rich content including case studies and partner information. Technically, the site leverages modern web technologies, including Matomo analytics for privacy-conscious tracking, and is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain status protections, though improvements such as enabling DNSSEC and publishing explicit security policies would enhance trust. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for its luxury market positioning.

M

Mathias Krebser

mathiaskrebser.de

55

Mathias Krebser operates a professional portfolio website showcasing multidisciplinary visual art services including graphic design, video/animation, and illustration. The site targets a general audience interested in creative visual arts and is positioned as an independent artist from Stuttgart, Germany. The business model appears to be service and portfolio presentation oriented, with an additional shop hosted externally on Squarespace. The website is well-branded and consistent in design, reflecting a small creative business.

F

Future Observatory

futureobservatory.org

51

Future Observatory is a national research programme affiliated with the Design Museum, focusing on the green transition. The website serves as a platform to showcase research projects, exhibitions, and news related to sustainability and design. The site is professionally designed with clear navigation and mobile optimization, leveraging modern web technologies including Alpine.js and Statamic CMS. Privacy and cookie consent mechanisms are implemented, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS enforced, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or suspicious content were detected, indicating a trustworthy and credible online presence.

A

ANIMA Magazine

anima-magazine.com

66

ANIMA Magazine is a niche digital media publisher specializing in design and architecture content, offering in-depth articles and visual storytelling for professionals and enthusiasts. The website demonstrates a modern technical infrastructure leveraging Cloudflare CDN and Alpine.js for interactivity, with a focus on performance and mobile optimization. Security posture is solid with HTTPS and domain registration protections, though improvements are needed in security headers and privacy compliance. The absence of explicit privacy and cookie policies represents a compliance gap. Overall, the site is professional and trustworthy but should enhance privacy transparency and security best practices to strengthen user trust and regulatory adherence.

The website deutscheurlauber.eu serves as a news aggregation platform focusing on incidents involving German tourists and cruise ships, particularly highlighting tragic maritime events and migration-related news. The site compiles headlines and links from various reputable German news outlets, targeting a general audience interested in these topics. The business model appears to be informational, without direct commercial services or e-commerce functionalities. Technically, the site employs modern web technologies including ES modules and CSS, delivering a moderately optimized and mobile-friendly experience. However, it lacks advanced SEO and accessibility features. From a security perspective, the site is accessible without WAF or blocking mechanisms but shows significant gaps. There is no evidence of HTTPS enforcement or security headers, no privacy or cookie policies, and no contact or incident response information. These deficiencies reduce the site's trustworthiness and compliance posture. No analytics or advertising scripts were detected, indicating minimal user tracking. The WHOIS data shows the domain is registered via a reputable registrar but lacks detailed registrant information, which slightly impacts legitimacy assessment. Overall, the site provides relevant and well-structured content but requires improvements in security, privacy compliance, and business transparency to enhance trust and professional standing. The risk level is moderate due to missing security best practices and lack of user data protection disclosures.

O

Oliver Hae

oliverhae.com

59

Oliver Hae's website serves as a professional portfolio showcasing his work as a German graphic designer and editor. The site highlights his multidisciplinary approach to visual identities and engagement with research projects, positioning him as a niche creative professional. The website is well-designed with a modern aesthetic, leveraging technologies such as SvelteKit for frontend development and Mux for video streaming, supported by Sanity CMS for content management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response information. The domain registration is consistent with the website's purpose, registered since 2020 without privacy protection, which aligns with a small professional portfolio. Overall, the site is safe, professional, and trustworthy but could benefit from enhanced security and compliance features.

A

anima ona

animaona.com

55

Anima Ona is a small multidisciplinary studio specializing in research, art, and design, operated by Freia Achenbach and June Fàbregas. The website presents a professional and artistic digital presence using modern technologies such as SvelteKit, Mux video streaming, and Plausible analytics. However, the domain's WHOIS data is unavailable, raising concerns about the domain registration status and legitimacy. The site lacks critical compliance documents such as privacy and cookie policies, and no security headers were detected, indicating a need for improved security posture. Contact information is minimal, limited to a single email address. Overall, the website is functional and visually appealing but requires enhancements in security, compliance, and transparency to build greater trust.

C

Christina Mäckelburg

christina-maeckelburg.de

58

Christina Mäckelburg's website is a professional portfolio showcasing her work as an illustrator and animator specializing in children's books. The site targets a general audience interested in artistic and creative services, positioning itself as a niche personal brand in the illustration industry. The business model is primarily portfolio-based, aimed at attracting clients or collaborators. Technically, the website employs modern web standards including ES modules, CSS, and video content, hosted behind Cloudflare DNS services. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Performance is moderate with a clean and visually appealing design. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or contain forms that collect user input. However, it lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Minimal user tracking is done via Plausible Analytics, which respects privacy better than many alternatives. Overall, the website presents a low-risk profile with good professionalism but could improve privacy compliance and security posture. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and enhancing contact options to improve user trust and regulatory compliance.

P

Prose London

prose.london

60

Prose London is a small, London-based full-service creative agency and publishing house specializing in identity and culture. The website presents a professional and visually appealing design, targeting creative professionals and businesses seeking branding and creative services. The technical infrastructure leverages modern technologies such as SvelteKit, Sanity CMS, and is hosted on Vercel, ensuring fast performance and good mobile optimization. Analytics are implemented via Plausible Analytics, reflecting a privacy-conscious approach with minimal user tracking. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and security policy documentation indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is legitimate and trustworthy but would benefit from enhanced privacy and security transparency.

Der Aufstand in Person is a digital platform and interactive exhibition hosted by the Deutsches Bauernkriegsmuseum Böblingen, commemorating 500 years of the Bauernkrieg (Peasants' War). The website offers rich historical content, including biographies of key figures, interactive maps, and detailed archival materials, targeting history enthusiasts, museum visitors, and educational institutions. The platform leverages modern web technologies such as Next.js and Sanity CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no exposed vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the site is professional, trustworthy, and well-positioned within the cultural education sector in Germany.

Jules Esick is a lifestyle and commercial photographer based in Berlin, presenting a professional portfolio website showcasing photographic works. The website is built using modern web technologies such as Next.js and Sanity CMS, indicating a contemporary digital infrastructure. The site includes minimal user tracking via plausible.io analytics, reflecting a privacy-conscious approach, although no explicit privacy or cookie policies are present. Security posture is limited due to the absence of detected security headers and unknown SSL configuration. The domain WHOIS data is unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site is well-designed and user-friendly but lacks critical compliance and security disclosures.

C

Centre for Optimal Vitality and Excellence Ltd

cove.life

64

Cove.life represents a healthcare startup focused on preventative health, longevity, and performance optimization. The company, Centre for Optimal Vitality and Excellence Ltd, offers comprehensive health assessments, advanced testing, longevity therapies, and supplements, delivered through an in-person London clinic and an intuitive AI-driven app. The website is professionally designed, mobile-optimized, and rich in content, targeting health-conscious individuals seeking to maximize their vitality and detect early signs of disease. Technically, the site uses modern JavaScript frameworks such as Alpine.js and HTMX, with backend indications of Laravel. Analytics are handled via Plausible, emphasizing privacy. Security posture is strong with HTTPS and secure forms, though explicit security headers and privacy policies are missing, representing compliance gaps. WHOIS data is privacy protected but consistent with a legitimate startup preparing for launch in 2025. Overall, the site is trustworthy, professional, and well-positioned in the healthcare market.

K

Kobalt Music Group

kobaltmusic.com

64

Kobalt Music Group operates as a global music rights management and services company focused on empowering creators through creative A&R, sync licensing, payment administration, and transparency enabled by technology. The website reflects a mature digital presence with modern video embedding, a responsive design, and comprehensive privacy and cookie policies. The technical infrastructure leverages Alpine.js, Vimeo, Spotify embeds, and Cookiebot for consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional branding and content quality support a trustworthy business profile. Strategic recommendations include enhancing security headers, publishing security policies, and adding contact information to improve transparency and trust.

A

ACRE | A Creative Endeavour Ltd

acre.studio

60

ACRE Studio, operating under A Creative Endeavour Ltd, is a London-based creative design agency specializing in brand identities, motion, and digital design services for forward-thinking clients. The company positions itself as a niche creative studio with a professional and consistent brand presence. The website employs modern frontend technologies such as SvelteKit and integrates privacy-conscious analytics via Plausible. The site is well-optimized for mobile and desktop, featuring rich multimedia content and clear navigation. However, it lacks visible privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and security transparency. The domain WHOIS data is limited due to TLD restrictions and privacy protection, but the website content and structured data support legitimacy. Overall, the site demonstrates a strong digital maturity with room for improvement in privacy and security disclosures.

U

Symposium: »UNLOCKED - Gaming öffnet Kultur«

unlocked-symposium.de

50

The website unlocked-symposium.de represents a cultural symposium event titled "UNLOCKED - Gaming öffnet Kultur" scheduled for November 9-11, 2023, at ABK Stuttgart. The event focuses on gaming as a cultural medium, featuring keynotes, panels, and workshops centered on experience, collaboration, and accessibility. The target audience includes individuals interested in gaming culture and academic or cultural collaboration. The business model is event organization within a niche cultural segment, with a small scale and localized focus in Germany. Technically, the website is built using the modern SvelteKit framework, leveraging plausible.io for privacy-focused analytics. The site demonstrates good mobile optimization, clear navigation, and a professional design, though content is relatively basic and focused on event information. Hosting appears to be managed via German-based servers, consistent with the event location. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks visible security headers, privacy and cookie policies, and incident response information, which are important for compliance and trust. No forms or user input mechanisms were detected, reducing attack surface but also limiting interactivity. Overall, the website is safe, professional, and suitable for its purpose but would benefit from enhanced privacy compliance, security headers, and contact information to improve trust and regulatory adherence.

A

Art for You

artforyou.ch

68

Art for You is a Swiss-based e-commerce business specializing in selling posters and art prints created by Swiss artists. The company emphasizes sustainable and ecological production, targeting art enthusiasts and customers interested in unique Swiss art. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Facebook Pixel and Mailchimp for marketing and analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the business appears legitimate and trustworthy with consistent WHOIS data and a clear market niche.

B

Be.Beyond GmbH & Co KG

lead-print.com

49

Lead-Print, a brand of Be.Beyond GmbH & Co KG, is a well-established provider of web-to-print solutions primarily serving the DACH region. With over 360 installations and 2500 active portals, the company offers tailored, cost-effective platforms for printers, media service providers, and corporate clients. Their product suite includes PRINT LOUNGE, DRUCKSHOP, and ONLINE CREATOR, supported by consulting and plugin services. The website reflects a professional and consistent brand image with clear contact information and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a responsive design and moderate performance. However, there is room for improvement in security headers and published security policies. The absence of WHOIS data is a notable gap, reducing domain transparency and trust from a registration perspective. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the lack of incident response contacts and security policy documentation suggests an opportunity to enhance trust and compliance. Overall, the website is safe, business-focused, and well-structured, suitable for its target audience in the printing and media technology sector.

R

Rewardful Inc.

getrewardful.com

69

Rewardful Inc. operates a specialized SaaS affiliate and customer referral tracking software platform designed primarily for SaaS professionals, digital creators, and marketers. The company positions itself as a leader in ease of setup, evidenced by its #1 rating on G2 and verified Stripe partnership. Their software offers seamless integration with Stripe and Paddle, flexible commission structures, and robust API support, catering to businesses seeking to launch and manage affiliate programs efficiently. Technically, the website is built on Webflow CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Intercom, and VWO, reflecting a mature digital infrastructure. The presence of Usercentrics CMP indicates attention to privacy compliance, although explicit privacy and terms of service pages are not found. Security posture is solid with HTTPS and consent management but lacks some advanced security headers and published policies. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy verification. Overall, Rewardful presents as a professional and credible SaaS affiliate software provider with room for improvement in transparency and security documentation.

S

Some Place Studio

someplace.studio

57

Some Place Studio is a small architectural practice operating out of Berlin and Vienna, specializing in buildings, interiors, and exhibitions with a strong commitment to sustainability and cultural engagement. The firm emphasizes collaboration and diversity, positioning itself as a woman-owned business within the German architecture market. Their service offerings include comprehensive architectural design, project management, and construction supervision, targeting clients who value sustainable and contextually aware design solutions. Technically, the website is built on the Cargo CMS platform, utilizing modern web standards and custom typography, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are provided, which may impact user engagement and trust. Overall, the domain appears legitimate with privacy-protected WHOIS data, consistent with the professional nature of the business. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

D

Dinamo Typefaces

abcdinamo.com

70

Dinamo Typefaces is a Berlin-based specialized type design studio offering a range of retail and bespoke typefaces, design software, research, and consultancy services. The company targets design professionals and clients seeking custom font solutions, positioning itself as a niche player with a strong international presence. The website reflects a professional and modern digital presence with excellent design quality, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript frameworks (Vue.js), lazy loading, and secure HTTPS connections, supported by strong security headers and CSRF protections on forms. However, there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms and publishing explicit security policies or incident response information. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. The domain registration data is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and establishing a vulnerability disclosure process.

S

Studio HanLi

hanli.eu

54

Studio HanLi is a small creative business specializing in graphic design and typography, including typeface creation. The website presents a professional and visually appealing design built on WordPress with modern web technologies such as jQuery and Swiper.js. The technical infrastructure is moderate in performance and well optimized for mobile devices. However, the site lacks critical privacy and cookie policies, contact information, and visible security policies, which impacts its compliance and trustworthiness. Security posture is average due to missing security headers and unclear SSL configuration. Overall, the business appears legitimate and niche-focused but would benefit from enhanced privacy compliance and security practices.

T

Trojka

trojkavodka.com

41

Trojka is a Swiss spirits brand specializing in flavored vodkas designed for consumers who prefer simple, ready-to-mix alcoholic beverages. The website presents a professional and consistent brand image with a clear focus on product variety and ease of use. Technically, the site uses modern web technologies including JavaScript ES modules, CSS3, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site appears mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest a legitimate business. Overall, the site demonstrates a moderate to good security posture and privacy compliance but would benefit from enhanced transparency and contact information.

M

Macquarie Group

yourlease.com.au

66

YourLease, operated under the Macquarie Group umbrella, provides a secure online platform for customers to manage leasing contracts, view payment histories, and download related documents. The website is professionally designed with a focus on user experience and mobile optimization, leveraging modern web technologies such as AngularJS and Google Analytics for performance and tracking. Security is well addressed with HTTPS enforcement, secure login forms, and clear warnings about phishing scams, reflecting a mature security posture appropriate for a financial services platform. Privacy policies and terms of service are clearly linked, supporting compliance with data protection regulations. Overall, the site demonstrates a high level of professionalism and trustworthiness, although the lack of explicit cookie consent and limited WHOIS transparency slightly reduce privacy compliance scores.

B

Bora

bora.co

63

Bora is a medium-sized architectural and interior design firm based in Portland, Oregon, with a national presence primarily servicing the Pacific Northwest and beyond. The company specializes in architecture, interior design, sustainability consulting, and branding services, targeting clients such as educational institutions and commercial enterprises. Their website reflects a professional and consistent brand image with a strong portfolio showcasing their work. Technically, the site is built on WordPress with modern plugins and technologies such as Mapbox and Google Analytics, offering good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and formal security policies suggests room for improvement. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting Bora's market position as a reputable design firm.

M

Mithun, Inc

mithun.com

52

Mithun, Inc is a well-established design and architecture firm with a strong market presence in the United States, operating since at least 1996 as indicated by domain registration. The company focuses on integrated design services including architecture, planning, and research and development, emphasizing sustainability and community impact. Their website reflects a professional and content-rich platform targeting clients seeking high-quality design solutions. Technically, the site is built on WordPress with standard technologies like jQuery and Yoast SEO, and it incorporates Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security-wise, the website uses HTTPS and has domain transfer protections, but lacks DNSSEC and security headers, and does not publish privacy or security policies, indicating room for improvement in compliance and security posture. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

M

Mahlum Architects Inc.

mahlum.com

59

Mahlum Architects Inc. is a medium-sized architectural firm focused on sustainable and community-centered design, serving sectors such as education, healthcare, housing, and planning. Their website reflects a professional presence with a clear emphasis on values like equity, inclusion, and environmental sustainability. The firm holds certifications such as the Living Building Challenge, underscoring their commitment to green building practices. Technically, the website is built on WordPress using common plugins and tracking tools like Google Analytics and Leadfeeder, with moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

Swinerton Incorporated is a well-established national construction company founded in 1888, operating with a 100% employee-owned business model. The company offers a broad range of construction services including general contracting, construction management, and design-build services, serving clients across 24 regional offices in the United States. Their market position is strong, consistently ranked among the top general contractors nationally, with a focus on quality, innovation, and local market expertise. Technically, the website is built on WordPress using modern frameworks and plugins such as Elementor, Bootstrap 4, and Yoast SEO. It employs Google Tag Manager and Plausible Analytics for tracking, alongside Cookiebot for cookie consent management, reflecting a mature digital infrastructure. Hosting appears to be managed by WP Engine, ensuring reliable performance and security. From a security perspective, the site enforces HTTPS and implements clientTransferProhibited status on the domain, enhancing domain security. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing a formal security policy or vulnerability disclosure. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of security or content safety issues. The domain registration data supports the legitimacy and long-term presence of the company. Strategic recommendations include enhancing DNS security, publishing security policies, and expanding incident response transparency to further strengthen trust and security posture.

D

Diamond Schmitt

dsai.ca

60

Diamond Schmitt is a well-established architecture firm founded in 2001, specializing in designing cultural, educational, and research facilities. The company has a strong market position with a portfolio of notable projects and serves clients primarily in Canada and the United States. Their website reflects a professional and consistent brand image, targeting institutional clients and stakeholders seeking architectural services. Technically, the website is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain registration transparency, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is basic, with no clear cookie consent mechanism or detailed privacy policy found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

S

Synergy Partners Consulting Ltd.

synergypartners.ca

56

Synergy Partners Consulting Ltd. is a Canadian engineering consulting firm specializing in building engineering and advisory services for new and existing buildings. Founded in 2014 and headquartered in Toronto, Ontario, the company serves property owners, managers, designers, and builders across various real estate sectors. Their core services include advisory, restoration engineering, and enclosure engineering, positioning them as a trusted and experienced player in the Canadian real estate engineering market. The website reflects a professional and well-established business with clear branding and comprehensive service descriptions. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup for enhanced user experience. SEO is supported by Yoast SEO plugin, and Google Analytics is integrated for visitor tracking. The site is mobile optimized and accessible, with good performance, although some improvements in security headers and DNSSEC could be made. From a security perspective, the site uses HTTPS and has domain locks to prevent unauthorized changes, but lacks DNSSEC and security headers that would strengthen its posture. There is no visible security policy or incident response contact information, and no cookie consent mechanism despite the use of tracking scripts, which may impact privacy compliance. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the company's digital trust and compliance posture.

P

Pomerleau Inc.

pomerleau.ca

53

Pomerleau Inc. is a leading Canadian construction company specializing in building, infrastructure, and civil engineering projects. Established in 2000, it has grown to become one of Canada's largest construction firms with revenues exceeding $4.8 billion in 2023. The company targets clients in various sectors including energy, transport, and real estate, offering comprehensive construction services with a focus on innovation and sustainability. The website reflects a professional and well-branded digital presence, supporting its market position and business model effectively. Technically, the website is built on Drupal CMS and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing content discoverability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism, demonstrating good privacy compliance aligned with GDPR. However, there is an opportunity to enhance security posture by enabling DNSSEC, adding security headers, and publishing explicit security policies or incident response contacts. No critical vulnerabilities or suspicious indicators were detected. Overall, Pomerleau's website presents a trustworthy and professional front that aligns well with its business stature. Strategic recommendations include strengthening DNS security, enhancing HTTP security headers, and publishing formal security and incident response documentation to further build trust and compliance.

L

Lever Architecture

leverarchitecture.com

67

Lever Architecture is a professional architectural design firm operating primarily in Portland, Oregon, and Los Angeles, California. The company offers architectural, interior design, and research services, targeting clients seeking innovative and impactful building solutions. Their market position is supported by a mature domain age and media recognition for notable projects, indicating a stable and reputable presence in the architecture sector. Technically, the website employs modern web technologies including JavaScript, Turbolinks, and Google Analytics for tracking. The hosting infrastructure leverages Google Cloud DNS services, and the site is secured with HTTPS and CSRF protections. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. From a security perspective, the site demonstrates a solid baseline with HTTPS and CSRF tokens but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner and privacy policy present but no explicit GDPR compliance statements or data retention policies. Overall, the website is professional, trustworthy, and secure for its business purpose. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and user trust.

W

Walsh Construction Co.

walshconstruction.com

60

Walsh Construction Co. is a regional construction company based in the Pacific Northwest, specializing in community-focused projects such as affordable housing and senior living facilities. The company emphasizes a family-oriented culture and partnership approach, supported by multiple workplace excellence awards. Their website reflects a professional digital presence with modern technologies including WordPress, jQuery, and SEO optimization tools. Multimedia content such as embedded Vimeo videos and social media integration enhance user engagement. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in security headers and privacy consent mechanisms. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the overall legitimacy given the professional presentation and business indicators. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving accessibility features to strengthen trust and compliance.

R

RDH

rdh.com

56

RDH is a well-established consulting and engineering firm specializing in building enclosures, facade and structural engineering, construction, energy and climate services, forensics, and asset management. The company targets clients across North America, focusing on improving building performance, resilience, and sustainability. Their website reflects a strong market position with comprehensive service offerings and a professional digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for performance, SEO, and mobile responsiveness. Security posture is good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The lack of WHOIS registration data is a notable concern, impacting domain legitimacy trust. Overall, the website is professional and trustworthy, but domain registration transparency should be addressed.

P

PAE Engineers

pae-engineers.com

64

PAE Engineers is a professional engineering consulting firm specializing in sustainable mechanical, electrical, plumbing, lighting, and technology design. They position themselves as leaders in high-performance engineering with a strong commitment to sustainability, evidenced by their B-Corp and JUST certifications. Their target market includes clients in healthcare, education, government, and commercial real estate sectors seeking innovative and regenerative engineering solutions. The website presents a comprehensive portfolio of projects and services, reinforcing their market position. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, and uses responsive design with good SEO and accessibility features. The site is served over HTTPS with CSRF protections indicated, though some security headers are missing. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. From a security perspective, the site demonstrates good practices such as HTTPS and CSRF tokens but could improve by adding security headers and explicit incident response information. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the professional presentation and certifications mitigate this risk. No WAF or blocking mechanisms were detected, and the content is safe and appropriate for general audiences. Overall, the website is professional, trustworthy, and well-structured, with minor improvements recommended in security headers and privacy compliance to enhance trust and protection.

H

Hacker Architects & Interior Design

hackerarchitects.com

62

Hacker Architects & Interior Design is a professional architecture studio based in Portland, Oregon, specializing in creating meaningful and sustainable spaces that connect people with their environment. The website serves as a portfolio and blog showcasing diverse projects across sectors such as education, cultural, residential, hospitality, and office design. The firm positions itself as a medium-sized regional player with a focus on clarity, meaning, and environmental integration in design. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including jQuery, Typekit fonts, and ElfSight widgets. The site is mobile-optimized and provides a good user experience with clear navigation and professional content presentation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The absence of WHOIS data for the domain raises questions about domain registration legitimacy, but the professional nature of the site and contact information support its credibility. Overall, the site is well-constructed but would benefit from enhanced privacy compliance and security best practices.