Security Directory

F

Frende Forsikring

frende.no

72

Frende Forsikring is a Norwegian insurance company offering a wide range of insurance products including car, travel, home contents, life, and health insurance. The company positions itself as a customer-centric insurer with a strong emphasis on ease of use and safety, supported by awards for best insurance and customer service. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content tailored for both private individuals and businesses in Norway. Technically, the site uses modern JavaScript modules, SVG graphics, and integrates Google Analytics 4 for user insights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details.

B

Bezos Earth Fund

bezosearthfund.org

72

The Bezos Earth Fund website represents a large philanthropic organization focused on environmental and climate change initiatives. The site is professionally designed with consistent branding and targets a general audience interested in environmental philanthropy. The technical infrastructure uses modern JavaScript modules and includes Google Tag Manager for analytics and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies, which are areas for improvement. The absence of WHOIS data due to privacy protection slightly reduces trust but is understandable for a high-profile philanthropic entity. Overall, the site is functional, professional, and safe for general audiences.

V

Volkswagen Group Polska Sp. z o.o.

dasweltauto.pl

59

Das WeltAuto is a certified used car program operated under the Volkswagen Group Polska Sp. z o.o., targeting Polish consumers seeking reliable used vehicles with verified history and warranty. The website serves as a branded platform linking to various Volkswagen Group brand certified used car programs including Volkswagen, Seat, Skoda, Cupra, and Volkswagen commercial vehicles. The business model focuses on providing trust and quality assurance in the used car market segment, leveraging the strong brand equity of Volkswagen Group. The domain age and WHOIS data support the legitimacy and established presence of the program since 2010. Technically, the website employs modern JavaScript modules, Google Tag Manager, and CookieHub for cookie consent management, indicating a moderate to good level of digital maturity. The site is mobile optimized with good SEO practices and a professional design. However, no CMS or specific frameworks were detected, and hosting details are limited to registrar information. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and no dedicated security or incident response policies are published on the site. The use of third-party analytics and tracking is transparent and managed via consent. Overall, the security posture is adequate but could be improved with additional headers and published policies. The overall risk assessment is low with no critical vulnerabilities or suspicious indicators found. Strategic recommendations include enhancing security headers, publishing security policies and incident response contacts, and maintaining regular audits of third-party scripts. The site is trustworthy and professionally managed, supporting Volkswagen Group's brand reputation in the Polish used car market.

S

Skinflint.co.uk

skinflint.co.uk

70

Skinflint.co.uk is a UK-based price comparison website established in 2008, offering consumers a platform to compare prices across various merchants. The site aggregates product offers and provides ratings to assist users in making informed purchasing decisions. The business operates primarily in the e-commerce sector, targeting UK consumers seeking value and price transparency. Technically, the website employs modern JavaScript modules, uses a custom or proprietary CMS, and integrates cookie consent management and analytics tools such as Matomo. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and published security policies, which could be improved. Overall, the website is trustworthy with a consistent domain registration history and no signs of blocking or WAF interference.

C

Cenowarka Porównanie cen Polska

cenowarka.pl

66

Cenowarka.pl is a Polish price comparison website established in 2009, providing consumers with aggregated product prices and offers from various merchants to facilitate informed purchasing decisions. The site targets Polish consumers and operates primarily in the e-commerce sector. Technically, the website employs modern JavaScript modules served from a dedicated CDN, uses HTTPS for secure communication, and integrates a cookie consent mechanism to comply with privacy regulations. However, explicit privacy policies and terms of service are not found in the provided content, which may impact compliance and user trust. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website presents a professional and user-friendly interface with good mobile optimization and SEO practices, but could improve transparency and security documentation to enhance trust and compliance.

H

Harald A. Møller AS

mittbilhold.no

71

Bilhold is a digital automotive service platform operated by Harald A. Møller AS, targeting owners of Audi, CUPRA, SEAT, Škoda, and Volkswagen vehicles in Norway. The platform offers convenient access to authorized workshops, vehicle maintenance bookings, damage repair services, wheel change scheduling, and roadside assistance. It integrates with mobile applications available on iOS and Android, enhancing user accessibility and engagement. The website is professionally designed, mobile-optimized, and provides comprehensive service information and user reviews, positioning it as a trusted service provider in the Norwegian automotive maintenance market. Technically, the site uses modern JavaScript modules and CSS, with good SEO and accessibility practices, though some security headers could be improved. Security posture is strong with HTTPS and script nonce usage, but lacks explicit security policy disclosures. WHOIS data is unavailable, likely due to privacy protection, but the site’s branding and contact details align with a legitimate Norwegian automotive company. Overall, the site demonstrates a mature digital presence with strong business credibility and user trust.

The website 'AVP Immersive Studio' presents minimal content with only basic metadata and no visible business or contact information. The domain WHOIS query returned no registration data, indicating the domain may not be registered or WHOIS data is protected or unavailable. This significantly impacts the trustworthiness and legitimacy of the website. Technically, the site uses modern JavaScript modules but lacks any advanced frameworks or CMS. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating low compliance with data protection standards. Overall, the site appears to be a placeholder or under development with very limited digital maturity and security posture.

G

Geizhals.at

geizhals.at

57

Geizhals.at is a reputable Austrian price comparison website specializing in consumer products such as electronics, household items, and leisure goods. It serves the Austrian market by providing users with comprehensive price listings, deal alerts, and wishlist management features. The platform operates on a business model centered around affiliate marketing and online price comparison, positioning itself as a trusted resource for consumers seeking the best prices. Technically, the website employs modern JavaScript modules and custom-built scripts, with a focus on performance and mobile optimization. It integrates a recognized cookie consent management system and uses Matomo analytics with user consent, reflecting a mature approach to privacy and data collection. Security-wise, the site enforces HTTPS and uses script integrity checks but lacks some advanced security headers and explicit security policies. Overall, the website demonstrates a solid security posture with room for improvement in transparency and incident response readiness. The domain registration data aligns well with the business claims, supporting the site's legitimacy and trustworthiness.

G

Geizhals

geizhals.de

68

Geizhals.de is a reputable German price comparison website specializing in consumer electronics and other retail products. It serves a broad consumer audience in Germany, providing detailed price comparisons, product ratings, and deal alerts. The site is well-established with a consistent brand presence and a medium-sized market footprint. Technically, the website employs a modern JavaScript-based architecture with modular scripts and integrates standard analytics and advertising services. Security posture is strong, with HTTPS enforced and multiple security headers present, though no explicit security policy or incident response information is published. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site demonstrates high professionalism, good user experience, and trustworthy operations.

R

Robert Bosch UK Holdings Ltd

bosch.co.uk

63

Robert Bosch UK Holdings Ltd operates a comprehensive corporate website targeting customers, partners, and job seekers in the United Kingdom. The company provides manufacturing and technology solutions primarily in mobility, home products, industry, and hydrogen sectors. The website demonstrates a strong market position as a large multinational enterprise with consistent branding and professional content. Technically, the site employs modern web technologies including Google Tag Manager, responsive images, and custom web components, delivering a good user experience with excellent mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and privacy consent mechanisms, though some security headers and incident response contacts could be improved. The WHOIS data for the domain www.bosch.co.uk is unavailable due to domain registration rules, indicating the domain is not registered, but the website content is legitimate and likely hosted under a different domain or alias. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

T

Trendence Institut GmbH

trendence.com

72

Trendence Institut GmbH is a well-established German market research institute specializing in HR data, employer branding, and recruiting analytics. With over 20 years of experience, it provides high-quality studies, statistics, and trends to help clients access and engage their target audiences in the German labor market. The website reflects a professional and consistent brand image, showcasing client logos from reputable companies and offering a broad product portfolio including employer rankings, recruiting tools, and certifications. Technically, the site employs modern JavaScript frameworks and analytics tools, ensuring fast performance and excellent mobile optimization. Security practices include HTTPS enforcement and a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS registration data and lack of explicit security or incident response policies slightly reduce the overall trust score. Overall, the website presents a credible and professional digital presence suitable for its target audience.

R

Robert Bosch Inc.

bosch.ca

63

Robert Bosch Inc. operates the Canadian branch of the global Bosch Group, a multinational enterprise specializing in manufacturing and technology solutions. The website serves as a corporate portal offering information on products and services across mobility, home, and industrial sectors, as well as career opportunities. The site targets a broad audience including customers, partners, and job seekers, positioning Bosch as a leading technology and manufacturing company in Canada. Technically, the website employs modern web technologies including Google Tag Manager, custom web components, and SVG graphics, delivering a responsive and accessible user experience with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a public security policy are absent. The WHOIS data is unavailable, likely due to privacy protection, but the site’s branding and external references confirm legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security transparency and incident response readiness.

P

Porsche Cars North America, Inc.

porsche-poster.com

57

The Porsche Poster Studio website offers a specialized e-commerce platform focused on creating unique posters and wallpapers themed around the Porsche 911. The site targets Porsche enthusiasts and art collectors, leveraging official Porsche branding and linking to Porsche's legal and privacy policies, which enhances its credibility. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, ensuring good performance, mobile optimization, and SEO readiness. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is supported by comprehensive privacy policies linked to Porsche's main domain, though no cookie consent mechanism is evident. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

Porsche is a globally recognized premium automotive manufacturer specializing in luxury sports cars, SUVs, and sedans. The analyzed webpage serves as a country and region selector to direct users to localized Porsche websites, supporting a global customer base. The website demonstrates consistent branding and a professional design leveraging modern web technologies such as Angular and the Porsche Design System, indicating a mature digital infrastructure. From a technical perspective, the site uses modern frameworks and modular JavaScript with good mobile optimization and accessibility basics. However, explicit security headers and privacy compliance mechanisms such as cookie consent banners or privacy policies are not present on this page, which could be improved to meet modern compliance standards. The WHOIS data for the domain is unavailable, which is unusual but likely due to privacy protection or registry policies rather than malicious intent. Security posture is moderate with HTTPS implied but no visible security headers or incident response information. No tracking or analytics scripts were detected, suggesting minimal user tracking on this page. Overall, the website is safe, professional, and trustworthy but could enhance privacy and security transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, and publishing incident response contacts to improve compliance and user trust. The domain's legitimacy is supported by brand consistency despite missing WHOIS data.

L

LeasingMarkt.de GmbH

leasingmarkt.de

55

LeasingMarkt.de GmbH operates Germany's leading online marketplace for auto leasing offers, providing consumers and businesses with a platform to compare leasing deals across all major car brands and models. The website facilitates direct contact with dealers and offers additional services such as leasing takeovers, newsletters, and WhatsApp deal alerts. The company positions itself as a market leader in the transportation sector within Germany, targeting both private and commercial customers seeking flexible leasing options. Technically, the website is built with modern web technologies including JavaScript ES modules, CSS3, and SVG graphics, hosted on Amazon AWS infrastructure. It integrates a sophisticated consent management platform aligned with GDPR requirements, ensuring user privacy and compliance. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. From a security perspective, LeasingMarkt.de enforces HTTPS and employs consent mechanisms for cookie and data processing compliance. However, it lacks explicit security headers and publicly available security policies or incident response contacts, which could be improved to strengthen trust and resilience. No critical vulnerabilities or suspicious patterns were detected in the analysis. Overall, LeasingMarkt.de presents a professional, trustworthy, and user-friendly platform with strong privacy compliance and a solid technical foundation. Strategic enhancements in security transparency and accessibility would further elevate its market standing and user confidence.

R

Regional Network Information Center, JSC dba RU-CENTER

userapi.com

66

VK.com is the largest European social networking platform, founded in 1997 and operated under a well-established domain registered with RU-CENTER. The platform offers a wide range of services including social networking, messaging, media sharing, video hosting, mini apps, and advertising. It targets a broad general audience and maintains a strong market position as a leading social network in Russia and Europe. Technically, VK employs modern web technologies such as React and MobX, with a focus on performance, accessibility, and mobile optimization. Security measures include HTTPS enforcement, security headers, and active error monitoring, although DNSSEC is not enabled. Privacy and terms policies are comprehensive and GDPR compliant, but explicit security policies and incident response contacts are not prominently published. Overall, VK demonstrates a mature digital infrastructure and a high level of professionalism and trustworthiness.

S

Staatliche Zentralstelle für Fernunterricht

zfu.de

56

The website https://zfu.de/ represents the Staatliche Zentralstelle für Fernunterricht, a German government authority responsible for regulating distance learning courses and programs under the Fernunterrichtschutzgesetz (FernUSG). It serves as the official body for approving and overseeing Fernunterrichtslehrgänge and Fernstudiengänge, targeting course providers, interested learners, and educational institutions. The site provides authoritative information including recent legal rulings by the Bundesgerichtshof (BGH) relevant to distance education regulation. The content is primarily in German and is professionally presented with clear navigation and consistent branding.

Carlog.com is a digital platform operated by Porsche Holding GmbH, providing vehicle order tracking and customer service primarily for Porsche customers in Austria and related markets. The website offers real-time updates on vehicle orders, enhancing customer experience and transparency. The platform targets car buyers and automotive clients, positioning itself as an important service within the automotive retail and logistics sector. Technically, the site uses modern JavaScript modules, Google Tag Manager for analytics, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration consistent with the business identity, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a positive risk profile.

A

Armenpress

armenpress.am

68

Armenpress is a well-established Armenian news agency founded in 1999, providing comprehensive news coverage about Armenia, its diaspora, the region, and global events. The website offers rich multimedia content including articles, photos, videos, and podcasts in multiple languages, targeting Armenian-speaking audiences and beyond. The agency holds a strong market position as a trusted source of news in Armenia. Technically, the website employs modern web technologies such as JavaScript ES modules, CSS, and integrates Google Tag Manager and AdStock.pro for analytics and advertising. The site is well-optimized for SEO and mobile devices, ensuring excellent user experience. Security-wise, the site uses HTTPS with good SSL configuration and standard security practices, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable media platform.

T

teal.fm - Your music journey, beautifully tracked

teal.fm

59

teal.fm is an early-stage technology startup focused on providing a beautiful and unified music listening tracking and social discovery platform. The website presents a modern, visually appealing interface that highlights key features such as owning your music data, social discovery, universal tracking across platforms, and sharing music taste cards. The business is positioned as a niche service for music enthusiasts and leverages open source principles with community engagement via Discord and Bluesky. Technically, the site uses modern JavaScript modules, React-like SPA architecture, and is hosted with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing policies and consent mechanisms. No contact information or formal business credentials are provided, reflecting the pre-launch status. Analytics tracking is implemented via Watson Analytics without disclosed privacy details.

R

Red Hat, Inc.

ceph.io

66

Ceph.io is the official website for Ceph, an open-source distributed storage system designed to provide scalable and unified storage solutions including object, block, and file storage. The project is backed by Red Hat, Inc., a well-known technology company based in the US. The website targets organizations and developers seeking reliable storage infrastructure and offers extensive resources such as documentation, community engagement, and developer tools. The business model revolves around open-source software with community and enterprise support, positioning Ceph as a leading solution in the distributed storage market. Technically, the website employs modern web technologies including Matomo Analytics for tracking, Google Fonts for typography, and SVG graphics for branding. The site is hosted on NS1 DNS infrastructure and uses HTTPS with a good SSL configuration. The site is well-optimized for mobile devices, accessible, and SEO-friendly, providing a fast and professional user experience. However, there is no DNSSEC enabled and no visible security headers, which are areas for improvement. From a security perspective, the website demonstrates a solid posture with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The presence of a dedicated security page indicates an awareness of security policies, though no explicit incident response contacts or vulnerability disclosure policies were found. Privacy compliance is partial; a privacy policy and terms of service are present, but no cookie consent mechanism is implemented despite the use of tracking scripts. Overall, Ceph.io is a trustworthy and professional website representing a mature open-source project with strong business backing. Strategic recommendations include implementing DNSSEC, adding security headers, and introducing a cookie consent mechanism to enhance privacy compliance and security posture further.

X

Xen Project

xenproject.org

56

The Xen Project is an established open source virtualization initiative affiliated with the Linux Foundation, providing enterprise-grade hypervisor technology trusted by millions. The website presents a professional and consistent brand image, targeting developers, enterprises, and the open source community. The business model revolves around open source software development and community collaboration, positioning Xen Project as a key player in virtualization technology. Technically, the site is built using the Hugo static site generator, employs modern JavaScript modules, and uses Font Awesome Pro for icons. The site is moderately performant and optimized for mobile devices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. The domain WHOIS data is consistent and transparent, supporting the legitimacy of the project. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

O

OTTO

otto.de

69

OTTO is a major German e-commerce company specializing in fashion, furniture, and technology products. The website presents a professional and comprehensive online shopping platform targeting general consumers in Germany. It offers various services such as installment purchases, purchase on account, old device take-back, and assembly services, positioning itself as a large enterprise in the retail sector. The technical infrastructure leverages modern JavaScript modules, Akamai CDN for hosting, and OneTrust for cookie consent management, indicating a mature digital presence with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent, but lacks explicit security policies and vulnerability disclosures. Overall, the website is trustworthy and professionally maintained, though improvements in transparency around privacy and security policies are recommended.

A

Audible

audible.co.uk

70

Audible UK is a leading audiobook and audio entertainment platform operating under the Amazon umbrella. The website offers a subscription-based service providing access to best-selling audiobooks, exclusive Originals, and podcasts, targeting consumers primarily in the UK and Ireland. The brand is well-established with a strong market position and a comprehensive digital presence. Technically, the site leverages modern web technologies including React and Amazon Cloudfront CDN, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS enforcement, content security policies, and cookie consent mechanisms in place, although explicit security policy and incident response information are not publicly available. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR.

C

Czech Games Edition

cgegames.us

70

Czech Games Edition operates a professional e-commerce website hosted on the Shopify platform, specializing in the sale of board games and expansions such as Codenames and Lost Ruins of Arnak. The site targets US customers primarily, with a clear focus on board game enthusiasts and family-friendly products. The company maintains a consistent brand presence across multiple social media platforms, enhancing its market reach and customer engagement. Technically, the website leverages modern web technologies including Shopify's Dawn theme, Google Tag Manager, Facebook Pixel, and hCaptcha for security, ensuring a robust and performant user experience. Security posture is strong with HTTPS enforced and form protection mechanisms in place, though explicit security headers and policies could be more visible. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content, which is an area for improvement. Overall, the website is trustworthy and professionally maintained, but could enhance transparency and compliance by publishing clear privacy and security policies and contact information.

P

PTV Group

ptvgroup.com

75

PTV Group is a well-established company specializing in transportation and mobility software solutions, offering products and consulting services that empower smarter, cleaner, and safer mobility. Their website demonstrates a mature digital presence with a professional design, comprehensive content, and strong GDPR compliance evidenced by a detailed privacy policy and cookie consent mechanism. The technical infrastructure is modern, leveraging Drupal CMS and contemporary frontend technologies, with integration of Google Tag Manager and Didomi for privacy management. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, although explicit security headers should be verified. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional website and legal documentation. Overall, PTV Group presents a credible and trustworthy online presence aligned with their business domain.

S

Schindler Deutschland AG & Co. KG

schindler-kontakte.de

41

Schindler Deutschland AG & Co. KG operates a regional contact management portal designed primarily for internal use or partner access. The website facilitates contact searches and user login, supporting the company's operational needs in the transportation sector, specifically elevators and escalators. The site is professionally branded and consistent with Schindler's corporate identity, targeting employees and partners rather than the general public. Technically, the website employs modern web technologies including React and Material-UI, providing a responsive and user-friendly interface. However, SEO optimization is minimal, and accessibility features are basic. Performance is moderate, with no major issues detected in the HTML structure or scripts. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers such as CSP or HSTS. No cookie consent mechanism is present, which may be a GDPR compliance gap. No incident response or vulnerability disclosure information is provided. The WHOIS data indicates a legitimate domain with no privacy protection, consistent with corporate transparency. Overall, the website is a secure and professional internal tool with room for improvement in security headers, privacy compliance, and SEO. The risk level is moderate with no critical vulnerabilities detected, but enhancements in security posture and compliance would strengthen trust and resilience.

KOSMOS Verlag is a well-established German publishing company specializing in games, children's and youth books, experiment kits, and related educational products. The website reflects a professional e-commerce platform targeting families, children, and hobbyists interested in educational and entertainment products. The site uses modern web technologies including JavaScript modules, AJAX for search suggestions, and integrates a consent management platform (Usercentrics) to comply with privacy regulations. Google Tag Manager is used for analytics and marketing purposes. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy are absent. WHOIS data is minimal, lacking detailed registrant information, which slightly reduces domain trustworthiness but does not contradict the website's legitimacy. Overall, the site is safe, family-friendly, and professionally maintained.

O

OSM Town

osm.town

67

OSM Town operates as a specialized Mastodon instance serving the OpenStreetMap community within the Fediverse. It provides a social networking platform tailored for OpenStreetMap enthusiasts, supported by funding from the OpenStreetMap Foundation. The website's market position is niche, focusing on community engagement rather than commercial services. The platform leverages modern web technologies including React and Mastodon's backend, ensuring a responsive and user-friendly experience across devices. However, some technical aspects such as explicit security headers and privacy compliance mechanisms could be improved. Security posture is moderate, with HTTPS implied but lacking visible advanced security headers or incident response information. Overall, the site is trustworthy and safe, with no adult or questionable content detected, but the absence of WHOIS data and contact information slightly reduces business credibility.

P

pretix GmbH

pretix.social

70

pretix GmbH operates pretix.social, a Mastodon-based decentralized social media server hosting official company accounts related to their open-source and SaaS projects such as pretix and venueless. The website serves as a communication and branding platform rather than a user registration portal, with accounts managed externally. The company is positioned as a niche technology provider focused on event management and decentralized social media solutions. Technically, the site uses Mastodon 4.4.5 with React and modern JavaScript modules, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Business credibility is strong due to clear company information and legal notices. Overall, the site is professional, trustworthy, and safe for general audiences.

N

Newsload

newsload.com

62

Newsload is a German-based digital visibility platform founded in 2016, offering content creation, distribution, and networking services primarily targeting businesses, associations, cities, and organizations. The website is professionally designed with good content relevance and clear navigation, supporting a medium-sized business profile. Technically, the site employs modern JavaScript modules, uses Cookiebot for consent management, and integrates analytics via Posthog, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not evident. Privacy compliance is well addressed through comprehensive cookie consent and GDPR-aligned privacy policies. However, explicit terms of service and direct contact information are not readily found, which could be improved to enhance trust and compliance. Overall, the site is safe, business-focused, and trustworthy with room for technical and policy enhancements.

D

Deutscher Alpenverein e.V.

dav360.de

53

The website dav360.de serves as the login portal for the Deutscher Alpenverein e.V., a prominent German alpine club. It provides members and administrative staff access to the DAV360 portal, facilitating internal management and member services. The site is clearly branded and targeted at a German-speaking audience, with a focus on secure access to organizational resources. The business model centers on membership management and service delivery within a non-profit framework. The site positions itself as a trusted platform for the alpine community in Germany.

S

SERMA GmbH

serma.eu

60

SERMA GmbH operates a professional website focused on providing SERMI certification services and access to security-relevant repair and maintenance information for the automotive sector. The company targets automotive service providers requiring secure access to vehicle data, offering a digital portal for registration and management. The website is well-structured, professionally designed, and consistent with the company's business focus in Germany. Technically, the site is built on TYPO3 CMS, employs Matomo analytics with privacy-conscious configurations, and uses modern JavaScript modules. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though additional security headers and a published security policy would enhance trust. The WHOIS data is privacy protected by EURid, which is common for EU domains, and no registrant details are publicly available. Despite this, the website content and contact information indicate a legitimate and trustworthy business. No blocking or WAF mechanisms were detected, allowing full content access and analysis. Overall, SERMA GmbH presents a credible, secure, and professional online presence supporting its niche certification services in the automotive industry.

S

Schweizer Radio und Fernsehen (SRF)

srf.ch

69

Schweizer Radio und Fernsehen (SRF) is the Swiss public broadcasting organization providing a comprehensive range of media services including news, sports, culture, weather, and children's programming. The website serves as a multimedia platform offering live TV and radio streaming, podcasts, and on-demand video and audio content, targeting the general Swiss public. It operates under the parent company SRG SSR and holds a leading market position in Swiss media. The content is professionally curated, regularly updated, and presented with consistent branding and high trust indicators.

P

Pinterest

pinterest.es

74

Pinterest is a leading visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Spanish localized site caters to the Spanish-speaking audience with tailored content and user experience. Pinterest operates primarily on an advertising-based business model, leveraging its large user base and content discovery capabilities to generate revenue. The company is a well-established enterprise with a strong global presence and brand recognition. Technically, the website employs modern web technologies including React and ES modules, with a strong emphasis on security through HTTPS and a robust Content Security Policy. The site is optimized for performance and mobile responsiveness, providing an excellent user experience. The use of multiple third-party services for analytics, advertising, and user engagement is evident, with appropriate privacy and cookie policies in place to comply with GDPR and other regulations. From a security perspective, Pinterest demonstrates a mature posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, there is an opportunity to improve transparency by publishing explicit incident response contacts and a vulnerability disclosure policy. Overall, the site is safe for general audiences with no adult or explicit content detected. The overall risk assessment is low, with strong business credibility and technical implementation. Strategic recommendations include enhancing incident response visibility, maintaining up-to-date security practices, and considering a public security.txt file to facilitate vulnerability reporting.

B

Bundler Solutions AB

bundler.com

68

Bundler Solutions AB operates a technology platform that enables digital resellers to offer multiple subscription services through a single integration, streamlining distribution partnerships and boosting competitiveness. The company is positioned as a scalable solution provider in the subscription services market, targeting resellers and content providers primarily in Sweden and the Nordic region. The website reflects a professional and consistent brand image with clear business messaging and customer testimonials from notable partners. Technically, the site uses modern JavaScript modules, Google Tag Manager for analytics, and is hosted on AWS infrastructure, indicating a mature digital presence. Security posture is moderate with domain registration protections in place but lacks visible security headers and published security policies. Privacy and cookie policies are present and GDPR compliant, though no terms of service or incident response contacts are found. Overall, the website is well designed, mobile optimized, and trustworthy, with room for improvement in security transparency and policy disclosures.

N

Netzwerk Schweizer Pärke

savurando.ch

57

Savurando is a project under the Netzwerk Schweizer Pärke that offers culinary treasure hunts in Swiss nature parks, combining outdoor activities with local gastronomy. The website targets nature and food enthusiasts including families, friends, and corporate groups, providing ticket and voucher sales for these experiences. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, and Swiper.js, and is built on the moxi CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses standard tracking and advertising scripts but lacks explicit security policies or vulnerability disclosures. Privacy compliance is basic with cookie consent and GDPR references present. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

I

immobilie1

immobilie1.de

65

immobilie1.de is a German real estate platform offering nationwide property search services including apartments, houses, commercial real estate for rent and purchase. The website targets property seekers and providers in Germany, providing a user-friendly interface with search and provider lookup features, as well as real estate guides. The platform uses modern web technologies including Laravel Livewire, Tailwind CSS, and integrates Cookiebot for GDPR-compliant cookie consent and Google Tag Manager for analytics. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, no terms of service or explicit security policies were found. Overall, the site is professional, trustworthy, and well-optimized for users.

C

CEWE

cewe.de

62

CEWE operates a large-scale e-commerce platform specializing in personalized photo products such as photobooks, calendars, greeting cards, and photo gifts. The website targets a broad consumer audience primarily in Germany and other German-speaking countries, offering a comprehensive range of photo printing services. The company is positioned as a leading European photo service provider with a strong brand presence and consistent digital branding across its platforms. Technically, the website employs modern web technologies including ES modules, custom web components, and advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. The site demonstrates extensive user tracking for marketing and analytics purposes, balanced with a consent management platform to address privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience, though it could improve transparency around privacy and security policies.

A

Association FairSocialNet

tooting.ch

57

Tooting.ch is a Swiss Mastodon instance operated by the Association FairSocialNet, providing a decentralized social networking platform primarily for Swiss users. The platform leverages Mastodon version 4.4.5 and modern web technologies such as React and ES modules, indicating a contemporary technical infrastructure. The website content is user-generated social posts focusing on news, privacy, and social issues, targeting a general audience without adult content. Security posture is solid with HTTPS enforced and no WAF blocking, but lacks some security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages detected. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

Un Dato is a small technology company specializing in data-driven customer experience enhancement solutions. Their offerings include pixel tracking, AI-powered audience segmentation, gamification, subscription management, and data enrichment services. The company targets businesses, particularly SMEs, seeking to leverage precise and reliable data for strategic decision-making. The website is professionally designed, mobile-optimized, and hosted on Cloudflare, employing modern web technologies such as Google Tag Manager and Google Fonts. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact is facilitated via a web form collecting email and message text, but no direct emails or phone numbers are published. Overall, the site presents a credible business with clear product offerings and transparent pricing, though improvements in privacy and security transparency are recommended.

S

Skultuna

skultuna.com

75

Skultuna is a well-established Swedish heritage brand founded in 1607, operating an international e-commerce store specializing in home decor, jewelry, and figurines. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Klaviyo for marketing and Lucky Orange for user behavior analytics. The site demonstrates good digital maturity with responsive design, clear navigation, and GDPR compliance through a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and secure payment methods, though some security headers could be improved and explicit security policies published. Overall, the website presents a professional and trustworthy online retail experience with moderate user tracking and good privacy practices.

L

Less'n'more

less-n-more.com

68

Less'n'more is a well-established German e-commerce business specializing in designer lighting products and custom lighting plans. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Google/Facebook for marketing and analytics. The business targets consumers and professionals seeking high-quality, tasteful lighting solutions. The domain age and WHOIS data support the legitimacy and longevity of the business. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. However, direct contact information and explicit security policies are not prominently published, which could be improved to enhance trust and transparency. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protections, but could benefit from enabling DNSSEC and publishing vulnerability disclosure and incident response information.

W

wpOpus

wpopus.com

59

wpOpus is a recently launched WordPress plugin and site builder focused on enhancing the Gutenberg editor with advanced custom blocks, ready-made demos, and drag-and-drop functionality. The company targets WordPress users and digital creators seeking to build websites efficiently without coding. The website presents a professional and modern design with good SEO practices and structured data, indicating a mature digital presence despite the recent domain registration in mid-2024. Technically, the site leverages WordPress core technologies, popular plugins like Contact Form 7 and Moove GDPR compliance, and modern JavaScript modules, ensuring a robust and extensible platform. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security (DNSSEC) and visible security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and security documentation.

B

beautyjar.de is available for purchase - Sedo.com

beautyjar.de

69

The website is a domain sales landing page hosted on Sedo.com, offering the domain beautyjar.de for purchase. Sedo is a well-established domain marketplace with over 26 years of experience, facilitating thousands of domain transfers monthly. The page provides clear purchase options, contact information, and multiple payment methods, targeting domain buyers and investors. Technically, the site uses modern JavaScript modules and Cloudflare DNS services, but lacks advanced security headers and DNSSEC. The cookie consent mechanism is present, but privacy and terms of service policies are missing on this page. Security posture is moderate with room for improvement in DNS security and HTTP headers. Overall, the site is functional and trustworthy for its purpose but could enhance compliance and security transparency.

E

EHRO.APP Sàrl

ehro.app

54

EHRO.APP Sàrl is a Swiss-based company specializing in volunteer management solutions tailored for event organizers and non-profit associations. Their platform offers tools for scheduling, recruitment, communication, and data export, positioning them as a niche leader in the Swiss market. The website is professionally designed, content-rich, and targets French-speaking Swiss customers with clear pricing and feature information. Technically, the site uses modern JavaScript modules and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and transparency.

Food Support Sverige AB is a specialized service provider offering industrial cleaning and hygienic solutions tailored for the food production industry in Sweden. Established in 2007, the company positions itself as a trusted partner delivering customized cleaning services that ensure compliance with high food safety and hygiene standards. Their website reflects a professional and well-structured digital presence, leveraging modern web technologies such as Nuxt.js and Vue.js, and incorporates Google Tag Manager and reCAPTCHA for analytics and security respectively. The site is fully accessible, mobile-optimized, and provides clear contact channels including a contact form, email, phone, and physical address. However, the absence of explicit privacy and cookie policies and missing security headers indicate areas for compliance and security improvement. WHOIS data for the queried subdomain is unavailable, which slightly reduces trust but does not detract from the overall legitimacy given the professional content and certifications displayed. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and adding incident response contact information to strengthen trust and compliance.

J

Jaguar Land Rover Limited

landrover.pl

66

Land Rover Poland operates as a premium automotive brand website offering luxury SUVs and off-road vehicles such as Range Rover, Discovery, and Defender. The site targets affluent customers in Poland seeking high-end vehicles and related services including fleet solutions and after-sales support. The digital infrastructure leverages Adobe Experience Manager CMS, modern JavaScript modules, and integrates advanced consent management and analytics tools, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and privacy compliance, though additional security headers could enhance protection. The absence of public WHOIS data is typical for .pl domains and does not detract from the site's legitimacy given the professional branding and comprehensive legal disclosures. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.

J

Jaguar Land Rover Limited

rangerover.com

57

The website https://www.rangerover.com/en-xi/market-selector/index.html serves as a market selector portal for the Range Rover brand, operated by Jaguar Land Rover Limited. It allows users to select their region and market to access localized content. The site is professionally designed with consistent branding and uses modern web technologies including Adobe Experience Manager CMS, JavaScript ES modules, and performance monitoring tools like Adobe Helix RUM and mPulse. The technical infrastructure indicates a mature digital presence with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed security policies are not evident. The absence of WHOIS data for the domain is a notable anomaly, but the website content and branding strongly suggest legitimacy. Overall, the site is safe, professional, and targeted at a global automotive audience.

HathiTrust is a prominent non-profit digital library consortium that provides access to millions of digitized books and scholarly resources. Its mission centers on preserving knowledge and empowering research through a large-scale digital collection. The website is professionally designed, highly accessible, and optimized for mobile users, reflecting a mature digital presence. The technical infrastructure leverages WordPress with modern frameworks like Bootstrap and uses privacy-conscious analytics via Matomo. Security posture is strong with HTTPS enforced and secure forms, though some security headers and explicit policies could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy and granular cookie consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism suitable for its educational and research audience.