Security Directory

G

Gumroad, Inc.

gumroad.com

63

Gumroad, Inc. operates a well-established e-commerce platform that enables creators and entrepreneurs to sell digital products, subscriptions, and side projects directly to customers. Founded in 2009, the company has positioned itself as a simple and effective solution for individuals seeking to monetize their knowledge and creative work. The platform supports multiple payment options, storefront customization, and integration with various third-party applications, catering primarily to digital creators and small business owners. Technically, Gumroad leverages a modern Ruby on Rails backend, integrates Stripe for payment processing, and uses Cloudflare for DNS services. The website is fast, mobile-optimized, and employs contemporary web technologies including JavaScript frameworks and CSS utilities. The presence of CSRF tokens and HTTPS indicates a strong baseline security posture, although DNSSEC is not enabled and some advanced security headers could be added. From a security and compliance perspective, Gumroad demonstrates good practices such as HTTPS enforcement, CSRF protection, and domain registration safeguards. However, explicit cookie consent mechanisms and published security policies or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious indicators were detected in the publicly accessible content. Overall, Gumroad presents a professional, trustworthy, and user-friendly platform with a mature technical infrastructure and solid business credibility. Strategic enhancements in privacy compliance and security transparency would further strengthen its market position and user trust.

A

Astra

wpastra.com

72

Astra is a well-established WordPress theme provider founded in 2016, offering a fast, lightweight, and customizable theme widely used by WordPress users globally. The website demonstrates a mature digital presence with extensive use of modern web technologies including WordPress CMS, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The domain is registered with Cloudflare and shows a long-term registration, indicating business stability. However, the website lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security practices are moderate with no DNSSEC enabled and no explicit security headers detected in the HTML content. Overall, Astra presents a professional and trustworthy business with room for improvement in privacy and security transparency.

O

OWIBA AG

iba.ch

69

OWIBA AG operates the website iba.ch, the largest B2B office supplies distributor in Switzerland, offering over 13,000 products with next-day delivery and professional consulting services. The company targets business customers with a comprehensive e-commerce platform featuring a broad product catalog and loyalty programs. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Dynamic Yield for personalization and analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Privacy compliance is robust with clear cookie consent and GDPR-aligned privacy policies. Overall, the site demonstrates high professionalism, trustworthiness, and market credibility.

P

Publicare AG

publicare.ch

68

Publicare AG is a Swiss market-leading company specializing in the supply and consultation of medical aids, including incontinence, stoma, tracheostomy care, and wound treatment. The company targets both private individuals and business customers, offering high-quality advice and fast delivery services. Their business model combines e-commerce with direct billing to health insurers, positioning them as a trusted healthcare supplier in Switzerland. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Cloudflare for hosting and security. It employs Cookiebot for comprehensive cookie consent management and Google reCAPTCHA for form protection. The site demonstrates good mobile optimization and moderate performance, with SEO and accessibility features implemented at a basic to good level. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. The use of consent management and bot detection cookies indicates a mature approach to privacy and security. However, the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and readiness. Overall, Publicare AG's website presents a trustworthy and professional digital presence with strong compliance to privacy regulations and a solid technical foundation. Strategic enhancements in security policy disclosure and accessibility could further strengthen their security posture and user trust.

S

SmartLife Care AG

smartlife-care.ch

60

SmartLife Care AG is a Swiss company specializing in emergency call solutions for seniors, offering devices such as emergency buttons, watches, and bracelets combined with 24/7 call center services. The company holds a leading market position in Switzerland with a clear focus on safety and independence for elderly users. The website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce capabilities. Technically, the site uses modern technologies including Google Tag Manager and a consent management platform, ensuring compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business.

W

webways AG

spitexjobs.ch

69

spitexjobs.ch is a specialized online job portal dedicated to the Spitex healthcare sector in Switzerland, connecting job seekers with Spitex organizations. The platform offers comprehensive job listings, employer profiles, and advanced search and filtering capabilities tailored to healthcare roles such as ambulatory care and specialized nursing. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content for its target audience. Technically, the site employs modern JavaScript frameworks, integrates analytics via Matomo and Google Tag Manager, and uses Sentry for error monitoring, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, appropriate security headers, and privacy compliance including GDPR-aligned privacy and cookie policies with user consent mechanisms. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the domain's legitimacy and consistency with the business profile. Overall, the site demonstrates a strong security posture, good privacy practices, and a credible business presence in the Swiss healthcare job market.

S

Schweizer Radio und Fernsehen (SRF)

srf.ch

69

Schweizer Radio und Fernsehen (SRF) is the Swiss public broadcasting organization providing a comprehensive range of media services including news, sports, culture, weather, and children's programming. The website serves as a multimedia platform offering live TV and radio streaming, podcasts, and on-demand video and audio content, targeting the general Swiss public. It operates under the parent company SRG SSR and holds a leading market position in Swiss media. The content is professionally curated, regularly updated, and presented with consistent branding and high trust indicators.

I

IONOS SE

website-editor.net

69

IONOS SE is a large, established German technology company specializing in internet infrastructure services including domain registration, web hosting, cloud solutions, email and office services, and e-commerce platforms. The company targets both business and individual customers, offering a broad portfolio of digital services. The website demonstrates a high level of professionalism with excellent design, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the website is built using modern frameworks such as Next.js and React, with a well-structured tech stack and fast performance. The use of multiple internal and external scripts for analytics and A/B testing indicates a data-driven approach to user experience optimization. However, some security best practices such as explicit security headers and vulnerability disclosure mechanisms are not evident. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is limited on the analyzed page, with no clear privacy or cookie policies detected, which could be improved to enhance user trust and regulatory compliance. Overall, the website is trustworthy and professionally managed, with a strong business credibility and technical foundation. Strategic improvements in privacy transparency and security header implementation would further strengthen its security posture and compliance standing.

F

Fresenius SE & Co. KGaA

fresenius.com

79

Fresenius SE & Co. KGaA is a leading global healthcare group specializing in products and services for chronically and critically ill patients. The company operates through key subsidiaries such as Fresenius Kabi and Fresenius Helios, offering pharmaceuticals, medical devices, and healthcare services. The website reflects a mature digital presence with comprehensive content targeting healthcare professionals, investors, and patients. Technically, the site is built on Drupal 10, employs Matomo for analytics, and integrates OneTrust for cookie consent, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Fresenius's reputation as a major healthcare enterprise.

F

Fresenius Kabi

fresenius-kabi.com

70

Fresenius Kabi is a global healthcare company specializing in lifesaving medicines and technologies, serving critically and chronically ill patients worldwide. The company operates under the Fresenius Group umbrella and offers a diverse portfolio including Pharma, Medical Nutrition, MedTech, and Biopharma. The website reflects a mature, enterprise-level digital presence with comprehensive content, clear navigation, and a strong emphasis on sustainability and corporate responsibility. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and multimedia content to engage a global audience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though some gaps exist in incident response transparency and terms of service availability. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and credibility of the site. Strategic recommendations include publishing explicit incident response contacts, terms of service, and vulnerability disclosure information to enhance trust and compliance.

F

Freepik Company, S.L.

freepik.com

67

Freepik Company, S.L. operates a comprehensive AI-powered creative suite and stock asset platform, targeting designers, marketers, and content creators globally. The website offers a wide range of AI tools including image, video, and audio generators, alongside traditional stock assets such as photos, vectors, and icons. The business model is subscription and credit-based, supporting professional and personal creative projects. Freepik holds a strong market position as a leading provider in the creative technology space with a consistent brand presence and extensive social media engagement. Technically, the website is built on modern frameworks like Next.js and React, leveraging CDN hosting and advanced consent management tools such as OneTrust. The site demonstrates excellent performance, mobile optimization, and SEO practices, ensuring a high-quality user experience. Analytics and tracking are implemented moderately with Google Tag Manager and Apollo Tracker, balanced with privacy compliance mechanisms. From a security perspective, Freepik enforces HTTPS, employs standard security headers, and integrates cookie consent management. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency and trust. The absence of WHOIS data reduces domain registration transparency but does not significantly detract from the overall legitimacy given the brand's maturity and external trust signals. Overall, Freepik presents a secure, professional, and privacy-conscious platform with strong business credibility. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and improving WHOIS transparency to further strengthen trust and compliance.

P

Pinterest

pinterest.es

74

Pinterest is a leading visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Spanish localized site caters to the Spanish-speaking audience with tailored content and user experience. Pinterest operates primarily on an advertising-based business model, leveraging its large user base and content discovery capabilities to generate revenue. The company is a well-established enterprise with a strong global presence and brand recognition. Technically, the website employs modern web technologies including React and ES modules, with a strong emphasis on security through HTTPS and a robust Content Security Policy. The site is optimized for performance and mobile responsiveness, providing an excellent user experience. The use of multiple third-party services for analytics, advertising, and user engagement is evident, with appropriate privacy and cookie policies in place to comply with GDPR and other regulations. From a security perspective, Pinterest demonstrates a mature posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, there is an opportunity to improve transparency by publishing explicit incident response contacts and a vulnerability disclosure policy. Overall, the site is safe for general audiences with no adult or explicit content detected. The overall risk assessment is low, with strong business credibility and technical implementation. Strategic recommendations include enhancing incident response visibility, maintaining up-to-date security practices, and considering a public security.txt file to facilitate vulnerability reporting.

E

Energie Wasser Bern (ewb)

ausbau-fernwaerme.be

45

Energie Wasser Bern (ewb) operates a municipal district heating network in Bern, focusing on expanding sustainable and climate-friendly heat supply using waste heat, wood, and environmental heat sources. The website presents detailed information about the phased expansion of the Fernwärme network in various city districts, targeting residents and businesses interested in sustainable energy solutions. Technically, the site is built on Cmsbox CMS, uses SVG for interactive maps, and integrates Google reCAPTCHA and Matomo analytics for security and user tracking. Security posture is generally good with HTTPS enforced and bot protection, but lacks explicit security headers and incident response contacts. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. WHOIS data is restricted by the registry, limiting domain transparency, but the website content and branding strongly indicate legitimacy as a municipal energy provider. Overall, the site is professional, informative, and well-structured, supporting ewb's role as a key regional energy supplier.

P

PubNub Inc.

pubnub.com

79

PubNub Inc. operates a leading real-time developer platform that enables businesses and developers to build, manage, and optimize interactive applications at scale. The company offers a comprehensive suite of real-time APIs and services, including messaging, presence, chat, analytics, and push notifications, serving a broad range of industries and use cases. With a market position as a top provider in the real-time communication space, PubNub targets enterprises and developers requiring scalable, low-latency infrastructure. Technically, the website leverages modern web technologies such as Next.js and React, supported by a robust CMS (Builder.io) and integrates industry-standard tools for cookie consent and analytics. The platform demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, PubNub maintains a strong posture with HTTPS enforcement, multiple security headers, and compliance with major frameworks including SOC2, HIPAA, GDPR, CCPA, and ISO 27001. The presence of a bug bounty program and comprehensive privacy and cookie policies further reinforce their commitment to security and privacy. No critical vulnerabilities or suspicious patterns were detected. Overall, PubNub presents a low-risk profile with a professional, trustworthy online presence. Recommendations include publishing explicit incident response contacts and adopting a security.txt file to enhance vulnerability disclosure transparency.

S

Statista

statista.com

78

Statista operates as a leading statistics portal providing extensive market data, consumer survey results, and industry studies aggregated from over 22,500 sources. The platform targets business professionals, researchers, marketers, and academics seeking reliable and comprehensive statistical information. Its business model centers on subscription and data licensing services, positioning it as a key player in the media and business intelligence sector. The website's content quality and branding are excellent, reflecting a mature and professional digital presence.

O

Ookla, LLC

ookla.com

73

Ookla, LLC is a leading technology company specializing in network intelligence and connectivity insights. The company operates globally with a strong market position, offering a suite of products and services including Speedtest, Downdetector, Ekahau, and RootMetrics. Their business model focuses on providing data-driven solutions to consumers, operators, businesses, governments, and non-profits to optimize network performance and enhance digital experiences. The website reflects a mature digital presence with excellent content quality and consistent branding. Technically, the website leverages modern web technologies such as Eleventy for static site generation, integrates multiple analytics and marketing tools including HubSpot and LinkedIn Insight, and employs best practices for performance and mobile optimization. The site is well-structured with comprehensive metadata and SEO optimizations. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a public security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which reduces transparency but is likely due to query limitations rather than malicious intent. Overall, Ookla's website demonstrates a high level of professionalism, security, and compliance, supporting its reputation as a trusted provider of network intelligence solutions.

A

Algolia

algolia.com

77

Algolia is a leading enterprise technology company specializing in AI-powered search and discovery infrastructure. Their platform enables enterprises and developers to deliver fast, relevant, and personalized search experiences. The company is positioned strongly in the technology sector with a comprehensive suite of AI search, recommendations, personalization, and analytics services. Their website reflects a mature digital presence with professional design, clear navigation, and extensive use of modern analytics and marketing tools. Privacy and cookie policies are comprehensive and GDPR compliant, demonstrating a commitment to user data protection. However, the absence of WHOIS registration details reduces transparency, though the overall brand presence and external links support legitimacy. Security posture is strong with HTTPS, security headers, and secure consent mechanisms, but the lack of a public security policy or vulnerability disclosure page suggests room for improvement.

I

Instabee

instabee.com

45

Instabee is a large European last-mile delivery company formed in 2022 by merging Budbee, Instabox, and Porterbuddy. It offers consumer-facing parcel delivery and return services across six countries, focusing on convenience and sustainability. The website is built on WordPress with modern optimization tools and is hosted behind Cloudflare DNS. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-branded with clear investor and partner relationships.

E

Environmental Systems Research Institute, Inc.

esri.com

82

Esri is a leading enterprise GIS software provider specializing in mapping and spatial analytics technology for business and government sectors. Their website demonstrates a mature digital presence with comprehensive content, professional design, and strong branding consistency. The company offers a broad range of GIS products and developer tools, positioning itself as a market leader in geospatial technology. Technically, the site leverages modern frameworks such as Adobe Experience Manager and Calcite Components, integrating advanced marketing and analytics tools including Adobe Analytics, Marketo, and Pardot. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a high level of professionalism and trustworthiness, though the lack of WHOIS transparency slightly impacts domain trust assessment.

The website swile.com currently presents minimal content, limited to a basic welcome message without any detailed business description, contact information, or policy documentation. The domain is well-established, created in 2009, and registered through Amazon Registrar, Inc., indicating a legitimate registration history. However, the lack of substantive content and metadata suggests the site may be under development or a placeholder. From a technical perspective, the site uses basic HTML with no detected scripts, forms, or external resources. Hosting appears to be via AWS DNS services. There is no evidence of advanced technology stacks, CMS platforms, or analytics tools. Mobile optimization and SEO are minimal due to the sparse content. Security posture is weak based on the provided data, with no visible security headers, no DNSSEC enabled, and no confirmation of HTTPS usage. The absence of privacy, cookie, and terms of service policies further reduces compliance and trustworthiness. No contact or incident response information is available, limiting transparency and user trust. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements should focus on enriching content, implementing security best practices, publishing compliance policies, and providing clear contact information to enhance trust and usability.

W

Winnin

winnin.com

71

Winnin is a technology company specializing in AI-powered cultural intelligence and video behavioral data analytics. Their platform provides brands with predictive insights to optimize cultural relevance and brand engagement in the attention economy. The company targets marketers and brand strategists, offering subscription-based services trusted by major global brands. Technically, the website is built on WordPress with modern tools such as Elementor and Yoast SEO, supported by multiple analytics and marketing integrations including Google Analytics, HubSpot, and Hotjar. The hosting infrastructure appears to leverage AWS DNS services. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy policy and terms of service present, but no cookie consent mechanism or explicit GDPR compliance statements. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is professional, content-rich, and trustworthy, with room for improvement in security and privacy transparency.

The website organica.com is currently a parked domain managed by GoDaddy.com, LLC, with no active business content or services presented. The page primarily serves as a placeholder to offer the domain for sale or acquisition. The business model is domain parking and resale, targeting domain investors or buyers. The site includes minimal branding and a Trustpilot widget as a trust signal but lacks substantive content or contact information. Technically, the site uses basic JavaScript, CSS, and third-party widgets such as Trustpilot and Google Adsense. It is hosted by GoDaddy and uses their parking infrastructure. The site shows basic mobile optimization and moderate performance but lacks advanced SEO or accessibility features. No CMS or complex frameworks are detected. From a security perspective, the site does not present HTTPS details in the provided content, lacks security headers, and DNSSEC is not enabled on the domain. No security policies, incident response contacts, or certifications are visible. The site does not collect user data or have forms, reducing attack surface but also limiting trust signals. Privacy and cookie policies are present but basic. Overall, the site poses low risk but also low business credibility due to lack of active content and contact information. Recommendations include enabling DNSSEC, improving security headers and HTTPS configuration, and providing clearer privacy and security policies to enhance trust and compliance.

R

rockfeller.com

rockfeller.com

50

The website rockfeller.com is a parked domain with minimal content, primarily serving advertising placeholders and related search iframes. There is no substantive business information, contact details, or interactive features. The domain is registered since 2002 with eNom, LLC and is not privacy protected, indicating a legitimate registration but the website itself does not represent an active business. The technical infrastructure relies on Bodis DNS and Google advertising services, with no advanced frameworks or CMS detected. Security posture is basic with no security headers or DNSSEC enabled, and privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site appears to be a placeholder or monetized domain rather than a functional business website.

N

NP Digital, LLC

neilpatel.com

74

Neil Patel's website represents a globally recognized digital marketing agency and resource hub, offering a comprehensive suite of services including SEO, paid media, content marketing, and analytics. The company holds a strong market position with an award-winning agency brand and proprietary marketing tools such as Ubersuggest and AnswerThePublic. The website targets businesses and marketers seeking to grow their online presence and revenue through advanced digital marketing strategies. Technically, the site is built on WordPress with modern SEO and analytics integrations, hosted with reputable providers and optimized for performance and mobile use. Security posture is solid with HTTPS, domain protections, and no evident vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

C

Clicksign

clicksign.com.br

67

Clicksign is a Brazilian technology company specializing in digital and electronic document signature solutions. Their platform automates the signing process, targeting businesses and professionals primarily in Brazil and Latin America. The website is multilingual, supporting Portuguese, Spanish, and English, reflecting a regional market focus. Clicksign positions itself as a leading SaaS provider in the digital signature space with a user-friendly and secure platform. The company emphasizes automation and legal compliance in document workflows. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools including HubSpot, Microsoft Clarity, Google Tag Manager, and Visual Website Optimizer. The site is well-optimized for SEO and mobile devices, with good performance and accessibility basics. Security best practices are observed with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by comprehensive privacy and cookie policies, including GDPR considerations. The lack of WHOIS data reduces domain trustworthiness but the professional website and marketing maturity suggest legitimate business operations. Overall, the site presents a trustworthy and professional digital signature service with room for improvement in transparency around security and contact information. Strategic recommendations include publishing a dedicated security policy and incident response information, establishing a vulnerability disclosure program, enhancing accessibility features, and maintaining regular audits of third-party scripts to mitigate risks. These steps will strengthen trust and compliance, supporting Clicksign's market position and customer confidence.

The website www.ifood.com.br is currently inaccessible due to a Web Application Firewall or security mechanism blocking access, as evidenced by the 'Access Denied' message and reference to an edgesuite.net error page. This prevents retrieval of any meaningful content, metadata, or business information directly from the site. The domain is hosted on Amazon AWS infrastructure, indicated by the AWS nameservers, suggesting a large-scale enterprise setup. The WHOIS data shows the domain is published and consistent with a legitimate business presence. Due to the lack of accessible content, no privacy, cookie, or security policies could be identified, nor any contact information or business descriptions. The site appears to be a major e-commerce platform based in Brazil, likely serving a large user base, but this cannot be confirmed from the blocked content.

S

Sankhya

sankhya.com.br

69

Sankhya is a Brazilian technology company specializing in enterprise resource planning (ERP) and business management solutions. Their website presents a comprehensive ecosystem designed to connect people, data, and results, aiming to automate processes and enhance business efficiency and strategic growth. The company targets business clients seeking integrated management software and services. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern CSS frameworks and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security-wise, the site enforces HTTPS and uses Cloudflare DNS, but lacks some explicit security headers and published security policies, which are areas for improvement. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business.

M

Meta

facebook.se

77

The website is the Swedish localized login portal for Facebook, a leading social networking platform owned by Meta Platforms, Inc. It serves as a gateway for users in Sweden to access Facebook's services, including social networking, messaging, and video content. The site reflects Meta's strong market position as a global technology leader with a comprehensive suite of social media products. The business model centers on user engagement and advertising revenue, targeting a broad general audience. The website's content is professionally presented, with consistent branding and clear navigation tailored for Swedish users. From a technical perspective, the site employs modern web technologies such as React and BigPipe for efficient content delivery and dynamic user experience. The infrastructure is hosted on Meta's own robust platform, ensuring high performance and availability. The site is optimized for mobile devices and accessibility, with good SEO practices and fast loading times. Security posture is strong, with HTTPS enforced, secure login forms, and implied security headers. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible on this page. Overall, the website is trustworthy, professionally maintained, and aligned with industry best practices. The domain is a subdomain of facebook.com, a well-established and legitimate domain owned by Meta. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Strategic recommendations include enhancing public visibility of security policies and incident response contacts to further strengthen user trust and compliance transparency.

V

Vattenfall Eldistribution AB

vattenfalleldistribution.se

66

Vattenfall Eldistribution AB operates as a major electricity distribution company in Sweden, serving over 900,000 businesses and private customers. The company focuses on providing reliable and efficient electricity network services, supporting the transition to a fossil-free future. Their website offers comprehensive information and digital services related to grid connections, subscriptions, billing, and outage information, targeting both private and business customers. The company is positioned as a key player in the Swedish energy sector with a strong brand presence and parent company affiliation to Vattenfall. Technically, the website is built using modern web technologies including Angular framework and integrates Microsoft Application Insights and Google Tag Manager for monitoring and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional user experience. Security best practices such as HTTPS and cookie consent mechanisms are implemented, although explicit security policies and incident response information are not published. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but the absence of WHOIS domain registration data for the domain 'www.vattenfalleldistribution.se' is a notable anomaly that reduces trust slightly. Overall, the website demonstrates a mature digital infrastructure and compliance with privacy regulations, supporting a trustworthy and user-friendly platform for energy distribution services. Strategic recommendations include publishing detailed security and incident response policies, providing vulnerability disclosure information, and clarifying domain registration details to enhance trust and transparency.

N

Nameshield

nameshield.net

84

Nameshield is a French-based company specializing in the security and management of strategic domain names and associated services. Positioned as a leading registrar certified under ISO 27001, the company offers a comprehensive suite of cybersecurity solutions including DNS protection, SSL/TLS certificates, DMARC implementation, and intellectual property protection. Their market position is reinforced by memberships in recognized cybersecurity organizations and certifications, highlighting a strong commitment to security and compliance. The website infrastructure is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and HubSpot, indicating a mature digital presence. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security best practices are observed, including HTTPS enforcement and cookie consent mechanisms, although there is room for improvement in public vulnerability disclosure and incident response contact transparency. The security posture is strong, supported by ISO 27001 certification and multiple cybersecurity memberships. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly available, which slightly reduces transparency but does not significantly detract from the overall legitimacy given the strong trust signals on the site. Overall, Nameshield presents a secure, professional, and trustworthy online presence suitable for enterprise clients seeking domain and cybersecurity services. Strategic recommendations include enhancing vulnerability disclosure policies and incident response contact clarity to further strengthen trust and compliance.

N

Nameshield

observatoiredesmarques.fr

79

Nameshield is a French-based company specializing in online brand protection and cybersecurity services with nearly 30 years of experience. The company offers a comprehensive suite of services including audits, domain name monitoring, legal recovery procedures, and cybersecurity certifications such as ISO 27001. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site leverages WordPress CMS with modern analytics and marketing tools including Google Analytics, HubSpot, and Plezi, ensuring effective user tracking and engagement. Security posture is strong with HTTPS enforcement and ISO 27001 certification, though some security headers could be improved. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. However, the absence of WHOIS registration data for the domain reduces trustworthiness from a domain legitimacy perspective. Overall, the site presents a credible and professional front for a specialized technology service provider.

E

ennit GmbH

ennit.net

57

ennit GmbH is a well-established German IT services company specializing in flexible, secure, and sustainable IT infrastructure solutions. With over 20 years of experience, they serve medium to large enterprises across various sectors including technology, banking, trade, and services. Their offerings include virtual data centers, managed IT services, cybersecurity solutions compliant with EU directives such as NIS2, and innovative green IT powered by renewable energy. The company emphasizes compliance with multiple certifications including ISO 27001, PCI DSS, and IDW PS 951, positioning itself as a trusted IT partner in Germany. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as Swiper.js and WOW.js for enhanced user experience. The site is mobile-optimized with good SEO practices, although some accessibility features could be improved. Hosting appears to be geo-redundant within Germany, supporting their claims of data sovereignty and security. From a security perspective, the site enforces HTTPS and demonstrates strong adherence to recognized security standards and certifications. However, there is room for improvement in implementing security headers, cookie consent mechanisms, and providing explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Overall, ennit GmbH presents a professional, trustworthy, and compliant digital presence aligned with its business goals. Strategic enhancements in privacy compliance and security transparency would further strengthen their security posture and customer trust.

D

Delius Klasing Verlag GmbH

modellfahrzeug.de

56

The website www.modell-fahrzeug.com is a professionally designed media publishing platform operated by Delius Klasing Verlag GmbH, focusing on model vehicles, model cars, and related hobbies. It offers rich editorial content, news, interviews, and integrates e-commerce services for subscriptions and product sales. The target audience includes hobbyists, collectors, and enthusiasts of model vehicles. The site demonstrates a mature digital infrastructure using modern web technologies such as React, Next.js, and Shopify for commerce integration. It is mobile-optimized and provides a good user experience with clear navigation and professional branding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement in security posture. The WHOIS data for the domain is unavailable, indicating the domain may be unregistered or there is an issue with WHOIS data retrieval, which raises concerns about domain legitimacy that should be verified. Overall, the website is a credible and trustworthy media platform with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and clarifying domain registration status to strengthen trust and compliance.

D

domainname.de

fuelish.de

58

The website is a professional domain brokerage landing page offering the domain fuelish.de for sale. It emphasizes secure payment processing, escrow transaction handling, and fast domain transfer services. The platform targets individuals and businesses seeking premium domains, positioning itself as a trusted intermediary with verified and premium domain badges. Technically, the site uses modern web technologies including Bootstrap and Google reCAPTCHA to ensure usability and security. The security posture is solid with HTTPS and spam protection, though some security headers are not explicitly detected. Privacy compliance is supported by clear links to privacy and terms policies, though no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, with a moderate to good technical and security maturity.

The Deutscher Oldtimer Club operates a membership platform focused on classic and vintage car enthusiasts in Germany, offering exclusive partner discounts and services. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, it uses LivingLogic CMS with standard web technologies and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though security headers are missing and could be improved. The absence of WHOIS data limits domain trust verification but the site content and partner ecosystem support legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism.

B

Bremen Classic Motorshow

classicmotorshow.de

55

Bremen Classic Motorshow is a well-established event organizer specializing in classic and vintage vehicle exhibitions held annually in Bremen, Germany. The website serves as a comprehensive information portal for visitors, exhibitors, and enthusiasts, showcasing event details, registration, and thematic content. The business holds a strong market position within the classic vehicle community, attracting tens of thousands of visitors and hundreds of exhibitors from multiple countries. Technically, the website is built on WordPress with Elementor and integrates modern web technologies including Gravity Forms and Swiper.js for interactive content. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are absent. Overall, the site demonstrates professionalism and strong user experience but would benefit from enhanced compliance documentation and explicit contact details.

A

Allgemeiner Deutscher Automobil-Club e.V.

adac.de

71

The Allgemeiner Deutscher Automobil-Club (ADAC) is a well-established German automobile club providing a wide range of services including membership benefits, insurance products, travel planning, vehicle leasing, and roadside assistance. The website serves as a comprehensive portal for these services, targeting automobile owners, travelers, and insurance customers primarily in Germany. ADAC holds a strong market position as a leading mobility service provider with a large membership base and multiple subsidiaries supporting its operations. Technically, the website employs modern web technologies such as React and Webpack, with a focus on performance, accessibility, and mobile optimization. The use of Kameleoon indicates active engagement in personalization and A/B testing to enhance user experience. Hosting appears to be managed by a reputable provider, and the site uses HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, ADAC demonstrates good practices including HTTPS enforcement, security headers, and secure form implementations. However, there is no explicit public vulnerability disclosure policy or incident response contact, which could be improved to enhance transparency and readiness. Privacy compliance is strong with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and secure, supporting ADAC's business credibility and user trust. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and continuous security audits of third-party scripts to maintain and improve security posture.

Oldtimer Youngtimer App is a German-based niche website dedicated to classic and vintage vehicles, providing a comprehensive database of museums, workshops, dealers, and events related to Oldtimer and Youngtimer vehicles. The site operates on a free model supported by partner advertising and sponsorships, targeting enthusiasts and the general public interested in classic automobiles. The website is built on WordPress CMS with a moderate technical infrastructure including common plugins and Google Analytics for tracking. The content is well-structured, primarily in German, and regularly updated with blog articles and news. Security posture is basic with HTTPS enabled and reCAPTCHA implemented, but lacks advanced security headers and cookie consent mechanisms. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and serves its niche well but would benefit from improved security and privacy compliance measures.

D

Dohna & Dombert GmbH

classicindex.eu

36

classicindex.eu is a German-language online portal dedicated to classic vehicle enthusiasts, operated by Dohna & Dombert GmbH. The website provides news, articles, and resources related to classic cars, targeting hobbyists, collectors, and automotive fans. It maintains a niche position in the classic automotive media sector, offering advertising opportunities and event information. The site is built on WordPress with specialized plugins for directory listings and advertising management. The technical infrastructure includes modern web technologies such as Bootstrap 5 and FontAwesome, with Matomo analytics for user tracking. Security posture is moderate with HTTPS enforced but lacks comprehensive security headers and cookie consent mechanisms. Business credibility is supported by legal disclosures and consistent branding, though direct contact details are limited on the main site. Overall, the site is functional, content-rich, and serves its target audience effectively.

L

Lebenshilfe Gießen e.V.

oldtimerspendenaktion.de

38

Lebenshilfe Gießen e.V. operates the Oldtimerspendenaktion, a well-established charitable campaign running for over 31 years in Germany. The organization supports people with disabilities through various social services and fundraising initiatives involving classic and youngtimer vehicle donations. The website reflects a mature non-profit with consistent branding, clear communication, and a focus on community engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-positioned within its niche.

W

Württembergische Versicherung AG

wuerttembergische.de

69

Württembergische Versicherung AG operates as a well-established insurance provider in Germany, focusing on comprehensive insurance products for private individuals including liability, legal protection, occupational disability, and accident insurance. The company maintains a strong market position supported by consistent branding and trust indicators such as TÜV certification and membership in the German Insurance Association (GDV). The website is professionally designed with excellent content quality, targeting private customers effectively. Technically, the site employs modern web technologies including Google Tag Manager and Usercentrics for consent management, hosted on Ecotel infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.

M

MO Medien Verlag GmbH

mo-web.de

56

MO Medien Verlag GmbH operates the website mo-web.de, a well-established German motorcycle magazine publisher with over 40 years of history. The website serves as a digital platform for their print and digital magazines, targeting motorcycle enthusiasts ranging from sport riders to new entrants. Their business model centers on publishing, digital epaper sales, and advertising. The company maintains a professional online presence with consistent branding and quality content. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and frameworks to deliver a responsive and SEO-optimized experience. Security posture is solid with HTTPS, consent management, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy, professional, and well-maintained.

TÜV SÜD is a globally recognized enterprise specializing in testing, certification, auditing, and consulting services primarily for industries such as energy, manufacturing, transport, and real estate. The company positions itself as a trusted partner ensuring quality, safety, and sustainability for its clients. The website reflects this with professional design, comprehensive content, and clear navigation targeting business customers and industry professionals. Technically, the website employs a modern infrastructure including Sitecore CMS, Google Tag Manager, Adobe Tag Manager, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital presence. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS, implements key security headers, and manages user consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response and vulnerability disclosure policies are not publicly available, which could be improved to enhance transparency and security posture. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. The absence of WHOIS data limits domain registration trust analysis but does not detract from the evident legitimacy and professionalism of the site.

G

GTÜ Gesellschaft für Technische Überwachung mbH

gtue.de

50

GTÜ Gesellschaft für Technische Überwachung mbH is a leading German organization specializing in official vehicle inspections, technical services, damage assessment, and certification. It holds a strong market position as the largest officially recognized supervisory organization for freelance automotive experts in Germany. The website is professionally designed, content-rich, and targets both private and business customers with a broad portfolio of services including vehicle inspections, technical services, building inspections, and certification. The company operates several subsidiaries and maintains a robust digital presence with social media and partner portals. Technically, the website uses modern technologies including Google Tag Manager and Usercentrics for consent management, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

R

Robert Bosch GmbH

bosch.de

69

Robert Bosch GmbH operates the website bosch.de, providing comprehensive information about its products, services, corporate news, and career opportunities primarily for the German market. The company is a large multinational enterprise with a strong market position in manufacturing, mobility solutions, and home appliances. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting both general consumers and business customers. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent components, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration is consistent with Bosch's corporate infrastructure, and the website reflects a high level of professionalism and trustworthiness.

TAK Akademie Deutsches Kraftfahrzeuggewerbe is a German company specializing in providing seminars, eLearning, and software solutions tailored for the automotive trade sector. The company offers a range of educational services including inhouse training, certification courses, and software tools to support automotive professionals. Their market position is supported by ISO 9001 certification and partnerships with recognized automotive trade organizations such as ZDK. The website is professionally designed with consistent branding and clear navigation, targeting automotive industry professionals in Germany. Technically, the website is built on a mature ASP.NET Web Forms platform with JavaScript and CSS for interactivity and styling. The site is mobile optimized and SEO friendly, though it lacks modern security headers and cookie consent mechanisms. Hosting details are limited but the domain uses German domain discount name servers. No analytics or tracking scripts were detected in the provided content, indicating a privacy-conscious approach or limited tracking. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers were found in the provided data. Forms use hidden validation tokens, which is a positive security practice. However, the absence of a cookie consent banner and incident response contact details are gaps in compliance and security transparency. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional image with a solid business model focused on automotive education and software. Security posture is moderate with room for improvement in headers and compliance. The risk level is low, but implementing recommended security and privacy enhancements would strengthen trust and regulatory adherence.

M

Messe Friedrichshafen GmbH

klassikwelt-bodensee.de

62

KLASSIKWELT BODENSEE is a well-established classic mobility trade fair hosted by Messe Friedrichshafen GmbH in Germany. The website serves as an information portal for the event scheduled for June 12-14, 2026, targeting classic vehicle enthusiasts, exhibitors, and visitors. The business operates in the transportation sector, focusing on classic vehicles on land, water, and air, with a medium-sized organizational scale. The website demonstrates a professional design with consistent branding and good content quality, providing detailed event highlights and partner information. Technically, the site uses modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, with a responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and basic security headers, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

DEUVET Bundesverband Oldtimer – Youngtimer e.V. is a German non-profit association dedicated to classic and youngtimer vehicle enthusiasts. The website serves as a portal for members and the public to access news, membership information, and advocacy resources related to historic mobility in Germany. The association positions itself as a national representative body for clubs and individuals interested in preserving automotive heritage. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Bootstrap, and Font Awesome. It is hosted on 1und1 servers, with a moderate performance profile and good mobile optimization. The site includes a member area and social media integration, primarily Facebook, but lacks advanced marketing or tracking tools. From a security perspective, the site uses HTTPS but lacks important security headers and a formal vulnerability disclosure policy. Privacy compliance is limited, with no visible cookie consent or GDPR-specific mechanisms. Contact information is primarily via contact forms, with no explicit emails or phone numbers published. The WHOIS data is minimal but consistent with the hosting provider, indicating a legitimate domain. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent contact information to increase trust and user confidence.

A

Automobilclub von Deutschland (AvD)

avd.de

69

AvD (Automobilclub von Deutschland) is a historic and established automobile club in Germany, founded in 1899. The organization offers a broad range of services including roadside assistance, towing, insurance products, and membership benefits targeted at automobile owners and drivers. The website reflects a mature digital presence with modern technologies such as Next.js and React, and implements comprehensive privacy and cookie consent mechanisms compliant with GDPR. The brand maintains consistent messaging and trust indicators aligned with its long-standing market position. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, AvD demonstrates a solid business and technical foundation with room for enhanced transparency in security and contact information.

D

die NetzWerkstatt GmbH & Co. KG

die-netzwerkstatt.de

51

die NetzWerkstatt GmbH & Co. KG is a well-established web development and digital agency based in Schleswig-Holstein, Germany, operating since 2002. The company specializes in creating professional websites using TYPO3 and WordPress CMS, alongside offering web applications, database and interface programming, SEO, online marketing, and classic advertising services. Their target audience includes businesses and municipal clients, with a strong focus on E-Government solutions and full-service digital and print media. The company maintains a strong market position in northern Germany with a client base of approximately 900 customers across Europe. Technically, the website is built on WordPress 6.8.3 with the Enfold theme, utilizing modern web technologies such as jQuery and SVG graphics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented via JSON-LD. Hosting is inferred to be managed via ennit.net nameservers. Performance is moderate with good mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms denying ad personalization and storage by default. However, explicit privacy policies, terms of service, and security.txt files are missing, and security headers are not explicitly detected. The WHOIS data is consistent with the website's claims, showing no privacy protection and a domain age appropriate for the business history. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy compliance and explicit security policies. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and adding vulnerability disclosure mechanisms.