Security Directory

V

Volvo Car Retail

volvocarretail.se

67

Volvo Car Retail is a prominent automotive retailer in Sweden specializing in new and used vehicles from Volvo, Polestar, and Lynk & Co. The company offers a comprehensive range of services including vehicle sales, leasing, financing, and after-sales servicing. The website reflects a mature digital presence with professional branding, clear navigation, and extensive content tailored to both private and corporate customers. Technically, the site employs modern web technologies such as AngularJS, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data for the queried domain is a concern but likely due to querying the full subdomain rather than the base domain. Overall, the site demonstrates high professionalism and trustworthiness with minor areas for security enhancement.

S

SharpSpring

sharpspring.com

64

SharpSpring is a well-established SaaS company providing a comprehensive marketing automation and CRM platform primarily targeting agencies and small to medium-sized businesses. The platform integrates sales automation, email marketing, social media management, and campaign tracking into a unified solution designed to fuel revenue growth. Positioned as an affordable alternative to leading competitors, SharpSpring benefits from its parent company Constant Contact's backing, enhancing its market credibility and reach. The website reflects a mature digital presence with rich content, clear navigation, and strong branding consistency.

The website www.radissonhotels.com/en-us/brand/radisson-blu is currently inaccessible due to an access denied error page, likely caused by a web application firewall or security mechanism. This prevents any meaningful extraction of business, technical, or security information from the site. The WHOIS lookup for the domain also failed to return any registrar or registration details, indicating either privacy protection or data unavailability. Consequently, the domain's legitimacy and trustworthiness cannot be fully assessed. The lack of accessible content and metadata severely limits the ability to evaluate the website's technical infrastructure, security posture, or compliance status.

S

Switzerland Cheese Marketing AG

switzerlandcheesemarketing.com

65

Switzerland Cheese Marketing AG operates a professional website dedicated to promoting Swiss cheeses internationally. The organization targets media representatives and consumers, providing detailed information about Swiss cheese varieties and marketing activities. The website is built on TYPO3 CMS and integrates modern technologies such as Usercentrics for cookie consent and Sentry for error monitoring, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and includes multilingual support, enhancing user experience and accessibility. Security practices include HTTPS enforcement and consent management, though additional security headers could improve the security posture. The absence of WHOIS data for the domain is a notable concern, suggesting either a recent registration or restricted WHOIS information, which warrants further verification. Overall, the website presents a trustworthy and professional front for the organization, with clear contact information and active social media engagement.

I

Intersim AG

intersim.ch

65

Intersim AG is a Swiss digital agency specializing in innovative and customized web solutions using technologies such as PHP, .NET, and .NET Core. The company serves a diverse clientele including public sector entities and private organizations, positioning itself as a reliable partner for digital transformation projects. Their offerings span consulting, development, operation, and support, with a focus on quality and user experience. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website employs modern frameworks and technologies, including TYPO3 CMS, nopCommerce for digital commerce, and integrates AI capabilities through their Intersim AI product. The site is mobile-optimized, uses Vimeo for video content, and incorporates Google Tag Manager and Usercentrics for analytics and consent management, indicating a well-rounded digital infrastructure. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses Google reCAPTCHA to protect forms. Consent management is handled professionally, supporting GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Intersim AG's website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy digital platform. Strategic recommendations include publishing explicit security policies, enhancing incident response visibility, and maintaining vigilance on third-party scripts to sustain security posture.

Facebook Video is a key component of Facebook's social media platform, offering users a place to watch videos, reels, and original shows. As part of Meta Platforms, Inc., it holds a leading position in the global technology and media industry, leveraging a robust advertising-based business model. The platform targets a broad general audience with a focus on video content consumption and social engagement. Technically, the site employs modern web technologies including React and advanced JavaScript frameworks, ensuring fast performance, excellent mobile optimization, and good accessibility. Security measures are strong, with HTTPS enforcement and comprehensive security headers, reflecting a mature security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, with extensive user tracking aligned with its advertising business model.

U

UBIQ AG

ubiq.swiss

49

UBIQ AG is a Swiss-based small design agency specializing in web design, graphic design, brand design, product design, and webshop development. The company showcases a portfolio of projects for various clients, indicating a focus on regional business customers seeking professional digital and creative services. The website is built on Joomla CMS and employs a modern JavaScript technology stack including jQuery, Swiper, and Matomo analytics, reflecting a moderate level of digital maturity. While the site design and user experience are good, there is room for improvement in accessibility and SEO optimization. Security posture is moderate; HTTPS is used, but no DNSSEC or security headers are detected, and privacy compliance is lacking due to absence of privacy and cookie policies. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website is professional but could enhance trust and compliance by adding privacy policies, security headers, and contact information.

The website your-server.de serves primarily as a login portal for konsoleH, a server and account management interface likely associated with a hosting service provider. The site targets existing customers who manage their hosting accounts and webmail services. The business model revolves around providing server hosting and account administration services, with a technical infrastructure apparently hosted or supported by Hetzner, a known German hosting provider. The site content is minimal, focusing on login functionality without broader marketing or informational content. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS detected. The site lacks HTTPS on the main domain, which is a significant security shortfall. Mobile optimization and accessibility are minimal, and SEO practices are poor. External links point to related subdomains and Hetzner documentation, indicating some integration with the hosting provider's ecosystem. Security posture is weak due to the absence of HTTPS and security headers, exposing users to potential risks during login. No privacy, cookie, or terms of service policies are present, indicating non-compliance with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency and trust. WHOIS data shows partial consistency but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website presents a basic, functional login portal with critical security and compliance gaps. Strategic improvements in SSL implementation, privacy compliance, and security best practices are essential to enhance trust and protect user data.

D

Delius Klasing Verlag GmbH

delius-klasing.de

61

Delius Klasing Verlag GmbH is a well-established German publishing company specializing in books, magazines, and events focused on watersports, cycling, and automobiles. Founded in 1911 and part of Mediengruppe KLAMBT, it serves a niche audience of enthusiasts and professionals in these sectors. The website reflects a mature digital presence with a modern tech stack including Next.js and React, supported by cloud-based image hosting and a consent management platform. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive policies and consent mechanisms, although some security headers are not explicitly detected. No critical vulnerabilities or suspicious elements were found. Overall, the site demonstrates high trustworthiness and business credibility.

I

Internet Invest, Ltd. dba Imena.ua

leafletjs.com

53

Leaflet is a well-established open-source JavaScript library specializing in mobile-friendly interactive maps. It holds a leading position in the mapping technology sector, serving developers and organizations requiring lightweight, extensible mapping solutions. The project is community-driven with a strong presence on GitHub and trusted by major technology companies. The website reflects a professional, well-maintained digital presence with excellent content quality and user experience. Technically, the site leverages modern web technologies including JavaScript, CSS, and HTML5, integrating third-party services such as OpenStreetMap and Mapbox for map tiles. The infrastructure is performant and optimized for both desktop and mobile platforms. However, there is room for improvement in security practices, particularly in enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. No contact information or incident response channels are provided, which limits transparency in security governance. The absence of privacy and cookie policies also indicates gaps in compliance with data protection regulations. Overall, the website is trustworthy and professionally managed but would benefit from enhanced security and privacy compliance measures to reduce risk and improve user trust.

B

Bundesministerium für Forschung, Technologie und Raumfahrt

forschung-fachhochschulen.de

64

The website 'Forschung an Fachhochschulen' is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF). It serves as an information hub for research activities at universities of applied sciences (HAW) in Germany, providing news, funding opportunities, project details, and service information. The site targets researchers, academic institutions, and policymakers interested in applied research. The business model is government-funded dissemination and promotion of research programs. The site maintains a good level of content quality, professional design, and consistent branding, reinforcing its authoritative position in the government research sector. Technically, the website is built using the Government Site Builder CMS, with a modern tech stack including HTML5, CSS3, and JavaScript. It is hosted likely by ITZBund, a federal IT service provider, and shows good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no major issues detected. The site uses Matomo analytics with anonymized data collection and a clear cookie consent mechanism, demonstrating good privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent for tracking. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows partial consistency with the government affiliation, with no suspicious patterns. Overall, the security posture is solid but could be improved by adding security headers and formal incident response information. The overall risk assessment is low, with the site being trustworthy and professionally maintained. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer incident response contacts to further strengthen trust and compliance.

The Bundesministerium für Forschung, Technologie und Raumfahrt (BMFTR) is the official German federal ministry responsible for research, technology, and space affairs. The website serves as a comprehensive information portal targeting the general public, researchers, educational institutions, and government stakeholders. It provides extensive content on education, research initiatives, technological innovation, and space programs, positioning itself as a key government entity in these sectors. The site is professionally designed with consistent branding and clear navigation, supporting both German and English languages to cater to a broad audience. Technically, the website is built on the Government Site Builder CMS, a specialized platform for German federal administration websites. It employs modern web technologies including responsive CSS for mobile optimization, JSON-LD structured data for semantic clarity, and accessibility features such as ReadSpeaker for text-to-speech. Hosting is likely managed within the German academic network infrastructure, ensuring reliability and compliance with government standards. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. It implements a cookie consent mechanism compliant with GDPR, offering users control over statistical and external media cookies. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively supports the ministry's mission to disseminate information and engage with its audience. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and adding a vulnerability disclosure policy to enhance transparency and security posture.

D

Deutsches Jugendherbergswerk (DJH)

jugendherberge.de

69

The website www.jugendherberge.de represents the Deutsches Jugendherbergswerk (DJH), a large and established non-profit organization operating a network of approximately 400 youth hostels across Germany. The site targets families, school groups, youth groups, and solo travelers, offering affordable accommodation and specialized travel programs. The business model focuses on hospitality and group travel services with a strong emphasis on inclusivity and community experience. Technically, the site is built on TYPO3 CMS, employs modern JavaScript frameworks like Vue.js for interactive components, and integrates analytics and consent management tools such as Matomo, Google Tag Manager, and Usercentrics CMP. The website is mobile-optimized, accessible, and SEO-friendly with structured data markup.

A

Azul

azul.de

66

Azul is a specialty coffee roastery based in Bremen, Germany, focusing on high-quality coffee roasting, retail sales, and coffee education. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern plugins such as WPBakery Page Builder, Slider Revolution, and Borlabs Cookie for cookie consent management. SEO is enhanced with Rank Math, and analytics are conducted via Matomo, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit security headers and privacy policies are missing. The site is accessible without any WAF or security challenges, and no adult or questionable content is present, making it safe for general audiences. Contact information is primarily via a contact form, with no explicit emails or phone numbers found in the HTML content. WHOIS data is minimal but does not raise suspicion, though more detailed registrant information would improve trust. Overall, Azul's website is a solid representation of a small specialty coffee business with room for improvement in privacy compliance and security best practices.

N

nordmedia - Film- und Mediengesellschaft Niedersachsen/Bremen mbH

nordmedia.de

54

nordmedia is a regional media funding organization serving the German states of Niedersachsen and Bremen. Established in 2001, it plays a central role in supporting and developing the local film and media industry through funding programs, events, and advisory services. The website reflects a mature and professional digital presence with comprehensive content tailored to its target audience of media professionals and filmmakers. Technically, the site uses modern web standards and privacy-respecting analytics (Matomo), with good mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy and well-aligned with its business purpose.

R

Reishunger

reishunger.de

66

Reishunger is a German-based e-commerce company specializing in rice products, digital rice cookers, kitchen accessories, and related cooking ingredients. The website targets consumers interested in diverse rice varieties and cooking solutions, offering a broad product catalog and recipe content. The company positions itself as a premium provider with over 10 years of expertise and a strong customer base, supported by high Trusted Shops ratings. Technically, the website employs modern JavaScript frameworks like Alpine.js, uses Cloudflare for DNS and CDN services, and integrates YouTube APIs and Swiper.js for enhanced user experience. The site is mobile-optimized and performs well with fast loading times. Security-wise, HTTPS is enforced, and basic security best practices are observed, though explicit security headers like Content-Security-Policy are not clearly present. Privacy compliance is moderate, with cookie consent mechanisms but no explicit privacy or terms of service pages found in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.

J

John Will Kommunikation

will-kommunikation.de

39

John Will Kommunikation is a small, experienced communication consultancy based in Germany, specializing in tailored communication strategies for brands, markets, and people. With over 25 years of experience, the company offers a range of services including media relations, crisis communication, media training, and social media management. The website reflects a professional and consistent brand image, targeting corporate clients across various sectors in the German-speaking region. Technically, the site is built on WordPress with common plugins and libraries, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

U

Universität Bremen

uni-bremen.de

64

The Universität Bremen website serves as the official digital presence of a medium-sized German university with approximately 20,000 students. It offers a broad range of academic programs including bachelor, master, and legal state examinations, and is recognized as an Excellence University since 2012. The site targets students, researchers, international visitors, and partners, providing comprehensive information on study programs, research, and university services. Technically, the site is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the university's identity and history.

S

swb

swb.de

67

swb is a regional energy and telecommunications provider based in Bremen, Germany, offering a broad range of utility services including electricity, natural gas, water, heating, IT, and telecom solutions. The company positions itself as a key regional player serving private customers with a comprehensive portfolio. The website reflects a mature digital presence with professional design, clear navigation, and GDPR-compliant cookie consent mechanisms. Technically, the site employs modern tools such as Google Tag Manager and Cookiebot for analytics and consent management, hosted on a regional German provider's infrastructure. Security posture is adequate with HTTPS enforced and CSRF protections indicated, though additional security headers and explicit incident response policies are absent. Overall, the site demonstrates good privacy compliance and business credibility, though opportunities exist to enhance transparency and security documentation.

G

Gastivo

gastivo.de

55

Gastivo operates as a leading digital ordering platform tailored for the gastronomy sector in Germany, facilitating streamlined procurement between restaurants and suppliers. The website is built on a WordPress CMS with Elementor, indicating a modern and flexible technical infrastructure. The platform demonstrates good design quality, mobile optimization, and SEO practices, supporting a positive user experience for its target audience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information, which could be improved to enhance trust and compliance. Privacy and cookie policies are absent, representing a compliance gap under GDPR regulations. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to strengthen its risk profile.

C

CEWE

cewe.de

62

CEWE operates a large-scale e-commerce platform specializing in personalized photo products such as photobooks, calendars, greeting cards, and photo gifts. The website targets a broad consumer audience primarily in Germany and other German-speaking countries, offering a comprehensive range of photo printing services. The company is positioned as a leading European photo service provider with a strong brand presence and consistent digital branding across its platforms. Technically, the website employs modern web technologies including ES modules, custom web components, and advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. The site demonstrates extensive user tracking for marketing and analytics purposes, balanced with a consent management platform to address privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience, though it could improve transparency around privacy and security policies.

I

i2 Ethics

i2-ethics.com

65

i2 Ethics is a Spanish-based compliance service provider specializing in anonymous whistleblowing channels and compliance with ENS and ISO 27001 standards. The company positions itself as an experienced niche player with over 10 years of expertise, targeting businesses requiring secure and compliant reporting mechanisms. The website is professionally designed using WordPress with modern technologies such as TailwindCSS and Cookiebot for cookie consent management. Hosting and domain registration are managed via Cloudflare, ensuring reliable infrastructure and security. Security posture is strong with HTTPS enforced and security headers present, though DNSSEC is not enabled and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Contact is available via a web form but lacks direct emails or phone numbers. Overall, the website is trustworthy, secure, and well-positioned for its market segment but could improve transparency and compliance documentation.

The website opticksprotection.com currently presents minimal content, consisting solely of a placeholder message with no substantive information about the business, services, or contact details. The domain is registered with a reputable registrar, NameSilo, LLC, and is approximately two years old, which aligns with a recently established business. However, the lack of meaningful content and absence of metadata or structured data indicate the site is either under development or inactive. From a technical perspective, the website lacks any detectable technologies, scripts, or frameworks. There are no security headers or advanced SSL configurations observed, and DNSSEC is not enabled, which could be improved to enhance domain security. The site does not implement privacy or cookie policies, nor does it provide any contact or incident response information, limiting its compliance with privacy regulations such as GDPR. Security posture is weak due to the absence of standard security best practices and policies. No vulnerabilities or malicious indicators were detected, but the lack of security features and policies reduces trustworthiness. Overall, the website poses a low risk but also offers minimal assurance or transparency to visitors or customers. Strategic recommendations include enabling DNSSEC, implementing security headers, adding privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance. Until the website content is developed and these improvements are made, the site remains of limited business and security value.

S

Statcounter

statcounter.com

60

Statcounter is a well-established web analytics service founded in 2000, providing real-time visitor tracking, session replay, heatmaps, and Google Ads integration. It targets business owners and marketers seeking easy-to-use analytics tools and is trusted by over 1.5 million websites worldwide. The website is professionally designed with excellent content quality and clear navigation, supporting a SaaS business model with free trials and paid plans. Technically, the site uses modern JavaScript libraries including jQuery and Google Analytics scripts, hosted with Cloudflare DNS and a reputable registrar. Performance and mobile optimization are good, with SEO and accessibility features well implemented. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNSSEC, security headers, and cookie consent mechanisms. The domain registration is consistent with the business history and shows no suspicious patterns. Overall, the site demonstrates a mature digital presence with room for enhanced privacy compliance and security best practices.

Studio15 Design srl unipersonale is a small Italian design studio established in 2003, specializing in graphic design, architectural projects, and educational lectures. The company serves a diverse clientele ranging from large enterprises to startups, emphasizing creativity and concrete project realization. The website presents basic content primarily in Italian, with a minimalistic design and limited technical sophistication. The digital infrastructure is simple, relying on static HTML and CSS without advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS and absence of security headers or policies. No privacy or cookie policies are present, and contact information is limited to a physical address displayed in a tooltip. Overall, the website reflects a small business with modest online presence and limited digital maturity.

M

Mind@Ware Srl

mind-ware.it

53

Mind@Ware Srl is a well-established Italian technology company founded in 2003, specializing in innovative IT solutions including 3D retail projects, software and web development, IT managed services, and digital heritage initiatives. The company positions itself as a responsible and innovative partner for businesses seeking advanced technological solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on ethical professionalism and innovation. Technically, the site is built on Drupal 8, uses modern libraries and frameworks, and integrates Google Analytics and Tag Manager with privacy-conscious configurations. Security posture is strong with HTTPS and DNSSEC enabled, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes company domain email and phone numbers. Overall, the website and domain data indicate a credible and trustworthy business presence.

F

Fastly

polyfill-fastly.net

63

Fastly Polyfill is a specialized web service provided by Fastly, designed to deliver only the necessary polyfills required by a user's web browser, enhancing web compatibility and performance. The service targets web developers and technology professionals who need efficient browser feature support. The website is well-branded and consistent with Fastly's corporate identity, linking to official privacy and terms pages and providing a GitHub repository for transparency and community engagement. Technically, the site uses modern web technologies including JavaScript and Pico CSS for a responsive and accessible user experience. Hosting and domain registration align with Fastly's infrastructure, indicating a legitimate and professionally managed service. Security posture is good with HTTPS enforced, though explicit security headers and policies are not visible on this page. Privacy compliance is supported by links to comprehensive Fastly privacy policies, though no cookie consent mechanism is present on this specific service page. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Complianz B.V.

complianz.io

74

Complianz B.V. operates a leading privacy compliance platform specializing in WordPress and Shopify plugins and apps, trusted by over one million users globally. Their offerings focus on GDPR, ePrivacy, CCPA compliance, and cookie consent management, positioning them as a key player in the privacy technology sector. The company is based in the Netherlands and has been active since 2018, demonstrating a mature and stable market presence. Their website reflects a professional and user-friendly design, with comprehensive legal documentation and strong trust signals such as positive user reviews and a money-back guarantee. Technically, the website is built on WordPress using Elementor and integrates multiple modern technologies including Easy Digital Downloads for e-commerce, MonsterInsights for analytics, and Google Tag Manager for marketing. The site is well-optimized for performance, mobile responsiveness, SEO, and accessibility. Security practices include HTTPS enforcement and consent management, though there is room for improvement in DNSSEC and security headers. From a security perspective, the site shows a good posture with no detected vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response information and lack of a vulnerability disclosure program are areas for enhancement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Complianz.io presents a trustworthy, professional, and technically sound online presence with a strong focus on privacy compliance solutions. Strategic improvements in security transparency and DNS security would further strengthen their position and trustworthiness.

H

Hextom Inc

hextom.com

61

Hextom Inc is a Toronto-based SaaS company specializing in software products designed to enhance e-commerce businesses, particularly those using Shopify and BigCommerce platforms. With a strong market presence as a top-rated Shopify partner trusted by over 270,000 merchants, Hextom offers a suite of apps focused on marketing, sales optimization, and store management. Their business model revolves around providing scalable SaaS solutions that help online merchants increase sales and streamline operations. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. Hosting is provided via Amazon AWS, ensuring reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS and has domain status protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. The absence of a visible privacy policy and terms of service on the homepage is a compliance gap. Google Analytics is present but not fully configured, indicating room for improvement in analytics deployment. Overall, Hextom presents a credible and professional online presence with a solid business foundation. Strategic improvements in security headers, DNSSEC, and privacy documentation would strengthen their security posture and compliance standing.

J

Jaguar Land Rover Classic

jaguarlandroverclassic.com

68

Jaguar Land Rover Classic operates as the official heritage and classic vehicle division of Jaguar Land Rover, focusing on preserving, restoring, and maintaining classic Jaguar and Land Rover vehicles. The business offers a range of services including bespoke vehicle builds, continuation models, servicing, restorations, parts supply, and lifestyle merchandise. The website reflects a premium brand image consistent with its market position and targets classic car enthusiasts and collectors globally, primarily in the UK and Europe. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates essential tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data is a notable anomaly that requires further investigation but does not detract from the overall professional presentation and trust signals on the site.

Grafik Werkstatt operates a professional German-language e-commerce website specializing in greeting cards, calendars, gifts, and related products. The site targets general consumers seeking occasion-specific cards and gifts, offering a well-structured catalog and a B2B shop variant. Technically, the website is built on Magento CMS, leveraging RequireJS, jQuery, and Owl Carousel for frontend interactivity, with integrations for Google Analytics and Facebook Pixel for marketing and tracking. The hosting is managed via kasserver.com, and the site enforces HTTPS with a cookie consent mechanism, indicating GDPR awareness. However, explicit privacy policies and terms of service are not found in the provided content, which is a compliance gap. Security posture is moderate with SSL enabled but lacking security headers and vulnerability disclosure policies. Overall, the website is safe, professional, and trustworthy for general audiences.

G

Gourmet Berner

gourmetberner.de

74

Gourmet Berner is a German e-commerce business specializing in gourmet food products such as spices, antipasti, liqueurs, and gift baskets. The website positions itself as a strong brand for fine gourmet items, targeting general consumers interested in high-quality culinary products. The business operates on the Shopify platform, leveraging its robust e-commerce infrastructure and integrations with trusted third-party services like Trusted Shops and Complianz for compliance and marketing. Technically, the site uses modern web technologies and Shopify's Alchemy theme, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a formal security policy are absent. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and trustworthiness.

G

Geli GmbH

geli.de

42

Geli GmbH is a well-established German family-owned manufacturer specializing in plastic products for gardening and household use. With over 75 years of experience, the company emphasizes sustainable and energy-efficient production processes, targeting gardeners and retail customers primarily in Germany. Their product portfolio includes a wide range of garden accessories, including watering cans and plant containers, with a focus on recycled plastics and environmental responsibility. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and analytics tools like Fathom Analytics. Security posture is solid with HTTPS enforced, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the business demonstrates strong credibility and market positioning in the manufacturing and retail sectors.

P

PATZER ERDEN GmbH

frux.de

69

PATZER ERDEN GmbH operates the frux brand, specializing in high-quality soils and gardening substrates for hobby gardeners and commercial trade customers. The company has a strong market presence in Germany and parts of Europe, supported by multiple production sites and a comprehensive product portfolio including organic and peat-free soils. The website is well-structured, content-rich, and professionally designed, offering detailed product information and gardening tips. Technically, the site uses established JavaScript libraries and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EMSA GmbH

emsa.com

54

EMSA GmbH is a German-based manufacturer and retailer specializing in household products such as thermos mugs, insulated jugs, and food storage containers. The company operates a professional and well-structured website powered by TYPO3 CMS, offering multi-language support and rich product and lifestyle content. The site demonstrates a mature digital infrastructure with modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. The domain WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the brand's established market presence and professional web presence.

E

elho

elho.com

67

elho is a medium-sized retail company specializing in designer flowerpots and planters made from 100% recycled plastic, emphasizing sustainability and modern design. The company targets consumers interested in home and garden decor, offering a broad assortment through an e-commerce platform. The website is professionally designed with excellent content quality, multi-language support, and clear navigation, reflecting a mature digital presence. Technically, the site uses modern technologies including Umbraco CMS, Shopify for e-commerce, and integrates Google Tag Manager and Optimize for analytics and marketing. Security posture is strong with HTTPS enforced and secure cookie flags, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and business transparency. Overall, elho presents a trustworthy and well-managed online presence with a focus on sustainability and customer engagement.

E

Edelman

edelman.nl

63

Edelman is a professional importer and wholesaler specializing in decorative home products, representing multiple well-known brands such as Mica Decorations and Luca Lighting. The company targets business customers and importers in the home decoration sector, operating a Magento-based e-commerce platform with multi-language support and a secure customer login system. The website demonstrates a solid market position with a comprehensive product range and a focus on sustainability, evidenced by its Certified B Corp status. Technically, the site employs modern web technologies including Magento Commerce, RequireJS, jQuery, and integrates marketing and analytics tools like Google Analytics, HubSpot, and Cookiebot. Security posture is strong with HTTPS enforcement, appropriate security headers, and secure form handling, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences, with no signs of adult or questionable content.

Deroma is a well-established Italian company specializing in the manufacturing and sale of gardening pots, with a history spanning over 60 years. The company operates internationally and emphasizes craftsmanship and sustainability in its product offerings. The website reflects a mature business with consistent branding and a clear focus on its target audience of gardeners and retailers. The presence of multiple language options and detailed corporate information supports its international market position. Technically, the website is built on Drupal CMS with standard modern web technologies such as jQuery and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and domain transfer protections in place, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

D

Deutsche CUXIN Marketing GmbH

cuxin-dcm.de

64

Deutsche CUXIN Marketing GmbH operates the website cuxin-dcm.de, providing sustainable and ecological gardening products and expert advice targeted primarily at hobby gardeners in Germany. The company is positioned as a reputable brand within the gardening retail sector, offering a broad range of fertilizers, soils, pest control products, and gardening tips. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Vue.js and Shopware, with Cloudflare providing DNS and CDN services, ensuring fast and secure content delivery. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism and trustworthiness, supporting the company's market position effectively.

C

COMPO

compo.de

54

COMPO is a well-established German brand specializing in gardening products and plant care solutions, targeting consumers ranging from novice gardeners to experienced plant enthusiasts. The website provides product information, gardening advice, and inspiration content, positioning itself as a trusted resource in the gardening retail sector within Germany. The digital infrastructure is built on modern web technologies including Next.js and integrates multiple third-party services for analytics and advertising, such as Google Analytics, Hotjar, and Meta Pixel. Cookiebot is employed to manage GDPR-compliant cookie consent, reflecting a commitment to privacy regulations. Security posture is moderate with HTTPS implied and no visible security headers or explicit security policies published. No critical vulnerabilities or blocking mechanisms were detected, but the absence of explicit privacy and security policies and contact information represents an area for improvement. Overall, the website is professional, user-friendly, and trustworthy for its target audience.

C

Chrysal International

chrysal.com

67

Chrysal International operates a professional website focused on flower and plant care products, targeting growers, retailers, and consumers globally. The company positions itself as a market leader with a strong emphasis on sustainability and customer support. The website is built on Drupal 10 and integrates modern analytics and tracking tools such as Google Tag Manager and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and cookie consent implemented, though the absence of security headers and a published privacy policy are notable gaps. WHOIS data is missing or privacy-protected, which slightly reduces trust but does not negate the professional appearance and business legitimacy evident on the site.

B

Bolsius International BV

bolsius.com

71

Bolsius International BV is a well-established European candle manufacturer and retailer, founded in 1870, with a strong emphasis on quality, heritage, and sustainability. The company is B Corp certified, reflecting its commitment to social and environmental responsibility. The website is professionally designed, multilingual, and optimized for user experience and SEO, targeting a broad consumer audience interested in candles and related products. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Slick Carousel, with integration of Google Maps API and Yoast SEO for enhanced functionality and search visibility. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly reduces transparency and trust but does not detract significantly from the overall legitimacy given the professional web presence and branding. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and business credibility.

Ateneo Mercantil de Valencia is a well-established cultural institution located in Valencia, Spain, offering a diverse range of cultural events, conferences, exhibitions, and social activities. The organization also provides event salon rentals and restaurant services, targeting members and the local community. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site is built on the Odoo CMS platform, utilizing modern web technologies and integrating multiple advertising and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and accessible, though some security headers could be improved. Security posture is good with HTTPS enforced and reCAPTCHA implemented on forms, but explicit security policies and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. WHOIS data is restricted due to Red.es policies for .es domains, but the domain usage and website content appear legitimate and consistent with the institution's profile.

W

Wordwall | Create better lessons quicker

wordwall.net

60

Wordwall.net is an established educational technology platform founded in 2015 that enables teachers to create interactive and printable learning activities quickly and efficiently. The platform offers a rich library of over 30 million teacher-created resources and supports more than 30 activity types, enhanced by AI content generation tools. Its target audience primarily consists of educators seeking customizable teaching resources. The business operates on a subscription SaaS model with free and paid tiers, positioning itself as a significant player in the edtech market with a medium-sized operational scale. Technically, the website employs a modern web stack including jQuery and Saltarelle for client-side functionality, hosted on reputable infrastructure with CDN support and Google Cloud DNS. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. However, some security best practices such as DNSSEC and explicit security headers are not evident in the provided data. From a security perspective, the site uses HTTPS and domain locking statuses to protect domain integrity. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks a visible cookie consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the security posture is solid but could be improved with enhanced transparency and additional security controls. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for GDPR compliance, and publishing explicit security and incident response policies to enhance trust and compliance.

P

Prezi

prezi.com

76

Prezi is a well-established technology company specializing in AI-enhanced presentation software designed to engage audiences effectively. Founded in 2000, Prezi offers a SaaS platform targeting business professionals, educators, and students, providing key services such as video presentations, interactive presentations, and infographic design tools. The company holds a strong market position as a leader in interactive presentation technology with a large user base and major corporate customers. Technically, Prezi's website demonstrates a mature digital infrastructure hosted on AWS, built with modern web technologies including Webflow CMS, JavaScript frameworks, and integrated marketing and analytics tools such as Google Tag Manager, Hotjar, and Optimizely. The site is fast, mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, Prezi maintains a robust posture with HTTPS enforcement, SOC 2 compliance, and comprehensive privacy and cookie policies with consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, minor improvements such as enabling DNSSEC and publishing a security.txt file could enhance security transparency and DNS security. Overall, Prezi presents a low-risk profile with strong business credibility, technical sophistication, and compliance adherence. Strategic recommendations include enhancing incident response visibility, publishing vulnerability disclosure information, and enabling DNSSEC to further strengthen trust and security posture.

P

PEGI

pegi.info

66

PEGI.info is the official website for the Pan European Game Information system, which provides age ratings and content descriptors for video games across Europe. The site serves as an authoritative source for parents and consumers to understand the suitability of video games for different age groups. The business operates as a non-profit regulatory and informational entity with a strong market position as the leading European video game age rating authority. The website is well-structured, multilingual, and provides comprehensive information about PEGI's services, including parental advice, complaints handling, and enforcement cases. Technically, the website is built on Drupal 10, leveraging Bootstrap for responsive design and integrating Google Analytics and Tag Manager for traffic analysis. The site demonstrates good mobile optimization and basic accessibility features. Performance is moderate, with modern web standards and SEO best practices implemented. Security posture is strong with HTTPS enforced, appropriate security headers, and privacy-conscious analytics configurations. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, there is room for improvement by adding explicit security policies and incident response contacts. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is supported by professional content and consistent branding, though direct contact emails and phone numbers are not publicly listed, relying instead on contact forms. Overall, PEGI.info presents a trustworthy, professional, and secure platform aligned with its mission to inform and protect consumers in the gaming industry. Strategic recommendations include enhancing transparency around security policies and incident response, and maintaining vigilance on third-party script security to uphold trust and compliance.

E

Entertainment Software Rating Board

esrb.org

66

The Entertainment Software Rating Board (ESRB) operates as a leading non-profit organization providing age and content ratings for video games and apps, primarily targeting parents and consumers to facilitate informed purchasing decisions. The organization also enforces advertising guidelines and runs a privacy certification program, positioning itself as a trusted authority in the media and entertainment sector. The website reflects a mature, well-established entity with consistent branding and comprehensive content tailored to its audience. Technically, the ESRB website is built on a modern WordPress CMS platform, utilizing popular frameworks and libraries such as Bootstrap 4 and jQuery, enhanced by performance optimization tools like WP Rocket. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience across devices. From a security perspective, the site enforces HTTPS, employs security headers, and monitors Content Security Policy violations, indicating a strong security posture. However, explicit security policies and incident response information are not publicly available, suggesting areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the ESRB website presents a low-risk profile with strong trust indicators and compliance with privacy regulations, including GDPR. The absence of WHOIS data due to privacy protection is justified given the organization's nature. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing security contact visibility to further strengthen trust and compliance.

P

ProProfs

proprofs.com

65

ProProfs is a well-established SaaS company offering a broad suite of software tools focused on training, customer support, knowledge management, surveys, quizzes, and project management. Their market position is strong with multiple award-winning products and millions of users, targeting businesses and organizations seeking easy-to-use digital tools to improve operational efficiency and customer engagement. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the website employs a modern technology stack including Google Analytics, Facebook Pixel, Hotjar, Microsoft Clarity, and AdRoll for analytics and marketing. The use of Bootstrap framework and various JavaScript libraries supports a responsive and accessible user experience. Performance is moderate with good SEO and accessibility features implemented. From a security perspective, the site enforces HTTPS with strong security headers and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not found, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The absence of WHOIS data for the exact queried domain is noted but likely due to privacy protection, not detracting from the legitimacy of the business. Strategic recommendations include enhancing transparency on security and incident response, and publishing vulnerability disclosure information.

H

Humblytics

humblytics.com

60

Humblytics is a technology company founded in 2021 that provides privacy-first, cookie-free web analytics, heatmaps, funnel visualization, and A/B testing services. Positioned as a SaaS provider, it targets website owners and digital marketers seeking actionable insights without compromising user privacy. The website is built using Framer and hosted on Cloudflare, indicating a modern and streamlined technical infrastructure. The presence of LinkedIn Insight scripts suggests integration with marketing analytics tools. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and functional but would benefit from improved transparency and security practices to increase trust and compliance.

F

Federal Chancellery of Switzerland

ch.ch

65

The website www.ch.ch is the official information portal of the Swiss authorities, managed by the Federal Chancellery of Switzerland. It provides comprehensive and authoritative information covering federal, cantonal, and municipal administrative matters across multiple sectors such as health, housing, taxes, and political processes. The portal targets residents and foreign nationals living in Switzerland, offering multilingual support in the country's official languages plus English. The site is positioned as a trusted government resource with a large scope and high content quality. Technically, the website is built using modern frameworks including Nuxt.js and Vue.js, styled with Tailwind CSS, and enhanced with Swiper.js for interactive elements. It demonstrates excellent mobile optimization, accessibility, and SEO practices. The infrastructure appears robust with fast performance and no visible technical issues. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and security culture. Overall, the website is highly professional, trustworthy, and well-maintained, serving as a critical government communication channel. Strategic recommendations include implementing cookie consent for privacy compliance, publishing security policies, and establishing a vulnerability disclosure process to further strengthen security and user trust.