Security Directory

M

Microsoft Corporation

sharepoint.com

74

Microsoft Corporation operates the website www.microsoft.com, providing enterprise-grade collaboration and content management solutions through Microsoft 365 SharePoint. The site targets both business and individual users, offering secure, AI-enhanced tools for content sharing and workflow automation. Microsoft holds a dominant market position in technology and productivity software, supported by a robust global infrastructure and compliance with international security standards. The website demonstrates high digital maturity with modern technologies, excellent performance, and strong mobile optimization. Security posture is robust, with HTTPS enforcement, comprehensive security headers, and adherence to best practices. Privacy policies and GDPR compliance are clearly articulated, reflecting Microsoft's commitment to data protection. Overall, the site is professional, trustworthy, and well-aligned with Microsoft's brand and business objectives.

D

Dinahosting s.l.

dinahosting.com

70

Dinahosting s.l. is a well-established Spanish technology company specializing in domain registration, web hosting, VPS, dedicated servers, and cloud services. With over 20 years of experience, it holds a strong market position as a leading independent provider in Spain, offering a comprehensive portfolio of IT infrastructure solutions tailored to individuals, SMEs, and professional agencies. The company emphasizes quality, customer support, and technological innovation, including AI-assisted services and green hosting initiatives. The website demonstrates a mature technical infrastructure with modern web technologies such as jQuery and SVG graphics, optimized for performance and mobile responsiveness. The presence of multiple language versions and a well-structured navigation system reflects a high level of digital maturity and user experience focus. Security posture is robust, with HTTPS enforced, strong domain registration protections, and ISO 27001 certification. However, DNSSEC is not enabled, and there is no published security.txt file, which are areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and transparent contact channels. Overall, Dinahosting presents a low-risk profile with strong business credibility, technical competence, and customer trust. Strategic recommendations include enabling DNSSEC, publishing vulnerability disclosure policies, and enhancing incident response visibility to further strengthen security and compliance.

R

rosenblumaward.org

rosenblumaward.org

48

The Rosenblum Award website serves as an informational platform dedicated to recognizing innovations in the scholarly publishing ecosystem. It highlights the legacy of Bruce Rosenblum and is collaboratively governed by five leading scholarly publishing organizations. The site targets the academic and publishing community, promoting awareness and appreciation of key technological and standards-based contributions to scholarly communication. Technically, the site is built on WordPress and hosted on DigitalOcean, featuring a moderate performance profile with good mobile optimization and accessibility. Security posture is basic, with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

W

Warhammer Art

warhammerart.com

73

Warhammer Art operates a specialized e-commerce platform focused on selling official Warhammer artwork and merchandise, including limited edition hand-numbered prints and custom products. The website is professionally designed using the Shopify platform, indicating a mature digital infrastructure with good performance, mobile optimization, and accessibility. The business targets Warhammer enthusiasts and collectors, positioning itself as a niche leader in licensed Warhammer art retail. However, the absence of publicly available WHOIS data raises concerns about domain transparency and trustworthiness. The site lacks visible privacy and cookie policies, as well as direct contact information, which impacts compliance and user trust. Security posture is generally good with HTTPS and secure payment processing, but could be improved with explicit security headers and published policies.

A

Audible

audible.co.uk

70

Audible UK is a leading audiobook and audio entertainment platform operating under the Amazon umbrella. The website offers a subscription-based service providing access to best-selling audiobooks, exclusive Originals, and podcasts, targeting consumers primarily in the UK and Ireland. The brand is well-established with a strong market position and a comprehensive digital presence. Technically, the site leverages modern web technologies including React and Amazon Cloudfront CDN, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS enforcement, content security policies, and cookie consent mechanisms in place, although explicit security policy and incident response information are not publicly available. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR.

R

Rechnerbetriebsgruppe

techfak.net

62

The website techfak.net serves as the official IT support portal for the Faculty of Technology at Bielefeld University, operated by the Rechnerbetriebsgruppe (Computer Operations Group). It provides network maintenance, account management, email, VPN, and other IT infrastructure services primarily for faculty members, students, and staff. The site is well-structured and targets an academic audience with clear navigation and relevant content. The business model is internal IT support within an educational institution, positioning it as a central service unit rather than a commercial entity. Technically, the website is built using MkDocs with the Material theme, hosted by Hetzner Online GmbH, a reputable hosting provider. The site uses HTTPS and has moderate performance with good mobile optimization and accessibility. However, DNSSEC is not enabled, and security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site demonstrates a stable and legitimate domain registration with no suspicious WHOIS patterns. The absence of a cookie consent mechanism and explicit security policies suggests partial privacy compliance. No WAF or blocking mechanisms are detected, and no vulnerabilities or exposed sensitive data were found. Overall, the security posture is adequate but could be enhanced by enabling DNSSEC, adding security headers, and publishing incident response information. The overall risk assessment is low given the academic nature and limited exposure of sensitive services. Strategic recommendations include improving DNS security, implementing security headers, and enhancing privacy compliance to align with GDPR best practices. These steps will strengthen trust and security culture while maintaining the website's professional and reliable presence.

C

Czech Games Edition

cgegames.us

70

Czech Games Edition operates a professional e-commerce website hosted on the Shopify platform, specializing in the sale of board games and expansions such as Codenames and Lost Ruins of Arnak. The site targets US customers primarily, with a clear focus on board game enthusiasts and family-friendly products. The company maintains a consistent brand presence across multiple social media platforms, enhancing its market reach and customer engagement. Technically, the website leverages modern web technologies including Shopify's Dawn theme, Google Tag Manager, Facebook Pixel, and hCaptcha for security, ensuring a robust and performant user experience. Security posture is strong with HTTPS enforced and form protection mechanisms in place, though explicit security headers and policies could be more visible. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content, which is an area for improvement. Overall, the website is trustworthy and professionally maintained, but could enhance transparency and compliance by publishing clear privacy and security policies and contact information.

R

Radio Bremen

butenunbinnen.de

52

The website www.butenunbinnen.de is a regional news portal operated by Radio Bremen, providing news, videos, live streams, and local updates for Bremen and Bremerhaven. It serves a regional audience with a focus on current events, politics, sports, and societal topics. The business model is media and broadcasting with digital content delivery, positioning itself as a trusted regional news source. Technically, the site uses modern web technologies including lazy loading, asynchronous JavaScript, and a specialized video player, indicating a mature digital infrastructure with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy transparency and security hardening.

R

Radio Bremen

bremenvier.de

45

The website www.bremenvier.de represents Bremen Vier, a regional public radio station operated by Radio Bremen in Germany. It offers radio broadcasting, online streaming, event coverage, and multimedia content such as videos targeting a general and family-oriented audience. The site is professionally designed with consistent branding and good content quality, reflecting its position as a trusted media outlet in the Bremen region. Technically, the site uses modern web technologies including responsive design, lazy loading, and video streaming, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers are missing and privacy compliance could be improved by adding explicit policies and consent mechanisms. WHOIS data confirms the legitimacy of the domain and its alignment with the Radio Bremen organization. Overall, the site is trustworthy, well-maintained, and suitable for its audience.

R

Radio Bremen

bremenzwei.de

55

Bremen Zwei is a public radio broadcasting program operated by Radio Bremen, targeting a German-speaking audience with a focus on culture, music, events, and news. The website presents a professional and consistent brand image with a variety of multimedia content including videos, podcasts, and live talks. The technical infrastructure uses modern web technologies with responsive design and lazy loading for performance optimization. However, explicit privacy and cookie policies are not detected, which is a compliance gap. Security posture is moderate with HTTPS usage but lacks visible security headers and incident response information. Overall, the domain registration and WHOIS data align well with the business identity, indicating legitimacy and trustworthiness.

R

Radio Bremen

bremeneins.de

54

Bremen Eins is a regional public radio station operated by Radio Bremen, offering a broad range of music, news, events, and podcasts targeted at the Bremen area and general German-speaking audience. The website presents a professional and content-rich platform with consistent branding and a clear focus on music and local culture. The business model is typical for public broadcasters, focusing on content delivery and community engagement rather than commercial sales. Technically, the site uses modern web technologies including lazy loading and responsive design, ensuring good user experience across devices. However, no explicit CMS or hosting provider details are evident. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is available primarily via phone and contact forms, with social media presence on Facebook. Overall, the site is trustworthy and well-positioned in its market segment but could improve in privacy and security transparency.

R

Radio Bremen

bremennext.de

53

Bremen NEXT is a youth-oriented media platform operated by Radio Bremen, focusing on music, lifestyle, podcasts, and events for young people in Bremen and Bremerhaven. The website offers a variety of content including radio shows, podcasts, event listings, and interactive features such as contact forms and social media engagement. The platform positions itself as a regional leader in youth media, leveraging the credibility and resources of its parent company, Radio Bremen. Technically, the website employs modern web technologies including lazy loading images, SVG graphics, and asynchronous JavaScript loading. It uses a custom framework likely developed by Radio Bremen and integrates slick carousel for content sliders. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and does not provide a vulnerability disclosure or security.txt file. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is professional, content-rich, and trustworthy, but could improve its privacy and security posture to enhance user trust and regulatory compliance.

T

Threema GmbH

threema.ch

76

Threema GmbH operates a highly secure instant messaging platform developed in Switzerland, targeting individuals and organizations that prioritize privacy and data protection. The company offers end-to-end encrypted messaging, calls, and file exchange services, with specialized products such as Threema Work for enterprises, Threema Broadcast, and Threema Gateway. The website reflects a mature market position with strong trust signals including GDPR compliance and endorsements from public authorities and large enterprises. Technically, the site employs modern JavaScript frameworks and privacy-respecting analytics (Matomo), with excellent mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and domain protection, though improvements like DNSSEC and security headers could enhance it further. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

H

home.pl S.A.

netwerk.pl

48

NETWERK is a Polish-based content management system designed to provide an easy and secure way to manage responsive website content. The company, registered under home.pl S.A., offers a proprietary CMS product with a focus on simplicity, security, and responsiveness. The website presents a professional and consistent brand image with clear descriptions of its CMS capabilities and modules. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on a reputable Polish provider. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features and some security headers. Security posture is moderate with HTTPS enabled but no DNSSEC or explicit security policies published. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and suitable for its target audience of web developers and businesses seeking CMS solutions.

C

Cornell University

arxiv.org

62

arXiv.org is a well-established, reputable open-access archive and distribution service for scholarly articles across multiple scientific disciplines. Operated by Cornell University and supported by the Simons Foundation and member institutions, it serves a global audience of researchers, academics, and students. The platform offers free access to nearly 2.4 million articles and provides subject-specific archives with advanced search capabilities. The business model is non-profit, relying on donations and institutional support, positioning arXiv as a leading resource in academic publishing.

M

Martin Kleppmann

dataintensive.net

57

The website dataintensive.net is dedicated to promoting the technical book 'Designing Data-Intensive Applications' by Martin Kleppmann. It serves a niche audience of software engineers and technical professionals interested in distributed systems, data scalability, and reliability. The site provides detailed information about the book, author background, testimonials from industry leaders, and purchasing options. The business model centers on book sales and educational content dissemination, positioning itself as a trusted resource in the technology education sector. Technically, the website is built using standard web technologies including HTML5, Bootstrap 3.2.0, and jQuery 1.11.1, hosted via Cloudflare. The site is mobile responsive and well-structured, though it lacks advanced SEO and accessibility features. No CMS or analytics frameworks are detected, indicating a lightweight and straightforward implementation. The site uses HTTPS but lacks DNSSEC and security headers, which could be improved to enhance security posture. From a security perspective, the site demonstrates basic good practices such as HTTPS usage and stable domain registration without privacy protection. However, it lacks formal privacy, cookie, or security policies, and no incident response or vulnerability disclosure mechanisms are present. No forms or data collection points are found, reducing exposure to input-based vulnerabilities. The overall security score is moderate, with recommendations to implement security headers, privacy policies, and DNSSEC. Overall, the website is professional, trustworthy, and content-rich for its target audience. The absence of privacy and cookie policies and limited security headers are notable gaps. The risk level is low given the nature of the site and lack of sensitive data processing, but improvements in compliance and security best practices are advised to maintain trust and regulatory alignment.

The website cnr.sh is a personal professional site for Chris Riccomini, a software engineer, author, and investor. It serves as a platform to share blog posts, talks, and information about his investment fund and open source projects. The site targets software developers, investors, and the tech community, positioning itself as a niche personal brand with a focus on technology and early-stage investing. The business model revolves around personal branding, content sharing, and promoting investment activities. Technically, the site uses modern web technologies including HTML5, CSS3, Google Fonts, FontAwesome, and the htmx JavaScript library. It is hosted on infrastructure associated with Name.com, with moderate performance and good mobile optimization. SEO practices are well implemented, though accessibility is basic. Analytics are minimal, using Tinylytics for lightweight tracking. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy, cookie, and security policies, as well as contact information for incident response, indicates compliance and transparency gaps. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. The risk level is low given the nature of the content and absence of sensitive data, but improvements in policy publication and security headers are recommended.

I

Ink & Switch

inkandswitch.com

50

Ink & Switch is an independent research lab focused on exploring innovative software concepts such as local-first software, malleable software, programmable ink, and universal version control. The lab produces academic essays, lab notebooks, and actively develops production software tools like Muse and Automerge. Their target audience includes scientists, journalists, creative thinkers, and software developers interested in advancing tools for thought. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses modern web standards, web fonts, and integrates a newsletter subscription service, though no CMS or hosting provider details are evident. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is low due to absence of privacy and cookie policies. The WHOIS data is missing or the domain appears unregistered, which raises concerns about domain legitimacy despite the professional nature of the website content. Overall, the site is trustworthy and safe for general audiences but would benefit from improved transparency and security practices.

The website fantasywelt.de is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the site's content. As a result, no business information, contact details, or policies are available for analysis. The site appears to be protected by Cloudflare's security infrastructure, indicating an intent to mitigate automated access or attacks. However, this also limits the ability to assess the site's business operations, technical maturity, or security posture beyond the presence of the WAF. From a technical perspective, the site uses Cloudflare services including Turnstile CAPTCHA, indicating modern security practices to prevent abuse. The lack of accessible content and metadata prevents evaluation of SEO, accessibility, or user experience. No forms or data collection mechanisms are visible beyond the CAPTCHA widget. Security-wise, the presence of Cloudflare WAF is a positive indicator, but the absence of visible security headers or policies limits the assessment. No vulnerabilities or compliance information can be confirmed. The domain WHOIS data is minimal, with Cloudflare name servers and an unusual domain status, which reduces trustworthiness and transparency. Overall, the site is currently in a blocked state preventing meaningful analysis. The risk assessment is moderate due to lack of transparency and business information. Strategic recommendations include enabling public access to key business pages, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

U

University of Bordeaux

u-bordeaux.com

55

The University of Bordeaux website presents itself as a professional educational institution offering higher education, doctoral programs, and research opportunities. The site is well-structured with clear navigation and consistent branding, targeting students, researchers, academics, and partners. The technical infrastructure is based on modern web standards and likely uses the eZ Publish CMS platform. While the site is accessible and functional with good design and mobile optimization, it lacks critical privacy and cookie policies, security headers, and DNSSEC implementation. The domain is very recently registered, which is unusual for a major university and may indicate a secondary or new domain. Overall, the security posture is moderate but could be improved by adopting best practices in domain security and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing vulnerability disclosure and incident response information.

The website ogp.me serves as the official specification and resource hub for the Open Graph protocol, a technology originally created by Facebook and now maintained by Meta Platforms, Inc. It provides detailed technical documentation and metadata guidelines enabling web developers to integrate their web pages into social graphs effectively. The site targets developers and technical audiences interested in web standards and social media integration. The business model is centered around providing an open standard and community resources rather than direct commercial services. The domain is well-established since 2010 and is owned by Meta Platforms, Inc., reflecting strong legitimacy and market position. Technically, the website is built with standard web technologies including HTML5, CSS, and JavaScript, hosted behind Cloudflare DNS services. The site demonstrates good performance and basic mobile optimization, with clear and structured content. SEO practices are well implemented through comprehensive Open Graph metadata. However, accessibility features are basic, and no advanced frameworks or CMS are detected. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no explicit security headers or policies are published. There is no evidence of privacy, cookie, or terms of service policies, which impacts privacy compliance scores. No contact or incident response information is provided, limiting transparency in security governance. Overall, the website is trustworthy, professional, and focused on its technical mission. The lack of privacy and cookie policies and DNSSEC are minor gaps. Strategic recommendations include enabling DNSSEC, publishing privacy and security policies, and adding security headers to enhance protection and compliance.

E

Ecosia GmbH

ecosia.org

72

Ecosia GmbH operates a green search engine that dedicates 100% of its profits to climate action, primarily through tree planting projects worldwide. The company positions itself as a transparent and environmentally responsible alternative to mainstream search engines, with a strong community of over 20 million users. Their business model leverages advertising revenue to fund sustainability initiatives, supported by monthly financial reports and certifications such as B-Corporation. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action to engage users in their mission. Technically, Ecosia employs modern web technologies including JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and Didomi for consent management, ensuring compliance with privacy regulations such as GDPR. The site is served over HTTPS with strong security headers, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected, and the site includes mechanisms for cookie consent and privacy transparency. Security-wise, Ecosia demonstrates good practices with HTTPS enforcement, consent management, and transparent data processing disclosures. However, no explicit incident response or security policy pages were found, suggesting an opportunity to enhance security communication. The lack of publicly listed contact emails or phone numbers may limit direct user support but aligns with privacy considerations. Overall, Ecosia presents a trustworthy and credible online presence with a clear environmental mission, solid technical infrastructure, and good security hygiene. The absence of WHOIS data limits domain registration insights but does not detract from the evident legitimacy and professionalism of the site. Strategic recommendations include enhancing incident response visibility, maintaining up-to-date technology stacks, and possibly providing more direct contact channels for security or support inquiries.

Adblock Plus is a well-established ad blocking software product developed by eyeo GmbH, founded in 2006. It offers free, open source browser extensions and mobile apps that block intrusive ads, tracking, and malware, while supporting websites through an Acceptable Ads program. The company holds a strong market position as the leading ad blocker with a broad user base across major browsers and platforms. The website is professionally designed, mobile optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Technically, the site uses modern JavaScript and web standards, with good performance and accessibility. Security posture is strong with HTTPS enforced and error logging implemented, though some improvements like DNSSEC and security headers could be added. No critical vulnerabilities or suspicious content were detected. Overall, the site and business demonstrate high credibility and trustworthiness.

V

VALID Digitalagentur GmbH

validserver.de

60

VALID Digitalagentur GmbH is a Berlin-based digital agency specializing in digital strategy, UX design, development, and performance marketing. The company targets businesses seeking comprehensive digital transformation and customer experience consulting. Their website presents a professional and consistent brand image with clear service offerings and a focus on methodical digitalization. Technically, the site is built on the Contao CMS platform, employs Matomo analytics with privacy-conscious configurations, and integrates Cookiebot for GDPR-compliant cookie management. The website is well-structured, mobile-optimized, and provides a good user experience, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

U

Uberall

uberall.com

70

Uberall is an established AI-powered multi-location marketing platform founded in 2002, targeting enterprise clients with a comprehensive suite of services including listings management, review management, analytics, messaging, and location performance optimization. The platform emphasizes AI integration to enhance local search visibility and customer engagement across multiple locations. Their market position is strong within the technology and retail sectors, supported by a professional and content-rich website with multilingual support and extensive marketing integrations. Technically, the site leverages modern JavaScript frameworks, HubSpot CMS, AWS hosting, and advanced analytics tools, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security-wise, the website enforces HTTPS and employs standard security headers, but the domain's recent expiry and lack of DNSSEC present notable risks. Additionally, the absence of explicit security policies and incident response contacts indicates room for improvement in transparency and compliance. Overall, Uberall presents a professional and trustworthy online presence, but immediate attention to domain renewal and enhanced security disclosures is recommended to maintain trust and operational continuity.

N

NetFederation GmbH

netfed.de

72

NetFederation GmbH is a German-based consulting company specializing in digital corporate communication. Their services include website consulting, digital presence solutions, and providing annual benchmarking reports to offer market insights. The website targets business clients seeking expert advice on digital communication strategies. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Cookiebot for cookie consent, and Piwik PRO for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional design with consistent branding. Security-wise, the website enforces HTTPS and uses cookie consent management, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or suspicious content were detected. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

Deutsche Telekom AG operates the website www.telekom.de, providing a comprehensive range of telecommunications services including mobile telephony, fixed-line internet, fiber optic connections, and TV offerings under the MagentaTV brand. The website targets both private and business customers in Germany, positioning itself as a leading telecommunications provider with a strong market presence. The content is professionally presented, with clear navigation and a focus on current offers and customer services. Technically, the site employs modern web technologies such as React, uses advanced analytics and tag management tools like Dynatrace and Tealium, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and consent mechanisms for GDPR compliance implemented, although explicit privacy and security policies are not prominently linked. Overall, the domain registration data aligns well with the business identity, indicating a legitimate and trustworthy online presence.

AllWebCo is a small, established web hosting and domain registration service provider operating since 1997. The company targets small businesses and individuals seeking affordable and professional web hosting solutions, domain registration, and website templates. The website reflects a consistent brand with clear navigation and relevant content focused on their core services. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with jQuery 1.11.0, and is mobile responsive with moderate performance. Security posture is basic with HTTPS enabled but lacks modern security headers and uses an outdated JavaScript library, which could pose risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact is primarily via web forms with no explicit email or phone contacts visible. Overall, the site is legitimate and trustworthy but could improve security and privacy practices.

G

Graze.social

graze.social

58

Graze.social is a technology company specializing in providing a SaaS platform for building custom social feeds on the Bluesky network using the ATProto protocol. The platform targets feed curators, brands, publishers, developers, and advertisers, enabling them to create personalized feeds, monetize content, and engage audiences without coding. The website demonstrates a strong market position with a growing user base and a clear value proposition centered on user control over social algorithms. Technically, the website is built on modern web technologies including React, JavaScript, and integrates third-party services such as Crisp chat, Beehiiv newsletter, and Plausible analytics. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. However, some security best practices like explicit security headers and cookie consent mechanisms are not visibly implemented. From a security perspective, the site uses HTTPS and does not expose sensitive data. The lack of public WHOIS data suggests privacy protection, which is common and justified for startups. No critical vulnerabilities or suspicious patterns were detected. The site lacks publicly disclosed incident response or security policies, which could be improved to enhance trust. Overall, Graze.social presents a professional, trustworthy, and technically mature platform with minor areas for security and privacy compliance improvements. Strategic recommendations include implementing security headers, publishing security policies, and adding cookie consent to align with best practices and regulatory requirements.

Dr. Martin Kleppmann's website serves as a comprehensive academic and professional platform showcasing his work as an Associate Professor at the University of Cambridge. The site highlights his research focus on local-first collaboration software and distributed systems security, his teaching activities, open source contributions, and a well-regarded book on data-intensive applications. The website targets academics, researchers, students, and professionals interested in distributed systems and cryptography. It also supports his research through Patreon and promotes his publications and conference talks. Technically, the website is built using Jekyll, with a clean and professional design that is mobile-optimized and accessible. It uses standard web technologies including HTML5, CSS3, JavaScript, and MathJax for mathematical rendering. The site performs well with fast loading times and clear navigation. However, it lacks some modern security headers and explicit HTTPS enforcement details are not available from the provided data. From a security perspective, the site does not expose sensitive data or use vulnerable libraries. There are no forms collecting sensitive user data, which reduces attack surface. However, the absence of privacy and cookie policies, security incident response information, and vulnerability disclosure mechanisms indicates gaps in compliance and security transparency. The WHOIS data for the domain is missing, which is unusual and reduces trustworthiness, though the professional nature of the content suggests legitimacy. Overall, the website is a high-quality academic resource with excellent content and user experience but could improve in privacy compliance and security transparency. The missing WHOIS data is a concern that should be investigated further to confirm domain legitimacy.

The website www.ameli.fr represents the official French social security health insurance service known as Assurance Maladie. It serves as a government platform providing health coverage and related services to insured individuals in France. The site is positioned as a primary national health insurance provider, targeting French residents and insured persons. The business model is public social insurance funded by government and social contributions. The website content is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the main content. This limits the ability to fully assess the website's content and user experience. Technically, the site uses Cloudflare's security services to mitigate automated bot activity, indicating a strong security posture in terms of access control. However, no detailed security headers or SSL/TLS configuration information is available from the provided data. The security posture is partially observable through the use of CAPTCHA but lacks visible incident response or security policy disclosures. Overall, the site is legitimate and trustworthy given its government affiliation and domain, but the current security challenge limits comprehensive analysis. Strategic recommendations include improving transparency by publishing privacy and cookie policies, providing clear contact and incident response information, and enhancing SEO and accessibility once the security challenge is passed.

F

Fabryka Kart Trefl-Kraków sp. z o.o.

fabryka-kart.eu

48

Fabryka Kart Trefl-Kraków sp. z o.o. is a well-established Polish manufacturer specializing in the production of playing cards and board games, serving a B2B clientele including renowned publishers and game authors worldwide. The company leverages a legacy dating back to 1947 and positions itself as a European market leader in its niche. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content tailored to its professional audience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates strong business credibility and compliance with GDPR requirements.

T

tpi Media® GmbH

webdesignagentur.de

62

tpi Media® GmbH is a Berlin-based full-service web design agency specializing in web design, web development, branding, content creation, and SEO services. The company targets a diverse clientele including startups, established businesses, and medical practices, offering tailored digital solutions from domain selection to marketing. Their market position is that of a reputable regional agency with a medium-sized team and a comprehensive service portfolio. Technically, the website employs modern frameworks such as Vue.js, Nuxt.js, and Vuetify, alongside WordPress CMS and headless CMS options, reflecting a mature and modern digital infrastructure. The site is fast, mobile-optimized, and SEO-friendly. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended in security headers and incident response transparency. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website demonstrates high professionalism, trustworthiness, and technical competence.

S

Sebastian Bauer

passiondriving.de

46

passiondriving.de is a specialized German-language blog focused on automotive and motorcycle content, including detailed test drives, reviews, and roadtrip reports. Founded in 2011 by Sebastian Bauer, a recognized motor journalist, the site targets enthusiasts passionate about cars and motorcycles, particularly those interested in performance and niche topics like the Nürburgring Nordschleife. The business model centers on content publishing with a strong community and social media presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and integrates Google Analytics with IP anonymization to track user engagement. The website is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy and credible online presence.

S

Saarländischer Rundfunk

sr.de

53

Saarländischer Rundfunk (SR) operates as a regional public broadcasting service for the Saarland region in Germany, providing a comprehensive range of media services including regional news, weather, traffic updates, radio, television, and on-demand video content. The website is professionally designed with clear navigation and consistent branding, targeting a general audience interested in regional information and entertainment. The business model aligns with public media broadcasting, focusing on delivering trusted regional content. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and the ARD player for media streaming, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in implementing security headers and explicit incident response information. Privacy compliance is supported by a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the site as a public broadcaster. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing explicit security policies to further strengthen trust and compliance.

Radio Bremen is a well-established public broadcasting institution in Germany, providing radio, television, and online media content primarily for the Bremen region. As a member of the ARD consortium, it holds a strong market position in regional media with multiple subsidiary radio channels and production entities. The website reflects a professional and comprehensive digital presence with high-quality content and consistent branding. Technically, the site uses modern web technologies, including lazy loading and structured data, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and partial security headers, though some improvements in explicit security policies and incident response transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, safe, and professionally managed, with no signs of malicious activity or content blocking.

NDR.de is the official website of Norddeutscher Rundfunk (NDR), a major regional public broadcaster serving Northern Germany. The site offers comprehensive media content including radio and television programming, regional news, sports, culture, and entertainment. It is well-positioned as a trusted source of regional information and media services, leveraging its affiliation with the ARD network and related media partners. The target audience is the general public in Northern Germany and German-speaking users interested in regional news and media content. Technically, the website employs modern web technologies such as responsive design, HTML5, CSS3, and JavaScript, including a custom ARD video player for streaming content. Hosting and DNS are managed via Google Cloud infrastructure, ensuring reliable performance and scalability. The site is optimized for mobile devices and accessibility, with good SEO practices and structured data implemented for enhanced search engine visibility. From a security perspective, the site uses HTTPS with strong SSL configurations and secure streaming URLs. However, explicit security headers are not evident in the provided data, and there is no visible security policy or incident response contact information. Privacy and cookie policies are not explicitly found in the analyzed content, indicating room for improvement in compliance transparency. No vulnerabilities or suspicious elements were detected, and the domain registration aligns with the organization's legitimacy. Overall, NDR.de demonstrates a high level of professionalism, content quality, and technical maturity. Strategic recommendations include publishing clear privacy and cookie policies with consent mechanisms, implementing security headers, and providing a vulnerability disclosure or security.txt file to enhance trust and compliance. These steps will further strengthen the site's security posture and regulatory adherence.

O

OPPBTP (Organisme Professionnel de Prévention du Bâtiment et des Travaux Publics)

moa-batissez-en-prevention.fr

50

The website moa-batissez-en-prevention.fr is a professional French-language resource dedicated to construction project owners (maîtres d’ouvrage) to help optimize construction operations by integrating risk prevention measures. It is affiliated with OPPBTP, a recognized professional prevention organization in the French construction sector. The site offers advice, tools, solutions, and resources focused on health and safety in construction projects. Technically, the site uses modern web technologies including Google Tag Manager, Matomo analytics, and a cookie consent solution from axept.io. The CMS appears to be Ibexa, supporting structured content and rich media. Security posture is good with HTTPS and no exposed sensitive data, though security headers and explicit security policies are not evident. Privacy compliance is basic with a cookie consent mechanism and a privacy policy linked on a partner domain. The domain registration is consistent and legitimate, registered with GANDI in 2022, appropriate for the business purpose. Overall, the website is professional, trustworthy, and well-targeted to its audience, with moderate technical performance and good content quality.

Z

Zoovu (Germany) GmbH (formerly SEMKNOX)

sitesearch360.com

65

Site Search 360, operated by Zoovu (Germany) GmbH, offers a fast, customizable on-site search solution tailored for websites and e-commerce platforms. The company positions itself as a niche provider with a strong focus on semantic search technology and ease of integration, supported by a professional website featuring customer logos from reputable brands. The technical infrastructure leverages modern web technologies including JavaScript, Google Analytics, and lazy loading for performance optimization, with excellent mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and business indicators. Overall, the website demonstrates a mature digital presence with good security and privacy practices.

Allwebco Design Corporation operates a website offering developer-grade HTML web templates, responsive designs, and related hosting and SEO support services. The company targets both professional developers and novice users, providing downloadable templates and add-ons to facilitate website building. The business has a niche market position with over 20 years of domain age, indicating established presence and credibility. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, supplemented by Google Adsense and Tag Manager for monetization and analytics. The site is mobile responsive and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve security and privacy practices.

Allwebco Design Corporation operates a niche website offering developer-grade, mobile-friendly HTML and CSS web templates primarily targeting novice and professional web developers and small businesses. The company has a long-standing presence since 2002 and provides a variety of responsive templates, built-in scripts, and support resources. Their business model centers on downloadable templates and related add-ons, complemented by web hosting services linked via partner domains. The website content is well-structured, professionally designed, and offers clear navigation with multiple template categories and support options.

L

Lutra

lutra.com.au

53

Lutra is a specialized company providing engineering and software services focused on water and wastewater treatment plants and operations. Their market position is that of a niche provider offering both software solutions like Infrastructure Data and process engineering services for water and wastewater treatment. The company targets councils, water authorities, and infrastructure operators primarily in New Zealand and Australia. Technically, the website is built on a modern stack including SilverStripe CMS, Google Tag Manager, Microsoft Clarity, and Vimeo integrations, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though formal security policies and incident response contacts are absent. Privacy compliance is basic with cookie consent and a privacy policy present but no GDPR-specific indicators. Overall, the website is professional, trustworthy, and well-branded, supporting a medium-sized business in the energy sector.

S

Schindler Portugal

schindler.pt

66

Schindler Portugal is a leading enterprise in the manufacturing and servicing of elevators, escalators, and moving walkways, operating as part of the global Schindler Group. The company offers a comprehensive range of products and modernization services tailored to residential, commercial, and industrial buildings. Their market position is strong, supported by a well-established brand and extensive service network. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting building owners, architects, and facility managers. Technically, the site leverages Adobe Experience Manager and integrates advanced analytics and consent management tools, indicating a high level of digital maturity. Security posture is robust with HTTPS, CSP, and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

B

Baidu

baidu.com

64

Baidu is a leading Chinese technology company primarily operating as a search engine and internet services provider. The website serves a broad Chinese-speaking audience offering search, news, maps, live streaming, video, forums, and academic search services. It holds a dominant market position in China with a large-scale enterprise presence. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and HTTPS for secure communication. The design is professional with good content relevance and navigation clarity, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking advanced security headers and visible privacy mechanisms. WHOIS data is unavailable, likely due to registry restrictions or privacy protections, which slightly reduces transparency but does not detract from the site's legitimacy given its prominence. Overall, Baidu's website is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

E

Elevadores Schindler, S.A. de C.V.

schindler.mx

72

Elevadores Schindler, S.A. de C.V. is a large, well-established company specializing in vertical transportation solutions such as elevators, escalators, and moving walkways in Mexico. The company operates as a subsidiary of the global Schindler Group and offers a comprehensive range of products and services including manufacturing, installation, maintenance, modernization, and digital traffic management solutions. The website is professionally designed, fully accessible, and optimized for mobile devices, providing clear navigation and rich content in Spanish tailored to the Mexican market. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple modern analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, strict Content Security Policy, and no visible vulnerabilities. Privacy compliance is evident with clear privacy and cookie policies and GDPR considerations. Contact information is complete with phone, physical address, and social media presence, enhancing business credibility. Overall, the website reflects a mature digital presence aligned with the company's market leadership in transportation solutions.

G

Geofabrik GmbH

geofabrik.de

45

Geofabrik GmbH is a specialized technology company focused on extracting, processing, and providing free geodata primarily sourced from OpenStreetMap. Their services include creating shape files, maps, map tiles, and web mapping solutions, complemented by consulting and training offerings. The company positions itself as an expert in the OpenStreetMap ecosystem, targeting businesses and organizations requiring geospatial data solutions. Technically, the website is built with standard HTML, CSS, and JavaScript (including jQuery), hosted on Hetzner infrastructure, and demonstrates moderate performance and basic mobile optimization. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but lacks advanced security headers and explicit policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with its business focus.

The domain opencage.com is registered since 2004 with Megazone Corp., a Korean registrar, but the website content is currently a parked domain page with no active business presence. The page primarily displays advertisements and a link to purchase the domain, indicating it is not in active use. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript with no modern frameworks or CMS detected. The site lacks HTTPS and security headers, and content is served via an iframe from an external ad network, limiting direct content access and user experience. No privacy, cookie, or terms of service policies are present, and no contact or business information is provided. Overall, the site has a low trustworthiness and security posture, with significant gaps in compliance and user transparency.

A

adesso SE

adesso.de

54

adesso SE is a leading IT service provider in the German-speaking region, specializing in IT consulting and software development to support digital transformation initiatives. The company serves a broad range of industries including automotive, banking, energy, healthcare, manufacturing, and public administration. Their business model focuses on delivering technologically advanced solutions that ensure long-term competitive advantages for their clients. The website reflects a mature digital presence with comprehensive service descriptions, client references, and active engagement through social media and events. Technically, the site employs modern web technologies such as Web Components, Piwik PRO analytics, and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and privacy consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

C

Camptocamp

camptocamp.com

56

Camptocamp is a well-established Open Source IT company founded in 2001, specializing in providing innovative solutions in GIS, ERP (Odoo), and IT infrastructure. The company operates internationally with offices in Switzerland, France, and Germany, targeting enterprises seeking flexible and collaborative Open Source technologies. Their business model includes consulting, implementation, subscription management, training, and hosting services, positioning them as a trusted partner in the Open Source ecosystem. Technically, the website is built on modern web technologies including Pimcore CMS, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, Facebook SDK, and LinkedIn Insight. Hosting is inferred to be on Amazon AWS, ensuring reliable infrastructure. The website demonstrates excellent design quality, mobile optimization, and accessibility, with a comprehensive cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected. The absence of a published privacy policy and terms of service in the provided content is a gap in compliance documentation. Overall, the domain registration is consistent with the business history and location, supporting legitimacy. The website is safe for general audiences with no adult or questionable content detected.

O

OpenStreetMap Deutschland

openstreetmap.de

47

OpenStreetMap Deutschland operates as a community-driven project dedicated to providing a free, editable world map. The website serves as a hub for information about the project, usage instructions, community engagement, and contribution opportunities. It holds a strong position within the open mapping community in Germany and globally, emphasizing open data and collaborative mapping efforts. Technically, the website is built using the Hugo static site generator, delivering fast performance, good mobile optimization, and accessibility. The site enforces HTTPS and avoids exposing sensitive data, though it lacks some common security headers and cookie consent mechanisms. Security posture is solid but could be improved with additional headers and published security policies. Overall, the domain is legitimate and consistent with the OpenStreetMap project, though registrant details are not publicly disclosed due to DENIC policies. The site maintains high content quality and professionalism, with minimal user tracking and a strong focus on privacy.