Security Directory

U

University of Missouri

mutigers.com

73

The University of Missouri Athletics website serves as the official digital platform for the Missouri Tigers, providing comprehensive sports-related content including schedules, rosters, news, and ticketing services. It targets university students, alumni, and sports enthusiasts, particularly those following Southeastern Conference athletics. The site is well-established with a domain age dating back to 1997, reflecting a mature online presence aligned with the university's athletics department. Technically, the website leverages modern JavaScript frameworks, content delivery networks, and integrates multiple analytics and marketing tools, indicating a moderate to advanced digital maturity. Security-wise, the site employs HTTPS with domain locking and uses reputable third-party services for chat and analytics, though it lacks DNSSEC and explicit security policies or vulnerability disclosures. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could improve in security transparency and DNS security.

F

Florida Gators

floridagators.com

66

Florida Gators is the official athletics website for the University of Florida's sports teams, providing comprehensive information on schedules, tickets, rosters, and news. The site serves a large audience of sports fans, students, and alumni, positioning itself as the authoritative source for university athletics. Technically, the website leverages a mature technology stack including Sidearm Sports CMS, jQuery, RequireJS, and multiple analytics and advertising platforms. The infrastructure is hosted on AWS CloudFront with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic but present, with clear privacy and cookie policies linked to a partner domain. Overall, the site is professional, trustworthy, and well-maintained, with no critical security issues detected.

F

Frankana Freiko GmbH

frankana.de

64

Frankana Freiko GmbH operates a well-established e-commerce platform specializing in caravan, camping, and leisure products primarily targeting customers in Germany and neighboring countries. The company offers a broad range of accessories and equipment catering to outdoor enthusiasts, positioning itself as a regional leader in this niche retail sector. The website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates Google Tag Manager and Elasticsuite for analytics and tracking purposes. Privacy compliance is addressed through a comprehensive GDPR-aligned privacy policy and a OneTrust cookie consent mechanism. Security posture is solid with HTTPS enforcement and standard security headers, although the absence of a public security policy or vulnerability disclosure page suggests room for improvement. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, making it a trustworthy platform for its target audience.

LifeWave is a health and wellness company operating an e-commerce platform focused on products that promote vitality and longevity. The website is professionally designed with a consistent brand presence and targets health-conscious consumers. The technical infrastructure leverages modern JavaScript libraries, a headless CMS (Sanity.io), and integrates analytics and cookie consent tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible advanced security headers and formal security policies. Overall, the website is accessible without WAF or blocking mechanisms, indicating stable hosting and domain management. Strategic improvements in privacy policy publication, security headers, and incident response readiness would enhance trust and compliance.

B

Blizzard Entertainment

vvisions.com

79

Blizzard Entertainment is a globally recognized leader in the video game industry, known for developing and publishing iconic game franchises. The analyzed website serves as a professional career portal targeting job seekers interested in opportunities at Blizzard, particularly in Albany and other locations. The site is well-branded, professionally designed, and provides comprehensive job listings and application functionality. Technically, the site leverages modern recruitment platforms and integrates OAuth for social login, enhancing user experience and security. The security posture is strong with HTTPS enforcement and security headers, though explicit incident response contacts are not found. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the site is trustworthy, professional, and aligned with Blizzard's enterprise stature.

P

Portland State University

goviks.com

67

Portland State University Athletics operates an official website serving as the primary digital platform for the university's sports teams and athletics community. The site provides comprehensive sports-related content including schedules, rosters, news, ticketing information, and fan engagement features. It targets students, alumni, sports fans, and the broader university community, positioning itself as a trusted source for collegiate athletics information. The business model is centered on information dissemination and community engagement within the education and sports sectors. Technically, the website leverages a modern technology stack including jQuery, RequireJS, Google Tag Manager, and Google Analytics, hosted on Amazon Cloudfront CDN with DNS managed by Rackspace. The site uses the Sidearm Sports CMS platform specialized for collegiate athletics, ensuring good mobile optimization, accessibility, and SEO practices. Performance is moderate with extensive use of third-party scripts for analytics and advertising. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism or published security and incident response policies, which are areas for improvement. The domain registration is long-standing and consistent with the university's branding, indicating high legitimacy and trustworthiness. Overall, the website is professional, content-rich, and technically sound but could enhance privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

VisitGreenvilleSC is a destination marketing website focused on promoting tourism in Greenville, South Carolina. The site offers comprehensive information on local attractions, restaurants, hotels, shopping, and events, positioning itself as a key resource for visitors planning trips to the area. The business model centers on destination marketing and visitor engagement, targeting tourists and travelers interested in Greenville's offerings. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience.

O

OW2 Consortium

ow2.org

64

OW2 Consortium operates as a non-profit open source community organization dedicated to promoting professional-grade open source software for corporate information systems. The website reflects a mature and well-structured community platform offering project hosting, governance, and ecosystem development services. It targets open source developers, corporate IT professionals, SMEs, academics, and individuals interested in open source software. The organization maintains a strong market position with a broad portfolio of projects and active community engagement through events and webinars. Technically, the website is built on the XWiki platform with modern JavaScript libraries and frameworks, hosted by Ikoula, and employs Matomo for privacy-conscious analytics. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and explicit security policies. Privacy compliance is evident with accessible privacy and cookie policies, and GDPR considerations are addressed. Overall, the website is professional, trustworthy, and aligned with the organization's mission, though improvements in security transparency and contact information could enhance trust further.

N

NGI Search

ngisearch.eu

52

NGI Search is a European Union funded research initiative focused on incubating the next generation of web searching tools. The project emphasizes open source development of advanced search and discovery technologies including voice and image interfaces, intelligent assistants, and machine learning methodologies. Positioned as a niche research entity within the Next Generation Internet ecosystem, NGI Search targets developers, researchers, and organizations interested in innovative search technologies. The website serves as an information portal and collaboration platform for the project and its community.

S

Scoutshop

scoutshop.se

61

Scoutshop is an e-commerce retailer specializing in scouting and outdoor equipment, offering products such as scout clothing, backpacks, and camping gear. The business emphasizes eco-friendly and fair trade products, with proceeds supporting the Scouting movement in Sweden. The website is built on the Magento platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager, reCAPTCHA, and Cookiebot for consent management. The site demonstrates a good level of technical maturity with responsive design and moderate performance. Security measures include HTTPS enforcement and monitoring via New Relic, though explicit security headers and privacy policies are not fully visible. Overall, the site presents a professional and trustworthy front for its niche market.

P

PBworks, Inc.

pbworks.com

59

PBworks, Inc. operates a SaaS-based online team collaboration platform that enables teams to capture knowledge, share files, and manage projects securely and reliably. The company targets a broad audience including businesses, agencies, legal firms, and educational institutions, offering specialized hubs tailored to these sectors. The website presents a professional image with clear navigation and comprehensive service descriptions, positioning PBworks as an established player in the collaboration software market. Technically, the website is built using Adobe Muse with jQuery and RequireJS, and integrates Google Analytics for user tracking. While the site is accessible and functional, it uses an outdated jQuery version and lacks modern security headers, indicating room for technical modernization and improved security hardening. Mobile optimization and accessibility are basic but functional. From a security perspective, the site implements cookie consent and privacy policies aligned with GDPR, but lacks publicly visible incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain is a concern, as it reduces transparency and trustworthiness. No WAF or blocking mechanisms were detected, and the content is safe and business-focused. Overall, PBworks demonstrates a solid business and technical foundation but should address security best practices and domain transparency to enhance trust and compliance. Strategic improvements in security headers, updated libraries, and public security policies are recommended.

B

Barnaby Walters

waterpigs.co.uk

46

The website waterpigs.co.uk is a personal blog and portfolio site for Barnaby Walters, focusing on his interests in musical instrument building, music performance, programming, electronics, wildlife, and IndieWeb technologies. The site serves a niche audience interested in these topics and provides detailed notes, articles, and technical insights. The business model is personal content sharing without commercial sales or services. Technically, the site uses a modern but simple tech stack including HTML5, CSS, JavaScript, Leaflet.js, and RequireJS, hosted by Hostinger in Lithuania. The site is built on the Taproot framework and follows IndieWeb standards, indicating a mature digital presence. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is provided via email and social media links, enhancing credibility. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

Mohegan Sun Arena at Casey Plaza is a regional event venue located in Wilkes-Barre, Pennsylvania, specializing in hosting concerts, sports, and entertainment events. The website is professionally designed and targets a general audience interested in attending events at the venue. It operates under the ASM Global platform, a recognized leader in venue management. The site leverages modern web technologies including RequireJS, jQuery, Google Tag Manager, and Cloudinary for media management, indicating a mature technical infrastructure. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism in place, supporting GDPR compliance. However, the absence of WHOIS data and explicit contact information slightly reduces trustworthiness. Overall, the website presents a professional and secure digital presence suitable for its business model.

A

Acorn Welding

acornwelding.com

49

Acorn Welding is a specialized aviation welding company positioned as Canada's largest aircraft exhaust and engine mounts repair company and the world's largest radial and vintage aircraft exhaust repair company. Their website showcases a broad product catalog and manufacturing capabilities, targeting aviation professionals and aircraft owners globally. The business model combines manufacturing, repair services, and e-commerce sales. Technically, the website is built on Magento with modern JavaScript libraries and integrates analytics and customer support tools. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks comprehensive security headers and explicit privacy policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer contact information.

A

Aerospace Welding Minneapolis, Inc.

awi-ami.com

57

Aerospace Welding Minneapolis, Inc. (AWI) is a well-established company founded in 1993 specializing in the manufacturing and repair of general aviation aircraft exhaust systems and engine mounts. The company holds FAA certifications and offers a range of services including certified welding, precision machining, and sheet metal fabrication. Their market position is strong as a world leader in their niche, targeting aviation professionals and aircraft owners. The website reflects a medium-sized business with a professional online presence built on Magento CMS, featuring e-commerce capabilities and clear contact information. Technically, the website employs modern web technologies such as Magento 2, RequireJS, jQuery, and Bootstrap, with Cloudflare DNS and GoDaddy as the registrar. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enforced and CAPTCHA on login, but improvements are recommended in DNSSEC deployment, cookie security flags, and security headers. Privacy compliance is basic with privacy and terms pages present but lacking explicit cookie consent mechanisms. Overall, the security posture is adequate but could be enhanced by implementing additional security headers and improving cookie security. No critical vulnerabilities or WAF blocking were detected, allowing full content accessibility. The business credibility is high, supported by FAA certifications and transparent contact details. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enabling DNSSEC, enforcing secure cookie flags, adding comprehensive security headers, and implementing explicit cookie consent to improve privacy compliance and user trust.

R

Russell Stover

russellstover.com

71

Russell Stover is a well-established chocolate and candy brand operating a professional e-commerce website offering a wide range of products including traditional chocolates, gift baskets, and sugar-free options. The website targets consumers seeking quality confectionery gifts and personalized chocolate boxes. The business operates under the retail and e-commerce sectors and is a subsidiary of Lindt & Sprüngli, a globally recognized chocolate manufacturer. The website demonstrates consistent branding and good content quality, supporting its market position as a trusted chocolate retailer. Technically, the website is built on Magento Commerce with modern JavaScript frameworks and integrates multiple analytics and marketing platforms such as Google Tag Manager, Adobe Experience Cloud, and New Relic for performance monitoring. The site is mobile-optimized and employs standard SEO and accessibility practices, although accessibility could be improved further. Performance is moderate with room for optimization. From a security perspective, the website enforces HTTPS, uses standard security headers, and employs CAPTCHA on forms to mitigate automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response contact information suggests areas for improvement in transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main risk factor is the lack of WHOIS data, which may be due to privacy protection or query limitations but warrants monitoring. Strategic recommendations include publishing a security policy, enhancing incident response visibility, and improving accessibility compliance to further strengthen trust and security posture.

T

TYR

tyr.com

67

TYR is a retail and e-commerce company specializing in athletic shoes, training apparel, and competitive swimwear. The website targets athletes and fitness enthusiasts, offering products such as swimwear, swimming goggles, and triathlon gear. The site is built on the Magento platform and integrates various marketing and analytics tools including Google Tag Manager, Yotpo, and Klaviyo. The technical infrastructure is modern and supports a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though explicit security headers and privacy policies are not clearly visible. The site collects extensive user data for marketing purposes but lacks visible compliance documentation. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

G

Graubündner Kantonalbank

gkb.ch

69

Graubündner Kantonalbank is a well-established regional cantonal bank in Switzerland, offering a broad range of financial services including retail banking, private banking, mortgages, and digital banking solutions. The bank holds a strong market position in the Graubünden region, supported by a state guarantee and a history dating back to 1870. The website reflects a mature digital presence with comprehensive service information and customer engagement channels.

A

Axel Springer Deutschland GmbH

lesershop24.de

65

Lesershop24.de is the official subscription e-commerce platform for Axel Springer Deutschland GmbH, offering a wide range of newspaper and magazine subscriptions. The website targets German-speaking customers seeking reliable and secure subscription services for well-known publications such as BILD, DIE WELT, and AUTO BILD. The platform emphasizes direct ordering from the publisher, secure payment options, and attractive premiums, positioning itself as a trusted and professional service in the media subscription market. Technically, the site is built on Magento Commerce, leveraging modern JavaScript frameworks and CDN services from Akamai, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, secure payment logos, and cookie consent mechanisms, although explicit security headers and a published security policy are not evident. Privacy compliance is robust, with a comprehensive privacy policy and active consent management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, suitable for its target audience and business model.

M

Malý Chmel

maly-chmel.cz

58

Malý Chmel is a small architectural studio based in Prague and České Budějovice, Czech Republic, offering architectural design and model making services. The website is built on the Wix platform and integrates Google Analytics and Google Tag Manager for visitor tracking. The site presents professional content with good design and navigation, targeting a general audience interested in architectural services. Security posture is moderate with HTTPS enabled but lacks security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, but the website content suggests a legitimate small business. Strategic recommendations include adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

5

5G Techritory

techritory.com

65

Techritory is a professional forum and event platform focused on advancing connectivity and digitalization technologies, particularly in telecommunications such as 5G and 6G. The organization hosts large-scale events in Riga, Latvia, attracting industry leaders, policymakers, and innovators. The website reflects a mature digital presence with strong SEO, accessibility, and privacy compliance, including GDPR-aligned cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy that should be addressed to ensure trustworthiness. The site integrates modern web technologies and analytics tools with minimal user tracking, supporting a privacy-conscious approach.

C

Custom Building Products

custombuildingproductstraining.com

60

Custom Building Products Training is an online educational platform specializing in video training modules for tile industry professionals. The platform offers courses on surface preparation, tile setting, grouting, care, and industry standards such as ANSI and TCNA guidelines. The business operates a niche educational service targeting professionals in the tile installation and specification market. The website is built on the Moodle LMS platform, leveraging modern JavaScript libraries and video playback technologies to deliver content effectively. While the technical infrastructure is solid and performance moderate, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. The domain registration is consistent with the business, indicating legitimacy and stability. Overall, the site presents a professional and trustworthy educational resource but would benefit from enhanced compliance and security measures.

U

University of Colorado Colorado Springs

gomountainlions.com

66

The University of Colorado Colorado Springs (UCCS) Athletics website serves as the official digital platform for the Mountain Lions sports teams, providing comprehensive information including schedules, rosters, news, and fan engagement resources. Positioned as a key resource for students, athletes, and fans, the site supports NCAA Division II athletics within the Rocky Mountain Athletic Conference. The business model focuses on delivering timely sports content and fostering community involvement through digital channels. Technically, the website leverages a modern technology stack including JavaScript frameworks, RequireJS, jQuery, and integrates with multiple third-party services such as Google Analytics, Facebook Pixel, and Google Tag Manager. Hosting is managed via AWS Cloudfront CDN, ensuring reasonable performance and scalability. The site demonstrates good mobile optimization and accessibility features, with a consistent and professional design. From a security perspective, the site enforces HTTPS and employs domain transfer protections. However, it lacks some advanced security headers like Content-Security-Policy and explicit incident response contact information. Privacy compliance is addressed with accessible privacy and cookie policies, including consent mechanisms. No critical vulnerabilities or suspicious patterns were detected, indicating a mature security posture suitable for an educational institution. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.

B

BetConstruct

cmsbetconstruct.com

61

The website backoffice.betconstruct.com serves as an internal backoffice platform for BetConstruct, a technology provider specializing in betting and gaming solutions. The platform appears designed for business users such as partners and internal staff, offering tools for sportsbook management, user and partner management, and CRM functionalities. The site is part of an enterprise-level business model focused on B2B services within the technology industry. The content is minimal and functional, lacking public marketing or customer-facing information. Technically, the site is built on an older AngularJS 1.3.13 framework, supplemented by Kendo UI and RequireJS for modular loading. It integrates analytics and chat support via Mixpanel and Hoory SDK respectively. The site shows moderate performance and basic mobile optimization but lacks modern SEO and accessibility features. No CMS or hosting provider details are evident from the source. From a security perspective, the site uses HTTPS but does not exhibit explicit security headers in the provided HTML. The use of an outdated AngularJS version introduces potential vulnerabilities. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance and transparency. External links are mostly to trusted domains except for one unusual rate widget domain, which should be reviewed. No WAF or blocking mechanisms were detected, and no sensitive data exposure was found. Overall, the site is functional for its internal business purpose but requires modernization of its technology stack, improved security practices, and enhanced privacy compliance to reduce risk and improve trustworthiness.

E

Estheticon

estheticon.it

60

Estheticon is a well-established Italian healthcare platform specializing in plastic and aesthetic surgery, dermatology, and cosmetic procedures. It serves as a comprehensive marketplace and informational resource connecting patients with doctors and clinics, enriched by extensive patient reviews and multimedia content. The platform targets individuals seeking aesthetic medical services in Italy and has been operational since 2006, supported by a consistent brand presence and a medium-sized business footprint. Technically, the website employs a modern technology stack including jQuery, Foundation framework, Google Tag Manager, Google Analytics, and Facebook Pixel, ensuring good mobile optimization and SEO practices. The site is hosted securely with HTTPS and implements standard security headers, cookie consent mechanisms, and privacy policies aligned with GDPR requirements. From a security perspective, the site demonstrates a solid posture with no detected vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. The WHOIS data corroborates the legitimacy of the domain and business identity, reinforcing the platform's credibility. Overall, Estheticon presents a professional, trustworthy, and user-friendly online presence with moderate tracking and advertising practices. Strategic enhancements in security transparency and accessibility could further strengthen its market position and user confidence.

S

SANITINO

sanitino.cz

68

Sanitino.cz is a professional e-commerce retailer specializing in sanitary technology and kitchen products, targeting primarily the Czech market. The website offers a broad range of products from well-known brands, supported by expert advice and fast delivery services. The company holds recognized certifications such as APEK and awards from Heureka, reinforcing its market credibility. Technically, the website employs modern JavaScript libraries and tracking tools, with a responsive design optimized for mobile users. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly confirmed or improved. The absence of WHOIS data limits domain trust assessment but does not detract significantly from the overall legitimacy given the professional presentation and trust signals. Overall, Sanitino.cz presents a secure, user-friendly, and trustworthy platform for sanitary and kitchen product retail.

V

VITAR Sport, s.r.o.

enervitsport.sk

60

VITAR Sport, s.r.o. operates the ENERVIT e-shop, a specialized online retailer focused on sports nutrition and compression clothing primarily targeting endurance athletes and sports enthusiasts in Slovakia and the Czech Republic. The company serves as the official distributor of the Enervit brand, offering a wide range of products designed to support athletic performance, energy replenishment, and recovery. The website is professionally designed with clear navigation, supporting a positive user experience and trustworthiness. Technically, the site leverages modern e-commerce frameworks, integrates multiple analytics and marketing tools, and employs security measures such as Google reCAPTCHA and cookie consent management. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the site demonstrates a solid security posture and business credibility, with no signs of blocking or WAF interference.

S

Sensilab d.o.o.

sensi2live.com

69

Sensilab d.o.o. operates an e-commerce platform specializing in health, wellness, and beauty supplements targeting European consumers. The website is built on Magento CMS and integrates various third-party services such as Algolia Search and Klaviyo for marketing and analytics. The business offers a range of products including weight loss, stress relief, immunity, and hormone balance supplements. The site features a cookie consent mechanism and multiple payment options, indicating a focus on user experience and compliance. However, the absence of a visible privacy policy and terms of service, combined with missing WHOIS data, raises concerns about transparency and domain legitimacy. Technically, the site uses modern JavaScript libraries and frameworks but lacks some security headers, which could be improved to enhance security posture.

S

SANITINO

sanitino.sk

67

Sanitino.sk is a professional e-commerce retailer specializing in sanitary technology and bathroom equipment, serving primarily the Slovak market with a strong presence in multiple European countries through localized sister domains. The website offers a broad range of products from reputable brands such as Grohe, Hansgrohe, Geberit, and Kludi, supported by technical advice and fast delivery services. The business is positioned as a leading seller in its sector with a medium-sized operation and a clear focus on customer service and product variety. Technically, the website employs modern JavaScript frameworks, asynchronous loading, and tracking tools such as Google Tag Manager and OneTrust for cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced and nonce usage in scripts, although some security headers could be improved. Overall, the site is trustworthy, professionally designed, and compliant with GDPR, with no signs of malicious activity or content blocking.

S

SENSILAB farmaceutická spoločnosť d. o. o.

sensilab.sk

77

Sensilab Slovensko operates as a premium nutritional supplements e-commerce platform targeting health-conscious consumers primarily in Slovakia and internationally. The company is positioned as an established player with over 3.5 million satisfied customers worldwide, offering natural supplements for hormonal balance, detoxification, and weight management. The website is built on Magento, leveraging modern JavaScript libraries and integrations with leading marketing and analytics tools such as Google Analytics, Klaviyo, and Algolia. Payment processing is handled through reputable gateways including PayU, Adyen, and PayPal, ensuring secure transactions. The site demonstrates good technical maturity with HTTPS enforcement, content security policies, and cookie consent mechanisms aligned with GDPR requirements. Privacy policies are comprehensive and clearly communicated, including a named Data Protection Officer contact. Security posture is strong with no critical vulnerabilities detected, though the absence of a dedicated security policy or vulnerability disclosure page is noted. Overall, the website presents a professional, trustworthy, and compliant digital presence suitable for its business model.

C

E-Zigaretten für Einsteiger und Profis| Club der Dampfer Shop

clubderdampfer.de

56

Club der Dampfer is a German e-commerce retailer specializing in vaping products including e-cigarettes, liquids, flavors, bases, pods, and accessories. The website targets both beginners and professional vapers, offering a broad product range with frequent promotions. The site is built on the Magento 2 platform, leveraging various third-party modules for enhanced functionality and user experience. The technical infrastructure is modern and mobile-optimized, providing good SEO and accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal policies such as privacy and cookie policies. No contact or incident response information is publicly available, which limits transparency and trust. Overall, the site is functional and professional but could improve compliance and security transparency.

U

UMass Dartmouth

corsairathletics.com

66

UMass Dartmouth Corsairs is the official athletics website for the University of Massachusetts Dartmouth, providing comprehensive sports information including schedules, rosters, news, and facilities details for a variety of men's and women's sports teams competing at the NCAA Division III level. The site targets students, athletes, alumni, and sports fans interested in university athletics. The business model is focused on supporting and promoting collegiate sports programs within the educational sector. Technically, the website leverages a modern content management platform specialized for sports (Sidearm Sports), combined with common web technologies such as jQuery, RequireJS, and Knockout.js. It uses multiple CDNs including AWS Cloudfront and Rackspace for DNS, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and comScore. The site is mobile optimized and includes accessibility features, though some performance optimizations and security header implementations could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but uses an outdated version of jQuery and lacks DNSSEC and some recommended security headers such as Content-Security-Policy. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit terms of service or incident response policies are found. No contact emails or phone numbers are directly listed, which may limit user support transparency. Overall, the website is legitimate, professionally maintained, and serves its educational athletics purpose well. Strategic improvements in security headers, library updates, and enhanced privacy disclosures would strengthen its security posture and user trust.

C

Cineplex

cineplex.de

67

Cineplex operates a network of cinemas in Germany, offering movie programs, ticket booking, and promotional activities. The website is professionally designed with consistent branding and targets a general audience interested in cinema entertainment. The technical infrastructure leverages modern JavaScript frameworks, Cloudflare for DNS and security, and Cookiebot for GDPR-compliant cookie management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and Cloudflare protection, though there is room for improvement in security headers and published policies. The site integrates multiple advertising and analytics services, maintaining good privacy compliance through explicit consent mechanisms. Overall, Cineplex's website reflects a mature digital presence suitable for a large hospitality business.

exali AG operates a professional indemnity insurance platform targeting freelancers, self-employed professionals, and companies across Europe, with a focus on digital professions such as IT, media, and consulting. The company offers modular insurance products accessible via an online real-time calculator, enabling quick and tailored insurance coverage. The website is well-structured, professionally designed, and provides clear contact points including multiple customer care representatives, enhancing user trust and engagement. Technically, the site employs modern JavaScript libraries and consent management tools, ensuring compliance with privacy regulations and a good user experience across devices. Security posture is solid with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is missing or privacy protected, which slightly reduces transparency but is not uncommon for this business type. Overall, the site demonstrates a mature digital presence with good business credibility and moderate to strong security practices.

exali AG is a Swiss-based digital insurance provider specializing in professional liability and related insurance products tailored for freelancers, self-employed professionals, and companies primarily in IT, media, consulting, and eCommerce sectors. Founded in 2008, exali has established a strong market presence across 28 European countries with over 20,000 customers. Their business model emphasizes fast, flexible, and modular insurance solutions accessible online with personalized expert support. The website reflects a professional and trustworthy brand with comprehensive product information and strong customer testimonials, including a high eKomi rating. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, Google Tag Manager, and Usercentrics for consent management, ensuring GDPR compliance. The site is mobile-optimized with lazy loading and interactive UI components, delivering a good user experience and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and a formal security policy page are absent. Overall, exali demonstrates a mature digital infrastructure and a strong security and privacy awareness, though improvements in explicit security documentation and headers could enhance their posture. The site is fully accessible without WAF or blocking mechanisms, supporting a high trust level for users and partners.

exali AG is a digital insurance provider specializing in tailored insurance solutions for freelancers, self-employed professionals, and companies primarily in the IT, media, consulting, and e-commerce sectors. Operating since 2008, exali offers modular insurance products such as IT liability, media liability, consulting liability, e-commerce insurance, D&O insurance, and cyber insurance. The company emphasizes fast online contract conclusion, personal expert support, and worldwide business protection, serving over 20,000 customers across 28 European countries. The website reflects a professional, well-structured digital presence with strong trust signals including customer testimonials and an eKomi Gold certification. Technically, the website employs modern JavaScript libraries including RequireJS, jQuery, and Google Tag Manager, with asynchronous loading and lazy loading of images to optimize performance. Usercentrics is integrated for consent management, ensuring GDPR compliance. The site is mobile-optimized and SEO-friendly, with clear navigation and comprehensive content. Security posture is good with HTTPS enforced and consent-based tracking, though explicit security headers and incident response policies are not publicly disclosed. The WHOIS data for the domain www.exali.at is unavailable, which slightly reduces the domain trustworthiness score. However, the overall business credibility and website quality remain high. No WAF or blocking mechanisms were detected, allowing full content accessibility and analysis. Overall, exali AG presents a mature digital insurance business with a strong market position in Europe, leveraging technology for efficient customer service and compliance. Strategic improvements could include publishing detailed security policies and incident response information, and ensuring WHOIS transparency to enhance domain legitimacy.

S

Stiftung Naturschutzfonds Brandenburg

naturschutzfonds.de

52

The Stiftung Naturschutzfonds Brandenburg operates as a regional non-profit foundation dedicated to practical nature conservation across Brandenburg, Germany. The website clearly communicates its mission to fund and implement conservation projects, secure protected lands, and engage the public through educational and volunteer initiatives. The foundation targets local governments, associations, agricultural entities, and private individuals interested in environmental protection. The site demonstrates a strong market position as a key player in Brandenburg's conservation efforts. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Leaflet for interactive maps, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing user privacy. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improved transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security documentation and headers would further strengthen its posture.

exali AG is a specialized digital insurance provider focused on offering tailored insurance solutions for freelancers, self-employed professionals, and companies primarily in IT, media, consulting, legal, and eCommerce sectors. Founded in 2008 and headquartered in Germany, exali has established a strong market presence with over 20,000 customers across 28 European countries. Their business model emphasizes fast, flexible, and modular insurance products accessible online with personal expert support. The website reflects a professional and trustworthy brand with comprehensive service offerings and strong customer trust signals such as eKomi Gold Seal and detailed testimonials. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, and Usercentrics for consent management, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and uses lazy loading for performance. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though HTTP security headers and explicit incident response contacts could be improved. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. The site respects GDPR requirements and provides clear contact channels. The domain WHOIS data aligns well with the business claims, indicating legitimacy and consistent registration. No WAF or blocking mechanisms interfere with content access. Strategically, exali is well-positioned as a digital-first insurer catering to niche professional markets with scalable and customizable insurance products. The website supports this positioning with clear navigation, rich content, and strong trust indicators, making it a credible and reliable platform for its target audience.

S

Stiftung Naturschutzfonds Brandenburg

life-bachmuschel.de

51

Stiftung Naturschutzfonds Brandenburg operates as a non-profit environmental conservation organization focused on protecting the Bachmuschel (freshwater mussel) and associated river ecosystems through the LIFE Bachmuschel project. This project is funded by the EU LIFE program and supported by reputable research partners, positioning the foundation as a key player in regional biodiversity and water habitat preservation. The website effectively communicates project goals, partner involvement, and provides comprehensive contact information, reflecting a professional and trustworthy presence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Leaflet.js for interactive maps. It employs Matomo analytics for privacy-conscious visitor tracking and implements a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility features, and SEO practices, though some security headers could be enhanced. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contacts, which are recommended for improved transparency and readiness. The domain WHOIS data aligns well with the organization's identity, supporting legitimacy and trust. Overall, the website presents a secure, privacy-aware, and professionally managed digital platform that supports the foundation's mission and stakeholder engagement effectively.

S

Stiftung Naturschutzfonds Brandenburg

naturwacht.de

52

Stiftung Naturschutzfonds Brandenburg is a regional non-profit foundation dedicated to practical nature conservation in Brandenburg, Germany. The organization focuses on funding and implementing projects that protect biotopes and species, securing natural areas for future generations. Their website reflects a professional and well-structured digital presence, emphasizing transparency, accessibility, and user engagement through clear navigation and comprehensive content. The foundation targets a broad audience including local communities, environmental groups, and private individuals interested in conservation efforts. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and privacy-conscious analytics via Matomo. The site demonstrates good performance, mobile optimization, and accessibility features, ensuring a positive user experience. The cookie consent mechanism is robust and GDPR-compliant, reflecting a strong commitment to privacy. From a security perspective, the site enforces HTTPS and employs privacy-respecting analytics, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The website is trustworthy, with consistent WHOIS data and legitimate domain registration. It maintains high standards of content quality and privacy compliance, making it a reliable source of information and engagement for its audience.

A

Aheadworks

langshop.io

66

Langshop.io is a SaaS provider specializing in multilingual translation solutions for e-commerce platforms, specifically Shopify and Magento 2. The company offers applications and extensions that enable store owners to translate their stores effortlessly, import translations, and improve SEO for multilingual reach. The business is positioned as a niche player in the e-commerce translation market, targeting merchants who require seamless multilingual capabilities. Technically, the website is built on Magento 2 with integrations of modern JavaScript libraries such as jQuery, RequireJS, and KnockoutJS, alongside marketing and analytics tools including Google Analytics, Facebook Pixel, and Klaviyo. The domain is relatively new, registered in 2021, and uses privacy protection services, which is typical for SaaS startups. Security posture is good with HTTPS enforced and domain locks in place, but lacks advanced DNS security features like DNSSEC and does not publish explicit security or incident response policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service pages. Overall, the website is professional and functional but could improve transparency and compliance documentation.

G

GEORG BÖRNER

georgboerner.de

73

GEORG BÖRNER operates a professional website focused on providing sealing systems for civil engineering projects, targeting infrastructure and transportation sectors. The company positions itself as a specialized B2B supplier with a medium-sized market presence in Germany. The website is built on the Magento e-commerce platform, leveraging modern frontend technologies such as RequireJS, jQuery, KnockoutJS, and Algolia Search for enhanced user experience and search capabilities. Analytics and monitoring are implemented via Matomo and New Relic, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit security policies are recommended. Overall, the website is professional, trustworthy, and safe for general audiences.

T

TEXSA

texsa.fr

66

TEXSA is a French company specializing in manufacturing and supplying waterproofing solutions, accessories, geotextiles, drainage, and vegetalization products primarily targeting the construction industry. The website reflects a professional B2B business model with a medium-sized market presence in France. The technical infrastructure is built on Magento, a robust e-commerce platform, integrated with modern technologies such as RequireJS, Algolia Search, and Google Tag Manager, indicating a mature digital setup. Security posture is generally good with HTTPS enforced and use of monitoring tools like New Relic; however, explicit security headers and privacy policies are lacking, which could be improved to enhance compliance and trust. The absence of WHOIS data is a notable gap in domain legitimacy verification, though the website content and technical implementation suggest a legitimate business. Overall, the site is well-designed, mobile-optimized, and provides a good user experience, but could benefit from clearer privacy and contact information disclosures.

T

TEXSA

texsa.com

66

TEXSA is a French company specializing in manufacturing and distributing waterproofing solutions, accessories, geotextiles, drainage systems, and greening products primarily targeting construction professionals and businesses. The website is built on the Magento e-commerce platform, integrating modern technologies such as Algolia Search, Google Tag Manager, and New Relic for performance monitoring. The site demonstrates good design quality, mobile optimization, and user experience, although some accessibility features could be improved. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to enhance trust. Overall, the website presents a professional and functional digital presence for TEXSA's business operations.

S

Soprema México

soprema.com.mx

77

Soprema México operates as a regional branch of the international Soprema group, specializing in manufacturing and distributing innovative building envelope products such as waterproofing, insulation, soundproofing, and vegetative solutions. The website targets construction professionals and building owners in Mexico, providing a comprehensive product catalog and resources. Technically, the site is built on Magento 2 with a modern tech stack including RequireJS, jQuery, and Algolia Search, supported by Google Tag Manager and ElasticSuite for analytics and tracking. The site demonstrates good digital maturity with responsive design and SEO optimizations. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the business's market position.

S

Soprema México

soprema.mx

77

Soprema México operates as a regional branch of the international Soprema group, specializing in manufacturing and supplying innovative building envelope solutions including waterproofing, thermal and acoustic insulation, and vegetative roofing. The company targets construction professionals, architects, and installers, positioning itself as a trusted expert in roofing and building envelope technologies within the Mexican market. The website reflects a mature digital presence with a Magento 2 e-commerce platform, integrated advanced search via Algolia, and comprehensive content supporting its B2B business model. Technical infrastructure is robust, leveraging modern JavaScript frameworks and third-party integrations such as Google Tag Manager and New Relic for analytics and performance monitoring. Security posture is solid with HTTPS enforcement, security headers, and CAPTCHA protections on forms, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy in Spanish. Overall, the website demonstrates a professional and trustworthy online presence aligned with the company's market position and business objectives.

S

Soprema Norway

soprema.no

74

Soprema Norway is a specialized manufacturing company focused on waterproofing and insulation solutions, targeting construction professionals and businesses within Norway. The website demonstrates a solid market position as an expert in its field, offering a range of construction materials and services. The digital infrastructure is built on a Magento e-commerce platform, enhanced with modern technologies such as Algolia for search and Google Tag Manager for analytics, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit privacy documentation. Overall, the website is professional and trustworthy, supporting the company's business objectives effectively.

S

SOPREMA Ireland

soprema.ie

75

SOPREMA Ireland is a well-established business specializing in waterproofing, insulation, and green building solutions, targeting construction professionals and building owners in Ireland. The company operates a professional Magento-based e-commerce platform that showcases its product offerings and services, reflecting a strong market position within the manufacturing and construction sectors. The website demonstrates a good level of digital maturity with modern technologies such as Algolia search, Google Tag Manager, and New Relic monitoring integrated for performance and analytics. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security policies and incident response disclosures are not publicly available, the use of monitoring tools and privacy compliance indicates a reasonable security posture. No critical vulnerabilities or suspicious activities were detected in the website content or technical setup. Overall, the website presents a trustworthy and professional front for SOPREMA Ireland, with good content quality, technical implementation, and privacy compliance. The lack of WHOIS data limits full domain trust analysis but does not raise immediate concerns. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and enhancing accessibility features to further strengthen the security and compliance posture.

S

Soprema NL B.V.

soprema.nl

74

Soprema NL B.V. is a well-established manufacturer and supplier specializing in waterproofing, insulation, and roofing solutions primarily serving the construction and industrial sectors in the Netherlands and Europe. The company operates a professional and well-branded website built on the Magento 2 platform, integrating advanced search capabilities via Algolia and comprehensive analytics through Google Tag Manager and Maze. The website demonstrates a mature digital presence with good SEO, privacy compliance, and user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Soprema NL B.V. presents a credible and trustworthy online presence aligned with its business operations.

S

Soprema UK

soprema.co.uk

74

Soprema UK is a leading manufacturer and supplier of waterproofing, roofing, and insulation solutions tailored for the construction industry in the United Kingdom. The company holds a strong market position as a trusted provider with ISO certifications, serving primarily B2B clients such as contractors and building professionals. Their website reflects a professional and consistent brand image, offering detailed product information and services. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and search technologies like Algolia, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although public security policies and vulnerability disclosures are absent. The WHOIS data is unavailable due to domain naming rules errors, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy of the business. Recommendations include improving accessibility, publishing security policies, and adding vulnerability disclosure channels to enhance trust and compliance.