Security Directory

C

Component Shop

componentshop.co.uk

55

Component Shop is a UK-based e-commerce retailer specializing in electronic components, including radio control and airsoft batteries, connectors, and related accessories. The website targets hobbyists and professionals in the electronics and radio control sectors, offering a broad product catalog with next-day delivery and worldwide shipping. The business operates on a Magento platform, indicating a mature e-commerce infrastructure with standard features such as search, customer accounts, and cart management. Technically, the website employs modern web technologies including Magento CMS, RequireJS, jQuery, Bootstrap, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with clear navigation. However, some security best practices such as implementing security headers are missing, and the WHOIS data for the domain is unavailable due to a registration error, which impacts trustworthiness. Security posture is moderate with HTTPS enforced and cookie consent mechanisms in place, but the absence of explicit security policies and incident response contacts is a gap. No vulnerabilities or malware indicators were detected in the content. Privacy compliance is good with GDPR-related notices and cookie banners. Overall, the website is functional and professional but would benefit from improved transparency in domain registration and enhanced security headers. Strategic recommendations include addressing WHOIS registration issues, implementing security headers, and publishing security and incident response policies to enhance trust and compliance.

C

Culinary Concepts

culinaryconcepts.co.uk

65

Culinary Concepts is a UK-based ecommerce retailer specializing in designer homeware, unique gifts, and home decor. The company offers a curated selection of luxury items including table accessories, barware, lighting, furniture, and gift bundles. Their market position targets consumers seeking stylish and high-quality home accessories with a focus on aesthetic appeal and unique designs. The website is built on Magento 2, leveraging modern frontend technologies such as jQuery and Swiper.js, providing a responsive and user-friendly shopping experience. The site includes essential ecommerce features like search autocomplete, product reviews, and a shopping cart system. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers are missing and privacy policy documentation is not clearly found. Tracking and marketing tools include Google Tag Manager, Facebook Pixel, and Mouseflow, indicating moderate user tracking. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security headers are recommended.

S

Stephensons

stephensons.com

73

Stephensons is a well-established family-run business specializing in catering equipment and supplies, serving primarily the UK hospitality and catering sectors. The company offers a wide range of products including food packaging, crockery, cutlery, and glassware, with a focus on next day delivery services. Their market position is strong within the UK, supported by a professional e-commerce platform built on Magento. The website demonstrates good content quality, clear navigation, and consistent branding, targeting business customers in the catering industry. Technically, the website leverages modern e-commerce technologies such as Magento, jQuery, and integrates analytics and marketing tools including Google Analytics and Feefo reviews. The site is mobile-optimized and performs moderately well, with standard SEO and accessibility features. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and incident response information are not publicly available. Overall, the website presents a professional and trustworthy front for Stephensons, though the lack of WHOIS data raises questions about domain registration transparency. No blocking or WAF mechanisms interfere with access, and privacy compliance appears adequate with cookie consent and privacy policies in place. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and verifying domain registration details for full trust assurance.

Edelbrock, LLC. is a well-established American company specializing in manufacturing and selling high-performance automotive parts such as carburetors, cylinder heads, intake manifolds, EFI systems, and superchargers. Founded in 1938, Edelbrock holds a strong market position as a respected brand in the automotive aftermarket sector, targeting automotive enthusiasts and professionals. The company operates an e-commerce platform powered by Magento, offering a broad product catalog and related brands, enhancing its market reach. The website demonstrates a mature technical infrastructure with a modern tech stack including Magento Commerce, RequireJS, jQuery, and integrations with marketing and analytics tools like Klaviyo and Yotpo. The site is mobile-optimized, well-structured, and provides a professional user experience with clear navigation and comprehensive content. Privacy and cookie policies are present and GDPR compliant, indicating attention to regulatory requirements. Security posture is strong with HTTPS enforcement, security headers, and secure form handling. However, the absence of a public security policy, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement. The missing WHOIS data for the domain is a notable anomaly that warrants further investigation but does not currently undermine the website's legitimacy. Overall, Edelbrock's website is a professional, secure, and user-friendly platform supporting a reputable business. Strategic enhancements in transparency around security policies and domain registration details would further strengthen trust and compliance.

N

Nant

nantgwrtheyrn.org

72

Nant Gwrtheyrn is a well-established Welsh language centre founded in 2003, specializing in Welsh for Adults as a second language. It offers intensive residential courses, accommodation, and event hosting services, focusing on promoting Welsh culture, heritage, and language. The website reflects a niche educational and cultural hospitality business with a strong community and heritage orientation. Technically, the site uses modern web technologies including Umbraco CMS, JavaScript libraries like GSAP and Swiper, and is hosted on 1&1 IONOS with secure HTTPS. The site is mobile optimized, accessible, and SEO friendly. Security posture is good with HTTPS and domain registration protections, but could improve by enabling DNSSEC and adding security headers. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit consent mechanism was detected. Overall, the website is professional, trustworthy, and serves its target audience effectively.

V

Vanitorials Ltd

vanitorials.co.uk

57

Vanitorials Ltd is a UK-based company specializing in the supply of janitorial and catering cleaning products, operating since 1992. The company targets businesses and organizations requiring cleaning equipment and supplies, positioning itself as an established and trusted supplier in the cleaning industry. Their website serves as an e-commerce platform built on Magento, offering a wide range of products including cleaning chemicals, equipment, healthcare supplies, and PPE. The site is professionally designed with clear navigation and mobile optimization, supporting a B2B business model with a focus on retail distribution.

P

ProQuest LLC

proquest.com

71

ProQuest LLC is a leading enterprise in the education and research sector, providing extensive access to scholarly journals, books, dissertations, and other academic resources. The company serves a broad audience including academic, corporate, government, public, and school libraries worldwide. Owned by Clarivate, ProQuest maintains a strong market position through subscription-based access to unique content and research tools. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its institutional users. Technically, the website employs a modern technology stack including JavaScript frameworks, Apache Tapestry, and integrates third-party services such as OneTrust for cookie consent and Cloudflare for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. Performance is moderate, with room for optimization. From a security perspective, ProQuest enforces HTTPS with strong SSL configurations and implements standard security headers. The presence of cookie consent mechanisms aligns with privacy regulations such as GDPR. However, the site lacks publicly available detailed security policies, incident response information, and vulnerability disclosure channels, which are recommended for enhanced transparency and trust. Overall, ProQuest's website is trustworthy, professional, and compliant with privacy standards. The absence of public WHOIS data is likely due to privacy protection, which is justified given the business nature. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and providing direct security contact channels to further strengthen the security posture and user trust.

M

Maudesport

maudesport.com

65

Maudesport is a UK-based supplier specializing in sports and physical education equipment for schools, colleges, and leisure centers. The company operates an e-commerce platform built on Magento, offering a wide range of products tailored to educational and leisure markets. Their website demonstrates a professional design with good navigation, mobile optimization, and relevant content targeting their core audience effectively. The business appears to be a medium-sized entity focused on the education and retail sectors within the UK. Technically, the website leverages modern web technologies including Magento Commerce, RequireJS, jQuery, and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. The site is served over HTTPS with appropriate security headers, indicating a good baseline security posture. Cookie consent mechanisms and privacy policies are in place, reflecting compliance with GDPR requirements. Security-wise, while the site enforces HTTPS and uses standard security headers, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data for the domain is unavailable due to a domain naming rules error, which is unusual and reduces the trust score somewhat, but the website content and infrastructure suggest legitimacy. Overall, Maudesport presents a solid online presence with good technical and privacy compliance. Strategic improvements in publishing security policies and clarifying domain registration details would further strengthen their security posture and business credibility.

S

SYSPAL Ltd

syspal.com

66

SYSPAL Ltd is a UK-based company specializing in the innovation, design, and manufacture of aluminium and stainless steel equipment tailored for hygiene and quality-oriented industries. The company positions itself as a market leader within this niche manufacturing sector, targeting industrial clients requiring hygienic processing equipment. The website reflects a professional business presence with a focus on industrial manufacturing solutions. Technically, the site is built on the Magento platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools such as Google Analytics, Google Tag Manager, Leady, and Lfeeder. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and visible privacy policies indicates room for improvement. The WHOIS data is missing or unregistered, which raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a moderate risk profile with recommendations to enhance compliance, security headers, and domain registration transparency.

Simpleview Europe is a specialized technology provider offering destination marketing solutions across Europe, including CMS, CRM, DMS, and digital marketing services. The company operates under the parent company Granicus and targets tourism organizations and destination marketing entities. The website demonstrates a mature digital presence with modern technologies and extensive marketing and analytics integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data reduces trust slightly but is mitigated by the professional site and known parent company. Privacy compliance could be enhanced by publishing a clear privacy policy and terms of service.

I

Intermusica

intermusica.co.uk

52

Intermusica is a well-established international classical music agency specializing in artist management, international touring, and project development. The company operates primarily out of London with additional offices in New York and Berlin, serving a global clientele of classical musicians and ensembles. Their website reflects a professional and polished digital presence, showcasing news, artist features, and service offerings clearly targeted at industry professionals and classical music audiences. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Vimeo API, and CookieYes for consent management, hosted on a fast CDN infrastructure. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers are not explicitly detected. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the presence of clear contact information and consistent branding supports business credibility. Overall, the site is secure, compliant with privacy regulations, and professionally maintained.

Spirit Hair Design is a small, established hairdressing salon based in Christchurch, UK, operating since 2001. The business offers a comprehensive range of hairdressing services including cuts, colours, wedding packages, and discount schemes targeting students, NHS staff, and children. The website reflects a professional local business with clear contact details and a focus on customer care and quality products. Technically, the site is built using Adobe Muse with a static architecture and includes common web technologies such as jQuery and RequireJS. While the site is accessible and functional, it lacks modern security headers and privacy compliance features. The Facebook SDK is loaded insecurely over HTTP, posing a mixed content risk. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear genuine. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

S

SAKRET

sakret.lv

55

SAKRET operates as a medium-sized manufacturing and e-commerce business specializing in construction materials such as paints, coatings, insulation systems, and fillers. The company targets construction professionals and retail customers primarily in Latvia, offering a comprehensive product catalog organized by product type and application. The website is built on the Magento 2 platform, leveraging modern JavaScript libraries and Magento modules to provide a responsive and structured user experience. Security measures include HTTPS enforcement and Magento Captcha integrations, though there is room for improvement in security headers and published policies. Overall, the site is professionally designed with good navigation and content relevance but lacks visible privacy and cookie policies, which impacts compliance and trust. The domain registration details align well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and security posture.

S

Sage Group plc

cake.hr

72

Sage Group plc operates a professional and well-branded website offering Sage HR, a comprehensive human resources management software platform targeting small and medium businesses primarily in the UK. The company is a recognized leader in business management software with a strong market position and a broad portfolio of services including payroll, timesheets, and performance management. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks, performance monitoring tools like New Relic and SpeedCurve, and consent management solutions to ensure compliance with privacy regulations. Security posture is strong with HTTPS enforcement, privacy policies, and ISO 27001 certification, although explicit security policy and incident response contacts could be improved. Overall, the website is professional, trustworthy, and aligned with enterprise standards.

K

Kinetics Beauty

kineticsbeauty.com

62

Kinetics Beauty operates a professional e-commerce platform specializing in gel nail polish, nail colors, and skin and nail care products targeted at professionals in the beauty industry. The website is built on Magento CMS and integrates multiple modern web technologies and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and implementing Content Security Policy headers are recommended. Privacy compliance is basic, with cookie consent mechanisms present but lacking explicit privacy and terms of service documentation. Overall, the website presents a professional and trustworthy front for its business niche.

D

DB Bus Challenge

db-bus-challenge.de

41

The website 'DB Bus Challenge' is an interactive online game designed to engage users by simulating bus transportation challenges, likely related to Deutsche Bahn's bus services in Germany. The site targets a general audience interested in public transportation and casual gaming. The business model appears promotional, aiming to increase engagement and brand awareness rather than direct sales. The website is relatively small in scale with basic content and moderate branding consistency. Technically, the site uses a JavaScript-based frontend with RequireJS and jQuery, implementing device detection and responsive design for mobile optimization. Performance is moderate with basic SEO and accessibility features. No CMS or backend technologies are evident from the HTML content. Hosting details are limited but DNS servers indicate a standard hosting environment. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance given the European audience. No contact or incident response information is provided, limiting transparency and trust. No vulnerabilities or exposed sensitive data were detected in the static content. Overall security posture is average but could be improved with standard best practices. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, improving security headers, providing clear contact and incident response information, and enhancing SEO and accessibility. These improvements would increase user trust, compliance, and security maturity.

L

LangShop

langshop.app

67

LangShop is a SaaS provider specializing in e-commerce translation solutions, offering a Shopify translation app and Magento 2 translation extension. The company targets e-commerce store owners seeking multilingual capabilities and seamless migration between Magento and Shopify platforms. The website demonstrates a solid market position with clear service offerings and a professional digital presence. Technically, the site is built on Magento 2 with integrations of modern JavaScript libraries and marketing tools, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly, with comprehensive privacy and cookie policies including consent mechanisms. Security posture is good with HTTPS enforced and domain registration locked, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, with room for improvement in publishing explicit security policies and incident response contacts.

A

aleo solar GmbH

aleo-solar.de

62

Aleo Solar GmbH is a German company specializing in the manufacturing and sale of efficient solar modules, emphasizing sustainable energy solutions made in Germany. The website positions the company as an established player in the renewable energy sector, targeting a general audience interested in solar energy products. The digital infrastructure is built on the Wix platform, leveraging Wix's Thunderbolt framework and associated technologies, providing a moderate level of performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, complemented by a cookie consent mechanism indicating GDPR awareness. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced compliance documentation and contact accessibility.

E

Enasis

lmsenasis.com

42

Enasis is a French digital learning platform dedicated to fire and rescue services, providing an educational environment tailored to emergency service personnel. The platform is built on Moodle and offers training resources and consortium collaboration tools. The website is professionally designed with consistent branding and targets a specialized audience within the public safety sector. Technically, the site uses a modern tech stack including Moodle, YUI, jQuery, and Matomo analytics, hosted by OVH, a reputable provider. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is good, with GDPR-aligned policies and cookie mechanisms in place. Overall, the site is trustworthy and well-maintained, with no signs of malicious content or vulnerabilities.

S

Scorecard Music Group

silasgupta.com

58

The website www.silasgupta.com represents Scorecard Music Group, a small media business based in Germany specializing in music composition for film, television, corporate, and interactive media. The site is professionally designed using the Wix platform and provides clear navigation and contact information, targeting media professionals and corporate clients. Technically, the site uses modern web technologies and is hosted on Wix's infrastructure with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and some script-based security enhancements, but lacks explicit security headers and detailed privacy or terms of service documentation. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, although the website content and structured data appear consistent and professional. Overall, the site is functional and trustworthy for its niche but would benefit from enhanced privacy compliance and security documentation.

B

BTL zdravotnická technika, a.s.

btl-shop.cz

49

BTL zdravotnická technika, a.s. operates an e-commerce platform (BTL-shop.cz) specializing in rehabilitation, physiotherapy, and medical consumables and equipment. The website targets healthcare professionals and wellness providers primarily in the Czech Republic. It offers branded products, a loyalty program, and expert advice, positioning itself as a specialized supplier in the healthcare sector. The site is built on Magento CMS and uses modern web technologies including jQuery and RequireJS, with social login integrations for user convenience. The website is well-structured, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, no explicit security policies or incident response contacts are published, and WHOIS data is unavailable, which limits transparency. Overall, the site presents a professional and trustworthy online presence for its niche market.

E

Enasis

enasis.fr

42

Enasis.fr is a specialized educational platform serving the fire and rescue services sector in France. It provides a Moodle-based learning environment with training resources and consortium collaboration tools. The platform targets professionals and organizations within emergency services, positioning itself as a niche government or public sector educational service. The website is well-branded, consistent, and offers multilingual support with a focus on French and English. Technically, it leverages mature open-source technologies such as Moodle, YUI, and jQuery, hosted on OVH infrastructure, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and privacy-conscious analytics via Matomo, though it lacks explicit security headers and published security policies. Privacy compliance is supported by visible cookie consent and GDPR-aligned privacy policies. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Sencor

sencor.cz

67

Sencor is a well-established retail company specializing in consumer electronics and household appliances, targeting general consumers primarily in the Czech Republic and surrounding Central European markets. The website offers a broad product range including televisions, audio-video equipment, kitchen appliances, and home electronics, positioning itself as a comprehensive provider in its sector. The brand maintains consistent and professional digital branding with clear navigation and relevant content for its audience. Technically, the website is built on a Joomla CMS platform, leveraging modern tracking and marketing technologies such as Google Tag Manager, Bing Ads, and Enzuzo for cookie consent. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Strategic recommendations include publishing a privacy policy and terms of service, enhancing security headers, and providing a vulnerability disclosure channel to improve compliance and trust.

E

EUROEXPO Messe- und Kongress-GmbH

logimat-messe.de

54

LogiMAT is a leading international trade show focused on intralogistics solutions and process management, organized by EUROEXPO Messe- und Kongress-GmbH in Germany. The website presents a professional and comprehensive platform for industry professionals, offering detailed event information, expert forums, and international expansions. The technical infrastructure is based on Drupal 7 with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the site is well-structured, accessible, and trustworthy, supporting a medium-sized enterprise with a strong market position in the transportation and logistics sector.

G

Glamour Guardian s.r.o.

hezke-vlasy.cz

58

Glamour Guardian s.r.o. operates the website www.hezke-vlasy.cz, a specialized e-commerce platform focused on professional hair cosmetics, hairdressing supplies, and salon equipment primarily serving the Czech market. The company offers a broad product range including hair colors, shampoos, conditioners, styling products, and salon furniture, targeting both professional hairdressers and general consumers. The website is well-structured, with clear navigation and comprehensive product categorization, supporting a positive user experience. The presence of privacy policies, terms of service, and contact information reflects a commitment to regulatory compliance and customer service. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and Google reCAPTCHA to enhance marketing, analytics, and security. The site is built on the FastCentrik e-commerce platform, indicating a managed hosting and CMS environment. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and form protections in place, but the absence of explicit security headers suggests room for improvement. From a security and compliance perspective, the site demonstrates GDPR compliance with a clear privacy policy and cookie consent mechanisms. However, the lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve security readiness. Overall, the site is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security headers. Strategically, the company should focus on strengthening its security posture by implementing recommended HTTP security headers, publishing incident response contacts, and clarifying domain registration details. These steps will enhance customer trust and reduce potential risks. The technical infrastructure is modern and supports business operations effectively, but continuous monitoring and updates are advised to maintain security and performance standards.

D

Distriplac

distriplac.com

71

Distriplac is a Spanish company specializing in the distribution of construction materials, particularly for interior conditioning, drywall, and ceilings. The company positions itself as a leader in its niche market, targeting construction professionals and contractors. The website is built on the Magento e-commerce platform, leveraging modern JavaScript libraries such as RequireJS and jQuery, and integrates analytics and user behavior tracking tools like Google Tag Manager and Hotjar. A cookie consent mechanism is implemented via Cookiebot, indicating attention to privacy compliance. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance documentation.

R

Reineck GmbH

reineck.info

56

Reineck GmbH is a well-established family-run master craftsman business located in Karlsdorf-Neuthard, Germany, with over 60 years of experience in metalworking, bathroom renovation, sanitary, and heating technology. The company offers comprehensive services including consultation, planning with 3D technology, installation, and maintenance, targeting homeowners and property managers in the local region. Their website reflects a strong local presence with detailed contact information and active social media engagement. Technically, the website is built on a modern CMS platform (Euroweb CMS) with a clean HTML5 and CSS3 structure, enhanced by JavaScript and JSON-LD structured data for SEO and local business identification. The site includes privacy controls and cookie consent mechanisms, indicating a good level of digital maturity and compliance with GDPR requirements. Performance and mobile optimization are good, with accessibility features implemented. From a security perspective, the site uses HTTPS and has privacy controls but lacks explicit HTTP security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection and malformed queries, but the website content and business information are consistent and credible. Overall, the website presents a professional, trustworthy, and secure digital presence for a medium-sized regional craftsman business. Strategic improvements in security headers and incident response transparency could further enhance their security posture.

M

medme

medme.pl

66

Medme is a Polish online platform specializing in pharmaceutical product reservations with local pharmacy pickup services. The website targets Polish consumers seeking convenient and quick access to medicines without queues. It operates on a Magento e-commerce platform with a modern Hyvä theme, integrating Google Maps API for location-based services and multiple tracking and marketing tools such as Google Tag Manager, GetResponse, and SalesManago. The site demonstrates a good level of digital maturity with responsive design and structured data for SEO. Security posture is solid with HTTPS enforcement and security headers, although explicit privacy and terms of service pages are not found, which impacts compliance confidence. WHOIS data is unavailable from the Polish registry, limiting domain trust assessment. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

E

DEK

echokardiographie-leipzig.de

41

The website echokardiographie-leipzig.de serves as an informational portal for the DEK conference, a specialized event focused on echocardiography within the cardiology community in Germany. It provides details about the conference program, call for abstracts, sponsors, registration, hotels, and venue information. The target audience is primarily medical professionals and researchers interested in cardiovascular ultrasound. The site is built using Adobe Muse with an older JavaScript stack, indicating moderate digital maturity. Mobile optimization is basic, and the site lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or modern protections. The absence of privacy and cookie policies represents a compliance gap. Overall, the site is functional and professional but would benefit from technical and security improvements to enhance trust and compliance.

A

Art'cade

artcade.fr

56

Art'cade is a small retail business based in Lyon, France, specializing in the sale and rental of original arcade machines that blend retro gaming culture with urban art aesthetics. The website presents a professional and consistent brand image, targeting retro gaming enthusiasts and urban art lovers. The business model focuses on niche market offerings combining entertainment and artistic expression. Technically, the website is built on the Wix platform, leveraging modern web technologies and tracking tools such as Google Analytics and Facebook Pixel. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is good with HTTPS enabled, but lacks some security headers and visible privacy compliance documentation. The absence of WHOIS data limits domain legitimacy verification, which slightly reduces trust. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

M

Miele Center Faulmann

mielecenter-faulmann.at

63

Miele Center Faulmann is a specialized retailer and service provider for Miele household appliances located in Vienna, Austria. The company offers a comprehensive range of products including kitchen appliances, laundry care, vacuum cleaners, and accessories, supported by an online shop and repair services. The website reflects a professional e-commerce platform with clear navigation and a focus on customer service. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS enforcement, reCAPTCHA for form protection, and a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, the website is well-structured, secure, and compliant with privacy regulations, representing a trustworthy local business.

D

Deutsche Gesellschaft für Internistische Intensivmedizin und Notfallmedizin (DGIIN) / Österreichische Gesellschaft für Internistische und Allgemeine Intensivmedizin und Notfallmedizin (ÖGIAIN)

akutwissen.de

51

AkutWissen.de is a specialized e-learning platform developed by the Deutsche Gesellschaft für Internistische Intensivmedizin und Notfallmedizin (DGIIN) and the Österreichische Gesellschaft für Internistische und Allgemeine Intensivmedizin und Notfallmedizin (ÖGIAIN). It offers a range of courses, webinars, podcasts, and interactive forums focused on intensive and emergency medicine, targeting medical professionals and learners in German-speaking countries. The platform leverages Moodle LMS technology with a modern tech stack including YUI, jQuery, and Matomo analytics, ensuring a robust and accessible user experience. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. The website is professionally designed with clear navigation and consistent branding, supported by affiliations with recognized medical societies.

Z

ZOLL Medical Corporation

zollwebstore.com

10

ZOLL WebStore is a well-established e-commerce platform specializing in the sale of medical devices such as defibrillators, AEDs, ventilators, and related accessories. The website serves healthcare professionals, EMS providers, and medical institutions, offering a comprehensive product catalog and customer account management features. The platform is built on Magento, leveraging modern web technologies and Cloudflare DNS for reliability and security. The site demonstrates good digital maturity with responsive design, clear navigation, and integration of social media channels aligned with the parent company, ZOLL Medical Corporation. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are present and linked to the official parent domain, indicating compliance with GDPR and related regulations. Overall, the website is professional, trustworthy, and suitable for its target audience.

D

dodenhof

dodenhof.de

62

dodenhof is a prominent retail and e-commerce business based in Germany, offering a wide range of fashion, lifestyle, furniture, and electronics products. Positioned as a leading shopping destination in Northern Germany, it provides customers with a comprehensive online shopping experience supported by a professional website built on the Magento platform. The company leverages modern web technologies and integrates marketing and tracking tools such as Google Tag Manager, Emarsys, and Trustpilot to enhance customer engagement and analytics. Technically, the website demonstrates a mature digital infrastructure with responsive design, good SEO practices, and a robust technology stack centered around Magento and various JavaScript libraries. Hosting is managed via DomainControl DNS services, and the site enforces HTTPS, ensuring secure communications. Cookie consent mechanisms are implemented, reflecting awareness of GDPR compliance requirements, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the site shows good practices such as HTTPS usage and secure script loading, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected, indicating a stable security posture. The domain WHOIS data is consistent with an active and legitimate registration, though registrant details are minimal. Overall, dodenhof presents a professional, trustworthy, and secure online presence suitable for its retail business model. Strategic improvements could focus on enhancing privacy documentation, publishing security policies, and reinforcing security headers to further strengthen compliance and trust.

3

3M

3m.com

73

3M is a large multinational technology and manufacturing company that applies science and innovation to deliver a broad portfolio of products and solutions across multiple industries including automotive, commercial solutions, consumer products, electronics, energy, government, manufacturing, safety, and transportation. The website reflects a mature digital presence with comprehensive content, multimedia elements, and clear navigation tailored to a diverse audience of industrial, commercial, and consumer customers. The company maintains strong branding consistency and trust indicators such as investor relations and sustainability disclosures. Technically, the site uses modern JavaScript frameworks, tag management, and performance monitoring tools, hosted likely on Akamai with IBM WebSphere Portal CMS. Security posture is good with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers and incident response contacts are not evident. WHOIS data is unavailable due to registry restrictions, but the website's professional nature and corporate disclosures support legitimacy. Overall, the site is well-constructed, secure, and compliant with privacy regulations, serving as a reliable digital asset for 3M's global operations.

P

Potsdam Institute for Climate Impact Research

pik-potsdam.de

10

The Potsdam Institute for Climate Impact Research (PIK) is a well-established research institute specializing in climate impact research, resilience, and policy. The website reflects a professional and structured digital presence, primarily targeting researchers, policymakers, and academic audiences. It offers extensive information on research departments, projects, publications, and IT services supporting scientific collaboration. The technical infrastructure is based on the Plone CMS platform with modern web technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security or privacy policies. No advertising or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data confirms the domain's legitimacy and alignment with the institute's profile.

M

Max-Planck-Institut für Chemie

mpic.de

10

The Max-Planck-Institut für Chemie website serves as the digital presence of a reputable German research institute focused on atmospheric chemistry, climate science, and related fields. The site provides scientific content, information about research groups, publications, events, and career opportunities. It targets scientists, students, and the general public interested in environmental and chemical research. Technically, the website employs modern web technologies including RequireJS, Bootstrap, and Slick Carousel, hosted on GWDG infrastructure with a CMS from JustRelate CX Cloud. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and CSRF protections, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies. Overall, the domain registration and hosting align with the Max-Planck-Gesellschaft, confirming legitimacy. Recommendations include publishing privacy and cookie policies, enhancing security headers, and providing incident response contacts to improve trust and compliance.

E

Plesk Obsidian 18.0.73

eliteinsights.net

64

The website eliteinsights.net/login_up.php serves as a login portal for Plesk Obsidian 18.0.73, a widely used web hosting control panel software. It targets web hosting providers, server administrators, and developers who manage hosting environments. The site primarily facilitates access to server management tools rather than providing extensive business or marketing content. The domain registration is consistent and stable, supporting the legitimacy of the service. Technically, the site uses modern JavaScript libraries including Prototype.js and RequireJS, and is built on the Plesk UI framework. It is hosted behind Cloudflare DNS, indicating some level of infrastructure robustness. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and comprehensive content quality. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements but lacks visible HTTP security headers such as CSP or HSTS. SSL configuration details are not available from the provided data, and no explicit anti-CSRF tokens are visible in forms, though a meta forgery protection token exists. The absence of a privacy policy and contact information reduces transparency and compliance confidence. Overall, the site is functional and legitimate for its purpose but would benefit from enhanced security headers, explicit privacy documentation, and improved transparency to increase trust and compliance. The AI overall score reflects a basic but operational site with room for security and privacy improvements.

M

Moffitt Cancer Center

moffitt.org

75

Moffitt Cancer Center is a leading healthcare institution specializing in cancer treatment and research, positioned as Florida’s top choice for cancer care with multiple dedicated hospitals and outpatient centers. The website reflects a mature digital presence with comprehensive content targeting patients, families, and healthcare professionals. It offers extensive resources including clinical trials, educational programs, and patient support services. The organization holds several prestigious certifications and awards, reinforcing its market position and trustworthiness. Technically, the website employs a modern technology stack including Google Tag Manager, Adobe Launch, and Microsoft Application Insights, integrated with multiple third-party marketing and analytics tools. The site is built on the Episerver CMS platform, optimized for mobile devices, and demonstrates good SEO and accessibility practices. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses multiple tracking and advertising pixels responsibly. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR considerations. WHOIS data is privacy protected, which is typical for healthcare entities, and does not raise immediate trust concerns. Overall, Moffitt Cancer Center’s website is professional, secure, and compliant, supporting its business credibility and user trust. Strategic improvements in security header implementation and publishing a dedicated security policy could further enhance its security posture.

O

Orlando Health Bayfront Hospital

bayfrontstpete.com

68

Orlando Health Bayfront Hospital is a large, well-established healthcare provider and academic medical center located in the United States. It offers a wide range of medical services including trauma care, cardiovascular surgery, maternity care, and rehabilitation services. The hospital is affiliated with Orlando Health and provides graduate medical education programs, positioning itself as a trusted regional healthcare institution. The website demonstrates good content quality, consistent branding, and a professional design tailored to patients and medical professionals. Technically, the site uses modern JavaScript frameworks and analytics tools, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. Privacy compliance is moderate with a comprehensive privacy policy but lacking a visible cookie consent mechanism. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the overall legitimacy based on website content and external references.

3

3Cat

3cat.cat

43

3Cat is a digital media platform focused on delivering quality Catalan language content including exclusive digital premieres, original programs, and live streams from TV3, Catalunya Ràdio, and SX3. It serves a regional audience with a strong cultural focus and operates under the umbrella of CCMA, a known Catalan media corporation. The platform uses a modern technology stack including React (Next.js), Bitmovin Player, and various analytics and advertising tools. Security posture is strong with HTTPS and security headers properly configured, and a consent management platform is implemented to comply with cookie regulations. However, the absence of publicly available WHOIS data and lack of explicit privacy policy or contact information pages reduce trust from a compliance and transparency perspective. Overall, the site is professional, well-branded, and technically sound but could improve privacy disclosures and domain registration transparency.

U

Ulož.to Disk

quickshare.cz

72

Ulož.to Disk is a Czech Republic-based personal cloud backup service offering a range of storage plans from a free 25 GB tier up to 100 TB for paid subscribers. The service emphasizes secure file storage with end-to-end encryption and provides modern applications across multiple platforms including Windows, Android, and iOS. The website is professionally designed with clear navigation and multilingual support, targeting general users seeking reliable cloud storage and file sharing solutions. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and analytics tools, hosted likely behind Cloudflare infrastructure ensuring fast performance and security. Security posture is solid with HTTPS enforced and privacy policies in place, though explicit security policies and incident response details are not published. No vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the cloud storage market.

Nestlé Coffee Partners operates as a business-to-business provider of coffee and tea solutions, offering curated foodservice products and equipment. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting foodservice businesses and hospitality sectors. The technical infrastructure is built on Magento with integrations for analytics and performance monitoring, indicating a commitment to digital maturity and user experience. Security posture is strong with HTTPS enforcement and security headers, although the absence of a public security policy and incident response contact is noted. The WHOIS data is unavailable, which limits domain trust verification but the overall branding and content strongly suggest a legitimate enterprise operation under Nestlé's corporate umbrella. Strategic recommendations include publishing security policies, enhancing transparency, and maintaining compliance with evolving privacy regulations.

R

Russell Hobbs

russellhobbs.co.uk

48

Russell Hobbs UK operates a comprehensive e-commerce platform specializing in home and kitchen appliances, including kettles, toasters, irons, and cookware. The brand has a long-standing market presence, serving general consumers primarily in the UK and Europe. The website demonstrates a professional design with clear navigation and a consistent brand identity. Technically, the site is built on Magento CMS with modern JavaScript libraries and monitoring tools such as New Relic and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data for the subdomain limits full domain trust verification, but the overall site content and structure support legitimacy. Privacy compliance is well addressed with GDPR-aligned policies and user consent features. Overall, the site is a reliable and professional retail platform with moderate to high trustworthiness.

B

BVKJ Shop

bvkj-shop.de

49

BVKJ Shop operates as an e-commerce platform specializing in medical and healthcare products targeted at doctors, clinics, and healthcare professionals primarily in Germany. The website offers a range of diagnostic devices, informational materials, point of care testing equipment, and medical test kits. The business model focuses on retail sales through a Magento-based online store, positioning itself as a niche supplier within the healthcare sector. The site is well-branded and consistent, with clear navigation and professional content tailored to its audience. Technically, the website leverages a modern Magento e-commerce infrastructure with RequireJS, jQuery, KnockoutJS, and Magento UI components, indicating a mature digital platform. Hosting is managed via ns35.de nameservers, and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses CAPTCHA on login forms to mitigate automated abuse. A cookie consent mechanism is in place, supporting GDPR compliance. However, explicit security headers are not detected, and no dedicated security policy or vulnerability disclosure mechanisms are present. No critical vulnerabilities or exposed sensitive data were found in the analysis. Overall, BVKJ Shop presents a trustworthy and professional online presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and user trust.

P

Procter & Gamble

crestoralbproshop.com

67

The website crestoralbproshop.com is a professional e-commerce platform operated under the Procter & Gamble umbrella, specializing in premium Crest and Oral-B dental products targeted at dental professionals and students. The site offers exclusive discounts, invoice payment options, and customer support via phone and text, positioning itself as a niche retailer in the dental healthcare retail sector. The business is well-established with a domain age consistent with its founding year of 2019 and strong brand affiliation with Procter & Gamble. Technically, the website is built on the Magento Commerce platform, leveraging modern JavaScript libraries and frameworks such as RequireJS, jQuery, and Adobe's Magento Storefront Events SDK. It is hosted on Microsoft Azure infrastructure, utilizing Azure DNS and CDN services. The site demonstrates good mobile optimization, SEO practices, and moderate performance, with a clean and professional design that supports a positive user experience. From a security perspective, the website enforces HTTPS, uses Google reCAPTCHA on login forms, and maintains domain transfer protection. However, it lacks DNSSEC and explicit security headers, and no public security policy or vulnerability disclosure is present. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid security posture and good business credibility. Strategic improvements include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen defenses and transparency.

J

Jenoptik UK

jenoptik.co.uk

71

Jenoptik UK operates as a specialized technology provider within the road safety, civil security, and intelligent transportation systems markets. The company leverages advanced photonic and optical technologies, particularly automatic number plate recognition (ANPR), to deliver innovative traffic enforcement and monitoring solutions. As part of the global Jenoptik AG group, Jenoptik UK holds a strong market position with a history of pioneering industry firsts and government-approved systems. Their target audience includes government agencies, law enforcement, and transportation authorities primarily in the United Kingdom. The website reflects a professional and consistent brand image, supporting their business credibility.

S

SCHWING America Inc.

schwing.com

46

SCHWING America Inc. is a well-established manufacturer specializing in truck-mounted concrete pumps, trailer pumps, and line pumps, serving primarily the construction industry in the United States. The company maintains a strong market position as a leading manufacturer with a comprehensive product portfolio and related services including spare parts and training seminars. The website reflects a mature digital presence built on TYPO3 CMS with modern front-end technologies and integrates multiple analytics and marketing tools. Security posture is adequate with HTTPS and domain transfer protections in place, but lacks advanced security headers and visible incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business operations.

A

avocado rechtsanwälte

avocado.de

46

avocado rechtsanwälte is a well-established German law firm with multiple offices across major cities including Berlin, Frankfurt, Hamburg, Köln, München, and Brüssel. The firm offers comprehensive legal services across a broad range of sectors such as energy, transport, banking, real estate, media, education, healthcare, government, manufacturing, retail, and telecommunications. The website reflects a professional and mature market position, supported by numerous industry awards and certifications. The target audience primarily consists of businesses and professionals seeking expert legal counsel in Germany and Europe. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including Bootstrap, jQuery, and RequireJS, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

O

OceanTeacher Global Academy

oceanteacher.org

61

OceanTeacher Global Academy is a UNESCO/IOC endorsed educational platform delivering ocean science capacity development through a Moodle-based e-learning system. It serves a global audience of ocean experts and professionals, providing courses aligned with the UN Decade of Ocean Science and SDGs. The platform is supported by a network of regional training centers and holds ISO 29993:2017 certification, underscoring its commitment to quality learning services. Technically, the website employs modern web technologies including Moodle CMS, YUI libraries, Video.js, and Google Analytics, offering a responsive and accessible user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website's content quality, certifications, and affiliations strongly indicate legitimacy. Overall, the platform is professional, secure, and compliant with privacy standards, making it a trustworthy resource for ocean science education.