Security Directory

Adblock Plus is a well-established ad blocking software product developed by eyeo GmbH, founded in 2006. It offers free, open source browser extensions and mobile apps that block intrusive ads, tracking, and malware, while supporting websites through an Acceptable Ads program. The company holds a strong market position as the leading ad blocker with a broad user base across major browsers and platforms. The website is professionally designed, mobile optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Technically, the site uses modern JavaScript and web standards, with good performance and accessibility. Security posture is strong with HTTPS enforced and error logging implemented, though some improvements like DNSSEC and security headers could be added. No critical vulnerabilities or suspicious content were detected. Overall, the site and business demonstrate high credibility and trustworthiness.

E

eyeo GmbH

eyeo.com

66

eyeo GmbH is a technology company specializing in ad-filtering solutions that enhance advertising effectiveness and user experience. Established since 1999, the company targets advertisers, publishers, retailers, tech partners, and end users with its innovative technology. The website reflects a mature digital presence with comprehensive privacy and security policies, supported by a cookie consent mechanism via OneTrust. The company maintains active social media channels on LinkedIn, Twitter, and YouTube, reinforcing its market position and engagement. Technically, the website employs modern JavaScript frameworks and libraries, including htmx, Google Analytics, and Sentry for error monitoring. The site is hosted with a reputable registrar and uses UltraDNS for DNS services, though DNSSEC is not enabled. Performance and mobile optimization are good, with accessibility and SEO features well implemented. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, but could be improved by enabling DNSSEC and adding explicit security headers. Security-wise, the site shows good practices such as encrypted connections, cookie consent, and error monitoring. However, there is no public vulnerability disclosure or security.txt file, and incident response contact details are not explicitly provided. No vulnerabilities or exposed sensitive data were detected. Overall, the risk profile is low, with recommendations to enhance DNS security and transparency. In summary, eyeo.com is a professional, secure, and privacy-conscious website representing a legitimate and established technology business. Strategic improvements in DNS security and incident response transparency would further strengthen its security posture and trustworthiness.

V

VALID Digitalagentur GmbH

validserver.de

60

VALID Digitalagentur GmbH is a Berlin-based digital agency specializing in digital strategy, UX design, development, and performance marketing. The company targets businesses seeking comprehensive digital transformation and customer experience consulting. Their website presents a professional and consistent brand image with clear service offerings and a focus on methodical digitalization. Technically, the site is built on the Contao CMS platform, employs Matomo analytics with privacy-conscious configurations, and integrates Cookiebot for GDPR-compliant cookie management. The website is well-structured, mobile-optimized, and provides a good user experience, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

U

Uberall

uberall.com

70

Uberall is an established AI-powered multi-location marketing platform founded in 2002, targeting enterprise clients with a comprehensive suite of services including listings management, review management, analytics, messaging, and location performance optimization. The platform emphasizes AI integration to enhance local search visibility and customer engagement across multiple locations. Their market position is strong within the technology and retail sectors, supported by a professional and content-rich website with multilingual support and extensive marketing integrations. Technically, the site leverages modern JavaScript frameworks, HubSpot CMS, AWS hosting, and advanced analytics tools, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security-wise, the website enforces HTTPS and employs standard security headers, but the domain's recent expiry and lack of DNSSEC present notable risks. Additionally, the absence of explicit security policies and incident response contacts indicates room for improvement in transparency and compliance. Overall, Uberall presents a professional and trustworthy online presence, but immediate attention to domain renewal and enhanced security disclosures is recommended to maintain trust and operational continuity.

G

Genesys

mypurecloud.de

53

Genesys operates a leading enterprise-grade cloud contact center platform known as Genesys Cloud CX, which leverages AI-powered experience orchestration to enhance customer journeys. The company targets businesses seeking advanced customer experience solutions and positions itself as a technology leader in this space. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the site uses modern frameworks such as Bootstrap and WordPress CMS, with performance optimizations like lazy loading scripts. Security posture is solid with HTTPS enforced, though explicit security headers and policies are not visible in the provided data. Privacy compliance indicators such as privacy and cookie policies are not detected, which is a gap for GDPR and related regulations. The WHOIS data is missing or inaccessible, which slightly reduces trust in domain registration transparency but does not detract from the evident business legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security policy transparency.

I

IONOS Inc.

ionos.com

11

IONOS Inc. is a well-established enterprise-level technology company specializing in web hosting, domain registration, cloud solutions, and related digital services. The company targets businesses and individuals seeking reliable and scalable hosting and cloud infrastructure. Their market position is strong, supported by a comprehensive portfolio of services including websites, domains, servers, email, office productivity, and eCommerce platforms. The website reflects a professional and consistent brand image with excellent content quality and navigation clarity. Technically, the website is built on modern frameworks such as Next.js and React, leveraging various third-party analytics and marketing tools including Google Tag Manager, TikTok Pixel, LinkedIn Insight Tag, and others. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security-wise, HTTPS is enforced with no visible exposed sensitive data, and monitoring tools like Sentry are in use. However, explicit security headers and published security policies are absent. The security posture is solid but could be improved by adding explicit security headers, publishing a security policy, and establishing a vulnerability disclosure program. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional, with no signs of content blocking or WAF interference. Strategically, IONOS should focus on enhancing transparency around privacy and security policies, improving compliance with GDPR and cookie consent requirements, and publishing incident response contacts to strengthen user trust and regulatory adherence.

Deutsche Telekom AG operates the website www.telekom.de, providing a comprehensive range of telecommunications services including mobile telephony, fixed-line internet, fiber optic connections, and TV offerings under the MagentaTV brand. The website targets both private and business customers in Germany, positioning itself as a leading telecommunications provider with a strong market presence. The content is professionally presented, with clear navigation and a focus on current offers and customer services. Technically, the site employs modern web technologies such as React, uses advanced analytics and tag management tools like Dynatrace and Tealium, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and consent mechanisms for GDPR compliance implemented, although explicit privacy and security policies are not prominently linked. Overall, the domain registration data aligns well with the business identity, indicating a legitimate and trustworthy online presence.

AllWebCo is a small, established web hosting and domain registration service provider operating since 1997. The company targets small businesses and individuals seeking affordable and professional web hosting solutions, domain registration, and website templates. The website reflects a consistent brand with clear navigation and relevant content focused on their core services. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with jQuery 1.11.0, and is mobile responsive with moderate performance. Security posture is basic with HTTPS enabled but lacks modern security headers and uses an outdated JavaScript library, which could pose risks. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact is primarily via web forms with no explicit email or phone contacts visible. Overall, the site is legitimate and trustworthy but could improve security and privacy practices.

S

Streamplace

stream.place

49

Streamplace is an open-source livestreaming platform built on the AT Protocol, targeting users interested in decentralized and open-source streaming solutions. The website presents a modern, React-based frontend with a focus on livestream listings and user streams. The platform appears niche and technology-focused, catering to a small but specialized audience. Technically, the site uses modern web technologies such as React and Expo, delivering a good user experience with responsive design and clear navigation. However, there is a lack of comprehensive privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate but could be improved by implementing standard security headers and providing clear incident response and contact information. The WHOIS data is privacy-protected and incomplete, which is common for small tech projects but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures to improve trust and credibility.

L

Leaflet

leaflet.pub

56

Leaflet is a technology platform focused on enabling users to write and share interconnected social documents. The website positions itself as a niche content creation and publishing platform, targeting general audiences interested in blogging and publication exploration. The platform leverages modern web technologies such as React and Next.js, indicating a contemporary technical infrastructure. The site design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the absence of privacy, cookie, and terms of service policies suggests room for improvement in compliance and transparency. Security posture is moderate with no explicit security headers detected and unknown SSL configuration, which should be addressed to enhance trust and protection. Overall, the domain uses privacy protection for WHOIS data, which is common for small tech platforms but slightly reduces transparency. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve compliance and user trust.

G

Graze.social

graze.social

58

Graze.social is a technology company specializing in providing a SaaS platform for building custom social feeds on the Bluesky network using the ATProto protocol. The platform targets feed curators, brands, publishers, developers, and advertisers, enabling them to create personalized feeds, monetize content, and engage audiences without coding. The website demonstrates a strong market position with a growing user base and a clear value proposition centered on user control over social algorithms. Technically, the website is built on modern web technologies including React, JavaScript, and integrates third-party services such as Crisp chat, Beehiiv newsletter, and Plausible analytics. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. However, some security best practices like explicit security headers and cookie consent mechanisms are not visibly implemented. From a security perspective, the site uses HTTPS and does not expose sensitive data. The lack of public WHOIS data suggests privacy protection, which is common and justified for startups. No critical vulnerabilities or suspicious patterns were detected. The site lacks publicly disclosed incident response or security policies, which could be improved to enhance trust. Overall, Graze.social presents a professional, trustworthy, and technically mature platform with minor areas for security and privacy compliance improvements. Strategic recommendations include implementing security headers, publishing security policies, and adding cookie consent to align with best practices and regulatory requirements.

Dr. Martin Kleppmann's website serves as a comprehensive academic and professional platform showcasing his work as an Associate Professor at the University of Cambridge. The site highlights his research focus on local-first collaboration software and distributed systems security, his teaching activities, open source contributions, and a well-regarded book on data-intensive applications. The website targets academics, researchers, students, and professionals interested in distributed systems and cryptography. It also supports his research through Patreon and promotes his publications and conference talks. Technically, the website is built using Jekyll, with a clean and professional design that is mobile-optimized and accessible. It uses standard web technologies including HTML5, CSS3, JavaScript, and MathJax for mathematical rendering. The site performs well with fast loading times and clear navigation. However, it lacks some modern security headers and explicit HTTPS enforcement details are not available from the provided data. From a security perspective, the site does not expose sensitive data or use vulnerable libraries. There are no forms collecting sensitive user data, which reduces attack surface. However, the absence of privacy and cookie policies, security incident response information, and vulnerability disclosure mechanisms indicates gaps in compliance and security transparency. The WHOIS data for the domain is missing, which is unusual and reduces trustworthiness, though the professional nature of the content suggests legitimacy. Overall, the website is a high-quality academic resource with excellent content and user experience but could improve in privacy compliance and security transparency. The missing WHOIS data is a concern that should be investigated further to confirm domain legitimacy.

AT Protocol is an open, decentralized network designed for building social applications, targeting developers and organizations interested in decentralized social networking. The website provides comprehensive technical documentation, SDKs, and guides to facilitate development on the protocol. The project is relatively new, founded in 2022, and positions itself as a technically sophisticated alternative in the social networking space. The digital infrastructure is modern, leveraging React and Next.js frameworks, with DNS managed via Cloudflare, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is currently minimal, with no visible privacy or cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional, trustworthy, and well-suited for its technical audience, but could enhance user trust and compliance by adding explicit privacy and security disclosures.

The website www.ameli.fr represents the official French social security health insurance service known as Assurance Maladie. It serves as a government platform providing health coverage and related services to insured individuals in France. The site is positioned as a primary national health insurance provider, targeting French residents and insured persons. The business model is public social insurance funded by government and social contributions. The website content is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the main content. This limits the ability to fully assess the website's content and user experience. Technically, the site uses Cloudflare's security services to mitigate automated bot activity, indicating a strong security posture in terms of access control. However, no detailed security headers or SSL/TLS configuration information is available from the provided data. The security posture is partially observable through the use of CAPTCHA but lacks visible incident response or security policy disclosures. Overall, the site is legitimate and trustworthy given its government affiliation and domain, but the current security challenge limits comprehensive analysis. Strategic recommendations include improving transparency by publishing privacy and cookie policies, providing clear contact and incident response information, and enhancing SEO and accessibility once the security challenge is passed.

F

Fabryka Kart Trefl-Kraków sp. z o.o.

fabryka-kart.eu

48

Fabryka Kart Trefl-Kraków sp. z o.o. is a well-established Polish manufacturer specializing in the production of playing cards and board games, serving a B2B clientele including renowned publishers and game authors worldwide. The company leverages a legacy dating back to 1947 and positions itself as a European market leader in its niche. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content tailored to its professional audience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates strong business credibility and compliance with GDPR requirements.

O

Oink Games

oinkgames.com

53

Oink Games is a small, specialized company focused on creating board games and video games. Their website reflects a niche market position with a clean, professional design and multilingual support for English, Japanese, and German audiences. The business model centers on game design and sales, targeting enthusiasts of analog and digital games. The company was founded in 2020, consistent with the domain registration date. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, with hosting infrastructure likely on Amazon AWS. The site includes integrations for Google Analytics and Facebook SDK for tracking and marketing purposes. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no security headers were detected, which are areas for improvement. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Contact information and incident response details are not provided, limiting transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy disclosures, security headers, and contact transparency to improve compliance and user trust.

W

Wizards of the Coast

wizards.com

64

Wizards of the Coast is a globally recognized enterprise specializing in the development and publishing of role playing, trading card, and digital games. The company operates a family of studios targeting a broad audience of gamers across multiple genres. Their website reflects a professional and consistent brand presence, leveraging modern web technologies such as Nuxt.js for server-side rendering and Google Analytics for user insights. The site is well-optimized for mobile and SEO, providing a good user experience. Security posture is moderate with HTTPS enforced and consent management scripts in place, though there is room for improvement in security headers and transparency regarding security policies. WHOIS data for the subdomain is unavailable, which is typical for subdomains, and does not detract from the overall legitimacy of the brand. Overall, the website is a solid digital asset supporting a major player in the gaming industry.

T

tpi Media® GmbH

webdesignagentur.de

62

tpi Media® GmbH is a Berlin-based full-service web design agency specializing in web design, web development, branding, content creation, and SEO services. The company targets a diverse clientele including startups, established businesses, and medical practices, offering tailored digital solutions from domain selection to marketing. Their market position is that of a reputable regional agency with a medium-sized team and a comprehensive service portfolio. Technically, the website employs modern frameworks such as Vue.js, Nuxt.js, and Vuetify, alongside WordPress CMS and headless CMS options, reflecting a mature and modern digital infrastructure. The site is fast, mobile-optimized, and SEO-friendly. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended in security headers and incident response transparency. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website demonstrates high professionalism, trustworthiness, and technical competence.

T

TS Ventures GmbH

schumacher.me

62

Tim Schumacher's website serves as a professional and personal platform highlighting his entrepreneurial journey, investment portfolio, and thought leadership in the technology and SaaS sectors. The site showcases his involvement in founding Sedo.com and investing in multiple startups including Eyeo, Ecosia, and SaaS.group. The content is rich with blog posts, media, and contact information aimed at entrepreneurs, investors, and the startup community. Technically, the site is built on the Strikingly CMS platform, leveraging modern web technologies including HTTPS, reCAPTCHA, and analytics tools. Security posture is solid with active SSL and bot protection, though lacks some advanced security headers and formal policies. The WHOIS data is unavailable, likely due to privacy protection, but the site content and social presence support legitimacy. Overall, the site is professional, trustworthy, and well-maintained, though it would benefit from enhanced privacy compliance and security disclosures.

3

3E Company

3eiq.com

69

3E Company operates a professional B2B software platform specializing in chemical management, regulatory compliance, and supply chain sustainability solutions. The website hosts multiple client portals for different specialized tools, indicating a mature product suite targeting businesses needing compliance and safety management. The site is well-branded and linked closely to its parent domain 3eco.com, reinforcing its market presence. Technically, the site uses modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by adding security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, suggesting possible privacy protection or domain registration issues that warrant further verification. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security best practices.

3

3E

3eco.com

66

3E is a leading provider of intelligent data and workflow solutions focused on empowering safety, elevating stewardship, and enabling sustainability. The company offers a comprehensive suite of services including chemical inventory management, regulatory news, product stewardship, supply chain visibility, and AI-driven compliance tools. Recognized by independent analyst firms and certified with ISO 27001, 3E positions itself as a market leader in regulatory compliance and sustainability solutions for businesses across multiple sectors. The website demonstrates strong digital maturity with a modern WordPress CMS, multilingual support, and extensive use of analytics and marketing technologies. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

S

Saarländischer Rundfunk

sr.de

53

Saarländischer Rundfunk (SR) operates as a regional public broadcasting service for the Saarland region in Germany, providing a comprehensive range of media services including regional news, weather, traffic updates, radio, television, and on-demand video content. The website is professionally designed with clear navigation and consistent branding, targeting a general audience interested in regional information and entertainment. The business model aligns with public media broadcasting, focusing on delivering trusted regional content. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and the ARD player for media streaming, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in implementing security headers and explicit incident response information. Privacy compliance is supported by a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the domain registration data supports the legitimacy and trustworthiness of the site as a public broadcaster. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing explicit security policies to further strengthen trust and compliance.

A

Atlas Schindler

schindler.com.br

71

Atlas Schindler is a leading manufacturer and service provider of elevators, escalators, and moving walkways in Brazil. The company offers comprehensive solutions including manufacturing, installation, modernization, and maintenance services, targeting residential, commercial, and public transportation buildings. The website reflects a strong market position with professional branding and multilingual support, indicating a global presence and local adaptation. Technically, the site is built on Adobe Experience Manager, leveraging Adobe Analytics and HubSpot for marketing and data collection, with a robust cookie consent mechanism in place. Security posture is strong with HTTPS and strict Content Security Policy headers, although explicit security policies and incident response contacts are not published. Overall, the site is professional, secure, and business-focused, with room for improvement in privacy transparency and incident response disclosures.

S

Schindler

schindler.fi

73

Schindler Oy is a Finnish subsidiary of the global Schindler Group, specializing in the design, manufacture, installation, and maintenance of elevators, escalators, and moving walks. The company holds a strong market position in Finland, targeting building owners, architects, and facility managers with a comprehensive portfolio of products and modernization services. The website reflects a mature digital presence with extensive product information, localized content, and multi-language support. Technically, the site leverages Adobe Experience Manager CMS and integrates advanced marketing and analytics tools such as Adobe Analytics, HubSpot, and OneTrust for privacy compliance. Security measures include HTTPS enforcement and a robust Content Security Policy, ensuring a secure browsing experience. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

ARTE is a prominent European public media broadcaster offering a wide range of cultural, educational, and entertainment content including documentaries, films, series, and concerts. The platform is well-established with a strong market position in Germany and Europe, targeting a general audience with free, ad-free streaming services. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, with comprehensive GDPR-aligned privacy and cookie policies and a designated data protection contact. Overall, ARTE's website reflects a professional, trustworthy, and user-friendly platform with high content quality and strong business credibility.

Radio Bremen is a well-established public broadcasting institution in Germany, providing radio, television, and online media content primarily for the Bremen region. As a member of the ARD consortium, it holds a strong market position in regional media with multiple subsidiary radio channels and production entities. The website reflects a professional and comprehensive digital presence with high-quality content and consistent branding. Technically, the site uses modern web technologies, including lazy loading and structured data, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and partial security headers, though some improvements in explicit security policies and incident response transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, safe, and professionally managed, with no signs of malicious activity or content blocking.

M

Mitteldeutscher Rundfunk

mdr.de

58

Mitteldeutscher Rundfunk (MDR) is a large regional public broadcaster serving the Mitteldeutschland region of Germany, including Sachsen, Sachsen-Anhalt, and Thüringen. The website mdr.de provides comprehensive news coverage, radio and television programming, and multimedia content such as videos, audios, and podcasts. It is part of the ARD consortium, reflecting a strong market position in public media. The content is professionally curated and targets the general public in the region with a focus on local and international news, culture, and sports. Technically, the website employs modern web technologies including React, lazy loading, and custom media players. It integrates Piano Analytics for user behavior tracking and uses Leaflet for interactive maps. Hosting appears to be managed by reputable German academic and research networks, ensuring stable infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, explicit security headers and detailed privacy or cookie policies are not detected in the provided content, indicating room for improvement in transparency and compliance. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the content analysis. Overall, MDR.de is a trustworthy and professional media website with excellent content quality and business credibility. Strategic improvements in privacy disclosures and security header implementation would enhance its compliance and security posture.

A

Alexandra Hamer Therapeutic Massage & Bodywork

touchstream.com

58

Alexandra Hamer Therapeutic Massage & Bodywork is a small local healthcare service provider specializing in orthopedic and sports massage, myofascial bodywork, trigger point therapy, and structural integration. The business targets clients in Durham, Chapel Hill, RTP, and Raleigh, North Carolina. The website is built on the Squarespace platform, leveraging its standard templates and technologies such as Typekit fonts and JavaScript for a moderate performance and good mobile optimization. The site presents a professional and consistent brand image with clear business hours and contact phone number, supported by structured data markup for local business.

The domain norsk.com/lander is currently a parked domain with minimal content, primarily serving as a placeholder with advertising scripts from Google AdSense. There is no active business content, contact information, or policies present on the site. The domain is registered with Tucows Domains Inc. since 1998, indicating a long registration history, but the current usage does not reflect an active business or service. The technical infrastructure relies on basic JavaScript and CSS loaded from wsimg.com, a known parking service provider. No CMS or advanced frameworks are detected. Security posture is weak due to lack of security headers, DNSSEC, and privacy policies. The site uses HTTPS (assumed from domain but not explicitly confirmed in content), but no further security best practices are observed. Overall, the website is low trust and low content quality, serving primarily as a parked domain with advertising.

NDR.de is the official website of Norddeutscher Rundfunk (NDR), a major regional public broadcaster serving Northern Germany. The site offers comprehensive media content including radio and television programming, regional news, sports, culture, and entertainment. It is well-positioned as a trusted source of regional information and media services, leveraging its affiliation with the ARD network and related media partners. The target audience is the general public in Northern Germany and German-speaking users interested in regional news and media content. Technically, the website employs modern web technologies such as responsive design, HTML5, CSS3, and JavaScript, including a custom ARD video player for streaming content. Hosting and DNS are managed via Google Cloud infrastructure, ensuring reliable performance and scalability. The site is optimized for mobile devices and accessibility, with good SEO practices and structured data implemented for enhanced search engine visibility. From a security perspective, the site uses HTTPS with strong SSL configurations and secure streaming URLs. However, explicit security headers are not evident in the provided data, and there is no visible security policy or incident response contact information. Privacy and cookie policies are not explicitly found in the analyzed content, indicating room for improvement in compliance transparency. No vulnerabilities or suspicious elements were detected, and the domain registration aligns with the organization's legitimacy. Overall, NDR.de demonstrates a high level of professionalism, content quality, and technical maturity. Strategic recommendations include publishing clear privacy and cookie policies with consent mechanisms, implementing security headers, and providing a vulnerability disclosure or security.txt file to enhance trust and compliance. These steps will further strengthen the site's security posture and regulatory adherence.

O

OPPBTP (Organisme Professionnel de Prévention du Bâtiment et des Travaux Publics)

moa-batissez-en-prevention.fr

50

The website moa-batissez-en-prevention.fr is a professional French-language resource dedicated to construction project owners (maîtres d’ouvrage) to help optimize construction operations by integrating risk prevention measures. It is affiliated with OPPBTP, a recognized professional prevention organization in the French construction sector. The site offers advice, tools, solutions, and resources focused on health and safety in construction projects. Technically, the site uses modern web technologies including Google Tag Manager, Matomo analytics, and a cookie consent solution from axept.io. The CMS appears to be Ibexa, supporting structured content and rich media. Security posture is good with HTTPS and no exposed sensitive data, though security headers and explicit security policies are not evident. Privacy compliance is basic with a cookie consent mechanism and a privacy policy linked on a partner domain. The domain registration is consistent and legitimate, registered with GANDI in 2022, appropriate for the business purpose. Overall, the website is professional, trustworthy, and well-targeted to its audience, with moderate technical performance and good content quality.

B

Bluesky

bsky.social

62

Bluesky is an innovative social media platform focused on building an open, decentralized social internet. It offers users control over their timelines and content moderation, fostering creativity and community engagement. The platform supports a growing developer ecosystem with public APIs and open source projects, positioning itself as a forward-thinking alternative to traditional social networks. Technically, Bluesky employs modern web technologies including Next.js and integrates analytics via Google Tag Manager, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is limited due to missing explicit policies and consent mechanisms. Overall, Bluesky presents a professional, trustworthy, and technically mature platform with room for enhanced privacy and security disclosures.

Z

Zoovu (Germany) GmbH (formerly SEMKNOX)

sitesearch360.com

65

Site Search 360, operated by Zoovu (Germany) GmbH, offers a fast, customizable on-site search solution tailored for websites and e-commerce platforms. The company positions itself as a niche provider with a strong focus on semantic search technology and ease of integration, supported by a professional website featuring customer logos from reputable brands. The technical infrastructure leverages modern web technologies including JavaScript, Google Analytics, and lazy loading for performance optimization, with excellent mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and business indicators. Overall, the website demonstrates a mature digital presence with good security and privacy practices.

D

DEV Community

dev.to

72

DEV Community is a large and well-established online platform dedicated to software developers and engineers worldwide. Founded in 2016, it serves as a vibrant community hub where coders share knowledge, stay updated on industry trends, and grow their careers. The platform offers a variety of services including forums, content publishing, podcasts, videos, and developer challenges, supported by official partnerships with major technology companies such as Google AI, Neon, and Algolia. Its business model includes community engagement and premium memberships (DEV++). Technically, DEV Community is built on a modern Ruby on Rails framework using the open source Forem platform. It leverages cloud hosting, Algolia for search, and integrates analytics tools like Google Analytics and Tag Manager. The website demonstrates excellent performance, mobile optimization, and accessibility, with a clean and professional design that enhances user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses CSRF tokens to protect forms. While no critical vulnerabilities or exposed sensitive data were detected, the site lacks a public security policy, incident response information, and explicit cookie consent mechanisms, which are areas for improvement to enhance compliance and trust. Overall, DEV Community presents a high level of business credibility and technical maturity with strong trust indicators. The platform is safe for general audiences, with no adult or questionable content. Strategic recommendations include implementing explicit cookie consent, publishing security policies, and providing clearer security contact channels to further strengthen its security posture and privacy compliance.

The OpenStreetMap Foundation is a well-established international non-profit organization dedicated to supporting the OpenStreetMap Project, which provides free geographic data to the public. The foundation operates a membership-based model and focuses on community engagement, governance, and the promotion of open geospatial data. The website reflects a mature digital presence using the MediaWiki platform, offering comprehensive content about the foundation's mission, policies, and organizational structure. Technical infrastructure is solid, with fast performance, mobile optimization, and good SEO practices, although some modern security enhancements like DNSSEC and security headers are missing. Security posture is generally good with HTTPS enforced and domain transfer protections in place, but there is room for improvement in explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is supported by a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is professional, trustworthy, and serves its target audience effectively.

K

komoot

komoot.com

75

Komoot is a technology-driven platform specializing in outdoor adventure planning, including cycling, hiking, and running. It offers users an intuitive route planner enriched by community-generated recommendations, positioning itself as a leading service in the outdoor and transportation sector. The website demonstrates strong branding, excellent content quality, and a user-friendly experience tailored to outdoor enthusiasts worldwide. Technically, the site leverages modern JavaScript frameworks and a global CDN to ensure fast performance and mobile responsiveness. Security measures such as HTTPS and comprehensive security headers are well implemented, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS domain registration data is a notable anomaly that slightly impacts the overall trust score but does not detract from the professional presentation and operational maturity of the platform. Strategic recommendations include publishing detailed security policies and incident response information to enhance transparency and trust.

D

Deutsche Telekom AG

telekom.com

77

Deutsche Telekom AG is a leading global integrated telecommunications company headquartered in Germany, with a strong market position and a comprehensive portfolio of telecommunications and digital services. The corporate website provides extensive information about the company, including investor relations, corporate responsibility, compliance, and innovation initiatives such as AI projects. The site demonstrates a high level of digital maturity with modern web technologies, responsive design, and good SEO and accessibility practices. Security posture is strong, with HTTPS enforcement, security headers, and privacy compliance including GDPR adherence and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises questions about domain registration transparency, though the website content and branding strongly support legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving a broad audience including customers, investors, and partners.

STRATO GmbH is a leading German web hosting and cloud services provider offering a broad range of products including domain registration, email hosting, website builders, WordPress hosting, cloud storage, and online marketing tools. The company targets small and medium businesses and individuals seeking an easy and professional web presence. STRATO holds a strong market position in Germany, evidenced by its Service Champion 2024 award and ISO 27001 certification. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its services. Technically, STRATO employs a modern technology stack including Strapi CMS, JavaScript frameworks, and integrates marketing and analytics tools such as Google Tag Manager, Kameleoon, and Mouseflow. Hosting is performed in German data centers with a focus on security and environmental sustainability, using 100% green energy. The site enforces HTTPS and implements strong security headers, reflecting a mature security posture. Security-wise, the company demonstrates good practices including GDPR compliance, cookie consent management, and ISO 27001 certification. However, there is no publicly available incident response or vulnerability disclosure information, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the risk profile is low with strong trust indicators. Recommendations include publishing explicit incident response contacts, adding a security.txt file for vulnerability reporting, and maintaining transparency on data retention. These steps would enhance trust and security culture further.

Allwebco Design Corporation operates a website offering developer-grade HTML web templates, responsive designs, and related hosting and SEO support services. The company targets both professional developers and novice users, providing downloadable templates and add-ons to facilitate website building. The business has a niche market position with over 20 years of domain age, indicating established presence and credibility. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, supplemented by Google Adsense and Tag Manager for monetization and analytics. The site is mobile responsive and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve security and privacy practices.

Allwebco Design Corporation operates a niche website offering developer-grade, mobile-friendly HTML and CSS web templates primarily targeting novice and professional web developers and small businesses. The company has a long-standing presence since 2002 and provides a variety of responsive templates, built-in scripts, and support resources. Their business model centers on downloadable templates and related add-ons, complemented by web hosting services linked via partner domains. The website content is well-structured, professionally designed, and offers clear navigation with multiple template categories and support options.

L

Lutra

lutra.com.au

53

Lutra is a specialized company providing engineering and software services focused on water and wastewater treatment plants and operations. Their market position is that of a niche provider offering both software solutions like Infrastructure Data and process engineering services for water and wastewater treatment. The company targets councils, water authorities, and infrastructure operators primarily in New Zealand and Australia. Technically, the website is built on a modern stack including SilverStripe CMS, Google Tag Manager, Microsoft Clarity, and Vimeo integrations, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though formal security policies and incident response contacts are absent. Privacy compliance is basic with cookie consent and a privacy policy present but no GDPR-specific indicators. Overall, the website is professional, trustworthy, and well-branded, supporting a medium-sized business in the energy sector.

S

Schindler France

schindler.fr

68

Schindler France operates as a key regional branch of the global Schindler Group, specializing in the manufacturing, installation, and servicing of elevators, escalators, and moving walkways. The company targets building owners, property managers, and developers, offering a comprehensive portfolio of urban mobility solutions tailored to the French market. Their website reflects a mature digital presence with localized content and a strong brand identity. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple marketing and analytics tools, including Google Analytics, Adobe Analytics, and LinkedIn Insight, demonstrating a sophisticated digital infrastructure. Security-wise, the site enforces HTTPS and a robust Content Security Policy, though additional security headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. The absence of WHOIS data is a minor concern but likely due to registry privacy policies. Overall, the website presents a professional, secure, and user-friendly platform consistent with an enterprise-grade business.

S

Schindler Österreich

schindler.at

75

Schindler Österreich GmbH operates as a leading manufacturer and service provider of elevators, escalators, and moving walks in Austria, serving a broad audience including building owners, architects, and property managers. The company is part of the global Schindler Group, known for its extensive market presence and innovative transit management solutions. The website reflects a mature digital presence with comprehensive product information, service offerings, and localized content for Austria. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple modern marketing and analytics tools, ensuring a robust and scalable infrastructure. Security posture is strong with strict Content Security Policies and HTTPS enforcement, although additional headers could enhance protection. Privacy compliance is well addressed with clear GDPR-aligned policies and consent management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, supporting Schindler's market leadership in transportation solutions.

S

Schindler Latvija

schindler.lv

71

Schindler Latvija is a regional branch of the global Schindler Group, specializing in manufacturing and servicing elevators, escalators, and moving walkways. With over 130 years of history and a presence on all five continents, the company holds a strong market position as a leader in transportation solutions for buildings. Their website reflects a professional B2B focus targeting building owners, facility managers, and developers, offering a broad range of products and services including passenger and freight elevators, modernization, destination control, and digital multimedia solutions. Technically, the site is built on Adobe Experience Manager, leveraging advanced marketing and analytics tools such as Adobe Analytics, HubSpot, and OneTrust for consent management. The site is mobile optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is strong with HTTPS, Content Security Policy, and no visible vulnerabilities, though explicit security policies and incident response contacts could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy, professional, and aligned with the company's global brand standards.

S

Schindler Sverige

schindler.se

71

Schindler Sverige is a regional branch of the global Schindler Group, specializing in manufacturing and servicing elevators, escalators, and moving walkways. The company holds a strong market position in Sweden, offering a wide range of products and modernization services tailored to residential and commercial buildings. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting building owners and facility managers. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple marketing and analytics tools, including Adobe Launch, HubSpot, and Google Analytics, indicating a sophisticated digital infrastructure. Security measures include HTTPS and a strict Content Security Policy, though additional headers could enhance protection. Privacy compliance is robust with GDPR-aligned policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism and trustworthiness, though WHOIS data for the www subdomain is missing, which is not uncommon and does not detract significantly from legitimacy.

S

Schindler Slovenija

schindler.si

68

Schindler Slovenija is a well-established provider of elevators, escalators, and moving walkways, leveraging Swiss engineering and global expertise to serve the Slovenian market. The company operates as part of the global Schindler Group, offering a comprehensive portfolio including passenger and freight elevators, modernization services, and passenger flow management systems. The website reflects a mature digital presence built on Adobe Experience Manager, with strong branding and clear navigation tailored to building owners and facility managers. Technically, the site employs modern web technologies and integrates advanced analytics and consent management tools, ensuring compliance with GDPR and user privacy standards. Security posture is robust with strict Content Security Policies and HTTPS enforcement, although explicit security policies and incident response information are not publicly disclosed. Overall, the domain registration and website content align well, indicating a legitimate and credible business entity.

S

Schindler Portugal

schindler.pt

66

Schindler Portugal is a leading enterprise in the manufacturing and servicing of elevators, escalators, and moving walkways, operating as part of the global Schindler Group. The company offers a comprehensive range of products and modernization services tailored to residential, commercial, and industrial buildings. Their market position is strong, supported by a well-established brand and extensive service network. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting building owners, architects, and facility managers. Technically, the site leverages Adobe Experience Manager and integrates advanced analytics and consent management tools, indicating a high level of digital maturity. Security posture is robust with HTTPS, CSP, and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

S

Schindler Norge

schindler.no

73

Schindler Norge is a leading provider of elevators, escalators, and moving walkways in Norway, operating as part of the global Schindler Group. The company emphasizes Swiss quality and offers a broad range of products and services including passenger elevators, freight elevators, modernization solutions, and digital media services. Their website is professionally designed, localized for the Norwegian market, and provides comprehensive information for building owners, architects, and facility managers. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools such as Adobe Analytics, HubSpot, and OneTrust for privacy compliance. Security posture is strong with HTTPS and Content Security Policy implemented, though additional headers could enhance protection. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information including a Data Protection Officer email. Overall, the website reflects a mature digital presence consistent with an enterprise-level industrial manufacturer.

S

Schindler Nederland

schindler.nl

74

Schindler Nederland is a leading enterprise specializing in the manufacturing and servicing of elevators, escalators, and moving walkways, with a strong market presence in the Netherlands and globally. The company targets building owners, property managers, and developers, offering a comprehensive range of vertical transportation solutions including passenger and freight elevators, modernization services, and digital media platforms for elevators. The website reflects a mature digital infrastructure leveraging Adobe Experience Manager and integrates advanced analytics and consent management tools, demonstrating a high level of digital maturity. Security posture is robust with HTTPS, Content Security Policy, and cookie consent mechanisms in place, although explicit security policy and incident response information could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting Schindler's reputation as a reliable and innovative industry leader.

S

Schindler Malta

schindler.mt

76

Schindler Malta operates as a local branch of the global Schindler Group, specializing in the manufacturing, installation, modernization, and maintenance of elevators, escalators, and moving walks. The website targets building owners, architects, and facility managers, offering a comprehensive range of products and services tailored to various building types and urban environments. The company holds a strong market position as a global leader in transportation solutions within the built environment. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and integrating multiple third-party marketing and analytics tools such as Adobe Analytics, HubSpot, and Google Analytics. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some areas could be enhanced. Security is robust with a strict Content Security Policy and HTTPS enforcement, but additional security headers could further strengthen the posture. From a security and compliance perspective, the site includes a cookie consent mechanism compliant with GDPR requirements but lacks an explicit privacy policy and terms of service on the main page, which are critical for full compliance. No vulnerability disclosure or incident response information is provided, indicating room for improvement in transparency and security readiness. Overall, the website is professional, trustworthy, and well-maintained, reflecting the brand's global reputation. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and maintaining regular audits of third-party scripts to mitigate risks.