Security Directory

S

Software & Support Media GmbH

javascript-days.de

61

JavaScript Days is a well-established event organizer specializing in developer training focused on JavaScript, Angular, and related technologies. The website effectively promotes upcoming events in Berlin and Munich, offering a comprehensive schedule of workshops and bootcamps targeting a broad developer audience. The business model centers on educational events and training services, supported by a professional digital presence with strong branding and clear communication. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted behind Cloudflare for performance and security. The security posture is solid with HTTPS, reCAPTCHA, and consent management, though some improvements in security policy transparency and library updates could enhance resilience. Overall, the site demonstrates good compliance with GDPR and provides sufficient contact and privacy information, positioning it as a credible and trustworthy platform in the education technology sector.

S

Software & Support Media GmbH

software-architecture-summit.de

60

Software & Support Media GmbH operates the Software Architecture Summit, a professional event focused on modern software architecture training and bootcamps held in Berlin and München. The website presents a well-structured, professionally designed platform targeting developers, engineers, and technology enthusiasts. It leverages WordPress CMS with advanced SEO and cookie consent mechanisms, ensuring GDPR compliance and a positive user experience. The technical infrastructure includes modern libraries and integrations such as Google Analytics, Facebook Pixel, and Google Tag Manager, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with transparent privacy practices and clear business information.

E

entwickler.de

entwickler-summit.de

72

entwickler.de operates as a prominent German technology community platform, organizing the Entwickler Summit, a free tech event connecting decades of software development experience with future industry trends. The platform targets software developers and tech enthusiasts, offering community engagement, knowledge sharing, and event services. Technically, the website is built on WordPress CMS with Elementor for layout and WooCommerce for e-commerce functionalities, supported by modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and various advertising pixels. Security measures include HTTPS enforcement, Google reCAPTCHA for form protection, and GDPR-compliant cookie consent management, although additional HTTP security headers could enhance the security posture. Overall, the website is professional, well-structured, and compliant with privacy regulations, making it a trustworthy resource for its audience.

W

Werben & Verkaufen

wuv.de

64

W&V (Werben & Verkaufen) is a well-established German media platform specializing in marketing, advertising, media, and related industry news. It targets marketing decision-makers, advertisers, and media professionals with comprehensive news, trends, case studies, and analyses. The platform offers digital content, membership subscriptions, events, and job listings, positioning itself as a key media player in the German marketing sector. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and rich content.

L

L'Idem Animation School

lidembarcelona.com

62

L'Idem Animation School is an international digital arts educational institution with over 25 years of experience, operating campuses in Spain and France. The website presents a professional and well-structured digital presence, leveraging WordPress with the Divi theme and integrating multiple marketing and analytics tools such as TikTok Pixel, LinkedIn Insight, and Google Tag Manager. While the technical infrastructure is modern and the site is mobile-optimized with good SEO practices, there is a notable absence of publicly available WHOIS domain registration data, which raises concerns about domain legitimacy and registration transparency. Security measures include HTTPS and reCAPTCHA, but the lack of comprehensive security headers and published security policies suggests room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy policy or contact information visible. Overall, the website is functional and trustworthy from a user perspective but requires enhanced transparency and security documentation to strengthen its risk profile.

C

carsale24

carsale24.com

49

carsale24 operates as a professional online platform facilitating the sale of used cars primarily in Germany, Austria, and Switzerland. The company connects private sellers with a network of verified dealers, offering a streamlined, secure, and convenient car selling experience. Their business model is commission-based, funded by dealers, and includes value-added services such as premium vehicle appraisals and personalized customer support. The website demonstrates strong market positioning with trust signals including customer testimonials, media endorsements, and certification badges. Technically, the website is built on WordPress with a modern tech stack including the Enfold theme, WP Rocket for performance optimization, and Usercentrics for consent management. The site is well-optimized for SEO and mobile responsiveness, ensuring a high-quality user experience. Analytics and marketing tools such as Google Tag Manager are employed with privacy compliance in mind. From a security perspective, the site enforces HTTPS and integrates consent management, but lacks explicit HTTP security headers and incident response contact details. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern but does not currently undermine the site's legitimacy given the professional content and business presence. Overall, carsale24 presents a trustworthy and mature online service with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around incident response would further enhance their security posture and user trust.

F

France AutoTech

francecartech.org

40

France AutoTech is a French non-profit association that brings together startups innovating in the automotive mobility sector. The organization focuses on promoting innovation, fostering collaboration among members, and advocating for the ecosystem with media and public authorities. The website serves as a hub for member information, news, podcasts, and events, positioning France AutoTech as a key player in the French automotive tech landscape. Technically, the site is built on WordPress with a range of plugins for media, analytics, and user experience enhancements. The infrastructure is hosted by OVH, a reputable French provider, and uses HTTPS with Google Analytics configured for IP anonymization. Security posture is moderate with room for improvement in security headers and cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, though it lacks explicit privacy and security policy details. Strategic recommendations include enhancing GDPR compliance, implementing security headers, and maintaining up-to-date software.

D

Das WeltAuto Canarias

dwacanarias.com

53

Das WeltAuto Canarias operates as a regional automotive retailer specializing in used and km 0 vehicles within the Canary Islands, under the reputable Grupo Domingo Alonso brand. The website presents a professional and user-friendly interface, offering comprehensive vehicle listings, financing options, and contact channels tailored to the local market. The technical infrastructure leverages modern frontend technologies such as Vue.js and Tailwind CSS, supported by Google Tag Manager for analytics and Didomi for GDPR-compliant consent management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and additional security headers are recommended. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

A

Alfreð

alfred.is

65

Alfreð.is is the largest job search platform in Iceland, providing a comprehensive service for job seekers and employers to browse and apply for jobs via web and app. The platform offers hundreds of new job listings weekly and additional services such as courses. The website is well-branded and targets the Icelandic employment market. Technically, the site uses modern frameworks like React and Next.js, hosted behind Cloudflare with CDN and image optimization via Imgix. Analytics and marketing tools include Hotjar, Google Tag Manager, and Bing Ads. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but could improve transparency and security practices.

S

Skoda Ísland

skoda.is

69

Skoda Ísland operates as the official ŠKODA importer and dealer in Iceland, providing a comprehensive range of automotive services including new and used car sales, financing, and after-sales support. The website presents a professional and well-structured digital presence, targeting Icelandic consumers and businesses interested in ŠKODA vehicles. The company leverages modern web technologies such as React and Bootstrap, hosted on reliable CDN platforms, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforced and no exposed sensitive data, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the queried subdomain is a minor concern but does not detract significantly from the overall legitimacy, given the strong branding and consistent contact information. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and verifying domain registration details to bolster trust.

A

Audi

audi.is

67

The website www.audi.is is the official Audi brand portal for Iceland, providing information on Audi vehicles, services, and brand engagement tailored to the Icelandic market. It serves as a regional digital presence for Audi, showcasing new and used cars, financing options, service centers, and MyAudi support. The site is professionally designed with consistent branding and modern web technologies, including Adobe Experience Manager headless CMS and Audi's proprietary feature apps. It integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel, alongside a cookie consent mechanism to comply with privacy regulations. Security posture is strong with HTTPS enforced and standard security practices observed, though explicit security policies and contact information for incident response are not publicly visible. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and branding strongly indicate legitimacy. Overall, the site is a well-maintained, secure, and user-friendly platform for Audi customers and prospects in Iceland.

B

Bier-glas.de – bier-glas.de

bier-glas.de

69

Bier-glas.de is a German e-commerce website specializing in the sale of beer glasses from various countries, catering to beer enthusiasts and consumers. The site is built on the Shopify platform, leveraging its e-commerce infrastructure and payment systems. The business operates in a niche market segment focused on beer glassware, offering a variety of sizes and styles. The website demonstrates consistent branding and good content quality, targeting a mature audience interested in beer culture. Technically, the website uses modern web technologies including Shopify's Minimal theme, Google Tag Manager, and several marketing and analytics tools. The site is mobile-optimized and performs moderately well. However, accessibility features are basic and could be improved. The hosting and DNS setup are professional, with Google Domains managing DNS and Shopify providing hosting and CDN services. From a security perspective, the site enforces HTTPS and uses Shopify's secure checkout mechanisms. Cookie consent is implemented in compliance with GDPR, but explicit privacy and terms of service pages are missing. Security headers are not fully implemented, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Bier-glas.de presents a legitimate and professional e-commerce presence with room for enhancement in privacy disclosures and security hardening. The risk profile is moderate, with recommendations focusing on policy publication, security header implementation, and contact information transparency.

F

Freshworks Inc.

freshservice.com

80

Freshworks Inc. operates the Freshservice platform, an AI-powered IT service management solution designed for enterprises seeking scalable and efficient ITSM capabilities. Positioned as a leader in the ITSM market, Freshservice emphasizes ease of deployment, AI assistance, and integration with existing technology stacks to improve IT team productivity and employee satisfaction. The company targets IT departments across various industries, offering a SaaS subscription model with enterprise-grade features and certifications such as ISO 27001 and SOC 2. Technically, the website leverages modern frameworks like React and Next.js, integrates multimedia content via Wistia, and employs robust analytics and consent management tools including Google Tag Manager and OneTrust. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, Freshservice enforces HTTPS, implements comprehensive security headers, and maintains privacy and cookie policies aligned with GDPR requirements. While WHOIS data is unavailable, possibly due to privacy protection, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The company also maintains a vulnerability disclosure policy and provides contact for its Data Protection Officer. Overall, Freshservice presents a trustworthy, professional, and secure online presence suitable for enterprise customers. The main risk lies in the lack of publicly available WHOIS data, which should be monitored for legitimacy confirmation. Strategic recommendations include publishing a dedicated security policy page and enhancing incident response contact visibility.

M

MAN Financial Services Poland Sp. z o.o.

manfs.pl

53

MAN Financial Services Poland Sp. z o.o. operates as a specialized financial services provider focused on offering tailored financing and insurance solutions for MAN vehicles including trucks, vans, and buses within Poland. The company targets business customers ranging from small enterprises to large fleet operators, providing leasing, credit, and rental options for both new and used vehicles. The website reflects a professional and consistent brand presence aligned with MAN's corporate identity. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Flatpickr, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS (implied by canonical URLs), implements a cookie consent mechanism compliant with GDPR, and avoids exposing sensitive data. However, no explicit security headers were detected, and DNSSEC is not enabled for the domain. Incident response and security policy information are absent, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, with a solid privacy compliance posture. The domain registration data supports legitimacy, showing consistent registration history without privacy protection. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing incident response contacts to strengthen security posture and user trust.

K

Kesko

kesko.fi

60

Kesko Oyj is a leading Finnish retail company operating in eight countries, specializing in grocery trade, building and technical trade, and car trade sectors. The website reflects a mature corporate presence with comprehensive information on business operations, investor relations, sustainability, and career opportunities. The site targets a general audience including customers, investors, and partners. Technically, the website uses modern technologies such as Episerver CMS, Google Tag Manager, Google Analytics, and OneTrust for cookie consent, indicating a well-maintained digital infrastructure. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers like Content-Security-Policy are not evident in the HTML. Privacy compliance is robust with clear privacy and cookie policies linked and GDPR compliance evident. No critical vulnerabilities or suspicious elements were detected. Overall, the website demonstrates high business credibility and trustworthiness.

W

Wufoo

wufoo.com

74

Wufoo is an established online form builder platform that enables users to create custom forms quickly and efficiently, with cloud storage and database integration. Owned by SurveyMonkey, it targets businesses and individuals seeking to build registration forms, surveys, payment forms, and more. The website demonstrates a professional and consistent brand presence with comprehensive privacy and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site is built on WordPress and leverages modern analytics and marketing technologies such as Mixpanel, Facebook Pixel, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent controls, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and known parent company. Overall, Wufoo presents a trustworthy and well-maintained online service with room for improvement in transparency and security disclosures.

H

Herber & Herber Werbeagentur

herber-herber.de

51

Herber & Herber Werbeagentur is a well-established advertising agency serving the Saarland, Luxemburg, and Dreiländereck regions, with over 30 years of experience. They specialize in website development, consulting, strategy, and digital marketing, positioning themselves as a trusted Google Partner. Their client base spans multiple industries including social institutions, handcraft, tourism, real estate, healthcare, automotive, and more. The website reflects a professional and consistent brand image with clear navigation and comprehensive content. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Carousel, and integrates advanced marketing and analytics tools including Google Tag Manager, Matomo (self-hosted), Microsoft Clarity, and smartsupp chat. The site is mobile-optimized and implements a robust cookie consent mechanism compliant with GDPR. From a security perspective, HTTPS is enforced and privacy-friendly analytics are used. However, explicit security headers and published security policies or incident response information are absent. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. The overall risk is low, with strong business credibility and privacy compliance. Strategic recommendations include adding terms of service, security policies, and enhancing security headers to further strengthen trust and compliance.

P

Pitch Software GmbH

pitch.com

84

Pitch Software GmbH operates the website pitch.com, a mature and well-established SaaS platform providing modern presentation software designed for teams and businesses. The company positions itself as a trusted alternative to traditional presentation tools, offering collaborative features, customizable templates, and analytics to enhance pitching and presentation workflows. The website demonstrates a high level of digital maturity, leveraging modern web technologies such as React and Next.js, hosted on AWS infrastructure with CDN support for fast global delivery. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement, domain transfer protections, and comprehensive privacy and cookie policies aligned with GDPR requirements. However, DNSSEC is not enabled, and explicit incident response contacts or vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website and business exhibit high credibility and trustworthiness, supported by extensive social proof and integration partnerships.

M

MEGGLE BH

meggle.ba

46

MEGGLE BH operates as a prominent dairy brand in Bosnia and Herzegovina, offering a wide range of dairy products including milk, yogurts, cheeses, butters, and vegan alternatives. The website reflects a mature digital presence with multilingual support and strong branding consistency. Technically, the site is built on WordPress with modern tracking and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is trustworthy and professionally maintained, supporting MEGGLE BH's market position as a leading dairy provider in the region.

A

Antonio Commerce d.o.o. Mostar

antonio-commerce.com

39

Antonio Commerce d.o.o. Mostar operates as a small retail and wholesale business specializing in office supplies, school supplies, sanitary products, banking equipment, and is an importer of Samsonite travel goods. The company targets local businesses and consumers in Mostar and surrounding regions. The website presents basic but functional content with clear navigation and a focus on product categories relevant to their market. Technically, the site uses common JavaScript libraries such as jQuery and tracking tools like Google Analytics and Google Tag Manager, but lacks advanced frameworks or CMS indications. Security posture is moderate with domain registration protections but lacks visible HTTPS enforcement and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is moderately trustworthy but would benefit from enhanced security and compliance features.

U

Userflow

userflow.com

72

Userflow is a technology company specializing in no-code user onboarding software designed to help SaaS providers create in-app onboarding flows, product tours, checklists, and surveys. The company positions itself as a trusted solution with over 500 software providers relying on its platform, emphasizing ease of use and rapid deployment without developer involvement. Their market position is strengthened by positive customer testimonials and a high G2 rating. Technically, Userflow leverages a modern web stack including Webflow CMS, various analytics and marketing tools such as Google Tag Manager, Mixpanel, Heap, VWO, and ContentSquare. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides comprehensive privacy and security policies. However, explicit incident response contacts and vulnerability disclosure mechanisms are not evident, suggesting areas for improvement in transparency and readiness. Overall, Userflow presents a professional, trustworthy online presence with strong business credibility and technical maturity. The absence of WHOIS data slightly impacts domain trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing incident response visibility, adding vulnerability disclosure, and continuous auditing of third-party scripts to maintain security posture.

P

Pon

jobsatpon.com

67

Pon is a well-established international mobility solutions company with a strong presence in automotive and bicycle sectors. The website serves as a professional career portal showcasing job opportunities, traineeships, and company culture primarily in Dutch with multi-language support. The technical infrastructure leverages modern web technologies including React, Weglot for translations, and Recruitee ATS platform, hosted behind Cloudflare DNS and CDN services. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit privacy policies would enhance compliance and trust. Overall, the site is professional, trustworthy, and well-aligned with Pon's business stature.

B

Bpifrance

bpifrance.fr

67

Bpifrance is the French public investment bank dedicated to supporting businesses across their lifecycle, from startup funding to stock market listing. It offers a comprehensive range of financing solutions including credit and equity investments, positioning itself as a key player in France's economic development and innovation ecosystem. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting its role as a trusted public institution. Technically, the site leverages Drupal CMS, integrates Google Maps API, Matomo analytics, and Google Tag Manager, indicating a modern and well-maintained infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public vulnerability disclosure policy is noted. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates high business credibility and trustworthiness, suitable for its public institution status.

C

Capgemini

capgemini.com

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology with deep sector expertise. The company targets enterprises and governments worldwide, positioning itself as a trusted partner for digital innovation and transformation. The website reflects a mature digital infrastructure built on WordPress with modern technologies such as React and Bootstrap, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, comprehensive security headers, and adherence to recognized frameworks like ISO 27001 and NIST. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact channels for security and data protection inquiries. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

Business France is a French public advisory agency dedicated to supporting the internationalization of the French economy. It assists companies in export development and promotes France's attractiveness to foreign investors. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services, network, and expertise. Technically, it uses modern frameworks such as Nuxt.js and Tailwind CSS, with good performance and SEO practices. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies. Overall, the site represents a trustworthy government entity with a strong digital presence.

L

L'IDEM

lidem.eu

59

L'IDEM is a well-established higher education institution specializing in creative and digital arts education, with campuses in France and Spain. The website presents a professional image with comprehensive information about their programs, certifications, and events. The institution targets students, professionals, and companies seeking training or apprenticeships in creative and digital fields. Technically, the website is built on WordPress with modern plugins and integrates multiple analytics and marketing tools such as HubSpot and Facebook Pixel. Security posture is good with HTTPS and reCAPTCHA usage, though it lacks explicit security headers and published security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market segment.

F

France AutoTech

franceautotech.org

40

France AutoTech is a French non-profit association that brings together startups innovating in the automotive mobility sector. The organization focuses on promoting innovation, fostering collaboration among members, and advocating for the ecosystem with media and public authorities. The website reflects a professional and consistent brand presence, targeting startups and stakeholders in automotive technology. Technically, the site is built on WordPress with a moderate tech stack including popular plugins and Google Analytics integration. The site is hosted by OVH sas and uses HTTPS with a valid SSL certificate, though DNSSEC is not enabled. Security posture is moderate with room for improvement in security headers and published policies. Privacy compliance is basic, lacking explicit cookie consent mechanisms and detailed GDPR compliance statements. Business credibility is strong given the domain age, partnerships, and clear association identity. Overall, the website is a reliable resource for the French automotive tech startup community but should enhance privacy and security practices to improve compliance and trust.

Ducati is a globally recognized premium motorcycle manufacturer, offering a range of high-performance bikes and engaging with enthusiasts through racing and dealer networks. The website serves as a comprehensive platform for product information, racing updates, and dealer contacts, targeting motorcycle enthusiasts and potential buyers worldwide. Technically, the site employs modern web technologies including Google Tag Manager, Microsoft Clarity, and multiple tracking pixels, hosted likely on Akamai infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. Overall, the site presents a professional and trustworthy digital presence, though the lack of WHOIS data transparency is noted. Strategic recommendations include enhancing visible security policies and maintaining rigorous third-party script audits.

V

Volkswagen D'Ieteren Finance

vdfin.be

62

Volkswagen D'Ieteren Finance operates as a financial services provider specializing in vehicle financing and leasing solutions primarily for Volkswagen customers in Belgium. The company targets businesses, private individuals, and dealers, offering tailored financial products to support vehicle acquisition and mobility. The website reflects a professional brand presence consistent with the Volkswagen and D'Ieteren group, emphasizing mobility and finance services. Technically, the website is built using modern web technologies including React and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates moderate performance with good design quality and user experience. However, some areas such as accessibility and SEO could be improved. The website uses HTTPS with a strong SSL configuration but lacks explicit security headers and published security policies. From a security perspective, the site shows good baseline practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by the presence of privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. However, the absence of incident response contacts and vulnerability disclosure policies suggests room for maturity improvement. Overall, the website and domain appear legitimate and professionally managed, though the WHOIS data is restricted, limiting transparency. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility, and expanding SEO metadata to strengthen trust and compliance.

C

CUPRA

cupraofficial.pl

66

The website www.cupraofficial.pl serves as the official Polish portal for the CUPRA automotive brand, focusing on sporty personal vehicles. It provides comprehensive information about car models, services, financing options, and electromobility initiatives. The site is well-structured with clear navigation and professional branding consistent with the Volkswagen Group's standards. Technically, it leverages Adobe Experience Manager CMS hosted on Volkswagen Group's cloud infrastructure, integrating modern analytics and marketing tools such as Google Tag Manager and Adobe Experience Platform. The site implements cookie consent via OneTrust, indicating attention to privacy compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are absent. WHOIS data is unavailable due to registry policies, but the site’s professional presentation and domain usage suggest legitimacy. Overall, the site is a reliable and professional digital presence for CUPRA in Poland.

V

Volkswagen Group Polska Sp.

seat.pl

62

SEAT Polska operates as the official Polish branch of the SEAT automotive brand under Volkswagen Group Polska Sp. The website serves as a comprehensive platform for consumers in Poland to explore, configure, and purchase new and certified used SEAT vehicles. It offers a wide range of services including financing, leasing, test drives, after-sales service, and a virtual showroom, positioning itself as a key player in the Polish automotive market. The digital infrastructure is built on Adobe Experience Manager with integration of modern analytics and marketing tools such as Google Tag Manager and Adobe Analytics, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong brand presence and consistent business information. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

A

Audi Polska

audi.pl

68

Audi Polska operates as the official distributor and representative of the Audi brand in Poland, offering a comprehensive range of new and used vehicles, financing options, and after-sales services. The website serves as a digital showroom and sales platform, targeting both private customers and businesses. Audi Polska benefits from strong brand recognition and a premium market position within the automotive sector in Poland. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Adobe Experience Manager headless CMS, Google Tag Manager, and live chat support, ensuring a seamless user experience and effective marketing analytics. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms in place, although explicit incident response and vulnerability disclosure policies are not publicly visible. Overall, the domain and website exhibit high legitimacy and trustworthiness consistent with a major automotive brand.

V

Voyado

voyado.com

55

Voyado is a Sweden-based technology company specializing in customer experience platforms tailored for retail and e-commerce sectors. Their platform integrates CRM, loyalty management, AI-driven product discovery, and retail media to enhance customer engagement and increase revenue. With over 400 retail brands as customers and a strong market presence, Voyado positions itself as a leading solution provider in the Nordic retail technology market. The website reflects a mature, professional business with comprehensive product offerings and strong customer testimonials. Technically, the site is built on WordPress with HubSpot integrations, leveraging modern web technologies and SEO best practices. The infrastructure is hosted on AWS with robust performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, although DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. Overall, the site demonstrates a high level of digital maturity and business credibility, with minor areas for security enhancement. Recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

P

Production Resource Group, L.L.C.

prg-proshop.com

62

PRG Proshop is a well-established e-commerce platform specializing in the sale of used professional production equipment including audio, lighting, staging, and video gear. The company positions itself as a leading supplier in the entertainment and event technology sector, targeting production professionals and corporate event planners. The website reflects a professional business model with clear branding and a broad product catalog. Technically, the site uses a mix of legacy and modern web technologies, including jQuery, Bootstrap, and Google Analytics, hosted on a domain registered with GoDaddy. While the site is accessible and uses HTTPS, some outdated libraries and missing security headers present moderate security risks. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks a visible privacy policy or terms of service. Contact information and social media presence are clearly provided, enhancing business credibility.

E

EmbedSocial

embedsocial.com

74

EmbedSocial is a well-established technology company founded in 2012, providing a SaaS platform focused on user-generated content aggregation, social listening, social commerce, and Google Business Profile review management. The company serves a global audience of multi-location brands and marketers, boasting a customer base of over 300,000 brands worldwide. Their website reflects a mature digital presence with professional design, strong SEO, and comprehensive content relevant to their business domain. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, Ahrefs Analytics, and Intercom. The hosting infrastructure leverages Google Cloud DNS services, and the site is optimized for mobile and accessibility standards. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site employs HTTPS with good SSL configuration and domain registration protections. However, some security headers are not explicitly detected, and there is no published security policy or incident response contact information. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, EmbedSocial presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security header implementation and incident response transparency would further enhance their security posture and trustworthiness.

E

elink.io

elink.io

68

elink.io is a technology SaaS company specializing in content curation tools that enable users to save and edit web links and transform them into email newsletters, webpages, social bio links, and more. The platform targets a broad audience including marketing, sales, education, and remote teams, positioning itself as a comprehensive content creation solution. The website is professionally designed using modern web technologies such as Webflow, Google Analytics, and AWS hosting, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit privacy or cookie policies were found in the analyzed content. Overall, the website is safe, professional, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

T

Treasure Data

treasuredata.com

75

Treasure Data is a leading enterprise Customer Data Platform (CDP) provider that leverages AI to deliver scalable data management and analytics solutions for Global 2000 companies. Their platform enables businesses to unify customer data and drive measurable business impact. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site uses modern web technologies including WordPress CMS, Google Tag Manager, New Relic monitoring, and Wistia for media, ensuring good performance and user experience. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. WHOIS data is unavailable or privacy protected, which slightly reduces transparency but does not detract from the overall legitimacy given the strong business indicators. Overall, Treasure Data’s website demonstrates a high level of professionalism, technical maturity, and compliance with privacy standards, positioning it well in the enterprise technology market.

A

Anheuser-Busch InBev Deutschland

ab-inbev.de

66

Anheuser-Busch InBev Deutschland operates as a major brewing company in Germany, offering a portfolio of premium beer brands including Corona, Beck's, and Spaten. The company emphasizes sustainability and social responsibility, targeting adult consumers and partners in the gastronomy sector. The website is built on WordPress, featuring modern web technologies such as lazy loading and Google Tag Manager for analytics and marketing. The site includes an age verification gate to comply with alcohol regulations and provides comprehensive privacy and cookie policies, indicating good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website reflects a professional and trustworthy corporate presence with a strong brand identity.

A

Anheuser-Busch InBev

ab-inbev.com

74

Anheuser-Busch InBev is the world's largest brewer, with a heritage spanning over 600 years. The company operates globally, producing and distributing more than 500 iconic beer brands. Their website reflects a mature enterprise with a strong focus on responsible drinking, sustainability, and investor relations. The digital infrastructure leverages modern technologies such as SvelteKit and Builder.io CMS, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, security headers, and an age verification gate to comply with legal drinking age requirements. Privacy compliance is good, with clear privacy and cookie policies, though explicit cookie consent mechanisms could be improved. Overall, the website projects high business credibility and professionalism.

Bremen Tourismus is the official tourism website for the city of Bremen, Germany, providing comprehensive information about attractions, accommodations, and travel tips for visitors. The site targets tourists and travelers interested in exploring Bremen and offers a government-backed platform for tourism promotion. The website is well-branded and consistent with official city services, indicating a strong market position in the hospitality and government sectors. Technically, the website employs modern JavaScript frameworks (Vue.js implied), integrates analytics tools such as Matomo and Google Analytics, and uses Cookiebot for GDPR-compliant cookie consent management. The hosting appears stable with INWX nameservers, and the site is served over HTTPS with good mobile optimization and accessibility features. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, explicit security headers and incident response policies are not evident in the provided data. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the official nature of the site. Overall, the website presents a low-risk profile with strong business credibility and moderate to good technical and security posture. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing contact information for incident response to further improve trust and compliance.

K

Korvo

korvo.co

62

Korvo is a specialized SaaS platform providing e-commerce infrastructure tailored for educators and content creators. It enables users to create and manage live workshops, digital products, online courses, and paid communities, integrating payment processing through iyzico. The platform targets experts and educators seeking to monetize their knowledge and scale their passion businesses. Korvo positions itself as a niche player with a comprehensive suite of tools for event and product management, customer tracking, and income reporting. Technically, the website is built on modern frameworks such as Next.js and React, with strong mobile optimization and good SEO practices. It employs multiple analytics and tracking services including Google Analytics, Hotjar, Microsoft Clarity, and Facebook Pixel, all managed via Google Tag Manager. Security posture is solid with HTTPS enforced and secure payment integration, though some security headers and explicit security policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. No direct contact emails or phone numbers are provided, which may affect user trust slightly. Overall, Korvo demonstrates a mature digital presence with a strong focus on user experience and business functionality.

E

Efilli

istanbulprivacysummit.com

66

Istanbul Privacy Summit 2025 is a premier event organized by Efilli, focusing on privacy, data protection, and cybersecurity with a special emphasis on AI and regulatory trends. The summit attracts a diverse audience including regulators, industry experts, and technology professionals, positioning itself as Turkey’s leading privacy event. The website is professionally designed using Webflow, integrates modern technologies such as Google Tag Manager and YouTube embeds, and provides comprehensive event details, speaker profiles, and sponsorship information. Security posture is strong with HTTPS and basic security best practices, though some security headers could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, the site demonstrates high professionalism and trustworthiness in content and presentation but would benefit from enhanced domain registration transparency and published security policies.

S

Semotion

semotion.de

53

Semotion is a German online marketing agency based in Magdeburg, specializing in SEO, SEA, content creation, and web analytics services. Established since 2008, the company positions itself as a top 100 SEO service provider and a certified Google Partner, offering personalized and data-driven marketing strategies to businesses and online shops in both B2B and B2C sectors. The website demonstrates a professional digital presence with clear service descriptions, client trust signals, and modern web technologies. Technically, the site is built on WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution, and employs Matomo Analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security headers and published security policies. Overall, the site is well-optimized for SEO and user experience, with moderate performance and good mobile responsiveness.

B

Blue Express

blue.cl

63

Blue Express is a Chilean parcel delivery and logistics company offering nationwide coverage with over 3,200 delivery points and competitive fixed pricing. The company targets individual consumers and entrepreneurs, providing a digital platform for shipping label creation, package drop-off, and e-commerce integration. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, supported by Cloudflare DNS and CDN services. Marketing and analytics are robust, leveraging multiple tracking pixels and tag managers to optimize user engagement and advertising effectiveness. Security posture is strong with HTTPS enforcement and comprehensive security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, Blue Express presents a professional, trustworthy, and user-friendly online presence aligned with its business objectives.

B

Bloomwell

bloomwell.de

47

Bloomwell operates a specialized healthcare platform focused on providing online medical cannabis prescriptions in Germany. The website offers telemedicine services and educational content about medical cannabis and alternative therapies, targeting patients seeking convenient access to cannabis prescriptions. The business positions itself as a niche digital healthcare provider within the German market. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern tools like Google Tag Manager and Cookiebot for compliance and analytics. The site demonstrates good digital maturity with responsive design and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies are not evident. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve by publishing explicit security policies and incident response information.

M

Melitta

melitta.de

58

Melitta operates a professional and well-structured e-commerce website focused on coffee products and coffee machines, targeting German-speaking consumers. The site demonstrates a mature digital infrastructure leveraging modern technologies such as Shopware CMS, Google Tag Manager, Matomo analytics, and Cloudflare for DNS and security. The presence of a cookie consent mechanism indicates attention to privacy compliance, although explicit privacy and terms of service policies were not found in the provided content. Security posture is strong with HTTPS and Cloudflare integration, but could be improved by adding explicit security headers and published security policies. Overall, the website is trustworthy, professional, and well-positioned in the retail coffee market.

H

Henkel

schwarzkopf-professional.com

64

Schwarzkopf Professional is a globally recognized brand under the Henkel umbrella, specializing in professional hair care products and education targeted at hairdressers. The website reflects a mature digital presence built on Adobe Experience Manager, integrating modern analytics and consent management tools. While the site is well-structured and professionally designed, the absence of WHOIS data and explicit privacy policies slightly detracts from its overall trustworthiness. Security posture is solid with HTTPS and cookie consent mechanisms, but could be improved with additional security headers and published policies. Overall, the site serves its B2B audience effectively with a focus on product information and educational resources.

F

Fashioncenter GmbH

lottosportshop.de

63

Fashioncenter GmbH operates the official Lotto Sport online shop in Germany, offering a broad range of branded sneakers, sportswear, and accessories for men, women, and children. The website positions itself as a trusted retail channel with free shipping over 30€, climate-neutral delivery via DHL, and recognized payment options including Klarna and PayPal. The business targets consumers seeking sporty and retro-inspired fashion with a family-friendly approach. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates advanced tracking and consent management tools such as Google Tag Manager and Usercentrics. Security measures include HTTPS enforcement and Google reCAPTCHA on login forms, although explicit security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site demonstrates a mature e-commerce infrastructure with good user experience and trust indicators.

B

Brauerei Beck & Co

becks.de

72

Brauerei Beck & Co operates the BECK’S beer brand, a well-established German brewery with a rich history dating back to 1873. The website showcases a diverse product portfolio, brewery tours, and brand marketing campaigns, targeting adult beer consumers primarily in Germany. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and frameworks such as UIkit and jQuery, integrates multiple marketing and analytics tools, and enforces HTTPS with an age verification gate to comply with alcohol regulations. Security posture is solid with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, including phone numbers and physical address. Overall, the site reflects a mature digital presence aligned with a large enterprise beverage brand.

Jack Daniel's is a globally recognized premium Tennessee whiskey brand with a rich heritage dating back to 1866. The website serves as a brand portal offering product information, heritage storytelling, and visitor engagement. It targets adult consumers legally permitted to purchase alcohol, emphasizing responsible drinking and compliance with age restrictions. The site is professionally designed, mobile-optimized, and leverages modern web technologies such as Next.js and React for a performant user experience. Privacy and cookie consent management are implemented via OneTrust, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and standard security headers present, though explicit incident response and vulnerability disclosure information are absent. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly indicate legitimacy. Overall, the site is a well-maintained digital asset supporting Jack Daniel's market position as a leading whiskey brand.