Security Directory

W

WITTMANN MEDIA

unternehmen-heute.de

56

UNTERNEHMEN-HEUTE.de is a German-language online news portal operated by WITTMANN MEDIA, focusing on business, finance, technology, politics, motor industry, and environmental news. The website provides regularly updated news articles, press releases, and multimedia content targeting German-speaking professionals and the general public interested in these sectors. The business model centers on news publishing and press release distribution, supplemented by advertising and partner promotions. The site holds a niche position within the German media landscape with a small operational size. Technically, the website employs a custom or unknown CMS with a technology stack including jQuery, Google Analytics, Google Tag Manager, CookieConsent2, Google Fonts, and embedded YouTube videos. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but basic. The site uses multiple external resources and CDNs for fonts, scripts, and media. From a security perspective, the website uses HTTPS (assumed but not explicitly confirmed in HTML), implements a cookie consent mechanism, and includes Google site verification. However, it lacks explicit security headers such as CSP, HSTS, and X-Frame-Options, which are recommended for enhanced security. No incident response or vulnerability disclosure policies are found. The WHOIS data indicates a consistent domain registration with no privacy protection, aligning with the website operator's identity. Overall, the website is functional, professionally designed, and trustworthy for its intended audience. Security posture is moderate with room for improvement in headers and policies. Privacy compliance is basic but present. Strategic recommendations include enhancing security headers, publishing terms of service, and adding more comprehensive contact information to improve trust and compliance.

Z

Zavis Inc.

zavis.ai

59

Zavis Inc. operates a professional and modern website offering AI-powered business automation solutions focused on WhatsApp Business, AI cloud call centers, and omnichannel customer engagement. The company targets businesses seeking to scale customer interactions efficiently using advanced AI technologies. Their market position is that of a specialized SaaS provider delivering full-stack AI solutions for customer communication and engagement across multiple platforms including WhatsApp, Instagram, and voice calls. The website demonstrates a high level of digital maturity with a modern React/Next.js tech stack, embedded multimedia content, and integration of multiple analytics and marketing tools. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not clearly presented. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, supporting a positive business credibility profile.

W

white label eCommerce GmbH

radiosparbox.de

63

RadioSparBox is an e-commerce platform operated by white label eCommerce GmbH, specializing in selling tickets and vouchers for a variety of entertainment and leisure activities including concerts, festivals, sports events, and restaurants. The platform targets regional customers in Germany, offering exclusive discounts up to 50%, positioning itself as a regional niche player in the entertainment e-commerce market. The website is professionally designed with clear navigation and a good user experience, supporting multiple payment methods and integrating marketing and analytics tools with user consent mechanisms.

R

regioshop

dein-shop.de

59

Dein Shop is a German e-commerce platform operating under the brand 'regioshop', offering a broad range of consumer products across categories such as home, lifestyle, health, and seasonal goods. The website is built on the Shopware CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Friendly Captcha for enhanced user experience and security. The site demonstrates good design quality, clear navigation, and mobile optimization, targeting a general audience in Germany with a medium-sized market presence. From a technical perspective, the website employs HTTPS with strong security headers, uses CAPTCHA to protect forms, and integrates multiple analytics and tracking tools with some consent mechanisms in place. However, the privacy and cookie policies are basic, and there is no dedicated security policy or incident response information published. The domain WHOIS data is minimal and lacks detailed registrant information, which slightly reduces trustworthiness but does not detract significantly from the overall legitimacy of the business. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The website complies with GDPR to a basic extent, providing privacy and cookie policies and mechanisms for user consent. Business credibility is supported by professional content, consistent branding, and trust indicators such as HTTPS and contact options. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in privacy compliance and transparency regarding security policies.

W

Westfunk GmbH & Co. KG

westfunk.de

52

Westfunk GmbH & Co. KG is a regional media service company based in Essen, Germany, specializing in local radio broadcasting and advertising services. As part of the FUNKE MEDIENGRUPPE, it serves as the backbone for twelve independent local radio stations across the Ruhrgebiet, Niederrhein, and Sauerland regions. The company offers technical, marketing, and digital product services to local radio stations and provides advertising sales support through FUNKE MediaSales. The website reflects a strong market position as a regional market leader in several broadcast areas, supported by professional content and clear business messaging. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO and user experience. It employs Google Tag Manager for analytics and uses a consent management platform for GDPR-compliant cookie handling. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, indicating a secure and modern infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or suspicious content were detected. Overall, Westfunk's website demonstrates a mature digital presence with strong business credibility, good technical implementation, and compliance with privacy regulations. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving accessibility features to further strengthen the site’s security and user experience.

FUNKE Mediengruppe is a large German media company active in regional newspapers, magazines, and digital media. The website reflects a professional media group with a clear focus on quality journalism and corporate responsibility, including sustainability and diversity. The technical infrastructure is modern, leveraging Contao CMS and popular JavaScript frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and well-maintained, supporting a broad audience interested in media and journalism.

N

Nordkurier

nordkurier.de

63

Nordkurier.de is a regional news portal serving Mecklenburg-Vorpommern and Brandenburg in Germany, providing local news, e-paper services, job listings, and event calendars. The website targets residents and readers interested in regional news and operates a subscription-based business model supplemented by advertising revenue. The site uses modern web technologies including React and Next.js, and integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Microsoft Clarity. Consent management is implemented, indicating GDPR awareness, though explicit privacy and terms of service documents were not found in the provided content. Security posture is moderate with HTTPS enabled but lacking explicit security headers and incident response contacts. Overall, the site is professional, well-branded, and trustworthy for its target audience.

NIC.ec, operated by ECUADORDOMAIN S.A., is the official registry and registrar for Ecuador's .ec country code top-level domain. The website provides domain search, registration, and management services targeting individuals, businesses, and government entities within Ecuador. It holds multiple official accreditations such as ICANN, IANA, LACNIC, and LACTLD, reinforcing its authoritative position in the domain registration market. The site also promotes partnerships with registrar agents and offers specialized services for government and military domains. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, Google Analytics, Yandex Metrika, and Chatwoot for live chat support. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms. The site is mobile optimized and features good navigation and content quality. However, no explicit CMS or hosting provider information is detected, suggesting a custom-built platform. From a security perspective, the site follows best practices such as HTTPS enforcement, CSRF tokens, and reCAPTCHA integration. While security headers are not explicitly visible in the HTML, the site does not expose sensitive data or show signs of vulnerabilities. The absence of a published security policy or incident response contact is noted. Extensive tracking and marketing tools are used, indicating a moderate to extensive user tracking level, with basic privacy compliance. Overall, NIC.ec presents a trustworthy and professional online presence consistent with its role as Ecuador's official domain registry. Recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

S

Shop Houzz

shophouzz.com

72

Shop Houzz operates as an e-commerce platform specializing in home furniture, lighting, and decor products. The website is built on the Shopify platform, leveraging a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Yotpo for product reviews. The site targets consumers looking for home essentials and offers a broad product catalog with clear navigation and a professional design. The business model is retail-focused, serving the US market primarily. Technically, the site is well-structured with good mobile optimization and moderate performance, hosted on Shopify's CDN infrastructure. Security posture is adequate with HTTPS enforced and use of fraud prevention services, though explicit security headers and dedicated security policies are not visible. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site appears legitimate and trustworthy but would benefit from enhanced transparency and security best practices.

Horde is a Swiss-based strategic and creative communication agency with offices in Lausanne, Zürich, Genève, and Valais. The company offers a broad range of services including design, advertising, digital strategy, motion design, and copywriting. It serves a diverse clientele including major brands such as Migros, Swiss International Air Lines, Nespresso, and Tesla, positioning itself as a reputable medium-sized agency in the Swiss media and advertising market. The website is professionally designed, multilingual, and optimized for modern web standards, reflecting a mature digital presence. Technically, the site is built on WordPress with advanced SEO and performance optimizations, leveraging tools like Yoast SEO, WP Rocket, and Google Tag Manager. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though explicit security policies and cookie consent mechanisms are absent. Overall, the site demonstrates strong business credibility and technical maturity but would benefit from enhanced privacy and security disclosures.

M

Museo Nacional Thyssen-Bornemisza

museothyssen.org

65

Museo Nacional Thyssen-Bornemisza is a prominent national art museum located in Madrid, Spain, forming part of the renowned 'Paseo del Arte' cultural corridor alongside Museo del Prado and Centro de Arte Reina Sofía. The museum offers a rich collection of Western art from the 13th to the 20th century, complemented by temporary exhibitions, educational activities, and a museum shop. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting general public and art enthusiasts. Technically, the site is built on Drupal 10, integrates Google Tag Manager and Google Optimize for analytics and marketing, and employs CookiePro for GDPR-compliant cookie consent management. Security posture is strong with HTTPS enforced and privacy-conscious analytics activation, though some security headers could be improved. WHOIS data is unavailable due to registry restrictions, but the website's branding and content indicate legitimacy. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations, serving as a reliable digital front for the museum.

A

Antica Terra

anticaterra.com

57

Antica Terra is a boutique winery and hospitality business based in Amity, Oregon, with a strong focus on direct-to-consumer wine sales, exclusive membership programs, and curated wine experiences. The website reflects a professional and consistent brand image targeting wine enthusiasts and mature audiences. Technically, the site is built on WordPress with integrations such as Gravity Forms, Google Analytics, Klaviyo, and Commerce7, indicating a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and contact information. Security posture is adequate with HTTPS and form CAPTCHA, but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are published, which are compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Ministry of Interior

nasiukrajinci.cz

66

The website nasiukrajinci.cz is an official Czech government platform managed by the Ministry of Interior, providing comprehensive information and resources to support Ukrainian refugees in the Czech Republic. It offers multilingual content covering legal stay, financial aid, healthcare, education, employment, and additional assistance. The site also targets Czech citizens and organizations willing to help Ukrainians, positioning itself as a central information hub in this humanitarian context. The business model is public service oriented, with no commercial intent, focusing on accessibility and clarity. Technically, the website is built on modern web technologies including React and Next.js, hosted on Azure DNS infrastructure. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for government services. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official nature of the site, showing consistent registration and domain age appropriate for the service's launch in 2022. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information for incident response to further strengthen trust and compliance.

F

Fair Trade Town

fairtradetown.ch

56

Fair Trade Town is a Swiss non-profit initiative dedicated to promoting justice, sustainability, and social responsibility through the certification and support of municipalities as Fair Trade Towns. The website serves as a platform to raise awareness, provide resources, and showcase success stories from certified towns. The organization positions itself as a key player in advancing global sustainability goals at the local level, engaging communities and local partners in fair trade practices. Technically, the website is built on WordPress 6.8.3, utilizing modern web technologies including Google Tag Manager for analytics and Borlabs Cookie for consent management. The site is mobile-optimized with good SEO practices and uses HTTPS to secure communications. The presence of Google Maps API enhances user interaction with geographic data about Fair Trade Towns. From a security perspective, the site enforces HTTPS and uses a reputable cookie consent plugin, but lacks explicit security headers and visible privacy or terms of service pages, which are recommended for enhanced compliance and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a professional and trustworthy image with a clear mission and audience. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact information to strengthen compliance and user trust.

C

Contentstack Inc.

contentstack.com

75

Contentstack Inc. operates a leading adaptive digital experience platform that integrates AI-driven content management with real-time customer data to deliver personalized experiences across multiple digital channels. Positioned as an enterprise-grade SaaS provider, Contentstack targets developers, business users, and digital leaders seeking flexible and scalable headless CMS solutions. The platform's key services include headless content management, real-time data analytics, omnichannel personalization, intelligent agents, and front-end hosting, supported by a strong brand presence and major global customers. Technically, the website leverages modern web technologies such as React and Next.js, integrates Google Tag Manager for analytics, and employs CookiePro for consent management, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured content. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses consent mechanisms for privacy compliance. However, explicit security policies and incident response contacts are not prominently published, indicating areas for improvement. No vulnerabilities or exposed sensitive data were detected during analysis. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards, although the absence of WHOIS data introduces some uncertainty about domain registration details. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data protection roles.

B

Broadstreet Ads Inc

broadstreetads.com

62

Broadstreet Ads Inc operates a specialized SaaS platform focused on ad management for local and B2B publishers who rely on direct sales. The company positions itself as a niche leader with a strong emphasis on customer support, innovative ad formats, and seamless integration with programmatic and Google Ad Manager solutions. Their website reflects a mature business with comprehensive content, testimonials, and resources tailored to their target audience of small and local publishers. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is good with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is addressed with a clear privacy and cookie policy including consent mechanisms. Overall, the business credibility is high with clear contact information, physical address, and positive trust signals.

N

Nadace O2

o2chytraskola.cz

41

O2 Chytrá škola is a well-established educational project by Nadace O2 focused on promoting safe and responsible use of technology and the internet among children, parents, and teachers in the Czech Republic. The website offers a rich variety of educational content including articles, videos, podcasts, quizzes, and grant programs, positioning itself as a trusted resource in the education and non-profit sectors. The project benefits from clear branding, consistent messaging, and a strong social media presence, enhancing its outreach and engagement with its target audience. Technically, the website employs modern web technologies such as Alpine.js for interactivity, Google Tag Manager and Exponea for analytics and marketing, and Google reCAPTCHA v3 for bot protection. The site is mobile-optimized, accessible, and SEO-friendly, with a custom or framework-based backend likely using Nette. The performance is moderate, with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS, integrates a consent management platform for GDPR compliance, and uses secure forms with validation. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be added to enhance security posture. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with relevant regulations. It serves its educational mission effectively while maintaining a secure and user-friendly environment.

O

O2 CZ

o2.cz

66

O2 CZ is a major telecommunications provider in the Czech Republic offering a wide range of services including mobile tariffs, internet, digital TV (Oneplay), and device sales. The website reflects a strong market position with comprehensive service offerings and a clear focus on consumer and business segments. The company is part of the PPF Group, a significant parent company, which adds to its credibility and market strength. The website is professionally designed, mobile-optimized, and provides rich content about its products and services, targeting a broad audience in the Czech Republic. Technically, the website employs modern web technologies including JavaScript frameworks, Adobe DTM for tag management, Exponea for marketing automation, and Google Tag Manager for analytics. The site is well-structured with good SEO and accessibility features, ensuring a positive user experience across devices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. Security-wise, the site enforces HTTPS, uses a consent management platform for GDPR compliance, and avoids exposing sensitive data in its HTML content. However, the absence of WHOIS data is unusual and reduces transparency, though the website's branding and external references strongly support its legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.

P

Panattoni

panattoni.in

61

Panattoni India is a regional branch of Panattoni Development Company, a globally recognized leader in real estate development specializing in industrial, logistics, office, retail, and mixed-use projects. The company boasts a significant market presence with over 60 million sqm developed worldwide and is recognized as the largest logistics developer in Europe. Their business model focuses on providing end-to-end real estate development and investment services, targeting institutional investors and clients seeking industrial space in India and beyond. The website reflects a professional and consistent brand image with comprehensive content tailored to investors and business clients. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, Sentry for error monitoring, and Iubenda for cookie compliance, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. However, explicit CMS or hosting details are not evident. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security headers and a published security policy or incident response contact suggests room for improvement. Overall, the site demonstrates a strong security posture but could enhance transparency and incident readiness. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include implementing additional security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.

P

PDE Shared Services sp .z o.o.

panattonieurope.com

69

Panattoni Europe is a leading industrial real estate developer and investment provider, recognized as the largest industrial developer across Europe for eight consecutive years. The company offers a broad range of services including industrial space development, capital deployment, and additional client services such as strategy recommendations. Their market position is strong, targeting institutional investors and clients interested in logistics and industrial real estate investments. The website reflects a mature and professional digital presence with comprehensive content and clear navigation. Technically, the site employs modern technologies including Google Tag Manager, Google Analytics, and Iubenda for cookie compliance, hosted with Cloudflare DNS services, ensuring fast and secure access. Security posture is robust with HTTPS enforced, domain locking, and active monitoring via Sentry, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the website is trustworthy, professional, and compliant with relevant regulations.

F

FUNKE Publishing GmbH

globista.de

58

GLOBISTA Reisen is an online travel portal operated by FUNKE Publishing GmbH, a subsidiary of the FUNKE Mediengruppe, a major German media company. The website offers curated travel deals including cruises, city trips, family vacations, and bus tours primarily targeting German-speaking customers. The platform integrates modern web technologies such as WordPress CMS, Google Tag Manager, and Cloudfront CDN to deliver a responsive and user-friendly experience. Privacy and cookie compliance are well implemented with clear consent mechanisms and GDPR adherence. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations. Contact information and company details are transparent and consistent with the registrant data, supporting business credibility.

F

FUNKE Mediengruppe

hamburgerimmobilien.de

63

The website www.abendblatt.de/hamburg/immobilien-hamburg/ is a regional media platform operated by FUNKE Mediengruppe, focusing on real estate market news and developments in Hamburg. It serves residents and potential property buyers with up-to-date information, leveraging a subscription and advertising-based business model. The site is well-positioned in the regional media market with a consistent brand and professional content quality. Technically, the website employs a modern JavaScript-based infrastructure with modules for consent management, analytics, and advertising. It integrates third-party services such as Google Tag Manager, Piano for subscription management, and various marketing tools. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and accessibility could be made. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers suggests room for enhancement. The privacy policy and cookie consent mechanisms are comprehensive and clearly presented. Overall, the website exhibits a strong security posture, good privacy compliance, and credible business information. It is suitable for general audiences with safe content focused on real estate and news. Strategic recommendations include implementing additional security headers, auditing third-party scripts regularly, and enhancing accessibility features to further strengthen compliance and user trust.

F

FUNKE Digital GmbH

funkedigital.de

53

FUNKE Digital GmbH is a digital media powerhouse and a wholly owned subsidiary of the FUNKE Mediengruppe, based in Germany. The company specializes in operating news websites, content verticals, and digital investments, serving as the digital engine for its parent group. Their business model integrates modern technologies, agile methodologies, and interdisciplinary teams to innovate and expand digital media offerings. The website reflects a strong market position with a professional and consistent brand presence, targeting digital media consumers, advertisers, and investors. The company also actively recruits talent, emphasizing flexibility and a performance culture.

A

AG info, s.r.o.

aginfo.cz

45

AG info, s.r.o. is a well-established Czech company specializing in agricultural software solutions, serving primarily farmers and agricultural businesses in the Czech Republic. With over 30 years of experience, the company offers a comprehensive suite of products including agronomy software, soil evidence management, livestock tracking, and GPS-based telematics. Their market position is strong within the Czech agricultural sector, supported by a sizable customer base and ongoing technical support and training services. Technically, the website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. However, it lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating potential gaps in security transparency. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

A

Agri-precision

agri-precision.cz

45

Agri-precision is a Czech-based company specializing in precision agriculture technologies, including GPS navigation, monitoring systems, and automation solutions for agricultural machinery. The company positions itself as an authorized reseller and service provider for multiple well-known brands in the precision farming sector, targeting agricultural businesses primarily in the Czech Republic and Slovakia. Their website showcases a comprehensive product portfolio and emphasizes improving agricultural production efficiency through advanced technology. Technically, the website is built on the xartCMS platform and utilizes common JavaScript libraries such as jQuery and MooTools, along with embedded YouTube videos and Google Tag Manager for analytics and marketing. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and professional design. However, some accessibility features appear basic, and performance is moderate. From a security perspective, the site uses HTTPS and includes tracking and analytics scripts from Microsoft Clarity and Google. No explicit security headers were detected in the provided data, and there is no evidence of privacy or cookie policies, which indicates gaps in privacy compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the website content and business presence appear professional and trustworthy. Overall, the website presents a solid business offering with good technical implementation but requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and security posture.

DRANA s.r.o. is a Czech-based company specializing in the import and production of spices, seasoning mixes, marinades, dried vegetables, mushrooms, and herbs primarily serving professional gastronomy clients and retail customers. With approximately 30 years of experience, the company emphasizes quality, innovation, and social responsibility, including employing handicapped individuals. The website is built on the Shoptet e-commerce platform, utilizing standard web technologies such as jQuery, Google Analytics 4, and Facebook SDK. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is adequate with HTTPS and CSRF protections, but could be improved by updating outdated libraries and adding security headers. WHOIS data is missing, which reduces domain trustworthiness, but the website content and business information appear professional and credible.

E

EKOFRUKT Slaný, spol. s r.o.

ekofrukt.cz

51

EKOFRUKT Slaný, spol. s r.o. is a Czech-based manufacturer specializing in the production and development of cereal bars, including protein, muesli, nut, fruit, flapjack, and cereal bars. The company emphasizes private label manufacturing with over 30 years of tradition and exports to more than 20 countries in Europe. Their product portfolio is supported by multiple certifications such as IFS Food, Kosher, BIO, HACCP, FSC, and Rain Forest Alliance, underscoring their commitment to quality and sustainability. The website is professionally designed, mobile-optimized, and provides comprehensive information about their offerings and certifications.

V

VOCALLS

vocalls.ai

57

VOCALLS is a technology company specializing in conversational AI automation for contact centers, offering voicebot, chatbot, and emailbot solutions to automate customer interactions. The company positions itself as a leader in contact center AI automation and has recently been acquired by CallMiner, indicating a strong market presence and strategic growth. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Analytics, and Cloudflare security features. Privacy and cookie policies are implemented with opt-in consent mechanisms, reflecting good privacy compliance. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website and business appear legitimate and well-maintained, with a medium-sized enterprise profile focused on B2B SaaS solutions for customer service automation.

L

Leya AI | Learn English Fast

leyaai.com

63

Leya AI is a newly launched educational platform focused on accelerating English language learning through AI-powered personal coaching. The website presents a clear value proposition targeting individuals seeking fast and confident English learning with minimal daily time investment. The business appears to be a small startup founded in 2023, leveraging modern web technologies and hosted on AWS infrastructure. Technically, the site uses Framer as its CMS and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and PostHog. While the site is accessible and well-designed with good mobile optimization, it lacks critical privacy and security policies, contact information, and security headers, which impacts its overall trust and compliance posture. The domain registration is consistent with a new business and shows no suspicious patterns. Overall, the site demonstrates moderate digital maturity but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

YDISTRI is a medium-sized retail technology company founded in 2018, specializing in AI-driven inventory redistribution solutions that help retail chains optimize underperforming stock and increase profitability. The company leverages a SaaS platform integrated with AI to provide real-time demand matching and inventory balancing services. Their market position is strengthened by partnerships with major industry players such as SAP and Microsoft, and a client base including well-known retail brands. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website presents a professional, trustworthy, and content-rich presence suitable for its B2B audience.

V

Visualio s.r.o.

visualio.cz

50

Visualio s.r.o. is a Czech-based creative studio specializing in brand design, web development, and advertising campaigns. Established in 2010, the company serves businesses seeking to build successful brands, with a strong portfolio including notable clients such as Accolade, Reticulum, and Panattoni. The website reflects a professional and consistent brand image, showcasing client testimonials and awards that reinforce its market position as a trusted creative partner. Technically, the site employs modern JavaScript frameworks like Alpine.js, integrates Google Analytics, Google Tag Manager, and Smartlook for analytics and user behavior tracking, and uses Google reCAPTCHA for bot protection. Hosting and domain registration are managed via WEDOS, a Czech provider, consistent with the company's location and business claims. Security posture is good with HTTPS enforced and bot protection, but lacks explicit security headers and published privacy or cookie policies, indicating areas for compliance improvement. Overall, the site is well-designed, mobile-optimized, and user-friendly, but would benefit from enhanced privacy disclosures and security best practices to improve trust and regulatory compliance.

G

GA Connector

gaconnector.com

72

GA Connector is a technology company specializing in integrating CRM systems with Google Analytics to provide businesses with detailed insights into their marketing ROI and lead sources. Founded in 2016 and operated by MarTech Solutions LLC, the company serves a broad range of clients including Fortune 500 companies, offering a SaaS platform that imports visitor and sales data into CRM software to optimize marketing spend. The website is professionally designed, mobile-optimized, and rich in content, showcasing strong branding consistency and trust signals such as customer testimonials and GDPR compliance. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools including Google Analytics, Google Tag Manager, Drip, and HelpScout Beacon. Hosting is managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and business present a credible, professional, and secure digital presence.

N

N-TV Spiele

n-tvspiele.de

60

n-tvspiele.de is a German-language online gaming portal offering a wide variety of free-to-play online, browser, and downloadable games primarily in the strategy, simulation, and action categories. The site targets casual gamers seeking diverse gaming experiences without cost. The business model appears to be based on advertising and game promotion within a niche market segment. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

R

RTL

rtl.de

68

RTL.de is a leading German media and broadcasting website providing news, entertainment, sports, and streaming content primarily targeting a general German-speaking audience. The site offers a comprehensive range of services including live sports coverage, star news, lifestyle advice, and access to RTL's streaming platform RTL+. Technically, the website is built using modern web technologies such as Next.js and React, with optimized images and responsive design for mobile users. Security is well implemented with HTTPS and multiple security headers, although explicit privacy and cookie policies are not clearly found in the provided content. The site integrates several third-party analytics and advertising scripts, managed with consent mechanisms. Overall, RTL.de presents a professional and trustworthy digital presence consistent with a major media enterprise.

G

Gruner + Jahr Deutschland GmbH

guj.de

68

Gruner + Jahr Deutschland GmbH is a prominent media publishing company based in Hamburg, Germany, specializing in magazines and digital content for well-known brands such as Schöner Wohnen, Häuser, Couch, and GEOlino. Since 2022, it has been fully integrated into RTL Deutschland GmbH, part of the larger RTL Group, a leading European entertainment conglomerate. The company targets a broad general audience with its publishing and digital media offerings, leveraging the strong market position and resources of RTL Deutschland. Technically, the website employs modern web technologies including Google Tag Manager for analytics and a privacy management solution from privacy-mgmt.com to handle GDPR compliance. The site is built on a CMS platform likely proprietary to RTL (NetRTL CMS), with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is unavailable, which is typical for subdomains of large corporate domains, but the main rtl.com domain is well-established and reputable. Overall, the website presents a professional and trustworthy front for Gruner + Jahr Deutschland GmbH and RTL Group, with solid business credibility and compliance efforts. Strategic improvements in security headers, transparency on security policies, and enhanced privacy documentation would further strengthen the security posture and user trust.

C

Comodo: Cloud Native Cyber Security Platform

comodo.com

71

Comodo is a cybersecurity company offering advanced endpoint protection and website security solutions designed to safeguard devices and websites from malware and cyber threats. The company positions itself as a cloud-native cyber security platform with a broad portfolio of services including malware monitoring, remediation, premium DNS, CDN, WAF, backup, antivirus, and containment technologies. Their target audience includes both businesses and consumers seeking comprehensive cybersecurity solutions. The website demonstrates a professional and consistent brand presence with clear navigation and modern design elements. Technically, the site is built on WordPress with Elementor and integrates multiple analytics and marketing tools such as HubSpot, Google Tag Manager, and Klaviyo, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and use of security products, though explicit security headers and published security policies are lacking. WHOIS data is unavailable from the raw output, which reduces trustworthiness but the website content and branding suggest legitimacy. Overall, the site is well-structured and provides a good user experience with moderate performance and good mobile optimization.

S

Sectigo

sectigo.com

80

Sectigo is a leading global provider of SSL certificates and automated certificate management solutions, trusted by enterprises and global brands for over 20 years. The company offers a broad portfolio of security products including SSL/TLS certificates, code signing, IoT security, and private PKI solutions, targeting IT professionals and businesses requiring robust digital security. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript frameworks, analytics, and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and compliance with recognized standards such as ISO 27001 and SOC 2. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent mechanisms. WHOIS data is unavailable likely due to privacy protection, which is justified for a security company. Overall, Sectigo's website demonstrates a professional, trustworthy, and secure online presence.

R

RaveCapture

trustspot.io

59

RaveCapture is a SaaS platform specializing in ecommerce reviews, user-generated content (UGC), and customer experience surveys. The company targets ecommerce merchants seeking to build trust and increase conversions through authentic customer feedback and visual content. Positioned as a user-friendly and no-contract alternative to larger review platforms, RaveCapture emphasizes personalized support and fair pricing. The website is professionally designed with excellent content quality, clear navigation, and strong SEO optimization, reflecting a mature digital presence despite the company's recent founding in 2023. Technically, the site is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery, Google Tag Manager, and Intercom for customer engagement and analytics. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and accessible, with fast loading times and proper meta tags enhancing search engine visibility. From a security perspective, the website enforces HTTPS and employs domain transfer protections. However, DNSSEC is not enabled, and no Content-Security-Policy header was detected, indicating room for improvement in DNS and web security hardening. The absence of published security policies or incident response contacts suggests limited transparency in security governance. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a visible cookie consent mechanism, which may impact GDPR adherence. Overall, RaveCapture presents a trustworthy and professional ecommerce service with a solid technical foundation. Strategic enhancements in security headers, DNS security, and privacy consent mechanisms would further strengthen its security posture and regulatory compliance, supporting sustained growth and customer confidence.

P

Partel

partel.co.uk

66

Partel is a UK-based manufacturer specializing in high-performance building envelope solutions such as Vapour Control Layers, Breather Membranes, Sealing Tapes, and Adhesives. The company targets construction professionals, architects, and contractors, positioning itself as a specialist in the manufacturing sector within the UK market. The website is professionally designed, built on WordPress with WooCommerce, and incorporates modern marketing and analytics tools including Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. While the site is technically sound with HTTPS and cookie consent mechanisms, it lacks visible privacy policy and terms of service pages, which are important for compliance and user trust. The WHOIS data for the domain is unavailable or indicates an invalid domain query, which reduces trust from a domain registration perspective but does not necessarily reflect on the business legitimacy. Overall, the website presents a professional front with good technical infrastructure but would benefit from enhanced compliance documentation and clearer contact information.

P

Partel

partel.ie

60

Partel is a medium-sized Irish company specializing in building envelope solutions, including high-performance airtight membranes, tapes, adhesives, sealants, and ventilation systems tailored for the low-energy building sector. The company targets construction professionals and businesses focused on energy-efficient building practices in Ireland. The website reflects a professional B2B business model with a clear focus on product offerings and market positioning within the energy sector. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates marketing and analytics tools including Google Analytics, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and HubSpot, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and implements a comprehensive cookie consent mechanism via Cookiebot, demonstrating attention to privacy compliance. However, the absence of visible privacy policy, terms of service, and contact information pages, along with missing WHOIS data, limits the overall trust and compliance posture. Recommendations include publishing privacy and security policies, adding security headers, and providing clear contact and incident response information to enhance trust and compliance.

B

Bitly, Inc.

lghvac.co

72

Bitly, Inc. is a well-established enterprise technology company specializing in branded link management, URL shortening, QR code generation, and analytics services. Founded in 2003, Bitly serves a broad business and marketing audience, providing SaaS solutions that enable companies to create, share, and track branded links to enhance customer engagement and marketing effectiveness. The website reflects a mature market position with strong brand recognition and trust signals, including compliance with GDPR, CCPA, and SOC 2 Type 2 standards. Technically, the website is built on WordPress with a modern tech stack incorporating advanced analytics (Snowplow, Google Tag Manager), marketing optimization tools (Optimizely), and privacy management (OneTrust). Hosting and DNS services leverage AWS and Google Cloud infrastructure, ensuring robust performance and scalability. The site is well-optimized for mobile and accessibility, with excellent SEO practices and multi-language support. Security posture is strong, with HTTPS enforced, domain registration protections, and visible compliance certifications. However, DNSSEC is not enabled, and explicit incident response contacts or security.txt files are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content or scripts. Overall, Bitly's website demonstrates high professionalism, trustworthiness, and compliance, supporting its enterprise-grade service offerings. Strategic recommendations include enabling DNSSEC, publishing incident response details, and enhancing security headers to further strengthen security and trust.

E

Ebner Media Group GmbH & Co. KG

developer-world.de

56

Developer World, operated by Ebner Media Group GmbH & Co. KG, is a well-established German platform focused on software developers, offering events, knowledge sharing, and community engagement. The website serves as a hub for developer conferences such as DWX and DDC, provides technical insights, training opportunities, and publishes the dotnetpro magazine. The platform targets professional developers and IT specialists, positioning itself as a key player in the German-speaking developer ecosystem with a history dating back to 1984. Technically, the website employs modern web technologies including asynchronous JavaScript loading, a consent management platform (Usercentrics), Google Tag Manager, and structured data (JSON-LD) for SEO enhancement. The site is mobile-optimized, accessible, and uses a CMS likely based on Contentstack. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks explicit security headers like CSP or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is evident. Overall, Developer World presents a professional, trustworthy, and content-rich platform with a solid security posture and compliance framework. Strategic improvements could include publishing a formal security policy, incident response contacts, and enhancing security headers to further harden the site.

H

Happy Team

happyteam.io

68

Happy Team is a technology service provider specializing in IT staff augmentation and software development solutions. The company positions itself as a partner for businesses seeking to elevate their operations through innovative software solutions and skilled IT personnel. Their website reflects a professional and modern digital presence, leveraging contemporary technologies such as Gatsby and React, and integrates Google Tag Manager for analytics and marketing purposes. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain appears legitimate despite privacy-protected WHOIS data, which is common in this sector. Strategic recommendations include publishing detailed security and incident response policies to enhance trust and compliance visibility.

H

Hitachi Energy

hitachienergy.com

81

Hitachi Energy is a global enterprise specializing in sustainable energy solutions, focusing on powering the world's energy systems to be more sustainable, secure, resilient, and affordable. The company operates primarily in the energy sector, providing advanced power grid technologies, grid automation, and electrification products. Their market position is that of a leading energy technology provider with a strong emphasis on innovation and sustainability. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation aimed at energy sector professionals, governments, and industrial customers. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Google Tag Manager, Adobe Dynamic Tag Management, and Cloudfront CDN for performance and scalability. The site is mobile-optimized, accessible, and SEO-friendly, with robust analytics and marketing tools integrated. Security best practices are observed with HTTPS enforcement, security headers, and consent management for privacy compliance. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. The company maintains ISO 27001 certification and provides clear incident response contacts. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and branding strongly support legitimacy. Overall, Hitachi Energy's website demonstrates a high level of professionalism, security, and compliance, suitable for an enterprise in the energy sector. Recommendations include verifying domain registration details for transparency and continuing regular security assessments to maintain the strong security posture.

U

Urząd Miasta Łodzi

lodz.pl

60

The website lodz.pl serves as the official digital portal for the city of Łódź, Poland, providing residents, visitors, and businesses with comprehensive information about city news, events, public services, and cultural activities. It is positioned as a key communication channel for municipal affairs and community engagement. The site targets a broad audience including local citizens, tourists, and stakeholders interested in city developments. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and third-party analytics and advertising tools. The infrastructure is hosted by OVH SAS, a reputable provider, and the domain has a long history dating back to 1995, indicating a mature online presence. Security-wise, the site enforces HTTPS and uses several security best practices, though it lacks some security headers and explicit privacy and cookie policies. The absence of a security.txt file and vulnerability disclosure mechanisms suggests room for improvement in transparency and incident response readiness. Overall, the site is professional, trustworthy, and well-branded, but could enhance privacy compliance and security posture to meet higher standards.

L

Lindholmen Science Park AB

lindholmeninnovationdistrict.se

57

Lindholmen Innovation District is a prominent innovation hub located in Gothenburg, Sweden, serving as a vibrant meeting place for innovation, culture, and experiences. The district caters to professionals, students, and companies, offering coworking spaces, event venues, and partnership opportunities. The website reflects a well-established community with active engagement through events and news updates. Technically, the site is built on Drupal 10, employs modern analytics tools like Matomo, and integrates cookie consent mechanisms ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site presents a professional and trustworthy digital presence aligned with its business objectives.

InterLinks is a specialized SaaS application designed to enhance Shopify stores by automating internal linking to improve SEO and sales. The company targets Shopify merchants seeking to optimize product discovery and conversion rates through smart linking and AI-powered features. The website presents a professional, well-structured, and content-rich platform with clear business positioning and transparent pricing models. Technically, the site leverages modern frontend technologies such as Tailwind CSS and integrates Google Analytics and Tag Manager for tracking, hosted on DigitalOcean infrastructure. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine understanding. Security posture is adequate with HTTPS enforced and domain registration protections, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is partial, with a basic privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

H

HiFlow

hiflow.ch

54

HiFlow is a Swiss association and innovation ecosystem based in Geneva, offering a collaborative space for startups, SMEs, and independent professionals. It provides flexible office spaces, event venues, exhibitions, and a unique material database showroom. The website is built on WordPress with modern technologies and includes a cookie consent mechanism compliant with GDPR. Social media presence and partner ecosystem reinforce its community engagement. Security posture is good with HTTPS and cookie controls, though formal security and incident response policies are not publicly available. Overall, the site is professional, accessible, and trustworthy.

C

Commune de Plan-les-Ouates

plan-les-ouates.ch

52

The website plan-les-ouates.ch is the official digital presence of the Commune de Plan-les-Ouates, a local government entity in Switzerland. It serves as a comprehensive portal for residents and visitors, offering information on municipal services, community life, environment, mobility, culture, and public safety. The site is built on Drupal 7 and employs standard web technologies including jQuery and Font Awesome, with Google Tag Manager integrated for analytics. The design is professional, mobile-optimized, and provides clear navigation, supporting a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms, which is an area for improvement. WHOIS data confirms the legitimacy and consistency of the domain registration with the governmental nature of the site. Overall, the website demonstrates a solid technical foundation and trustworthy business credibility as a government portal. However, enhancements in privacy compliance and security headers would strengthen its security posture and regulatory adherence. No adult or questionable content is present, making it safe for general audiences.