Security Directory

I

ID.KOM

idkom.de

65

ID.KOM is a well-established IT service provider based in Germany with over 30 years of experience specializing in IT services, cloud solutions, data center operations, and telecommunications for medium-sized businesses. The company operates its own ISO 27001 certified data centers and offers a broad portfolio including managed IT services, IT outsourcing, security, and telecommunication solutions. Their market position is strengthened by their long-standing presence, certifications, and partnership with major technology providers such as Microsoft and VMware. Technically, the website is built on WordPress with the Divi theme and uses modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although there is room for improvement in incident response transparency and security.txt adoption. Overall, the website and business demonstrate professionalism, trustworthiness, and compliance with GDPR regulations.

G

Graftik Solutions

graftik.com

49

Graftik Solutions is a Riga, Latvia-based design studio specializing in digital design, branding, web development, and multimedia services. The company positions itself as a leading design studio in the Baltic region, serving brands and organizations with tailored digital design solutions. Their portfolio includes notable clients such as Luminor and Apple, indicating a strong market presence and reputable partnerships. The website content is professionally presented with clear navigation and consistent branding, targeting businesses seeking comprehensive digital design services. Technically, the website employs modern JavaScript libraries including jQuery and GSAP for animations, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. Hosting is provided by Linode, a reputable provider. The site is mobile optimized and uses HTTPS with a good SSL configuration. However, no explicit security headers were detected in the provided data, and no CMS or backend platform was identified. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms compliant with GDPR. There are no visible vulnerabilities or exposed sensitive data. However, the absence of detailed security policies, incident response contacts, and security.txt files suggests room for improvement in transparency and incident readiness. The WHOIS data aligns with the website's claims, showing consistent domain registration and hosting information. Overall, the website is professional, secure, and compliant with privacy regulations, with a strong business credibility score. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the security posture and user trust.

Z

ZZ Dats

zzdats.lv

60

ZZ Dats is a Latvian IT company specializing in the development and support of information technology solutions primarily for government and municipal sectors. Their flagship offering is the Unified Municipal System, an integrated IT solution supporting various municipal functions to streamline internal and inter-agency collaboration. The company also emphasizes DevOps methodologies and cloud computing services, complemented by IT training programs. Their market position is that of a trusted mid-sized technology provider with a strong focus on public sector digital transformation. The website content is professionally presented in Latvian with English language support, reflecting a mature digital presence.

I

impact.com

impact.com

74

impact.com is an established enterprise SaaS company founded in 1992, providing a comprehensive partnership management platform that unifies affiliate, influencer, and referral marketing programs. The company positions itself as a market leader with a strong global presence and a robust technology stack integrating multiple marketing and analytics tools. Their website demonstrates excellent design, SEO, and user experience, targeting brands, agencies, and publishers seeking to optimize partnership-driven revenue. Technically, the site is built on WordPress, hosted with Amazon Registrar, and employs modern consent management and error monitoring solutions. Security posture is strong with HTTPS, domain locking, and consent-aware analytics, though DNSSEC is not enabled and explicit security policies are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

L

Liberty Interactive Corporation

qvcgrp.com

59

QVC Group is a global leader in live social shopping and video-driven commerce, operating multiple retail brands and reaching millions of customers worldwide through TV networks, digital streaming, and social media platforms. The company is headquartered in the United States and is part of Liberty Interactive Corporation. The website reflects a mature digital presence with professional content and multi-channel engagement. Technically, the site is built on WordPress with modern plugins for SEO, forms, and analytics, showing moderate performance and good mobile optimization. Security posture is generally good with HTTPS and reCAPTCHA integration, but lacks some security headers and cookie consent mechanisms. WHOIS data is incomplete or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve privacy compliance and security best practices.

S

Synchrony Financial

syf.com

68

Synchrony Financial operates a comprehensive consumer financial services website offering credit cards, financing solutions, banking products, and a marketplace for deals and partner brands. The company positions itself as a premier provider in the finance sector with a strong focus on retail partnerships and consumer payment flexibility. The website is well-structured, professionally designed, and targets both consumers and businesses seeking financial products. The digital infrastructure leverages modern JavaScript libraries and performance monitoring tools, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and a public vulnerability disclosure page, although explicit security policy documentation is not found. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional presentation and external references. Overall, Synchrony.com demonstrates a mature, secure, and user-friendly online presence aligned with enterprise-grade financial services.

L

Litmus

litmus.com

80

Litmus is a well-established enterprise SaaS company specializing in email marketing platforms that provide comprehensive tools for email testing, analytics, and campaign optimization. The website demonstrates a mature digital presence with extensive use of marketing and analytics technologies, including Google Analytics, Hotjar, and Visual Website Optimizer. The platform targets marketing teams and enterprises seeking to improve email campaign effectiveness. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple third-party services for marketing and analytics. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers are not clearly present and no public security or incident response policies were found. WHOIS data is incomplete, lacking registrar and registrant details, which is unusual but the website's professionalism and digital footprint support its legitimacy. Overall, the site is high quality, secure, and business credible, with room for improvement in transparency around security policies and WHOIS data.

S

Starbreeze Studios

paydaythegame.com

58

The website www.paydaythegame.com/payday3/ serves as the official digital presence for PAYDAY 3, a cooperative heist FPS game developed and published by Starbreeze Studios. It offers comprehensive information about the game, including purchase options across multiple platforms (PC, Xbox Series X|S, PlayStation 5), updates, community engagement, and support resources. The site targets gamers interested in cooperative multiplayer heist experiences and maintains a strong brand presence with consistent design and professional content. Technically, the site is built on WordPress with modern web technologies and includes features such as age verification and cookie consent to comply with privacy regulations. Security posture is strong with HTTPS enforced and security headers present, though some advanced security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain registration trust assessment, but the website content and external links indicate a legitimate and established business. Overall, the site demonstrates a mature digital infrastructure supporting an active gaming community and commercial operations.

BerufsbildungPlus.ch is a Swiss government-backed platform operated by the Staatssekretariat für Bildung, Forschung und Innovation (SBFI) to promote vocational education and training for adults and youth. The website serves as an informational and community hub, providing resources, news, and engagement opportunities related to apprenticeships and vocational pathways in Switzerland. It holds a strong market position as an official government initiative with clear branding and trust signals. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and the Foundation framework, with Matomo analytics hosted on a Swiss domain, reflecting a privacy-conscious approach. The site is mobile optimized and well-structured, though some accessibility features could be improved. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security policies or incident response information. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve compliance and security posture.

R

Regionalspital Emmental AG

spital-emmental.ch

59

Spital Emmental AG operates as a regional hospital in Switzerland with two main locations in Burgdorf and Langnau. The hospital provides a broad spectrum of healthcare services including emergency care, specialized medical departments, patient and visitor services, and additional comfort options for insured patients. The website targets patients, visitors, healthcare professionals, and referring physicians, positioning itself as a trusted regional healthcare provider. The company maintains a professional online presence with clear contact information, certifications, and active social media engagement. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and various analytics and marketing tools such as Google Analytics, HubSpot, and Siteimprove. The site is mobile optimized with a responsive design and good SEO practices. Security measures include HTTPS enforcement and a Content Security Policy, although additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The security posture is solid with no evident vulnerabilities in the HTML content. However, the use of multiple third-party scripts suggests a need for ongoing privacy and security reviews. The domain registration details are consistent with the hospital's identity, supporting the legitimacy and trustworthiness of the website. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, making it a reliable resource for its audience.

G

Glas Trösch

glastroesch.com

62

Glas Trösch is a well-established Swiss family-owned company specializing in glass manufacturing and solutions since 1905. The company offers a broad portfolio of architectural, technical, safety, and design glass products, serving a diverse international market with operations in 15 countries and 70 locations. Their website reflects a mature digital presence built on TYPO3 CMS, integrating modern privacy compliance tools such as Usercentrics CMP and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and consent-based script loading, though some security headers could be explicitly confirmed. The WHOIS data is missing or unavailable, which is unusual for a company of this stature and may indicate privacy protection or domain registration inconsistencies. Overall, the website is professional, content-rich, and trustworthy, with clear business focus and strong branding.

GeneratePress is a well-established provider of lightweight, high-performance WordPress themes and tools, targeting a broad audience including hobbyists, freelancers, agencies, and small businesses. The company offers a suite of products including a WordPress theme, a block-based page builder, starter sites, pattern libraries, and cloud hosting for pattern libraries. With over 6 million downloads and 100,000+ customers, GeneratePress holds a strong market position in the WordPress ecosystem. The business operates under EDGE22 Studios LTD and has been active since 2014. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Yoast SEO, Easy Digital Downloads for commerce, and Stripe for payment processing. The site is optimized for performance, accessibility, and SEO, with a mobile-responsive design and clean code. DNS is managed via Cloudflare, though DNSSEC is not enabled. Analytics are handled via Fathom Analytics, and affiliate marketing is supported through Affiliate WP. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized changes, and employs plugins to mitigate user enumeration attacks. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies and incident response procedures. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, GeneratePress presents a professional, trustworthy, and technically sound web presence with a high level of business credibility. Strategic recommendations include enhancing privacy compliance with cookie consent, improving DNS security, and publishing security and incident response information to further strengthen trust and security posture.

E

EFRE Karte – EFRE Karte

efre-karte.de

36

EFRE Karte is a website primarily focused on providing mapping services related to EFRE (European Regional Development Fund) projects or data. The site is built on WordPress and leverages modern JavaScript libraries such as Mapbox GL and Turf.js to deliver interactive map functionalities. The website's content is minimal, focusing on the map interface and basic branding with limited textual information. There is no evidence of privacy, cookie, or terms of service policies, nor contact information, which limits user trust and compliance with data protection regulations. Technically, the site uses HTTPS and modern libraries but lacks security headers and advanced SEO or accessibility features. The security posture is moderate but could be improved by implementing standard security headers and policies. Overall, the site appears legitimate but basic in business and security maturity.

J

Jaguar Land Rover Classic

jaguarlandroverclassic.eu

68

Jaguar Land Rover Classic is the official heritage and classic division of Jaguar Land Rover, specializing in the preservation, restoration, and maintenance of classic Jaguar and Land Rover vehicles. The business offers a comprehensive range of services including approved classic vehicle sales, bespoke builds, servicing, parts sales, and classic driving experiences. The website reflects a premium market position with strong brand consistency and professional presentation. Technically, the site is built on Magento Commerce with modern JavaScript frameworks and integrates advanced search and analytics tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforcement, cookie consent mechanisms, and standard security headers, though there is room for improvement in publishing explicit security policies and vulnerability disclosure information. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, serving a global audience of classic car enthusiasts and collectors.

K

Klevu Oy

klevu.com

69

Klevu Oy operates as a technology provider specializing in ecommerce search, merchandising, and personalization solutions. Recently integrated under the parent company Athos Commerce, Klevu combines its capabilities with other brands to offer comprehensive ecommerce transformation services. The website reflects a professional B2B SaaS model targeting ecommerce businesses seeking to optimize conversion rates and customer engagement. Technically, the site is built on WordPress with modern SEO and performance optimizations, including HubSpot integration for marketing and analytics. Security posture is solid with HTTPS and consent management, though lacks explicit security policies and headers. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence and branding consistency support legitimacy.

S

Stor-Oslo Outlet

storoslooutlet.no

69

Stor-Oslo Outlet is a Norwegian used car dealership based in Oslo, offering a wide selection of used vehicles from various brands, along with financing and trade-in services. The company targets local car buyers seeking quality used cars across different price ranges. Their market position is that of a medium-sized local dealer with a consistent brand presence and active social media engagement. Technically, the website is built on ASP.NET with modern JavaScript libraries and integrates multiple analytics and advertising platforms such as Google Analytics, Microsoft Clarity, Bing Ads, and Facebook Pixel. The site is mobile-optimized and employs cookie consent mechanisms to comply with GDPR. Security posture is strong with HTTPS, security headers, and anti-CSRF tokens, though no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks a terms of service page and direct contact emails or phone numbers in the visible content.

P

Polestar Stor-Oslo

polestarstoroslo.no

63

Polestar Stor-Oslo is a regional authorized dealership specializing in Polestar electric vehicles, serving the Greater Oslo area in Norway. The company offers vehicle sales, leasing campaigns, service and workshop support, and customer service. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site uses modern JavaScript libraries including jQuery and Google Tag Manager, and implements cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS and CSRF protections, though additional security headers could enhance defenses. Overall, the site is well-optimized for mobile and SEO, providing a good user experience.

V

Volvo Car Stor-Oslo

volvocarstoroslo.no

72

Volvo Car Stor-Oslo operates as a regional authorized Volvo dealership serving the Greater Oslo area with multiple locations. The company offers new and used Volvo vehicles, comprehensive vehicle servicing, mobile service options, financing, and accessories. The website reflects a professional retail automotive business with strong brand alignment to Volvo Cars and targets both individual consumers and corporate clients. Technically, the site uses a modern ASP.NET framework with integrations for analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Bing Ads. Security posture is solid with HTTPS, anti-CSRF tokens, and security headers implemented, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain trust verification, but the website content and branding strongly support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with GDPR, making it a trustworthy digital presence for the business.

S

Specialresor

special-resor.se

69

Specialresor is a Swedish travel company specializing in personalized, small group travel experiences that emphasize cultural immersion and unique journeys. The company operates under the parent organization Unlimited Travel Group, which provides corporate backing and a network of related travel brands. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their travel offerings, including popular trips and corporate travel services. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Cloudflare for security and performance. The presence of GDPR-compliant privacy and cookie policies, along with a consent mechanism, reflects a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and anti-CSRF protections, though some security headers could be improved. The absence of WHOIS data for the exact domain queried introduces some uncertainty about domain registration legitimacy, but the active, professional website and corporate affiliation mitigate concerns. Overall, the site presents a trustworthy and credible business presence in the hospitality sector.

I

Itrim

itrim.se

61

Itrim is a Swedish health and wellness company established in 2003, specializing in weight loss, training, and stress management services. The company operates physical centers and offers personalized coaching and health programs, targeting individuals seeking sustainable lifestyle improvements. Their website reflects a mature digital presence with a professional design and clear navigation, supported by modern web technologies including WordPress, Google Analytics, and Facebook Pixel. The technical infrastructure is solid, hosted by ExcedoNetworksAB, with HTTPS enforced and standard security practices in place. However, some security enhancements such as DNSSEC and explicit security policies are absent. Privacy compliance is partially addressed through a cookie consent banner, but lacks a visible privacy policy and terms of service pages. Overall, the website is trustworthy and well-positioned in its market segment, though improvements in security transparency and privacy documentation are recommended.

I

IBECO Ingenjörsfirma F. Berglund & Co Aktiebolag

ibeco.se

67

IBECO Ingenjörsfirma F. Berglund & Co Aktiebolag is a medium-sized Swedish company specializing in supplying VA (water and sewage) and VVS (heating, ventilation, and sanitation) products. They serve primarily professional customers in Scandinavia, offering a broad product range from small pipe diameters to large stormwater pipes, along with rental equipment and fast delivery services. The company emphasizes sustainability and operational efficiency through initiatives like IBECO Express. Their market position is strong as one of Scandinavia's largest agencies in their sector. Technically, the website is built on the Umbraco CMS platform using ASP.NET Core technology, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and CookieTractor for cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some security headers could be improved. The SSL configuration is excellent, and security best practices like antiforgery tokens are in place. From a security perspective, the site demonstrates a mature posture with HTTPS enforcement, privacy compliance, and no visible vulnerabilities or exposed sensitive data. Cookie consent and privacy policies are comprehensive and GDPR compliant. However, the WHOIS data for the www subdomain is missing, which slightly reduces trust but is not uncommon. Overall, the site is professional, trustworthy, and secure. The overall risk assessment is low, with recommendations to enhance security headers and continue regular security audits. The company should maintain transparency and compliance to uphold trust and support its market position.

G

Grodan

grodan.se

68

Grodan is a hospitality business operating classic Swedish-French restaurants and event venues in central Stockholm, Sweden. The website presents two main locations and offers dining and event hosting services. The site is professionally designed with good content quality and clear navigation, targeting general audiences interested in dining and events in Stockholm. The business model focuses on restaurant services and event spaces, positioning Grodan as an established local player in the hospitality sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, CookieTractor for cookie consent management, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS with secure cookies and CSRF protection tokens, indicating a reasonable level of digital maturity. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks explicit security headers and published privacy or security policies. No contact information for incident response or vulnerability disclosure is provided, which limits transparency and responsiveness. The absence of WHOIS data for the domain www.grodan.se raises concerns about domain registration legitimacy, although the website content itself appears legitimate and professional. Overall, the website scores moderately well in content quality, technical implementation, and security posture but is penalized for missing privacy policies, contact details, and unclear domain registration data. Strategic improvements in transparency, security headers, and domain verification are recommended to enhance trust and compliance.

M

Mattecentrum

mattecentrum.se

62

Mattecentrum is a well-established Swedish non-profit organization providing free mathematics homework help to children and youth across Sweden. The website serves as a comprehensive platform offering various services including physical meeting places (Räknestugor), digital tools, video homework help, and educational events. The organization maintains a strong market position as a leading provider of free math tutoring, supported by volunteer coaches and partnerships with other educational platforms. The site is professionally designed with consistent branding and clear navigation, targeting Swedish students and their families. Technically, the website employs modern web technologies such as Google Tag Manager, jQuery, Vue.js components, and a custom chat widget powered by n8n. It is built on the Umbraco CMS platform and integrates cookie consent management via CookieTractor, ensuring compliance with GDPR. The site is mobile-optimized and accessible, with good SEO practices and performance. Analytics tools like Google Analytics and Hotjar are used for visitor insights, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and uses security cookies to protect against CSRF attacks. While explicit security headers are not fully documented in the HTML, the overall posture is good with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted as an area for improvement. The WHOIS data for the www subdomain is missing, likely due to it being a subdomain of mattecentrum.se, but the website content and certifications strongly indicate legitimacy. Overall, Mattecentrum's website is a trustworthy, well-maintained digital presence for a reputable non-profit educational organization. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

R

Roawr AB

techskaparna.se

49

Techskaparna.se is a professionally designed Swedish podcast website focused on technology entrepreneurship and startup stories. The podcast is hosted by Anna Leijon and features interviews with various tech founders and innovators primarily from Sweden. The business operates as a small-scale content creator with sponsorships from relevant partners in the tech and engineering sectors. The website uses modern web technologies including Bootstrap, jQuery, and MediaElement.js, and is hosted via Gandi SAS. It is mobile optimized and SEO friendly, providing a good user experience with clear navigation and rich content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. WHOIS data is consistent with the business claims, showing a domain created in 2021 and registered with a reputable registrar. Overall, the site is trustworthy, safe, and professionally maintained, but would benefit from enhanced privacy compliance and security best practices.

I

ID.KOM

speedkom.net

65

ID.KOM is a medium-sized German IT service provider with over 30 years of experience, specializing in IT outsourcing, managed services, cloud solutions, and telecommunication services for the mid-market segment. The company operates its own ISO 27001 certified data centers and offers a broad portfolio including IT security, Microsoft 365 services, and IoT solutions. Their market position is strengthened by their long-standing presence and certifications, targeting businesses primarily in Germany. Technically, the website is built on WordPress with the Divi theme and uses modern plugins such as Gravity Forms and Borlabs Cookie for privacy compliance. The infrastructure appears stable with moderate performance and good mobile optimization. Security posture is strong with HTTPS, ISO certification, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

C

Ceesta Oy

grandchampagnehelsinki.fi

42

Grand Champagne Helsinki is a niche event organizer specializing in champagne and gourmet experiences hosted in Helsinki, Finland. The company, Ceesta Oy, operates a professionally designed website built on WordPress with WooCommerce, indicating a digital maturity suitable for event ticketing and e-commerce. The website integrates modern tracking and marketing tools such as Google Analytics and Facebook Pixel, supporting data-driven marketing efforts. Security posture is adequate with HTTPS enforced, but lacks advanced DNS security and security headers. Privacy compliance is limited, with no explicit privacy or cookie policies detected in the provided content. Overall, the domain registration is transparent and consistent with the business, supporting legitimacy and trustworthiness.

W

Wine Scholar Guild

winescholarguild.com

62

Wine Scholar Guild is a specialized education provider offering a range of wine certifications, immersive study abroad programs, and expert-led wine courses. The organization targets wine professionals and enthusiasts seeking in-depth knowledge and credentials in wine regions such as France, Italy, Spain, and Germany. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content focused on wine education and certification. Technically, the site is built on Joomla CMS with modern frameworks and integrates multiple marketing and analytics tools, indicating a well-developed digital infrastructure. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit privacy and cookie policies are not clearly presented, which is a compliance gap. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding appear legitimate and professional. Overall, the site is a credible resource for wine education but should improve privacy disclosures and domain registration transparency to enhance trust.

B

Bluecore

bluecore.com

69

Bluecore is a retail marketing technology company specializing in transforming retail data into personalized one-to-one marketing campaigns that drive revenue. The company offers a platform that integrates with email, mobile, site, SMS, paid media, and AI shopping assistants to deliver personalized customer experiences. Positioned as a retail-first technology provider, Bluecore targets enterprise retail marketers seeking to innovate and consolidate their marketing efforts with AI capabilities. The website demonstrates a high level of digital maturity with modern technology integrations such as WordPress CMS, Yoast SEO, Google Tag Manager, Marketo, and OneTrust for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are not evident. The absence of WHOIS registration details is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and compliance indicators. Overall, Bluecore presents a trustworthy and professional online presence with strong marketing and privacy practices.

P

Populi

populiweb.com

70

Populi is a mature SaaS company founded in 2007 that provides an integrated platform for managing colleges and higher education institutions. Their software suite includes student information systems, learning management, billing, financial aid processing, admissions CRM, and fundraising tools. The company targets colleges and educational institutions seeking an all-in-one solution to streamline operations and improve student experience. The website reflects a professional and consistent brand with comprehensive content and clear messaging tailored to their audience. Technically, the site uses modern JavaScript libraries like jQuery, Google Tag Manager, and Google Analytics for tracking and analytics. The hosting and domain registration are stable and consistent with a legitimate business. Security posture is good with HTTPS enforced and a bug bounty program in place, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is partially met with a clear privacy policy but lacks a visible cookie consent mechanism. Overall, the website is trustworthy, well-designed, and functional with moderate tracking and analytics usage.

C

Citronio

citronio.gr

42

Citronio is a small Greek business specializing in communication applications and design services. Their website presents a professional image with a focus on delivering comprehensive communication products ranging from printed materials to electronic communication solutions. The target audience appears to be business clients seeking creative and modern communication solutions. Technically, the website is built on Drupal 8 with a modern front-end stack including jQuery, Bootstrap, and various UI libraries, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, though accessibility and SEO could be improved. Security posture is moderate; HTTPS is used but no advanced security headers or policies are evident. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly listed, limiting direct communication channels. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

Q

QVC

qvc.com

72

QVC is a leading enterprise-level e-commerce and televised shopping platform offering a wide range of consumer products including beauty, electronics, fashion, and home goods. The website demonstrates a strong market position with extensive live streaming shopping events and a comprehensive online retail presence targeting general consumers. Technically, the site leverages a modern technology stack including Adobe Experience Manager, various analytics and marketing tools, and live shopping integrations, delivering excellent performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and secure cookie practices, although explicit security policy and incident response information are not publicly available. Overall, the site is highly professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for consumers.

Whirlpool Corporation is a leading global manufacturer and retailer of home, kitchen, and laundry appliances. The website serves as a comprehensive platform for consumers to explore and purchase Whirlpool products, supported by extensive customer service and protection plans. The brand is well-established with consistent branding and a strong market presence in the manufacturing and retail sectors. Technically, the website leverages a modern technology stack including Adobe Experience Manager, various analytics and marketing tools, and a robust CDN infrastructure via Akamai, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with extensive tracking and marketing integrations, balanced by good privacy compliance practices. The absence of WHOIS data is noted but does not detract from the site's legitimacy given the brand's global recognition and professional web presence.

W

Wine Scholar Guild

winescholarguild.org

62

Wine Scholar Guild is a specialized education provider offering immersive wine certification programs, study abroad tours, and membership services targeting wine professionals and enthusiasts globally. The website demonstrates a mature digital presence built on Joomla CMS with modern frameworks and multiple third-party analytics and marketing integrations. Security posture is generally good with HTTPS and CSRF protections, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, but the professional content and branding suggest a legitimate business. Strategic improvements in privacy compliance and security header implementation are recommended to enhance trust and compliance.

W

Wine & Spirit Education Trust

wsetglobal.com

68

Wine & Spirit Education Trust (WSET) is a well-established global leader in drinks education, offering qualifications in wine, spirits, beer, and sake. Founded in 2006, it operates as a registered charity based in the UK, serving a mature audience of drinks professionals and enthusiasts worldwide. The organization maintains a strong market position as the largest provider in its niche, with a broad network of course providers in over 70 countries and multiple language offerings. Key services include progressive qualification levels, online learning, and custom courses tailored for business clients.

La Route Verte is a specialized tourism website promoting an e-bike route through six regional nature parks in Switzerland, targeting tourists and cycling enthusiasts. The site provides detailed stage information, scenic maps, and reservation options via partner Eurotrek. The technical infrastructure uses modern web technologies including Foundation CSS, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS, reCAPTCHA, and cookie consent, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and partner endorsements.

S

Swiss Parks Network

paerke.ch

52

The Swiss Parks Network operates as a government-supported non-profit entity promoting the conservation, cultural heritage, and sustainable tourism of 20 unique Swiss parks. The website serves as a comprehensive portal for visitors, local communities, and stakeholders, offering detailed information, events, and support programs such as corporate volunteering and a voucher system. The network holds a strong market position as the authoritative source for Swiss parks, supported by the Federal Office for the Environment (FOEN). Technically, the website is built on the indual CMS platform, leveraging modern JavaScript libraries such as jQuery, Fancybox, and Slick Carousel for enhanced user experience. It implements HTTPS with anonymized IP tracking in Google Analytics and a robust cookie consent mechanism via Klaro, reflecting a mature digital infrastructure. The site is well-optimized for mobile and accessibility standards, with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS and employs privacy-compliant analytics and cookie management. However, it lacks explicit security headers and a public vulnerability disclosure policy, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the Swiss Parks Network website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively balances user engagement with security and privacy considerations, making it a reliable resource for its audience.

M

MEDIAparc

mediaparc.ch

56

MEDIAparc is a regional media center based in Villars-sur-Glâne, Switzerland, hosting multiple media entities including radio, television, digital agencies, and advertising services. It serves the Freiburg region with a collaborative business model that integrates various media formats under one roof. The website is professionally designed using WordPress and Elementor, supporting multilingual content in German and French. It provides clear contact information, a contact form, and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response channels are absent. Overall, the website is trustworthy and well-positioned as a regional media hub.

Scheurich GmbH & Co. KG is a well-established German manufacturer and market leader in indoor and outdoor planters, with a history spanning over 90 years. The company emphasizes innovation, quality, and sustainable production, targeting consumers and retailers interested in home decoration and gardening products. Their business model focuses on manufacturing ceramic and plastic planters, supported by an online shop and extensive product range. The website reflects a professional and consistent brand image with clear navigation and multilingual support.

B

BAB - Die Förderbank für Bremen und Bremerhaven

bab-bremen.de

60

BAB - Die Förderbank für Bremen und Bremerhaven is a regional development bank supporting public and private investments in the Bremen and Bremerhaven regions. It offers a range of financial products including grants, loans, participations, and guarantees to foster economic growth, housing development, and innovation. The institution partners closely with local economic development agencies BIS and WFB, positioning itself as a key player in regional economic strengthening and sustainability initiatives. The website reflects a professional and well-structured digital presence with clear navigation, accessibility features, and comprehensive information about funding programs and events. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and FontAwesome, and is likely powered by a specialized CMS tailored for regional government entities. The site is mobile-optimized, accessible, and includes privacy-conscious analytics via Matomo without cookies. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response contacts are published. Overall, the website demonstrates a mature digital infrastructure suitable for a public financial institution, with strong compliance to GDPR and privacy standards. The presence of certifications and partner logos enhances trustworthiness. No critical vulnerabilities or suspicious elements were detected, and the content is safe for general audiences. Strategically, BAB should consider publishing a formal security policy and incident response contacts to further enhance transparency and trust. Additionally, implementing recommended security headers would strengthen defense-in-depth. The current digital maturity supports BAB's mission effectively, but ongoing security and compliance improvements are advisable.

B

BOMA GmbH

olerum.de

70

BOMA GmbH operates the website olerum.de, a well-established German e-commerce platform specializing in plants, greenhouses, and garden accessories. The company leverages strong partnerships with local nurseries to offer high-quality products and a broad selection to gardening enthusiasts and home gardeners. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting a broad audience of garden lovers. Technically, the site uses modern JavaScript libraries such as jQuery, Splide.js, and Owl Carousel, alongside Google Analytics and Tag Manager with robust consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

Jaguar Land Rover Classic is a specialized division of Jaguar Land Rover focused on providing classic Jaguar and Land Rover parts and restoration services. The website targets classic car enthusiasts and owners primarily in Germany and Europe, leveraging a robust e-commerce platform based on Magento Enterprise. The technical infrastructure includes modern JavaScript libraries, advanced search capabilities via Klevu, and GDPR-compliant cookie management through Cookiebot. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and terms policies are not detected in the provided content. Overall, the site demonstrates a mature digital presence aligned with a large automotive brand, though improvements in transparency and contact availability would enhance trust and compliance.

O

Obviuse

obviuse.se

65

Obviuse is a Stockholm-based web agency specializing in planning, designing, producing, and maintaining innovative and award-winning websites, with a strong focus on the Umbraco CMS platform. The company has a decade-long history and a portfolio featuring notable clients such as Volvo Cars, Bro Hof Slott, and various educational and travel organizations. Their business model centers on delivering functional, user-friendly web solutions with ongoing support and iterative improvements. Technically, the website leverages Umbraco CMS, jQuery, Google Analytics, Google Tag Manager, and a proprietary cookie consent solution (CookieTractor), demonstrating a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and bot protection via Cloudflare cookies, though explicit security headers and formal security policies are absent. The WHOIS data for the queried subdomain is missing, which introduces some uncertainty about domain registration details, but the website content and business presence strongly indicate legitimacy. Overall, Obviuse presents as a professional, trustworthy, and technically competent web agency with a strong community presence and compliance with cookie consent regulations.

S

SharpSpring

sharpspring.com

64

SharpSpring is a well-established SaaS company providing a comprehensive marketing automation and CRM platform primarily targeting agencies and small to medium-sized businesses. The platform integrates sales automation, email marketing, social media management, and campaign tracking into a unified solution designed to fuel revenue growth. Positioned as an affordable alternative to leading competitors, SharpSpring benefits from its parent company Constant Contact's backing, enhancing its market credibility and reach. The website reflects a mature digital presence with rich content, clear navigation, and strong branding consistency.

U

UBIQ AG

ubiq.swiss

49

UBIQ AG is a Swiss-based small design agency specializing in web design, graphic design, brand design, product design, and webshop development. The company showcases a portfolio of projects for various clients, indicating a focus on regional business customers seeking professional digital and creative services. The website is built on Joomla CMS and employs a modern JavaScript technology stack including jQuery, Swiper, and Matomo analytics, reflecting a moderate level of digital maturity. While the site design and user experience are good, there is room for improvement in accessibility and SEO optimization. Security posture is moderate; HTTPS is used, but no DNSSEC or security headers are detected, and privacy compliance is lacking due to absence of privacy and cookie policies. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website is professional but could enhance trust and compliance by adding privacy policies, security headers, and contact information.

A

Azul

azul.de

66

Azul is a specialty coffee roastery based in Bremen, Germany, focusing on high-quality coffee roasting, retail sales, and coffee education. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern plugins such as WPBakery Page Builder, Slider Revolution, and Borlabs Cookie for cookie consent management. SEO is enhanced with Rank Math, and analytics are conducted via Matomo, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit security headers and privacy policies are missing. The site is accessible without any WAF or security challenges, and no adult or questionable content is present, making it safe for general audiences. Contact information is primarily via a contact form, with no explicit emails or phone numbers found in the HTML content. WHOIS data is minimal but does not raise suspicion, though more detailed registrant information would improve trust. Overall, Azul's website is a solid representation of a small specialty coffee business with room for improvement in privacy compliance and security best practices.

S

Statcounter

statcounter.com

60

Statcounter is a well-established web analytics service founded in 2000, providing real-time visitor tracking, session replay, heatmaps, and Google Ads integration. It targets business owners and marketers seeking easy-to-use analytics tools and is trusted by over 1.5 million websites worldwide. The website is professionally designed with excellent content quality and clear navigation, supporting a SaaS business model with free trials and paid plans. Technically, the site uses modern JavaScript libraries including jQuery and Google Analytics scripts, hosted with Cloudflare DNS and a reputable registrar. Performance and mobile optimization are good, with SEO and accessibility features well implemented. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNSSEC, security headers, and cookie consent mechanisms. The domain registration is consistent with the business history and shows no suspicious patterns. Overall, the site demonstrates a mature digital presence with room for enhanced privacy compliance and security best practices.

H

Hextom Inc

hextom.com

61

Hextom Inc is a Toronto-based SaaS company specializing in software products designed to enhance e-commerce businesses, particularly those using Shopify and BigCommerce platforms. With a strong market presence as a top-rated Shopify partner trusted by over 270,000 merchants, Hextom offers a suite of apps focused on marketing, sales optimization, and store management. Their business model revolves around providing scalable SaaS solutions that help online merchants increase sales and streamline operations. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. Hosting is provided via Amazon AWS, ensuring reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS and has domain status protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. The absence of a visible privacy policy and terms of service on the homepage is a compliance gap. Google Analytics is present but not fully configured, indicating room for improvement in analytics deployment. Overall, Hextom presents a credible and professional online presence with a solid business foundation. Strategic improvements in security headers, DNSSEC, and privacy documentation would strengthen their security posture and compliance standing.

J

Jaguar Land Rover Classic

jaguarlandroverclassic.com

68

Jaguar Land Rover Classic operates as the official heritage and classic vehicle division of Jaguar Land Rover, focusing on preserving, restoring, and maintaining classic Jaguar and Land Rover vehicles. The business offers a range of services including bespoke vehicle builds, continuation models, servicing, restorations, parts supply, and lifestyle merchandise. The website reflects a premium brand image consistent with its market position and targets classic car enthusiasts and collectors globally, primarily in the UK and Europe. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates essential tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data is a notable anomaly that requires further investigation but does not detract from the overall professional presentation and trust signals on the site.

Grafik Werkstatt operates a professional German-language e-commerce website specializing in greeting cards, calendars, gifts, and related products. The site targets general consumers seeking occasion-specific cards and gifts, offering a well-structured catalog and a B2B shop variant. Technically, the website is built on Magento CMS, leveraging RequireJS, jQuery, and Owl Carousel for frontend interactivity, with integrations for Google Analytics and Facebook Pixel for marketing and tracking. The hosting is managed via kasserver.com, and the site enforces HTTPS with a cookie consent mechanism, indicating GDPR awareness. However, explicit privacy policies and terms of service are not found in the provided content, which is a compliance gap. Security posture is moderate with SSL enabled but lacking security headers and vulnerability disclosure policies. Overall, the website is safe, professional, and trustworthy for general audiences.