Security Directory

W

WATERROWER | NOHRD GmbH

nohrd.com

69

WATERROWER | NOHRD GmbH operates a professional e-commerce website specializing in premium fitness equipment designed with sustainability and aesthetics in mind. The company targets fitness enthusiasts and gym/home users seeking high-quality, beautifully crafted products. The website is well-structured, mobile-optimized, and uses modern technologies such as Magento, RequireJS, and Google Tag Manager to deliver a smooth user experience. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is generally strong with HTTPS enforced and bot protection via FriendlyCaptcha, though the absence of certain security headers and lack of public WHOIS data slightly reduce trust. Overall, the site reflects a mature digital presence suitable for a medium-sized retail business.

Y

Yonex

yonex.com

10

Yonex is a globally recognized leader in the manufacturing and retail of sports equipment, specializing in badminton, tennis, and golf products. Their website serves as a comprehensive e-commerce platform showcasing a wide range of racquets, strings, clubs, apparel, footwear, and accessories. The brand emphasizes technology-driven innovation to enhance athletic performance. The site targets sports enthusiasts and professional athletes, offering a seamless shopping experience with clear navigation and professional design. Technically, the website is built on the Magento platform, leveraging modern web technologies such as RequireJS, jQuery, and Bootstrap. It integrates advanced analytics and monitoring tools including Google Analytics, Google Tag Manager, and New Relic Browser for performance and user behavior insights. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers like Content Security Policy and Strict-Transport-Security. While no critical vulnerabilities were detected, the absence of explicit security policy and incident response pages suggests room for improvement in transparency and readiness. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Yonex's website reflects a mature digital presence with strong business credibility and technical infrastructure. The lack of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include publishing security and incident response information, enhancing contact transparency, and maintaining regular security audits to uphold trust and compliance.

Z

Zalando SE

zalando.at

47

Zalando SE operates a leading European online fashion retail platform, targeting consumers primarily in Austria and German-speaking countries. The website offers a broad assortment of shoes, clothing, accessories, and beauty products with a strong focus on user experience, free shipping, and returns. The brand is well-established with a significant market presence and a comprehensive e-commerce business model. Technically, the site leverages modern web technologies including React and RequireJS, with a strong emphasis on performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and consent management via Usercentrics. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

L

Lindt & Sprüngli Österreich

lindt.at

72

Lindt & Sprüngli Österreich operates a professional e-commerce website showcasing its premium chocolate products, recipes, and promotional content. The site targets a general audience in Austria and leverages a mature digital infrastructure based on Magento Commerce, enhanced with modern JavaScript frameworks and third-party marketing and analytics tools such as Adobe Target, Google Tag Manager, Trustpilot, and New Relic. The website demonstrates consistent branding and a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site reflects a reputable and established brand presence in the retail chocolate market.

S

Sage

sage.com

72

Sage is a well-established enterprise software company specializing in AI-powered business management solutions including accounting, payroll, HR, and ERP software. The website demonstrates a strong market position with a comprehensive product portfolio targeting businesses of all sizes, from sole traders to large enterprises. The digital infrastructure is modern, leveraging Sitecore CMS, RequireJS, and advanced monitoring tools like New Relic and SpeedCurve, ensuring fast performance and excellent user experience. Security posture is robust with HTTPS enforcement, multiple security headers, and ISO 27001 certification, although explicit incident response contacts and vulnerability disclosure policies are not publicly evident. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a high level of business credibility.

B

BBS

bbs.com

63

BBS is a reputable manufacturer specializing in automotive wheels with a strong motorsport heritage. Their website reflects a professional e-commerce platform built on Magento, targeting quality-conscious automotive enthusiasts globally. The technical infrastructure leverages modern JavaScript frameworks and includes tracking and consent management tools, indicating a mature digital presence. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is functional, professional, and safe for general audiences.

O

Opodo

opodo.com

66

Opodo is a large, well-established online travel agency headquartered in the United Kingdom with a parent company eDreams ODIGEO. The company offers a comprehensive suite of travel services including flights, hotels, car rentals, holiday packages, and transfers. It targets a broad audience of travelers seeking competitive prices and convenience through an easy-to-use online platform. The website is professionally designed with consistent branding and multilingual support, reflecting its international market presence. Technically, the website employs modern web technologies such as React, RequireJS, and integrates with Google Analytics and Tag Manager for data collection and marketing. It supports service workers for progressive web app capabilities and provides mobile app downloads for iOS and Android. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses Content-Security-Policy headers, anonymizes IPs in analytics, and avoids exposing sensitive data. However, additional security headers and a public security policy or vulnerability disclosure page are absent. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Contact information and legal disclosures are transparent, enhancing trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The lack of WHOIS data is a minor concern but likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the security posture and user trust.

E

eDreams

edreams.com

66

eDreams is a well-established online travel agency offering a broad range of travel services including flights, hotels, car rentals, and package holidays. The company operates internationally with multiple country-specific domains and is part of the larger eDreams ODIGEO group. Their market position is strong, supported by industry awards and accreditations such as IATA. The website is professionally designed with good content quality and consistent branding, targeting general consumers seeking travel bookings. Technically, the website uses modern web technologies including React, RequireJS, and integrates Google Analytics and Tag Manager for tracking. It is hosted behind Cloudflare, ensuring good performance and security. The site is mobile optimized and includes accessibility features, although some areas could be improved. Security posture is solid with HTTPS enforced and Content-Security-Policy headers present, but additional headers and explicit security policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place, reflecting GDPR adherence. However, the absence of WHOIS data for the domain is unusual and reduces trust slightly, though the overall legitimacy is supported by the business presence and branding. No adult or questionable content is present, making the site safe for general audiences. Overall, eDreams presents a mature, professional online travel platform with good security and privacy practices. Strategic improvements in transparency around security policies and WHOIS data would further strengthen trust and compliance.

Z

Zalando SE

zalando-lounge.at

52

Lounge by Zalando is a well-established online outlet platform operated by Zalando SE, targeting Austrian and European consumers with discounted fashion, home, and sports products. The website demonstrates a mature e-commerce business model with a strong market position as part of the Zalando group. Technically, the site uses modern web technologies including React, RequireJS, and integrates advanced analytics and consent management tools, ensuring a high-quality user experience with fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and active vulnerability reporting mechanisms, although a dedicated security policy page and security.txt file could enhance transparency. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the parent company's branding and business practices.

A

ACO

aco.shop

72

ACO operates a professional e-commerce platform specializing in construction and drainage products targeted at both private and commercial customers in Germany. The website is built on Magento, leveraging modern web technologies such as RequireJS and jQuery, and integrates performance and analytics tools like New Relic and Google Tag Manager. The site demonstrates good technical maturity with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. However, the absence of detailed WHOIS registrant information and direct contact details on the homepage slightly detracts from overall trustworthiness. Security posture is solid with no evident vulnerabilities or exposed sensitive data. Strategic recommendations include enhancing transparency by publishing a security policy, incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

S

Streck Transportges. mbH | Streck Transport AG

streck-transport.com

10

Streck Transport operates as a transportation and logistics service provider with presence in Germany and Switzerland. The website acts as a portal linking to their regional sites, targeting business clients seeking transport solutions. The company appears to be a medium-sized regional player in the transportation sector. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Matomo analytics configured for privacy compliance. The site is mobile optimized and well-structured, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed security policies are absent. WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, but could improve transparency and security documentation.

R

RBA Brands

rbabrands.com

60

RBA Brands is a leading Spanish media company specializing in magazine publishing and digital content distribution. The website showcases a broad portfolio of magazine brands and emphasizes its market leadership in Spain. The technical infrastructure is based on ASP.NET WebForms with modern JavaScript libraries and integrates a comprehensive consent management platform to comply with GDPR regulations. The site uses multiple analytics and advertising services, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data for the domain is a concern but the professional presentation and content quality support legitimacy. Overall, the website is well-designed, user-friendly, and compliant with privacy standards, though contact and security policy transparency could be enhanced.

R

RBA

serienegra.es

66

RBA Libros is a well-established Spanish publishing group specializing in various literary genres, including the crime-focused 'Serie Negra' imprint. The website serves as a digital storefront and informational portal for their crime genre books, offering features such as book listings, author information, and newsletter subscriptions. The site is professionally designed with consistent branding and targets readers interested in crime novels, essays, and biographies. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, and lazy loading libraries, hosted partially on Microsoft Azure Blob Storage, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and GDPR-compliant consent management via Didomi, though security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust verification, but the website's content and external references strongly indicate legitimacy. Overall, the site presents a trustworthy and professional digital presence for RBA's crime literature segment.

R

RBA Revistas

rbarevistas.com

58

RBA Revistas is a prominent Spanish media publishing company specializing in magazines, including well-known brands such as National Geographic España, Lecturas, Saber Vivir, and El Mueble. The website serves as a corporate portal providing information about its magazine portfolio and links to individual magazine sites. The business targets Spanish-speaking audiences interested in lifestyle, culture, health, and entertainment magazines. The company operates within the media sector and is part of the larger RBA Grupo. The website demonstrates a professional design with consistent branding and good content quality.

R

RBA

rbacoleccionables.com

67

The website tienda.rba.es/coleccionables is an e-commerce platform operated by RBA, a well-known Spanish publisher and retailer specializing in collectibles and magazines. The site offers subscription-based and direct sales of collectible series, targeting a general Spanish-speaking audience. The business model focuses on engaging customers through exclusive offers and gifts tied to subscriptions, positioning itself as a reputable player in the collectibles market in Spain. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates various third-party services including Google Tag Manager, New Relic for monitoring, and consent management via Didomi and Indigitall SDKs. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates monitoring tools to detect issues. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website presents a professional and trustworthy online presence with moderate to good scores in content quality, technical implementation, security posture, privacy compliance, and business credibility. The lack of WHOIS data limits full domain legitimacy verification, but the site’s content and structure support its authenticity.

G

Guémas Immopro

guemas.fr

58

Guémas Immopro is a French real estate company specializing in commercial properties such as offices, activity spaces, and parking in cities including La Rochelle, Paris, and Bordeaux. The website is professionally designed using the Wix platform, featuring modern web technologies and a cookie consent mechanism via Usercentrics, indicating some level of GDPR compliance. However, the absence of explicit privacy and terms of service pages and lack of visible contact information limit transparency. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and age, especially given the company's claim of 30 years in business. Security posture is moderate with HTTPS implied but no detected security headers or advanced protections. Overall, the website presents a professional front but would benefit from enhanced transparency and security measures.

X

XWiki SAS

xwiki.com

73

XWiki SAS is a well-established technology company specializing in open source knowledge management and collaboration software. With over 20 years of experience, it offers a range of standard and custom solutions including cloud hosting, support, and consulting services. The company serves a broad business audience, including large enterprises such as Amazon and Lenovo, positioning itself as a trusted provider in the enterprise wiki and collaboration market. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on the XWiki platform with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain protection, and use of CAPTCHA, though explicit security policies and vulnerability disclosures are absent. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high business credibility and technical maturity with moderate user tracking for analytics and marketing purposes.

R

RBA Libros

rbalibros.com

66

RBA Libros is a prominent Spanish publishing house specializing in adult fiction and non-fiction literature, offering a diverse catalog through multiple well-known imprints such as Gredos, Serie Negra, and National Geographic. The company operates under the Grupo RBA umbrella, positioning itself as a key player in the Spanish media and publishing sector. Their website provides comprehensive access to their catalog, news, and social media engagement, targeting general adult readers interested in literary content. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, and LazySizes for optimized content delivery and lazy loading. It integrates GDPR-compliant consent management via the Didomi SDK and uses Google Tag Manager for analytics and marketing. Hosting of static content is done through Microsoft Azure Blob Storage, indicating a robust infrastructure. The site is mobile-optimized with good SEO and accessibility practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses consent mechanisms aligned with GDPR. However, the absence of explicit security headers and a published security policy or incident response contact reduces the overall security posture. The missing WHOIS domain registration data is a notable concern, as it creates uncertainty about domain legitimacy despite the professional appearance and consistent branding of the website. Overall, RBA Libros presents a trustworthy and professional digital presence with strong content and compliance features. The primary risk lies in the lack of transparent domain registration information and some minor security best practice gaps. Addressing these would enhance trust and security assurance for users and partners.

S

South London Gallery

southlondongallery.org

71

South London Gallery is a well-established non-profit cultural institution in London, providing free access to contemporary art exhibitions, film, performance events, and educational programs for diverse audiences including children and adults. The gallery has a strong community focus and a history spanning over 125 years, positioning it as a key player in the local and broader art scene. The website reflects this with rich content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Tag Manager, and Klaviyo for marketing and analytics. Security measures include HTTPS and Google reCAPTCHA, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the institution's public presence and external references.

H

Historisches Lexikon der Schweiz (HLS)

hls-dhs-dss.ch

10

The Historisches Lexikon der Schweiz (HLS) is a reputable, multilingual, scientific online lexicon dedicated to Swiss history, serving both the general public and researchers. It is uniquely positioned as the only scientific lexicon published simultaneously in the four Swiss national languages. The website is affiliated with the Swiss Academy of Humanities and Social Sciences, enhancing its credibility and trustworthiness. The platform offers a rich array of content including articles, multimedia, projects, and newsletters, emphasizing open access and scientific rigor. Technically, the website is built on the XWiki platform with a modern tech stack including RequireJS, jQuery, Bootstrap, and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is strong with HTTPS enforced and no exposed sensitive data, but could be improved by adding explicit security headers and vulnerability disclosure mechanisms. Overall, the site maintains a high level of professionalism and trustworthiness, with comprehensive content and consistent branding. However, it lacks explicit cookie consent mechanisms and published security policies, which are recommended for enhanced compliance and user trust. The domain registration aligns well with the website's academic nature, supporting its legitimacy.

I

ift Rosenheim GmbH

ift-montageplaner.de

57

ift Rosenheim GmbH is a reputable German institute specializing in building technology, particularly in the testing, certification, and planning of windows and building components. Their ift-Montageplaner tool facilitates professional and compliant planning of window wall connections, targeting installers, planners, and processors. The company holds multiple ISO certifications and is recognized internationally. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes consent management for privacy compliance. Security posture is strong with HTTPS and consent mechanisms, though additional HTTP security headers could enhance protection. Overall, the site is professional, well-structured, and trustworthy, with clear contact information and partner integrations.

Simpleview Europe is a specialized digital agency providing comprehensive tourism technology solutions including CMS, CRM, DMS, and digital marketing services. As part of Granicus, it holds a strong market position serving Destination Management Organisations and tourism boards across Europe. The website reflects a mature digital presence with modern technologies and extensive service offerings. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The technical infrastructure is robust with use of modern JavaScript frameworks and analytics tools, supporting good performance and user experience. Security posture is moderate with HTTPS implied but lacking visible security headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

T

Team Deutschland

teamdeutschland.de

43

Team Deutschland operates an official website dedicated to supporting and promoting German Olympic athletes and events. The platform provides news, event information, athlete profiles, multimedia content including podcasts and videos, and an online merchandise shop. It is supported by the German Federal Ministry of the Interior and the German Olympic Sports Confederation, indicating strong governmental and institutional backing. The website targets sports fans, supporters, and the general public interested in Olympic sports and Team Deutschland activities. Technically, the site is built on TYPO3 CMS and uses modern web technologies such as Bootstrap Icons, Swiper.js, and Matomo Analytics, ensuring a responsive and engaging user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms implemented. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response contacts are missing. Overall, the site is professional, trustworthy, and well-branded, serving as a reliable information and engagement hub for Olympic sports in Germany.

V

Verlagshaus24.com | Bücher, Magazine, Verlage

verlagshaus24.com

55

Verlagshaus24.com is a German-language e-commerce platform specializing in the sale of books, magazines, calendars, and subscription services. The website targets German-speaking readers and hobbyists interested in various thematic worlds such as travel, history, DIY, and more. The business operates primarily as an online retailer leveraging a Magento 2 infrastructure, integrating multiple marketing and tracking tools to optimize customer engagement and sales. The platform offers a broad catalog with clear navigation and thematic categorization, supporting a medium-sized retail operation in the publishing sector. Technically, the website is built on a modern Magento 2 CMS with extensive use of RequireJS, jQuery, and integrations such as Google Tag Manager, Facebook Pixel, Taboola, Hotjar, and GetResponse. The site is mobile-optimized and employs security measures including HTTPS and invisible reCAPTCHA on forms. However, explicit security headers are not fully implemented, and privacy policy documentation is not clearly accessible, which may impact compliance and user trust. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks visible security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which is a critical trust factor. No vulnerabilities or malicious content were detected in the accessible content, and the site does not contain adult or explicit material. Overall, Verlagshaus24.com presents as a professional and functional e-commerce platform with good content quality and marketing sophistication. The primary risks relate to incomplete domain registration transparency and privacy compliance documentation. Strategic improvements in security headers, privacy policy visibility, and domain registration clarity would enhance trust and compliance.

I

Indiana Paddle & Surf

indiana-paddlesurf.ch

54

Indiana Paddle & Surf is a Swiss-based small retail company specializing in premium water sports equipment, including SUP boards, foil boards, paddles, wings, and surfboards. Founded in 2010, the company positions itself as an innovator in the water sports niche, targeting enthusiasts primarily in Switzerland and the EU. The website is built on Magento 2 with several WeltPixel extensions, integrating marketing and analytics tools such as Google Tag Manager and Klaviyo. The site is professionally designed with good navigation and mobile optimization, though it lacks visible privacy and cookie policies, which impacts compliance ratings. Security posture is solid with HTTPS enforced, but missing security headers and vulnerability disclosure information are areas for improvement. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is a functional and credible e-commerce platform with room to enhance privacy compliance and security best practices.

The Deutsche Stiftung für Engagement und Ehrenamt operates the DSEE Lernportal, a dedicated educational platform aimed at supporting volunteers and engaged individuals in non-profit organizations. The portal offers a variety of learning resources including courses, webinars, and video content focused on topics such as digitalization, financing, member recruitment, and organizational management. The platform is positioned as a trusted resource within the German volunteer sector, providing free access to educational materials and fostering community growth. Technically, the website is built on the Totara LMS platform, which is based on Moodle, utilizing modern JavaScript libraries such as YUI and jQuery, and includes accessibility and mobile optimization features. The infrastructure supports a good user experience with moderate performance and solid SEO practices. The site enforces HTTPS and employs secure session management, though it lacks some advanced security headers and a formal security policy page. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, there is no explicit incident response or vulnerability disclosure information available. The domain registration aligns well with the organization's identity, enhancing trustworthiness. Overall, the DSEE Lernportal is a professionally maintained, secure, and privacy-conscious platform serving the non-profit volunteer community in Germany. Strategic improvements in security policy transparency and incident response readiness could further strengthen its security posture and user trust.

W

Werkstatt für Gestaltung WfG AG

wfg.ch

55

Werkstatt für Gestaltung WfG AG is a Swiss-based company specializing in the design and retail of furniture and accessories, including sofas, felt bags, and leather bags. The company operates an e-commerce platform built on Magento, targeting primarily German-speaking Swiss customers. The website presents a professional design with good navigation and mobile optimization, supporting a positive user experience. The business model focuses on direct online sales and retail of design products, positioning itself as a niche regional player in the furniture retail sector. From a technical perspective, the website leverages a modern Magento stack with RequireJS, jQuery, and Magento PageBuilder components. The platform is well-structured, though performance is moderate and some SEO and accessibility features could be improved. Security-wise, the site enforces HTTPS with valid SSL certificates and uses form key protections. However, it lacks several important security headers such as Content-Security-Policy and HSTS, and does not provide explicit incident response or vulnerability disclosure information. Overall, the security posture is adequate but could benefit from enhancements to headers and incident response transparency. Privacy compliance is basic, with a privacy and cookie policy present but no GDPR-specific indicators or data protection officer contact. The absence of direct contact emails or phone numbers reduces immediate trust signals, though a contact form is available. There are no signs of malicious content or adult material, and the domain registration data aligns well with the business claims, supporting legitimacy. The website scores a 75 overall on AI evaluation, reflecting good content quality and business credibility, moderate technical implementation, and room for improvement in security and privacy compliance. Strategic recommendations include implementing stronger security headers, adding vulnerability disclosure and incident response contacts, enhancing privacy compliance transparency, and improving SEO and accessibility features.

N

Nordic Office of Architecture

nordicarch.com

61

Nordic Office of Architecture is a well-established international architectural firm with studios in Norway, Denmark, and Iceland. The company serves a global clientele with a strong presence in the Nordic region, positioning itself as a leading architectural practice. Their website reflects a professional and modern design, showcasing key projects and providing comprehensive contact information for multiple office locations. The firm emphasizes transparency and compliance with privacy regulations, evidenced by a comprehensive privacy policy and cookie consent mechanism. Technically, the website employs modern JavaScript frameworks and analytics tools, ensuring a good user experience and performance. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in security headers and incident response disclosures. Overall, the website and domain registration data indicate a credible and trustworthy business with a strong digital presence.

FAR frohn&rojas is a small, networked architectural design and research practice operating internationally with locations in Berlin, Santiago de Chile, and Los Angeles. The website presents basic information about the firm and its services but lacks detailed business or contact information. The technical infrastructure is based on WordPress CMS with common JavaScript libraries, providing moderate performance and basic mobile optimization. Security posture is limited, with no evident security headers or privacy policies, and the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site is professional in content but requires improvements in security, compliance, and transparency to enhance trust and credibility.

F

Fakeauthentic

fakeauthentic.gallery

7

Fakeauthentic.gallery is a small-scale art gallery and event promotion website hosted on the Wix platform. It primarily promotes an event named DIS!NTEGRATE OPENCALL at DROPCITY MDW 2025, targeting a general audience interested in art and cultural events. The website uses Wix's proprietary technologies and standard scripts, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of contact information, privacy policies, and WHOIS data reduces overall trust and business credibility. Strategic improvements in privacy compliance, security headers, and business transparency are recommended to enhance trustworthiness and user confidence.

V

Vulkan Verlag

vulkan-shop.de

52

Vulkan Shop is a German-based e-commerce platform specializing in the sale of technical books, magazines, and eBooks focused on energy, automation, water, and industrial sectors. The website is professionally designed using Magento 2, featuring a comprehensive catalog of specialized publications targeting professionals and specialists in these industries. The platform supports German and English languages and integrates Google Analytics for user behavior tracking. Cookie consent mechanisms are implemented to comply with GDPR requirements. Security posture is solid with HTTPS enforced and secure cookie settings, although explicit security headers and policies are not fully documented. Contact information and terms of service pages are not clearly presented in the analyzed content, which could impact user trust and compliance transparency.

H

HAWtech

hawtech.com

51

HAWtech is a consortium of six leading German universities of applied sciences specializing in engineering sciences. Founded in 2009, it serves approximately 60,000 students across economically strong regions in Germany. The alliance focuses on applied teaching, learning, research, and academic cooperation, offering study programs, summer schools, and scholarships. The website reflects a professional academic presence with clear navigation and relevant content targeted at students and academic partners. Technically, the site is built on TYPO3 CMS with JavaScript enhancements and uses Piwik for analytics, indicating moderate digital maturity. Security posture is adequate with cookie consent implemented but lacks visible advanced security headers and explicit incident response or security policies. The absence of WHOIS registration data for the domain is a notable anomaly that reduces trustworthiness, though the website content and partner domains strongly suggest legitimacy. Overall, the site is well-maintained, content-rich, and serves its educational mission effectively.

P

PANORAMMMA

panorammma.com

49

PANORAMMMA is an artistic and design-focused website showcasing collections, exhibitions, and interiors. The site targets art and design enthusiasts and potential buyers, offering a portfolio-style presentation with image galleries and a shop feature, although e-commerce functionality appears limited. The business is relatively new, with domain registration dating back to 2021, and operates on the Cargo Collective platform. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics for tracking, but lacks advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but improvements are needed in DNS security and compliance documentation. Overall, the website is professional and functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

H

Hochschulallianz für Angewandte Wissenschaften (HAWtech)

hawtech.de

46

HAWtech is a German university alliance focused on applied sciences and engineering education, uniting six leading universities of applied sciences. The website serves as an information portal for students, researchers, and industry partners, emphasizing collaboration in teaching, research, and innovation. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes privacy-compliant cookie consent and analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting the alliance's mission effectively.

E

Editora Hogrefe CETEPP - Centro Editor de Testes e Pesquisas em Psicologia LTDA

hogrefe.com.br

61

Editora Hogrefe CETEPP is a well-established Brazilian subsidiary of the European Hogrefe Publishing Group, specializing in psychology-related publications and psychometric instruments. The company operates a professional e-commerce platform targeting psychology professionals, educators, and students in Brazil. Their extensive catalog and 75 years of global experience position them as a reputable player in the education and retail sectors. Technically, the website is built on Magento with modern JavaScript libraries and is hosted on AWS infrastructure, offering a moderate performance and good mobile optimization. Security practices include HTTPS enforcement and secure login forms, though there is room for improvement in security headers and privacy compliance mechanisms. Overall, the website is trustworthy and professional, with clear contact information and social media presence enhancing credibility.

M

Moritz Schermbach

moritzschermbach.ch

42

Moritz Schermbach is a Swiss-based professional photographer specializing in photography and cinematography services including still lifes, portraits, fashion, and landscapes. The website serves as a portfolio showcasing artistic works primarily targeting a general audience interested in visual arts. The business operates on a small scale with a niche local market focus in Basel, Switzerland. Technically, the website employs older versions of jQuery and Bootstrap frameworks, alongside Google Analytics and Tag Manager for visitor tracking. The site is mobile responsive and has a moderate performance profile but lacks modern CMS or advanced frameworks. Security posture is basic with no visible security headers or HTTPS enforcement details in the provided content. Privacy compliance is minimal with no privacy or cookie policies present, and no GDPR compliance indicators. Contact information is limited but present in meta tags. Overall, the site is functional and professional but requires improvements in security, privacy, and technology modernization to enhance trust and compliance.

A

Arbeitsmarktservice Österreich (AMS)

berufskompass.at

56

Berufskompass is a career guidance platform operated by the Austrian Public Employment Service (AMS), providing job seekers and career changers in Austria with tools and information for career orientation and job matching. The website is government-affiliated, authoritative, and targets the Austrian labor market. Technically, the site uses a modular JavaScript stack including RequireJS, Knockout.js, and jQuery, with a custom CMS and moderate performance. Security posture is good with HTTPS and a strict Content-Security-Policy header, though additional headers and cookie consent mechanisms are recommended. The site is accessible, professional, and trustworthy, but could improve privacy compliance and mobile optimization.

M

Manual Moderno

manualmoderno.com

63

Manual Moderno is a well-established Mexican publishing company specializing in educational and professional books, particularly in health sciences, psychology, and nutrition. The company operates a Magento-based eCommerce platform offering physical books, e-books, exclusive distributions, and evaluation instruments. Their market position is strong within Mexico and Latin America, targeting educational institutions, professionals, and the general public interested in health-related literature. The website demonstrates consistent branding and good content quality, supported by a long-standing domain registration since 2001. Technically, the website leverages Magento with modern JavaScript libraries such as RequireJS and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and has good SEO practices. However, some security enhancements are recommended, including enabling DNSSEC, adding security headers, and implementing a cookie consent mechanism to improve privacy compliance. From a security perspective, the site uses HTTPS and has domain transfer protections, but lacks published security policies or incident response contacts. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website presents a moderate to good security posture but could improve privacy compliance and technical security hardening. The domain WHOIS data aligns well with the business profile, showing legitimacy and consistency. The company maintains active social media channels and provides clear contact information, enhancing trustworthiness.

S

Sednove Inc.

extenso.live

60

Extenso.live is a technology SaaS platform developed by Sednove Inc., offering a unique no-code and low-code platform for website and application creation. The platform targets webmasters, developers, and designers seeking to build multilingual and high-performance sites without deep coding knowledge. The site demonstrates a professional market position with over 2500 sites created using Extenso, trusted by notable companies such as Bombardier and CN. Technically, the website employs a modern tech stack including jQuery, Bootstrap, RequireJS, and Google Analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and secure forms, though lacking explicit security headers and privacy policies. The WHOIS data is privacy protected, common for tech companies, and no suspicious patterns were detected. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy compliance and security best practices.

P

Plan International Deutschland e.V.

plan.de

67

Plan International Deutschland e.V. is a well-established non-profit child rights organization operating globally with a focus on improving the lives of children, especially girls, through sponsorship and humanitarian aid. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to donors and supporters. Technically, the site uses TYPO3 CMS with modern JavaScript frameworks and includes privacy and cookie consent mechanisms, indicating compliance with GDPR and user privacy standards. Security posture is strong with HTTPS and secure forms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, supporting legitimacy and trustworthiness.

C

Company Record Label

companyrecordlabel.com

45

Company Record Label operates as a niche independent record label and art studio, focusing on music releases, artist promotion, and creative studio projects. The website presents a minimalistic design with basic navigation and branding elements, targeting a general audience interested in music and art. The business appears small and was founded in 2014, consistent with the domain registration date. The company leverages Kirby CMS and custom web fonts, hosted by DreamHost, LLC, indicating a moderate level of technical infrastructure. From a security perspective, the website uses HTTPS but lacks DNSSEC and security headers, which are important for enhancing domain and web security. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with data protection regulations such as GDPR. The absence of contact information and incident response channels further limits trust and transparency. No analytics or tracking technologies were detected, suggesting minimal user data collection. Overall, the website is functional but basic, with moderate performance and limited mobile optimization. The security posture is average, with room for improvement in DNS security and HTTP header configurations. The lack of privacy and cookie policies, as well as contact details, reduces the site's compliance and business credibility scores. Strategic improvements in these areas would enhance trustworthiness and regulatory compliance.

R

Reisebank AG

reisebank.de

69

Reisebank AG operates as a specialized financial institution in Germany, focusing on currency exchange and precious metals sales both through a large network of physical branches and an online webshop. The company positions itself as a trusted expert for travel money and gold/silver products, targeting travelers and business customers. The website reflects a mature digital presence built on Magento Commerce, integrating modern technologies such as RequireJS, KnockoutJS, and Usercentrics for consent management. Security measures include HTTPS enforcement, captcha on login forms, and cookie consent mechanisms, indicating a solid security posture. However, the absence of a public security policy or incident response contact suggests room for improvement in transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting Reisebank's market position as a reliable financial service provider.

W

Wirhelfen.shop

wirhelfen.shop

71

Wirhelfen.shop is a charitable e-commerce platform affiliated with Caritas, focused on enabling easy, fast, and impactful donations alongside sustainable product sales. The website targets a general audience interested in social aid and sustainability, operating primarily in Austria. The platform leverages Magento 2 technology and integrates multiple marketing and analytics tools such as Google Tag Manager, Klaviyo, and New Relic for performance monitoring. The domain registration data aligns well with the business profile, indicating legitimacy and consistent geographic focus. Security posture is adequate with HTTPS enforced and domain transfer protections, though improvements are recommended in security headers and explicit policy disclosures. Privacy compliance is basic with a cookie consent mechanism but lacks a clearly accessible privacy policy. Overall, the website presents a professional and trustworthy front for its non-profit mission.

M

markt.de GmbH & Co. KG

markt.ch

64

Markt.de GmbH & Co. KG operates a well-established online classifieds platform targeting private and commercial users in Germany. Founded in 2005 and part of the Markt Gruppe, the company offers a broad range of classified ad categories including vehicles, real estate, jobs, services, pets, and electronics. The platform supports free and paid ads, serving millions of listings with a focus on ease of use and comprehensive search capabilities. The website is professionally designed with consistent branding and good content quality, targeting a general audience without adult content exposure on the main domain.

S

Sednove Inc.

sednove.com

61

Sednove Inc. is a Canadian technology company specializing in custom digital solutions for businesses, including software, dashboards, system interconnection, mobile applications, and secure hosting. The company targets businesses needing rapid adaptation and digital transformation, positioning itself as a niche provider with a strong focus on tailored solutions. The website reflects a mature and professional business with a consistent brand and reputable client base. Technically, the site uses modern JavaScript libraries and frameworks, a CMS named Extenso, and is hosted with a registrar Tucows Domains Inc. The site is mobile optimized and SEO friendly but lacks some advanced security headers and privacy compliance features. Security posture is good with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and adding explicit security policies. Overall, the website is trustworthy and professional, though it lacks explicit privacy and cookie policies, which impacts compliance scores.

O

Ouvoir.ca

ouvoir.ca

56

Ouvoir.ca is a French-language Canadian media platform focused on film discovery, cinema listings, and streaming information primarily targeting the Quebec region. The website offers comprehensive search capabilities for films, actors, and cinema schedules, supported by a modern technical infrastructure including jQuery, Google Tag Manager, and Google Maps API. The platform integrates advertising and tracking services such as PubMatic and ComScore, indicating a monetization model based on ads. Security posture is adequate with HTTPS and domain protection statuses, but lacks advanced security headers and formal privacy or cookie policies. The absence of contact information and vulnerability disclosure mechanisms suggests room for improvement in transparency and compliance. Overall, the site is functional, well-branded, and serves a niche media audience effectively.

S

Sednove

where2watch.ca

57

Where2watch.ca is a Canadian media platform focused on providing users with comprehensive movie search capabilities, including information about movies, actresses, directors, and filmmakers. The platform offers listings for new movies in theaters, streaming services, TV schedules, and rankings across various streaming platforms. The website targets general audiences interested in movie discovery and viewing options within Canada. Technically, the site employs a modern tech stack including jQuery, Google Tag Manager, and Google Maps API, hosted by Wild West Domains Canada, Inc. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is moderate with consistent WHOIS data and a clear business model. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices.

R

ratiopharm GmbH

ratiopharm.de

67

ratiopharm GmbH is a well-established German pharmaceutical company specializing in generic medicines and health solutions, operating under the global Teva Pharmaceutical Industries umbrella. The website reflects a mature digital presence with a focus on product information, health advice, and professional services targeting both consumers and healthcare professionals. The technical infrastructure is built on TYPO3 CMS with modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with corporate branding.

A

abcpremium GmbH

sapmerchandise.com

66

SAP Merchandise operates an e-commerce platform specializing in branded merchandise for SAP customers and employees, primarily serving the Europe, Middle East, Africa, and North America regions. The business model focuses on B2C retail with dedicated stores for general customers and SAP employees, supporting multiple languages. The company, abcpremium GmbH, founded in 2010, positions itself as a niche retailer within the SAP ecosystem, emphasizing climate neutrality and corporate branding. Technically, the website is built on Magento 2 with a modern tech stack including jQuery, RequireJS, and Amasty extensions. The site is hosted behind Cloudflare DNS and uses HTTPS with a clientTransferProhibited domain status, indicating a moderate level of domain security. Performance and mobile optimization are good, though accessibility and SEO optimizations are basic. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No published security policy or incident response contacts were found, which could be improved to strengthen trust and readiness. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers, DNSSEC, and transparency around security policies would enhance its security posture and business credibility.