Security Directory

H

Herber & Herber Werbeagentur

herber-herber.de

51

Herber & Herber Werbeagentur is a well-established advertising agency serving the Saarland, Luxemburg, and Dreiländereck regions, with over 30 years of experience. They specialize in website development, consulting, strategy, and digital marketing, positioning themselves as a trusted Google Partner. Their client base spans multiple industries including social institutions, handcraft, tourism, real estate, healthcare, automotive, and more. The website reflects a professional and consistent brand image with clear navigation and comprehensive content. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Carousel, and integrates advanced marketing and analytics tools including Google Tag Manager, Matomo (self-hosted), Microsoft Clarity, and smartsupp chat. The site is mobile-optimized and implements a robust cookie consent mechanism compliant with GDPR. From a security perspective, HTTPS is enforced and privacy-friendly analytics are used. However, explicit security headers and published security policies or incident response information are absent. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. The overall risk is low, with strong business credibility and privacy compliance. Strategic recommendations include adding terms of service, security policies, and enhancing security headers to further strengthen trust and compliance.

P

Pitch Software GmbH

pitch.com

84

Pitch Software GmbH operates the website pitch.com, a mature and well-established SaaS platform providing modern presentation software designed for teams and businesses. The company positions itself as a trusted alternative to traditional presentation tools, offering collaborative features, customizable templates, and analytics to enhance pitching and presentation workflows. The website demonstrates a high level of digital maturity, leveraging modern web technologies such as React and Next.js, hosted on AWS infrastructure with CDN support for fast global delivery. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement, domain transfer protections, and comprehensive privacy and cookie policies aligned with GDPR requirements. However, DNSSEC is not enabled, and explicit incident response contacts or vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website and business exhibit high credibility and trustworthiness, supported by extensive social proof and integration partnerships.

M

MEGGLE BH

meggle.ba

46

MEGGLE BH operates as a prominent dairy brand in Bosnia and Herzegovina, offering a wide range of dairy products including milk, yogurts, cheeses, butters, and vegan alternatives. The website reflects a mature digital presence with multilingual support and strong branding consistency. Technically, the site is built on WordPress with modern tracking and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is trustworthy and professionally maintained, supporting MEGGLE BH's market position as a leading dairy provider in the region.

A

Antonio Commerce d.o.o. Mostar

antonio-commerce.com

39

Antonio Commerce d.o.o. Mostar operates as a small retail and wholesale business specializing in office supplies, school supplies, sanitary products, banking equipment, and is an importer of Samsonite travel goods. The company targets local businesses and consumers in Mostar and surrounding regions. The website presents basic but functional content with clear navigation and a focus on product categories relevant to their market. Technically, the site uses common JavaScript libraries such as jQuery and tracking tools like Google Analytics and Google Tag Manager, but lacks advanced frameworks or CMS indications. Security posture is moderate with domain registration protections but lacks visible HTTPS enforcement and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is moderately trustworthy but would benefit from enhanced security and compliance features.

U

Userflow

userflow.com

72

Userflow is a technology company specializing in no-code user onboarding software designed to help SaaS providers create in-app onboarding flows, product tours, checklists, and surveys. The company positions itself as a trusted solution with over 500 software providers relying on its platform, emphasizing ease of use and rapid deployment without developer involvement. Their market position is strengthened by positive customer testimonials and a high G2 rating. Technically, Userflow leverages a modern web stack including Webflow CMS, various analytics and marketing tools such as Google Tag Manager, Mixpanel, Heap, VWO, and ContentSquare. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides comprehensive privacy and security policies. However, explicit incident response contacts and vulnerability disclosure mechanisms are not evident, suggesting areas for improvement in transparency and readiness. Overall, Userflow presents a professional, trustworthy online presence with strong business credibility and technical maturity. The absence of WHOIS data slightly impacts domain trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing incident response visibility, adding vulnerability disclosure, and continuous auditing of third-party scripts to maintain security posture.

P

Pon

jobsatpon.com

67

Pon is a well-established international mobility solutions company with a strong presence in automotive and bicycle sectors. The website serves as a professional career portal showcasing job opportunities, traineeships, and company culture primarily in Dutch with multi-language support. The technical infrastructure leverages modern web technologies including React, Weglot for translations, and Recruitee ATS platform, hosted behind Cloudflare DNS and CDN services. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit privacy policies would enhance compliance and trust. Overall, the site is professional, trustworthy, and well-aligned with Pon's business stature.

B

Bpifrance

bpifrance.fr

67

Bpifrance is the French public investment bank dedicated to supporting businesses across their lifecycle, from startup funding to stock market listing. It offers a comprehensive range of financing solutions including credit and equity investments, positioning itself as a key player in France's economic development and innovation ecosystem. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting its role as a trusted public institution. Technically, the site leverages Drupal CMS, integrates Google Maps API, Matomo analytics, and Google Tag Manager, indicating a modern and well-maintained infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public vulnerability disclosure policy is noted. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates high business credibility and trustworthiness, suitable for its public institution status.

C

Capgemini

capgemini.com

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology with deep sector expertise. The company targets enterprises and governments worldwide, positioning itself as a trusted partner for digital innovation and transformation. The website reflects a mature digital infrastructure built on WordPress with modern technologies such as React and Bootstrap, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, comprehensive security headers, and adherence to recognized frameworks like ISO 27001 and NIST. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact channels for security and data protection inquiries. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

Business France is a French public advisory agency dedicated to supporting the internationalization of the French economy. It assists companies in export development and promotes France's attractiveness to foreign investors. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services, network, and expertise. Technically, it uses modern frameworks such as Nuxt.js and Tailwind CSS, with good performance and SEO practices. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies. Overall, the site represents a trustworthy government entity with a strong digital presence.

L

L'IDEM

lidem.eu

59

L'IDEM is a well-established higher education institution specializing in creative and digital arts education, with campuses in France and Spain. The website presents a professional image with comprehensive information about their programs, certifications, and events. The institution targets students, professionals, and companies seeking training or apprenticeships in creative and digital fields. Technically, the website is built on WordPress with modern plugins and integrates multiple analytics and marketing tools such as HubSpot and Facebook Pixel. Security posture is good with HTTPS and reCAPTCHA usage, though it lacks explicit security headers and published security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market segment.

F

France AutoTech

franceautotech.org

40

France AutoTech is a French non-profit association that brings together startups innovating in the automotive mobility sector. The organization focuses on promoting innovation, fostering collaboration among members, and advocating for the ecosystem with media and public authorities. The website reflects a professional and consistent brand presence, targeting startups and stakeholders in automotive technology. Technically, the site is built on WordPress with a moderate tech stack including popular plugins and Google Analytics integration. The site is hosted by OVH sas and uses HTTPS with a valid SSL certificate, though DNSSEC is not enabled. Security posture is moderate with room for improvement in security headers and published policies. Privacy compliance is basic, lacking explicit cookie consent mechanisms and detailed GDPR compliance statements. Business credibility is strong given the domain age, partnerships, and clear association identity. Overall, the website is a reliable resource for the French automotive tech startup community but should enhance privacy and security practices to improve compliance and trust.

Ducati is a globally recognized premium motorcycle manufacturer, offering a range of high-performance bikes and engaging with enthusiasts through racing and dealer networks. The website serves as a comprehensive platform for product information, racing updates, and dealer contacts, targeting motorcycle enthusiasts and potential buyers worldwide. Technically, the site employs modern web technologies including Google Tag Manager, Microsoft Clarity, and multiple tracking pixels, hosted likely on Akamai infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. Overall, the site presents a professional and trustworthy digital presence, though the lack of WHOIS data transparency is noted. Strategic recommendations include enhancing visible security policies and maintaining rigorous third-party script audits.

V

Volkswagen D'Ieteren Finance

vdfin.be

62

Volkswagen D'Ieteren Finance operates as a financial services provider specializing in vehicle financing and leasing solutions primarily for Volkswagen customers in Belgium. The company targets businesses, private individuals, and dealers, offering tailored financial products to support vehicle acquisition and mobility. The website reflects a professional brand presence consistent with the Volkswagen and D'Ieteren group, emphasizing mobility and finance services. Technically, the website is built using modern web technologies including React and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates moderate performance with good design quality and user experience. However, some areas such as accessibility and SEO could be improved. The website uses HTTPS with a strong SSL configuration but lacks explicit security headers and published security policies. From a security perspective, the site shows good baseline practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by the presence of privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. However, the absence of incident response contacts and vulnerability disclosure policies suggests room for maturity improvement. Overall, the website and domain appear legitimate and professionally managed, though the WHOIS data is restricted, limiting transparency. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility, and expanding SEO metadata to strengthen trust and compliance.

C

CUPRA

cupraofficial.pl

66

The website www.cupraofficial.pl serves as the official Polish portal for the CUPRA automotive brand, focusing on sporty personal vehicles. It provides comprehensive information about car models, services, financing options, and electromobility initiatives. The site is well-structured with clear navigation and professional branding consistent with the Volkswagen Group's standards. Technically, it leverages Adobe Experience Manager CMS hosted on Volkswagen Group's cloud infrastructure, integrating modern analytics and marketing tools such as Google Tag Manager and Adobe Experience Platform. The site implements cookie consent via OneTrust, indicating attention to privacy compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are absent. WHOIS data is unavailable due to registry policies, but the site’s professional presentation and domain usage suggest legitimacy. Overall, the site is a reliable and professional digital presence for CUPRA in Poland.

V

Volkswagen Group Polska Sp.

seat.pl

62

SEAT Polska operates as the official Polish branch of the SEAT automotive brand under Volkswagen Group Polska Sp. The website serves as a comprehensive platform for consumers in Poland to explore, configure, and purchase new and certified used SEAT vehicles. It offers a wide range of services including financing, leasing, test drives, after-sales service, and a virtual showroom, positioning itself as a key player in the Polish automotive market. The digital infrastructure is built on Adobe Experience Manager with integration of modern analytics and marketing tools such as Google Tag Manager and Adobe Analytics, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong brand presence and consistent business information. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

A

Audi Polska

audi.pl

68

Audi Polska operates as the official distributor and representative of the Audi brand in Poland, offering a comprehensive range of new and used vehicles, financing options, and after-sales services. The website serves as a digital showroom and sales platform, targeting both private customers and businesses. Audi Polska benefits from strong brand recognition and a premium market position within the automotive sector in Poland. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Adobe Experience Manager headless CMS, Google Tag Manager, and live chat support, ensuring a seamless user experience and effective marketing analytics. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms in place, although explicit incident response and vulnerability disclosure policies are not publicly visible. Overall, the domain and website exhibit high legitimacy and trustworthiness consistent with a major automotive brand.

V

Voyado

voyado.com

55

Voyado is a Sweden-based technology company specializing in customer experience platforms tailored for retail and e-commerce sectors. Their platform integrates CRM, loyalty management, AI-driven product discovery, and retail media to enhance customer engagement and increase revenue. With over 400 retail brands as customers and a strong market presence, Voyado positions itself as a leading solution provider in the Nordic retail technology market. The website reflects a mature, professional business with comprehensive product offerings and strong customer testimonials. Technically, the site is built on WordPress with HubSpot integrations, leveraging modern web technologies and SEO best practices. The infrastructure is hosted on AWS with robust performance and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, although DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. Overall, the site demonstrates a high level of digital maturity and business credibility, with minor areas for security enhancement. Recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

P

Production Resource Group, L.L.C.

prg-proshop.com

62

PRG Proshop is a well-established e-commerce platform specializing in the sale of used professional production equipment including audio, lighting, staging, and video gear. The company positions itself as a leading supplier in the entertainment and event technology sector, targeting production professionals and corporate event planners. The website reflects a professional business model with clear branding and a broad product catalog. Technically, the site uses a mix of legacy and modern web technologies, including jQuery, Bootstrap, and Google Analytics, hosted on a domain registered with GoDaddy. While the site is accessible and uses HTTPS, some outdated libraries and missing security headers present moderate security risks. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks a visible privacy policy or terms of service. Contact information and social media presence are clearly provided, enhancing business credibility.

E

EmbedSocial

embedsocial.com

74

EmbedSocial is a well-established technology company founded in 2012, providing a SaaS platform focused on user-generated content aggregation, social listening, social commerce, and Google Business Profile review management. The company serves a global audience of multi-location brands and marketers, boasting a customer base of over 300,000 brands worldwide. Their website reflects a mature digital presence with professional design, strong SEO, and comprehensive content relevant to their business domain. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, Ahrefs Analytics, and Intercom. The hosting infrastructure leverages Google Cloud DNS services, and the site is optimized for mobile and accessibility standards. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site employs HTTPS with good SSL configuration and domain registration protections. However, some security headers are not explicitly detected, and there is no published security policy or incident response contact information. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, EmbedSocial presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security header implementation and incident response transparency would further enhance their security posture and trustworthiness.

E

elink.io

elink.io

68

elink.io is a technology SaaS company specializing in content curation tools that enable users to save and edit web links and transform them into email newsletters, webpages, social bio links, and more. The platform targets a broad audience including marketing, sales, education, and remote teams, positioning itself as a comprehensive content creation solution. The website is professionally designed using modern web technologies such as Webflow, Google Analytics, and AWS hosting, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit privacy or cookie policies were found in the analyzed content. Overall, the website is safe, professional, and trustworthy, though improvements in privacy compliance and security best practices are recommended.

T

Treasure Data

treasuredata.com

75

Treasure Data is a leading enterprise Customer Data Platform (CDP) provider that leverages AI to deliver scalable data management and analytics solutions for Global 2000 companies. Their platform enables businesses to unify customer data and drive measurable business impact. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site uses modern web technologies including WordPress CMS, Google Tag Manager, New Relic monitoring, and Wistia for media, ensuring good performance and user experience. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. WHOIS data is unavailable or privacy protected, which slightly reduces transparency but does not detract from the overall legitimacy given the strong business indicators. Overall, Treasure Data’s website demonstrates a high level of professionalism, technical maturity, and compliance with privacy standards, positioning it well in the enterprise technology market.

A

Anheuser-Busch InBev Deutschland

ab-inbev.de

66

Anheuser-Busch InBev Deutschland operates as a major brewing company in Germany, offering a portfolio of premium beer brands including Corona, Beck's, and Spaten. The company emphasizes sustainability and social responsibility, targeting adult consumers and partners in the gastronomy sector. The website is built on WordPress, featuring modern web technologies such as lazy loading and Google Tag Manager for analytics and marketing. The site includes an age verification gate to comply with alcohol regulations and provides comprehensive privacy and cookie policies, indicating good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website reflects a professional and trustworthy corporate presence with a strong brand identity.

A

Anheuser-Busch InBev

ab-inbev.com

74

Anheuser-Busch InBev is the world's largest brewer, with a heritage spanning over 600 years. The company operates globally, producing and distributing more than 500 iconic beer brands. Their website reflects a mature enterprise with a strong focus on responsible drinking, sustainability, and investor relations. The digital infrastructure leverages modern technologies such as SvelteKit and Builder.io CMS, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, security headers, and an age verification gate to comply with legal drinking age requirements. Privacy compliance is good, with clear privacy and cookie policies, though explicit cookie consent mechanisms could be improved. Overall, the website projects high business credibility and professionalism.

Bremen Tourismus is the official tourism website for the city of Bremen, Germany, providing comprehensive information about attractions, accommodations, and travel tips for visitors. The site targets tourists and travelers interested in exploring Bremen and offers a government-backed platform for tourism promotion. The website is well-branded and consistent with official city services, indicating a strong market position in the hospitality and government sectors. Technically, the website employs modern JavaScript frameworks (Vue.js implied), integrates analytics tools such as Matomo and Google Analytics, and uses Cookiebot for GDPR-compliant cookie consent management. The hosting appears stable with INWX nameservers, and the site is served over HTTPS with good mobile optimization and accessibility features. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, explicit security headers and incident response policies are not evident in the provided data. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the official nature of the site. Overall, the website presents a low-risk profile with strong business credibility and moderate to good technical and security posture. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing contact information for incident response to further improve trust and compliance.

K

Korvo

korvo.co

62

Korvo is a specialized SaaS platform providing e-commerce infrastructure tailored for educators and content creators. It enables users to create and manage live workshops, digital products, online courses, and paid communities, integrating payment processing through iyzico. The platform targets experts and educators seeking to monetize their knowledge and scale their passion businesses. Korvo positions itself as a niche player with a comprehensive suite of tools for event and product management, customer tracking, and income reporting. Technically, the website is built on modern frameworks such as Next.js and React, with strong mobile optimization and good SEO practices. It employs multiple analytics and tracking services including Google Analytics, Hotjar, Microsoft Clarity, and Facebook Pixel, all managed via Google Tag Manager. Security posture is solid with HTTPS enforced and secure payment integration, though some security headers and explicit security policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. No direct contact emails or phone numbers are provided, which may affect user trust slightly. Overall, Korvo demonstrates a mature digital presence with a strong focus on user experience and business functionality.

E

Efilli

istanbulprivacysummit.com

66

Istanbul Privacy Summit 2025 is a premier event organized by Efilli, focusing on privacy, data protection, and cybersecurity with a special emphasis on AI and regulatory trends. The summit attracts a diverse audience including regulators, industry experts, and technology professionals, positioning itself as Turkey’s leading privacy event. The website is professionally designed using Webflow, integrates modern technologies such as Google Tag Manager and YouTube embeds, and provides comprehensive event details, speaker profiles, and sponsorship information. Security posture is strong with HTTPS and basic security best practices, though some security headers could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, the site demonstrates high professionalism and trustworthiness in content and presentation but would benefit from enhanced domain registration transparency and published security policies.

S

Semotion

semotion.de

53

Semotion is a German online marketing agency based in Magdeburg, specializing in SEO, SEA, content creation, and web analytics services. Established since 2008, the company positions itself as a top 100 SEO service provider and a certified Google Partner, offering personalized and data-driven marketing strategies to businesses and online shops in both B2B and B2C sectors. The website demonstrates a professional digital presence with clear service descriptions, client trust signals, and modern web technologies. Technically, the site is built on WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution, and employs Matomo Analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security headers and published security policies. Overall, the site is well-optimized for SEO and user experience, with moderate performance and good mobile responsiveness.

B

Blue Express

blue.cl

63

Blue Express is a Chilean parcel delivery and logistics company offering nationwide coverage with over 3,200 delivery points and competitive fixed pricing. The company targets individual consumers and entrepreneurs, providing a digital platform for shipping label creation, package drop-off, and e-commerce integration. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, supported by Cloudflare DNS and CDN services. Marketing and analytics are robust, leveraging multiple tracking pixels and tag managers to optimize user engagement and advertising effectiveness. Security posture is strong with HTTPS enforcement and comprehensive security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, Blue Express presents a professional, trustworthy, and user-friendly online presence aligned with its business objectives.

B

Bloomwell

bloomwell.de

47

Bloomwell operates a specialized healthcare platform focused on providing online medical cannabis prescriptions in Germany. The website offers telemedicine services and educational content about medical cannabis and alternative therapies, targeting patients seeking convenient access to cannabis prescriptions. The business positions itself as a niche digital healthcare provider within the German market. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern tools like Google Tag Manager and Cookiebot for compliance and analytics. The site demonstrates good digital maturity with responsive design and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies are not evident. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve by publishing explicit security policies and incident response information.

M

Melitta

melitta.de

58

Melitta operates a professional and well-structured e-commerce website focused on coffee products and coffee machines, targeting German-speaking consumers. The site demonstrates a mature digital infrastructure leveraging modern technologies such as Shopware CMS, Google Tag Manager, Matomo analytics, and Cloudflare for DNS and security. The presence of a cookie consent mechanism indicates attention to privacy compliance, although explicit privacy and terms of service policies were not found in the provided content. Security posture is strong with HTTPS and Cloudflare integration, but could be improved by adding explicit security headers and published security policies. Overall, the website is trustworthy, professional, and well-positioned in the retail coffee market.

H

Henkel

schwarzkopf-professional.com

64

Schwarzkopf Professional is a globally recognized brand under the Henkel umbrella, specializing in professional hair care products and education targeted at hairdressers. The website reflects a mature digital presence built on Adobe Experience Manager, integrating modern analytics and consent management tools. While the site is well-structured and professionally designed, the absence of WHOIS data and explicit privacy policies slightly detracts from its overall trustworthiness. Security posture is solid with HTTPS and cookie consent mechanisms, but could be improved with additional security headers and published policies. Overall, the site serves its B2B audience effectively with a focus on product information and educational resources.

F

Fashioncenter GmbH

lottosportshop.de

63

Fashioncenter GmbH operates the official Lotto Sport online shop in Germany, offering a broad range of branded sneakers, sportswear, and accessories for men, women, and children. The website positions itself as a trusted retail channel with free shipping over 30€, climate-neutral delivery via DHL, and recognized payment options including Klarna and PayPal. The business targets consumers seeking sporty and retro-inspired fashion with a family-friendly approach. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates advanced tracking and consent management tools such as Google Tag Manager and Usercentrics. Security measures include HTTPS enforcement and Google reCAPTCHA on login forms, although explicit security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site demonstrates a mature e-commerce infrastructure with good user experience and trust indicators.

B

Brauerei Beck & Co

becks.de

72

Brauerei Beck & Co operates the BECK’S beer brand, a well-established German brewery with a rich history dating back to 1873. The website showcases a diverse product portfolio, brewery tours, and brand marketing campaigns, targeting adult beer consumers primarily in Germany. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and frameworks such as UIkit and jQuery, integrates multiple marketing and analytics tools, and enforces HTTPS with an age verification gate to comply with alcohol regulations. Security posture is solid with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, including phone numbers and physical address. Overall, the site reflects a mature digital presence aligned with a large enterprise beverage brand.

Jack Daniel's is a globally recognized premium Tennessee whiskey brand with a rich heritage dating back to 1866. The website serves as a brand portal offering product information, heritage storytelling, and visitor engagement. It targets adult consumers legally permitted to purchase alcohol, emphasizing responsible drinking and compliance with age restrictions. The site is professionally designed, mobile-optimized, and leverages modern web technologies such as Next.js and React for a performant user experience. Privacy and cookie consent management are implemented via OneTrust, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and standard security headers present, though explicit incident response and vulnerability disclosure information are absent. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly indicate legitimacy. Overall, the site is a well-maintained digital asset supporting Jack Daniel's market position as a leading whiskey brand.

M

Marshall

marshall.com

74

Marshall.com is a professionally designed e-commerce website representing the established Marshall brand, known for premium audio equipment including amplifiers, headphones, earbuds, and speakers. The site targets music enthusiasts and consumers seeking high-quality audio products, offering secure payment options and worldwide shipping. The technical infrastructure leverages modern frontend technologies such as React and Chakra UI, with integration of analytics tools like Google Tag Manager and Voyado Analytics, indicating a mature digital presence. Security posture is moderate; while HTTPS is implied and secure payments are advertised, the absence of explicit security headers and privacy policies suggests room for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and branding strongly indicate a legitimate business. Overall, the site is well-structured, mobile-optimized, and user-friendly, but would benefit from enhanced transparency in privacy and security practices.

I

infield.live

infield.live

60

infield.live is a German-focused online platform dedicated to festival and event discovery, ticket booking, and travel planning. It offers users access to over 125 festivals and conferences, emphasizing flexible ticket booking with free cancellation. The platform targets festival enthusiasts in Germany, positioning itself as a niche media and ticketing service within the entertainment sector. The website is professionally designed with consistent branding and good content quality, supporting its market presence as a specialized event platform. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, MediaElement.js for video playback, and integrates tracking tools such as Matomo, Facebook Pixel, and Google Tag Manager. The site is mobile-optimized and implements GDPR-compliant privacy and cookie policies, reflecting a mature digital infrastructure. However, some video playback issues and missing advanced security headers indicate areas for technical improvement. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks certain security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by Identity Digital Inc., which is typical for small to medium websites and does not raise immediate trust concerns. Overall, infield.live presents a solid business and technical foundation with a good security posture for its size and sector. Strategic enhancements in security headers and video content delivery would further strengthen its resilience and user experience.

T

Tehno-mag

tehno-mag.hr

71

Tehno-mag is a Croatian e-commerce retailer specializing in electronics and gadgets from well-known brands. Established in 2015, it offers fast and reliable delivery services with multiple payment options including installments up to 36 months. The website targets general consumers in Croatia, providing a broad range of technology products with a focus on convenience and customer service. The business maintains a moderate market position as a local electronics webshop with competitive offerings. Technically, the website employs modern tracking and consent management technologies such as Google Analytics, Google Tag Manager, Cookiebot, and Cloudflare DNS/CDN services. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although no explicit CMS was detected, suggesting a custom-built platform. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and integrates Google reCAPTCHA for bot protection. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not detected and should be implemented to enhance security posture. No vulnerabilities or exposed sensitive data were found. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data is consistent with the business claims, showing a legitimate and established online presence. Strategic recommendations include enhancing security headers, auditing third-party scripts, and formalizing security and incident response policies to further strengthen trust and compliance.

V

Volkswagen Group Polska Sp. z o.o.

vwdostawcze-sklep.pl

61

The website 'vwdostawcze-sklep.pl' serves as an official e-commerce platform for Volkswagen commercial vehicle accessories in Poland. It offers a wide range of original Volkswagen parts and accessories, targeting Volkswagen commercial vehicle owners and enthusiasts. The platform is well-branded with consistent Volkswagen imagery and provides categorized product listings by vehicle models and accessory types. The business is positioned as a trusted distributor within the automotive retail sector, supported by Volkswagen Group Polska and its subsidiaries. Technically, the website is built on modern frameworks such as Next.js and React, ensuring a responsive and user-friendly experience. It integrates Google Analytics and CookieYes for privacy compliance and tracking. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though some security headers could be enhanced. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration aligns with the business profile, indicating legitimacy. Overall, the site demonstrates a good balance of business credibility, technical maturity, and privacy compliance.

TwojaFlota.pl is a professional fleet management service platform operated by Volkswagen Group Polska sp. z o.o., offering a comprehensive service program for managing vehicle fleets, primarily targeting companies with multiple vehicles. The website is well-branded with Volkswagen Group affiliations and provides clear information about the program, including downloadable documents, a contact form, and detailed privacy and cookie policies. The technical infrastructure uses modern web technologies including jQuery, js-cookie, Google Analytics, and Google Tag Manager, hosted via home.pl S.A., a reputable Polish hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS implied, cookie consent implemented, and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the website demonstrates a solid business credibility and privacy compliance, with no signs of malicious or adult content.

V

Volkswagen Лекотоварни автомобили България

vw-lekotovarni.bg

51

Volkswagen Лекотоварни автомобили България operates an official website dedicated to Volkswagen's light commercial vehicles in Bulgaria, offering detailed information on models, special offers, financing, service, and accessories. The site targets businesses and consumers interested in commercial vehicles, positioning itself as a key regional player backed by the global Volkswagen brand. Technically, the website employs modern web technologies including React and Next.js, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Volkswagen's brand integrity in the Bulgarian market.

M

Manual.to

manual.to

71

Manual.to is a technology company specializing in digital work instruction software aimed at streamlining operations and empowering workforces. The website positions itself as a niche SaaS provider focused on process optimization and efficiency enhancement for businesses. The company maintains a consistent brand presence across multiple social media platforms and employs modern web technologies including WordPress, Google Tag Manager, and Cookiebot for consent management. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though lacks published security policies or incident response details. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

D

D’Ieteren Automotive SA/NV

dieteren.be

58

D’Ieteren Automotive SA/NV is a well-established Belgian company with over two centuries of history, specializing in automotive distribution, mobility services, and energy solutions. The company targets both individual consumers and businesses, offering a broad portfolio including new and used vehicles, business mobility services, bicycles, energy solutions, and financing options. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content in French. Technically, the site employs modern JavaScript libraries and Google services for analytics and security, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and reCAPTCHA integration, though some security headers and explicit incident response contacts are absent. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. WHOIS data is privacy protected, which is justified for this corporate entity. Overall, the site is trustworthy, professional, and aligned with the company's business model and market position.

M

My Way | Betrouwbare tweedehandswagens met kwaliteitslabel

myway.be

68

My Way is a Belgian-based company specializing in the sale of certified second-hand vehicles, targeting Dutch-speaking consumers in Belgium. The website presents a professional and consistent brand image, emphasizing quality and trust in the used car market. The business model focuses on retailing thoroughly checked vehicles with quality labels, positioning itself as a reliable provider in the transportation sector. Technically, the website is built on modern frameworks such as Gatsby and React, leveraging Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization and SEO practices, although some security headers are not explicitly detected. The security posture is generally good with HTTPS enabled and bot protection in place, but could be improved by adding additional security headers and ensuring secure form handling. Privacy compliance is basic with a cookie consent mechanism present, but no explicit privacy or terms of service pages were found. Overall, the website is safe, professional, and trustworthy, with no indications of adult or malicious content. WHOIS data is restricted due to registry policies, which is common for .be domains and does not detract from the site's legitimacy.

M

MeetDeal

meetdeal.fr

62

MeetDeal is a French-based company specializing in customer journey and lead generation solutions tailored for the automotive industry. Founded in 2017 and operating under the parent company DisruptDeal, MeetDeal offers a suite of services including human live chat, lead generation via social networks, live video streaming in studios, and mobile live streaming applications. The company positions itself as a leading conversational lever to optimize business performance in the automotive sector, serving dealerships and manufacturers with a strong omnichannel approach. The website reflects a professional and modern digital presence with multi-language support and extensive client and partner showcases. Technically, the site leverages modern JavaScript frameworks like Alpine.js, integrates multiple tracking and marketing tools such as Google Tag Manager, Pinterest Tag, and LinkedIn Insight, and hosts media content on Amazon AWS. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR mechanisms. Overall, the website demonstrates a mature digital infrastructure and a credible business model with strong industry partnerships.

H

Hekla

hekla.is

69

Hekla hf. is a prominent Icelandic automotive dealership representing major brands such as Volkswagen, Mitsubishi, Audi, Skoda, and Ora. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, parts and accessories sales, and electric vehicle charging solutions. Their digital presence includes an e-commerce platform and customer portals, reflecting a mature digital infrastructure. The website is well-structured, mobile-optimized, and integrates multiple marketing and analytics tools, indicating a strong digital marketing strategy. However, the absence of publicly available WHOIS data and explicit privacy and terms of service pages slightly detracts from the overall trustworthiness and compliance posture. Security practices are generally sound with HTTPS enforced and no obvious vulnerabilities, but improvements in security headers and incident response disclosures are recommended.

D

Domingo Alonso Group

domingoalonsoocasion.com

53

Domingo Alonso Ocasión operates a professional online platform specializing in the sale and purchase of used and Km 0 vehicles in the Canary Islands. The website positions itself as the largest used car portal in the region, offering a variety of automotive brands and services including vehicle comparison and direct purchase from customers. The business is part of the larger Grupo Domingo Alonso, a recognized entity in the automotive sector. Technically, the website employs modern frontend technologies such as Vue.js and Tailwind CSS, integrates Matomo and Google Tag Manager for analytics, and uses Didomi for GDPR-compliant cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and has basic security best practices in place, though it lacks explicit security policies and could improve DNS security by enabling DNSSEC. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained.

B

Beamer

getbeamer.com

81

Beamer is a SaaS company providing a customer communication platform focused on product releases, user engagement, and feedback collection. Their platform offers a modern changelog, NPS surveys, in-app notifications, and user onboarding solutions integrated with Userflow. The website is professionally designed, mobile-optimized, and rich in content targeting product and marketing teams in SaaS businesses. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Heap Analytics, and Hotjar, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, GDPR compliance, and a bug bounty program, though WHOIS data is privacy protected or unavailable. Overall, the site demonstrates a mature digital presence with good privacy and security practices.

S

SivaOnline

siva.pt

66

The website siva.pt, titled 'SivaOnline', appears to be a small business site based in Portugal. The content is minimal and primarily technical, focusing on cookie consent and analytics integration. The site uses modern technologies such as Google Tag Manager, OneTrust for cookie consent, and D3.js for data visualization. However, there is a lack of explicit business information, contact details, and privacy or terms of service policies, which limits transparency and user trust. The technical infrastructure is moderately modern but lacks visible security headers and comprehensive privacy compliance indicators. Overall, the security posture is average with room for improvement in policy disclosures and security best practices. The domain registration data is consistent with the website's country and business presence, supporting legitimacy. Strategic recommendations include enhancing privacy disclosures, adding contact information, and implementing security headers to improve trust and compliance.

V

Volkswagen privredna vozila Srbija

vw-privrednavozila.rs

62

Volkswagen privredna vozila Srbija operates as the official Volkswagen commercial vehicles dealer and service provider in Serbia, offering a comprehensive range of commercial vehicle models, configuration tools, financial services, and after-sales support. The website is well-branded and targets business customers and commercial vehicle users, providing detailed product information and promotional offers. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

P

Porsche Romania SRL

fararabla.ro

50

The website fararabla.ro is a promotional campaign site for Volkswagen vehicles in Romania, specifically highlighting hybrid models such as Golf Plug-in Hybrid, Tiguan Plug-in Hybrid, and Taigo. It targets Romanian consumers interested in purchasing Volkswagen cars with financing options through Porsche Finance Group. The site provides detailed vehicle information, pricing, and a contact form for personalized offers. Technically, the site uses modern marketing and tracking technologies including Google Tag Manager, Taboola Pixel, and OneTrust for cookie consent, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers are not explicitly detected and could be improved. Privacy compliance is strong due to GDPR-aligned policies linked from Volkswagen Romania's official site. The domain is newly registered but consistent with the business context, indicating a campaign-specific domain. Overall, the site is professional, trustworthy, and safe for general audiences.