Security Directory

Peek & Cloppenburg operates a large-scale e-commerce platform specializing in fashion retail, offering a wide range of clothing, shoes, and accessories from over 300 top brands. The company targets a broad general audience in Germany and maintains a strong market position as a well-established fashion retailer with both online and physical store presence. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as Next.js and React, along with marketing and consent management tools like Kameleoon and Cookielaw.org. The site is mobile-optimized and provides a professional user experience with clear navigation and comprehensive product categorization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and explicit incident response contacts are not evident. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies in the provided content. Overall, the website is trustworthy and professionally managed, with room for improvement in privacy transparency and security disclosures.

V

VMware by Broadcom

vmware.com

75

VMware by Broadcom is a leading enterprise technology company specializing in cloud computing, virtualization, and infrastructure optimization. The website presents a professional and consistent brand image aligned with its parent company Broadcom. The site targets enterprise customers and IT professionals seeking advanced cloud, networking, and security solutions. Technically, the website uses modern frameworks such as React and integrates industry-standard tools like Google Tag Manager and OneTrust for analytics and cookie consent management. Performance and mobile optimization are good, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented; however, explicit security headers and published security policies are absent in the provided data. WHOIS data is missing or inaccessible, which is unusual for a major enterprise domain but may be due to registry or privacy policies. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in security transparency and privacy documentation.

S

Stripe, Inc.

stripe.network

71

Stripe, Inc. is a leading global financial infrastructure company providing a comprehensive suite of APIs for online payment processing and commerce solutions. The company targets internet businesses of all sizes, enabling them to accept payments and scale efficiently with advanced technologies including AI. Stripe holds a strong market position as a trusted fintech platform with enterprise-level services and certifications such as ISO 27001, SOC 2, and PCI DSS. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation tailored for a global audience. Technically, Stripe leverages modern frameworks like React and robust cloud hosting on AWS, ensuring fast performance and mobile optimization. Security posture is strong, with enforced HTTPS, comprehensive security headers, and transparent incident response and vulnerability disclosure policies. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, Stripe demonstrates high business credibility and trustworthiness, supported by transparent WHOIS data and domain longevity.

Further operates as a provider of modern EIS fund administration software, targeting venture capital funds and investors interested in startups. The company positions itself as a market leader in fund operations software, offering SaaS solutions to streamline fund management. The website content is professional but basic, focusing on describing the business and its services without extensive detail or visible trust signals such as certifications or client testimonials. Technically, the website employs modern frontend technologies including React, Bootstrap, and jQuery, with resources loaded from reputable CDNs. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or hosting provider information is discernible from the provided data. From a security perspective, the website lacks visible security headers and explicit privacy or security policies. HTTPS status and SSL configuration could not be confirmed from the data, and no contact information for incident response or data protection officers is present. The absence of WHOIS data for the domain is a significant concern, reducing trustworthiness and raising questions about domain legitimacy. Cookie consent is implemented via CookieYes, indicating some level of privacy compliance. Overall, the website presents a functional but minimal online presence with moderate technical maturity and limited security posture. Strategic improvements in transparency, security policies, and contact information would enhance trust and compliance.

U.S. News & World Report operates as a leading media company specializing in news, rankings, and analysis across various sectors including politics, education, and healthcare. The website serves a broad audience seeking authoritative information and rankings on colleges, hospitals, mutual funds, and cars. Their market position is strong, supported by comprehensive content and recognized brand presence. Technically, the website employs a modern technology stack including React, Google Tag Manager, and Tealium for analytics and marketing. Hosting and content delivery leverage Akamai and cloud services, ensuring fast performance and excellent mobile optimization. The site is well-structured with SEO and accessibility considerations, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements security headers, and uses cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public WHOIS record suggests privacy protection, which is typical for media companies but limits domain transparency. Overall, the website presents a low risk profile with strong trust indicators and professional content. Strategic recommendations include enhancing incident response visibility, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain security posture.

S

Sourcebuster

sbjs.rocks

52

Sourcebuster is a small technology-focused project offering a JavaScript library designed to track the sources of website traffic. The website serves primarily developers and marketers seeking to analyze visitor origins and tailor content accordingly. The business model is based on open source software, with code and documentation hosted on GitHub, positioning it as a niche tool in the web analytics space. Technically, the website is built using React and JavaScript, with a moderate performance profile and good mobile optimization. The site structure is clear and content is relevant, though accessibility and SEO optimizations are basic. There is no detected CMS or hosting provider information. The site lacks advanced security headers and privacy compliance features, which limits its security posture. From a security perspective, the site does not present critical vulnerabilities but lacks HTTPS verification and security best practices such as security headers and privacy policies. The absence of contact information and incident response details further reduces its security maturity. WHOIS data is unavailable due to TLD restrictions, which impacts domain trust verification. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance, and transparency to improve trust and compliance. Strategic improvements in these areas would strengthen its market position and user confidence.

D

DevITjobs.nl

devitjobs.nl

64

DevITjobs.nl operates as a specialized online job portal focusing on IT and software development vacancies within the Netherlands. The platform provides job listings, salary insights, company transparency, and community resources tailored to IT professionals and employers. Its market position is that of a niche player catering specifically to the Dutch IT job market, with extensions into other European countries through partner sites. The business model centers on connecting IT talent with employers via an accessible and modern web platform. Technically, the website leverages modern frontend technologies such as React and Leaflet for interactive maps, ensuring a responsive and user-friendly experience. The site is moderately performant and optimized for mobile devices, with good SEO practices evident through meta tags and structured content. However, accessibility features are basic and could be enhanced. From a security perspective, the site employs HTTPS and has mechanisms for error reporting but lacks explicit security headers and DNSSEC. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, indicating room for improvement in compliance and transparency. No WAF or blocking mechanisms were detected, and the domain registration is consistent and transparent. Overall, DevITjobs.nl presents a professional and trustworthy platform for IT job seekers and employers in the Netherlands, though it would benefit from enhanced privacy compliance and security best practices to strengthen user trust and regulatory adherence.

JustFeedback is a SaaS company specializing in feedback survey software designed to help businesses collect and analyze customer and employee feedback efficiently. Founded in 2014, it offers micro surveys such as NPS®, eNPS, CSAT, and CES to enable data-driven decisions and improve user experience. The company targets businesses seeking to enhance customer satisfaction and employee engagement through quick, focused surveys and real-time analytics. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its services. Technically, the website leverages modern web technologies including React and Next.js, hosted with Cloudflare DNS and integrated with Google Analytics and CookieYes for tracking and compliance. The site demonstrates good performance and SEO practices, with a responsive design and accessibility considerations. Privacy and cookie policies are present and include consent mechanisms, indicating a good level of GDPR compliance. From a security perspective, the site uses HTTPS with proper domain status protections but lacks DNSSEC and explicit security headers. No incident response or security policy pages were found, which could be improved. The domain registration is consistent and appropriate for the business age and type, with no suspicious patterns detected. Overall, the security posture is solid but could benefit from additional hardening and transparency. The overall risk assessment is low, with the site appearing trustworthy and professional. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding security headers to enhance protection and trust. The company should also consider providing direct contact information for security incidents to improve incident response readiness.

Outplay is a technology company offering a comprehensive sales engagement and automation platform designed primarily for SMBs and fast-scaling sales teams. Positioned as a cost-effective alternative to major competitors like Salesloft and Outreach, Outplay provides multi-channel outreach, sales automation, conversation intelligence, and extensive CRM integrations. The platform supports sales teams in increasing revenue and closing deals more efficiently through automation and analytics. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and employs a variety of marketing and analytics tools including Google Analytics, Microsoft Clarity, and multiple ad networks. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital presence. From a security perspective, Outplay enforces HTTPS, uses security headers, and holds recognized certifications like SOC-2 and IAS BQSR. The domain is privacy-protected but consistent with the company's profile and age. No critical vulnerabilities or security issues were detected, though enabling DNSSEC and publishing a vulnerability disclosure could further enhance security posture. Overall, Outplay presents a professional, trustworthy, and secure online presence with strong business credibility and compliance adherence. The site is safe for general audiences and demonstrates good privacy and security practices.

H

Halfords

halfords.ie

69

Halfords Ireland operates as a major retail business specializing in automotive, cycling, and outdoor equipment products. The company offers a comprehensive range of products including bikes, car maintenance items, sat navs, and camping gear, targeting consumers in Ireland. The website supports online shopping with options for home delivery and click & collect, positioning Halfords as a leading retailer in its sector within the Irish market. The brand is consistent and well-recognized, supported by a strong digital presence and social media engagement. Technically, the website is built using modern web technologies such as React and Emotion CSS, with performance and mobile optimization rated as good. The site includes standard SEO and accessibility features, and uses secure HTTPS connections with appropriate security headers. The presence of tracking and marketing tools like Google Analytics and Facebook Pixel indicates a moderate level of user tracking, balanced with privacy compliance through clear cookie and privacy policies. From a security perspective, the site demonstrates good practices including HTTPS enforcement and security headers, but lacks publicly available dedicated security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain legitimacy verification, but the overall digital footprint and business information suggest a legitimate and trustworthy operation. Overall, Halfords Ireland presents a professional and secure online retail platform with good content quality and user experience. Strategic improvements could include publishing detailed security and incident response policies and enhancing transparency around vulnerability disclosures to further strengthen trust and compliance.

Š

Škoda Norge

skoda-auto.no

69

Škoda Norge operates as the official Norwegian website for the Škoda automotive brand, providing comprehensive information on their vehicle lineup, including electric models, promotions, and services such as financing and test drives. The website targets Norwegian consumers interested in purchasing or learning about Škoda vehicles, positioning itself as a key digital touchpoint for the brand in Norway. Technically, the site employs modern web technologies including React and Bootstrap, hosted on Microsoft Azure infrastructure, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly available. Privacy and cookie policies are present and GDPR compliant, with user consent mechanisms implemented. WHOIS data confirms the legitimacy and consistency of the domain registration with the brand's Norwegian presence. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

H

Hyre ApS

hyre.dk

59

Hyre ApS operates a modern car-sharing platform primarily serving Denmark and other Nordic countries. The company enables users to rent vehicles quickly and conveniently through a mobile app, eliminating traditional rental hassles such as key pickup. Their business model includes pay-per-use rentals and subscription plans (Hyre Pass) for frequent users, targeting both individual consumers and corporate clients. The platform is well-positioned as a leading Nordic car-sharing service with a strong digital presence and high user satisfaction ratings. Technically, the website leverages modern web technologies including React, Next.js, and Mantine UI, integrated with Google Maps for location services and Stripe for secure payments. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, some hosting and security header details are not explicitly disclosed. Security posture is solid with HTTPS enforced and secure payment processing. The site includes cookie consent mechanisms and comprehensive privacy policies aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected, though explicit security headers and a vulnerability disclosure policy could enhance trust. Overall, the website presents a professional, trustworthy, and user-friendly platform with minor gaps in domain registration transparency and explicit security disclosures. Strategic improvements in these areas would further strengthen business credibility and security assurance.

H

Hyre AB

hyre.se

48

Hyre AB operates a modern, app-based car rental service primarily targeting consumers and businesses in Sweden and the Nordic region. The company offers flexible hourly and daily rentals with a seamless mobile experience, including keyless car access via Bluetooth and integrated payment and insurance. The website reflects a mature digital infrastructure using modern technologies such as React, Next.js, and Google Maps API, providing a fast, mobile-optimized user experience. Security posture is strong with HTTPS, security headers, and secure authentication via BankID, although formal security policies and incident response contacts are not publicly disclosed. Overall, the business presents a trustworthy and professional front with comprehensive privacy and cookie compliance, clear contact information, and strong brand consistency.

C

Climate Policy Radar / Grantham Research Institute at LSE

climate-laws.org

62

Climate Change Laws of the World is a comprehensive academic and research platform hosted by the London School of Economics and powered by Climate Policy Radar. It provides a global database of over 5000 climate laws, policies, and UNFCCC submissions from 196 countries and territories, serving researchers, policymakers, and NGOs focused on climate governance. The platform offers advanced search capabilities including contextual highlighting and English translations, enhancing accessibility and usability. Technically, the website is built on a modern React and Next.js stack, leveraging AWS infrastructure and integrating analytics tools such as Google Tag Manager, PostHog, and Plausible. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure suitable for academic and policy research use. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response page. No vulnerabilities or sensitive data exposures were detected. Privacy compliance is strong with clear policies and GDPR adherence. Contact is primarily via email and web forms, with no phone or physical address listed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, making it a reliable resource for climate law and policy data. Strategic improvements in security policy transparency and header implementation could further enhance its security posture.

S

Santander Consumer Bank AS

santanderconsumer.no

67

Santander Consumer Bank AS is a well-established financial institution in Norway specializing in consumer loans, savings products, and insurance services. The company leverages its strong brand presence, including sponsorship of Williams Racing and Formula 1, to maintain a competitive market position. The website targets Norwegian consumers seeking financing solutions for vehicles, personal loans, and savings accounts. Technically, the site is built on modern frameworks such as React and Next.js, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly available. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

C

Web1on1 - B2C Messaging for Professionals

chatshipper.com

66

The website app.chatshipper.com/login represents a B2C messaging platform aimed at professionals, providing communication services likely via a SaaS model. The site is built using modern frontend technologies including React and Bootstrap, indicating a contemporary digital infrastructure. However, the absence of privacy, cookie, and terms of service policies, as well as lack of contact information, suggests gaps in compliance and user trust facilitation. Security posture is moderate due to missing explicit security headers and unknown SSL configuration. The WHOIS data for the subdomain is unavailable, which is typical but limits full domain legitimacy assessment. Overall, the site appears functional and professionally designed but would benefit from enhanced transparency and security disclosures.

Z

Zendesk

smooch.io

77

Zendesk is a leading enterprise software company specializing in customer service platforms enhanced with AI capabilities. Their platform offers a comprehensive suite of tools including AI agents, ticketing, messaging, and workforce management, targeting businesses globally. The company maintains a strong market position with a SaaS subscription model and a focus on delivering personalized customer experiences. Technically, Zendesk employs modern web technologies such as React and Next.js, hosted on AWS Cloudfront, ensuring fast and responsive user experiences across devices. Their security posture is robust with HTTPS enforcement, security headers, and compliance certifications like SOC 2 and ISO 27001, although there is room for improvement in security header implementation. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Zendesk presents a professional, trustworthy, and technically mature web presence.

D

D’Ieteren Automotive SA/NV

skoda.be

71

The website nl.skoda.be serves as the official online presence for Škoda in Belgium, operated by D’Ieteren Automotive SA/NV. It provides comprehensive information about Škoda's vehicle lineup, including electric models, leasing options, fleet services, and aftersales support. The site targets both individual consumers and professional clients in Belgium, offering tools such as a car configurator and test drive requests. The brand's market position is strong, supported by consistent branding and official social media channels. Technically, the website employs a modern technology stack including React and Bootstrap, hosted on Azure CDN infrastructure. It demonstrates good digital maturity with responsive design, SEO optimization, and structured data markup. Security measures are robust, featuring HTTPS, security headers, and secure script loading, although explicit security policy and incident response information are not publicly available. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain's WHOIS data is restricted due to DNS Belgium policies, but the domain's legitimacy is supported by its association with the official Škoda brand and D’Ieteren Group. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include publishing a dedicated security policy, enhancing accessibility, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

H

Hoogenboom

autohoogenboom.nl

71

Auto Hoogenboom is a well-established automotive dealership in the Netherlands, offering a wide range of new and used vehicles from prominent brands such as Volkswagen, Audi, SEAT, Škoda, and CUPRA. The company provides comprehensive services including vehicle sales, leasing options for private and business customers, financing, insurance, and maintenance. Their market position is strong regionally, supported by a 90-year history and multiple brand partnerships. Technically, the website is built using modern frameworks like Next.js and React, integrating third-party services such as Google Tag Manager for analytics, Cookiebot for consent management, and Smartsupp for live chat support. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design that supports user experience and navigation clarity. From a security perspective, the website enforces HTTPS, employs standard security headers, and manages cookie consent effectively. However, it lacks explicit privacy policy and terms of service pages, as well as incident response or vulnerability disclosure information, which are important for compliance and trust. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. To enhance compliance and user trust, it is recommended to publish comprehensive privacy and terms documents, provide clear contact information, and establish formal security policies.

P

Pouw

pouw.nl

68

Pouw is a well-established automotive dealership in the Netherlands representing major brands such as Volkswagen, Audi, SEAT, Škoda, CUPRA, and VW commercial vehicles. The company offers a comprehensive range of services including new and used vehicle sales, leasing options for private and business customers, vehicle servicing, maintenance, and mobility solutions such as charging stations and fleet management. Their market position is strong within the regional automotive sector, supported by official brand partnerships and a broad service portfolio. The website reflects a professional and consistent brand image targeting both consumers and business clients seeking mobility solutions. Technically, the website is built on modern frameworks like Next.js and React, hosted likely on AWS infrastructure, and integrates third-party services such as Google Tag Manager and Trengo for analytics and customer engagement. Performance and mobile optimization are good, with basic accessibility features implemented. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with accessible privacy and cookie policies and GDPR adherence. However, the site lacks a dedicated security policy or incident response information, which could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. The website is safe for general audiences with no adult or questionable content detected.

G

Go Squared Ltd.

ecosend.io

61

EcoSend is a SaaS email marketing platform dedicated to purpose-driven brands seeking sustainable growth without compromising their values. The company, Go Squared Ltd., based in Great Britain, launched the domain in 2022 and positions itself as a niche leader integrating climate impact into email marketing. The platform emphasizes authenticity, audience growth, and environmental responsibility, supported by a B Corp certification and a dedicated UK-based support team. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, ensuring fast performance and excellent mobile optimization. Analytics tools like GoSquared and Google Tag Manager are used for user tracking. Security posture is good with HTTPS and domain transfer protection, but improvements are needed in DNSSEC and security headers. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-branded, but should enhance privacy and security transparency to improve compliance and user trust.

K

K-ryhmä

k-ryhma.fi

59

K-ryhmä is a prominent Finnish retail cooperative group offering products, advice, and tips for everyday life. The website presents a professional and consistent brand image targeting general consumers in Finland. The business model focuses on retail services with a strong market position in the Finnish retail sector. Technically, the site uses modern frameworks such as Next.js and React, with Google Tag Manager integrated for analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness.

V

Viking Redningstjeneste

vikingredning.no

56

Viking Redningstjeneste is a prominent Norwegian roadside assistance and vehicle service provider offering a wide range of services including emergency roadside help, vehicle recovery, battery replacement, tire changes, and boat assistance. The company targets vehicle owners and drivers across Norway, emphasizing rapid response times and comprehensive coverage regardless of vehicle type or insurance status. Their market position is strong within the transportation sector in Norway, supported by a professional and well-structured website that clearly communicates their services and value proposition. Technically, the website is built on modern frameworks such as Next.js and React, utilizing advanced analytics and marketing tools including Google Tag Manager, Fathom Analytics, RudderStack, and Cookiebot for privacy compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. However, explicit security headers are not detected, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were identified in the analysis. The absence of WHOIS data due to privacy protection limits domain registration trust verification, but the professional presentation and comprehensive privacy policy support legitimacy. Contact information is limited to a phone number, with no public email address found. Overall, Viking Redningstjeneste presents a secure, professional, and user-friendly online presence suitable for its business model. Strategic improvements in security headers, contact transparency, and formal security policies could further strengthen trust and compliance.

H

Hyre AS

hyre.no

64

Hyre AS operates a modern car rental platform primarily serving Norway and other Scandinavian countries. The company leverages a mobile app to provide users with easy access to rental cars, enabling instant unlocking and flexible rental durations. Their business model includes both consumer and corporate offerings, such as subscription passes and mobility plans for businesses. The website demonstrates a mature digital presence with strong app store ratings and comprehensive service information. Technically, the site uses modern frameworks like Next.js and Mantine, integrates Google Maps and Stripe for payments, and shows good performance and mobile optimization. Security posture is solid with HTTPS and secure payment integration, though explicit security policies and incident response details are not publicly disclosed. Overall, Hyre presents a trustworthy and professional service with a strong market position in the Scandinavian car rental sector.

Š

Škoda Norge

skoda.no

69

Škoda Norge operates as the official Norwegian website for the Škoda automotive brand, focusing on providing comprehensive information about their current vehicle models, especially electric vehicles like the Elroq and Enyaq series. The site targets Norwegian consumers interested in purchasing or learning about Škoda vehicles, offering tools such as car configurators, test drive bookings, and dealer locators. Technically, the website employs modern web technologies including React, Bootstrap, and Azure CDN hosting, ensuring a responsive and professional user experience. Analytics and marketing are managed through Google Tag Manager and Adobe Target, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies in the scanned content, which are areas for improvement. The domain WHOIS data is not publicly available, suggesting privacy protection, which is common and justified for corporate domains. Overall, the website presents a trustworthy and professional brand presence with moderate technical and security maturity.

M

Møller Bil

mollerbil.no

69

Møller Bil is Norway's largest car dealership chain specializing in Volkswagen, Audi, Skoda, and Volkswagen commercial vehicles. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, EU inspections, tire services, and damage repairs. As a subsidiary of Møller Mobility Group, it holds a strong market position with a large network of dealerships and specialized repair centers across Norway. The website reflects a mature digital presence with a modern tech stack based on Next.js and Sanity CMS, optimized for performance and mobile use. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and user engagement through social media integration.

T

Typeform

videoask.com

59

VideoAsk by Typeform is a technology company offering an interactive video platform designed to enhance business communications through video funnels, AI-powered chatbots, and multimedia messaging. The platform targets businesses aiming to improve recruitment, sales, marketing, and customer engagement processes at scale. The website demonstrates a strong market position with over 10,000 companies using the service, supported by professional branding and comprehensive content. Technically, the site leverages modern frameworks such as React and Next.js, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site presents a trustworthy and professional digital presence with good privacy compliance.

C

CUPRA

cupra-sklep.pl

54

The website cupra-sklep.pl serves as the official online store for CUPRA accessories and branded merchandise in Poland. It offers a comprehensive catalog of original car accessories, lifestyle products, and detailed information about CUPRA vehicle models. The site targets CUPRA car owners and enthusiasts, providing a seamless e-commerce experience with dealer contact information and social media integration. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies, and contact information is readily available. Overall, the site presents a professional and trustworthy brand presence with moderate to good technical and security standards.

M

Mobility Trader UK Limited

heycargroup.com

64

Heycar UK, operated by Mobility Trader UK Limited, is a reputable online marketplace specializing in used car sales and car finance services within the United Kingdom. The platform offers thousands of quality-checked used cars, either directly or through trusted dealers, backed by a 10-day money-back guarantee. The website targets UK consumers seeking reliable used vehicles and financing options, positioning itself as a trusted intermediary in the automotive resale market. The company was founded in 2019 and leverages a mature domain registered since 2008, indicating a stable online presence. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Amazon AWS infrastructure, and integrates multiple third-party services including Stripe for payments, Google Maps for location services, and a consent management platform for GDPR compliance. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, heycar.com enforces HTTPS, employs clientTransferProhibited domain status to prevent unauthorized transfers, and uses reCAPTCHA and CMP scripts to enhance security and privacy compliance. However, it lacks explicit security policies, incident response contacts, and DNSSEC, which are areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, heycar.com presents a professional, trustworthy, and user-friendly platform with a solid technical foundation and moderate privacy compliance. Strategic enhancements in transparency around privacy, security policies, and DNS security would further strengthen its security posture and user trust.

M

Mobility Trader UK Limited

heycar.com

78

heycar UK, operated by Mobility Trader UK Limited, is a well-established online marketplace specializing in quality checked used cars from trusted dealers across the United Kingdom. Founded in 2019, the company leverages a modern digital platform to provide car buyers with extensive listings, dealer access, car valuation tools, finance information, and expert reviews. The website demonstrates a strong market position within the UK automotive sector, targeting consumers seeking reliable used vehicles with transparent dealer relationships. The technical infrastructure is robust, utilizing Next.js and React frameworks hosted on AWS, integrating multiple third-party services such as Stripe for payments, Google Maps for location services, and advanced analytics platforms including Snowplow and Quantcast. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. From a security perspective, heycar enforces HTTPS with a solid SSL configuration and employs a comprehensive cookie consent mechanism compliant with GDPR. While explicit security policies and incident response contacts are not publicly found, the domain registration is consistent and trustworthy, with no suspicious indicators. The absence of DNSSEC is a minor security gap. Overall, the security posture is strong but could be enhanced by publishing formal security and vulnerability disclosure policies. The overall risk assessment is low, with the website presenting a professional, secure, and user-friendly experience. Strategic recommendations include enabling DNSSEC, publishing privacy and security policies, and enhancing transparency around incident response to further strengthen trust and compliance.

France Digitale is a prominent European association that connects startups and investors to foster innovation and promote a responsible vision of technology. Established in 2012, it serves as a key player in the European technology ecosystem, offering collective groups for startups, scale-ups, and investors. The website reflects a professional and modern digital presence built on Next.js and React, hosted by OVH sas with Cloudflare DNS services. While the site demonstrates good design quality and mobile optimization, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS and domain status protections, but DNSSEC is not enabled, representing a minor security gap. Overall, the domain registration and business information are consistent and trustworthy, positioning France Digitale as a credible and established entity in the technology sector.

A

Alfreð

alfred.is

65

Alfreð.is is the largest job search platform in Iceland, providing a comprehensive service for job seekers and employers to browse and apply for jobs via web and app. The platform offers hundreds of new job listings weekly and additional services such as courses. The website is well-branded and targets the Icelandic employment market. Technically, the site uses modern frameworks like React and Next.js, hosted behind Cloudflare with CDN and image optimization via Imgix. Analytics and marketing tools include Hotjar, Google Tag Manager, and Bing Ads. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but could improve transparency and security practices.

S

Skoda Ísland

skoda.is

69

Skoda Ísland operates as the official ŠKODA importer and dealer in Iceland, providing a comprehensive range of automotive services including new and used car sales, financing, and after-sales support. The website presents a professional and well-structured digital presence, targeting Icelandic consumers and businesses interested in ŠKODA vehicles. The company leverages modern web technologies such as React and Bootstrap, hosted on reliable CDN platforms, ensuring a responsive and user-friendly experience across devices. Security posture is strong with HTTPS enforced and no exposed sensitive data, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data for the queried subdomain is a minor concern but does not detract significantly from the overall legitimacy, given the strong branding and consistent contact information. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and verifying domain registration details to bolster trust.

F

Freshworks Inc.

freshservice.com

80

Freshworks Inc. operates the Freshservice platform, an AI-powered IT service management solution designed for enterprises seeking scalable and efficient ITSM capabilities. Positioned as a leader in the ITSM market, Freshservice emphasizes ease of deployment, AI assistance, and integration with existing technology stacks to improve IT team productivity and employee satisfaction. The company targets IT departments across various industries, offering a SaaS subscription model with enterprise-grade features and certifications such as ISO 27001 and SOC 2. Technically, the website leverages modern frameworks like React and Next.js, integrates multimedia content via Wistia, and employs robust analytics and consent management tools including Google Tag Manager and OneTrust. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, Freshservice enforces HTTPS, implements comprehensive security headers, and maintains privacy and cookie policies aligned with GDPR requirements. While WHOIS data is unavailable, possibly due to privacy protection, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The company also maintains a vulnerability disclosure policy and provides contact for its Data Protection Officer. Overall, Freshservice presents a trustworthy, professional, and secure online presence suitable for enterprise customers. The main risk lies in the lack of publicly available WHOIS data, which should be monitored for legitimacy confirmation. Strategic recommendations include publishing a dedicated security policy page and enhancing incident response contact visibility.

P

PureWeb

pureweb.com

69

PureWeb operates as a specialized technology company providing a real-time 3D pixel streaming platform that enables distribution of Unreal Engine and Unity applications. Their market position is that of a niche B2B SaaS provider targeting developers and enterprises requiring advanced streaming solutions. The website demonstrates a modern technical infrastructure built on React and Gatsby, indicating a mature digital presence with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Overall, the website is professional and trustworthy, but the lack of WHOIS data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance.

C

Capgemini

capgemini.com

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology with deep sector expertise. The company targets enterprises and governments worldwide, positioning itself as a trusted partner for digital innovation and transformation. The website reflects a mature digital infrastructure built on WordPress with modern technologies such as React and Bootstrap, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, comprehensive security headers, and adherence to recognized frameworks like ISO 27001 and NIST. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact channels for security and data protection inquiries. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

Š

ŠKODA France

skoda.fr

68

ŠKODA France operates as the official French branch of the Škoda automotive brand, providing a comprehensive range of new and used vehicles, financing solutions, and after-sales services. The website targets both individual consumers and professional clients in France, offering detailed information about vehicle models, promotions, and electric/hybrid options. The company is part of the Volkswagen Group, reflecting a strong market position in the transportation sector. The digital presence is mature, leveraging modern web technologies such as React and Bootstrap, hosted likely on Azure infrastructure, ensuring a responsive and user-friendly experience. Security measures are robust, with HTTPS, security headers, and no visible vulnerabilities, although some security policy documentation is absent. The domain WHOIS data is not publicly available, likely due to privacy protection, which is justified for a large brand. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.

V

Volkswagen D'Ieteren Finance

vdfin.be

62

Volkswagen D'Ieteren Finance operates as a financial services provider specializing in vehicle financing and leasing solutions primarily for Volkswagen customers in Belgium. The company targets businesses, private individuals, and dealers, offering tailored financial products to support vehicle acquisition and mobility. The website reflects a professional brand presence consistent with the Volkswagen and D'Ieteren group, emphasizing mobility and finance services. Technically, the website is built using modern web technologies including React and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates moderate performance with good design quality and user experience. However, some areas such as accessibility and SEO could be improved. The website uses HTTPS with a strong SSL configuration but lacks explicit security headers and published security policies. From a security perspective, the site shows good baseline practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by the presence of privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. However, the absence of incident response contacts and vulnerability disclosure policies suggests room for maturity improvement. Overall, the website and domain appear legitimate and professionally managed, though the WHOIS data is restricted, limiting transparency. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility, and expanding SEO metadata to strengthen trust and compliance.

C

CallPage

livecall.io

63

CallPage is a technology company specializing in telephony and lead generation SaaS solutions designed to convert website visitors into sales leads through callback automation, virtual PBX, AI voice agents, and meeting scheduling tools. The company positions itself as a pioneer in phone callback automation with a strong customer base of over 1,500 companies. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated marketing and analytics tools, and a comprehensive content strategy targeting business customers. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although incident response and vulnerability disclosure policies could be more explicit. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and business appear legitimate and professional, with a high trustworthiness rating.

Š

Škoda Polska

skoda-auto.pl

68

Škoda Polska operates as the official online presence for Škoda Auto in Poland, providing comprehensive information on new vehicle models, financing options, certified used cars, and after-sales services. The website targets Polish consumers interested in Škoda vehicles and related services, positioning itself as a major automotive brand in the region. The digital infrastructure leverages modern web technologies including React and Bootstrap, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and multiple security headers are implemented, reflecting a mature security posture. However, the absence of WHOIS data limits domain registration transparency, though the site’s professional presentation and official branding strongly support its legitimacy. Overall, the site demonstrates strong business credibility, good technical implementation, and compliance with privacy regulations, making it a trustworthy platform for customers.

S

Stock Spirits Group

stockspirits.com

77

Stock Spirits Group is a leading European spirits producer with a rich heritage dating back to 1884. The company offers a diverse portfolio of high-quality alcoholic beverages rooted in local and regional traditions, targeting mature consumers across over 50 countries. The website reflects a professional corporate presence with clear branding and comprehensive business information, although explicit contact details are not readily visible in the provided content. Technically, the site is built on modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trustworthiness. Overall, the website demonstrates a mature digital presence suitable for a large enterprise in the beverage industry.

C

Certifier sp. z o.o.

credsverse.com

65

Certifier sp. z o.o. operates a professional SaaS platform for creating, managing, and distributing digital certificates and badges. The company targets organizations and institutions seeking efficient digital credential solutions, boasting a strong market presence with over 2,000 clients including major brands such as Amazon and Stanford. Their platform offers comprehensive features including bulk certificate generation, branded credential portals, and analytics. Technically, the website is built on modern frameworks like Next.js and React, hosted on AWS with Cloudflare DNS, and integrates advanced analytics and consent management tools. Security-wise, Certifier demonstrates a mature posture with ISO 27001 certification, GDPR compliance, HTTPS enforcement, and external audits, though explicit incident response and vulnerability disclosure information are absent. Overall, the website is professional, secure, and trustworthy, with minor improvements recommended in transparency and DNS security.

K

Korvo

korvo.co

62

Korvo is a specialized SaaS platform providing e-commerce infrastructure tailored for educators and content creators. It enables users to create and manage live workshops, digital products, online courses, and paid communities, integrating payment processing through iyzico. The platform targets experts and educators seeking to monetize their knowledge and scale their passion businesses. Korvo positions itself as a niche player with a comprehensive suite of tools for event and product management, customer tracking, and income reporting. Technically, the website is built on modern frameworks such as Next.js and React, with strong mobile optimization and good SEO practices. It employs multiple analytics and tracking services including Google Analytics, Hotjar, Microsoft Clarity, and Facebook Pixel, all managed via Google Tag Manager. Security posture is solid with HTTPS enforced and secure payment integration, though some security headers and explicit security policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. No direct contact emails or phone numbers are provided, which may affect user trust slightly. Overall, Korvo demonstrates a mature digital presence with a strong focus on user experience and business functionality.

B

Blue Express

blue.cl

63

Blue Express is a Chilean parcel delivery and logistics company offering nationwide coverage with over 3,200 delivery points and competitive fixed pricing. The company targets individual consumers and entrepreneurs, providing a digital platform for shipping label creation, package drop-off, and e-commerce integration. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, supported by Cloudflare DNS and CDN services. Marketing and analytics are robust, leveraging multiple tracking pixels and tag managers to optimize user engagement and advertising effectiveness. Security posture is strong with HTTPS enforcement and comprehensive security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, Blue Express presents a professional, trustworthy, and user-friendly online presence aligned with its business objectives.

Jack Daniel's is a globally recognized premium Tennessee whiskey brand with a rich heritage dating back to 1866. The website serves as a brand portal offering product information, heritage storytelling, and visitor engagement. It targets adult consumers legally permitted to purchase alcohol, emphasizing responsible drinking and compliance with age restrictions. The site is professionally designed, mobile-optimized, and leverages modern web technologies such as Next.js and React for a performant user experience. Privacy and cookie consent management are implemented via OneTrust, reflecting compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and standard security headers present, though explicit incident response and vulnerability disclosure information are absent. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly indicate legitimacy. Overall, the site is a well-maintained digital asset supporting Jack Daniel's market position as a leading whiskey brand.

M

Marshall

marshall.com

74

Marshall.com is a professionally designed e-commerce website representing the established Marshall brand, known for premium audio equipment including amplifiers, headphones, earbuds, and speakers. The site targets music enthusiasts and consumers seeking high-quality audio products, offering secure payment options and worldwide shipping. The technical infrastructure leverages modern frontend technologies such as React and Chakra UI, with integration of analytics tools like Google Tag Manager and Voyado Analytics, indicating a mature digital presence. Security posture is moderate; while HTTPS is implied and secure payments are advertised, the absence of explicit security headers and privacy policies suggests room for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and branding strongly indicate a legitimate business. Overall, the site is well-structured, mobile-optimized, and user-friendly, but would benefit from enhanced transparency in privacy and security practices.

V

Volkswagen Group Polska Sp. z o.o.

vwdostawcze-sklep.pl

61

The website 'vwdostawcze-sklep.pl' serves as an official e-commerce platform for Volkswagen commercial vehicle accessories in Poland. It offers a wide range of original Volkswagen parts and accessories, targeting Volkswagen commercial vehicle owners and enthusiasts. The platform is well-branded with consistent Volkswagen imagery and provides categorized product listings by vehicle models and accessory types. The business is positioned as a trusted distributor within the automotive retail sector, supported by Volkswagen Group Polska and its subsidiaries. Technically, the website is built on modern frameworks such as Next.js and React, ensuring a responsive and user-friendly experience. It integrates Google Analytics and CookieYes for privacy compliance and tracking. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though some security headers could be enhanced. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration aligns with the business profile, indicating legitimacy. Overall, the site demonstrates a good balance of business credibility, technical maturity, and privacy compliance.

V

Volkswagen Лекотоварни автомобили България

vw-lekotovarni.bg

51

Volkswagen Лекотоварни автомобили България operates an official website dedicated to Volkswagen's light commercial vehicles in Bulgaria, offering detailed information on models, special offers, financing, service, and accessories. The site targets businesses and consumers interested in commercial vehicles, positioning itself as a key regional player backed by the global Volkswagen brand. Technically, the website employs modern web technologies including React and Next.js, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Volkswagen's brand integrity in the Bulgarian market.

V

Volkswagen Privredna Vozila BiH

vw-privrednavozila.ba

65

Volkswagen Privredna Vozila BiH operates as the official regional portal and dealer for Volkswagen commercial vehicles in Bosnia and Herzegovina. The website provides comprehensive information on vehicle models, configurators, financing options, service offerings, and news updates, targeting business customers and professionals in the transportation sector. The business is positioned as a trusted Volkswagen brand representative with consistent branding and a medium-sized market presence. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and privacy compliance, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

My Way | Betrouwbare tweedehandswagens met kwaliteitslabel

myway.be

68

My Way is a Belgian-based company specializing in the sale of certified second-hand vehicles, targeting Dutch-speaking consumers in Belgium. The website presents a professional and consistent brand image, emphasizing quality and trust in the used car market. The business model focuses on retailing thoroughly checked vehicles with quality labels, positioning itself as a reliable provider in the transportation sector. Technically, the website is built on modern frameworks such as Gatsby and React, leveraging Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization and SEO practices, although some security headers are not explicitly detected. The security posture is generally good with HTTPS enabled and bot protection in place, but could be improved by adding additional security headers and ensuring secure form handling. Privacy compliance is basic with a cookie consent mechanism present, but no explicit privacy or terms of service pages were found. Overall, the website is safe, professional, and trustworthy, with no indications of adult or malicious content. WHOIS data is restricted due to registry policies, which is common for .be domains and does not detract from the site's legitimacy.