Security Directory

C

COMBITHERM GmbH

combitherm.de

60

COMBITHERM GmbH is a medium-sized German manufacturer specializing in industrial refrigeration systems, heat pumps, and high-temperature heat pumps, primarily serving building air conditioning and production cooling sectors. With over 50 years of experience, the company has established a strong market presence supported by a worldwide customer network and a family-based business model. Their product offerings include customized refrigeration and heat pump solutions, complemented by commissioning and maintenance services. The website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Next.js and React, hosted on Google Cloud infrastructure. The site is well-optimized for SEO and mobile devices, providing clear navigation and rich content including downloadable brochures and articles. Security posture is solid with HTTPS enforcement and secure forms, although some improvements are recommended such as implementing cookie consent mechanisms and publishing explicit security policies. The privacy policy is detailed and GDPR compliant, reinforcing trust and compliance. WHOIS data is minimal but consistent with the company's German location and business claims. Overall, the website demonstrates a mature digital infrastructure and a trustworthy business profile.

C

Colt International GmbH

colt-info.de

63

Colt International GmbH is a well-established German company specializing in integrated solutions for fire protection, climate technology, and sun protection systems since 1931. The company targets B2B clients in industrial, architectural, and construction sectors, offering innovative and ecological solutions to improve building safety and efficiency. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports its market position as an expert in its field. Technically, the site leverages modern frameworks such as React and Material-UI, hosted on Adobe Experience Manager, and integrates advanced analytics tools like Adobe Analytics and Hotjar, indicating a high level of digital maturity. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks visible security headers and a public security policy or incident response contacts, suggesting room for improvement in security transparency. Overall, the domain WHOIS data is privacy-protected, which is common and justified for this business type, and no suspicious patterns were detected. The website is safe, professional, and trustworthy, with a strong compliance posture regarding privacy and cookie policies.

K

Kronans Apotek

kronansapotek.se

64

Kronans Apotek is a leading Swedish pharmacy chain offering both online and physical store services. The website provides a comprehensive e-commerce platform for health and wellness products, prescription fulfillment, and customer loyalty programs. The company targets Swedish consumers seeking accessible pharmacy services and wellness products. Technically, the website is built using modern frameworks such as Gatsby and React, with Tailwind CSS for styling, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms including cookie consent and GDPR adherence. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and well-positioned in the healthcare retail sector.

L

Lekmer - Leksaker, Barnkläder & Babykläder på nätet

lekmer.se

64

Lekmer is an established Swedish e-commerce retailer specializing in toys, children's clothing, baby products, and travel accessories. The website targets families and parents seeking a wide range of products for their growing children. The platform demonstrates a professional and consistent brand presence with a user-friendly interface optimized for mobile and desktop users. Technically, the site leverages modern frameworks such as Next.js and Storyblok CMS, hosted on Vercel, ensuring fast performance and scalability. The integration of payment services like Klarna indicates a mature e-commerce infrastructure. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and privacy policies in the provided content suggests room for improvement in compliance and security transparency. The lack of WHOIS domain registration data is a notable concern, potentially impacting trust from a domain legitimacy perspective. Overall, Lekmer presents a reliable and professional online retail experience with moderate risk factors primarily related to domain transparency and privacy disclosures.

NLYMAN.COM is a well-established Finnish e-commerce platform specializing in men's fashion, offering a wide range of clothing, shoes, and accessories from over 80 recognized brands. The company operates under the parent company Nelly Group and targets young men interested in trendy and affordable fashion. The website demonstrates a high level of professionalism with excellent design, clear navigation, and mobile optimization, supporting a seamless shopping experience. Technically, the site leverages modern frameworks such as Next.js and integrates multiple third-party services for analytics, marketing, and payment processing, ensuring robust performance and user engagement. Security-wise, the platform enforces HTTPS, employs recognized certifications like Trygg E-handel, and implements cookie consent mechanisms, although it could enhance DNS security by enabling DNSSEC and publishing explicit security policies. Overall, the website presents a trustworthy and compliant online retail environment with strong business credibility and user trust.

B

Babyshop

babyshop.se

64

Babyshop is a professional e-commerce retailer specializing in premium baby and children's clothing and equipment, targeting parents and caregivers in Sweden. The website showcases a wide range of products from well-known brands, emphasizing quality and style for children aged 0-10 years. The business operates in the retail sector with a focus on online sales, offering promotions and a user-friendly shopping experience. Technically, the website is built using modern web technologies including React and Next.js, with Storyblok as the CMS and Klarna integrated for payment processing. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with efficient use of image assets and asynchronous script loading. From a security perspective, the site enforces HTTPS and uses Sentry for error monitoring, indicating a proactive approach to stability and security. However, the absence of visible security headers and lack of published privacy or cookie policies suggest areas for improvement in compliance and user trust. The WHOIS data is unavailable, limiting domain legitimacy verification, but the professional presentation and content quality support a positive trust assessment. Overall, Babyshop presents a solid online retail platform with room to enhance privacy compliance and security transparency. Strategic improvements in these areas would strengthen customer trust and regulatory adherence.

Junkyard is a well-established Swedish retail company specializing in trendy everyday clothing and sneakers, targeting young consumers in the Nordic region. The company operates both online and through physical stores, offering popular brands such as Nike, adidas, and Puma. Their business model focuses on e-commerce retail complemented by in-store experiences and services like Click & Collect. The website reflects a mature digital presence with modern technologies and a consistent brand image. Technically, the site uses React and integrates analytics and consent management tools, hosted on Oracle Cloud infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some advanced security headers could be added. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, Junkyard presents a professional, trustworthy, and user-friendly online retail platform with good market positioning in the Nordic fashion retail sector.

Å

Åhléns

ahlens.se

67

Åhléns is a well-established Swedish retail company specializing in fashion, beauty, and home furnishing products. Their website offers a comprehensive e-commerce platform complemented by physical department stores, targeting general consumers in Sweden. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the website leverages modern frameworks such as Next.js and React, integrates advanced marketing and analytics tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent management, although there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data for the queried domain reduces trust slightly but does not detract from the overall legitimacy of the business presence online.

M

Mannheimer Versicherung AG

sinfonima.de

59

The website www.sinfonima.de represents the Mannheimer Versicherung AG's specialized insurance offering for the classical music sector, including musicians, orchestras, instrument makers, and related associations. It positions itself as a niche insurance provider with a clear focus on classical music, offering tailored insurance products and services. The website content is well-structured, professionally designed, and targets a German-speaking audience interested in music-related insurance solutions. The business model revolves around providing insurance coverage and risk management for musical instruments and professionals in the music industry. Technically, the site is built on the Liferay DXP platform, leveraging modern web technologies such as React and Clay UI, with additional libraries for UI enhancements and analytics integration. Hosting is managed via Ecotel, with proper HTTPS and security headers implemented. The site includes cookie consent mechanisms compliant with GDPR, and analytics are handled via Piwik PRO. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and well-maintained, with room for improvement in publishing security and compliance documentation.

Q

Quin Within

quinwithin.com

59

Quin Within is a technology company specializing in intelligent safety technology, focusing on rapid emergency response and digital medical ID storage solutions. Their platform integrates with emergency services across multiple countries, aiming to provide critical information quickly during emergencies. The website is built using modern web technologies such as Next.js and React, hosted on Amazon Cloudfront, and employs Google Tag Manager for analytics. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Security posture is moderate but lacks visible security headers and formal privacy or cookie policies. Contact information and compliance documentation are missing, which impacts trust and privacy compliance scores. Overall, the site presents a professional front but requires improvements in transparency, security, and compliance to enhance credibility and user trust.

P

pharmacieplus

pharmacieplus.ch

66

pharmacieplus is a Swiss network of nearly 100 pharmacist-owned pharmacies providing a wide range of health services including prevention, vaccination, and personalized care. The website presents a professional and consistent brand image targeting the general public seeking pharmacy and health services in Switzerland. Technically, the site is built on a modern React and Gatsby framework with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published privacy or security policies. No contact emails or phone numbers were explicitly found in the HTML content, which could impact user trust and compliance. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security transparency.

A

Amazon Web Services, Inc.

amazon-web-services.com

75

Amazon Web Services (AWS) is a leading cloud computing platform providing a comprehensive suite of scalable, reliable, and cost-effective cloud services globally. As a subsidiary of Amazon.com, AWS serves a broad range of customers including enterprises, startups, government agencies, and developers. The website reflects AWS's market leadership with extensive product offerings across compute, storage, AI, security, and more. The platform is designed to accelerate innovation and reduce operational costs for its customers. Technically, the AWS website demonstrates a mature digital infrastructure leveraging modern web technologies such as React, ES modules, and AWS-hosted content delivery networks. The site is optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. Security is robust with enforced HTTPS, strong Content Security Policies, and comprehensive privacy and cookie consent mechanisms aligned with GDPR requirements. AWS maintains a strong security posture with multiple industry certifications including ISO 27001, SOC reports, PCI DSS, and FedRAMP. Incident response and vulnerability disclosure processes are clearly documented, reflecting a mature security culture. The absence of WHOIS data for the subdomain is expected given it is part of the amazon.com domain, and does not detract from the site's legitimacy. Overall, AWS's website is professional, trustworthy, and compliant with privacy and security best practices. It effectively communicates its business model and services while maintaining a secure and user-friendly environment.

M

Mannheimer Versicherung AG

mannheimer.de

66

Mannheimer Versicherung AG is a well-established German insurance company with a history dating back to 1879. The company specializes in transport insurance and offers a wide range of insurance products for private customers, commercial clients, and specific sectors such as cyber insurance and classic music insurance. The website reflects a professional and trustworthy brand with clear navigation, comprehensive contact options, and multiple industry certifications. Technically, the site is built on the Liferay platform with modern frameworks like React and uses various JavaScript libraries to enhance user experience. Security measures include a strict Content-Security-Policy and HTTPS enforcement, alongside a consent management platform for privacy compliance. However, some security headers could be improved, and no explicit security or incident response policies are published. Overall, the website demonstrates a mature digital presence with good privacy and security posture, suitable for its business domain.

F

Freepik Company, S.L.

freepikcompany.com

68

Freepik Company, S.L. operates a comprehensive AI-powered creative suite website offering a wide range of tools including AI image and video generators, editors, and a vast library of stock assets such as images, vectors, photos, videos, audio, icons, PSDs, templates, and mockups. The platform targets designers, marketers, content creators, and businesses seeking creative resources and AI-assisted design capabilities. It employs a subscription and credit-based business model with commercial licensing options, positioning itself as a leading player in the creative technology sector. Technically, the website is built on modern frameworks such as Next.js and React, leveraging CDN hosting and integrating advanced consent management via OneTrust and tracking through Google Tag Manager and Apollo Tracker. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements multiple security headers, and manages user consent effectively. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly evident, representing areas for improvement. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's trustworthiness given its professional presentation and external trust signals. Overall, Freepik's website is a high-quality, secure, and privacy-conscious platform with strong business credibility. Strategic enhancements in security transparency and contact information could further strengthen its security posture and user trust.

N

NP Digital

adsgrader.com

53

AdsGrader.com is a digital marketing tool website operated by NP Digital, associated with Neil Patel. It offers free Google Ads and Meta Ads performance grading services, along with additional tools such as an ads budget calculator and industry benchmarks. The website targets digital marketers and businesses seeking to optimize their advertising spend. The platform is built as a React single-page application, leveraging modern JavaScript frameworks and integrates multiple analytics and tracking services including Google Analytics and Facebook Pixel. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security at the infrastructure level. Security posture is generally good with HTTPS enforced and domain registration locks in place; however, the absence of security headers and DNSSEC are notable gaps. Privacy compliance is weak due to missing privacy and cookie policies, and no consent mechanisms are evident. Contact information is not publicly available, which may impact user trust. Overall, the site is professionally designed with good user experience but requires improvements in privacy and security transparency to enhance trust and compliance.

I

Instabee Group AB

instabox.io

51

Instabox is a Swedish parcel delivery service operated by Instabee Group AB, specializing in delivering parcels to smart boxes with same-day delivery options. The company partners with numerous reputable online retailers, positioning itself as a convenient logistics solution for e-commerce customers in Sweden. The website is built using modern web technologies such as React and Next.js, hosted likely behind Cloudflare services, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and domain registration consistent with business claims; however, the absence of DNSSEC and explicit security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is professional and trustworthy but should enhance privacy and security disclosures to align with best practices.

Porterbuddy is a Norwegian technology-driven logistics company specializing in last-mile delivery services tailored to consumer and business needs. Owned by Instabee Group AB, the company emphasizes flexible delivery times, real-time tracking, and sustainable practices such as prioritizing electric vehicles. The website is professionally designed, mobile-optimized, and provides clear information about services and contact details. Technically, the site uses modern frameworks like Next.js and React, hosted with Cloudflare DNS, ensuring good performance and SEO. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, Porterbuddy presents a trustworthy and credible digital presence aligned with its business goals.

M

Mannheimer Versicherung AG

belmot.de

65

BELMOT is a specialized insurance brand under Mannheimer Versicherung AG, focusing on classic vehicle insurance for Oldtimers and Youngtimers. The website presents a professional and consistent brand image, targeting classic car enthusiasts and owners. It offers key insurance services such as all-risk coverage and value appreciation protection. The site is built on a modern technical stack including Liferay DXP and React, with integration of Usercentrics for consent management and Piwik Pro for analytics. The website is well-structured, mobile-optimized, and provides clear navigation and content relevant to its niche audience. Security measures include HTTPS enforcement and a Content Security Policy, but explicit security and incident response policies are not published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital presence with room for improvement in transparency around security policies and WHOIS data clarity.

N

networkteam GmbH

networkteam.com

67

networkteam GmbH is a well-established German digital agency specializing in custom web and mobile application development, content management systems, e-commerce, and digital transformation services. Founded in 1997, the company has a strong market presence with a diverse client portfolio and a focus on sustainable, future-proof digital solutions. Their website reflects a professional and modern digital maturity with a robust technical infrastructure leveraging React, Next.js, Kubernetes, and other contemporary technologies. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is good with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, networkteam GmbH demonstrates high business credibility and trustworthiness.

P

Podme

podme.com

66

Podme is a Finnish digital media company specializing in premium podcasts and audiobooks, offering ad-free content through subscription plans. The service targets Finnish-speaking users, including students who benefit from discounts. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and React, hosted likely on Microsoft Azure. The business is part of the Schibsted group, a reputable media conglomerate, which enhances its market credibility. The domain is well-established since 2009, supporting the company's maturity and legitimacy. Security posture is strong with HTTPS, clientTransferProhibited domain status, and no evident vulnerabilities, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, Podme presents a trustworthy and professional digital media platform with a solid technical foundation and clear business model.

A

AvD

avd-histo-tour.de

67

AvD (Automobilclub von Deutschland) is a well-established automotive club in Germany focusing on motorsport events, particularly oldtimer rallies such as the AvD-Histo-Tour. The website showcases their event information and services targeting automobile enthusiasts and motorsport fans. The digital infrastructure is modern, built on Next.js and React, with integration of advanced cookie consent management via Cookiebot and marketing/analytics tools from major providers like Google and Meta. Security posture is solid with HTTPS and consent mechanisms, though some security headers and incident response details are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. Strategic improvements could include publishing explicit security policies and enhancing accessibility.

Jobbland.se is a Swedish job portal website established in 2018, offering job listings and career-related services primarily targeting job seekers and employers in Sweden. The site features a modern React-based frontend with Material-UI styling and is hosted with Cloudflare DNS services. The website presents a professional design and good user experience, optimized for mobile devices, and provides relevant content for its audience. However, it lacks key compliance elements such as privacy and cookie policies, which are critical for GDPR adherence. Security-wise, the site uses HTTPS but does not implement DNSSEC or security headers, which could be improved to enhance protection against common web threats. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

P

Publicare AG

publicare.ch

68

Publicare AG is a Swiss market-leading company specializing in the supply and consultation of medical aids, including incontinence, stoma, tracheostomy care, and wound treatment. The company targets both private individuals and business customers, offering high-quality advice and fast delivery services. Their business model combines e-commerce with direct billing to health insurers, positioning them as a trusted healthcare supplier in Switzerland. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Cloudflare for hosting and security. It employs Cookiebot for comprehensive cookie consent management and Google reCAPTCHA for form protection. The site demonstrates good mobile optimization and moderate performance, with SEO and accessibility features implemented at a basic to good level. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. The use of consent management and bot detection cookies indicates a mature approach to privacy and security. However, the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and readiness. Overall, Publicare AG's website presents a trustworthy and professional digital presence with strong compliance to privacy regulations and a solid technical foundation. Strategic enhancements in security policy disclosure and accessibility could further strengthen their security posture and user trust.

F

Freepik Company, S.L.

freepik.com

67

Freepik Company, S.L. operates a comprehensive AI-powered creative suite and stock asset platform, targeting designers, marketers, and content creators globally. The website offers a wide range of AI tools including image, video, and audio generators, alongside traditional stock assets such as photos, vectors, and icons. The business model is subscription and credit-based, supporting professional and personal creative projects. Freepik holds a strong market position as a leading provider in the creative technology space with a consistent brand presence and extensive social media engagement. Technically, the website is built on modern frameworks like Next.js and React, leveraging CDN hosting and advanced consent management tools such as OneTrust. The site demonstrates excellent performance, mobile optimization, and SEO practices, ensuring a high-quality user experience. Analytics and tracking are implemented moderately with Google Tag Manager and Apollo Tracker, balanced with privacy compliance mechanisms. From a security perspective, Freepik enforces HTTPS, employs standard security headers, and integrates cookie consent management. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency and trust. The absence of WHOIS data reduces domain registration transparency but does not significantly detract from the overall legitimacy given the brand's maturity and external trust signals. Overall, Freepik presents a secure, professional, and privacy-conscious platform with strong business credibility. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and improving WHOIS transparency to further strengthen trust and compliance.

P

Pinterest

pinterest.es

74

Pinterest is a leading visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The Spanish localized site caters to the Spanish-speaking audience with tailored content and user experience. Pinterest operates primarily on an advertising-based business model, leveraging its large user base and content discovery capabilities to generate revenue. The company is a well-established enterprise with a strong global presence and brand recognition. Technically, the website employs modern web technologies including React and ES modules, with a strong emphasis on security through HTTPS and a robust Content Security Policy. The site is optimized for performance and mobile responsiveness, providing an excellent user experience. The use of multiple third-party services for analytics, advertising, and user engagement is evident, with appropriate privacy and cookie policies in place to comply with GDPR and other regulations. From a security perspective, Pinterest demonstrates a mature posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, there is an opportunity to improve transparency by publishing explicit incident response contacts and a vulnerability disclosure policy. Overall, the site is safe for general audiences with no adult or explicit content detected. The overall risk assessment is low, with strong business credibility and technical implementation. Strategic recommendations include enhancing incident response visibility, maintaining up-to-date security practices, and considering a public security.txt file to facilitate vulnerability reporting.

P

PubNub Inc.

pubnub.com

79

PubNub Inc. operates a leading real-time developer platform that enables businesses and developers to build, manage, and optimize interactive applications at scale. The company offers a comprehensive suite of real-time APIs and services, including messaging, presence, chat, analytics, and push notifications, serving a broad range of industries and use cases. With a market position as a top provider in the real-time communication space, PubNub targets enterprises and developers requiring scalable, low-latency infrastructure. Technically, the website leverages modern web technologies such as Next.js and React, supported by a robust CMS (Builder.io) and integrates industry-standard tools for cookie consent and analytics. The platform demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, PubNub maintains a strong posture with HTTPS enforcement, multiple security headers, and compliance with major frameworks including SOC2, HIPAA, GDPR, CCPA, and ISO 27001. The presence of a bug bounty program and comprehensive privacy and cookie policies further reinforce their commitment to security and privacy. No critical vulnerabilities or suspicious patterns were detected. Overall, PubNub presents a low-risk profile with a professional, trustworthy online presence. Recommendations include publishing explicit incident response contacts and adopting a security.txt file to enhance vulnerability disclosure transparency.

M

Meta

facebook.se

77

The website is the Swedish localized login portal for Facebook, a leading social networking platform owned by Meta Platforms, Inc. It serves as a gateway for users in Sweden to access Facebook's services, including social networking, messaging, and video content. The site reflects Meta's strong market position as a global technology leader with a comprehensive suite of social media products. The business model centers on user engagement and advertising revenue, targeting a broad general audience. The website's content is professionally presented, with consistent branding and clear navigation tailored for Swedish users. From a technical perspective, the site employs modern web technologies such as React and BigPipe for efficient content delivery and dynamic user experience. The infrastructure is hosted on Meta's own robust platform, ensuring high performance and availability. The site is optimized for mobile devices and accessibility, with good SEO practices and fast loading times. Security posture is strong, with HTTPS enforced, secure login forms, and implied security headers. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly visible on this page. Overall, the website is trustworthy, professionally maintained, and aligned with industry best practices. The domain is a subdomain of facebook.com, a well-established and legitimate domain owned by Meta. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Strategic recommendations include enhancing public visibility of security policies and incident response contacts to further strengthen user trust and compliance transparency.

D

Delius Klasing Verlag GmbH

modellfahrzeug.de

56

The website www.modell-fahrzeug.com is a professionally designed media publishing platform operated by Delius Klasing Verlag GmbH, focusing on model vehicles, model cars, and related hobbies. It offers rich editorial content, news, interviews, and integrates e-commerce services for subscriptions and product sales. The target audience includes hobbyists, collectors, and enthusiasts of model vehicles. The site demonstrates a mature digital infrastructure using modern web technologies such as React, Next.js, and Shopify for commerce integration. It is mobile-optimized and provides a good user experience with clear navigation and professional branding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement in security posture. The WHOIS data for the domain is unavailable, indicating the domain may be unregistered or there is an issue with WHOIS data retrieval, which raises concerns about domain legitimacy that should be verified. Overall, the website is a credible and trustworthy media platform with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and clarifying domain registration status to strengthen trust and compliance.

A

Allgemeiner Deutscher Automobil-Club e.V.

adac.de

71

The Allgemeiner Deutscher Automobil-Club (ADAC) is a well-established German automobile club providing a wide range of services including membership benefits, insurance products, travel planning, vehicle leasing, and roadside assistance. The website serves as a comprehensive portal for these services, targeting automobile owners, travelers, and insurance customers primarily in Germany. ADAC holds a strong market position as a leading mobility service provider with a large membership base and multiple subsidiaries supporting its operations. Technically, the website employs modern web technologies such as React and Webpack, with a focus on performance, accessibility, and mobile optimization. The use of Kameleoon indicates active engagement in personalization and A/B testing to enhance user experience. Hosting appears to be managed by a reputable provider, and the site uses HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, ADAC demonstrates good practices including HTTPS enforcement, security headers, and secure form implementations. However, there is no explicit public vulnerability disclosure policy or incident response contact, which could be improved to enhance transparency and readiness. Privacy compliance is strong with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and secure, supporting ADAC's business credibility and user trust. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and continuous security audits of third-party scripts to maintain and improve security posture.

A

Automobilclub von Deutschland (AvD)

avd.de

69

AvD (Automobilclub von Deutschland) is a historic and established automobile club in Germany, founded in 1899. The organization offers a broad range of services including roadside assistance, towing, insurance products, and membership benefits targeted at automobile owners and drivers. The website reflects a mature digital presence with modern technologies such as Next.js and React, and implements comprehensive privacy and cookie consent mechanisms compliant with GDPR. The brand maintains consistent messaging and trust indicators aligned with its long-standing market position. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, AvD demonstrates a solid business and technical foundation with room for enhanced transparency in security and contact information.

B

Bredbandsval.se – Jämför och beställ bredband på din adress

bredbandsval.se

65

Bredbandsval.se is a Swedish broadband comparison and ordering platform that helps residential consumers quickly and freely identify the best internet options available at their address. The website positions itself as an independent service, providing unbiased broadband comparisons to facilitate consumer choice in Sweden's telecommunications market. Technically, the site leverages modern web technologies such as Next.js and React, integrating Cookiebot for cookie consent management and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data for the exact domain queried suggests the domain may be a subdomain or alias, which slightly reduces trustworthiness. Overall, the site is professional, safe, and functional, but could benefit from publishing clear privacy and terms of service documents and improving transparency around security and incident response.

P

Startsidan - Presentjakt.se

presentjakt.se

52

Presentjakt.se is a Swedish gift recommendation website that provides curated gift ideas across various categories such as fun gadgets, experiences, summer gifts, and personalized presents. The platform primarily operates as an affiliate marketing site, linking users to partner retailers like coolstuff.se. The site targets Swedish consumers seeking gift inspiration and aims to offer a user-friendly browsing experience with categorized suggestions. Technically, the website is built using modern web technologies including React and Next.js, ensuring a responsive and interactive user interface. However, the site currently lacks visible privacy, cookie, or terms of service policies, which are important for compliance and user trust. Security headers and SSL configuration details are not evident from the provided data, indicating potential areas for improvement in security posture. The WHOIS data for the domain is unavailable or the domain is not registered as queried, which raises some concerns about domain legitimacy from a registration standpoint. Overall, the website presents a professional and clean interface with good content quality but requires enhancements in privacy compliance, security practices, and transparency to improve trust and regulatory adherence.

E

Erik Olsson Fastighetsförmedling

erikolsson.se

55

Erik Olsson Fastighetsförmedling is a Swedish real estate brokerage firm with a strong regional presence in cities such as Stockholm, Göteborg, and Malmö. The company focuses on assisting clients in buying and selling residential properties, aiming to provide a secure and trustworthy real estate transaction experience. The website reflects a professional brand image consistent with the real estate industry in Sweden, targeting home buyers and sellers within the country. Technically, the website is built using modern web technologies including React and Next.js frameworks, with integrations of analytics and tracking tools such as Google Analytics, Hotjar, and Cookietractor. The site demonstrates good mobile optimization and a generally good user experience, although some accessibility features could be improved. Performance is moderate, and SEO practices appear adequate. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies in the provided content, which indicates room for improvement in compliance and security best practices. The absence of WHOIS data for the queried subdomain reduces confidence in domain registration legitimacy, although the website content and branding suggest a legitimate business. No critical vulnerabilities or adult content were detected. Overall, the website presents a moderate risk profile with recommendations to enhance security headers, privacy compliance, and domain registration transparency to improve trustworthiness and regulatory adherence.

L

Leadster

leadster.com.br

50

Leadster is a Brazilian technology company specializing in AI-powered marketing chatbots designed to increase qualified lead generation for businesses across multiple sectors including software, education, real estate, and finance. The company positions itself as a key player in conversational marketing with a SaaS business model offering free trials and subscription plans. Their website demonstrates a professional design with clear navigation, client testimonials, and case studies that reinforce their market credibility. Technically, the site uses modern frameworks such as Next.js and Bootstrap, is hosted behind Cloudflare, and integrates marketing and analytics tools like Google Tag Manager and Drip. Security posture is solid with HTTPS and no visible vulnerabilities, though there is room for improvement in security headers and published policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and well-structured but should enhance transparency and compliance documentation.

The Swiss Institute of Emergency Medicine Ltd (SIRMED) is a reputable Swiss organization specializing in emergency medicine education and training. It offers a range of courses including first aid seminars for laypersons, professional paramedic training, and continuous medical education for specialists. The institute operates under the umbrella of the Swiss Paraplegic Group, reinforcing its credibility and market position in the healthcare education sector. The website reflects a professional and well-structured digital presence with clear branding and comprehensive service descriptions targeting healthcare professionals and first responders. Technically, the website is built using modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. It integrates key marketing and analytics tools like Google Tag Manager and Visual Website Optimizer, alongside a robust cookie consent mechanism via Cookiebot, demonstrating a mature approach to privacy compliance. The site is well-optimized for SEO and accessibility, providing a positive user experience. From a security standpoint, the website enforces HTTPS, employs multiple security headers, and shows no signs of vulnerabilities or exposed sensitive data. Certifications such as ISO 9001 and eduQua further attest to its commitment to quality and security standards. However, the absence of a public vulnerability disclosure policy and incident response contact information suggests areas for improvement in transparency and security readiness. Overall, SIRMED's website presents a trustworthy, professional, and secure platform aligned with its business objectives. Strategic recommendations include establishing a vulnerability disclosure channel, publishing incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

S

SMARTSTREAM.TV GmbH

smartstream.tv

58

SMARTSTREAM.TV GmbH is a well-established digital video advertising company operating primarily in the DACH region. Founded in 2012 and part of the ProSiebenSat.1 Media SE group, it offers a comprehensive portfolio of upper funnel advertising solutions including branding, engagement, reach, and creative services. The company targets advertisers seeking innovative video marketing solutions across multiple digital platforms. The website demonstrates a mature digital infrastructure using modern frameworks like Next.js and React, with a privacy-conscious analytics setup via Plausible. Security posture is strong with HTTPS and no evident vulnerabilities, though improvements can be made in explicit security headers and incident response transparency. Overall, the business presents a professional and trustworthy online presence with clear contact information and compliance documentation.

V

Visit Sweden (.com)

visitsweden.com

67

Visit Sweden (.com) is the official national tourism website for Sweden, providing comprehensive travel information including destinations, activities, accommodations, and cultural insights. The site targets tourists and travelers interested in exploring Sweden, offering a well-structured and content-rich platform supported by modern web technologies such as Next.js and React. The website demonstrates strong digital maturity with excellent SEO, mobile optimization, and accessibility features. Security posture is robust with HTTPS enforcement, security headers, and Cloudflare DNS, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site is highly trustworthy, professionally maintained, and aligned with official tourism promotion efforts.

Sweden.se is the official website representing Sweden, managed by the Swedish Institute. It serves as a comprehensive platform to promote Swedish culture, innovation, education, and business internationally. The site targets a broad audience including international visitors, students, researchers, and business professionals. It provides rich content about Sweden's traditions, innovations, and opportunities, positioning itself as a trusted governmental resource. Technically, the website is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS services, and integrates analytics tools like Google Analytics and Hotjar with privacy-conscious configurations. The site demonstrates excellent design quality, mobile optimization, and accessibility, ensuring a positive user experience. Security-wise, the site enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website is professional, secure, and credible, with minor improvements suggested in DNS security and security policy disclosures.

R

Roblox Corporation

roblox.com

72

Roblox Corporation operates a leading global online platform that enables users to create, share, and experience immersive 3D virtual worlds and games. The platform targets a broad audience, including children and general users, offering a social and creative gaming environment. The website reflects a mature digital presence with extensive platform support across mobile, console, and VR devices. Technically, the site employs modern JavaScript frameworks such as AngularJS and React, with a fast and responsive design optimized for multiple devices. Security posture is strong with HTTPS enforcement, CSRF protection, and hardware-backed authentication features, though explicit security headers could be improved. Privacy compliance is robust, with clear policies and cookie consent mechanisms. The absence of WHOIS data limits domain registration trust analysis but does not detract from the brand's established legitimacy. Overall, Roblox presents a professional, secure, and user-friendly digital platform with high trustworthiness.

R

Racemap | Home

racemap.com

69

Racemap is a technology-focused platform providing live tracking services for sports events, activities, and virtual races. The website offers real-time race streaming aimed at athletes, spectators, and event organizers. The business model centers on delivering interactive GPS tracking and virtual timing solutions to enhance race experiences. While the site content is professional and well-structured, the lack of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Technically, the site is built using modern frameworks such as React and hosted on the Weblium platform, indicating a moderate level of digital maturity. However, security posture is weak due to missing security headers, SSL configuration details, and absence of privacy and cookie policies, which are critical for compliance and user trust. Overall, the site is accessible and safe for general audiences but requires improvements in security and compliance to strengthen its risk profile.

Messenger.com is the official web platform for Meta's Messenger service, a leading global instant messaging and communication tool integrated with Facebook. The website offers users the ability to connect with friends and family through text, voice, and video, supporting community building and social interaction. The platform targets a broad general audience and operates under the Meta corporate umbrella, reflecting a mature and enterprise-level business model. Technically, the website employs modern web technologies including React and Facebook's proprietary BigPipe framework, ensuring fast performance and excellent mobile optimization. The infrastructure is hosted on Meta's own robust infrastructure, providing high availability and scalability. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and multi-language support. From a security perspective, the site enforces HTTPS, uses secure login forms with encrypted password submission, and includes standard security headers. However, explicit cookie consent mechanisms and dedicated security policy pages are not evident, suggesting room for improvement in privacy compliance and incident response transparency. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, messenger.com presents a highly professional, trustworthy, and secure platform consistent with Meta's brand. The absence of WHOIS data is likely due to privacy protection and does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing privacy compliance with explicit consent mechanisms, publishing security and incident response information, and providing clearer contact channels for security matters.

D

Delius Klasing Verlag GmbH

modell-fahrzeug.com

57

Modell-Fahrzeug.com is a professionally maintained German media website operated by Delius Klasing Verlag GmbH, specializing in model vehicles, model cars, and related hobbies. The site offers extensive articles, news, interviews, and an integrated e-commerce platform for subscriptions and product sales. The business targets hobbyists and collectors interested in model vehicles, providing high-quality content and community engagement. Technically, the site leverages modern web technologies including React, Next.js, and Shopify, ensuring a responsive and SEO-optimized user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly verified. The absence of WHOIS domain registration data is a notable anomaly but does not detract significantly from the site's credibility given the clear business identity and professional presentation. Overall, the website demonstrates a mature digital presence with good privacy compliance and transparent advertising practices.

D

Delius Klasing Verlag GmbH

gute-fahrt.de

59

Gute Fahrt is a German automotive media website operated by Delius Klasing Verlag GmbH, offering news, reports, and features on cars, motorsport, classic vehicles, and camping. The site targets automotive enthusiasts and lifestyle followers primarily in Germany, providing digital content and e-commerce services. Technically, the website uses modern frameworks such as React and Next.js, with Shopify integration for commerce. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. No direct contact or incident response information is provided, which limits transparency. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

D

Delius Klasing Verlag GmbH

mybike-magazin.de

59

The website www.bike-magazin.de/mybike/ is a professionally maintained German cycling magazine portal operated by Delius Klasing Verlag GmbH. It targets cycling enthusiasts interested in the latest developments in the bicycle market, offering independent bike tests, buying guides, and travel reports. The site supports digital subscriptions and single-issue sales through integrated e-commerce platforms. Technically, the site uses modern frameworks such as React and Next.js, with Shopify powering the storefront and Cloudinary for media hosting. Cookie consent and user privacy are managed via Consentmanager.net, and bug reporting is facilitated by Marker.io. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly disclosed. Overall, the site is well-optimized for SEO, mobile-friendly, and provides a good user experience with consistent branding and trustworthy content.

D

Delius Klasing Verlag GmbH

tour-magazin.de

59

TOUR is a German media publication operated by Delius Klasing Verlag GmbH, specializing in road cycling news, professional cycling coverage, event information, and buying advice. The website targets cycling enthusiasts and professionals, offering rich editorial content alongside premium subscription services and an integrated e-commerce shop. The brand maintains a consistent and professional online presence with active social media channels and modern web technologies. Technically, the site is built on Next.js with React, integrating Shopify for commerce and Marker.io for bug reporting. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and privacy policies are lacking. No WAF or content blocking was detected, allowing full content access. Overall, the site demonstrates a mature digital infrastructure suitable for its media business model.

D

Delius Klasing Verlag GmbH

bike-magazin.de

59

The website www.bike-magazin.de is a professionally designed German mountain bike magazine operated by Delius Klasing Verlag GmbH. It offers comprehensive content including news, product tests, workshop guides, and tour information targeting mountain bike enthusiasts and cyclists. The business model combines media publishing with subscription-based premium content and an integrated e-commerce shop powered by Shopify. The site demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the site is trustworthy, content-rich, and well-positioned in its niche market.

D

Delius Klasing Verlag GmbH

surf-magazin.de

57

The website surf-magazin.de is a professionally designed and content-rich platform serving as Europe's largest windsurf magazine. It provides comprehensive information on windsurfing, including tests, purchase advice, maneuvers, locations, news, interviews, webinars, and premium subscription services. The business is operated by Delius Klasing Verlag GmbH, a recognized media publisher in Germany. The site integrates modern technologies such as React and Next.js and leverages Shopify for e-commerce functionalities. Social media presence is well established with official Facebook, Instagram, and YouTube channels. However, the site lacks explicit privacy and cookie policies, which is a compliance gap under GDPR regulations. Security posture is generally good with HTTPS enforced but could be improved by adding security headers and clear incident response contacts.

D

Delius Klasing Verlag GmbH

boote-exclusiv.com

68

BOOTE EXCLUSIV, operated by Delius Klasing Verlag GmbH, is a specialized media outlet focused on the luxury superyacht market. The website offers rich content including magazine issues, event coverage, and industry news targeted at affluent yacht enthusiasts. The digital infrastructure is modern, leveraging React and Next.js frameworks, with a strong emphasis on GDPR compliance through a robust consent management platform. Social media integration and digital app availability enhance user engagement. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. Overall, the site presents a professional and trustworthy digital presence aligned with its niche market.

D

Delius Klasing Verlag GmbH

boote-magazin.de

61

The website www.boote-magazin.de is a professionally designed digital magazine focused on motorboats, operated by Delius Klasing Verlag GmbH, a recognized media publisher in Germany. It offers a wide range of content including news, buying guides, travel planning, and an online boat marketplace, targeting boating enthusiasts and motorboat fans. The site integrates modern web technologies such as React and Next.js, with e-commerce capabilities powered by Shopify. The technical infrastructure supports good mobile optimization and SEO practices, although some performance details are moderate. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Contact information is not explicitly provided in the content, which may affect user trust and compliance. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

D

Delius Klasing Verlag GmbH

yacht.de

61

YACHT.de is the digital presence of Delius Klasing Verlag GmbH, Europe's largest magazine dedicated to sailing. The website offers extensive content including yacht models, equipment, travel and charter guides, regatta news, and a used boat market. It targets sailing enthusiasts primarily in Germany and Europe, providing both free and premium subscription content alongside e-commerce services. The site is built on modern web technologies including React and Next.js, with Shopify integration for commerce. Social media channels are actively linked, enhancing brand reach. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are missing from the homepage content. Overall, the site is professional, content-rich, and well-positioned in the sailing media market.