Security Directory

E

EWE

ewe.de

62

EWE is a large German energy and telecommunications provider offering a broad range of services including electricity, gas, internet with fiber optics, mobile telephony, solar solutions, and heating technologies. The company targets both private customers and businesses, positioning itself as a comprehensive regional utility and service provider. The website demonstrates a modern technical infrastructure using React and Next.js frameworks with Material UI for design, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and formalized privacy and cookie policies. Tracking is performed via Matomo analytics, reflecting moderate user tracking. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

F

Friday Agency

friday.ie

67

Friday Agency is a multi-award-winning digital marketing and UX design agency based in Dublin, Ireland. They provide a comprehensive range of services including UX/UI design, digital strategy, SEO, PPC, content creation, and social media advertising. Their client portfolio includes notable brands such as Fyffes, Peter Mark, and the National Lottery, positioning them as a reputable player in the Irish digital agency market. The website reflects a professional and modern digital presence, leveraging a Next.js and React technology stack for performance and responsiveness. Privacy and cookie policies are well implemented, supporting GDPR compliance. Security posture is good with HTTPS enforced, though explicit security headers and incident response policies are not publicly documented. Overall, the agency demonstrates strong business credibility and digital maturity, though the absence of WHOIS data limits domain trust verification. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining transparency in security practices.

M

Mattecentrum

pluggakuten.se

62

Pluggakuten is a Swedish educational platform providing free homework help and discussion forums across a wide range of subjects. It operates as a non-profit service under Mattecentrum, a recognized educational organization in Sweden. The website targets students and learners seeking academic assistance and live help sessions. The platform is well-positioned in the Swedish education sector as a trusted resource for collaborative learning and homework support. Technically, the site uses modern web technologies including React, jQuery, MathJax, and Google Tag Manager, ensuring a responsive and interactive user experience. Privacy and cookie consent mechanisms are robust, reflecting compliance with GDPR standards. Security posture is good with HTTPS enforced and anti-CSRF protections, though additional security headers could enhance protection. The absence of WHOIS data for the exact domain queried suggests a possible subdomain or lookup issue, but the association with Mattecentrum supports legitimacy. Overall, Pluggakuten presents a professional, secure, and user-friendly educational service with moderate technical sophistication and strong privacy compliance.

E

Eurotrek

eurotrek.ch

74

Eurotrek is a Swiss-based travel company specializing in tailor-made active holidays, primarily cycling and hiking tours across Switzerland and Europe. The company targets active travelers seeking self-guided and guided tours with luggage transport services. Their market position is that of a niche operator with a strong focus on quality and customer satisfaction, supported by positive user ratings and professional digital presence. Technically, the website is built using modern web technologies including React and employs good SEO and accessibility practices. The site is mobile-optimized and features rich multimedia content such as autoplay videos and adaptive images. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible incident response or security policies. Privacy compliance is mostly met with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

А

Атлант-М

atlantm.by

58

Atlant-M is a prominent Belarusian automotive dealership and service provider offering a comprehensive online platform for purchasing new and used vehicles, including electric and hybrid models. The company provides additional services such as car servicing, repair, financial products like credit and insurance, and vehicle evaluation and buyout. Their market position is strong within Belarus, targeting local consumers seeking convenient online automotive solutions. The website is built on modern technologies including React and Next.js, delivering a responsive and user-friendly experience with good SEO and mobile optimization. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear cookie consent and privacy policy pages. Overall, the site demonstrates a professional and trustworthy digital presence aligned with its business objectives.

U

UNICEF Sverige

unicef.se

68

UNICEF Sverige is the Swedish national committee of UNICEF, dedicated to protecting children's rights and providing humanitarian aid in 190 countries. The organization operates as a large non-profit entity with a strong market position and a well-established brand. Their website offers multiple donation options, educational resources, and advocacy information targeting the general public, companies, and schools. Technically, the site is built on modern frameworks like Next.js and React, with integrations for analytics and A/B testing via Google Tag Manager and Optimizely. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the site uses HTTPS and secure forms but lacks DNSSEC and explicit security policies. Overall, the domain registration is consistent with the organization's identity, showing a long-standing and legitimate presence.

F

Fantastic Frank

fantasticfrank.com

64

Fantastic Frank is a well-established real estate company founded in 2010 in Stockholm, specializing in design-led and curated homes. The company has expanded internationally with offices across Europe, the UAE, and the US, positioning itself as a premium real estate brand with a strong focus on aesthetics and flawless service. Their business model includes property sales and franchise opportunities, targeting discerning home buyers and sellers. The website reflects a mature digital presence with modern technologies such as Next.js, Vercel hosting, and multiple analytics and marketing integrations. Security posture is strong with HTTPS, security headers, and bot protection via reCAPTCHA, although formal security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS domain registration data raises some concerns about domain legitimacy verification. Overall, the website is professional, trustworthy, and technically sound, supporting the company's market position.

S

Stockholm Business Region AB

visitstockholm.se

51

Visit Stockholm, operated by Stockholm Business Region AB, serves as the official tourism guide for Stockholm, Sweden. The website provides comprehensive information on events, restaurants, cultural activities, and travel tips aimed at tourists and visitors. It holds a strong market position as the authoritative source for Stockholm tourism, offering curated content and personalized guides. The business model focuses on promoting the city to increase visitor engagement and tourism revenue. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good SEO practices. The use of Matomo Analytics and CookieTractor indicates a commitment to privacy-aware user tracking. Security posture is adequate with HTTPS and cookie consent mechanisms, though the absence of explicit security headers and incident response policies suggests room for improvement. Overall, the site is professional, trustworthy, and well-maintained, with clear contact information and official branding. Recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to strengthen security and compliance.

S

Starbreeze AB (publ)

starbreeze.com

68

Starbreeze AB (publ) is an independent developer, publisher, and distributor of PC and console games with a global market focus and studios in multiple European cities. The company emphasizes community building through its games and offers a range of services including game development, publishing, franchising, and community engagement platforms such as Nebula. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including news, updates, and career opportunities. Technically, the site uses modern frameworks like Next.js and React, hosted on WP Engine, and integrates Google Analytics and Cookietractor for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall site and business indicators suggest legitimacy. Strategic recommendations include enhancing security transparency and monitoring domain registration status.

Facebook Video is a key component of Facebook's social media platform, offering users a place to watch videos, reels, and original shows. As part of Meta Platforms, Inc., it holds a leading position in the global technology and media industry, leveraging a robust advertising-based business model. The platform targets a broad general audience with a focus on video content consumption and social engagement. Technically, the site employs modern web technologies including React and advanced JavaScript frameworks, ensuring fast performance, excellent mobile optimization, and good accessibility. Security measures are strong, with HTTPS enforcement and comprehensive security headers, reflecting a mature security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, with extensive user tracking aligned with its advertising business model.

D

Delius Klasing Verlag GmbH

delius-klasing.de

61

Delius Klasing Verlag GmbH is a well-established German publishing company specializing in books, magazines, and events focused on watersports, cycling, and automobiles. Founded in 1911 and part of Mediengruppe KLAMBT, it serves a niche audience of enthusiasts and professionals in these sectors. The website reflects a mature digital presence with a modern tech stack including Next.js and React, supported by cloud-based image hosting and a consent management platform. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive policies and consent mechanisms, although some security headers are not explicitly detected. No critical vulnerabilities or suspicious elements were found. Overall, the site demonstrates high trustworthiness and business credibility.

A

Association FairSocialNet

tooting.ch

57

Tooting.ch is a Swiss Mastodon instance operated by the Association FairSocialNet, providing a decentralized social networking platform primarily for Swiss users. The platform leverages Mastodon version 4.4.5 and modern web technologies such as React and ES modules, indicating a contemporary technical infrastructure. The website content is user-generated social posts focusing on news, privacy, and social issues, targeting a general audience without adult content. Security posture is solid with HTTPS enforced and no WAF blocking, but lacks some security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages detected. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

The website sbf-fragen.de is an educational platform offering a mobile app to support users preparing for boating license theoretical exams in Germany. It is operated by Delius Klasing Verlag, a known publishing company. The site provides official exam questions, learning aids, and exam simulations via a freemium app model with in-app purchases. The target audience is individuals seeking boating licenses and related certifications. Technically, the site uses modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience across devices. The site is well-branded and professionally designed, with clear navigation and relevant content in German. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response information. Privacy compliance is partial, with a clear privacy policy linked but no cookie consent mechanism detected. Overall, the site is trustworthy and serves a niche educational market effectively.

H

Heldenschmiede Bremen GbR

heldenschmiede-bremen.de

57

Heldenschmiede Bremen GbR is a small education and coaching business based in Bremen, Germany, specializing in workshops, seminars, and coaching services aimed at personal and professional development. The company positions itself as a niche provider focused on empowering individuals and teams to unlock their potential and achieve meaningful change. Their offerings include business coaching, life school programs, speaker training, and events with keynote speakers. The website reflects a professional and consistent brand image with clear service descriptions and event schedules. Technically, the site is built on modern web technologies including React and Next.js, hosted on a custom CMS platform, and optimized for performance and mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie banner. Contact information is clearly presented with multiple channels. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

А

Атлант-М

atlantm.com

58

Atlant-M is a well-established Belarusian automotive dealership offering a comprehensive online platform for buying new and used cars, including electric and hybrid vehicles. The company provides additional services such as vehicle selection assistance, auctions, financing, insurance, and after-sales service. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, targeting Belarusian customers. Technically, the site leverages modern frameworks like Next.js and React, hosted on Yandex Cloud, ensuring fast performance and good SEO. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although dedicated security policies and incident response contacts are not publicly available. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

W

werk85 GmbH

werk85.de

59

werk85 GmbH is a Bremen-based full-service advertising agency specializing in digital and print media solutions. Their offerings include web and app development, content creation, social media management, and corporate design. The company serves a diverse clientele ranging from local businesses to nationwide organizations, positioning itself as a creative and reliable partner in the marketing sector. The website showcases a modern, well-structured design with detailed project case studies and clear contact information, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. Security measures are robust with HTTPS and security headers implemented, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates strong business credibility and compliance with privacy regulations, making it a trustworthy digital asset for the company.

U

Upsun

upsun.com

72

Upsun is a technology company offering a highly flexible Platform as a Service (PaaS) designed to empower developers and enterprises with production-perfect cloud application environments. Formerly known as Platform.sh, Upsun positions itself as a developer-friendly cloud platform supporting multiple frameworks and languages, with predictable and customizable pricing models. The company targets software development teams and businesses seeking reliable and scalable cloud hosting solutions. Technically, the website is built on modern frameworks such as Gatsby and React, optimized for performance, mobile responsiveness, and SEO. The platform supports major cloud providers including AWS, Azure, and GCP, indicating a robust and scalable infrastructure. Security-wise, Upsun employs HTTPS with strong Content Security Policies and domain transfer protections, though DNSSEC is not enabled. The site integrates multiple analytics and marketing tools with appropriate cookie consent mechanisms, reflecting good privacy compliance. Overall, Upsun demonstrates a mature digital presence with strong business credibility and technical sophistication.

A

Aha!

aha.io

77

Aha! is a leading SaaS provider specializing in product development software, trusted by over one million product builders worldwide. Their comprehensive suite includes tools for roadmapping, customer interview management, idea capture, project management, and agile delivery, enhanced by a purpose-built AI assistant to accelerate workflows. The company positions itself as the world's #1 product development software, serving product teams across various industries with a focus on delivering lovable products efficiently. Technically, the website leverages modern web technologies including React, Lottie animations, and integrates with Contentful for asset management. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. SEO best practices are evident through comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and employs secure form handling and event tracking. However, explicit security headers and a public security policy are absent, indicating room for improvement in transparency and defense-in-depth. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The lack of public WHOIS data is consistent with privacy protection practices common among large SaaS providers. No critical security issues or content safety concerns were identified, positioning Aha! as a reliable and secure platform for product development teams.

D

Alla nyheter från Dagens Media

dagensmedia.se

71

Dagens Media is a Swedish media news platform focused on marketing and media industry professionals. It operates as a business news site providing aggregated news and industry insights. The website is branded consistently with Bonnier News, a major media group in Sweden, indicating a strong market presence. Technically, the site uses modern web technologies including React and Next.js, with integrated consent management via Didomi to comply with GDPR requirements. Security posture is strong with HTTPS and standard security headers implemented, though explicit privacy and terms pages are not found in the provided content. No contact information or WHOIS data for the exact subdomain was found, but the site appears legitimate and professional. Overall, the site is well-structured, mobile-optimized, and trustworthy for its target audience.

E

EBSCO Industries, Inc.

dynamed.com

68

DynaMed is a leading clinical decision support platform operated by EBSCO Industries, Inc., providing evidence-based medical content, alerts, drug resources, and continuing education primarily targeting healthcare professionals and institutions. The platform is subscription-based and recognized for its authoritative medical guidance, holding prestigious awards such as the Best in KLAS Clinical Decision Support recognition. Technically, the website employs modern web technologies including React, JavaScript, and integrates advanced analytics and consent management tools such as Gainsight PX, Amplitude, Datadog RUM, and Osano CMP, reflecting a mature digital infrastructure with good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or registration issues, but the website's branding and external references confirm its association with a reputable enterprise. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience.

S

Shoplazza

shoplazza.dev

64

Shoplazza is an e-commerce platform providing a developer portal focused on enabling app and theme development. The website offers comprehensive documentation, APIs, and tools to support developers and store administrators in building and managing e-commerce stores efficiently. The platform positions itself as a modern and developer-friendly solution in the e-commerce market, targeting developers and merchants seeking customization and integration capabilities. Technically, the site is built on modern web technologies including React and is hosted on the ReadMe.io platform, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS and includes standard security headers, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and dedicated security or incident response policies, which are areas for improvement. Overall, the site is professional, trustworthy, and well-suited for its target audience, with recommendations to enhance privacy compliance and security transparency.

A

Agicap

agicap.com

69

Agicap is a France-based SaaS company specializing in cash flow management software tailored for SMBs and mid-market companies across Europe. The platform offers comprehensive treasury management, accounts payable and receivable automation, and banking & ERP connectivity, positioning itself as a market leader with over 8000 clients and a 98% satisfaction rating. The website reflects a mature digital presence with modern technologies such as React, Gatsby, and integrations with major analytics and marketing platforms. Security posture is strong, with GDPR and ISO/IEC 27701 compliance, encrypted data storage on Google Cloud, and TLS for data in transit. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, well-structured, and trustworthy, with clear business and contact information.

W

WeTransfer

we.tl

72

WeTransfer is a well-established technology company founded in 2007, specializing in providing a platform for fast and easy transfer of large files. The website presents a professional and modern design, targeting general users and professionals who need to share large files efficiently. The business model is primarily freemium, offering free file transfers with options for paid upgrades. The company holds a strong market position as a leading file transfer service globally. Technically, the website leverages modern frameworks such as Next.js and React, integrates payment processing via Stripe, and uses Google Analytics and Tag Manager for analytics and marketing. Hosting is provided through Amazon AWS infrastructure, ensuring good performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended for enhanced security. No explicit privacy, cookie, or terms of service policies were detected in the provided content, indicating room for improvement in privacy compliance. No vulnerability disclosure or incident response information is publicly available. Overall, the website is trustworthy and professional with a good security posture but could enhance privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts.

D

Dropbox

dropbox.com

68

Dropbox is a leading global technology company specializing in cloud storage, file sharing, and collaboration solutions. It serves both individual users and enterprises with a suite of products including Dropbox, Replay, Backup, Dash, DocSend, and Sign. The company is well-established with a strong market position and recognized brand. Technically, Dropbox employs modern web technologies such as React and RequireJS, delivering a fast, mobile-optimized, and accessible website experience. Security is robust, with HTTPS enforced, comprehensive security headers, and adherence to industry standards like ISO 27001 and SOC 2. Privacy compliance is evident through detailed policies and GDPR adherence. Overall, Dropbox demonstrates a mature digital infrastructure and strong business credibility.

P

Privy

privy.com

70

Privy is a SaaS company specializing in email and SMS marketing tools tailored for e-commerce brands, particularly Shopify store owners. The platform combines intuitive marketing automation with expert coaching to help over 10,000 brands grow sales effectively. Privy positions itself as Shopify's top-reviewed marketing app, offering features like list growth, campaign management, and personalized strategy support. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely on Vercel, and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, Facebook Pixel, and PostHog. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard best practices, though explicit security headers are not fully confirmed in the HTML. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR indicators. However, no public incident response or vulnerability disclosure policies were found, representing an area for improvement. Overall, Privy presents a professional, trustworthy online presence with a solid business model and technical foundation. The lack of WHOIS data due to privacy protection is typical for SaaS businesses and does not detract from legitimacy. Strategic recommendations include enhancing security header transparency, publishing vulnerability disclosure information, and improving incident response visibility.

Rivella.ch is the official website of Rivella AG, a Swiss beverage company known for its unique soft drinks made from milk serum. The website primarily serves as a corporate and product information portal targeting general consumers in Switzerland and German-speaking regions. The business model focuses on manufacturing and retail distribution of beverages, with a strong local market presence. The website uses modern web technologies such as Gatsby for static site generation and integrates Google Tag Manager for analytics purposes. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate but could be improved by implementing standard security headers and enhancing privacy compliance. Overall, the website is functional but basic in content quality and user experience, with room for improvement in transparency and security practices.

2

20 Minuten

20min.ch

77

20 Minuten is the largest Swiss news portal providing 24/7 news coverage, videos, and live TV content primarily targeting the Swiss general public. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed through cookie consent mechanisms and GDPR-aligned policies. Overall, the site is professional, trustworthy, and well-positioned in the Swiss media market.

P

Pricenow AG

nendazveysonnaz.ch

58

The website shop.nendazveysonnaz.ch is an e-commerce platform operated by Pricenow AG, focused on selling ski passes and related tourism services for the Swiss Alps region, particularly the 4 Vallées and Printse ski areas. It targets tourists, skiers, and outdoor enthusiasts seeking access to ski lifts and seasonal passes. The platform uses modern web technologies including React, Next.js, and Sanity CMS, providing a responsive and user-friendly experience. Structured data and Open Graph tags are implemented to enhance SEO and social sharing. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks explicit security headers and formal privacy and cookie policies, which are compliance gaps. Contact information is limited but present in meta tags. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security hardening.

S

SEO Community

seocommunity.social

59

SEO Community operates a Mastodon-based social platform dedicated to professionals and enthusiasts in the Search Engine Optimization field. The platform facilitates community engagement and content sharing within the SEO niche, positioning itself as a specialized social network within the fediverse. The website branding is consistent and professional, targeting a small but focused audience. Technically, the site leverages Mastodon's open-source platform with React and modern web technologies, providing a responsive and functional user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, though cookie consent mechanisms are absent. Overall, the site is legitimate and trustworthy for its community purpose, though improvements in security and privacy transparency are recommended.

A

Atlassian

atl-paas.net

75

Atlassian's developer.atlassian.com website serves as a comprehensive AI-powered developer platform designed to support developers, customers, partners, and builders in innovating and integrating with Atlassian's suite of products such as Jira and Confluence. The platform emphasizes seamless integration capabilities and provides extensive documentation and resources to facilitate developer engagement. The site reflects Atlassian's strong market position as a leading technology company in collaboration and developer tools. Technically, the website employs modern web technologies including React and Algolia for search insights, hosted on Atlassian's own CDN infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforced and privacy compliance mechanisms like OneTrust cookie consent implemented, although explicit security headers and dedicated security policy pages are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment with Atlassian's corporate branding and business model.

Š

Škoda Auto Deutschland GmbH

skoda-auto.de

69

Škoda Auto Deutschland GmbH operates the official German website for the Škoda automotive brand, providing comprehensive information about their vehicle models, financing options, after-sales services, and electric mobility solutions. The company is a large, well-established player in the transportation sector in Germany, with a strong market presence and a broad portfolio including electric vehicles. The website targets both individual consumers and business customers, offering tools such as vehicle configurators, dealer locators, and financing calculators. Technically, the website employs a modern technology stack including React, Bootstrap, and jQuery, hosted on a reliable infrastructure likely powered by Microsoft Azure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with extensive use of structured data and meta tags. Performance is moderate, with good loading times and responsive design. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contact details. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, the website presents a low-risk profile with strong trust indicators and professional digital maturity. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen the security posture.

A

Autohaus Ostmann GmbH & Co. KG

nutzfahrzeuge-autohaus-ostmann.de

70

Autohaus Ostmann GmbH & Co. KG is a well-established automotive dealership group operating in the Nordhessen region of Germany, with over 60 years of experience. The company offers a broad portfolio of vehicles from Volkswagen, Volkswagen Nutzfahrzeuge, Audi, SEAT, CUPRA, ŠKODA, and MAXUS, serving both retail and commercial customers. Their services include new and used vehicle sales, servicing, repairs, parts, and fleet management, positioning them as a comprehensive automotive service provider in their regional market. The website reflects a professional and consistent brand presence aligned with Volkswagen's corporate identity. Technically, the website is built on a modern React framework integrated with Volkswagen's proprietary CMS platform, leveraging Adobe Helix RUM for performance monitoring. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Hosting and asset delivery are managed within Volkswagen's corporate infrastructure, ensuring reliability and security. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not publicly detailed. The absence of a vulnerability disclosure policy suggests an area for improvement. Overall, the website demonstrates a strong digital maturity and security posture appropriate for a medium-sized automotive dealership. Strategic recommendations include publishing a dedicated security policy, enhancing incident response transparency, and adopting a vulnerability disclosure framework to further strengthen trust and compliance.

B

Bad Schinznach AG

bad-schinznach.ch

54

Bad Schinznach AG is a well-established Swiss company specializing in wellness, hospitality, and healthcare services. The company operates thermal baths, a Kurhotel, a private rehabilitation clinic, and offers complementary services such as gastronomy and golf. Their market position is strong regionally, supported by a comprehensive service portfolio targeting tourists, wellness seekers, and patients. The website reflects a mature digital infrastructure using modern technologies like Next.js and React, with good performance and mobile optimization. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities. Overall, the company presents a trustworthy and professional online presence.

E

EBSCO Information Services, Inc.

ebsco.com

76

EBSCO Information Services, Inc. is a leading global provider of research databases, e-journals, ebooks, and discovery services primarily serving academic libraries, public libraries, corporations, schools, government, and medical institutions. The company offers a comprehensive suite of authoritative information resources that support scholarly research and evidence-based clinical decision-making. Their market position is strong, with a focus on institutional subscription models and partnerships with educational and healthcare organizations worldwide. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. The site employs Google Tag Manager for analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. The design is professional and content-rich, supporting a high-quality user experience. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, likely due to privacy protection, which is common for enterprises but reduces transparency. Overall, the security posture is good but could be improved with more explicit security disclosures. The overall risk assessment is low, with the main recommendation being to enhance transparency around security policies and incident response. The site is trustworthy, professional, and compliant with privacy regulations, making it suitable for its target audience of academic and professional institutions.

Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform that enables users to connect, share content, and communicate. It holds a dominant market position with a broad user base and offers key services including social networking, messaging, video sharing, and advertising. The website is professionally designed with excellent content quality and consistent branding, targeting a general audience worldwide. Technically, Facebook employs a modern JavaScript stack with React and asynchronous loading techniques, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and secure cookie practices, though explicit security headers could be enhanced. Privacy compliance is robust, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, Facebook demonstrates high business credibility and trustworthiness.

C

Catellani & Smith Srl

catellanismith.com

61

Catellani & Smith Srl is an established Italian artisanal lighting manufacturer founded in 1989, specializing in handcrafted lamps that redefine space illumination. The company targets design professionals and discerning consumers seeking high-quality, artisanal lighting solutions. Their market position is strong within the luxury and design manufacturing sector, supported by a professional multilingual website and international showroom presence. Technically, the website leverages modern frameworks such as Next.js and React, hosted on a premium provider (Kinsta), with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration inconsistencies, which slightly impacts business credibility. Overall, the website is professional, secure, and compliant with privacy regulations, but domain registration transparency should be improved.

G

Gobierno de Aragón

aragon.es

61

Gobierno de Aragón operates the official regional government portal for Aragón, Spain, providing citizens and stakeholders with comprehensive information and digital services related to public administration, transparency, and electronic procedures. The website serves as a central hub for accessing government resources, official bulletins, and citizen services. Technically, the site is built on the Liferay platform, leveraging modern web technologies such as React, Google Tag Manager, and Microsoft Clarity for analytics and user experience enhancements. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and use of security headers, though some headers could be more explicitly confirmed. Privacy compliance is evident with a comprehensive privacy policy, but the absence of a visible cookie consent mechanism and published security policies are areas for improvement. WHOIS data is unavailable due to query restrictions, limiting full trust assessment, but the official nature and domain usage strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving its government function effectively.

A

Airbnb, Inc.

airbnb.gr

68

Airbnb.gr is the Greek localized website of Airbnb, Inc., a global leader in the hospitality industry offering a peer-to-peer online marketplace for vacation rentals, unique homes, and travel experiences. The site targets travelers and hosts in Greece and worldwide, providing access to millions of listings across 220+ countries. The business model is based on facilitating short-term lodging and experiences through an easy-to-use digital platform. The website reflects Airbnb's strong market position and brand recognition with professional design and comprehensive content.

A

Airbnb, Inc.

airbnb.pt

66

Airbnb, Inc. operates a leading global online marketplace for short-term vacation rentals and experiences, connecting travelers with hosts worldwide. The www.airbnb.pt website serves the Portuguese market, offering localized content and services consistent with Airbnb's global brand. The platform supports millions of listings and provides a seamless user experience for booking accommodations and activities. Technically, the site employs modern web technologies including React and advanced performance optimizations, ensuring fast load times and mobile responsiveness. Security measures such as HTTPS, comprehensive security headers, and error monitoring via Bugsnag demonstrate a mature security posture. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting strong regulatory adherence. Overall, the website is professional, trustworthy, and well-aligned with Airbnb's enterprise stature.

A

Airbnb

airbnb.fr

66

Airbnb is a leading global online marketplace specializing in vacation rentals, unique accommodations, and travel experiences. The company operates a large-scale platform connecting travelers with hosts worldwide, offering millions of listings across more than 220 countries. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, Airbnb employs modern web technologies such as React and integrates analytics and error tracking tools like Google Tag Manager and Bugsnag, ensuring robust performance and monitoring capabilities. Security posture is strong with HTTPS enforcement, CSRF protection, and security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, Airbnb's website demonstrates high trustworthiness, excellent user experience, and compliance with privacy regulations including GDPR. The absence of WHOIS data is likely due to privacy protection, which is justified for a company of this scale. Strategic recommendations include publishing detailed security and incident response policies to enhance transparency and trust.

S

SANITEX SIA

epromo.lv

62

SANITEX SIA operates the ePROMO.lv website, a Latvian retail platform targeting professionals and gourmet consumers with a focus on food service and cash & carry offerings. The company maintains a solid market position in Latvia, providing exclusive products and comprehensive services including promotional content and customer loyalty programs. The website is well-designed, mobile-optimized, and integrates modern web technologies such as React and Next.js, hosted behind Cloudflare for performance and security. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms in place. However, the site lacks a dedicated security policy and incident response information, which could enhance trust and transparency. Overall, the security posture is strong with HTTPS enforcement and security headers, but there is room for improvement in vulnerability disclosure and security communication. The website is safe for general audiences, with no adult or questionable content detected.

B

Bold Commerce

boldapps.net

65

Bold Commerce is a well-established Canadian technology company specializing in ecommerce checkout and payment integration solutions. Their flagship product, Bold Booster, simplifies payment gateway integration across multiple open-source ecommerce platforms, enabling merchants to access advanced payment options such as Apple Pay, Google Pay, and PayPal Fastlane. The company targets payment companies and merchants seeking modernized checkout experiences and operates a robust partner ecosystem including Shopify and Magento. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website leverages modern web technologies including Next.js and React, supported by Cloudflare DNS and CDN services. It integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Hotjar, and Facebook Pixel, demonstrating a sophisticated digital marketing infrastructure. The site is mobile-optimized, fast-loading, and accessible, with proper SEO and metadata implementation. From a security perspective, Bold Commerce enforces HTTPS, employs standard security headers, and maintains a bug bounty program to encourage vulnerability reporting. The domain registration data is consistent with the business claims, and no suspicious patterns or vulnerabilities were detected. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and other privacy regulations. Overall, Bold Commerce presents a high level of professionalism, security maturity, and business credibility. The website is safe for general audiences and supports extensive user tracking for marketing purposes. Strategic recommendations include enabling DNSSEC for enhanced DNS security, publishing a security.txt file for vulnerability disclosure, and explicitly listing security frameworks or certifications to further boost trust.

R

República Portuguesa

gov.pt

66

The website gov.pt serves as the official digital portal for the Portuguese government, providing citizens, residents, and businesses with access to a wide range of public services and institutional information. It holds a strong market position as the primary gateway for government digital services in Portugal, targeting a broad audience including individuals and economic entities. The portal's business model revolves around government digital transformation and public service delivery online. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and accessibility compliance. The infrastructure appears robust, with secure HTTPS connections and comprehensive security headers, reflecting a mature digital presence. From a security perspective, the portal demonstrates a solid posture with enforced HTTPS, security best practices, and no visible vulnerabilities. However, explicit security policies and incident response details are not prominently published, which could be improved to enhance transparency and trust. Overall, the risk assessment is low given the official nature, strong security measures, and compliance with privacy regulations. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing data protection officer visibility to further strengthen trust and compliance.

E

Epsilon US

dotomi.com

69

Epsilon US is a leading enterprise in the marketing technology sector, specializing in personalized marketing solutions that enable brands to connect with consumers across multiple channels. Their flagship platform, PeopleCloud, along with a suite of products and services including customer data platforms, clean rooms, and loyalty programs, positions them as a key player in the B2B marketing technology space. The company targets marketers and large enterprises seeking scalable, data-driven marketing solutions. Technically, the website is built on modern frameworks such as React and Next.js, with integrations for Google reCAPTCHA and OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and consent management, though explicit security headers and public security policies could be improved. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting a high level of trust and credibility. The absence of WHOIS data is a notable anomaly but does not detract from the site's legitimacy based on content and branding.

T

The Vanguard Group, Inc.

vanguard.com

68

The Vanguard Group, Inc. is a leading global investment management company with a 50-year history, serving over 30 million investors worldwide. The company offers a broad range of financial products including mutual funds, ETFs, IRAs, and retirement plans, complemented by personalized financial advice and market insights. Vanguard's business model emphasizes low costs, long-term investment perspectives, and client ownership structure, positioning it as a trusted leader in the finance industry. Technically, the website leverages modern web technologies such as React and Next.js, with robust performance and excellent mobile optimization. The site employs advanced tag management and analytics tools including Adobe Launch and OneTrust for privacy compliance. Security is well implemented with HTTPS, Content Security Policy headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature digital infrastructure. Security posture is strong with best practices observed, though explicit security policy and incident response contacts are not publicly detailed. The WHOIS data for the subdomain is unavailable, likely due to it being a subdomain rather than a registered domain, but the main domain is well-established and trustworthy. Overall, the site is professional, secure, and compliant, with extensive tracking and advertising integrations managed transparently. The overall risk is low, with recommendations to publish explicit security policies and incident response information to enhance transparency and trust further. The site is safe for general audiences with no adult or questionable content detected.

A

Airbnb, Inc.

airbnb.com

61

Airbnb, Inc. operates a leading global online marketplace for vacation rentals and travel experiences, serving millions of users worldwide. The platform connects hosts offering diverse lodging options with travelers seeking unique accommodations, supporting over 8 million listings across more than 220 countries. Airbnb's market position is strong, leveraging a scalable digital platform with extensive localization and a trusted brand. Technically, the website employs modern web technologies including React, advanced performance monitoring, and robust SEO and accessibility features, ensuring a fast and user-friendly experience across devices. Security posture is solid with HTTPS enforcement, comprehensive security headers, and active error monitoring, though explicit public security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, reflecting adherence to GDPR and other regulations. Overall, Airbnb demonstrates a mature digital presence with high trustworthiness and professionalism, suitable for its enterprise scale and global audience.

I

I Prefer

iprefer.com

73

I Prefer operates a hotel rewards program that enables members to earn points and redeem exclusive benefits at participating hotels worldwide. The website presents a modern, well-structured platform built on React and Next.js, hosted on AWS infrastructure. The site includes cookie consent mechanisms and integrates Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and published security policies. No privacy policy or terms of service were detected in the provided content, which is a compliance gap. Overall, the site is professional and trustworthy but could improve transparency and security practices.

P

Preferred Hotels & Resorts

preferredhotels.com

74

Preferred Hotels & Resorts operates as a leading global hospitality company specializing in representing independent luxury hotels and resorts worldwide. The company offers a comprehensive platform for luxury travel accommodations, intuitive service, and unique experiences, targeting discerning travelers seeking independent hotel options. The website reflects a mature digital presence with a modern tech stack including React and Next.js, hosted on AWS infrastructure, and integrates industry-standard tools such as Google Tag Manager and OneTrust for privacy compliance. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high level of business credibility.

C

Compagnie Nationale des Commissaires aux Comptes (CNCC)

auditeur-legal.fr

59

The website auditeur-legal.fr serves as the official informational portal for the Compagnie Nationale des Commissaires aux Comptes (CNCC), the national professional body for legal auditors in France. It provides comprehensive information about the auditing profession, its missions, and services, targeting organizations, auditors, and stakeholders in the French economy. The site positions itself as an authoritative resource promoting transparency, trust, and security in economic activities through legal auditing. Technically, the website is built as a modern React single-page application using Ant Design components, hosted likely via Gandi, and employs Matomo for analytics. The site is mobile-optimized with good navigation and professional design, although accessibility and SEO could be improved. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The site is safe, professional, and trustworthy, with minor improvements recommended in privacy and security transparency.

The Filmin Times is a niche media platform focused on presenting contemporary European history through cinema. The website offers curated historical film content, timelines, character profiles, and maps, targeting a general audience interested in cultural and historical media. The site is built using modern web technologies including React and Webpack, hosted by OVH sas, and integrates Google Analytics for user tracking. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks advanced security headers and published security policies. Privacy compliance is basic with cookie consent and a privacy policy linked via a partner domain. Overall, the site is professional and trustworthy with moderate risk and room for security and compliance improvements.