Security Directory

N

Nordea Finans Sverige AB (publ)

nordeafinance.se

66

Nordea Finans Sverige AB operates the Nordea Finance Privat website, providing a range of financial services primarily focused on consumer vehicle financing, credit cards, and loans. The company is part of the larger Nordea group, a well-established financial institution in the Nordic region. The website targets private individuals and businesses in Sweden, offering tailored financing solutions and customer support. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

A

Africa Finance Corporation

africafc.org

69

Africa Finance Corporation (AFC) is a leading multilateral financial institution established by African sovereign states to address the continent's infrastructure deficit through pragmatic investment and financing solutions. The organization holds a strong market position as a trusted infrastructure solutions provider with an investment grade rating and a pan-African footprint spanning 45 member countries. Key services include principal investing, project development, financial advisory, and syndications, targeting governments, investors, and project partners across Africa. Technically, the website is built on modern web technologies including Craft CMS, Bootstrap, jQuery, and HTMX, with good mobile optimization and SEO practices. The site is well-structured, professionally designed, and supports multiple languages, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be enhanced for improved protection. The security evaluation reveals no critical vulnerabilities or exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Contact information is clearly provided, including email, phone, and physical address, supporting business credibility. Overall, AFC's website demonstrates a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data limits domain registration insights but does not detract from the evident legitimacy and strong market presence of the organization. Strategic recommendations include enhancing security headers, improving accessibility features, and maintaining regular security audits to sustain and improve the security posture.

O

Oracle

estara.com

73

Oracle Commerce is a comprehensive ecommerce platform designed to empower both B2B and B2C businesses by integrating customer, sales, and operational data into a unified digital buying experience. Positioned as a leading enterprise technology provider, Oracle offers cloud-native, API-first solutions with flexible deployment options and advanced AI-driven sales capabilities. The platform supports seamless integration with Oracle's Configure, Price, Quote (CPQ) and Subscription Management suites, enhancing revenue operations and buyer engagement. The website reflects Oracle's strong market presence with professional design, extensive resources, and global reach.

I

International Railway Industry Standard (IRIS)

iris-rail.org

63

The IRIS Portal website represents the International Railway Industry Standard, a globally recognized certification system for rail sector companies. The organization provides certification, audit, and training services aligned with ISO/TS 22163 standards. The website targets rail industry companies and certification bodies, offering resources such as certificate searches, news updates, and membership applications. The business is well-established, with a domain age dating back to 2005, indicating a mature presence in the railway certification market. Technically, the website employs a custom CMS with a technology stack including HTML5, CSS3, JavaScript, jQuery, and Google Maps API. The site is hosted via Hostbasket and uses HTTPS with a good SSL configuration. Performance and mobile optimization are moderate, with room for improvement in accessibility and modern framework adoption. The site includes interactive elements such as charts and maps, enhancing user engagement. From a security perspective, the website demonstrates basic best practices including HTTPS enforcement and CAPTCHA on login forms. However, DNSSEC is not enabled, and no explicit security headers were detected, representing areas for enhancement. No incident response or security policy pages are present, which could improve transparency and trust. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is professional, trustworthy, and focused on its niche market. It scores well on content quality and business credibility but could improve technical implementation and security posture. Strategic recommendations include enabling DNSSEC, adding security headers, updating libraries regularly, and publishing security and incident response policies to strengthen compliance and user trust.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business-related content, metadata, or structured data is present. The page is a default error display from the Chromium browser, not a functional website. Consequently, no business overview, market position, or services can be identified. The technical infrastructure is limited to Chromium's embedded scripts for error display, with no external hosting or CMS detected. Security posture is minimal, with no HTTPS or security headers evident. Privacy and compliance policies are absent, and no contact or incident response information is available. Overall, the site is non-functional and likely not a legitimate business presence.

W

World Bank Group

shihang.org

59

The website www.shihang.org/ext/zh/home serves as a Chinese language portal aligned with the World Bank Group's mission to fight global poverty through sustainable development. It offers rich content including economic reports, data, research publications, and project information. The site is built on Adobe Experience Manager, indicating a mature technical infrastructure with modern web technologies. The content is professionally presented, well-structured, and mobile optimized, targeting global development stakeholders and Chinese-speaking audiences. However, the WHOIS data is incomplete and malformed, raising concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS implied but lacking visible security headers and privacy compliance mechanisms such as cookie consent or privacy policies. No contact information or incident response channels are visible, which limits user trust and compliance with data protection regulations. Overall, the site is content-rich and professionally designed but would benefit from enhanced transparency, security policies, and WHOIS clarity to improve trust and compliance.

Г

Группа Всемирного банка

vsemirnyjbank.org

66

The website represents the Russian language portal of the World Bank Group, a major international development organization uniting 189 countries to combat global poverty through sustainable solutions. The site provides extensive content including research publications, data resources, project information, and impact measurement, targeting governments, policymakers, researchers, and the global development community. Technically, the site is built on Adobe Experience Manager with modern JavaScript modules and responsive design, offering a professional and well-structured user experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement in compliance and security posture. The WHOIS data is unavailable due to a malformed request, but the domain and content strongly align with the World Bank Group's official branding and services, indicating legitimacy. Overall, the site is a high-quality, authoritative resource with moderate technical and security maturity.

م

مجموعة البنك الدولي

albankaldawli.org

67

The website represents the Arabic language portal of the World Bank Group, a globally recognized international financial institution focused on providing financial and technical assistance to developing countries. The site offers extensive content including news, research publications, data resources, and project information tailored for Arabic-speaking audiences. The business model is that of a non-profit international organization delivering loans, credits, and advisory services to over 100 developing and transitional countries. The site is professionally designed, mobile-optimized, and uses modern web technologies including JavaScript ES modules and Adobe Experience Manager CMS. From a technical perspective, the site demonstrates good SEO, accessibility, and performance characteristics, though some improvements could be made in security headers and cookie consent mechanisms. The security posture is strong with HTTPS enforced and secure form handling, but lacks published incident response or vulnerability disclosure policies. WHOIS data is unavailable or privacy protected, which is typical for such organizations, and does not detract from the site's legitimacy given the strong alignment with World Bank branding and content. Overall, the website is a trustworthy, professional, and comprehensive resource for development-related information in Arabic. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and providing clearer contact information for security incidents to further improve trust and compliance.

B

Banco Mundial

bancomundial.org

67

Banco Mundial's Spanish language website serves as an official portal providing comprehensive information about the World Bank Group's mission to promote sustainable development, economic resilience, and growth. The site targets governments, development professionals, and the general public interested in economic and social development in over 100 developing and transitioning countries. It offers access to data, research publications, events, and project information, reflecting a mature and authoritative digital presence. Technically, the site uses modern web standards including ES modules for JavaScript and responsive design, ensuring good user experience across devices. However, some technical aspects such as security headers and explicit privacy and cookie policies are missing or not detected in the provided content, which could be improved to enhance security posture and compliance. The WHOIS data is unavailable due to a malformed query, limiting domain registration trust analysis, but the website's content and domain strongly indicate legitimacy as an official World Bank Group resource. Overall, the site demonstrates a high level of professionalism and trustworthiness with room for improvement in privacy compliance and security best practices.

8

89up

89up.org

70

89up is a specialized integrated communications agency founded in 2014, focused on serving non-profit organizations and global causes. The website presents a professional and consistent brand image targeting non-profits worldwide. The business model centers on providing communications services tailored to important social causes, positioning itself as a global agency in this niche. The site content is relevant and well-structured, with clear navigation and good mobile optimization.

The website ndcpartnership.org is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before granting access. This prevents extraction of meaningful business, contact, or policy information from the site content. The domain is registered since 2016 with Network Solutions, LLC, and uses Cloudflare DNS and protection services, indicating a legitimate and established presence. However, no privacy, cookie, or terms of service policies are detectable in the provided HTML content. The technical infrastructure relies on Cloudflare's security platform, but no further technology stack or CMS details are available due to content blocking. Security posture cannot be fully assessed, but the domain uses HTTPS and has clientTransferProhibited status, which are positive indicators. Overall, the site is safe with no adult or explicit content detected, but the lack of accessible content limits comprehensive analysis.

B

Bank for International Settlements

bis.org

60

The Bank for International Settlements (BIS) is a premier international financial institution dedicated to promoting global monetary and financial stability through cooperation among central banks and financial authorities. The website reflects its authoritative market position by offering extensive research, statistical data, and innovation initiatives targeted at central banks, policymakers, and financial supervisors worldwide. The BIS operates as a global hub for banking supervision, financial stability, and technological innovation in finance, supported by a mature and enterprise-scale digital presence. Technically, the website employs modern web technologies including React components, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, with comprehensive metadata and structured data enhancing SEO and interoperability. While the WHOIS data is unavailable due to privacy or registry limitations, the website's professional branding and consistent domain usage strongly support its legitimacy. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, though explicit security headers and incident response disclosures are absent. The use of Matomo analytics aligns with privacy best practices, and cookie and privacy policies are clearly presented with consent mechanisms. Overall, the security posture is solid but could be enhanced by publishing dedicated security policies and vulnerability disclosure programs. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security header implementation, publishing incident response and vulnerability disclosure information, and enhancing transparency around data protection officers and security policies to further strengthen trust and compliance.

M

MAGIX Software GmbH

magix.com

69

MAGIX Software GmbH is a medium-sized technology company specializing in creative software applications for video, music, photo, graphics, and website production. The company maintains a professional and well-structured website powered by TYPO3 CMS, integrating modern analytics and marketing technologies such as Piwik PRO, Google Tag Manager, and OneTrust for GDPR-compliant cookie consent management. The website demonstrates good design quality, mobile optimization, and accessibility, targeting a broad audience of creative professionals and consumers worldwide. Despite the absence of WHOIS registration data, the website's content and privacy practices indicate a legitimate and established business presence. Technically, the site employs a robust stack with multiple third-party integrations for analytics, marketing automation, and affiliate advertising networks. Security posture is strong with HTTPS enforced and anonymized tracking, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed with comprehensive cookie and privacy policies and granular user consent mechanisms. Overall, MAGIX's digital infrastructure reflects a mature and professional operation with room for improvement in transparency around security policies and incident response. The lack of WHOIS data is a notable anomaly but does not currently undermine the site's operational legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

V

VMware by Broadcom

vmware.com

75

VMware by Broadcom is a leading enterprise technology company specializing in cloud computing, virtualization, and infrastructure optimization. The website presents a professional and consistent brand image aligned with its parent company Broadcom. The site targets enterprise customers and IT professionals seeking advanced cloud, networking, and security solutions. Technically, the website uses modern frameworks such as React and integrates industry-standard tools like Google Tag Manager and OneTrust for analytics and cookie consent management. Performance and mobile optimization are good, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented; however, explicit security headers and published security policies are absent in the provided data. WHOIS data is missing or inaccessible, which is unusual for a major enterprise domain but may be due to registry or privacy policies. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in security transparency and privacy documentation.

N

Nordea Finans Sverige AB (publ)

nordeafinans.se

56

Nordea Finans Sverige AB (publ) operates the website www.nordeafinance.se, providing financial services primarily focused on private customers in Sweden. The company offers vehicle financing, credit cards, loans, and related financial products. The website is professionally designed, mobile-optimized, and consistent with the Nordea brand, indicating a strong market position within the Nordic financial sector. The presence of multiple login portals and comprehensive customer service options reflects a mature digital infrastructure supporting diverse customer needs. Technically, the site uses modern web standards, including HTTPS, secure cookies, and a custom CMS framework, ensuring a reliable user experience. Security posture is strong with appropriate headers and no visible vulnerabilities, though explicit security policy and incident response information are not published. Privacy compliance is well addressed with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the site represents a trustworthy and professional financial services platform with room for improvement in transparency around security policies and incident response.

E

European Bank for Reconstruction and Development

ebrd.com

62

The European Bank for Reconstruction and Development (EBRD) is a prominent international financial institution focused on fostering economic transition and sustainable development across more than 40 economies in three continents. The organization leverages a unique business model combining financing, advisory services, and policy reform to support private sector growth and environmental sustainability. With over €210 billion invested since its founding in 1991, EBRD holds a strong market position as a key development financier. Technically, the website is built on Adobe Experience Manager, utilizing modern web technologies including Adobe Analytics and Adobe Launch for marketing and data collection. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. The presence of comprehensive metadata, structured data, and SEO best practices further enhances its digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. While explicit security headers are not visible in the HTML, the use of Adobe's secure platforms and absence of exposed sensitive data indicate a solid security posture. However, the lack of WHOIS data for the domain is unusual and warrants further verification to confirm domain registration legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained digital presence consistent with a large international financial institution. Strategic recommendations include verifying WHOIS registration details, enhancing visible security headers, and implementing a security.txt file to improve vulnerability disclosure transparency.

S

Sustainable Ventures Design

sustainableventures.design

63

Sustainable Ventures Design is a UK-based small design consultancy specializing exclusively in sustainable projects, including brand, product, and experience design. Their market position is niche, focusing on climate change and sustainability-driven clients. The website is professionally designed using Squarespace, with good mobile optimization and clear navigation. However, it lacks explicit privacy and terms of service policies and does not provide direct contact information on the homepage. Security posture is adequate with HTTPS enforced but could be improved by enabling DNSSEC and adding security headers. The domain is privacy protected, consistent with a legitimate new business founded in 2021. Overall, the website presents a trustworthy and professional image but should enhance compliance and security practices.

U

Unzer GmbH

unzer.com

65

Unzer GmbH operates a comprehensive payment platform serving over 85,000 merchants across various sectors including retail, gastronomy, and e-commerce. The company offers a broad range of payment solutions including online payments, POS systems, risk management, and white-label services. Their platform supports multiple payment methods and integrates with popular e-commerce platforms. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, with a CMS powered by Storyblok. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit privacy and terms pages are not clearly found. WHOIS data is unavailable, which slightly impacts domain trust but the website content and business presence indicate legitimacy.

F

Forbrukerrådet

finansportalen.no

60

Forbrukerrådet operates the Finansportalen website as a Norwegian consumer rights organization focused on providing market monitoring and financial product comparison services. The site offers tools and information to help consumers compare pensions, banking, insurance, and funds. The organization holds a strong market position as an authoritative non-profit consumer advocate in Norway. Technically, the website is built on WordPress with modern plugins and analytics tools such as Matomo and Silktide, demonstrating a mature digital infrastructure with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Amaury Sport Organisation (ASO)

paris-roubaix.fr

61

The Paris-Roubaix official website serves as the authoritative digital platform for one of cycling's most iconic races, managed by Amaury Sport Organisation (ASO). It provides comprehensive race information, multimedia content, team details, rankings, and event-related news, targeting cycling enthusiasts, media, and participants globally. The site is well-branded, professionally designed, and integrates modern digital marketing and analytics tools, ensuring a rich user experience across devices. Technically, the website employs contemporary JavaScript libraries, Google Tag Manager, Facebook SDK, and Google DoubleClick for advertising, alongside a responsive design and accessibility features. The presence of a robust cookie consent mechanism demonstrates compliance with GDPR and privacy regulations. The site uses HTTPS with strong SSL configurations, and security headers are likely implemented, contributing to a solid security posture. While WHOIS data is unavailable, likely due to privacy protection or registry policies, the website's affiliation with recognized organizations such as UCI and ASO, along with consistent branding and secure infrastructure, supports its legitimacy. No critical vulnerabilities or security issues were detected during analysis. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response procedures, and vulnerability disclosure programs to enhance transparency and trust further.

4

4SELLERS

4sellers.de

62

4SELLERS is a German-based company specializing in innovative ERP software solutions tailored for e-commerce businesses. Their platform aims to optimize trading processes and enhance online sales success, positioning them as a significant player in the e-commerce software sector. The website is professionally designed, leveraging HubSpot CMS and integrating modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security measures such as HTTPS and security headers are properly implemented, indicating a solid security posture. However, the absence of explicit privacy policies, terms of service, and contact information represents gaps in compliance and user trust facilitation. Overall, the site is accessible and trustworthy but would benefit from enhanced transparency and compliance documentation.

A

Automattic, Inc.

underscores.me

48

Underscores.me is a website offering a starter theme for WordPress developers, maintained by Automattic, Inc., a reputable company in the WordPress ecosystem. The site provides a minimal, well-structured theme framework designed for developers to build custom WordPress themes efficiently. The business model is open source and community-driven, targeting WordPress theme developers globally. The website is technically built on WordPress CMS with modern web technologies including HTML5, CSS3, JavaScript, and jQuery, and uses WordPress.com nameservers for hosting. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the website enforces HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and Google Analytics is installed but not configured, indicating minimal user tracking. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The domain WHOIS data is consistent with the business, showing a long-standing registration by Automattic, Inc., supporting the legitimacy of the site. Overall, the website is safe, professional, and trustworthy, with a strong business credibility and technical foundation. However, it would benefit from improved privacy compliance, security headers, and transparency regarding data protection and incident response. These enhancements would strengthen the site's security posture and regulatory compliance, aligning with best practices for modern web services.

V

Volkswagen Møller Bilfinans AS

bilfinans.no

68

Volkswagen Møller Bilfinans AS is a leading Norwegian financial services company specializing in vehicle leasing, financing, and insurance for both private and business customers. The company positions itself as one of Norway's largest leasing companies, offering a broad range of services including private leasing, business leasing, car loans, insurance, and vehicle maintenance. Their partnerships with major automotive brands such as Volkswagen, Audi, Skoda, and Cupra reinforce their market presence and credibility. Technically, the website is built on Adobe Experience Manager, utilizing modern web technologies including Adobe Helix RUM for performance monitoring and Adobe DTM for tag management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. The use of secure login portals with BankID authentication demonstrates a commitment to secure customer interactions. From a security perspective, the site enforces HTTPS and employs secure authentication methods. However, it lacks visible security headers and a cookie consent mechanism, which are important for compliance and security best practices. There is no publicly available incident response or security policy information, and direct company contact details are not prominently displayed, which could impact user trust and support responsiveness. Overall, the website is professional, trustworthy, and well-branded, with a strong business model and market position. The absence of WHOIS data due to privacy protection is typical for Norwegian domains but limits domain age and registrant verification. The site is safe for general audiences with no adult or questionable content detected.

The website olx.ba is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. As a result, no business, contact, or policy information is available for analysis. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or abuse. Without access to the actual website content, it is not possible to assess the business model, services, or compliance posture accurately. The technical infrastructure includes Cloudflare's security platform, but no further technology stack details can be confirmed. Security posture cannot be fully evaluated due to lack of accessible data, though the presence of Cloudflare indicates some level of protection. Overall, the site is currently low risk but also low transparency due to content blocking.

V

Volkswagen

volkswagen-commercial-vehicles.gr

66

Volkswagen Greece operates a professional and comprehensive website dedicated to commercial vehicles, targeting business customers and professionals in the transportation sector. The site offers detailed information about Volkswagen's commercial vehicle offerings, including configuration tools, test drive bookings, and access to an authorized dealer network. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and React-based technologies, ensuring a responsive and user-friendly experience. Security practices are robust with HTTPS enforcement and security headers, although explicit security policies and incident response details are not published. Overall, the website reflects a mature digital presence aligned with Volkswagen's global brand standards.

B

Bundesverband der Deutschen Spirituosen-Industrie und -Importeure e. V. (BSI)

spirituosen-verband.de

44

The Bundesverband der Deutschen Spirituosen-Industrie und -Importeure e. V. (BSI) is a well-established German industry association representing spirits manufacturers and importers. Founded in 1974, it serves as a political voice and advisory body for its members, covering approximately 85% of the German spirits market. The website provides comprehensive information about the association's values, responsibilities, and industry knowledge, targeting both industry stakeholders and consumers interested in responsible alcohol consumption. Technically, the site is built on TYPO3 CMS, with good mobile optimization and SEO practices, though some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or incident response contacts. Overall, the domain registration is consistent and trustworthy, matching the business profile. The site content is safe but categorized as 'questionable' due to alcohol-related content, targeting a mature audience.

V

VOLKSWAGEN GROUP FRANCE, DIVISION SEAT FRANCE

seat.fr

64

SEAT France operates as a division of Volkswagen Group France, providing a comprehensive range of automobiles including city cars, SUVs, and sedans tailored for the French market. The website offers detailed vehicle information, configurators, dealer locators, and after-sales services, positioning SEAT as a competitive automotive brand in France. The digital infrastructure is built on Adobe Experience Manager, leveraging Adobe's marketing and analytics tools to deliver a modern, responsive, and user-friendly experience. The site demonstrates strong compliance with GDPR and cookie regulations, featuring clear privacy and cookie policies. Security posture is robust with HTTPS enforcement and use of trusted third-party services, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a mature digital presence aligned with a large automotive enterprise, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

A

Andreas Mourão dos Santos

andi-santos.com

64

Andreas Mourão dos Santos operates a professional freelance portfolio website showcasing expertise in creative development, design, and AI integration. The business targets clients seeking innovative web solutions combining art and technology. The website is well-designed, mobile-optimized, and provides clear navigation with a focus on portfolio presentation and client engagement via contact forms. Technically, the site uses modern web technologies including Webflow CMS, jQuery, and Swiper.js, hosted under a domain registered with IONOS SE. Security posture is solid with HTTPS enabled and cookie consent implemented, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is addressed with a dedicated privacy policy and cookie consent mechanism. Overall, the site reflects a credible and professional freelance business with a strong digital presence.

TwojaFlota.pl is a professional fleet management service platform operated by Volkswagen Group Polska sp. z o.o., offering a comprehensive service program for managing vehicle fleets, primarily targeting companies with multiple vehicles. The website is well-branded with Volkswagen Group affiliations and provides clear information about the program, including downloadable documents, a contact form, and detailed privacy and cookie policies. The technical infrastructure uses modern web technologies including jQuery, js-cookie, Google Analytics, and Google Tag Manager, hosted via home.pl S.A., a reputable Polish hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS implied, cookie consent implemented, and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the website demonstrates a solid business credibility and privacy compliance, with no signs of malicious or adult content.

M

MeetDeal

meetdeal.fr

62

MeetDeal is a French-based company specializing in customer journey and lead generation solutions tailored for the automotive industry. Founded in 2017 and operating under the parent company DisruptDeal, MeetDeal offers a suite of services including human live chat, lead generation via social networks, live video streaming in studios, and mobile live streaming applications. The company positions itself as a leading conversational lever to optimize business performance in the automotive sector, serving dealerships and manufacturers with a strong omnichannel approach. The website reflects a professional and modern digital presence with multi-language support and extensive client and partner showcases. Technically, the site leverages modern JavaScript frameworks like Alpine.js, integrates multiple tracking and marketing tools such as Google Tag Manager, Pinterest Tag, and LinkedIn Insight, and hosts media content on Amazon AWS. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR mechanisms. Overall, the website demonstrates a mature digital infrastructure and a credible business model with strong industry partnerships.

D

Das WeltAuto

dasweltauto.fr

43

DasWeltauto.fr is a website associated with the Volkswagen Group's used car sales platform, Das WeltAuto. The site primarily serves as a basic landing page with minimal content and advertising blocks, targeting used car buyers in France. The business is positioned as a subsidiary brand of Volkswagen, focusing on certified pre-owned vehicles. The website's technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript, with DNS hosted on Volkswagen's name servers and domain registration through 1API GmbH. While the site is accessible without any WAF or security challenges, it lacks advanced technical features such as structured data, comprehensive SEO, or accessibility enhancements. Security posture is basic, with no visible security headers or incident response information, and privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site presents moderate trustworthiness due to its association with Volkswagen but requires improvements in security, privacy, and user engagement to enhance its digital maturity.

R

Robert Bosch GmbH

bosch-prasa.pl

57

The website www.bosch-press.pl serves as the official Bosch press portal for Poland, providing a comprehensive platform for press releases, media content, and corporate news related to Bosch's diverse business sectors such as mobility, smart home, and industry 4.0. The portal targets media professionals, journalists, and stakeholders interested in Bosch's activities within the Polish market. The site is well-branded, professionally designed, and offers a user-friendly experience with clear navigation and mobile optimization. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager for analytics and marketing purposes. It uses custom web components for privacy settings and consent management, reflecting a mature digital infrastructure. Performance is moderate with good mobile responsiveness and basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks visible advanced security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the website presents a low-risk profile with strong business credibility and professional content. The absence of WHOIS data is noted but likely due to registry privacy policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and continuous monitoring of third-party scripts.

N

N/A

adobetm.com

55

The website ww25.adobetm.com appears to be a parked domain primarily serving advertising content through Bodis and Google Adsense networks. It mimics a well-known brand name but lacks any legitimate business information, contact details, or services. The technical infrastructure is basic, with standard HTML, CSS, and JavaScript, but no modern frameworks or CMS detected. Security posture is weak due to absence of HTTPS and security headers. Privacy and cookie policies are minimal and lack compliance indicators. Overall, the site is low trust and likely used for domain parking or ad revenue generation rather than a genuine business presence.

R

Robert Bosch GmbH

bosch-press.nl

43

The Bosch Media Service website serves as the official corporate media portal for Robert Bosch GmbH in the Netherlands, providing press releases, media content, and corporate news to journalists and business partners. The site reflects Bosch's strong market position as a leading global technology and engineering company, focusing on sectors such as energy, transportation, and technology. The platform supports Bosch's communication strategy by offering well-structured, relevant content with consistent branding and a professional design. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Google Tag Manager for analytics and marketing. It features a custom cookie consent mechanism compliant with GDPR, ensuring user privacy and consent management. The site is mobile-optimized with good SEO practices and basic accessibility features, although some enhancements could improve compliance and user experience. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks some advanced security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with Bosch's corporate identity, indicating high legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, adding incident response information, and publishing terms of service to improve legal completeness and security posture.

P

PureWeb

pureweb.io

69

PureWeb operates as a specialized technology company providing a real-time 3D pixel streaming platform primarily targeting developers and enterprises using Unreal Engine and Unity. Their platform enables distribution of high-fidelity 3D applications via pixel and render streaming technologies, positioning them as a niche player in the real-time streaming market. The website reflects a modern, professional digital presence with excellent content quality and user experience, indicating a mature technical infrastructure leveraging React and Gatsby frameworks. Security posture is moderate; while HTTPS is implied and no sensitive data is exposed, the absence of explicit security headers and published security policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on website professionalism. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and improving domain registration transparency.

R

Robert Bosch B.V.

bosch.nl

58

Robert Bosch B.V., operating the website www.bosch.nl, is a well-established multinational enterprise specializing in manufacturing and technology solutions across mobility, home, and industrial sectors. The website serves a broad audience including consumers, business partners, and job seekers, providing comprehensive information about products, services, corporate responsibility, and career opportunities. The site is professionally designed with consistent branding and clear navigation, reflecting Bosch's strong market position and global presence. Technically, the website employs modern web technologies including Google Tag Manager for analytics, custom privacy consent management components, and structured data for SEO. The site is mobile-optimized and accessible, with good performance metrics. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, explicit security headers and a public security policy are absent. From a security perspective, the site enforces HTTPS and manages user consent effectively, but lacks published incident response contacts or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the business identity, confirming legitimacy and trustworthiness. Overall, the website demonstrates a high level of professionalism, security, and compliance, supporting Bosch's reputation as a trusted global technology leader.

I

IMUC

imuc.de

54

IMUC's website is hosted on the Wix platform and presents a basic corporate presence with limited content and no explicit business description or contact information visible in the provided data. The site uses Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. While HTTPS is enabled, the site lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security posture. No signs of WAF or content blocking were detected, allowing full access to the site content. Overall, the site appears safe and targeted at a general audience but lacks comprehensive business and security information.

H

Home Connect GmbH

home-connect.com

73

Home Connect GmbH operates a global smart home platform enabling users to control household appliances from multiple brands via a unified app. The company is positioned as a technology provider within the smart appliance ecosystem, supported by the BSH Group. The website offers comprehensive information about the app, supported appliances, partners, and customer support services, targeting consumers interested in smart home convenience. Technically, the site employs modern JavaScript frameworks, Adobe Experience Platform Launch for analytics, and is optimized for mobile devices with good SEO and accessibility practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust assessment, but branding and external references support legitimacy. Overall, the site is professional, secure, and privacy-conscious, serving as a credible digital presence for Home Connect.

D

Dataroid - Unleash the potential of digital with data

dataroid.com

69

The website 'Dataroid' presents itself as a digital data-focused business, with a professional design and use of modern WordPress technologies such as Elementor and Jet plugins. However, the absence of WHOIS registration data raises significant concerns about the legitimacy and ownership of the domain. The technical infrastructure appears moderately mature with standard web technologies and some tracking services integrated. Security posture is weak due to lack of visible HTTPS confirmation, security headers, and absence of privacy or cookie policies. Overall, the site is accessible and functional but lacks critical trust and compliance elements, which poses risks for users and business credibility.

3

3Q GmbH

3qsdn.com

73

3Q GmbH operates a professional, GDPR-compliant video streaming and hosting platform primarily targeting European businesses and organizations. The company offers a modular SaaS solution with key services including live streaming, video hosting, webcasting, video advertising, and AI-powered video optimization. Their market position is strengthened by ISO 27001 certification and a strong emphasis on data protection and security. The website reflects a mature digital presence with modern technologies, comprehensive content, and clear navigation. Technically, the platform leverages HubSpot CMS, Cookiebot for consent management, Google Tag Manager, and proprietary video player technology. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS, GDPR compliance, and no visible vulnerabilities, although explicit security headers could be more clearly implemented. Overall, the security and privacy practices align well with industry standards, though the absence of a public incident response contact and vulnerability disclosure policy suggests room for improvement. The domain WHOIS data is privacy protected but consistent with the company's claims, supporting legitimacy. The site is free from WAF blocks or content restrictions, enabling full analysis. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing explicit incident response contacts to further boost trust and compliance.

B

Bosch

bosch-home.co.uk

67

Bosch Home UK operates a comprehensive website dedicated to home appliances, offering a wide range of products including cooking, dishwashing, laundry, refrigeration, and coffee machines. The site reflects Bosch's strong market position as a global leader in home appliances, targeting general consumers in the UK with a professional and user-friendly digital presence. The website infrastructure leverages modern technologies such as Adobe DTM and Fredhopper for analytics and product search, with a robust consent management system ensuring GDPR compliance. Security posture is strong with HTTPS enforced, security headers present, and CSRF protections implemented, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, excellent content quality, and good privacy compliance, supporting Bosch's trusted brand image in the retail sector.

.

.COM.DE

com.de

56

The website com.de operates as a domain registry service offering .COM.DE domain registrations as a flexible alternative to the traditional .DE domains, targeting businesses seeking a German market presence without local residency restrictions. The platform positions itself as a niche provider combining German identity with global accessibility, catering to both local German businesses and international brands. The website is professionally designed with clear navigation and a focus on domain search and registration services. Technically, it employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Contact and abuse handling are facilitated through a partner, Gen.xyz, which adds trustworthiness to incident response capabilities. Overall, the site is legitimate, functional, and well-positioned within its market niche, though improvements in security and privacy compliance are recommended.

О

ООО "БСХ Бытовые Приборы"

bosch-home.by

43

ООО "БСХ Бытовые Приборы" operates as the official service provider for household appliances of major brands Bosch, Siemens, Neff, and Gaggenau in Russia. The website serves as a customer support portal offering repair order placement, spare parts ordering, service center locations, and user manuals. It targets Russian consumers seeking authorized after-sales service for these brands. The business model focuses on service and maintenance, positioning itself as a trusted intermediary between customers and the global BSH group brands. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Bootstrap for responsive design. The site is accessible, well-structured, and optimized for mobile devices. However, no CMS or hosting provider details are evident. The site lacks visible analytics or tracking scripts, indicating a privacy-conscious approach. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS (implied by external image URLs), but no explicit security headers were detected in the provided data. Cookie consent is implemented with a clear mechanism, and a comprehensive privacy policy is available, indicating GDPR compliance. No incident response or security policy pages were found. No vulnerabilities or exposed sensitive data were identified in the HTML content. Overall, the website presents a professional and trustworthy front for the official appliance service business in Russia. The lack of WHOIS data limits domain registration insights but does not detract from the site's legitimacy. Strategic improvements in security headers and incident response transparency would enhance the security posture and trust further.

B

Bosch Hausgeräte Österreich

bosch-home.at

65

Bosch Hausgeräte Österreich operates a comprehensive e-commerce and brand information website focused on household appliances such as cooking, washing, cooling, and kitchen devices. The site targets general consumers in Austria, offering product sales, registration, customer service, and showroom events. The brand is well-established with a strong market position as a leading appliance provider in Austria, supported by its parent company Robert Bosch GmbH. The website demonstrates a mature digital presence with modern technologies and good user experience.

R

Robert Bosch GmbH

bosch-hydrogen-energy.com

64

Bosch Hydrogen Energy, a division of Robert Bosch GmbH, focuses on developing large-scale industrial hydrogen solutions using their proprietary Hybrion PEM electrolysis stacks. The company targets industrial sectors such as chemicals, transportation, steel, and energy to support decarbonization efforts through green hydrogen production. The website reflects a mature enterprise with professional branding, comprehensive content, and a clear business focus on hydrogen technology solutions. Technically, the site employs modern web technologies, including Google Tag Manager and a custom Bosch privacy consent framework, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and privacy mechanisms in place, though explicit security headers and a published security policy are absent. WHOIS data is unavailable, which is unusual and suggests further verification is needed, but the website's professional presence and official Bosch branding strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

B

Bundesministerium für Wirtschaft und Energie

energiewechsel.de

68

The website energiewechsel.de is an official German government campaign platform managed by the Bundesministerium für Wirtschaft und Energie (Federal Ministry for Economic Affairs and Energy). It focuses on promoting energy efficiency, renewable energy, and climate protection through comprehensive informational content, funding program details, and public engagement initiatives. The site targets a broad audience including citizens, businesses, and municipalities in Germany, aiming to facilitate the energy transition. Technically, the site employs modern web technologies such as JW Player for video content, Slick Slider for UI elements, and etracker for analytics, hosted on managed IP infrastructure. It demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS, includes privacy and cookie policies with user consent mechanisms, and provides a data protection officer contact, though explicit security headers could be enhanced. No vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and compliant with GDPR, serving as a reliable government resource for energy transition information.

H

Heise Gruppe GmbH & Co. KG

heisegroup.de

55

Heise Gruppe GmbH & Co. KG is a well-established German media company with a 75-year history, specializing in publishing, marketing services, events, and online commerce primarily targeting IT professionals and technology enthusiasts. The company operates multiple recognized brands and offers a broad range of services including journalism, local marketing, price comparison portals, and professional training events. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports its market position. Technically, the website is built on modern web standards using HTML5, CSS3, JavaScript, and the InterRed CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be considered. The technical infrastructure appears stable and well-maintained, with no visible signs of outdated or vulnerable technologies. From a security perspective, the site uses HTTPS and shows no obvious vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and publicly available security policies or incident response information. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a minor gap. Overall, the security posture is solid but could be enhanced with additional transparency and technical controls. The overall risk assessment is low, with no indications of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security policies, and maintaining regular security audits to further strengthen trust and compliance.

H

Heise Gruppe GmbH & Co. KG

heise-gruppe.de

55

Heise Gruppe GmbH & Co. KG is a well-established German media company with a 75-year history, specializing in IT-related publishing, marketing services, events, and online commerce. The company targets IT professionals, businesses, and private individuals, offering a diversified portfolio including magazines, online content, local marketing, price comparison portals, and professional training. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about their business units and services. Technically, the site is built on the InterRed CMS platform, uses modern web standards, and is optimized for mobile devices, providing a fast and accessible user experience. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, though improvements in security and privacy transparency are recommended.

A

Axel Springer SE

axelspringer.com

76

Axel Springer SE is a leading media and technology company based in Germany, with a strong focus on AI-driven journalism and shaping the future of journalism in the free world. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including corporate blogs, press releases, and social media integration. The company targets a general audience interested in media and technology innovations. Technically, the site uses modern web technologies including WordPress CMS, JavaScript, and a consent management platform to ensure GDPR compliance. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS enforced and privacy mechanisms in place, but security headers and incident response information are lacking. WHOIS data is missing, which slightly impacts trust but the overall legitimacy is supported by consistent branding and external references. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility.

A

Axel Springer SE

axelspringer.de

76

Axel Springer SE is a leading German media and technology company with a strong focus on AI-driven journalism and digital innovation. The company aims to shape the future of journalism in the free world, continuing its legacy since its founding approximately 80 years ago. The website reflects a professional corporate presence with comprehensive content, including corporate blogs, press releases, and stories highlighting company initiatives and values. The target audience is broad, encompassing general users interested in media and technology news. Technically, the website is built on WordPress with modern JavaScript and CSS, integrating a consent management platform (Sourcepoint) and Tealium tag management for analytics and marketing. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. Security posture is strong with HTTPS enforced and GDPR compliance evident through consent mechanisms. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain suggests privacy protection or alternative registration, but the website's branding and social media presence strongly support its legitimacy. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though improvements in security header implementation and transparency around security policies could enhance its posture.