Security Directory

G

GitHub, Inc.

gh.io

65

GitHub, Inc. operates one of the world's leading developer platforms, providing a collaborative environment for millions of developers and businesses globally. The platform offers a comprehensive suite of tools including code hosting, code review, CI/CD automation, security scanning, and AI-powered coding assistance. As a Microsoft subsidiary, GitHub holds a strong market position with enterprise-grade services and a vast open source community. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding. Technically, GitHub's website leverages modern web technologies such as React and Turbo, hosted on AWS infrastructure with Contentful CMS integration. The site demonstrates fast performance, mobile optimization, and good accessibility standards. Security practices are robust, with HTTPS enforced, multiple security headers, and secure form handling. Minor improvements such as enabling DNSSEC could further enhance DNS security. The security posture is strong, supported by certifications like ISO 27001 and SOC 2, and a clear incident response framework with dedicated security contact channels. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. No critical vulnerabilities or suspicious indicators were found during analysis. Overall, GitHub's website and domain registration details confirm a legitimate, enterprise-grade platform with high trustworthiness. Strategic recommendations include enabling DNSSEC, continuous dependency auditing, and enhanced transparency on data retention to maintain leadership in security and compliance.

S

Spreadshirt

spreadshirt.com

65

Spreadshirt operates a global print-on-demand e-commerce platform specializing in custom apparel, accessories, and home products. The website offers users the ability to create personalized products or shop from a wide range of designs. It targets a broad audience interested in unique, customizable merchandise and serves both individual consumers and corporate clients through its Pro services. The platform is well-established with a consistent brand presence and a comprehensive online help center to support customers. Technically, the website employs modern JavaScript frameworks and libraries such as Glide.js for UI components and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with integrations for analytics and marketing tools like Adobe AppMeasurement and Trustpilot. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data for the domain is a notable anomaly, potentially due to privacy protection or alternative domain registration, which slightly impacts trustworthiness. Overall, Spreadshirt's website is professional, secure, and privacy-compliant, with strong business credibility. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance posture.

E

eBay Inc.

ebay.com

71

eBay Inc. operates a leading global e-commerce platform facilitating consumer-to-consumer and business-to-consumer sales worldwide. Founded in 1995, it has established a strong market position with a multibillion-dollar business and operations in approximately 30 countries. The website offers a wide range of products including electronics, cars, fashion, collectibles, and more, targeting a broad audience of consumers and businesses. The business model centers on providing an online marketplace where buyers can shop for free while sellers pay listing and transaction fees. Technically, the website employs modern web technologies such as Marko.js, lazy loading, and extensive JavaScript for dynamic content and performance optimization. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security is robust with HTTPS enforced, multiple security headers, and client-side error monitoring. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with GDPR adherence and a consent mechanism. The security posture is mature, with no evident vulnerabilities or exposed sensitive data. However, explicit security policies, incident response details, and vulnerability disclosure programs are not publicly documented on the site. The WHOIS data is unavailable due to registry restrictions, which is unusual but likely a privacy measure rather than a red flag. Overall, the site demonstrates high professionalism, trustworthiness, and operational maturity. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officers and certifications to further strengthen trust and compliance.

M

Memberstack

memberstack.com

68

Memberstack is a SaaS platform specializing in providing membership and subscription management solutions integrated seamlessly with Webflow. The company targets web developers, agencies, and SaaS builders who want to add user accounts, gated content, and subscription features without complex tech stack changes. With over 50,000 teams and agencies using their platform, and trusted by notable brands such as Amazon and Salesforce, Memberstack holds a strong market position in the web development technology sector. The website content is professional, well-structured, and rich with customer testimonials and case studies, reflecting a mature and credible business. Technically, the website leverages modern web technologies including Webflow CMS, React, Node.js for backend APIs, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, PostHog, and Facebook Pixel. Hosting is provided by Webflow, ensuring fast performance and excellent mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No vulnerabilities or exposed sensitive data were detected. However, the absence of an explicit cookie consent mechanism and a dedicated security policy page indicates room for improvement in privacy compliance and security transparency. The WHOIS data is unavailable, which reduces transparency but is likely due to privacy protection services common in SaaS businesses. Overall, Memberstack presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing explicit cookie consent, publishing a security policy and incident response information, and adding a vulnerability disclosure channel to enhance trust and compliance.

M

Max Robinson

maxwhrobinson.com

58

Max Robinson is a professional prop stylist specializing in food and still life photography, targeting photographers and creative agencies. The website is hosted on Squarespace, featuring a portfolio of high-quality images showcasing the styling work. The technical infrastructure is modern and mobile-optimized, but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled, but missing important security headers and compliance policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence mitigates some risk. Overall, the site is functional and professional but requires improvements in compliance and security to enhance trustworthiness.

VideoTranslator is a newly founded (2025) technology company specializing in AI-powered translation services, including video, document, and image translation. The platform supports over 130 languages and offers advanced features such as perfect lip-sync, voice cloning, and format preservation. Positioned as a leading all-in-one AI translation SaaS, it targets content creators, businesses, and enterprises seeking professional multilingual content solutions. The website demonstrates a high level of digital maturity with modern technologies like Next.js and Cloudflare DNS, ensuring fast performance and excellent mobile optimization. Security is a priority, with compliance to GDPR and SOC 2 standards and bank-grade encryption, although some privacy compliance aspects like cookie consent could be improved. Overall, the platform presents a trustworthy and professional service with a clear business model and strong market positioning.

Doculator is a newly founded AI-powered translation platform offering comprehensive solutions for document, video, and image translation. Leveraging advanced AI models such as GPT-4.1, Gemini, and DeepSeek, it provides high accuracy translations with format preservation and professional features. The platform targets a broad audience including businesses, educators, content creators, and researchers, positioning itself as a cost-effective and technologically advanced alternative in the translation market. Technically, the website is built on modern frameworks like Next.js and hosted with Cloudflare, ensuring fast performance and good mobile optimization. Security practices are solid with HTTPS, encryption claims, and compliance with GDPR and CCPA, although explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-designed, but lacks explicit privacy and cookie policies which impacts compliance scores.

O

OnToplist.com

ontoplist.com

58

OnToplist.com operates as a specialized online directory platform focusing on categorizing and listing blogs and local businesses primarily within the United States. The platform offers users an extensive, human-curated directory to discover quality blogs across various niches such as digital tech, health, law, and lifestyle, as well as local business listings including digital agencies, law firms, and other service providers. The business model includes paid listing options to enhance online visibility for businesses and bloggers. The website has been operational since 2006, positioning itself as a niche media directory with a focus on quality and user engagement. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with AJAX-powered forms and search autocomplete features. It uses HTTPS with a valid SSL certificate ensuring secure data transmission. The site is mobile responsive and optimized for good user experience and SEO, although some accessibility features could be improved. The technical infrastructure appears moderate in performance with no evident CMS or hosting provider disclosed. From a security perspective, the site demonstrates good practices such as CSRF token implementation in forms and secure login mechanisms. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness, although the website content and structure suggest a legitimate business operation. Overall, OnToplist.com presents a professional and functional directory service with a solid content offering and user interface. The main risks relate to domain registration opacity and minor compliance gaps. Strategic improvements in security headers, privacy consent, and domain transparency would enhance trust and compliance.

T

twelve.tools

twelve.tools

62

Twelve.tools is a small technology-focused website that curates and presents the 12 best online tools daily. It serves a general audience interested in discovering new productivity, marketing, and developer tools. The business model centers on content curation and user submissions, positioning itself as a niche aggregator in the online tools market. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript with asynchronous fetch calls and local storage for theme preferences. The site is mobile optimized with good navigation and SEO practices but lacks advanced frameworks or CMS. Security posture is basic with HTTPS enabled but missing important security headers and no visible privacy or cookie policies, which impacts compliance and trust. No contact or incident response information is provided, limiting transparency. Overall, the site is functional and professional but could improve security and privacy compliance to enhance user trust and regulatory adherence.

LSEG is a globally recognized financial markets infrastructure and data provider, offering a broad range of services including data analytics, indices via FTSE Russell, trading and listings through the London Stock Exchange, FX trading, post-trade services, and risk intelligence. The company targets financial institutions, asset managers, corporates, and investors, positioning itself as a leader in the financial services industry with a strong emphasis on sustainability and innovation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports its market position. Technically, the website leverages modern technologies such as Adobe Experience Manager CMS, Adobe DTM for tag management, and cloud-based hosting infrastructure, ensuring fast performance and mobile optimization. The presence of cookie consent mechanisms and privacy policies indicates attention to privacy compliance. However, explicit security policies and incident response information are not published, which could be improved. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional branding and content. The site integrates analytics and marketing tools responsibly, maintaining a balance between user tracking and privacy. Overall, LSEG's website demonstrates a high level of professionalism, technical maturity, and business credibility, suitable for its enterprise scale and industry. Strategic recommendations include enhancing transparency around security policies and incident response, and improving WHOIS data availability to bolster trust further.

M

Medical Xpress

medicalxpress.com

59

Medical Xpress is a well-established online medical news platform founded in 2005, providing comprehensive coverage of medical research and health news. It operates under the Science X Network, targeting medical professionals, researchers, and the general public interested in healthcare advancements. The site offers news articles, newsletters, and mobile applications, supported primarily through advertising. Technically, the website uses modern web technologies including Google Tag Manager, Adsense, reCAPTCHA, and Bootstrap, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and some security best practices, though improvements can be made in security headers and explicit policies. Privacy compliance is adequate with a clear privacy policy but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, with a strong market position in medical news.

L

La Grande Secousse du Québec

grandesecousse.org

51

La Grande Secousse du Québec is a non-profit organization dedicated to earthquake preparedness and education in Quebec. It organizes the Great ShakeOut, the largest earthquake simulation exercise in the world, engaging tens of thousands of participants annually. The website serves as an information hub for registration, educational resources, news, and events related to earthquake safety. The organization partners with government bodies and civil security associations to promote resilience and preparedness among Quebec residents, schools, and organizations. Technically, the website is built on Joomla CMS with modern JavaScript modules, Bootstrap 5, and uses CDN-hosted resources for fonts and scripts. It is hosted by WHC Online Solutions Inc. and employs HTTPS with a valid SSL certificate. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing and DNSSEC is not enabled, representing minor security gaps. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The domain registration is consistent with the organization's history and shows no suspicious patterns. Overall, the site demonstrates a good security posture suitable for its public safety mission. The overall risk is low, with recommendations to enhance DNS security, implement security headers, and publish security and incident response policies to further strengthen trust and compliance.

A

Atruvia AG

atruvia.de

63

Atruvia AG operates as a major IT service provider specializing in digital transformation and IT outsourcing for the banking sector in Germany. The company offers a broad range of services including consulting, platform ecosystems, and output solutions, targeting professionals, students, and banking customers. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on business and career opportunities. Technically, the site uses modern web technologies including Craft CMS, JavaScript modules, and Matomo for analytics, with a strong emphasis on privacy and user consent. Security measures such as HTTPS and CSRF protection are implemented, though some security headers could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness.

I

Icons8

iconos8.es

46

Icons8 (iconos8.es) is a localized Spanish version of the global Icons8 brand, offering a comprehensive suite of free and premium design resources including icons, illustrations, photos, music, and AI-powered design tools. The website targets creatives and developers seeking high-quality, consistent design assets and innovative AI applications to enhance their projects. The platform demonstrates a mature digital presence with a modern tech stack based on Vue.js and Nuxt.js, ensuring fast performance and excellent mobile optimization. However, the absence of visible privacy and cookie policies, security headers, and WHOIS data limits the full assessment of compliance and security posture. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security best practices.

I

Icons8

icons8.it

52

Icons8 is a well-established digital design resource platform founded in 2017, offering a wide range of creative assets including icons, illustrations, photos, music, and AI-powered design tools. The website targets creative professionals and developers globally, providing a freemium business model with localized versions for multiple countries. Technically, the site is built on modern frameworks such as Vue.js and Nuxt.js, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS and DNSSEC enabled, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. Overall, the domain registration and website content align well, supporting high legitimacy and trustworthiness.

Ranker Media is a small technology company offering a SaaS platform focused on marketing data reporting and analytics. Their service enables marketing professionals to transform data into actionable insights through flexible reports and dashboards. The platform integrates with third-party marketing tools and emphasizes secure, white-labeled reporting. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern but standard technical infrastructure. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking security headers and privacy policies. No contact or compliance information is present, which limits transparency and trust. WHOIS data is privacy protected, which is common for small tech companies but reduces public trust slightly. Overall, the site is professional and safe but would benefit from improved privacy compliance and security practices.

V

vacaVista

vacavista.de

48

vacaVista operates as an online vacation rental platform specializing in properties primarily in Germany but with international reach. The website offers a search and booking interface for over one million vacation homes and apartments, targeting travelers seeking holiday accommodations. The business appears established since 1998, positioning itself as a niche player in the vacation rental market with a focus on direct online bookings. Technically, the site uses a custom tech stack with jQuery and JavaScript bundles, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy compliance mechanisms. No contact information or detailed security policies are published, which may affect user trust and regulatory compliance. Overall, the site is professional and functional but could improve in privacy and security transparency.

B

Banque de France

banque-france.fr

66

Banque de France is the national central bank of France, serving citizens, businesses, and public institutions with a broad range of financial and economic services. The website reflects its role in monetary policy, financial stability, payment systems, and economic education. It is positioned as a reputable government entity with a strong market presence in the finance sector. The technical infrastructure is modern, leveraging Drupal 10 CMS and contemporary analytics tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. Overall, the site is professional, trustworthy, and compliant with privacy norms, supporting its authoritative role.

B

Banque de France

ngfs.net

71

The Network for Greening the Financial System (NGFS) is a collaborative network of central banks and supervisors focused on integrating environmental and climate risk management into the financial sector. Launched in 2017 and hosted under the Banque de France Eurosystème brand, the NGFS provides research, scenario analysis, capacity building, and data services to support sustainable finance transitions globally. The website is professionally designed using Drupal 10, with strong branding consistency and comprehensive content targeting financial regulators, policymakers, and researchers. Technical infrastructure includes modern analytics and privacy-compliant cookie management. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which is a concern but offset by the site's official affiliation and content quality. Overall, the NGFS website demonstrates a mature digital presence aligned with its mission and audience.

B

B.i.Team

biteam.de

46

B.i.Team is a German technology company specializing in digital transformation and ERP solutions, particularly leveraging Microsoft Dynamics 365 Business Central. Their business model focuses on providing IT consulting and industry-specific software solutions such as Freshfin for the fruit wholesale sector and KatarGo for wholesale and mail order. The company positions itself as a strategic partner emphasizing the human-centric 'Ermöglicher-Prinzip' to ensure sustainable digital adoption. Technically, the website is built on TYPO3 CMS with modern responsive design and uses SVG icons and slick sliders for UI elements. While the site is professionally designed and content-rich, it lacks visible privacy and cookie policies and explicit contact information, which impacts privacy compliance and user trust. Security headers are not detected, and no incident response or security policy information is provided, indicating room for improvement in security posture. Overall, the domain registration data aligns with the website's business claims, supporting legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

V

Vodafone GmbH

vodafone.de

70

Vodafone GmbH operates a comprehensive telecommunications website targeting private customers in Germany, offering mobile phone tariffs, internet, TV, and related devices. The company is a large, established player in the German telecom market and a subsidiary of Vodafone Group Plc. The website demonstrates a high level of digital maturity with responsive design, structured navigation, and integration of performance and tag management tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with the business identity.

L

LeasingMarkt.de GmbH

leasingmarkt.de

55

LeasingMarkt.de GmbH operates Germany's leading online marketplace for auto leasing offers, providing consumers and businesses with a platform to compare leasing deals across all major car brands and models. The website facilitates direct contact with dealers and offers additional services such as leasing takeovers, newsletters, and WhatsApp deal alerts. The company positions itself as a market leader in the transportation sector within Germany, targeting both private and commercial customers seeking flexible leasing options. Technically, the website is built with modern web technologies including JavaScript ES modules, CSS3, and SVG graphics, hosted on Amazon AWS infrastructure. It integrates a sophisticated consent management platform aligned with GDPR requirements, ensuring user privacy and compliance. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. From a security perspective, LeasingMarkt.de enforces HTTPS and employs consent mechanisms for cookie and data processing compliance. However, it lacks explicit security headers and publicly available security policies or incident response contacts, which could be improved to strengthen trust and resilience. No critical vulnerabilities or suspicious patterns were detected in the analysis. Overall, LeasingMarkt.de presents a professional, trustworthy, and user-friendly platform with strong privacy compliance and a solid technical foundation. Strategic enhancements in security transparency and accessibility would further elevate its market standing and user confidence.

F

FAS Advogados

fasadv.com.br

77

FAS Advogados is a Brazilian law firm operating in cooperation with CMS, offering comprehensive legal services across multiple practice areas and sectors. The firm targets corporate clients and businesses, providing expertise in areas such as antitrust, banking, capital markets, compliance, and data protection. The website reflects a well-established medium-sized legal services provider with a strong market position and international cooperation. Technically, the website is built on a modern stack with CMS Legal, Bootstrap, and Cloudflare hosting, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with moderate user tracking via Piwik PRO and LinkedIn Insight Tag. No critical vulnerabilities or suspicious content were detected.

A

Android

android.com

67

Android.com is the official website for the Android operating system and ecosystem, owned by Google LLC. The site provides comprehensive information about Android devices, including the latest Google Pixel smartphones, AI integrations such as Gemini, and connected device features. The website targets consumers and enterprise users interested in Android technology and Google services. It serves as a platform for product promotion, information dissemination, and directing users to purchase channels. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Analytics, hosted on Google's infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response contacts are not visible. Privacy compliance is partially addressed with a cookie consent banner linking to Google's cookie policy, but no dedicated privacy or terms of service pages were found in the provided content. WHOIS data for the domain is unavailable or redacted, which is common for major brands like Google, and does not detract from the site's legitimacy. Overall, the website is professional, trustworthy, and well-optimized, with minor gaps in explicit privacy and security disclosures.

A

Auto Krainer GesmbH

auto-krainer.at

62

Auto Krainer GesmbH is a well-established automotive dealership and service provider based in Klagenfurt am Wörthersee, Austria. Specializing in Volkswagen, Audi, Škoda, and Volkswagen Nutzfahrzeuge, the company offers a comprehensive range of services including new and used car sales, vehicle servicing, repairs, and accessories. The website reflects a strong regional market position with a focus on customer convenience through online workshop appointment booking and detailed vehicle listings. The business targets car buyers and vehicle owners in Austria, leveraging trusted brand partnerships and a solid reputation evidenced by high customer ratings.

CMS Legal Services EEIG operates as a large international law firm providing comprehensive legal and tax advisory services across multiple sectors and jurisdictions. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content covering practice areas, sectors, insights, and global offices. The firm targets corporate clients and international businesses seeking expert legal counsel. Technically, the site uses modern web technologies including Bootstrap and Piwik PRO analytics, hosted behind Cloudflare DNS, ensuring reasonable performance and security. Security posture is good with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited by the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the firm's market position as a leading international law firm.

Boston Consulting Group (BCG) is a globally recognized management consulting firm specializing in strategic management consulting and business transformation services. The website reflects BCG's market position as a leader in consulting, targeting business leaders and organizations seeking to address complex challenges. The site content is professionally crafted, emphasizing BCG's expertise and global reach. Technically, the website employs modern web technologies including Adobe Analytics, TrustArc for consent management, and SVG-based iconography. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance. The use of advanced analytics and consent frameworks indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and integrates consent management for privacy compliance. However, explicit security headers are not evident in the provided data, and no public security policy or incident response information is available. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain trust assessment but does not detract from the site's professional presentation and operational maturity. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

F

Fontstore Ltd.

fontstore.com

57

Fontstore.com is a specialized e-commerce platform offering premium font distribution services, primarily targeting designers and businesses requiring multilingual font solutions. The company, Fontstore Ltd., has been operating since 2003, positioning itself as a niche player in the font licensing market with a focus on quality and language diversity. The website is professionally designed with good navigation and content relevance, supporting a positive user experience for its target audience. Technically, the site employs modern JavaScript frameworks, likely Vue.js, and integrates Stripe for secure payment processing. Hosting is provided via GoDaddy, and the domain is well-established with standard domain status protections. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices appear solid with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and Stripe for payments, which is a strong positive. However, it lacks DNSSEC, visible security headers, and formal privacy or cookie policies, which are important for compliance and trust. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency and readiness. Overall, the website is legitimate and professionally maintained but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve trust and regulatory adherence.

O

OTTO

otto.de

69

OTTO is a major German e-commerce company specializing in fashion, furniture, and technology products. The website presents a professional and comprehensive online shopping platform targeting general consumers in Germany. It offers various services such as installment purchases, purchase on account, old device take-back, and assembly services, positioning itself as a large enterprise in the retail sector. The technical infrastructure leverages modern JavaScript modules, Akamai CDN for hosting, and OneTrust for cookie consent management, indicating a mature digital presence with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent, but lacks explicit security policies and vulnerability disclosures. Overall, the website is trustworthy and professionally maintained, though improvements in transparency around privacy and security policies are recommended.

F

FGC.Network

fgc.network

66

FGC.Network is a niche social networking platform dedicated to the fighting game community, providing a local timeline and community interaction features within the fediverse ecosystem. The platform leverages open source Soapbox software and cloud storage via Wasabi, indicating a modern and scalable technical infrastructure. The website demonstrates good design quality, mobile optimization, and user experience tailored to its target audience of fighting game enthusiasts. Security posture is solid with HTTPS enabled, though the absence of security headers and privacy policies suggests room for improvement in compliance and protection. Overall, the domain appears legitimate despite privacy-protected WHOIS data, which is common for community platforms. Strategic recommendations include enhancing privacy compliance, adding security headers, and providing clear contact and incident response information to strengthen trust and security culture.

D

Deutsche Handelskammer für Spanien

ahk.es

65

The Deutsche Handelskammer für Spanien (German Chamber of Commerce for Spain) operates as a bilateral chamber supporting German-Spanish economic relations. It offers a broad range of services including market entry consulting, business development, legal and tax advisory, certification, and event organization. The website targets companies and professionals interested in fostering business ties between Germany and Spain, positioning itself as a trusted intermediary with strong governmental and industry partnerships. Technically, the site is built on the Ibexa DXP CMS platform, employs modern JavaScript frameworks, and integrates Piwik PRO for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site demonstrates a professional, secure, and user-friendly digital presence suitable for its business objectives.

P

Pegasus Spiele

pegasus.de

69

Pegasus Spiele is a German-based game publisher and retailer specializing in board games, card games, role-playing games, and related accessories. The company maintains a well-structured e-commerce website built on the Shopware platform, offering a broad product catalog and community engagement through events and news. The website demonstrates a good level of technical maturity with modern technologies, mobile optimization, and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit privacy policies and security headers are lacking. The absence of direct contact information and formal security policies suggests room for improvement in transparency and compliance. Overall, the site is professional, trustworthy, and serves a general audience with family-friendly content.

KOSMOS Verlag is a well-established German publishing company specializing in games, children's and youth books, experiment kits, and related educational products. The website reflects a professional e-commerce platform targeting families, children, and hobbyists interested in educational and entertainment products. The site uses modern web technologies including JavaScript modules, AJAX for search suggestions, and integrates a consent management platform (Usercentrics) to comply with privacy regulations. Google Tag Manager is used for analytics and marketing purposes. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy are absent. WHOIS data is minimal, lacking detailed registrant information, which slightly reduces domain trustworthiness but does not contradict the website's legitimacy. Overall, the site is safe, family-friendly, and professionally maintained.

O

OSM Town

osm.town

67

OSM Town operates as a specialized Mastodon instance serving the OpenStreetMap community within the Fediverse. It provides a social networking platform tailored for OpenStreetMap enthusiasts, supported by funding from the OpenStreetMap Foundation. The website's market position is niche, focusing on community engagement rather than commercial services. The platform leverages modern web technologies including React and Mastodon's backend, ensuring a responsive and user-friendly experience across devices. However, some technical aspects such as explicit security headers and privacy compliance mechanisms could be improved. Security posture is moderate, with HTTPS implied but lacking visible advanced security headers or incident response information. Overall, the site is trustworthy and safe, with no adult or questionable content detected, but the absence of WHOIS data and contact information slightly reduces business credibility.

Z

ZDF

zdf.de

65

ZDF is a major German public television broadcaster offering a comprehensive streaming portal with films, series, documentaries, and live TV. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and Apollo GraphQL, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are not clearly presented in the analyzed content. The domain is legitimate and consistent with the broadcaster's identity, though registrant details are restricted due to DENIC policies. Overall, the site serves a broad general audience with high-quality media content.

P

PlanD

pland.app

67

PlanD is a specialized SaaS provider offering an all-in-one cloud-based software solution tailored for commercial cleaning companies primarily in Germany, Austria, and Switzerland. The platform integrates shift planning, time tracking, payroll, invoicing, and other administrative functions to streamline operations and support business growth. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting cleaning businesses and their employees. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, PostHog analytics, and cookie consent management, ensuring good performance and compliance with GDPR. Security posture is strong with HTTPS, security headers, and encrypted communications, though explicit security policies and incident response information are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

NetOnNet is a large Swedish e-commerce retailer specializing in consumer electronics, offering a wide range of products including computers, gaming, TV, audio, home appliances, and personal care items. The website targets Swedish consumers with content in Swedish and emphasizes competitive pricing and membership benefits. Technically, the site is built using modern frameworks such as Next.js and React, with responsive design and optimized images for performance. Security posture is solid with HTTPS and cookie consent mechanisms in place, although explicit security headers and privacy policies are not clearly visible in the provided content. The WHOIS data for the subdomain is unavailable, but this is typical as WHOIS is registered at the domain level. Overall, the site presents a professional and trustworthy online retail platform.

ServiceNow is a leading enterprise cloud company specializing in AI-powered workflow automation and IT service management solutions. Their website demonstrates a strong market position with comprehensive product offerings targeting enterprises and IT professionals. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, Akamai CDN, and advanced JavaScript frameworks, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, strong security headers, and secure authentication integrations. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not publicly detailed. Overall, the website reflects a mature, professional enterprise with high trustworthiness and digital maturity.

J

JouwWeb B.V.

webador.be

61

Webador is a well-established technology company founded in 2009, specializing in providing an AI-powered website builder platform tailored for small businesses and entrepreneurs, primarily in Belgium and other European markets. The platform offers comprehensive services including website creation, e-commerce capabilities, domain registration with .BE domains included, professional email services, and SEO optimization. The company maintains a strong market position with over 290,000 users and a high Trustpilot rating, reflecting customer satisfaction and trust. Technically, Webador employs modern web technologies including JavaScript, Google Tag Manager, and responsive design principles ensuring excellent mobile optimization and fast performance. The platform uses proprietary CMS technology and integrates third-party services such as Vimeo for video content and SpeedCurve for performance monitoring. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. From a security perspective, the website enforces HTTPS and secure form handling with password strength indicators. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Webador presents a professional, trustworthy, and technically sound online presence with strong business credibility. The absence of WHOIS data is due to .be domain registry policies and does not detract from the legitimacy of the business. Strategic recommendations include improving security header implementation and publishing a formal security policy to further strengthen trust and compliance.

O

OWIBA AG

iba.ch

69

OWIBA AG operates the website iba.ch, the largest B2B office supplies distributor in Switzerland, offering over 13,000 products with next-day delivery and professional consulting services. The company targets business customers with a comprehensive e-commerce platform featuring a broad product catalog and loyalty programs. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Dynamic Yield for personalization and analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Privacy compliance is robust with clear cookie consent and GDPR-aligned privacy policies. Overall, the site demonstrates high professionalism, trustworthiness, and market credibility.

W

webways AG

spitexjobs.ch

69

spitexjobs.ch is a specialized online job portal dedicated to the Spitex healthcare sector in Switzerland, connecting job seekers with Spitex organizations. The platform offers comprehensive job listings, employer profiles, and advanced search and filtering capabilities tailored to healthcare roles such as ambulatory care and specialized nursing. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content for its target audience. Technically, the site employs modern JavaScript frameworks, integrates analytics via Matomo and Google Tag Manager, and uses Sentry for error monitoring, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, appropriate security headers, and privacy compliance including GDPR-aligned privacy and cookie policies with user consent mechanisms. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the domain's legitimacy and consistency with the business profile. Overall, the site demonstrates a strong security posture, good privacy practices, and a credible business presence in the Swiss healthcare job market.

A

Allgemeiner Deutscher Automobil-Club e.V.

adac.de

71

The Allgemeiner Deutscher Automobil-Club (ADAC) is a well-established German automobile club providing a wide range of services including membership benefits, insurance products, travel planning, vehicle leasing, and roadside assistance. The website serves as a comprehensive portal for these services, targeting automobile owners, travelers, and insurance customers primarily in Germany. ADAC holds a strong market position as a leading mobility service provider with a large membership base and multiple subsidiaries supporting its operations. Technically, the website employs modern web technologies such as React and Webpack, with a focus on performance, accessibility, and mobile optimization. The use of Kameleoon indicates active engagement in personalization and A/B testing to enhance user experience. Hosting appears to be managed by a reputable provider, and the site uses HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, ADAC demonstrates good practices including HTTPS enforcement, security headers, and secure form implementations. However, there is no explicit public vulnerability disclosure policy or incident response contact, which could be improved to enhance transparency and readiness. Privacy compliance is strong with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and secure, supporting ADAC's business credibility and user trust. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and continuous security audits of third-party scripts to maintain and improve security posture.

D

Delius Klasing Verlag GmbH

yacht.de

61

YACHT.de is the digital presence of Delius Klasing Verlag GmbH, Europe's largest magazine dedicated to sailing. The website offers extensive content including yacht models, equipment, travel and charter guides, regatta news, and a used boat market. It targets sailing enthusiasts primarily in Germany and Europe, providing both free and premium subscription content alongside e-commerce services. The site is built on modern web technologies including React and Next.js, with Shopify integration for commerce. Social media channels are actively linked, enhancing brand reach. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are missing from the homepage content. Overall, the site is professional, content-rich, and well-positioned in the sailing media market.

E

Eurotrek

eurotrek.ch

74

Eurotrek is a Swiss-based travel company specializing in tailor-made active holidays, primarily cycling and hiking tours across Switzerland and Europe. The company targets active travelers seeking self-guided and guided tours with luggage transport services. Their market position is that of a niche operator with a strong focus on quality and customer satisfaction, supported by positive user ratings and professional digital presence. Technically, the website is built using modern web technologies including React and employs good SEO and accessibility practices. The site is mobile-optimized and features rich multimedia content such as autoplay videos and adaptive images. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible incident response or security policies. Privacy compliance is mostly met with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

R

Romberg

romberg.de

51

Romberg operates a professional e-commerce platform specializing in gardening and cultivation products, targeting hobbyists and small-scale gardeners primarily in Germany. The website offers a broad product range including greenhouses, seedling pots, substrates, and sustainable gardening accessories, with a dedicated B2B dealer area indicating a dual business model. The company positions itself as a niche retailer focusing on sustainable and innovative gardening solutions. Technically, the website uses modern JavaScript, SVG icons, and integrates PayPal for payments, likely built on the Shopware CMS platform. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS enforced and IP anonymization in Google Analytics, but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or cookie policies. Contact information and incident response details are not clearly provided, which could impact user trust. Overall, the website is safe, professional, and trustworthy for general audiences.

K

Kiepenkerl

kiepenkerl.de

52

Kiepenkerl operates a professional e-commerce platform specializing in seeds, flower bulbs, plants, and related gardening products. The website targets both retail consumers and B2B customers, positioning itself as a premium brand within the German gardening market. The platform offers a broad range of product categories and supports customer engagement through structured navigation and search capabilities. Technically, the website is built on a modern e-commerce framework (Shopware 6) and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel. The site is hosted on servers associated with kasserver.com and uses HTTPS with a good SSL configuration. Security measures include the use of Friendly Captcha to mitigate bot activity and a cookie consent mechanism to comply with basic privacy requirements. However, explicit privacy policies, terms of service, and contact information are not found in the provided content, which limits full compliance and trust transparency. Overall, the website demonstrates a solid technical foundation and business credibility but would benefit from enhanced privacy disclosures and security header implementations.

C

CEWE

cewe.de

62

CEWE operates a large-scale e-commerce platform specializing in personalized photo products such as photobooks, calendars, greeting cards, and photo gifts. The website targets a broad consumer audience primarily in Germany and other German-speaking countries, offering a comprehensive range of photo printing services. The company is positioned as a leading European photo service provider with a strong brand presence and consistent digital branding across its platforms. Technically, the website employs modern web technologies including ES modules, custom web components, and advanced tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. The site demonstrates extensive user tracking for marketing and analytics purposes, balanced with a consent management platform to address privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience, though it could improve transparency around privacy and security policies.

H

Heldenschmiede Bremen GbR

heldenschmiede-bremen.de

57

Heldenschmiede Bremen GbR is a small education and coaching business based in Bremen, Germany, specializing in workshops, seminars, and coaching services aimed at personal and professional development. The company positions itself as a niche provider focused on empowering individuals and teams to unlock their potential and achieve meaningful change. Their offerings include business coaching, life school programs, speaker training, and events with keynote speakers. The website reflects a professional and consistent brand image with clear service descriptions and event schedules. Technically, the site is built on modern web technologies including React and Next.js, hosted on a custom CMS platform, and optimized for performance and mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie banner. Contact information is clearly presented with multiple channels. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

J

Jaguar Land Rover Limited

jaguar.sk

65

Jaguar Land Rover Limited operates the www.jaguar.sk website as a localized digital presence for the Slovakian market, showcasing their premium automotive brand and vehicle offerings. The site provides detailed vehicle information, servicing options, and approved used vehicle programs, targeting consumers interested in Jaguar vehicles in Slovakia. The website is built on a modern technical stack including Adobe Experience Manager CMS, Google Tag Manager, and Adobe Helix RUM for performance monitoring, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit privacy policies and security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

V

Vercorin

vercorin.ch

64

Vercorin.ch is a professionally developed tourism website dedicated to promoting the Vercorin region in Switzerland. It offers comprehensive information on accommodation, activities, events, and practical visitor details, targeting tourists and families interested in outdoor and cultural experiences. The site integrates booking and reservation services through partner domains and maintains a consistent brand presence with official regional partners and media. Technically, the site uses a modern JavaScript stack with Google Tag Manager, reCAPTCHA, and a custom CMS platform (MyCity Tourism Information System). The website is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance gaps. No direct contact emails or phone numbers are exposed, relying on a contact form. Overall, the site is trustworthy and well-positioned as a regional tourism portal but should improve privacy and security disclosures.