Security Directory

M

Malmö Flyttjänst

flyttjanst.com

37

Malmö Flyttjänst operates as a local moving company based in Malmö, Sweden, providing reliable moving and relocation services primarily targeting residential and commercial customers in the Malmö area. The website is built on WordPress and leverages modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The technical infrastructure is hosted by One.com A/S, with a domain registered since 2016, consistent with the business's operational timeline. Security posture is adequate with HTTPS enabled and reCAPTCHA implemented on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Overall, the website is professional, well-designed, and provides relevant content for its target audience.

S

Spotler

spotlerpages.com

11

Spotler is a Netherlands-based marketing cloud software provider founded in 2014, offering data-driven marketing tools designed to help marketers engage audiences and personalize campaigns effectively. The company positions itself as a user-friendly SaaS platform with a strong focus on leveraging data to improve marketing results. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern integrations such as Google Tag Manager, Cookiebot for consent management, and Cloudflare for DNS and CDN services, indicating a robust and scalable infrastructure. Security-wise, the website enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms, although DNSSEC is not enabled and some security headers are not explicitly detected. Overall, the security posture is good with room for improvement in header implementation and vulnerability disclosure. The domain WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s history and no privacy protection, enhancing trust. The website complies well with GDPR, featuring comprehensive privacy and cookie policies with active consent management. No critical security or content safety issues were found, and the site is free from adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen the security posture.

S

Spotler

spotler.com

67

Spotler is a Netherlands-based marketing cloud software provider founded in 2014, offering user-friendly data-driven marketing solutions to help businesses unlock data and craft personalized campaigns. The company targets marketers and businesses seeking integrated marketing tools to improve engagement and results. The website demonstrates a mature digital presence with multi-language support and strong SEO implementation. Technically, the site is built on WordPress, leveraging Cloudflare for DNS and CDN services, and integrates modern libraries such as Google Tag Manager and Cookiebot for analytics and compliance. Security posture is strong with HTTPS enforcement, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. Overall, Spotler presents a professional, trustworthy, and technically sound online presence suitable for its business domain.

S

Spotler

pure360.com

67

Spotler is a medium-sized technology company founded in 2014, specializing in marketing cloud software that enables marketers to unlock data and create personalized campaigns. The company positions itself as a user-friendly, data-driven marketing software provider targeting marketing professionals and teams. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Google Tag Manager, Cookiebot for consent management, and Cloudflare DNS services. The site is well-optimized for SEO and mobile devices, providing a professional user experience with clear navigation and comprehensive content. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

K

Klassträffen Sweden AB

stayfriends.se

49

StayFriends.se is a Swedish social networking platform focused on reconnecting users with their old school friends and accessing class photos. Operated by Klassträffen Sweden AB, the website offers services such as searching for schoolmates, viewing thousands of class photos, and planning reunions. The platform targets Swedish users and has sister sites in Germany, Switzerland, Austria, and France, indicating a regional presence in Europe. The business model revolves around membership and social networking within the education and nostalgia niche. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Font Awesome, with integration of Google Tag Manager and advertising scripts from Ströer and Yieldlove. The site is served over HTTPS with good SSL configuration, though it lacks some recommended security headers. Performance is moderate with basic mobile optimization and accessibility features. SEO is well addressed with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses privacy management tools to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of security headers and incomplete WHOIS data for the exact domain are points of concern. Privacy and cookie policies are present and comprehensive, supporting regulatory compliance. Overall, StayFriends.se presents a trustworthy and professional online presence with a clear business focus. The lack of WHOIS data for the domain www.stayfriends.se suggests it may be a subdomain or alias, which slightly reduces trustworthiness but does not indicate malicious intent. Strategic improvements in security headers and transparency of domain registration would enhance the site's credibility and security posture.

T

Trombi Acquisition Sarl

trombi.com

67

Trombi.com is a French online platform dedicated to helping users reconnect with former school friends, access a large archive of class photos, and organize class reunions. The website targets alumni and former students primarily in France, offering free registration and a searchable database of over 13 million users. The business operates in the education sector with a social networking focus, leveraging advertising as a primary revenue stream. The site is professionally designed with consistent branding and provides comprehensive privacy and cookie policies compliant with GDPR regulations. Technically, Trombi.com uses a moderate technology stack including jQuery, Bootstrap, and Google Tag Manager, with some older frameworks but overall functional and moderately optimized for performance and SEO. Security posture is adequate with HTTPS usage and privacy consent mechanisms, though security headers and explicit incident response information are lacking. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the active and professional website presence supports a moderate trust level. Overall, Trombi.com presents a solid business offering with room for technical and security improvements.

S

Ströer Connections GmbH

stayfriends.at

64

StayFriends.at is an established Austrian social networking platform focused on connecting former school friends, viewing class photos, and organizing reunions. It operates under Ströer Connections GmbH and is part of a broader network with sister sites in Germany, Switzerland, France, and Sweden. The platform targets alumni and former students in Austria, offering a freemium model with free registration and premium features. The website content is professionally presented, relevant, and consistent with its business purpose.

K

klassenfreunde.ch GmbH

stayfriends.ch

67

StayFriends.ch is a Swiss online social networking platform focused on reconnecting former school friends, viewing class photos, and organizing reunions. It serves a niche educational social network market with over 1.3 million members. The platform offers a freemium business model targeting former students in Switzerland, providing region-specific school search and member directories. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Tag Manager for analytics, and employs privacy management scripts to comply with GDPR. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and explicit incident response contacts are missing. The WHOIS data aligns well with the business claims, indicating a trustworthy domain registration. Overall, the site demonstrates a mature digital presence with moderate advertising and tracking practices balanced by privacy compliance mechanisms.

I

ITX Norge

itxuc.com

56

ITX Norge is a Norwegian technology company specializing in cloud-based contact center solutions that integrate telephony, email, SMS, chat, and social media into a unified platform. The company positions itself as a leading provider in Norway, offering a SaaS model with local data storage and support. Their platform targets businesses seeking efficient, multichannel customer service solutions. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, and employs various marketing and analytics tools including Google Analytics, Google Tag Manager, and Adform tracking. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional, well-branded, and trustworthy, though it could improve privacy compliance by publishing privacy and terms of service documents.

Slov Elektro, s.r.o. is a Slovak-based small retail company specializing in the online sale of electrical installation materials, LED lighting, switches, frames, and sockets. The company targets both consumers and professionals within Slovakia, offering a broad product range with expert advice and customer support. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Fonts, and integrates Google Analytics and Google Tag Manager for marketing and analytics purposes. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some security headers are missing and could be improved. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism. WHOIS data confirms the legitimacy and consistency of the domain registration with the business information presented on the site. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its market niche.

M

MaM multimedia, s.r.o.

cistysvet.sk

10

ČistýSvet.SK is a Slovak-based e-commerce retailer specializing in cleaning machines, industrial vacuum cleaners, air humidifiers, purifiers, and food dehydrators. The company operates under MaM multimedia, s.r.o., with a business history dating back to 2005. The website targets consumers and businesses seeking quality cleaning and home care equipment, offering a range of products with clear pricing and promotional offers. The platform is positioned as a trusted regional player with a focus on customer service and reliable delivery. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and various JavaScript libraries for enhanced user experience such as PrettyPhoto and MagicZoomPlus. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. The content is well-structured, professionally designed, and easy to navigate. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a publicly available security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, ČistýSvet.SK demonstrates a solid business and technical foundation with good privacy compliance and trustworthy domain registration. Strategic improvements in security headers and incident response transparency would further enhance its security posture and customer trust.

S

Shopline.sk

shopline.sk

40

Shopline.sk is a Slovak e-commerce retailer specializing in branded sports clothing and footwear from brands such as Nike, Adidas, Converse, and others. The website targets general consumers in Slovakia looking for sports apparel and shoes at competitive prices. The business operates primarily online using a WordPress WooCommerce platform with the Flatsome theme, indicating a standard but effective e-commerce infrastructure. The site includes modern performance optimizations and tracking tools such as Google Tag Manager and Facebook Pixel, supporting marketing and analytics efforts. Security posture is adequate with HTTPS and some security headers, but lacks explicit security policies and incident response information. Privacy compliance is partially addressed with a cookie consent mechanism, though no privacy policy or terms of service were detected in the provided content. Overall, the website presents a professional and trustworthy front for a small to medium-sized regional e-commerce business.

N

NAJ.SK

naj.sk

10

NAJ.SK is a Slovak-based e-commerce retailer specializing in fashion products including footwear, clothing, and accessories for men, women, and children. The website presents a well-structured online store with a broad product catalog and clear navigation, targeting general consumers interested in fashion retail. The business operates on the Shoptet platform, leveraging modern web technologies and integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Pricemania remarketing. The website is secured with HTTPS and employs standard security practices including CSRF protection on forms. However, some security headers are not explicitly detected, and there is no published security policy or incident response information. Privacy compliance is addressed with a comprehensive privacy policy and terms of service, though cookie policy presence is less explicit. Overall, the site demonstrates a good balance of business credibility, technical implementation, and security posture, suitable for a medium-sized regional e-commerce business.

S

Salzburg AG

salzburg-ag.at

75

Salzburg AG is a leading regional utility company in Austria providing energy, transportation, and telecommunications services. The company positions itself as a sustainable and customer-centric provider, operating 24/7 throughout the year. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service information targeting residents and businesses in the Salzburg region. Technically, the site uses modern tools including Adobe Experience Manager CMS, Google Tag Manager, and Usercentrics for consent management, indicating a good level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although a dedicated security policy and incident response contacts are not explicitly published. Overall, the website and domain WHOIS data align well, supporting the legitimacy and trustworthiness of the business.

Z

Změna k lepšímu

klepsimu.cz

60

Změna k lepšímu is a Czech business platform focused on sustainability, connecting companies aiming for positive change. The platform emphasizes public affairs, community engagement, and education as its core strategic interests. The website is built on the Wix platform, leveraging modern web technologies and multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and LinkedIn Insight Tag. The technical infrastructure is moderate in performance and well-optimized for mobile devices. Security posture is adequate with HTTPS enforced and some security hardening scripts in place, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data suggests privacy protection or domain registration issues, which slightly reduces trustworthiness. Overall, the site presents a professional and consistent brand image targeting Czech businesses interested in sustainability.

B

BerlinerLuft do Brasil

berlinerluft.com.br

46

BerlinerLuft do Brasil is a medium-sized multinational manufacturing company specializing in ventilation, exhaust, air treatment, and acoustic systems. The company serves diverse industrial sectors including healthcare, pharmaceuticals, data centers, agribusiness, and construction. Their business model focuses on providing customized, high-technology products with technical support throughout the project lifecycle. The website reflects a consistent brand presence with detailed product and application information targeting industrial clients in Brazil. Technically, the website is built on TYPO3 CMS using Bootstrap 3.1.1 and jQuery 1.11.0, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, but security headers are missing, and the use of an outdated jQuery version presents a potential security risk. From a security perspective, the site lacks visible privacy and cookie policies, as well as incident response or security policy disclosures. No critical vulnerabilities or exposed sensitive data were detected, but improvements are needed in security headers and compliance documentation. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional and trustworthy but requires enhancements in privacy compliance and security best practices to improve its security posture and regulatory adherence.

B

BerlinerLuft. Technik GmbH

berlinerluft.at

50

BerlinerLuft. Technik GmbH is a German-based manufacturer specializing in ventilation, climate technology, and related industrial systems. The company offers a broad portfolio of products including fans, ventilation components, climate control devices, sound insulation systems, and process air technology. Their website reflects a mature B2B business model targeting technical building equipment professionals and industrial clients. The company maintains a consistent brand presence with multilingual support and international partner sites. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

B

BerlinerLuft.

berlinerluft.pl

44

BerlinerLuft. is a manufacturing company specializing in the production and supply of components and systems for ventilation and air conditioning installations. Their product portfolio includes high-performance radial fans, ventilation components, noise reduction systems, welded ventilation systems, and wet painting services. The company targets industrial and construction sectors requiring comprehensive ventilation solutions. The website is professionally designed using TYPO3 CMS, supports multiple languages, and demonstrates a moderate to good level of digital maturity with integrated analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and basic security best practices, though some security headers are missing and no explicit vulnerability disclosure or incident response information is provided. The absence of WHOIS data for the domain reduces trustworthiness slightly but the overall business presentation and certifications such as ISO 14001 and ISO 45001 support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration.

B

BerlinerLuft.

berlinerluft.com

47

BerlinerLuft.com is a professional website representing a medium-sized manufacturing company specializing in ventilation and air conditioning technology. The company offers a broad portfolio of products including industrial fans, ventilation components, air handling units, noise protection solutions, and process air systems. The website is well-designed, mobile-optimized, and provides comprehensive product and company information targeted at industrial and technical building services clients. Technically, the site is built on TYPO3 CMS and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or vulnerability disclosure information is found. The WHOIS data for the domain is missing or indicates the domain is not registered, which is inconsistent with the active and professional website presence, suggesting a need for verification. Overall, the site scores well on content quality and technical implementation but has moderate business credibility due to the WHOIS inconsistency.

H

HostX

hostx.ro

63

HostX is a Romanian web hosting and domain registration provider offering a wide range of services including SSD web hosting, VPS servers, SSL certificates, and business email hosting. The company targets businesses and individuals in Romania seeking reliable and affordable hosting solutions. Their market position is that of a competitive local provider with a comprehensive service portfolio and attractive pricing. Technically, the website uses modern JavaScript libraries such as jQuery and OwlCarousel, integrates Google Tag Manager and Cookiebot for analytics and cookie compliance, and is optimized for mobile devices with good SEO practices. Security-wise, the site enforces HTTPS and provides a detailed cookie consent mechanism, but lacks visible advanced security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected as per ROTLD policies, which is typical for Romanian domains, and no suspicious domain registration patterns were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

I

Intercontinental Exchange, Inc.

ice.com

66

Intercontinental Exchange, Inc. (ICE) operates as a global leader in financial exchanges, clearing houses, and data services. The company is recognized for pioneering digitization in exchanges and continues to innovate in price discovery, capital raising, indexing, clearing, and mortgage technology. ICE targets financial institutions, market participants, and mortgage industry professionals with a B2B business model. The website reflects a mature enterprise with consistent branding and comprehensive business information. Technically, the website leverages modern JavaScript frameworks such as React, along with libraries like Lodash, Moment.js, and Highcharts. It uses Brightcove for video content and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and visible incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies, including GDPR adherence. Overall, the website presents a low risk with a high degree of professionalism and trustworthiness. The absence of WHOIS data is a limitation but does not significantly detract from the site's credibility given the strong business presence and external validations.

Rambøll Group A/S is a large international consultancy specializing in sustainable architectural, engineering, and consulting solutions across multiple sectors including buildings, transport, energy, environment, health, water, management consulting, and landscape. The company has a strong market position and a well-established brand dating back to 1945. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting a global audience. Technically, the site is built on modern frameworks such as Next.js and Chakra UI, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact, which are areas for improvement. The WHOIS data is unavailable or protected, which slightly reduces trust but does not detract significantly from the overall legitimacy given the strong corporate branding and social media presence. Overall, Ramboll's digital footprint is professional and trustworthy, with room to enhance security transparency and WHOIS data availability.

E

ELIA

elia-artschools.org

64

ELIA is a well-established European network focused on higher arts education and research, representing a broad membership base across multiple countries and disciplines. The organization provides a platform for collaboration, advocacy, and knowledge exchange through events, working groups, and member services. The website reflects a mature digital presence with a moderate to good technical infrastructure leveraging popular frameworks and analytics tools. Security posture is adequate with HTTPS and bot protection in place, though some security headers could be improved. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but lacks explicit terms of service and security policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.

C

CopeCart

copecart.com

70

CopeCart is a technology company founded in 2017, providing an all-in-one online sales platform targeted at digital entrepreneurs primarily in Germany. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

H

Hanse Waagen

hanse-waagen.de

47

Hanse Waagen is a specialized German company providing industrial weighing solutions, calibration, repair, and accessories with certified quality and decades of experience. The website targets commercial customers and operates on a modern Shopware e-commerce platform, demonstrating a good level of digital maturity. The technical infrastructure includes standard analytics and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and privacy mechanisms in place, though explicit security policies and incident response information are absent. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

H

Handwerkskammer für München und Oberbayern

hwk-muenchen.de

68

The Handwerkskammer für München und Oberbayern is a well-established regional chamber of crafts serving approximately 78,000 member businesses. It provides a broad range of services including self-administration, advocacy, training, and consulting to support the craft sector in Munich and Upper Bavaria. The website reflects a strong market position as a key governmental and non-profit entity dedicated to the craft industry. The digital infrastructure is modern, leveraging a specialized CMS (ODAV), popular JavaScript libraries, and comprehensive analytics tools, ensuring good performance, accessibility, and user experience. Security measures are robust with HTTPS, CAPTCHA, and cookie consent mechanisms, although explicit security headers and published security policies could enhance the posture further. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience.

D

DSGVO Schutzteam

dsgvoschutzteam.com

63

DSGVO Schutzteam is a specialized German service provider focused on data protection, GDPR compliance, and whistleblowing solutions. The company offers tailored services including external data protection officer roles, GDPR-compliant website packages, whistleblowing reporting channels, and compliance with the EU AI regulation. Their market position is that of a niche expert catering to businesses seeking comprehensive data privacy and compliance support. The website is professionally designed using WordPress with modern SEO and cookie consent tools, indicating a mature digital infrastructure. The technical stack includes popular plugins and integrations such as Yoast SEO, WPBakery, HubSpot, Matomo, and Google Tag Manager, supporting marketing and analytics needs. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and business focus. Overall, the website is trustworthy, well-structured, and compliant with GDPR principles, serving a general business audience.

L

Lünecom

luenecom.de

65

Lünecom is a regional internet service provider based in northern Germany specializing in fiber optic internet, IP telephony, and IPTV services. The company positions itself as a local provider delivering high-speed internet connectivity to consumers and businesses in its region. The website reflects a professional and consistent brand image with clear messaging about its core offerings and target market. The digital infrastructure leverages HubSpot CMS and marketing tools, Cookiebot for GDPR-compliant cookie consent, and integrates analytics platforms such as Google Analytics and Hotjar for user behavior insights. The technical implementation is modern and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. However, the site lacks explicit terms of service and security policy pages, which could enhance legal and security transparency. WHOIS data is limited due to DENIC privacy restrictions but shows no inconsistencies with the business claims. Overall, Lünecom's website is trustworthy, professional, and compliant with GDPR, serving its regional telecommunications market effectively.

L

Leitz

leitz.com

61

Leitz is a well-established brand specializing in office supplies, office solutions, and stationery products, targeting office workers and home office users. The website presents a professional and consistent brand image with a focus on premium quality products rooted in German heritage. The technical infrastructure includes modern analytics and cookie consent technologies, with a CMS likely based on Episerver. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enabled and cookie consent mechanisms in place, though security headers and explicit security policies are lacking. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding support legitimacy. Privacy compliance is partially implemented, with cookie consent but no visible privacy policy or terms of service pages in the provided content. Overall, the website is professional and trustworthy but could improve transparency and security practices.

H

Handwerkskammer für München und Oberbayern

handwerkskammer.de

64

The website www.handwerkskammer.de represents a collective initiative of all 53 Handwerkskammern (craft chambers) in Germany, serving as a central platform to harmonize services, digital presence, and communication for the German handcraft sector. It provides resources and information related to training, business management, and digital transformation for its members and the public. The site is well-structured, professionally designed, and targets a broad audience including members, businesses, and the general public interested in the craft industry. Technically, the site uses a modern CMS (ODAV), integrates accessibility tools, and employs standard web technologies such as jQuery and Bootstrap. It also uses Google Analytics and Tag Manager for analytics and tracking, with a compliant cookie consent mechanism in place. Security-wise, the site enforces HTTPS, uses bot protection (Friendly Captcha), and manages cookie consent responsibly, though it lacks publicly visible security policies or incident response contacts. Overall, the site is trustworthy, secure, and compliant with GDPR, reflecting a mature digital presence for a governmental sector organization.

B

BerlinerLuft. Technik GmbH

berlinerluft.de

50

BerlinerLuft. Technik GmbH is a medium-sized German company specializing in the development and production of ventilation, climate technology, and industrial air systems. Their website presents a comprehensive portfolio of products and solutions targeting technical building equipment professionals and industrial clients. The company maintains a strong market position with a focus on sustainable and modular system solutions. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager for tracking, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is professional, trustworthy, and GDPR compliant, with clear contact information and international presence.

E

EZN Innovationsberatung

ezn.de

44

EZN Innovationsberatung is a well-established German consulting firm specializing in innovation development, patent protection, and commercialization services since 1981. The company targets businesses, universities, founders, and inventors, offering expert advice, patent valuation, and support with funding programs. Their market position is strong, supported by extensive experience and reputable client references, including major universities. Technically, the website is built on WordPress with a modern plugin ecosystem supporting SEO, multilingual content, event management, and cookie compliance. The site is mobile-optimized and integrates Google Tag Manager and MailerLite for analytics and marketing. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a good user experience and clear business information.

C

Creatomatic

creatomatic.co.uk

68

Creatomatic is a Scotland-based digital agency specializing in web design, branding, and digital transformation services, with a focus on WordPress development and digital marketing. The company positions itself as a professional and trusted partner for businesses seeking to build and enhance their digital presence. The website reflects a small-sized agency with a solid reputation, supported by positive user ratings and active social media engagement. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The website is served securely over HTTPS with CDN support, ensuring good performance and availability. Security posture is generally good with HTTPS and privacy consent mechanisms implemented, though explicit security headers and detailed privacy or cookie policies are not detected in the provided content. The absence of WHOIS data for the subdomain queried is expected and does not detract significantly from the domain's legitimacy. Overall, Creatomatic demonstrates a professional online presence with moderate technical sophistication and a good security baseline, suitable for its business model and market segment.

Tork is a leading global brand specializing in professional hygiene products and services, targeting businesses across various sectors such as offices, hospitality, and manufacturing. The website presents a professional and consistent brand image, reflecting its position as part of the Essity group. The digital infrastructure leverages modern technologies including React and Next.js, with integrations for analytics and consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms, although explicit incident response and vulnerability disclosure information are absent. Overall, the website is trustworthy and well-maintained, but the absence of WHOIS data introduces a minor trust concern that should be investigated further.

L

James Bond: The Final Mission

lastbond.com

49

The website www.lastbond.com is an interactive media experience themed around the James Bond franchise, specifically titled 'James Bond: The Final Mission'. It offers users the ability to watch a video revealing the new secret agent successor and create their own customized content. The site targets general audiences interested in entertainment and fan engagement. Technically, the site is built using modern web technologies including React and Next.js, with Google Tag Manager integrated for analytics. The design is visually consistent and mobile optimized, providing a good user experience. However, the site lacks critical business and security information such as WHOIS registration data, privacy and cookie policies, contact details, and security headers. This absence impacts the trustworthiness and compliance posture of the site. Overall, the site appears to be a small-scale media project or fan engagement platform rather than a formal commercial business.

Ramboll is a prominent international consultancy firm specializing in architecture, engineering, and advisory services, with a strong focus on sustainable development. The website reflects a professional and well-established business entity targeting corporate and public sector clients. The content is comprehensive and well-structured, emphasizing their commitment to creating sustainable societies where people and nature thrive. Technically, the site is built using modern frameworks such as Next.js and React, with Chakra UI for styling, indicating a mature digital infrastructure. The presence of Cookiebot and Google Tag Manager shows attention to privacy and analytics integration. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains good privacy compliance with GDPR. Overall, Ramboll's website demonstrates a high level of professionalism, technical maturity, and security awareness, supporting its market position as a leading consultancy firm.

N

National Shooting Sports Foundation

gunvote.org

52

GunVote is an advocacy and voter mobilization platform operated by the National Shooting Sports Foundation (NSSF), focused on protecting Second Amendment rights in the United States. The website provides resources such as candidate report cards and encourages gun owners and supporters to vote in elections. The platform targets a niche audience of firearm owners, hunters, and industry members, positioning itself as a key player in political advocacy within this sector. Technically, the site is built on WordPress using the Divi theme, leveraging modern JavaScript libraries and multiple third-party tracking and advertising services. While the site is mobile-optimized and has good design quality, it lacks comprehensive privacy and cookie policies, and does not implement DNSSEC or advanced security headers, which are areas for improvement. Security posture is moderate with HTTPS enforced and domain transfer protections in place. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the platform.

N

NSSF Real Solutions®

nssfrealsolutions.org

63

NSSF Real Solutions® is a non-profit organization focused on firearm safety and community partnerships. The website highlights their collaboration with law enforcement, elected officials, and other organizations to promote safer communities through various programs such as Project ChildSafe and suicide prevention initiatives. The organization appears well-established with a clear mission and multiple partnerships, positioning itself as a trusted advocate in the firearm safety sector. Technically, the website is built on WordPress using modern technologies including jQuery, Bootstrap, and Gravity Forms. It employs multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Twitter tracking, indicating a mature digital presence. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain protections like clientTransferProhibited status. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no published security policy or incident response contact, and no cookie consent mechanism despite tracking scripts, which are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively. The security posture is solid but could be enhanced with additional measures. Privacy compliance is basic and should be improved to meet GDPR standards fully.

N

National Shooting Sports Foundation, Inc.

shootingsportsmonth.org

58

The National Shooting Sports Month website serves as a promotional platform for the National Shooting Sports Foundation, Inc., a well-established non-profit organization dedicated to growing participation in shooting sports across the United States. The site effectively targets gun owners, shooting ranges, retailers, manufacturers, and organizations by providing event information, promotional toolkits, and opportunities to get involved. The website's market position is strong within its niche, leveraging official branding and partnerships to maintain credibility and industry leadership. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience with mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers are missing and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site demonstrates high business credibility with clear contact information and trust indicators such as testimonials and social media presence. The WHOIS data is unavailable due to privacy protection or query issues, but the domain age and content consistency support legitimacy. Strategic recommendations include enhancing security headers, expanding incident response information, and improving accessibility features to further strengthen the site's security and compliance stance.

S

Sturm, Ruger & Co., Inc.

glenfieldfirearms.com

59

Glenfield Firearms is a brand operated by Sturm, Ruger & Co., Inc., a well-established American firearms manufacturer with over 75 years of history. The website focuses on promoting Glenfield rifles as reliable, affordable, and straightforward hunting tools, targeting hunters and firearm enthusiasts. The site provides product information, customer support resources, and links to related brands and accessories. Technically, the website uses modern web technologies including jQuery, Bootstrap, and SweetAlert2, with Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with clear navigation. Security measures include an age verification overlay to restrict access to adults, but there is room for improvement in security headers and cookie consent mechanisms. The domain registration is consistent and legitimate, registered through Network Solutions without privacy protection, aligning with the brand's transparency. Overall, the website is credible and functional with moderate technical sophistication and basic privacy compliance.

Rebel.com is a Canadian-based domain registrar and web hosting provider offering a comprehensive suite of services including domain registration, hosting plans, professional email, security options, and SEO tools. The company targets entrepreneurs and small business owners seeking reliable and professional online presence solutions. The website is well-designed, mobile-optimized, and uses modern technologies such as React and Gatsby, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and free SSL certificates for hosting customers. However, explicit privacy and cookie policies are not found, which may impact compliance and user trust. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and customer testimonials support its legitimacy. Overall, Rebel.com presents a trustworthy and technically sound platform for domain and hosting services, with room for improvement in privacy transparency and security disclosures.

ImageBoss is a technology-focused SaaS company providing on-demand image processing, resizing, compression, and CDN services targeted primarily at developers. The company offers a powerful API that supports modern image formats and best practices, positioning itself as a niche player in the developer tools market. The website reflects a professional and consistent brand with a clear value proposition and a free trial offering to attract users. Technically, the site is built on Ruby on Rails with modern JavaScript libraries and integrates analytics and error monitoring tools such as Google Analytics, New Relic, and Bugsnag. The use of Cloudflare DNS and CDN enhances performance and security. Security posture is good with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and Content Security Policy headers are recommended. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-implemented but could benefit from enhanced security and privacy disclosures.

T

TechIO Limited

pressidium.com

76

Pressidium, operated by TechIO Limited, is a specialized managed WordPress hosting provider offering next-generation edge-based hosting solutions. Their platform emphasizes ultra-fast global delivery through edge caching, robust security via an advanced Web Application Firewall, and enterprise-grade reliability. The company targets digital agencies, businesses, WooCommerce sites, educational institutions, and eLearning platforms, positioning itself as a leader in high-performance WordPress hosting with a strong focus on security and scalability. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation.

A

ANPCDEFP

erasmusplus.ro

46

The website www.erasmusplus.ro serves as the official Romanian National Agency portal for the Erasmus+ program, providing comprehensive information, resources, and updates related to EU-funded education, training, youth, and sport projects. It targets students, educators, institutions, and youth organizations, positioning itself as an authoritative source within Romania for Erasmus+ program details and support. The site demonstrates a solid digital infrastructure with a custom CMS, integration of JavaScript libraries, and modern analytics tools, ensuring good user experience and accessibility. Security posture is strong with HTTPS enforcement and GDPR compliance, although some security headers could be improved. The domain is privacy protected under ROTLD policies, which is typical for Romanian domains, and the website content and external links strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving an important governmental and educational function.

A

Agenția Națională pentru Programe Comunitare în Domeniul Educației și Formării Profesionale (ANPCDEFP)

anpcdefp.ro

43

ANPCDEFP is a Romanian national agency dedicated to managing European Union educational and youth programs such as Erasmus+, the European Solidarity Corps, and SEE Grants. The agency plays a key role in transforming Romania through learning by providing funding, information, and support services to educational institutions, youth organizations, and public entities. The website reflects a professional government entity with consistent branding and comprehensive content focused on its mission and services. Technically, the site uses a mix of legacy and modern JavaScript libraries, with Google Analytics and Tag Manager for tracking. Security posture is strong with HTTPS enforced and multi-factor authentication mentioned for related EU platforms, though explicit security headers and incident response contacts are not visible. Privacy compliance is well addressed with a clear GDPR policy and cookie consent mechanism. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

S

Smex Ed

smexed.com

55

Smex Ed is a small digital media company operating a free digital magazine focused on sexual empowerment and education. Founded in 2023, it offers educational content, a podcast, and advertising opportunities targeting a general audience interested in sexual health and empowerment. The website is hosted on WordPress.com and uses modern web technologies including embedded social media and podcast platforms. The business model relies on donations and advertising revenue. The site is professionally designed with good navigation and mobile optimization, though it lacks formal privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved with enhanced security headers and published policies. Overall, the domain registration and hosting are consistent and legitimate for the business type.

E-Werk Kulturzentrum GmbH operates a prominent cultural center in Erlangen, Germany, with over 35 years of history. The organization hosts a wide range of cultural events, concerts, and community programs, positioning itself as one of the largest cultural venues in Germany. The website reflects this focus with detailed event programming and cultural content aimed at regional and national audiences interested in arts and culture. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party services such as Cookiebot for consent management and Google/Facebook for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with comprehensive cookie categorization and GDPR-aligned consent. Overall, the site is trustworthy and professionally maintained, with no critical security or compliance issues detected.

L

Layer X LLC

elixir.app

62

Elixir Games is a blockchain gaming distribution platform operated by Layer X LLC, a company registered in Georgia with a Virtual Asset Service Provider (VASP) license. The platform offers a curated selection of blockchain and web3 games available for Windows, Mac OS, and Linux, positioning itself as a niche alternative to mainstream digital game stores like Steam. The company emphasizes empowering indie game ecosystems through innovative distribution and engagement, supported by a modern web presence and active social media channels. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and terms policies, reflecting a mature digital business infrastructure. Technically, the website leverages modern frameworks such as Next.js and Mantine UI, with integrations for analytics and marketing tools including Google Tag Manager, Facebook Pixel, and TikTok Pixel. Cookie consent is managed via CookieYes, and live chat support is provided through Chatwoot. The platform is secured with HTTPS and references third-party security audits by Certik and OSEC, indicating a strong commitment to security and compliance. However, explicit security headers and a public vulnerability disclosure program are not evident. From a security perspective, the site demonstrates good practices with encrypted communications and privacy compliance, but could improve by publishing detailed security policies and incident response contacts. No critical vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns with the company's stated location and business model. The absence of direct contact emails or phone numbers on the site suggests a preference for indirect communication channels. Overall, Elixir Games presents a credible, secure, and professionally managed platform within the blockchain gaming niche. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure information, and providing clearer direct contact options to strengthen trust and compliance further.

M

Medicom VerlagsgmbH

medicom.cc

52

Medicom VerlagsgmbH operates a professional medical publishing website targeting healthcare professionals in German-speaking countries, primarily Austria, Germany, and Switzerland. The site offers multiple specialized medical publications, video lectures, and congress information, supporting continuing education for physicians and nurses. The business is positioned as a niche medical media provider with a long-standing domain since 2000, indicating stability and market presence. Technically, the website is built on Weblication CMS, uses jQuery, and integrates Google Analytics and Google Tag Manager with IP anonymization for user tracking. Hosting is provided by Hetzner, a reputable provider. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no publicly available security policy or incident response contact, which could be improved. Privacy compliance is basic but present, with GDPR-relevant policies and cookie banners. Overall, the website is professional, trustworthy, and safe for its target audience. Strategic improvements in security headers, DNSSEC, and transparency around security policies would enhance its security maturity and trustworthiness.

H

H&B Notfallsanitäter-Börse GmbH

nfsb.de

54

H&B Notfallsanitäter-Börse GmbH operates a specialized job board and personnel placement service for emergency medical services in Germany. The company focuses on providing flexible job opportunities and staffing solutions for notfallsanitäter (emergency paramedics) and related professionals. Their platform also offers certified training and emphasizes legal employment and flexible scheduling. The website is well-designed, mobile-optimized, and uses modern technologies including WordPress, Yoast SEO, and Google Analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The domain registration is consistent with the business claims and shows no suspicious indicators. Overall, the company presents a credible and professional online presence targeting healthcare professionals and emergency service employers.