Security Directory

R

RBTX

rbtx.co.uk

56

RBTX is a UK-based robotics marketplace specializing in affordable and compatible automation components sourced from leading manufacturers. Founded in 2020, the company targets manufacturing and industrial clients seeking cost-effective automation solutions. Their offerings include product sales, free expert consultations via video calls, feasibility testing, and educational resources through their academy. The website is built on modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some gaps exist in privacy and security policies, with no explicit privacy or cookie policies detected in the analyzed content. The security posture is moderate, lacking visible security headers and formal incident response information. Overall, the business appears legitimate and professionally presented, with a moderate risk profile due to incomplete privacy compliance and security best practices.

T

BLOCK: 0

timechaincalendar.com

54

Timechaincalendar.com is a niche technology website providing live data from the Bitcoin blockchain (referred to as the timechain) along with past block lookup and calendar features. The site targets general users interested in blockchain data and cryptocurrency enthusiasts. It operates a lightweight information service model without visible monetization or advertising. The domain is relatively new, registered in 2022, and hosted on Amazon AWS infrastructure, indicating a modern and scalable technical foundation. The site uses React and Chakra UI frameworks, with a focus on a dark theme and mobile optimization. Security posture is moderate with HTTPS enforced and a Content Security Policy in place, but lacks DNSSEC and additional security headers. Privacy and cookie policies are absent, and no contact or business identity information is provided, which limits trust and compliance. Analytics usage is minimal via Fathom Analytics, respecting user privacy to some extent. Overall, the site is functional and moderately professional but would benefit from enhanced transparency and security practices.

L

Leadpages (US), Inc.

leadpages.com

66

Leadpages (US), Inc. operates a sophisticated SaaS platform focused on creating high-converting landing pages and lead generation tools for businesses, agencies, and enterprises. The company positions itself as a leader in marketing optimization with a comprehensive suite of features including AI content generation, lead enrichment, A/B testing, and team collaboration. Their market presence is strong, serving over 466,000 businesses worldwide and generating over 9 million leads monthly. The website content is professionally designed, well-structured, and highly relevant to their target audience. Technically, the website leverages modern web technologies such as React and Next.js, supported by a robust CDN likely provided by Cloudflare. The site is optimized for performance, mobile responsiveness, and SEO, with extensive use of tracking and analytics tools including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight. Security best practices are observed with HTTPS enforcement and security headers, though some improvements in privacy compliance mechanisms are recommended. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent banner and lack of explicit incident response contacts are areas for enhancement. The WHOIS data is notably missing or unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the overall legitimacy given the professional web presence. Overall, Leadpages presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing privacy compliance visibility, publishing vulnerability disclosure information, and improving transparency around security incident response to further strengthen trust and compliance.

B

BitMEX

bitmex.com

67

BitMEX is a well-established cryptocurrency exchange specializing in derivatives trading, including perpetual swaps, futures, and spot trading. The platform targets both retail and institutional crypto traders, offering advanced trading tools, mobile applications, and active promotional campaigns. BitMEX positions itself as a secure and innovative leader in the crypto derivatives market with a decade of experience and a claim of zero funds lost. Technically, the website is built on modern frameworks such as React and Next.js, with good mobile optimization and fast performance. However, the absence of WHOIS data and lack of visible privacy and security policies reduce trust and compliance confidence. The security posture is generally good with HTTPS and secure forms, but could be improved by adding explicit security headers and incident response information. Overall, BitMEX presents a professional and trustworthy front but should enhance transparency and compliance documentation to strengthen its security and privacy posture.

E

Excellence in Manufacturing Consortium

emccanada.org

66

Excellence in Manufacturing Consortium (EMC) is Canada's largest manufacturing consortium, established in 2004, providing a broad range of services including training, energy management, health and safety programs, and industry research. The organization targets Canadian manufacturers and industry stakeholders, positioning itself as a key player in the North American manufacturing ecosystem. The website is professionally designed, mobile-optimized, and uses modern technologies such as Next.js and HubSpot for marketing and analytics. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though some security best practices like DNSSEC and security headers could be improved. Privacy compliance is basic with clear privacy and cookie policies and consent mechanisms in place. Overall, EMC demonstrates a high level of business credibility and digital maturity.

L

Leaders for Climate Action

lfca.earth

61

Leaders for Climate Action is a US-based non-profit organization founded in 2020 that focuses on transforming business leaders into climate leaders and inspiring organizational and societal change to prevent climate catastrophe. The website presents a professional and consistent brand image with clear messaging targeting business leaders interested in sustainability. Technically, the site is built using modern frameworks such as Gatsby and React, hosted on Netlify, and integrates analytics and error tracking tools like RudderStack and Bugsnag. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies such as privacy and cookie policies. No contact information or incident response details are provided, which limits transparency and user trust. Overall, the site is safe, well-designed, and functional but would benefit from enhanced privacy compliance and security best practices.

B

Blue Yonder

flexis.com

75

Blue Yonder is a mature enterprise specializing in AI-powered end-to-end supply chain management solutions. The company offers a comprehensive platform that supports planning, execution, commerce, and returns, targeting businesses seeking to optimize their supply chains with advanced technology. Their market position is strong, supported by a broad portfolio of services and a global presence. Technically, the website leverages modern frameworks such as Next.js and React, hosted and secured via Cloudflare, with good performance and mobile optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable business platform.

I

Inderes Oyj

videosync.fi

62

Videosync is a professional SaaS platform specializing in virtual and hybrid event production, targeting event agencies, enterprises, and investor relations professionals. The platform boasts a strong market presence with over 20,000 events delivered and more than 500 clients, including over 400 listed Nordic companies. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on Google Cloud infrastructure, and employs privacy-respecting analytics. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers and explicit policies could be improved. Privacy compliance is good with clear privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the business credibility is high with consistent branding, comprehensive content, and clear contact information.

S

SCHMACHTL GmbH

schmachtl.at

64

SCHMACHTL GmbH is a medium-sized Austrian company specializing in providing high-quality components and expertise in energy technology, automation & robotics, and environmental technology. The company operates multiple branches and subsidiaries across Austria, Slovakia, and the Czech Republic, serving industrial clients and businesses in related sectors. Their website reflects a professional B2B solutions provider with a clear focus on industrial technology products and services. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Google Maps API and Storyblok CMS, indicating a mature digital infrastructure. The site is mobile-optimized and offers good user experience and navigation clarity. Security posture is moderate; while HTTPS is presumably enabled, no security headers or explicit security policies are visible, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

U

Unchained Robotics

unchainedrobotics.de

59

Unchained Robotics is a German-based company specializing in providing modular and turnkey automation solutions using collaborative robots, gripping systems, and vision technologies. Founded in 2019, the company targets manufacturing and production businesses seeking to enhance efficiency and ROI through automation. Their offerings include a B2B marketplace for robotics products and a proprietary automation ecosystem called MalocherBot powered by the LUNA operating system. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, with Cloudflare providing DNS and CDN services, and employs analytics tools like Matomo and Google Tag Manager for user insights. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not published. Privacy policies are comprehensive and GDPR compliant, but the cookie consent mechanism could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

R

RBTX

rbtx.com

60

RBTX is a specialized robotics marketplace offering affordable and compatible automation components sourced from leading manufacturers. The company provides a comprehensive platform including product sales, configuration tools, free expert advice, and feasibility testing services, targeting manufacturing and automation professionals. The website is well-designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site leverages modern frameworks like Next.js and is hosted on AWS infrastructure, with analytics powered by Piwik PRO. Security posture is solid with HTTPS enforcement and security headers, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is trustworthy and professional, with room for improvement in incident response transparency and accessibility. No WAF or blocking mechanisms were detected, allowing full content analysis.

Finance in Motion is a medium-sized company established in 2009, specializing in sustainable finance and impact investing. The company offers investment funds and advisory services targeting institutional investors and sustainability-focused stakeholders. The website reflects a professional and consistent brand image with a focus on finance and energy sectors. Technically, the site is built on modern frameworks such as Next.js and React, incorporating privacy-conscious analytics (Matomo) and cookie consent management (Cookiebot). Security posture is good with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and detailed cookie consent mechanism. However, contact information and explicit security policies are not readily found, which could be enhanced to improve trust and transparency.

H

HEUTE Maschinenfabrik GmbH & Co. KG

profilgate.com

68

ProfilGate® is a German-based company specializing in mechanical clean walk zones designed for production and logistics halls to reduce contamination and support hygiene standards across various industries. The company serves a broad industrial audience, including automotive, pharmaceutical, food, and logistics sectors, with a strong market presence evidenced by partnerships with major corporations such as Volkswagen, P&G, and Siemens. Their solutions focus on improving product quality, reducing cleaning costs, and enabling compliance with hygiene certifications like HACCP and ISO 22000. Technically, the website is built on modern frameworks such as Next.js and React, offering a responsive and well-structured user experience with good SEO and accessibility features. Security posture is strong with HTTPS and standard security headers, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and business credibility. Overall, the site is well-designed, content-rich, and trustworthy for its target industrial audience.

The European Fund for Southeast Europe (EFSE) is a well-established impact investment fund focused on providing tailored debt financing solutions to micro, small, and medium-sized enterprises (MSMEs) in Southeast Europe and the Caucasus. Founded in 2005, EFSE operates as a public-private partnership, aiming to foster inclusive and sustainable economic growth by partnering with local financial institutions. The fund offers a variety of financial products including local currency loans and specialized financing for underserved sectors such as agriculture. Technically, the website is built using modern web technologies including React and Next.js, hosted on Mittwald infrastructure. It incorporates advanced monitoring and analytics tools such as Sentry and Matomo, and employs Cookiebot for GDPR-compliant cookie consent. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. However, it lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. No vulnerability disclosure or incident response information is provided, representing an area for improvement. Overall, EFSE's website demonstrates a high level of professionalism and trustworthiness, with strong business credibility and technical implementation. The absence of some compliance documents and contact details slightly reduces the privacy compliance score but does not significantly impact the overall security posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing transparency with contact information, and establishing a vulnerability disclosure program.

C

Cryptoticker.io GmbH

cryptoticker.io

70

CryptoTicker.io GmbH operates a comprehensive Web3 and cryptocurrency news platform that offers a wide range of services including news, guides, exchange and hardware wallet comparisons, podcasts, and educational content. The company targets crypto traders, investors, beginners, and enthusiasts, positioning itself as a trusted source with a strong community presence and over 300,000 readers. The business model is primarily content-driven with premium memberships and affiliate marketing. Technically, the website is built on modern frameworks such as Next.js and React, hosted likely on AWS Cloudfront, and optimized for performance and mobile use. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

S

Solana Foundation

solana.org

67

The Solana Foundation operates as a non-profit entity dedicated to supporting the Solana blockchain ecosystem, focusing on decentralization, adoption, and security. The foundation provides key services such as validator delegation programs, grants funding, and community engagement initiatives. The website reflects a mature and professional organization with a clear mission and well-structured programs targeting blockchain validators, developers, and ecosystem contributors. Technically, the site is built on modern frameworks like Next.js and React, hosted via Cloudflare, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a terms of service page present but lacking explicit cookie consent mechanisms or detailed privacy policies. Overall, the site is trustworthy, professional, and well-positioned within the blockchain technology sector.

R

Ros Group BV

sleap.io

69

Sleap.io is a Web3-enabled travel booking platform launched in 2023 by Ros Group BV, based in the Netherlands. It offers access to over 1 million hotels and thousands of flights worldwide, with a unique value proposition of accepting payments in over 300 cryptocurrencies and providing NFT-based travel rewards. The platform targets crypto-savvy travelers and Web3 enthusiasts, positioning itself as an innovative player in the hospitality industry by integrating blockchain technology and decentralized payment options. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and comprehensive content about its services and benefits. Technically, Sleap.io leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, Facebook Pixel, and Twitter Pixel. Security posture is strong with HTTPS enforced, domain transfer restrictions, and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site demonstrates a mature digital presence suitable for its niche market, with good privacy compliance and trust indicators such as testimonials and partnerships. Recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around security policies and incident response.

A

Arbeitsgemeinschaft der öffentlich-rechtlichen Rundfunkanstalten der Bundesrepublik Deutschland (ARD)

ard.social

67

ARD.social is the official Mastodon instance operated by the Arbeitsgemeinschaft der öffentlich-rechtlichen Rundfunkanstalten der Bundesrepublik Deutschland (ARD), a major German public broadcasting consortium. The platform serves as a decentralized social network primarily for ARD's editorial content and German-speaking audiences. The website leverages the open-source Mastodon platform (version 4.2.18) and is hosted on Google Cloud infrastructure, ensuring modern technology adoption and reliable performance. The domain was registered in 2022, aligning with the platform's recent launch. Technically, the site employs React and JavaScript frameworks, with media assets hosted on Google Cloud Storage. The website is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS enforced and domain status protections in place; however, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is generally good, with a comprehensive privacy policy present, but lacks a cookie consent mechanism. Overall, ARD.social demonstrates a trustworthy and professional presence as a public media social platform. The absence of contact information and incident response details limits transparency in security and support channels. Strategic enhancements in DNS security, security headers, and privacy consent mechanisms would strengthen the platform's security and compliance posture.

A

American Tourister Brasil

americantourister.com.br

55

American Tourister Brasil operates a professional e-commerce platform specializing in travel luggage and accessories tailored for the Brazilian market. The website reflects a well-known international brand localized for Brazil, offering a variety of luggage types and collections. The platform integrates modern technologies such as React, Next.js, and Shopify, hosted on Vercel with Cloudflare DNS, ensuring good performance and scalability. Marketing and analytics tools like Klaviyo, Okendo, Microsoft Clarity, and Facebook Pixel are actively used to enhance customer engagement and track user behavior. Security posture is solid with HTTPS enforced and secure cookie practices, although explicit security policies and incident response information are not publicly available. Privacy and cookie policies are not found, indicating room for compliance improvement. Overall, the site is safe, professional, and trustworthy for general consumers seeking travel products in Brazil.

BitLab d.o.o. is a medium-sized IT company based in Bosnia and Herzegovina, specializing in a broad range of technology services including web development, mobile applications, 3D visualization, hosting, education, and e-commerce. Established in 2015, the company has completed over 500 projects and serves a diverse clientele including government agencies and educational institutions. Their business model focuses on providing comprehensive IT solutions and digital services tailored to client needs, supported by a strong local presence and multilingual website content. Technically, BitLab employs a modern technology stack with popular frameworks and platforms, ensuring good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved further. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks advanced security headers and published security policies, which are recommended for enhanced trust and compliance. Overall, BitLab presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security transparency.

S

Schroders Capital

schroderscapital.com

69

Schroders Capital is a global asset management firm specializing in private markets, offering a broad range of investment solutions including Private Equity, Real Estate, Infrastructure, and Private Debt & Credit Alternatives. The company serves professional and institutional investors worldwide, with a strong presence across 25 global locations and managing assets exceeding $99 billion. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for its target audience of professional investors. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the brand association and professional presentation.

R

Resurs Bank AB (publ)

resurs.com

74

Resurs Bank AB (publ) is a well-established Swedish financial institution offering a broad range of consumer and corporate financial services including savings accounts, loans, credit cards, factoring, payment solutions, and insurance. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to private individuals and businesses in Sweden. The company positions itself as a trusted partner to help customers manage their everyday finances with flexible and accessible financial products. Technically, the website leverages modern web technologies such as React, AWS S3 for media hosting, Google Tag Manager for analytics, and Google reCAPTCHA v3 for bot protection. The site demonstrates good performance, accessibility, and SEO practices, indicating a mature digital infrastructure. Security measures include HTTPS enforcement, security headers, and user education on fraud prevention. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. However, explicit incident response contacts and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a low-risk profile with high trustworthiness and professionalism. The absence of WHOIS data for the www subdomain is noted but does not detract from the legitimacy of the root domain and business operations. Strategic recommendations include enhancing transparency around security incident handling and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

N

NOBA Bank Group AB

noba.bank

64

NOBA Bank Group AB is a leading European specialist bank founded in 2003, offering consumer credit, cards, savings, mortgages, and equity release loans. It operates through subsidiaries including Nordax Bank, Bank Norwegian, and Svensk Hypotekspension across eight countries, serving over two million customers. The website is built on modern technologies such as React and Next.js, hosted on Vercel, and managed via Sanity CMS, reflecting a mature digital infrastructure with excellent performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing, representing areas for improvement. Overall, the website demonstrates high professionalism and trustworthiness, with comprehensive investor relations and sustainability information, but lacks some compliance disclosures. Strategic recommendations include adding privacy and cookie policies, security headers, and a vulnerability disclosure page to enhance compliance and security transparency.

M

Morrow Bank

morrowbank.com

71

Morrow Bank is a Nordic financial institution with a presence in Norway, Sweden, and Finland, operating through country-specific domains. The website serves primarily as a landing page directing users to localized banking sites. The technical infrastructure is modern, leveraging Next.js and React frameworks, and hosted on Microsoft Azure DNS services. The site is mobile optimized with good navigation and professional design, although content is minimal on the landing page. Security posture is moderate with HTTPS implied but lacking DNSSEC and security headers. Privacy and cookie policies are not present, indicating compliance gaps. No contact information or incident response details are provided on this page, limiting transparency. Overall, the domain registration is consistent and legitimate, supporting the bank's credibility.

B

Brocc AB

brocc.se

62

Brocc AB is a Swedish fintech company specializing in providing smarter loan and savings solutions tailored to individual customer needs. Their platform offers competitive interest rates, cashback features, and a mobile app for comprehensive financial management. The company positions itself as an innovative player in the Swedish financial services market, targeting consumers seeking flexible and transparent financial products. The website reflects a modern, professional design with clear navigation and strong branding consistency. Technically, the site is built on Gatsby and React, hosted likely on AWS infrastructure, and integrates third-party services such as Google Tag Manager and Trustpilot for analytics and social proof. Security-wise, the site enforces HTTPS and uses BankID for secure login, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is evident with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, Brocc demonstrates a mature digital presence with room for improvement in security transparency and privacy controls.

BitLab d.o.o. is a medium-sized technology company based in Bosnia and Herzegovina, specializing in IT solutions including web development, mobile applications, 3D visualization, hosting, e-commerce, and education. Established in 2014, the company has a solid market presence with over 500 completed projects and a diverse client base including government and educational institutions. Their business model focuses on providing comprehensive digital services and products to businesses and organizations in the region. Technically, the website demonstrates a modern technology stack with a variety of backend and frontend frameworks, CMS options, and integration of analytics and social sharing tools. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Hosting appears to be managed internally or through affiliated services, with DNSSEC enabled and SSL certificates in use, indicating a secure infrastructure. From a security perspective, the website benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies such as privacy or cookie policies. No forms or direct data collection mechanisms were detected in the provided content, reducing immediate risk exposure. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and similar regulations. Overall, BitLab d.o.o. presents a trustworthy and professional online presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory adherence.

P

ProCredit Bank d.d. Sarajevo

procreditbank.ba

71

ProCredit Bank d.d. Sarajevo is a German-owned financial institution operating in Bosnia and Herzegovina, specializing in retail and SME banking with a strong focus on sustainability and digital innovation. The bank offers a comprehensive range of services including current accounts, savings, loans, and digital banking platforms such as ProBanking and mobile applications. Their market position is strengthened by transparent business ethics, ISO certifications, and a commitment to green financing. Technically, the website is built on modern frameworks like Next.js and React, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS, security headers, and secure forms, complemented by an incident response mechanism via whistleblowing. However, the absence of a cookie consent mechanism and vulnerability disclosure page are notable compliance gaps. Overall, the bank demonstrates a high level of professionalism, trustworthiness, and digital maturity.

A

American Tourister México

americantourister.com.mx

10

American Tourister México operates a professional e-commerce platform specializing in luggage, backpacks, and travel accessories targeted at the Mexican market. The website showcases a broad product catalog with clear navigation and integrates customer reviews and marketing tools to enhance user engagement. The technical infrastructure leverages modern frameworks such as Next.js and React, hosted on Vercel, with Shopify powering the commerce backend. Marketing and analytics integrations include Klaviyo, Okendo, Microsoft Clarity, and Facebook Pixel, indicating a mature digital marketing approach. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and cookie policies are missing, representing compliance gaps. Overall, the site is trustworthy and well-positioned in the retail luggage sector in Mexico.

S

Staples

staples.com

73

Staples is a leading enterprise retail and e-commerce company specializing in office supplies, furniture, printing services, and technology products. The website serves a broad audience including businesses and individual consumers, offering a comprehensive range of products and services with a strong emphasis on convenience such as free next-day delivery and loyalty rewards. The site demonstrates a mature digital infrastructure leveraging modern frameworks like React and Next.js, supported by robust analytics and marketing tools including Adobe DTM, New Relic, and Google Analytics. Security posture is strong with HTTPS enforcement, Content Security Policy, and multiple monitoring tools, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS registration data slightly impacts trust but is likely due to privacy protection. Overall, the site is professional, secure, and trustworthy, serving as a critical channel for Staples' business operations.

U

Union Banka d.d. Sarajevo

unionbank.ba

53

Union Banka d.d. Sarajevo is a well-established financial institution in Bosnia and Herzegovina, providing a broad range of banking services including accounts, loans, cards, savings, and digital banking platforms such as eUnion and mUnion. The bank targets both individual and corporate clients, with a notable focus on energy efficiency financing and sustainable banking initiatives. The website reflects a mature digital infrastructure built on modern technologies like React and Next.js, offering fast performance and excellent mobile optimization. Security measures such as HTTPS, security headers, and Google reCAPTCHA v3 are implemented, though explicit security policies and incident response information are not publicly detailed. Overall, the bank demonstrates a strong market position with consistent branding and trust indicators, supported by legitimate WHOIS registration data.

P

Phobs

phobs.net

69

Phobs is a technology company specializing in revenue-generating IT solutions for the hospitality industry, including hotels and campsites. Their offerings include booking engines, channel management, yield management, and reservation applications, supported by a dedicated consulting and support team. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates marketing and analytics tools like HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is limited due to the absence of visible privacy and cookie policies. The lack of WHOIS data and domain registration information is a significant concern, impacting trust and legitimacy assessments.

S

SAMSONITE MEXICO, S.A. DE C.V.

samsonite.com.mx

58

Samsonite Mexico operates an official e-commerce platform offering a wide range of luggage, backpacks, bags, and travel accessories. The website targets travelers, students, and professionals within Mexico, providing a seamless online shopping experience backed by recognized brand trust and warranty services. The site leverages modern web technologies including React, Next.js, and Shopify, integrating marketing and analytics tools such as Klaviyo and Mouseflow to optimize user engagement and sales performance. Security measures are robust with HTTPS enforcement and security headers, although privacy compliance could be improved by implementing cookie consent mechanisms and publishing security policies. Overall, the website demonstrates a mature digital presence consistent with a large retail brand, supporting its market position as a leading luggage provider in Mexico.

S

Samsonite Chile

samsonite.cl

59

Samsonite Chile operates an official e-commerce platform specializing in luggage, backpacks, handbags, and travel accessories targeted at Chilean consumers. The website presents a professional brand presence with a clear focus on retail sales, supported by product reviews and a comprehensive catalog. The technical infrastructure leverages modern web technologies including React, Next.js, Shopify, and Builder.io, hosted behind Cloudflare for performance and security. Marketing and analytics integrations such as Klaviyo, Facebook Pixel, and Microsoft Clarity enable customer engagement and data-driven insights. Security posture is strong with HTTPS enforcement and security headers, though visible privacy and cookie policies are absent, indicating room for compliance improvement. The domain registration data aligns well with the business claims, showing a mature and legitimate online presence. Overall, the site is well-designed, mobile-optimized, and trustworthy, serving a general audience with safe content.

M

Maa- ja metsätaloustuottajain Keskusliitto MTK

mtk.fi

55

Maa- ja metsätaloustuottajain Keskusliitto MTK is a professional and advocacy organization serving farmers, forest owners, and rural entrepreneurs in Finland. It holds a central position in representing agricultural and forestry producers, offering key services such as professional representation and support. The website reflects a mature digital presence with a modern CMS (Liferay) and uses contemporary web technologies including React and Google Tag Manager. The site is well-designed, mobile-optimized, and provides a good user experience, although explicit contact and policy pages are not evident in the provided content. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks published security policies or incident response information. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

K

Koneviesti

koneviesti.fi

65

Koneviesti is a Finnish media brand specializing in news, articles, and technical information related to agricultural and construction machinery. It operates under the parent company Viestimedia Oy and offers subscription-based premium content, a technical data service called Konedata, and a podcast named Konepodi. The website targets professionals and enthusiasts interested in machinery and related industries. Technically, the site is built using modern web technologies including React and Next.js, with integrations for analytics and marketing tools such as Google Tag Manager, BlueConic, and UserReport. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the website enforces HTTPS, employs multiple security headers, and provides cookie consent mechanisms, reflecting a mature security posture. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy regulations.

]

]init[ AG

dialog-box.de

64

The website dialog-box.de represents ]init[ AG, a medium-sized German company specializing in digital participation platforms for government and NGOs. Their flagship product, DIALOG BOX, is a cloud-native SaaS solution designed to facilitate public and stakeholder engagement through a modular and secure platform. The company has a strong market position with over 10 years of experience and more than 130 implemented projects, supported by certifications such as EMAS and ISO 14001. The website content is professional, comprehensive, and targeted at public sector clients and organizations seeking digital dialogue solutions. Technically, the site is built on modern frameworks including Next.js and React, hosted securely on AWS in Germany. It employs best practices such as HTTPS, session cookies, and a cookie consent mechanism with Matomo analytics for privacy-respecting user tracking. Accessibility is addressed but partially incomplete, with ongoing improvements noted. The site is fast, mobile-optimized, and SEO-friendly. From a security perspective, the site demonstrates a solid posture with appropriate headers, encrypted connections, and secure user authentication flows. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. Overall, the website and business present a low-risk profile with strong compliance to GDPR and professional operational standards. Strategic recommendations include enhancing accessibility compliance, publishing a dedicated security policy, and establishing formal vulnerability disclosure channels to further strengthen trust and security maturity.

P

Die Frankfurter Paulskirche

paulskirche.de

43

The website paulskirche.de represents the Frankfurter Paulskirche, a historical and governmental site focused on democracy and cultural heritage. The site uses modern web technologies such as React and Next.js, indicating a contemporary technical infrastructure. However, the content is minimal and primarily serves as an informational landing page with limited interactive features. The security posture is basic, with no visible security headers or privacy policies, and no contact information is provided, which limits user trust and compliance with privacy regulations. Overall, the site is legitimate and consistent with municipal ownership but would benefit from enhanced security and compliance documentation to improve trust and user engagement.

B

Brocc AB

brocc.fi

63

Brocc AB operates a Finnish branch website brocc.fi offering financial services focused on smarter loans and savings solutions. The company positions itself as a consumer-friendly alternative to traditional banks, targeting individuals seeking flexible loan and savings products. The website is professionally designed, mobile-optimized, and built on modern web technologies such as React and Gatsby, hosted likely on AWS infrastructure. Security posture is strong with HTTPS, DNSSEC, and standard security headers implemented. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. No critical vulnerabilities or suspicious indicators were found, supporting a high legitimacy score. Overall, Brocc.fi presents a credible and trustworthy financial service platform with a solid technical foundation and good user experience.

M

Morrow Bank ASA

morrowbank.fi

68

Morrow Bank ASA is a Nordic financial services provider specializing in consumer loans, credit cards, and insurance products. The company recently rebranded from Komplett Bank, emphasizing a forward-looking brand identity focused on the future. Their website targets consumers primarily in Finland and the Nordic region, offering flexible credit solutions and digital payment options such as Apple Pay and Google Pay. The business model centers on retail banking services with a medium-sized market presence and a clear digital-first approach. Technically, the website is built on modern frameworks including Next.js and React, with content managed via Sanity CMS and hosted likely on Azure infrastructure. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Integration with Google Tag Manager and Usercentrics CMP indicates a mature approach to analytics and privacy compliance. From a security perspective, the site enforces HTTPS, implements strong security headers, and uses cookie consent mechanisms aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, and a vulnerability disclosure program is absent. Overall, the website and domain registration data indicate a legitimate, trustworthy financial institution with a strong digital presence. The domain age aligns with the company's recent rebranding, and registrant information is consistent with the business identity. The site is safe for general audiences and complies with relevant privacy regulations.

N

Nordax Bank AB (publ)

nordax.fi

64

Nordax Bank AB (publ) is a well-established Nordic specialist bank founded in 2003, focusing on providing unsecured loans, loan consolidation, and savings products primarily to Finnish consumers. The website is professionally designed, mobile-optimized, and uses modern web technologies such as React, Next.js, and Sanity CMS. It demonstrates a strong digital maturity with good SEO and accessibility features. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published on the site. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site reflects a trustworthy and credible financial institution with clear business information and contact details.

R

Resurs Bank AB (publ) Suomen sivuliike

resursbank.fi

69

Resurs Bank AB (publ) Suomen sivuliike operates as a financial services provider in Finland, offering consumer loans, loan consolidation, credit cards, and payment solutions for businesses. The company targets both private individuals and corporate customers, positioning itself as a trusted and established player in the Finnish financial market. The website reflects a professional and user-friendly digital presence, supporting the business model with clear service offerings and customer engagement tools. Technically, the site leverages modern web technologies including React, Google Tag Manager, and reCAPTCHA, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the website demonstrates good compliance with privacy regulations, including GDPR, and provides comprehensive contact and policy information. Strategic recommendations include enhancing transparency around security incident handling and data protection officer contacts to further build trust.

S

Selecdoo

selecdoo.me

56

Selecdoo is a German-based affiliate marketing platform founded in 2017, offering businesses a risk-free and flexible way to generate revenue through partner programs. The platform targets publishers, influencers, and advertisers, providing tools for commission tracking, campaign management, and publisher support. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for improvement in compliance and security transparency.

E

Elisa Oyj

elisaviihde.fi

61

Elisa Viihde is a Finnish digital entertainment platform operated by Elisa Oyj, a major telecommunications company in Finland. The service offers streaming of TV shows, movies, and other digital content primarily targeting Finnish consumers. The website reflects a mature and professional digital presence consistent with a large enterprise in the telecommunications sector. The domain is well-established, registered since 2009, and the registrant information aligns with the corporate entity, indicating legitimacy and trustworthiness. Technically, the website employs modern technologies including React for frontend rendering, and integrates monitoring and analytics tools such as AppDynamics and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, with a good performance profile. Security best practices are observed with HTTPS enforcement and multiple security headers, though DNSSEC is not implemented. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response information and lack of a vulnerability disclosure program are areas for improvement. Overall, the website presents a low risk profile with a high degree of business credibility and technical maturity. Strategic recommendations include implementing DNSSEC for enhanced DNS security, publishing a dedicated security policy and incident response details, and establishing a vulnerability disclosure program to foster transparency and proactive security management.

M

Maaseudun Tulevaisuus

maaseuduntulevaisuus.fi

68

Maaseudun Tulevaisuus is a well-established Finnish media company specializing in rural and agricultural news, offering a variety of services including news articles, digital magazines, and weather and forestry services. The website is professionally designed, mobile-optimized, and targets rural professionals and Finnish readers interested in agriculture and related topics. Technically, the site uses modern frameworks such as Next.js and React, integrates multiple analytics and advertising technologies, and complies with GDPR through a comprehensive cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response page. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate and credible media entity.

S

selecdoo AG

selecdoo.com

67

Selecdoo AG operates a next-generation affiliate marketing platform that leverages AI technology to connect online shops with a large network of publishers, influencers, and content creators. The platform emphasizes commission-based marketing without monthly fees, offering a scalable and fraud-resistant solution for advertisers and publishers alike. The company is positioned as a modern player in the affiliate marketing industry with a strong focus on technology and user experience. Technically, the website is built on a modern stack including Next.js and React, hosted likely on Vercel, and integrates multiple analytics and tracking tools with consent management. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security.txt are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for affiliate marketing activities.

R

E-Commerce

razorbackraffle.com

51

The website razorbackraffle.com presents as a minimal React-based e-commerce platform with placeholder content and no substantive business information. The site lacks privacy, cookie, and terms of service policies, as well as any contact details or social media presence. The technical infrastructure indicates usage of modern JavaScript frameworks and hosting on AWS DNS servers, but performance and SEO optimizations are minimal. Security posture is weak, with no HTTPS or security headers detected, and the WHOIS data is suspicious due to a domain creation date set in the future (2025), undermining trust and legitimacy. Overall, the site appears incomplete or potentially deceptive, with significant gaps in compliance and security.

A

Alma Career Czechia s.r.o.

seduo.com

60

Seduo.cz is a leading Czech online educational platform specializing in professional and personal development through video courses, webinars, podcasts, and corporate training administration. It is part of the Alma Career group, a well-established entity in Central Europe with multiple related job and education portals. The platform targets both businesses and individual learners, offering a comprehensive and accessible learning experience with a strong focus on quality content and user engagement. Technically, the website employs modern web technologies including Next.js, React, Apollo GraphQL, and secure HLS video streaming, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities or sensitive data exposure. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and user consent mechanisms. Overall, Seduo.cz presents a professional, trustworthy, and mature digital presence suitable for its market and business objectives.

F

funk (Content-Netzwerk von ARD und ZDF)

funk.net

64

The website play.funk.net is a content network operated by the German public broadcasters ARD and ZDF, targeting young audiences aged 14 to 29. It offers a wide range of video content, podcasts, and channels covering various topics such as politics, culture, comedy, and social issues. The site demonstrates a professional and consistent brand presence with high-quality content and a modern, responsive design. Technically, it leverages React and Material UI frameworks, with good mobile optimization and SEO practices. However, explicit privacy and cookie policies are not evident in the provided content, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Security headers and explicit security policies are not visible, suggesting room for improvement in security posture. Overall, the site is legitimate, well-branded, and content-rich, but could enhance transparency and security compliance.

Z

ZDF

zdfinfo.de

63

ZDFinfo is a German public broadcasting service offering a wide range of documentaries, reports, and educational content primarily targeting a general audience interested in knowledge and culture. It operates under the ZDF umbrella, a major and reputable public broadcaster in Germany. The website demonstrates a mature digital presence with a modern React and Next.js technology stack, optimized for performance and mobile devices. Privacy and cookie consent mechanisms are well implemented, reflecting compliance with GDPR requirements. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policy and incident response information are not found. Overall, the domain and website are legitimate and trustworthy, with a high-quality user experience and professional content presentation.

Z

ZDF

zdfneo.de

64

ZDFneo is a digital streaming platform operated by the German public broadcaster ZDF, offering a wide range of entertainment content including series, movies, documentaries, and talk shows. The platform targets a general German-speaking audience and positions itself as a leading source of innovative and quality media content. The website demonstrates a strong brand presence consistent with ZDF's reputation and public service mandate. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. The presence of comprehensive privacy and cookie consent mechanisms reflects a mature approach to data protection and compliance with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and enforces cookie consent, but lacks some advanced security headers and a public vulnerability disclosure policy. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements could include publishing a security.txt file and enhancing security headers to further strengthen the security posture.