Security Directory

V

Vertek

vertek.com.br

54

Vertek is a Brazilian company specializing in ophthalmological and veterinary products, targeting healthcare and veterinary professionals. The website is built using modern web technologies including React and Next.js, and incorporates Google Tag Manager for analytics. The site is accessible and mobile-optimized with a clean design, but contains minimal textual content and lacks key compliance documents such as privacy and cookie policies. Security posture is basic with no detected security headers or incident response information, and no contact details are provided on the homepage. Overall, the website presents a professional but minimal online presence with room for improvement in compliance and security transparency.

D

Doctolib

doctolib.com

66

Doctolib is a leading European healthcare technology company specializing in online appointment booking and teleconsultation services. The platform serves patients and healthcare professionals primarily in France, Germany, and Italy, offering a seamless way to find specialists and manage medical appointments. The company also provides professional management software for healthcare providers, enhancing operational efficiency. The website reflects a mature digital presence with comprehensive legal, privacy, and user support documentation, reinforcing trust and compliance with GDPR regulations. Technically, the website employs modern web technologies including React, Sentry for error tracking, Datadog for real user monitoring, and advanced consent management via Didomi. The infrastructure leverages Cloudflare services for security and performance, with strong SSL/TLS configurations and security headers implemented. The site is mobile-optimized and accessible, providing a fast and user-friendly experience. From a security perspective, Doctolib demonstrates robust practices such as HTTPS enforcement, cookie security with SameSite and Partitioned flags, and CAPTCHA integration to mitigate abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data limits full domain legitimacy verification, though the overall trust signals and professional branding mitigate this concern. Overall, Doctolib presents a secure, compliant, and professionally managed online platform with strong market positioning in healthcare technology. Strategic recommendations include enhancing transparency with a published security.txt file and continuous monitoring of third-party dependencies to maintain security posture.

D

Doctolib

doctolib.fr

66

Doctolib is a leading healthcare technology company based in France, providing an online platform for patients to quickly find healthcare specialists and book appointments online. The platform also offers teleconsultation services and practice management software for healthcare professionals, positioning itself as a key player in the European healthcare digital transformation. The website is professionally designed, highly accessible, and optimized for mobile users, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as React, integrates advanced monitoring tools like Sentry and Datadog, and employs robust consent management via Didomi, indicating a strong commitment to performance and privacy compliance. Security posture is solid with HTTPS enforcement, secure cookie handling, and anti-abuse captchas, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain and website exhibit high legitimacy and trustworthiness, with no signs of blocking or suspicious activity. Strategic recommendations include publishing detailed security and vulnerability disclosure policies and enhancing transparency around data protection officer contacts to further strengthen compliance and trust.

D

Doctolib

doctolib.legal

66

Doctolib is a leading French healthcare technology company specializing in online appointment booking and telehealth services. The platform enables patients to find healthcare professionals and book appointments easily, supporting a broad range of medical specialties. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy information, reflecting a mature digital presence. Technically, Doctolib employs modern web technologies including React, Sentry for error tracking, Datadog for performance monitoring, and robust consent management tools to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and modern security headers, though no explicit incident response or vulnerability disclosure policies are publicly available. Overall, Doctolib demonstrates a high level of digital maturity and trustworthiness appropriate for a healthcare service provider.

A

Amsterdam University of Applied Sciences

amsterdamuas.com

72

Amsterdam University of Applied Sciences (AUAS) is a large, well-established higher education institution in the Netherlands offering a wide range of bachelor's, master's, and exchange programmes primarily in English and Dutch. The university emphasizes applied research with societal impact and maintains strong international collaborations such as the U!REKA European university alliance. The website reflects a professional and comprehensive digital presence, targeting prospective students, researchers, and international applicants. The content is rich, well-structured, and accessible, supporting a positive user experience.

F

Folkhem

folkhem.se

51

Folkhem is a Swedish real estate developer specializing in the construction and sale of sustainable wooden houses and apartments. Established in 1998, the company positions itself as an innovator in climate-smart housing with a focus on natural materials and craftsmanship. Their market presence is primarily in Stockholm, Sundbyberg, and Uppsala, targeting environmentally conscious homebuyers. Technically, the website is built on modern frameworks such as Next.js and React, utilizing Google Tag Manager for analytics and Klaro for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though there is room for improvement in DNSSEC and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive business reputation.

G

Gemeente Rotterdam

rotterdam.nl

73

Gemeente Rotterdam operates the official municipal website providing comprehensive information, news, and services to residents, entrepreneurs, visitors, and government stakeholders. The site serves as a central hub for accessing public services such as parking registration, waste management, passport applications, and local government contact. It holds a strong market position as the authoritative source for municipal information in Rotterdam, Netherlands. Technically, the website leverages modern web technologies including React and Next.js frameworks, ensuring good mobile optimization, accessibility, and SEO practices. Integration of third-party tools like ReadSpeaker enhances accessibility, while Kameleoon supports marketing and user experience optimization. The site demonstrates moderate to good performance and a consistent, professional design. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs security headers. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Privacy compliance is well addressed with clear cookie and privacy policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor gaps in published security governance documentation. Strategic recommendations include publishing security policies, establishing incident response contacts, and enhancing security headers to further strengthen the security posture.

J&J MedTech operates as a global healthcare technology provider specializing in medical device reprocessing with a strong emphasis on sustainability. The website is professionally designed, targeting healthcare professionals with relevant content about reprocessing services. Technically, the site leverages modern frameworks such as Drupal 10 and React, integrating advanced analytics and tracking tools including Google Tag Manager, Hotjar, and social media pixels. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security and incident response policies are not published. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. However, the absence of WHOIS registration data raises questions about domain registration transparency, warranting further verification. Overall, the site presents a trustworthy and professional front consistent with a large enterprise healthcare brand.

DePuy Synthes, a Johnson & Johnson MedTech company, operates the website www.jnjmedtech.com to provide patient-focused information about their VELYS Digital Surgery solutions for robotic-assisted knee and hip replacements. The site targets patients seeking joint replacement surgery and offers educational content to support informed decision-making. The business is positioned as a leading medical technology provider with a strong brand presence and enterprise-level operations. Technically, the website leverages modern frameworks such as Drupal 10 and React, integrates advanced analytics and marketing tools, and implements comprehensive cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Overall, the website demonstrates high professionalism and trustworthiness, though the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency.

DePuy Synthes, a subsidiary of Johnson & Johnson, operates in the healthcare sector specializing in medical devices and surgical solutions, including Active Robotic Assistance technologies. The website presents a professional and consistent brand image targeting healthcare professionals. The technical infrastructure leverages modern web technologies such as Drupal 10 and React, with integrated analytics and consent management tools, indicating a mature digital presence. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations, supporting trustworthiness in its market niche.

J

Johnson & Johnson

getsmartaboutafib.net

59

Get Smart About AFib is a healthcare educational website operated under the Johnson & Johnson corporate umbrella, focusing on atrial fibrillation awareness and education. The site targets a global audience including patients and healthcare professionals, offering localized content in multiple languages and regions. The business model centers on providing trusted healthcare information to improve patient outcomes and awareness. Technically, the site is built on Drupal 10 CMS with React components, leveraging modern web technologies and integrating tracking tools such as Google Analytics and Facebook Pixel for user behavior insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies. Overall, the domain registration and DNS configuration align with the corporate identity, supporting legitimacy and trustworthiness. The site does not contain adult or explicit content and is safe for general audiences.

Ethicon is a subsidiary brand under Johnson & Johnson MedTech specializing in surgical technology solutions targeted primarily at healthcare professionals. The website reflects a professional and enterprise-grade digital presence consistent with a large healthcare corporation. The technical infrastructure leverages modern web technologies including Drupal 10 CMS, React, and integrates analytics and consent management tools such as Google Tag Manager, Hotjar, and OneTrust. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly disclosed. The WHOIS data is not publicly available, which is typical for large corporations to protect privacy, but this reduces transparency slightly. Overall, the website is well-designed, accessible, and compliant with privacy regulations, serving as a credible digital asset for Ethicon and Johnson & Johnson MedTech.

CERENOVUS operates as a specialized medical technology company within the Johnson & Johnson MedTech family, focusing on stroke care solutions. The website targets healthcare professionals with detailed product and company information, reflecting a strong market position as part of a global healthcare conglomerate. The digital infrastructure leverages modern technologies such as React and Drupal 10, ensuring a responsive and accessible user experience. Privacy and cookie compliance are well implemented, indicating a mature approach to regulatory requirements. However, the absence of WHOIS data and visible security headers suggests areas for improvement in transparency and security hardening. Overall, the site presents a professional and trustworthy front with room for enhanced security practices.

J

Johnson & Johnson

toutsavoirsurlafa.fr

63

The website getsmartaboutafib.net/fr-FR is a healthcare educational platform focused on atrial fibrillation, providing comprehensive information to the general public about this common cardiac arrhythmia. It is branded and operated under the Johnson & Johnson umbrella, leveraging their established healthcare reputation. The site uses modern web technologies including Drupal 10 and React, ensuring a contemporary user experience with good mobile optimization and accessibility. The technical infrastructure is solid, with HTTPS enforced and clientTransferProhibited domain status enhancing security. However, DNSSEC is not enabled, and explicit security headers are not evident in the provided data. Privacy compliance is partially addressed with a cookie consent mechanism, but no privacy policy or terms of service pages were detected in the analyzed content. Tracking technologies such as Facebook Pixel and Google Tag Manager are used, indicating moderate user tracking. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Doctolib GmbH

doctolib.de

66

Doctolib GmbH operates a leading online healthcare appointment booking platform primarily serving Germany, with extensions in France and Italy. The platform enables patients to book doctor and therapy appointments easily and offers video consultation services. The company targets both patients and healthcare professionals, providing a comprehensive digital healthcare management solution. Technically, the website employs modern web technologies including React, Sentry for error monitoring, Datadog for performance analytics, and Cloudflare for hosting and security. The platform is mobile-optimized and integrates consent management and captcha services to ensure privacy and security compliance. Security posture is strong, supported by multiple ISO and TÜV certifications, secure cookie handling, and HTTPS enforcement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR and other privacy regulations, although it lacks a publicly visible vulnerability disclosure policy and explicit incident response contact. Strategic recommendations include publishing a security incident response policy and adding a security.txt file to enhance transparency and trust.

B

Betway Limited

betway.co.za

70

Betway Limited operates a well-established online gambling platform offering sports betting, casino games, live casino, vegas games, and esports betting. The company holds a Malta Gaming Authority license and maintains a strong market presence through official partnerships with major sports clubs such as Arsenal, Manchester City, Chelsea, and Atlético de Madrid. The website is professionally designed, mobile-optimized, and provides comprehensive user engagement through various welcome offers and promotions. Technically, the platform leverages modern web technologies including React and Next.js, supported by a robust analytics and advertising infrastructure with Google Tag Manager, Snowplow, Adobe Alloy, and multiple ad networks. Security posture is strong with HTTPS enforcement, domain transfer protections, and reputable certifications like eCOGRA and IBIA. Privacy and cookie policies are comprehensive and GDPR compliant, although explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available. Overall, Betway presents a trustworthy and professional online gambling service with a mature digital presence.

Johnson & Johnson MedTech is a prominent medical technology division under the Johnson & Johnson umbrella, offering a wide range of medical devices and healthcare solutions targeted primarily at healthcare professionals. The website reflects a large enterprise with consistent branding and a professional digital presence. The technical infrastructure leverages modern frameworks such as React and Drupal 10, with integrated analytics and cookie consent mechanisms ensuring compliance with privacy regulations. Security posture is strong with HTTPS and consent management, though explicit security headers and incident response contacts are not clearly visible. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and associated subsidiary domains.

J&J MedTech operates as a major medical technology business under the globally recognized Johnson & Johnson brand, providing patient-focused healthcare solutions and treatment information. The website demonstrates a mature digital presence with modern technologies such as Drupal 10 and React, supported by Google Tag Manager for analytics and OneTrust for cookie consent management. The site is well-structured, mobile-optimized, and accessible, reflecting good digital maturity. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. WHOIS data is missing or privacy protected, which is unusual for a large enterprise and warrants further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, targeting patients seeking medical treatment information.

DePuy Synthes, a Johnson & Johnson MedTech company, operates in the healthcare sector specializing in orthopedic medical devices such as the ATTUNE® Knee System. The website provides comprehensive clinical evidence and product information targeting healthcare professionals. The company holds a strong market position as a large enterprise with multiple subsidiaries and a consistent brand presence. Technically, the website is built on Drupal 10 with React components, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, compliant with privacy regulations, and trustworthy, though WHOIS data is unavailable, likely due to privacy or registry policies.

The website breastimplantsbymentor.net represents Global BIBM, a healthcare entity specializing in breast implants and augmentation products under the MENTOR® brand. The site targets patients and medical professionals seeking trusted breast implant solutions, offering tools such as a surgeon locator and a breast implant simulator app. The business is positioned as a leading global brand with a strong market presence and is likely affiliated with Johnson & Johnson based on DNS infrastructure and branding cues. Technically, the site is built on Drupal 10 with React components and integrates Brightcove for video content, alongside Google Analytics and Facebook Pixel for analytics and marketing. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is strong with cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and secure, with minor areas for improvement in transparency and security documentation.

I

International Biathlon Union

biathlonworld.com

66

The International Biathlon Union (IBU) operates the official website www.biathlonworld.com, serving as the authoritative source for biathlon sport information globally. The site provides comprehensive services including event calendars, results, athlete profiles, news, videos, and live streaming options, targeting biathlon fans, athletes, and sports professionals. The website demonstrates a consistent and professional brand presence with good content quality and user experience. Technically, the website leverages modern web technologies such as React and Next.js, with Contentful as the CMS. It integrates Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes several security headers, reflecting a good security posture. However, the absence of a published privacy policy, terms of service, and explicit contact information for security incidents or data protection officers represents compliance gaps. The lack of WHOIS data reduces domain trust slightly but does not undermine the apparent legitimacy of the site. Overall, the website is a reliable and professional platform for biathlon sport information, with recommendations to improve privacy compliance, transparency, and accessibility to further strengthen trust and security.

I

Interact

tryinteract.com

68

Interact is a technology company providing a SaaS platform for creating interactive quizzes aimed at engaging audiences, generating leads, and recommending products. The website positions itself as a professional and established player in the interactive marketing tools space, targeting businesses seeking to enhance customer engagement and gain insights. The platform offers key services including quiz creation, lead generation, and product recommendation, with a focus on delivering value to both customers and internal teams. Technically, the website is built using modern frameworks such as React and Gatsby, with Bootstrap for styling, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the professional website content and presence of verified contact emails and social media profiles support the business credibility. Overall, the website demonstrates a mature digital presence with room for improvement in transparency around security and domain registration.

N

News and Media Holding a.s.

cas.sk

56

Nový Čas is a leading Slovak online daily newspaper operated by News and Media Holding a.s., providing current news, scandals, crime, and sports coverage. The website is well-branded and targets a general audience interested in Slovak and international news. Technically, the site uses modern frameworks such as Next.js and React, integrates Google Tag Manager and Gemius analytics, and employs privacy management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enabled and some privacy tools in place, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, with room for improvement in privacy and security transparency.

T

Teoxane

teoxane.com

65

Teoxane is a healthcare company specializing in aesthetic medicine products such as dermal fillers and skincare solutions, targeting medical professionals and aesthetic practitioners. The website is built using modern web technologies including React and Next.js, indicating a contemporary digital infrastructure. However, the provided HTML content is minimal and appears to rely heavily on client-side rendering, which limits the immediate availability of content and metadata. Security posture is limited based on the available data, with no visible security headers or privacy policies detected. Tracking technologies such as Google Tag Manager and Pingdom are used, but privacy compliance is weak due to the absence of cookie and privacy policies. Overall, the website presents a moderate risk profile with room for improvement in security and compliance transparency.

M

Motiva Enterprises LLC

motiva.com

66

Motiva Enterprises LLC is a major energy company headquartered in Houston, Texas, specializing in refining, distributing, and marketing petroleum products across the Americas. As North America's largest refinery operator and fully owned by Aramco, Motiva plays a critical role in energy security and economic prosperity. The website reflects a mature digital presence built on modern web technologies such as Next.js and React, offering a professional and user-friendly experience with comprehensive content about their operations, community involvement, and career opportunities. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and explicit incident response information. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms could be improved. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the site demonstrates strong business credibility and technical maturity with room for security enhancements.

T

Timme Hosting GmbH & Co. KG

timmehosting-status.com

61

Timme Hosting GmbH & Co. KG is a German hosting service provider offering a range of services including webhosting, managed servers, cloud solutions, backups, and object storage. The company appears to be newly established in 2024, with a domain registration consistent with this timeline. The website serves primarily as a status page, providing uptime and incident information for its various services, demonstrating operational transparency. Technically, the website is built using modern frameworks such as Next.js and React, with Cloudflare DNS services and Cloudinary for image hosting. The site is well-optimized for mobile devices and performs well, with clear navigation and good content relevance. However, it lacks some SEO and privacy compliance features such as privacy and cookie policies. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but it lacks DNSSEC and important security headers. There is no published security policy or incident response contact information, and no vulnerability disclosure mechanism is evident. These gaps suggest room for improvement in security posture and compliance. Overall, the website is professional and trustworthy for its purpose as a status page, but it would benefit from enhanced privacy compliance, security policies, and contact information to improve user trust and regulatory adherence.

V

Volleyball World

volleyballworld.com

66

Volleyball World operates as an official digital platform providing comprehensive coverage of professional volleyball, including live streaming, rankings, schedules, and player profiles. The website targets volleyball fans and sports enthusiasts globally, positioning itself as an authoritative source for volleyball content. Technically, the site leverages modern web frameworks such as React and Next.js, supported by a robust analytics and advertising ecosystem including Google Analytics, Microsoft Clarity, and various ad networks. The site demonstrates excellent design quality, mobile optimization, and user experience, reflecting a mature digital presence. From a security perspective, the website enforces HTTPS and employs bot mitigation techniques like Cloudflare Turnstile captcha. However, explicit security headers such as Content-Security-Policy are not clearly documented, and no security or incident response policies are publicly visible. Privacy compliance is limited, with no clear privacy or cookie policies detected, which may expose the site to regulatory scrutiny. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the website content and branding suggest an official affiliation with volleyball governing bodies. Overall, Volleyball World presents a professional and trustworthy front for volleyball media content but should improve transparency in privacy, security policies, and domain registration information to enhance trust and compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security.txt for vulnerability disclosure, and verifying domain registration details to assure visitors and partners of legitimacy.

S

Slovenská volejbalová federácia

slovakvolley.sk

39

The Slovenská volejbalová federácia (Slovak Volleyball Federation) operates as the national governing body for volleyball in Slovakia, providing comprehensive information on competitions, teams, and volleyball-related news. The website serves volleyball players, fans, clubs, and the broader sports community in Slovakia, positioning itself as an authoritative source for volleyball activities and events. It offers services including competition management, event organization, player registration, and fan engagement through ticket sales and a fan shop. Technically, the website is built using modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience across devices. The site demonstrates good performance and SEO practices, with appropriate meta tags and structured navigation. Security is well-managed with HTTPS enforcement and standard security headers, although explicit privacy and cookie policies are not found, which is a compliance gap. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. However, the absence of published incident response or vulnerability disclosure policies limits transparency. The site integrates multiple trusted partner domains and maintains a strong social media presence, enhancing its credibility. Overall, the website is professional, secure, and trustworthy, but it would benefit from improved privacy compliance documentation and clearer contact information to enhance user trust and regulatory adherence.

N

Národné športové centrum

narodnesportovecentrum.sk

57

Národné športové centrum (NŠC) is a Slovak government-affiliated organization dedicated to supporting sports development, athlete diagnostics, education, and sports information systems. The website serves as a comprehensive portal for news, events, athlete profiles, educational resources, and multimedia content, targeting athletes, sports professionals, and the general public interested in Slovak sports. The organization is positioned as a key national sports authority with official backing from the Ministry of Tourism and Sports of Slovakia. Technically, the website is built using modern web technologies including Next.js and React, with integrations for Google Analytics, Facebook Pixel, and Osano CMP for cookie consent management. The site is mobile-optimized, well-structured, and uses HTTPS with good SSL configuration. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the site follows good practices such as HTTPS enforcement, use of reCAPTCHA on forms, and cookie consent mechanisms. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is good with a clear privacy policy and cookie consent. Business credibility is strong due to official government affiliation, clear contact information, and consistent branding. Overall, the website presents a professional, trustworthy, and content-rich platform with moderate to good technical and security posture. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

A

ABB Asea Brown Boveri Ltd

abb.com

73

ABB Asea Brown Boveri Ltd is a global technology leader specializing in electrification and automation solutions. The company operates across multiple business areas including Electrification, Motion, Process Automation, and Robotics & Discrete Automation, serving industrial clients worldwide. The website reflects ABB's strong market position and commitment to sustainability and innovation. Technically, the site is built on Adobe Experience Manager with React and hosted on AWS, demonstrating a modern and scalable infrastructure. The use of multiple analytics and tag management tools indicates a mature digital marketing and data collection strategy. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

A

AutoScout24

autoscout24.ro

66

AutoScout24 is a leading European online marketplace specializing in the sale and purchase of new and used vehicles. The platform offers a wide range of automotive options including cars, motorcycles, and commercial vehicles, serving a broad audience across multiple European countries. It provides detailed search filters and direct access to dealers and private sellers, positioning itself as the largest automotive marketplace in Europe. Technically, the website employs modern web technologies such as React, service workers, and integrates major analytics and advertising platforms like Google Analytics, Bing Ads, and Facebook Pixel. The site is well-optimized for mobile devices and includes GDPR-compliant consent management mechanisms. Security-wise, the site enforces HTTPS, uses reCaptcha Enterprise for form protection, and implements consent banners, reflecting a mature security posture. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the domain is privacy protected in WHOIS, which is typical for commercial sites, and no suspicious indicators were found. The website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for automotive transactions.

A

AutoScout24

autoscout24.fr

65

AutoScout24 is a leading European online marketplace specializing in the sale and purchase of new and used vehicles. The platform offers a comprehensive range of automotive services including vehicle listings, price evaluations, financing options, and insurance advisory, targeting both private consumers and professional dealers across multiple European countries. The website demonstrates a high level of digital maturity with modern web technologies such as React, service workers, and integration of major analytics and advertising platforms. Privacy compliance is well addressed with GDPR-aligned policies and consent management mechanisms. Security posture is strong with HTTPS enforcement, security headers, and use of reCaptcha Enterprise, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site presents a professional, trustworthy, and user-friendly experience with extensive automotive content and clear navigation.

A

AutoScout24

autoscout24.es

65

AutoScout24 is a leading European online marketplace specializing in the sale and purchase of new and used vehicles, including cars, motorcycles, vans, and commercial vehicles. The website targets consumers and dealers primarily in Spain and across Europe, offering a comprehensive platform with vehicle listings, valuation tools, financing, insurance, and dealer directories. Owned by Scout24 AG, the company has a strong market presence and a well-established brand since 1998. Technically, the website employs modern web technologies such as React, service workers for PWA capabilities, and integrates multiple marketing and analytics tools including Google Tag Manager, Bing Ads, and Facebook Pixel. The site is well-optimized for mobile devices, features good accessibility, and implements GDPR-compliant consent management mechanisms. From a security perspective, the site enforces HTTPS with strong SSL configurations and security headers, uses reCaptcha Enterprise for login protection, and manages user consent effectively. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Overall, the website demonstrates a high level of professionalism, security, and compliance, with a strong business credibility and user trust. Strategic recommendations include publishing a dedicated security policy, providing vulnerability disclosure information, and enhancing incident response transparency to further strengthen the security posture and user confidence.

A

AutoScout24

autoscout24.nl

70

AutoScout24 is a leading European online automotive marketplace specializing in the buying and selling of new and used vehicles. The platform serves a broad audience including private individuals and professional dealers across multiple European countries. It offers a comprehensive range of services including vehicle listings, dealer searches, vehicle valuation, and automotive news. The website is well-branded, professionally designed, and provides a seamless user experience optimized for both desktop and mobile users. Technically, the site employs modern web technologies such as React, service workers, and integrates with major analytics and advertising platforms like Google Tag Manager, Bing Ads, and Facebook Pixel. Security is robust with HTTPS enforcement, reCaptcha Enterprise integration, and Okta SSO for authentication, although a dedicated security policy page and incident response contacts are not publicly available. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Overall, the site demonstrates a mature digital infrastructure and a high level of trustworthiness, supported by consistent WHOIS registration data and a long domain history.

A

AutoScout24 GmbH

autoscout24.it

69

AutoScout24.it is a leading European online automotive marketplace specializing in the sale and purchase of used and new vehicles including cars, motorcycles, and campers. The platform targets consumers and dealers primarily in Italy, offering extensive vehicle listings, dealer searches, and valuation services. Owned by AutoScout24 GmbH, a subsidiary of Scout24 AG, the website reflects a mature and well-established business with a strong market position in the transportation sector. Technically, the site employs modern web technologies such as React, service workers, and integrates advanced identity management and bot protection services, ensuring a robust and user-friendly experience. Security-wise, the website enforces HTTPS, uses reCaptcha Enterprise, and implements GDPR-compliant consent mechanisms, although it lacks a dedicated security policy or incident response contact page. Overall, the site demonstrates high professionalism, good privacy compliance, and a secure environment suitable for its business model.

H

Ligen, Vereine, Verbände, Hallen und News | handball.net

handball.net

69

handball.net is a German sports media platform specializing in handball-related content including leagues, clubs, live scores, and news. It targets handball fans and stakeholders primarily in Germany, offering schedules, live tickers, and news coverage. The website uses modern web technologies such as React and Next.js, integrates advertising via Smart Ad Server, and employs consent management tools to ensure GDPR compliance. Performance monitoring is handled by New Relic, and social media content is embedded via Flockler. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, no direct company contact information or detailed business registration data is publicly available on the site.

S

Slovenská volejbalová federácia

svf.sk

40

Slovenská volejbalová federácia (SVF) is the official governing body for volleyball in Slovakia, providing comprehensive information about volleyball competitions, teams, news, and events. The website serves volleyball players, fans, and the sports community in Slovakia, offering services such as competition management, ticket sales, and a fan shop. The federation holds a significant position as the national authority for volleyball, supported by partnerships with major brands and sponsors. Technically, the website is built on modern web technologies including Next.js and React, hosted by Webglobe, and optimized for mobile devices with good design and navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing explicit privacy and cookie policies, though a cookie consent mechanism is present. WHOIS data shows an anomalous future domain creation date, which slightly reduces trust but does not detract from the overall legitimacy of the site. The content is safe, sports-focused, and suitable for a general audience.

E

EMPRESA MEDIA, a.s.

tyden.cz

60

Týden.cz is a well-established Czech media company operating since 2006, providing comprehensive news coverage across various domains including domestic and international affairs, science, economy, sports, culture, health, and lifestyle. The company operates multiple magazine brands and partners with TV Barrandov, offering both online content and subscription-based magazines. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, and integrates advertising and analytics tools like Google Adsense and Google Tag Manager. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, Týden.cz presents a professional, trustworthy, and user-friendly platform for Czech news consumers.

A

ABB Asea Brown Boveri Ltd

global.abb

72

ABB Asea Brown Boveri Ltd is a global technology leader specializing in electrification and automation solutions. The company serves industrial sectors worldwide, helping customers improve efficiency, productivity, and sustainability. The website reflects ABB's strong market position and commitment to innovation across its four main business areas: Electrification, Motion, Process Automation, and Robotics & Discrete Automation. ABB targets industrial customers, partners, and investors with a comprehensive digital presence and multilingual support. Technically, the website is built on Adobe Experience Manager with React and hosted on AWS infrastructure, ensuring modern, performant, and mobile-optimized delivery. The site integrates multiple analytics and marketing tools while maintaining good privacy compliance with visible cookie consent mechanisms. Security posture is strong with HTTPS, domain transfer protection, and no evident vulnerabilities, though DNSSEC is not enabled. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with ABB's corporate identity.

H

Heineken Slovensko a.s.

heinekenslovensko.sk

48

Heineken Slovensko a.s. is a well-established Slovak brewing company with a rich history dating back to 1969. The company operates a modern brewery in Hurbanovo and markets several prominent beer brands including Heineken, Zlatý Bažant, Desperados, and Krušovice. The website reflects a mature digital presence with a focus on brand promotion, consumer engagement, and compliance with legal requirements such as age restrictions and GDPR. The target audience is adult consumers interested in beer products in Slovakia. The company benefits from being part of the global Heineken group, enhancing its market position and brand recognition. Technically, the website is built on WordPress with modern enhancements including React components, Google Analytics, and Tag Manager integration. It employs standard web technologies and plugins to deliver a responsive and user-friendly experience. The presence of an age gate and cookie consent mechanisms demonstrates attention to regulatory compliance and user privacy. However, some security best practices such as security headers and explicit incident response policies are not evident. From a security perspective, the site uses HTTPS with valid SSL, Google reCAPTCHA for form protection, and cookie consent management. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and a long domain age supporting the company's operational history. Overall, the website presents a professional and trustworthy digital front for Heineken Slovensko. Strategically, the company should consider enhancing its security posture by implementing recommended HTTP security headers, publishing a formal security policy, and establishing a vulnerability disclosure program. These steps will strengthen trust and resilience against emerging threats. Continued focus on privacy compliance and transparent user communication will maintain regulatory alignment and customer confidence.

Bistro.sk is a well-established online food delivery platform operating primarily in Slovakia, founded in 2013 and owned by the Takeaway.com Group B.V. The platform connects consumers with local restaurants and stores, offering convenient online ordering and delivery services. It holds a strong market position in Slovakia with a large network of over 2,400 partner restaurants and stores. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy documentation, including GDPR compliance and cookie consent mechanisms. Social media presence and trust indicators such as a bug bounty program and ethics hotline further enhance its credibility. Technically, Bistro.sk leverages modern web technologies including Next.js and React, integrated with advanced analytics and marketing tools like Google Tag Manager, Snowplow, and FullStory. The platform is hosted on robust infrastructure likely managed by Just Eat Takeaway, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforced, proper security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed. Overall, Bistro.sk demonstrates a mature digital presence with strong business credibility and security practices. The platform effectively balances user experience, privacy compliance, and technical sophistication, making it a trustworthy service for food delivery in Slovakia.

S

Supabase

supabase.in

69

Supabase is a technology company providing a comprehensive Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The platform is positioned as a leading open-source alternative in the backend-as-a-service market, with a strong developer focus and growing adoption by notable companies. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and demonstrates excellent performance and mobile optimization. Security posture is good with HTTPS enforced and domain protections in place, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but should enhance transparency around privacy and security to improve compliance and user trust.

Rate-Fuchs is a German-based small business operated by Just4Fun GmbH, offering a mobile app that features various puzzle games including Schwedenrätsel, Sudoku, Gitterrätsel, and Wortsuche. The website serves as a landing page for the app with login and registration functionality, targeting puzzle enthusiasts ranging from beginners to professionals. The business is relatively new, with the domain registered in early 2023, aligning with the app's launch timeline. The company maintains a consistent brand presence with professional app store links and a clear focus on puzzle gaming.

Š

Škoda Auto Slovensko s.r.o.

skoda-auto.sk

68

Škoda Auto Slovensko s.r.o. is the official importer and distributor of Škoda brand vehicles in Slovakia, established in 1993. The company offers a comprehensive range of automotive services including new and used vehicle sales, financing, insurance, servicing, e-mobility solutions, and an official accessories e-shop. The website reflects a mature digital presence with modern technologies such as React and Bootstrap, hosted likely on Microsoft Azure, ensuring reliable performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a visible cookie consent mechanism is a minor gap. Overall, the website is professional, trustworthy, and well-aligned with the company's business identity and market position.

N

Národné športové centrum

sportcenter.sk

58

Národné športové centrum (NŠC) is a Slovak government-affiliated organization dedicated to supporting and developing sports activities, athletes, and sports diagnostics in Slovakia. The website serves as a comprehensive portal for news, events, athlete profiles, educational resources, and diagnostic services. It targets athletes, sports professionals, and the general public interested in sports development. The organization operates under the Ministry of Tourism and Sports of the Slovak Republic, positioning itself as a key national sports institution. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Google Analytics, Facebook Pixel, and Osano for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Hosting is provided by nichosting.sk, a Slovak hosting provider, which aligns with the local focus of the organization. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent is managed via a reputable CMP (Osano). While some security headers are not explicitly detected in the HTML, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are present and comprehensive, indicating good compliance with GDPR. Overall, the website is professional, trustworthy, and well-aligned with its government sports center mission. It provides a rich user experience with clear navigation and relevant content. Recommendations include enhancing security headers and publishing a dedicated security policy to further strengthen trust and compliance.

H

Headout Inc.

headout.com

55

Headout Inc. operates a sophisticated online platform that enables travelers and locals to discover and book curated tours, events, and experiences worldwide. The company positions itself as a mobile concierge service offering high-quality experiences at competitive prices with 24x7 customer support. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of explicit privacy and cookie policies and lack of WHOIS transparency are notable gaps. Overall, the platform is professional, trustworthy, and well-positioned in the hospitality sector.

R

RiffReporter

riffreporter.de

65

RiffReporter is a German cooperative media platform dedicated to independent journalism, focusing on topics such as climate, environment, science, society, and technology. The website presents itself as a professional and well-branded journalistic outlet with a clear target audience of general readers interested in in-depth analyses and reports. The business model revolves around cooperative journalism, providing direct reporting and analysis without intermediary publishers. Technically, the site is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS and CDN services, and uses Matomo for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies and does not provide clear contact information or security incident response details, which are areas for improvement. Overall, the site is trustworthy and professional but could enhance its compliance and transparency aspects.

U

urbnups UG (haftungsbeschränkt)

urbnups.com

68

urbnups UG (haftungsbeschränkt) operates a travel and experience discovery platform that enables users to find, save, and share unique local moments and travel destinations. The company targets travelers and local explorers seeking authentic experiences, positioning itself as a niche community-driven platform with mobile app support. The website is well-designed, mobile-optimized, and uses modern web technologies such as React, Next.js, and Material-UI, hosted on Hetzner with Cloudflare DNS. Security is robust with HTTPS, security headers, and no detected vulnerabilities. Privacy policies are comprehensive and GDPR compliant, though direct contact emails and phone numbers are not publicly listed, relying on contact forms instead. Social media presence on Instagram, Facebook, and LinkedIn supports community engagement. Overall, the platform demonstrates a mature digital infrastructure and trustworthy business presence.

B

Budapest Főváros Önkormányzata

enbudapestem.hu

58

Énbudapestem is an official digital news and cultural portal operated by the Budapest municipal government, providing residents and visitors with timely news, cultural insights, and community updates about Budapest. The website is well-branded with consistent use of Budapest city logos and links to the official Budapest.hu domain, establishing strong trust and legitimacy. Technically, the site is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, although explicit incident response and vulnerability disclosure information are absent. Privacy compliance is good, with accessible privacy and cookie policies and a consent mechanism in place. Overall, the website presents a professional, trustworthy, and user-friendly platform for Budapest-related content.

H

Hall-Wattens Tourismus

hall-wattens.at

57

Hall-Wattens Tourismus operates as the official tourism organization for the Hall-Wattens region in Tirol, Austria, providing comprehensive information and services to tourists including accommodation booking, event promotion, and activity guidance. The website is professionally designed with excellent content quality, targeting travelers interested in seasonal vacations and cultural experiences in the Austrian Alps. Technically, the site leverages modern web technologies such as Next.js and React, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and appropriate security headers, alongside a robust cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data limits domain trust assessment, though the website's professional presentation and clear contact details support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance.