Security Directory

P

Peaberry Software Inc.

gist.build

68

Customer.io, operated by Peaberry Software Inc., is a mature SaaS company specializing in customer engagement through in-app messaging and omnichannel marketing automation. The platform enables businesses to create personalized campaigns combining in-app messages with email, push notifications, SMS, and webhooks. Positioned as a trusted solution with over 7,800 brands worldwide, Customer.io targets product-led companies and marketing teams seeking to enhance user engagement and retention. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates multiple analytics and advertising technologies including Google Analytics, Microsoft Clarity, and various ad network pixels. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by a comprehensive developer resource section with open-source SDKs. From a security perspective, the site enforces HTTPS with good SSL configuration and employs cookie consent mechanisms. However, explicit security headers and detailed security policies are not prominently published. The WHOIS data confirms a consistent and legitimate domain registration dating back to 2011, reinforcing the company's credibility. Overall, Customer.io presents a professional and trustworthy online presence with strong technical and business foundations. The main areas for improvement include publishing clear privacy policies, terms of service, and contact information to enhance privacy compliance and user trust.

D

Docler Holding

doclerholding.com

64

Docler Holding is a well-established multinational holding company specializing in technology, media, entertainment, sports, and arts sectors. Founded in 2001, it manages a diverse portfolio of over 18 companies and employs more than 1500 people across multiple locations. The company positions itself as a pioneer in digital experiences with a strong emphasis on creativity and innovation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information. Technically, the site leverages modern frameworks such as Next.js and React, with a CMS likely based on Strapi, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain transfer locks, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

Z

Cztery kąty - dom i ogród to nie tylko ludzie

zakupy-czterykaty.pl

54

The website zakupy-czterykaty.pl is a Polish e-commerce platform specializing in furniture, decorations, and home accessories sourced from Polish and international stores. It serves as a search engine for sales and collections in the home and garden retail sector, targeting consumers interested in interior design and home improvement. The site is relatively new, with domain registration dating back to March 2023, aligning with its business launch. The platform uses modern web technologies including Next.js and React, and integrates analytics tools such as Google Analytics, Microsoft Clarity, and Gemius for user behavior tracking. Cookie consent is managed via OneTrust, indicating some level of privacy compliance.

C

Cztery kąty - dom i ogród to nie tylko ludzie

czterykaty.pl

54

Czterykaty.pl is a Polish retail and content platform specializing in home and garden interiors, furniture, lighting, and accessories. Established since 2001, it serves a general audience interested in home decoration and shopping. The website uses modern web technologies including Next.js and React, and integrates multiple analytics and advertising services such as Google Analytics, Gemius, and Microsoft Clarity. While the site implements a cookie consent mechanism indicating GDPR awareness, it lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure information. The domain registration data is consistent and supports the legitimacy of the business. Overall, the site presents a professional and user-friendly experience but could improve in privacy and security transparency.

A

Moda, Ubrania, Dodatki - największa szafa w sieci - Avanti24.pl

avanti24.pl

58

Avanti24.pl is a Polish e-commerce platform specializing in fashion, clothing, accessories, and cosmetics. Established in 2007, it positions itself as the largest online wardrobe in the network, aggregating products from various Polish stores. The website offers a comprehensive search engine for sales and collections, targeting a general audience interested in fashion retail. Technically, the site is built on modern frameworks such as React and Next.js, with integrations for analytics and advertising including Google Analytics, Microsoft Clarity, and Gemius. The site is hosted by home.pl S.A., a reputable Polish hosting provider. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No direct contact or incident response information is available on the main page, which could be improved for better transparency. Overall, the site is professionally designed, mobile-optimized, and SEO-friendly, with moderate tracking and advertising practices. The domain registration data aligns well with the business claims, indicating a legitimate and established online presence.

G

Grupa Radiowa Agory

tuba.pl

61

Tuba.pl operates as a Polish internet radio and podcast platform under the parent company Grupa Radiowa Agory. It offers a variety of music stations, live radio streams, and podcasts targeting Polish-speaking music enthusiasts and podcast listeners. The platform is well-established, with a domain age dating back to 2005, and maintains a consistent brand presence with professional content and user engagement through social media and contact channels. Technically, the website leverages modern web technologies including Next.js and React, and integrates multiple analytics and advertising tools while managing user consent effectively. Security posture is solid with HTTPS enforcement and privacy compliance, although some security headers could be enhanced and DNSSEC is not enabled. Overall, the site presents a trustworthy and professional media service with good user experience and compliance standards.

M

Merck

planforcovid.com.au

64

Plan for COVID is a healthcare-focused website providing educational resources and planning tools for individuals at risk of severe illness from COVID-19. The site is professionally branded with Merck association and targets healthcare consumers in Australia, offering risk assessments, symptom checking, and management guidance. Technically, the site is built on WordPress VIP with React components and integrates Brightcove for video content. It employs modern tracking and consent mechanisms including Google Analytics, Facebook Pixel, and OneTrust for cookie consent. Security posture is solid with HTTPS and domain protection, though lacks visible security headers and formal security policies. Privacy compliance is partial due to absence of a privacy policy page. Overall, the site is trustworthy and well-positioned in its niche but could improve transparency and security documentation.

M

Magnet.me

magnet.me

72

Magnet.me is a well-established Dutch technology company founded in 2008 that operates a smart networking platform connecting students and professionals with internships, traineeships, and job opportunities. The platform hosts over 30,000 vacancies from more than 5,000 employers, including startups and multinational corporations, positioning itself as a significant player in the Dutch and UK job markets. The website is professionally designed, mobile-optimized, and offers a seamless user experience with clear navigation and comprehensive career resources. Technically, the website leverages modern web technologies including React and OAuth 2.0 for secure authentication. It is hosted on TransIP infrastructure and integrates Google Tag Manager and Analytics for marketing and performance tracking. The platform also offers mobile applications for iOS and Android, enhancing accessibility and user engagement. SEO and accessibility practices are well implemented, contributing to strong digital maturity. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on its domain to prevent unauthorized transfers. However, it lacks DNSSEC and some recommended security headers, which could be improved. Privacy compliance is robust with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Contact information is transparent and available in structured data, but no explicit security policy or incident response contacts are published. Overall, Magnet.me presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic improvements in security headers, DNS security, and vulnerability disclosure could further enhance its security posture and trustworthiness.

B

Berema AS

berema.no

59

Berema AS is a well-established Norwegian importer and distributor of quality products for garden, park, and industrial sectors, operating since 1968. The company collaborates with a nationwide network of 250 professional dealers and represents reputable brands such as Honda, Cramer, and E-Power. Their website reflects a professional business presence with clear branding and relevant content targeting professional dealers and end customers seeking reliable equipment. Technically, the website is built using modern frameworks like React and Material-UI, with integration of Google Tag Manager, Google Analytics, and Microsoft Application Insights for monitoring and analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website demonstrates a mature digital presence aligned with the company's market position and business model.

S

Spara

spara.co

73

Spara is an AI-powered inbound conversion platform targeting enterprise sales teams. The company offers AI chat, email, and voice agents designed to engage, qualify, and convert inbound leads into sales pipeline and revenue. Positioned as an enterprise-grade solution, Spara emphasizes accelerating deal closure through intelligent AI-driven conversations and lead qualification. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, with integrations for analytics via Vector and Google Tag Manager. The platform demonstrates good performance and mobile optimization, supporting a seamless user experience. Security posture is solid with HTTPS enforced and SOC 2 compliance claimed, though explicit security headers and published security policies are absent. The WHOIS data is fully redacted, limiting transparency on domain ownership and registration details. Despite this, the professional branding, trust indicators, and business focus support legitimacy. Privacy and cookie policies are not explicitly found, indicating an area for compliance improvement. Overall, the site presents a trustworthy and technically sound platform with room for enhanced privacy and security disclosures.

N

NRW.social

nrw.social

64

NRW.social is an independent Mastodon social networking instance serving the North Rhine-Westphalia region in Germany. It offers a friendly platform for local residents and sympathizers to participate in the Fediverse, providing services such as public timelines, profile directories, and federated social networking. The website is built on the open-source Mastodon platform version 4.3.8, leveraging modern web technologies including React and WebSockets for real-time communication. Hosting is provided by netcup.net, a German hosting provider, with domain registration consistent with the regional focus. From a security perspective, the site enforces HTTPS and uses script integrity checks, but lacks DNSSEC and some recommended security headers. Privacy compliance is partial; a privacy policy is present and GDPR compliant, but no cookie consent mechanism is detected. No contact emails or phone numbers are publicly visible on the explored page, which may limit direct user support. The site does not show signs of malicious content or adult material, targeting a general audience with safe content. Overall, NRW.social demonstrates a solid technical infrastructure and trustworthy domain registration, positioning itself as a reputable regional Mastodon instance. Recommendations include enabling DNSSEC, adding security headers, and implementing cookie consent to improve privacy compliance and security posture.

H

HelloFresh SE

hellofreshgroup.com

61

HelloFresh SE is a leading global meal-kit company focused on revolutionizing the food supply chain through a customer-centric and data-driven approach. The company offers a variety of high-quality food solutions including meal kits, ready-to-eat meals, seafood and meat delivery, and premium pet food, all delivered directly to consumers. Their business model emphasizes direct-to-consumer operations, enabling efficiency, competitive pricing, and rapid response to customer needs. Sustainability and innovation are core to their operations. Technically, the website is built using modern frameworks such as React and Gatsby, hosted likely on AWS infrastructure, and incorporates consent management via Usercentrics and analytics through Google Tag Manager. The site is well optimized for mobile devices, has good SEO practices, and loads quickly, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with strong domain registration protections but lacks DNSSEC and explicit security headers. There is no visible security policy or incident response contact information, and no vulnerability disclosure program is published. Privacy compliance is partial, with consent management present but no explicit privacy or cookie policy pages found in the analyzed content. Overall, the website presents a professional and trustworthy front with strong business credibility and technical maturity. However, improvements in privacy transparency, security policy publication, and DNS security would enhance their security posture and compliance standing.

M

MSD pro lékaře

msdprolekare.cz

67

MSD pro lékaře is a professional healthcare information portal operated by MSD, targeting healthcare professionals in the Czech Republic. The site provides detailed information on therapeutic areas, pharmaceutical products, articles, videos, and online seminars. It serves as a trusted source for medical professionals seeking up-to-date information on MSD's medicinal products. Technically, the website is built on the WordPress VIP platform with modern technologies such as React and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. The site is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site uses HTTPS and implements cookie consent but lacks explicit privacy policy and some security headers, which are recommended for compliance and enhanced protection. The absence of WHOIS data reduces transparency but is likely due to privacy protection, common for corporate domains. Overall, the website is professional, trustworthy, and safe for its intended audience.

M

MConnect Poland

msddlalekarzy.pl

68

MConnect Poland is a professional portal operated by MSD Polska Sp. z o.o., a subsidiary of Merck & Co., Inc., providing healthcare professionals with comprehensive information about MSD products, educational resources, and patient support materials. The website is well-positioned in the healthcare sector in Poland, targeting medical professionals with relevant and up-to-date content. The business model focuses on education and product awareness, supporting MSD's pharmaceutical offerings in the region. Technically, the website is built on WordPress VIP with modern technologies including React and Yoast SEO, ensuring good performance, mobile optimization, and accessibility. The site integrates Google Tag Manager for analytics and OneTrust for cookie consent, demonstrating digital maturity and compliance with privacy regulations. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, DNSSEC is not enabled, and some security headers are missing, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a low risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security policy or vulnerability disclosure to enhance trust and security posture.

G

Gemeente Den Haag

denhaag.nl

87

Gemeente Den Haag operates as the official municipal government website for The Hague, Netherlands, providing digital products, services, and comprehensive information for residents and businesses. The website positions itself as a key public service portal with a strong focus on accessibility, user experience, and digital engagement. The target audience includes local residents and commercial entities within the city. The business model is that of a government entity delivering essential civic services and information digitally. Technically, the website is built on WordPress, leveraging modern frameworks such as the NL Design System and React components. It integrates advanced SEO tools like Yoast SEO Premium and uses Piwik PRO for analytics, alongside Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization, accessibility, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. Cookie consent is actively managed, and forms are secured using Gravity Forms. However, explicit privacy policies, terms of service, and incident response contacts are not found in the provided content, representing areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance with privacy standards, though it would benefit from publishing comprehensive privacy and security policies to enhance transparency and user trust.

T

Tamedia

tamedia.ch

74

Tamedia is a well-established Swiss media company with a rich history dating back to 1893. It operates a broad portfolio of newspapers, magazines, and digital media platforms serving the German and French-speaking regions of Switzerland. The company is part of the TX Group and maintains a strong market position as a leading media provider. The website reflects a mature digital infrastructure using modern web technologies such as Next.js and React, ensuring fast performance and mobile optimization. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, the site lacks a dedicated security policy or incident response page, which could enhance trust further. Overall, the website is professional, trustworthy, and aligns well with the company's business profile.

T

Tamedia AG

tagesanzeiger.ch

73

Tages-Anzeiger is a leading Swiss daily newspaper operated by Tamedia AG, founded in 1893. It offers comprehensive news coverage in politics, economy, sports, culture, and more, targeting a broad general audience in Switzerland and internationally. The business model combines subscription services with advertising revenue, supported by digital offerings such as e-papers, newsletters, and podcasts. The website demonstrates a mature digital infrastructure using modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented with consent management, reflecting compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policy and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-positioned in the Swiss media market.

M

MSD Pharma Hungary Kft.

hpvoltas.com

54

The website hpvdoktor.hu is an authoritative healthcare information portal operated by MSD Pharma Hungary Kft., focusing on HPV vaccination for seventh-grade children within Hungary's National Immunization Program. It provides detailed educational content, FAQs, and official references to support parents and healthcare professionals. The site is well-positioned in the healthcare sector, targeting Hungarian families and medical practitioners with a clear business model centered on public health education and vaccine promotion. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. It integrates Google Tag Manager and OneTrust for analytics and cookie consent, reflecting a mature digital infrastructure. Accessibility and user experience are well addressed, with a professional and consistent design. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact, which could enhance trust and preparedness. Privacy compliance is strong, with visible cookie consent and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable resource for its audience. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and further enhancing accessibility features to maintain and improve its security posture and user trust.

M

MSD Pharma Hungary Kft.

hpvdoktor.hu

54

The website hpvdoktor.hu is a professionally developed healthcare information portal operated by MSD Pharma Hungary Kft., focusing on human papillomavirus (HPV) education and vaccination awareness. It serves the Hungarian public, including parents and young people, providing comprehensive information about HPV, related cancers, vaccination programs, and personal stories. The site is well-positioned as a trusted source in the Hungarian healthcare market, supported by a reputable pharmaceutical company.

F

Flix SE

flixbus.si

54

Flix SE operates the www.flixbus.si website, providing affordable and extensive bus travel services across Slovenia and Europe. The company offers a large network of routes, modern buses with amenities, and a user-friendly booking platform including a mobile app. The website is professionally designed, localized in Slovenian, and provides comprehensive information about services, routes, and travel options. Technically, the site uses modern web technologies including React, Drupal CMS, and integrates analytics and marketing tools such as Google Tag Manager and Usercentrics CMP. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is evident with clear privacy and cookie policies and GDPR adherence. Overall, the site reflects a mature digital presence of a large transportation company with good trust indicators and user experience.

S

Stichting VieAmi

vieami.nl

49

VieAmi is a Dutch non-profit foundation dedicated to supporting projects within VieCuri hospital that are not covered by standard healthcare budgets. The organization focuses on enhancing patient experience and regional healthcare quality through fundraising and community engagement. The website serves as a platform for donations, project information, and news updates, targeting patients, local community members, and healthcare supporters. Technically, the site is built on WordPress using the Enfold theme and integrates the GiveWP plugin for donations with Mollie as the payment gateway. The infrastructure demonstrates moderate digital maturity with responsive design and modern JavaScript libraries such as React. Security posture is adequate with HTTPS enabled and nonce tokens protecting forms, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from improved security and privacy transparency.

F

flaconi GmbH

flaconi.de

69

flaconi GmbH operates a large-scale e-commerce platform specializing in beauty products including perfumes, make-up, and skincare. The website targets consumers primarily in Germany, offering over 30,000 products from more than 600 brands. The business model focuses on online retail with value-added services such as free shipping and promotional deals. The company holds a strong market position as a leading online beauty retailer in Germany.

H

HelloFresh

hellofresh.com

11

HelloFresh is a leading meal kit delivery service in the United States, offering a subscription-based model that delivers fresh, pre-portioned ingredients and recipes to customers' doorsteps. The company emphasizes convenience, variety, and sustainability, targeting consumers who want easy home-cooked meals without the hassle of grocery shopping. Their market position is strong, supported by numerous awards and a large customer base. Technically, the website is built on modern frameworks like Next.js and React, hosted on Vercel, and optimized for performance and mobile use. Security posture is robust with HTTPS and security headers implemented, though some privacy compliance aspects like cookie consent could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall legitimacy given the brand's prominence. Strategic recommendations include enhancing privacy transparency and publishing explicit security policies to further build trust.

A

ADRIENNE FELLER COSMETICS ZRT.

panarom.hu

49

Panarom.hu is the official website of ADRIENNE FELLER COSMETICS ZRT., a Hungarian company specializing in natural aromatherapy and wellness products. The site offers a comprehensive e-commerce platform featuring essential oils, natural oils, skincare products, and educational workshops. It targets general consumers interested in natural health and wellness, with a strong market presence in Hungary and expanding EU distribution. The website demonstrates a professional and consistent brand image with detailed product information and multiple trust signals including certifications and retail partnerships. Technically, the site employs modern JavaScript frameworks and analytics tools with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response information are absent. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

Z

zondacrypto

zondacrypto.com

73

zondacrypto is a Poland-based cryptocurrency exchange platform founded in 2022, offering services to buy, sell, and store Bitcoin and various altcoins. The platform targets cryptocurrency traders and investors, providing a mobile app and a growing ecosystem including the ZND platform. The website is professionally designed with multi-language support and clear legal documentation, positioning itself as a trusted EU-based exchange with notable sports partnerships. Technically, the site uses modern frameworks such as React and Liferay, with Cloudflare DNS and Google Analytics integration, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and security.txt or explicit security policies are absent. Overall, the site demonstrates a mature digital presence suitable for its business model.

W

Wirtualna Polska Media S.A.

pudelek.pl

60

Pudelek.pl is a prominent Polish online media portal specializing in celebrity gossip, entertainment news, and sensational stories. Operated by Wirtualna Polska Media S.A., it holds a strong market position in Poland's media landscape, targeting a broad general audience interested in the latest celebrity news, scandals, and multimedia content. The website features a modern design with responsive capabilities and integrates social media channels to enhance user engagement. Technically, the site leverages contemporary web technologies such as React and Next.js, ensuring a dynamic and performant user experience. Security-wise, the site enforces HTTPS and includes standard security headers, though there is room for improvement in content security policies and public security documentation. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy hosted on the parent company's domain. Overall, Pudelek.pl demonstrates a mature digital presence with extensive advertising and tracking integrations typical for media businesses, balanced with GDPR compliance and user privacy considerations.

A

ADRIENNE FELLER COSMETICS ZRT.

adriennefellerwebshop.hu

51

ADRIENNE FELLER COSMETICS ZRT. operates a professional e-commerce platform specializing in premium natural cosmetics made from Hungarian thermal water and plant-based ingredients. The company holds a strong market position in Hungary with expanding international reach, supported by partnerships with hotels, spas, and duty-free retailers. Their website demonstrates a mature digital presence with modern technologies such as React, Google Analytics, and Cookiebot for privacy compliance. Security posture is solid with HTTPS, security headers, and consent management, though formal security policies and incident response details are absent. Overall, the site is well-designed, trustworthy, and compliant with GDPR, serving a general audience interested in natural skincare products.

V

Viads

viads.com

63

Viads is a well-established online advertising platform founded in 2003, specializing in video ad monetization for publishers and advertisers. The company positions itself as a premium partner, offering a variety of video ad formats and leveraging exclusive demand partnerships to maximize revenue and brand awareness. The website reflects a mature digital presence with professional design, clear messaging, and strong trust signals such as client testimonials and partner logos. Technically, the site uses modern frameworks like Next.js and React, ensuring good performance and mobile optimization. However, the absence of explicit privacy and cookie policies, as well as security headers, indicates areas for compliance and security improvement. Overall, Viads demonstrates a solid business and technical foundation but should enhance its privacy and security disclosures to meet best practices.

I

Inbox.com AS

citromail.hu

64

Citromail is a Hungarian-focused email service provider operated by Inbox.com AS, a Norwegian company. The service offers large storage email accounts accessible on multiple devices with an emphasis on user privacy and no commercial exploitation of mailbox data. The website is built on modern web technologies including React and Next.js, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the site lacks a cookie consent mechanism and a published security policy. WHOIS data confirms the legitimacy of the domain and company with consistent registrant information. Overall, Citromail presents as a trustworthy and professional email service provider in its market segment.

K

Kontroll

kontroll.hu

29

Kontroll.hu is a Hungarian online media platform delivering news, opinion pieces, and video content primarily targeting Hungarian-speaking audiences interested in current affairs and societal issues. The site also operates a webshop, indicating a diversified business model combining media content with e-commerce. The platform positions itself as an independent media outlet aiming to bridge opinion bubbles and provide a voice to diverse perspectives. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO and mobile optimization. It employs consent management tools and integrates advertising and analytics services like InMobi and Google Tag Manager, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, includes standard security headers, and uses a consent platform, but lacks explicit published security policies or incident response contacts. Overall, Kontroll.hu demonstrates a solid security posture with room for improvement in transparency and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts.

S

StreamYard

streamyard.com

76

StreamYard is a well-established technology company providing a professional live streaming and recording platform accessible via web browsers. It serves a large user base of over 12 million creators, offering services such as multistreaming, branding, guest management, and video repurposing. The platform targets content creators and businesses seeking easy-to-use streaming solutions with a SaaS subscription model. Technically, StreamYard employs modern web technologies including React and Next.js, integrates with trusted third-party services like Stripe for payments, and uses Cloudflare for DNS. The website is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data, though enabling DNSSEC and publishing a formal security policy could enhance trust. Privacy compliance is strong with clear policies and consent mechanisms. Overall, StreamYard presents a professional, trustworthy, and secure online presence with no critical issues detected.

I

Index Cooperative

indexcoop.com

66

Index Cooperative is a decentralized autonomous organization (DAO) focused on providing innovative DeFi products such as leveraged tokens and yield optimization strategies. The company positions itself as a market leader in on-chain structured products, offering automated and user-friendly tools for crypto investors and traders. Their product suite includes leverage tokens with built-in liquidation protection and smart looping strategies to amplify returns. The website demonstrates a high level of professionalism, with comprehensive content, strong branding, and clear navigation. Technically, the site is built using modern frameworks including Astro and React, with performance and mobile optimization rated as excellent. The use of advanced frontend technologies and integration with DeFi platforms like Ethereum and Arbitrum reflects a mature digital infrastructure. Analytics and error monitoring are implemented via Sentry, and cookie consent mechanisms are in place to ensure privacy compliance. From a security perspective, the project has undergone multiple independent smart contract audits and maintains an active bug bounty program through Immunefi, indicating a strong commitment to security best practices. The website enforces HTTPS and likely employs standard security headers, although explicit header details are not visible. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website and project present a low-risk profile with strong trust indicators, though the absence of WHOIS registrant data and explicit incident response contacts slightly reduce the business credibility score. Strategic recommendations include publishing clearer incident response contacts, security.txt files, and enhancing transparency around data protection roles to further strengthen trust and compliance.

T

The American Society of Mechanical Engineers

asme.org

69

The American Society of Mechanical Engineers (ASME) is a globally recognized non-profit professional organization dedicated to advancing multidisciplinary engineering and allied sciences. Founded in 1880, ASME offers a broad range of services including engineering standards development, certification and accreditation programs, professional training courses, publications, and industry events. The organization serves a diverse audience of mechanical engineers, students, and industry professionals worldwide, maintaining a strong market position as a trusted source for engineering standards and professional development. Technically, the ASME website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks such as React and Vue.js, integrated with multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Mouseflow, HubSpot, and Facebook Pixel. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation structure. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers. It includes privacy and cookie policies with consent mechanisms, indicating good compliance with GDPR and related regulations. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response disclosures are not found, suggesting room for improvement in transparency. Overall, ASME's website reflects a high level of professionalism, trustworthiness, and compliance suitable for a large, established non-profit organization. The domain WHOIS data is privacy protected, which is justified given the organization's profile. The site integrates multiple related service domains for career services, e-commerce, digital publications, and certification management, enhancing its ecosystem. Strategic recommendations include enhancing security policy transparency, publishing incident response and vulnerability disclosure information, and maintaining vigilant third-party script audits to sustain security posture.

Nierstichting is a Dutch non-profit organization dedicated to promoting kidney health and supporting individuals affected by kidney disease. The website serves as a platform for patient support, awareness campaigns, and fundraising efforts. It holds recognized certifications such as ANBI and CBF, enhancing its credibility in the non-profit sector. The target audience includes patients, donors, and the general public interested in kidney health. The organization maintains a consistent brand presence and provides comprehensive information about its mission and services. Technically, the website is built using modern web technologies including React and Next.js, with integration of Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good performance, mobile optimization, and accessibility features, contributing to a positive user experience. SEO practices are adequately implemented through proper meta tags and structured data. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. Cookie consent mechanisms comply with GDPR requirements, and no critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website presents a trustworthy and professional digital presence for Nierstichting, with strong privacy compliance and user-focused design. Strategic recommendations include publishing detailed security policies, providing incident response contacts, and adding vulnerability disclosure mechanisms to further enhance security posture and stakeholder trust.

L

Live Nation UK

livenation.co.uk

61

Live Nation UK operates as a prominent live entertainment promoter and ticketing platform focused on concerts, festivals, and events within the United Kingdom. The website showcases a professional design with clear navigation and a focus on ticket sales for major artists and events, targeting music fans and event attendees. The business model centers on event promotion and ticket distribution, positioning Live Nation UK as a leading player in the UK live entertainment market. Technically, the site leverages modern web technologies including React, Next.js, and Material UI, supported by extensive use of third-party analytics and advertising services such as Google Analytics, Google Tag Manager, and various ad networks. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Security posture is strong with HTTPS enforced and a Content Security Policy in place, though additional security headers could enhance protection. Privacy compliance is limited in the visible content, with no explicit privacy or cookie policies detected, which is a notable gap. The WHOIS data is unavailable due to lookup failure, limiting domain legitimacy verification. Overall, the site presents a trustworthy and professional front but would benefit from improved transparency on privacy and security policies.

A

AXS

axs.com

66

AXS is a prominent ticketing platform specializing in online ticket sales and event management for concerts, sports, theater, and other live entertainment events. Owned by AEG Presents, it holds a strong market position in North America, serving a broad audience of event attendees and fans. The website offers a comprehensive suite of services including mobile ticketing, event discovery, and marketing tools, supporting a robust e-commerce business model. Technically, the site leverages modern web technologies such as React and Node.js, ensuring a fast, responsive, and accessible user experience optimized for mobile devices. Security is well-implemented with HTTPS, strong security headers, and secure form handling, although the absence of a public security policy and incident response contact suggests room for improvement. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site demonstrates high professionalism and trustworthiness, with no indications of malicious activity or content safety concerns.

B

Before You Buy Australia Pty Ltd

beforeyoubid.com.au

66

Before You Buy Australia Pty Ltd operates a professional online platform specializing in property compliance and due diligence services within the Australian real estate market. The company offers key services including building and pest inspections, strata reports, contract reviews, and pool inspections, targeting property buyers, sellers, sales agents, and inspectors. The website demonstrates a strong market position supported by media presence and partnerships with notable industry players such as RACV and Agentbox. Technically, the website is built on modern frameworks like Next.js and React, integrates advanced analytics and marketing tools, and employs secure payment processing via Stripe. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security and incident response policies are not publicly documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional business front with high-quality content and user experience. The domain WHOIS data is privacy protected but does not raise suspicion given the business maturity and transparency on the site.

I

InnoPME

innopme.ch

61

InnoPME is a specialized support program dedicated to SMEs in the Vaud region of Switzerland, focusing on accelerating growth and ensuring business sustainability through validated opportunity identification and risk-managed strategies. The website presents a professional and well-structured digital presence built on modern technologies such as Next.js and Typedream CMS, offering multiple engagement formats including workshops, sprints, and member events. Security posture is adequate with HTTPS enforced and secure form handling, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site reflects a credible and trustworthy business with strong regional partnerships and a clear value proposition for its target SME audience.

V

Vote.org

vote.org

66

Vote.org is a well-established non-profit organization dedicated to increasing voter participation in the United States by providing accessible online tools for voter registration, absentee ballot requests, and election reminders. The website is professionally designed, mobile-optimized, and offers a seamless user experience targeting U.S. eligible voters. Its market position is strong as a leading civic engagement platform with a clear mission and trusted brand identity. Technically, the site leverages modern web technologies including React and Gatsby, ensuring fast performance and good SEO. Security posture is robust with HTTPS enforcement and comprehensive security headers, though no explicit vulnerability disclosure or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Vote.org presents a trustworthy and credible online presence with strong business and technical foundations.

M

Ministerie van Binnenlandse Zaken en Koninkrijksrelaties

goudenpiramide.nl

70

Gouden Piramide is an official Dutch government website managed by the Ministry of the Interior and Kingdom Relations, dedicated to promoting and awarding excellence in public sector commissioning through the Gouden Piramide prize. The site targets government agencies, public sector organizations, architects, and contractors involved in public construction projects. It serves as an informational and news platform about the award and its nominees. Technically, the website is built using modern web technologies including React and Next.js, with a custom or proprietary CMS likely provided by the Dutch government. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant. The security posture is strong, with best practices observed in SSL configuration and script handling. However, explicit security policy and incident response information are not published, and a vulnerability disclosure policy is absent. Overall, the website is trustworthy, professional, and well-maintained, reflecting its government affiliation. Strategic recommendations include publishing a dedicated security policy, providing incident response contact channels, and implementing a vulnerability disclosure framework to enhance transparency and security readiness.

M

Masumi

sokosumi.com

62

Sōkosumi is a newly launched AI agent marketplace platform that enables businesses and developers to hire specialized AI agents for tasks such as research, design, coding, and automation. The platform integrates blockchain technology via the Masumi Network to provide unique decentralized identities for agents, enabling automated payments and discoverability. The website demonstrates a modern, professional design with clear navigation and calls to action, targeting businesses seeking to automate workflows with AI agents. Technically, the site is built using Next.js and React, hosted on DigitalOcean, and employs modern web standards for performance and accessibility. Security posture is solid with HTTPS enforced and domain-level protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but direct company contact emails or phone numbers are not provided, relying instead on external contact pages. Overall, the platform appears legitimate and well-positioned in the AI automation niche, with room for improvement in security transparency and incident response readiness.

A

Airly sp. z o.o.

airly.eu

57

Airly sp. z o.o. operates the airly.org website, providing real-time local air quality monitoring data to the general public and environmental stakeholders. The company positions itself as a technology provider specializing in environmental data services, leveraging modern web technologies such as React and Gatsby hosted on AWS infrastructure. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. Security posture is strong with HTTPS enforcement and security headers, though no explicit security policy or incident response contact is published. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. WHOIS data confirms the legitimacy of the domain and its alignment with the company's business identity and location in Poland. Overall, the website demonstrates a mature digital presence with solid technical and security foundations.

P

Privacy service provided by Withheld for Privacy ehf

jumper.exchange

61

Jumper.exchange is a technology-driven cryptocurrency exchange platform specializing in multi-chain bridging and swapping services. It aggregates liquidity across 25 blockchains to provide users with optimal routes for token transactions. The platform targets cryptocurrency users and DeFi participants seeking seamless cross-chain liquidity solutions. Founded in 2022, the company operates with a modern tech stack including React and Next.js, hosted on Cloudflare infrastructure, and integrates Google Analytics for user behavior insights. The website demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled, representing a minor security gap. Privacy and cookie policies are not explicitly found, indicating an area for compliance improvement. Overall, the domain registration is privacy-protected but legitimate, consistent with industry practices for crypto startups.

S

Swiss Post Cargo CH AG

swisspost-cargo.com

73

Swiss Post Cargo CH AG is a prominent logistics and transport service provider based in Switzerland, offering tailored solutions including transport, warehousing, customs clearance, and value-added services. The company operates as a one-stop shop with a global network, serving industry and trade sectors with a focus on customer satisfaction. The website reflects a mature digital presence built on modern technologies such as React and Next.js, hosted likely on Vercel, with a professional design optimized for performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data reduces transparency but is likely due to privacy protection, common for large enterprises. Overall, the site demonstrates high professionalism and trustworthiness, supporting Swiss Post Cargo's market position as a reliable logistics partner.

L

Lasoo

lasoo.com.au

64

Lasoo is an Australian e-commerce platform that aggregates and provides access to a wide range of retail specials and discounts from various Australian retailers. The platform targets Australian shoppers seeking to save money by discovering and comparing deals across multiple categories including electronics, groceries, furniture, and alcohol. Lasoo positions itself as a trusted aggregator with a strong market presence supported by social media and customer reviews. Technically, the website is built using modern frameworks such as Next.js and React, integrating multiple marketing and analytics tools like Klaviyo, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. The WHOIS data is incomplete and malformed, which slightly reduces domain trustworthiness, but the overall business credibility remains high based on website content and branding. Strategic recommendations include enhancing privacy compliance, adding security headers, and improving transparency around security policies.

A

Aunty Grace Pty Ltd

auntygrace.com.au

66

Aunty Grace Pty Ltd operates a professional home care service based in Melbourne, Australia, targeting elderly individuals and their families. The company offers a comprehensive range of in-home care services including personal care, domestic assistance, meal solutions, clinical services, and concierge support. The website demonstrates a strong market position supported by positive client testimonials and 5-star Google reviews, reflecting a trusted and client-focused business model. Technically, the website is built on modern frameworks such as Next.js and Chakra UI, with integration of analytics tools like Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and privacy policies suggests room for improvement. Overall, the website is professional and trustworthy, though enhanced privacy compliance and security transparency would strengthen its risk profile.

B

Before You Buy Australia Pty Ltd

beforeyoubuy.com.au

64

Before You Buy Australia Pty Ltd operates a professional online platform specializing in real estate compliance and due diligence services within Australia. The company offers key services including building and pest inspections, strata reports, contract reviews, and pool inspections, targeting property buyers, sellers, sales agents, and inspectors. The website is well-branded, consistent, and supported by customer testimonials and media presence, indicating a strong market position in the Australian real estate sector. Technically, the site leverages modern frameworks such as Next.js and React, integrates multiple analytics and marketing tools, and uses secure payment processing via Stripe. The site is performant, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, though direct contact emails and phone numbers are not publicly listed, relying on contact forms instead. WHOIS data is privacy protected but consistent with the business's Australian identity and legitimacy. Overall, the site presents a trustworthy and professional front with moderate to high security and privacy compliance.

A

American Express

americanexpress.ch

71

American Express Switzerland operates a comprehensive website offering credit card products and related financial services tailored for private and business customers in Switzerland. The site reflects a strong market position as part of the global American Express brand, with localized services issued by Swisscard AECS GmbH. The website provides detailed product information, travel benefits, rewards programs, and customer support resources, demonstrating a mature digital presence. Technically, the site employs modern web technologies including React, Adobe DTM, and advanced analytics tools, ensuring fast performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

R

Ringier AG

schweizer-illustrierte.ch

66

Schweizer Illustrierte is a prominent Swiss media brand operated by Ringier AG, a well-established family-owned media group. The website offers rich content focused on celebrity news, fashion, beauty, family, and health, targeting a broad general audience interested in lifestyle and entertainment. The business model revolves around digital publishing, advertising, and subscription services, positioning itself as a leading media outlet in Switzerland. The company maintains a strong brand presence with consistent and professional content quality.

M

Moniker Privacy Services

internetcomputer.org

67

InternetComputer.org represents the Internet Computer Protocol (ICP), a decentralized blockchain-based platform enabling developers and enterprises to build secure, scalable, and unstoppable web applications. The platform positions itself as a transformative technology disrupting traditional IT and Big Tech dominance by hosting network-resident code and data with DAO governance and token processing capabilities. The website is rich in developer resources, community engagement, and ecosystem support, reflecting a mature and professional digital presence. Technically, the site leverages modern frameworks like Docusaurus and React, integrates Matomo analytics with privacy considerations, and employs Cloudflare DNS services, ensuring fast and secure delivery. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA Enterprise, though improvements are recommended in DNSSEC adoption and explicit security policies. Overall, the site demonstrates high professionalism, trustworthiness, and technical sophistication, supporting its role as a leading blockchain infrastructure provider.