Security Directory

R

Real Centro Universitario Escorial - María Cristina

rcumariacristina.es

48

The Real Centro Universitario Escorial - María Cristina is a private university institution located in San Lorenzo de El Escorial, Spain, with a rich history dating back to 1892. It offers official undergraduate and postgraduate degrees in business administration, law, and related fields, affiliated with Universidad CEU San Pablo. The website reflects a well-established academic institution with a professional digital presence, including comprehensive academic program information, campus details, and active social media engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and jQuery, enhanced by SEO plugins and GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and uses HTTPS with good SSL configuration, though some security headers are missing. Analytics and marketing tools are implemented with user privacy in mind, leveraging Google Tag Manager and consent mode. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but lacks published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The absence of WHOIS data due to Red.es restrictions limits domain registration verification, but the website content and structured data strongly support legitimacy. Overall, the site is a credible, professional educational platform with good technical and privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance trust and compliance.

C

CEU - Universidad Fernando III

uf3ceu.es

65

Universidad CEU Fernando III (UF3) is a regional higher education institution based in Sevilla, Spain, offering undergraduate, double degree, and master's programs. The website is professionally designed using WordPress, with good SEO and analytics integration, including Google Tag Manager, Microsoft Clarity, and Hotjar. The site implements GDPR-compliant cookie consent via Cookiebot, reflecting awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were detected, which is a compliance gap. The WHOIS data for the domain is inaccessible due to Red.es restrictions, limiting domain legitimacy verification. Security posture is moderate with HTTPS enforced but lacking visible security headers and vulnerability disclosures. Overall, the site is safe, professional, and targeted at prospective students in the education sector.

F

FUNDACIÓ PRIVADA UNIVERSITAT ABAT OLIBA CEU

uaoceu.es

64

FUNDACIÓ PRIVADA UNIVERSITAT ABAT OLIBA CEU operates as a private higher education institution in Spain, offering specialized undergraduate and master's degree programs in fields such as Law, Politics, Business, Economics, Communication, Psychology, Education, and Humanities. The website reflects a professional and consistent brand image targeting students and professionals seeking quality university education. Technically, the site is built on Drupal 7 CMS and integrates modern analytics and consent management tools including Google Tag Manager, Cookiebot, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates good privacy compliance and business credibility, although WHOIS data is unavailable due to query restrictions, limiting domain registration verification. The website is accessible without WAF or security challenges, providing a safe and trustworthy user experience.

U

Universidad CEU Cardenal Herrera

uchceu.es

67

Universidad CEU Cardenal Herrera is a private Catholic university based in Spain with campuses in Valencia, Alicante, and Castellón. It serves a diverse international student body from over 70 countries, offering higher education and research services. The university positions itself as a global campus with a strong academic reputation. Technically, the website employs a modern tech stack including jQuery, Slick carousel, Google Tag Manager, and Cookiebot for privacy compliance. The site is hosted behind Cloudflare, enhancing security and performance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the website is professional, well-structured, and GDPR compliant, reflecting a mature digital presence. The lack of WHOIS data limits domain legitimacy verification but the content and structured data support the institution's authenticity.

A

ACdP | Asociación Católica de Propagandistas

acdp.es

69

The Asociación Católica de Propagandistas (ACdP) is a Spanish non-profit organization dedicated to Catholic propagation and community engagement. The website serves as a digital platform to inform visitors about the association's mission and to facilitate donations. It targets the Spanish-speaking Catholic community and supporters. The organization maintains a moderate-sized online presence with active social media channels and a donation system integrated via GiveWP. Technically, the website is built on WordPress 6.7.1, leveraging popular plugins such as Yoast SEO for search optimization and Cookiebot for cookie consent management, indicating a reasonable level of digital maturity. The site uses Google Analytics and Google Tag Manager for visitor tracking and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, the absence of a publicly accessible privacy policy, terms of service, and security policy pages represents gaps in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a trustworthy and professional front for the ACdP organization, but it would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, adding incident response contacts, and improving accessibility standards.

U

Universidade de Vigo

uvigo.gal

62

The Universidade de Vigo is a public university located in Galicia, Spain, offering a wide range of undergraduate, postgraduate, and doctoral programs. It maintains a strong focus on innovation and internationalization, serving students, academic staff, researchers, and companies. The website reflects a well-established institution with comprehensive academic and institutional information, targeting a broad academic audience. Technically, the site is built on Drupal 8, leveraging modern web technologies including Google Analytics and Font Awesome, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, employs standard security headers, and anonymizes IPs in analytics, indicating a solid security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of malicious content or blocking mechanisms.

P

Pratiche.it S.r.l

pratiche.it

70

Pratiche.it S.r.l operates a leading online service platform in Italy specializing in the provision of official documents related to conservatory, land registry (catasto), Public Vehicle Registry (P.R.A.), and registry office (anagrafe) services. The website targets private individuals, professionals, and companies seeking quick and easy access to these documents online. The company positions itself as the number one service in its sector within Italy, offering a streamlined digital experience for document requests. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. Hosting is provided by Aruba S.p.A., a reputable Italian hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and accessibility. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses secure cookies for session management. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a strong privacy posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Pratiche.it presents a professional and trustworthy online presence with a solid foundation in security and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, improving accessibility, and adding terms of service to enhance legal clarity and user trust.

A

Actalis.com

actalis.com

69

Actalis.com is a digital trust services provider specializing in SSL certificates, enterprise security solutions, and partner programs. The company targets businesses and website owners seeking to secure their online presence with trusted digital certificates and signature services. The website demonstrates a professional and consistent brand image with clear service offerings and a focus on digital security. Technically, the site is built on the PrestaShop e-commerce platform, utilizing modern web technologies such as Google Tag Manager, Google reCAPTCHA, and Cookiebot for privacy compliance. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks some advanced security headers and a published security policy or incident response contact. The absence of WHOIS registration data reduces the domain trust score, though the website content and services appear legitimate. Overall, the site is well-structured and secure but would benefit from enhanced transparency in domain registration and security disclosures.

The National 911 Program website (911.gov) serves as the official U.S. government portal providing leadership, coordination, and resources related to 911 emergency services. It is managed under the National Highway Traffic Safety Administration (NHTSA) and targets public safety officials, emergency communication professionals, and the general public. The site offers comprehensive information on current projects, important issues, webinars, newsletters, and various resources to support and promote optimal 911 services nationwide. Technically, the website employs modern web technologies including HTML5, CSS3 with Tailwind CSS, JavaScript with Alpine.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. It uses HTTPS exclusively, ensuring secure communication. From a security perspective, the site follows best practices such as secure forms and encrypted connections. However, it lacks explicit security headers and a security.txt file, which could enhance its security posture. Privacy compliance is strong with a comprehensive privacy policy linked to the parent transportation department, though no cookie consent mechanism was detected. Overall, the website is trustworthy, professional, and authoritative, with no signs of malicious activity or content blocking. The lack of WHOIS data is typical for government domains and does not detract from its legitimacy. Strategic recommendations include adding security headers, implementing a cookie consent mechanism, and publishing incident response contacts to further strengthen security and compliance.

The website www.ems.gov represents the official online presence of the National Highway Traffic Safety Administration's Office of Emergency Medical Services (NHTSA OEMS). It serves as a comprehensive resource hub for emergency medical services professionals, government agencies, and the public, providing critical information, guidelines, and updates related to EMS systems across the United States. The site is well-branded with consistent government identity and offers a variety of resources including webinars, newsletters, and detailed issue areas relevant to EMS. Technically, the site employs modern web technologies such as Alpine.js and Tailwind CSS, ensuring good mobile responsiveness and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic, with a privacy policy linked from the parent transportation.gov domain but lacking a cookie consent mechanism. Overall, the site is trustworthy, professional, and authoritative, reflecting its government status.

The website trafficsafetymarketing.gov is an official U.S. government site managed by the National Highway Traffic Safety Administration (NHTSA), a division of the U.S. Department of Transportation. It serves as a centralized resource hub for traffic safety communication materials, campaigns, and research targeted at states, partner organizations, and highway safety professionals. The site provides comprehensive and timely behavioral and vehicle safety outreach initiatives, supported by strong government branding and trust signals. The content is highly relevant, professionally presented, and designed for a general audience with a focus on public safety. Technically, the site is built on Drupal 10 CMS, leveraging modern web technologies including Google Tag Manager and Google Analytics for tracking and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. HTTPS is enforced with excellent SSL configuration, ensuring secure communications. However, some security headers like CSP and X-Content-Type-Options could be improved for enhanced protection. From a security and compliance perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy policies and terms of service are clearly linked and comprehensive, though a cookie consent mechanism is not explicitly present. WHOIS data is unavailable due to .gov domain privacy policies, which is standard and justified for government domains. The overall security posture is strong, with recommendations to enhance header policies and consider a security.txt file for vulnerability disclosures. Overall, trafficsafetymarketing.gov is a trustworthy, authoritative government resource with excellent content quality and a solid technical foundation. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its posture and user trust.

The U.S. Department of Transportation (DOT) is a federal government agency responsible for overseeing national transportation policy, safety, infrastructure, and innovation. The website serves as an official portal providing comprehensive information and resources to the American public, businesses, and government stakeholders. It maintains a strong market position as the authoritative source for transportation-related regulations and initiatives in the United States. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Google Analytics, Google Tag Manager, and the Digital Analytics Program for data collection and performance monitoring. The site is mobile-optimized, accessible, and demonstrates good SEO practices. It integrates multiple search forms powered by USA.gov and includes social media channels for broader engagement. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and publishes a vulnerability disclosure policy. While explicit security headers are not visible in the provided data, no vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR considerations, though a cookie consent mechanism is not evident. Overall, the DOT website presents a low-risk profile with high trustworthiness, professional content, and robust business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response contacts, and adding a security.txt file to further improve security posture and transparency.

U

Upsun

upsun.com

72

Upsun is a technology company offering a highly flexible Platform as a Service (PaaS) designed to empower developers and enterprises with production-perfect cloud application environments. Formerly known as Platform.sh, Upsun positions itself as a developer-friendly cloud platform supporting multiple frameworks and languages, with predictable and customizable pricing models. The company targets software development teams and businesses seeking reliable and scalable cloud hosting solutions. Technically, the website is built on modern frameworks such as Gatsby and React, optimized for performance, mobile responsiveness, and SEO. The platform supports major cloud providers including AWS, Azure, and GCP, indicating a robust and scalable infrastructure. Security-wise, Upsun employs HTTPS with strong Content Security Policies and domain transfer protections, though DNSSEC is not enabled. The site integrates multiple analytics and marketing tools with appropriate cookie consent mechanisms, reflecting good privacy compliance. Overall, Upsun demonstrates a mature digital presence with strong business credibility and technical sophistication.

A

Aha!

aha.io

77

Aha! is a leading SaaS provider specializing in product development software, trusted by over one million product builders worldwide. Their comprehensive suite includes tools for roadmapping, customer interview management, idea capture, project management, and agile delivery, enhanced by a purpose-built AI assistant to accelerate workflows. The company positions itself as the world's #1 product development software, serving product teams across various industries with a focus on delivering lovable products efficiently. Technically, the website leverages modern web technologies including React, Lottie animations, and integrates with Contentful for asset management. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. SEO best practices are evident through comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and employs secure form handling and event tracking. However, explicit security headers and a public security policy are absent, indicating room for improvement in transparency and defense-in-depth. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The lack of public WHOIS data is consistent with privacy protection practices common among large SaaS providers. No critical security issues or content safety concerns were identified, positioning Aha! as a reliable and secure platform for product development teams.

E

EBSCO Information Services, Inc.

opendissertations.org

50

EBSCO Open Dissertations is a service provided by EBSCO Information Services, Inc., focused on increasing the visibility and citation of electronic theses and dissertations (ETDs) from academic institutions. The platform offers a searchable database that drives traffic to institutional repositories, supporting academic research dissemination. The website is professionally designed, leveraging WordPress CMS and modern web technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong, with clear links to comprehensive privacy and cookie policies and a GDPR-compliant cookie consent mechanism. Overall, the site reflects a mature, credible academic service with a strong brand association to EBSCO.

E

EBSCO Information Services

ebscousergroup.org

46

The EBSCO User Group website serves as a professional platform for an annual event targeting academic library professionals across North America. It facilitates networking, knowledge sharing, and engagement with EBSCO's technology solutions. The site is well-branded, consistent, and provides comprehensive event information including schedules, registration, and session submissions. The parent company is EBSCO Information Services, a recognized entity in the education sector. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted by InMotion Hosting. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie banner. No direct contact emails or phone numbers are published, but a contact form is available. Overall, the site is trustworthy, professional, and safe for its intended audience.

The website at ileu.org is currently inaccessible to the public, returning a 403 Forbidden error page. This indicates that access is restricted or blocked, preventing any meaningful content or business information from being displayed. The domain is registered since 2000 with Tucows Domains Inc. and uses SiteGround nameservers for hosting. However, no privacy policies, cookie notices, terms of service, contact information, or business descriptions are available on the site. The lack of accessible content and security policies limits the ability to assess the company's market position or services. Technically, the site lacks visible security headers and DNSSEC is not enabled, which are areas for improvement. Overall, the site appears to be either under maintenance, restricted, or improperly configured for public access.

Fondation CHUV is a Swiss non-profit organization dedicated to supporting the Centre hospitalier universitaire vaudois (CHUV) through philanthropy focused on medical research, training, and patient care. The foundation plays a vital role in mobilizing community support to advance healthcare innovation and excellence in the Vaud region. The website reflects a mature digital presence with a professional design, clear navigation, and strong branding aligned with its healthcare mission. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and Cloudflare services to ensure performance and security. Security posture is strong with HTTPS enforcement and bot protection, though explicit security policies and incident response contacts are not published. Overall, the foundation demonstrates high business credibility and trustworthiness with transparent contact information and social media integration.

The Greek Energy Forum is a non-for-profit organization established in 2013, focusing on the energy sector in Greece and the wider Southeast European region. It offers services such as hosting events, publishing research and opinions, and providing memberships to energy professionals and stakeholders. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Cookiebot for cookie consent, and Google Analytics for tracking. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data, and the login form relies on client-side validation only. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit GDPR compliance statements or data protection officer contact found. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy from a content perspective but would benefit from improved security and transparency regarding domain registration.

B

Bigbank AS

bigbank.fi

68

Bigbank Suomi Oy operates as a consumer finance provider in Finland, specializing in personal loans and deposit products. The company is part of the larger Bigbank AS group, which has a strong presence in the Baltic and Nordic regions. The website is professionally designed, providing clear information and easy access to loan applications and customer support. The target audience is Finnish consumers seeking straightforward online financial services. Technically, the site uses modern frameworks such as Nuxt.js and integrates hCaptcha for bot protection, indicating a mature digital infrastructure. Security is robust with HTTPS, security headers, and no detected vulnerabilities, although a dedicated security policy and incident response contact are absent. Overall, the site demonstrates a high level of business credibility and compliance with privacy regulations.

The website bigbank.lv is currently inaccessible due to a Cloudflare security challenge page that blocks direct access to the site's content. This challenge page includes a Turnstile captcha verification step, indicating active protection against automated access or potential attacks. Due to this, no direct content, business information, or contact details are available for analysis. The domain is active and uses Cloudflare DNS services, consistent with a legitimate financial institution operating in Latvia. However, the lack of accessible content limits the ability to assess the website's privacy policies, security posture, or business credibility in detail.

B

Bearstech

bearstech.com

68

Bearstech is a French SCOP company specializing in hosting, managed services, DevOps consulting, and cloud infrastructure management. Established in 2003, it positions itself as an expert in critical infrastructure management with a strong emphasis on open source software and sustainable digital practices. The company offers a comprehensive portfolio including dedicated hosting, multi-cloud dashboards, SaaS applications, and GitLab SaaS hosting, targeting businesses requiring reliable and secure IT infrastructure solutions. Technically, the website is built on Drupal 10 with modern responsive design and employs best practices such as lazy loading images and structured data for SEO. The presence of Google Tag Manager and Analytics indicates moderate user tracking with a privacy-compliant cookie consent mechanism. Hosting is likely provided by OVH, consistent with the domain registrar and service offerings. Security posture is solid with HTTPS enforced, domain status protections, and cookie consent, though there is room for improvement by enabling DNSSEC and publishing explicit security policies and incident response contacts. No vulnerabilities or suspicious content were detected. The domain WHOIS data aligns well with the business claims, showing a mature and legitimate entity. Overall, Bearstech demonstrates a professional, trustworthy, and technically mature online presence suitable for its target market of enterprises seeking expert IT infrastructure services.

P

PCFH Studio - Pour un numérique plus éthique

pcfh.studio

64

PCFH Studio is a French digital solutions studio focused on creating, improving, and growing ethical, user-friendly, and emancipatory digital solutions. The website content is professionally presented in French, targeting organizations aware of contemporary digital challenges. The technical infrastructure is built using the Astro framework and employs Matomo analytics with Do Not Track enabled, indicating a privacy-conscious approach. However, the absence of explicit privacy and cookie policies and lack of contact information limit transparency and user trust. The security posture is moderate with HTTPS implied but missing explicit security headers and policies. Overall, the website is accessible and well-designed but would benefit from enhanced privacy compliance and clearer business contact details.

D

Alla nyheter från Dagens Media

dagensmedia.se

71

Dagens Media is a Swedish media news platform focused on marketing and media industry professionals. It operates as a business news site providing aggregated news and industry insights. The website is branded consistently with Bonnier News, a major media group in Sweden, indicating a strong market presence. Technically, the site uses modern web technologies including React and Next.js, with integrated consent management via Didomi to comply with GDPR requirements. Security posture is strong with HTTPS and standard security headers implemented, though explicit privacy and terms pages are not found in the provided content. No contact information or WHOIS data for the exact subdomain was found, but the site appears legitimate and professional. Overall, the site is well-structured, mobile-optimized, and trustworthy for its target audience.

R

RTL AdAlliance

rtl-adalliance.com

63

RTL AdAlliance operates as a specialized advertising sales house connecting international and local brands to European audiences through premium video content. The company leverages advanced advertising technology and a self-service platform to facilitate digital and addressable TV advertising campaigns. Positioned under the RTL Group umbrella, RTL AdAlliance holds a strong market position with access to leading European media brands. The website reflects a professional and consistent brand image, targeting advertisers and publishers with a clear value proposition centered on simplicity and effectiveness. Technically, the website is built on Drupal 10 and integrates modern JavaScript libraries such as Anime.js, GSAP, and ScrollMagic, alongside Piwik PRO for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly detected. The domain is registered with EuroDNS S.A. and shows no signs of privacy protection or suspicious registration patterns, aligning well with the business's founding date and market presence. From a security perspective, the site enforces HTTPS and uses secure cookie settings in analytics. However, it lacks published security policies or incident response contacts, and DNSSEC is not enabled, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. No critical vulnerabilities or malicious content were detected, and the site maintains a high trustworthiness rating. Overall, RTL AdAlliance presents a credible, professional, and secure online presence suitable for its business model. Strategic recommendations include enhancing DNS security with DNSSEC, publishing formal security and incident response policies, and implementing additional security headers to further strengthen the security posture.

B

Berlingo Media

berlingomedia.se

53

Berlingo Media is a creative advertising agency based in Stockholm, Sweden, specializing in disruptive and alternative outdoor marketing solutions. Founded in 2020, the company offers a range of unique advertising formats including large-scale outdoor billboards, facade projections, mobile street TV advertising, and guerrilla marketing campaigns. Their market position is that of a niche player focused on innovative out-of-home advertising in the Nordic region. The website reflects a modern and professional digital presence built on Webflow, leveraging advanced animation libraries and Google Tag Manager for analytics. Security measures include HTTPS, CAPTCHA protection on contact forms, and a comprehensive cookie consent mechanism, although some security headers could be improved. Privacy compliance is strong with detailed policies and GDPR-aligned consent. Overall, the website and domain registration data indicate a legitimate, small-sized business with a clear focus and good technical maturity.

The website nenda.com currently returns a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. There is no accessible content, metadata, or business information available on the site. The domain is registered with GoDaddy.com, LLC since 2002, showing a long registration history, but the lack of accessible content severely limits the ability to assess the business or its services. Technically, the site uses Cloudflare DNS but does not have DNSSEC enabled, and no security headers or privacy policies are present. Overall, the site is inaccessible and lacks transparency, which negatively impacts trust and credibility.

C

Channel Factory

channelfactory.com

72

Channel Factory is a media technology company specializing in AI-powered video advertising solutions primarily for YouTube and social media platforms. Their platform focuses on brand suitability, contextual targeting, and media optimization to deliver superior ROI for advertisers. The company holds recognized certifications such as the YouTube Measurement Program badge and kidSAFE Seal Program, reinforcing its credibility in the digital advertising space. The website demonstrates a mature digital presence with advanced technical infrastructure including modern JavaScript libraries, HubSpot integration, and comprehensive cookie consent management. Security posture is strong with HTTPS enforced and bot management via Cloudflare, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the company presents a professional, trustworthy image with extensive business and technical maturity.

S

SkiStar

skistar.com

68

SkiStar is a prominent hospitality and tourism company specializing in ski vacations in Sweden and Norway. The website offers comprehensive information and booking services for ski resorts, targeting ski enthusiasts and travelers seeking winter holidays. The company holds a strong market position in the Scandinavian ski resort sector, providing key services such as accommodation bookings, ski school reservations, and vacation packages. The website is professionally designed with excellent content quality and user experience, reflecting a mature digital presence.

V

Viaplay Radio

viaplayradio.se

64

Viaplay Radio operates as a Swedish media streaming platform offering 20 radio stations and podcasts accessible via their website and mobile apps. The service targets Swedish-speaking audiences interested in diverse music genres and radio content. The website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and OneTrust for cookie consent. SEO is well implemented using Yoast SEO. Security posture is moderate with HTTPS enabled and some security hardening plugins in use, but lacks comprehensive security headers and explicit privacy and terms of service pages. The absence of WHOIS data for the exact domain queried raises some concerns about domain registration legitimacy, though the site content and branding appear professional and consistent. Overall, the platform provides a good user experience with safe content suitable for general audiences.

J

JCDecaux

jcdecaux.se

60

JCDecaux is a well-established enterprise operating in the transportation sector, specializing in outdoor advertising and street furniture services. The company maintains a professional and consistent online presence with a website built on WordPress, leveraging modern technologies such as Matomo analytics, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-optimized for performance and mobile devices, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional business with a strong market position in outdoor advertising.

E

Expressen AB

expressen.se

72

Expressen AB operates one of Sweden's leading news websites, www.expressen.se, providing comprehensive coverage of news, sports, and entertainment. Founded in 1944 and part of the Bonnier News group, Expressen targets a broad Swedish audience with high-quality journalistic content. The website demonstrates a mature digital presence with modern web technologies and integrated video content. Privacy and ethical standards are well addressed through detailed policies and a consent management platform, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and privacy SDKs in use, though some security headers could be improved. Overall, Expressen maintains a strong market position as a trusted media outlet in Sweden.

B

Bonnier News Business

di.se

74

Dagens industri (di.se) is a leading Swedish business news website operated by Bonnier News Business. It provides up-to-date news, market analysis, and in-depth reports targeting business professionals and investors in Sweden. The site features real-time stock data, video content, and comprehensive news coverage relevant to the financial markets and business community. Technically, the website leverages modern web technologies including Google Tag Manager, Didomi Consent Management Platform, and WebSocket for real-time data, hosted on Google Cloud Platform. The site demonstrates good digital maturity with responsive design and effective consent management for GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a large audience in the Swedish media sector.

I

INTE BARA POST AB

intebarapost.se

70

Inte Bara Post AB is a Swedish full-service office management and logistics company offering a range of services including courier (Bud), event management, facility maintenance (Allt-i-allo), staffing (Bemanning), and food and beverage services (Skafferi). The company positions itself as an environmentally conscious leader in its sector, emphasizing sustainability with commitments like Net Zero 2040 and ISO certifications. Their target audience includes businesses of various sizes seeking flexible office management solutions. The website reflects a professional and consistent brand image with clear service offerings and a strong focus on customer satisfaction and environmental responsibility. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Typekit fonts, Swiper.js for sliders, and Google Tag Manager for analytics and marketing tags. The site is well-optimized for mobile devices, loads quickly, and includes accessibility features. Cookie consent management is implemented via CookieTractor, ensuring GDPR compliance. The site integrates multiple tracking and advertising services including Google Analytics, Facebook Pixel, Google Ads, and LinkedIn Insight Tag. From a security perspective, the site enforces HTTPS and uses Cloudflare for CDN and WAF services, although explicit security headers like Content-Security-Policy and X-Frame-Options are not detected. No vulnerabilities or exposed sensitive data were found in the HTML content. However, the absence of a published security policy or incident response contact information is noted. The WHOIS lookup for the domain www.intebarapost.se failed, indicating a possible domain registration anomaly or subdomain usage, which slightly reduces trustworthiness. Overall, the website presents a credible and professional business with good technical implementation and privacy compliance. The main risk lies in the unclear domain registration status, which should be investigated further. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and clarifying domain registration details to improve trust and compliance.

N

Niklas Palmklint

palmklint.se

46

Niklas Palmklint operates a professional photography business based in Stockholm, Sweden, specializing in portrait, product photography, and image bank creation for businesses. The website presents a well-structured portfolio and service offering, targeting businesses and individuals seeking authentic and high-quality photographic content. The digital infrastructure is built on WordPress with modern plugins and SEO tools, hosted by ODERLAND, a Swedish registrar and hosting provider. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting forms, though some security headers and policies could be improved. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious activity or content blocking.

Awardly is a Swedish-based technology platform founded in 2023 that provides a comprehensive solution for managing competitions and jury work, including project management support. The website is primarily in Swedish with an English alternate version, targeting organizations or individuals involved in competition management. The business operates in a niche market with a small company size and a focused service offering. Technically, the website is built using BaseKit CMS and leverages external resources hosted on misssite.com domains. The site demonstrates good design quality and mobile optimization but lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited, with no privacy policy or terms of service pages found, though a cookie consent mechanism is implemented. Contact information and social media presence are absent, which may impact user trust and engagement. Overall, the website is functional and professional but would benefit from improvements in privacy, security, and contact transparency.

S

Skultuna

skultuna.com

75

Skultuna is a well-established Swedish heritage brand founded in 1607, operating an international e-commerce store specializing in home decor, jewelry, and figurines. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Klaviyo for marketing and Lucky Orange for user behavior analytics. The site demonstrates good digital maturity with responsive design, clear navigation, and GDPR compliance through a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and secure payment methods, though some security headers could be improved and explicit security policies published. Overall, the website presents a professional and trustworthy online retail experience with moderate user tracking and good privacy practices.

Cavalleri Comunicazione is a small Italian communication agency specializing in communication strategies, brand and product communication, public relations, digital PR, international press office, events, fairs, and media planning. The company targets businesses and organizations seeking professional communication services and maintains a consistent and professional online presence. The website is built on WordPress using common frameworks and libraries such as Bootstrap and jQuery, with SEO optimization via Yoast and cookie compliance through Iubenda. The technical infrastructure is modern and mobile-optimized, though some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure channels. WHOIS data is missing or privacy protected, which slightly reduces trust but is offset by the professional site and compliance features. Overall, the website is trustworthy and well-maintained, suitable for its business purpose.

N

Nimbus Group GmbH

rosso-acoustic.com

52

Rossoacoustic is a specialized brand under the Nimbus Group GmbH, focused on manufacturing highly flexible shading and acoustically effective room division systems primarily for office and object spaces. The website presents a professional and consistent brand image with clear product portfolios and project showcases targeting B2B customers in the manufacturing and office solutions sector. The technical infrastructure leverages modern JavaScript libraries and marketing tools such as Google Tag Manager and HubSpot, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, supporting the Nimbus Group's market presence in Germany.

N

Nimbus Group GmbH

nimbus-mockup.com

48

Nimbus Group GmbH operates a specialized showroom and manufacturing business focused on innovative LED lighting and acoustic room partitioning systems. The company targets B2B customers seeking advanced lighting solutions and acoustic design products, positioning itself as a niche player with a strong brand presence in Germany. The website serves as a digital showroom and brand portal, linking to related Nimbus and Rossoacoustic brands. Technically, the website uses a modern JavaScript stack including jQuery, Fotorama, and Pikaday, integrated with marketing and analytics tools such as Google Tag Manager and HubSpot. The site is mobile-optimized and well-structured, though no CMS or hosting provider details are evident. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Cookie consent is implemented via OneTrust, indicating some GDPR compliance effort, but no privacy policy or terms of service are published. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is professional and trustworthy but could improve compliance and security posture by publishing privacy and security policies, enabling DNSSEC, and adding security headers. These steps would enhance user trust and reduce risk exposure.

N

Nimbus Group GmbH

nimbus-group.com

52

Nimbus Group GmbH is an established German manufacturing company specializing in innovative LED lighting and acoustic room division systems under the brands Nimbus, Rosso, and Rossoacoustic. The company operates internationally with a strong presence in Stuttgart, Germany, where all products are developed and manufactured. Their business model focuses on B2B and B2C markets, offering energy-efficient lighting solutions and flexible acoustic systems for residential and commercial spaces. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website employs modern JavaScript libraries such as jQuery, Fotorama, and Moment.js, alongside marketing and analytics tools like Google Tag Manager and HubSpot. The site is mobile-optimized and performs moderately well, though SEO could be improved due to the noindex,nofollow robots meta tag on the homepage. No CMS is explicitly detected, suggesting a custom-built platform. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and advanced security headers. There is no publicly available security policy or incident response information, which could be improved to enhance trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via OneTrust, supporting GDPR adherence. Overall, Nimbus Group GmbH presents a trustworthy and professional online presence with room for technical and security enhancements. Strategic improvements in security policies, DNSSEC implementation, and SEO would strengthen their digital maturity and risk posture.

T

TECNOLUMEN

tecnoline.de

42

TECNOLINE is a specialized manufacturer and retailer of high-quality fittings, door handles, and switches inspired by renowned designers from Bauhaus and other design eras. The company emphasizes authentic, detail-conscious manufacturing of original designs by famous designers such as Walter Gropius and Wilhelm Wagenfeld. The website positions TECNOLINE as a niche market leader catering to architects, designers, and retailers seeking premium designer hardware. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Maps and Matomo analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. Overall, the website is trustworthy and professional, with room for improvement in security documentation and contact transparency.

E

EBSCO Industries, Inc.

dynamed.com

68

DynaMed is a leading clinical decision support platform operated by EBSCO Industries, Inc., providing evidence-based medical content, alerts, drug resources, and continuing education primarily targeting healthcare professionals and institutions. The platform is subscription-based and recognized for its authoritative medical guidance, holding prestigious awards such as the Best in KLAS Clinical Decision Support recognition. Technically, the website employs modern web technologies including React, JavaScript, and integrates advanced analytics and consent management tools such as Gainsight PX, Amplitude, Datadog RUM, and Osano CMP, reflecting a mature digital infrastructure with good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or registration issues, but the website's branding and external references confirm its association with a reputable enterprise. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience.

A

ARMSTARK®

armstark.de

56

ARMSTARK® is a well-established German company specializing in wellness products such as whirlpools, saunas, swim spas, and infrared cabins. The company positions itself as a market leader in Germany with over 30 years of experience, targeting customers seeking wellness solutions for home use. The website is powered by TYPO3 CMS and hosted on Hetzner infrastructure, indicating a professional technical setup. The site employs modern technologies including Cookiebot for consent management and Google Tag Manager for analytics and marketing integrations. Security posture is solid with HTTPS enforced and consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is strong, with detailed cookie disclosures and GDPR-aligned consent options. Overall, the website presents a professional and trustworthy image with good content quality and user experience.

S

Shoplazza

shoplazza.dev

64

Shoplazza is an e-commerce platform providing a developer portal focused on enabling app and theme development. The website offers comprehensive documentation, APIs, and tools to support developers and store administrators in building and managing e-commerce stores efficiently. The platform positions itself as a modern and developer-friendly solution in the e-commerce market, targeting developers and merchants seeking customization and integration capabilities. Technically, the site is built on modern web technologies including React and is hosted on the ReadMe.io platform, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS and includes standard security headers, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and dedicated security or incident response policies, which are areas for improvement. Overall, the site is professional, trustworthy, and well-suited for its target audience, with recommendations to enhance privacy compliance and security transparency.

H

Hapag-Lloyd Cruises

hlc-agentcompass.com

55

Hapag-Lloyd Cruises AGENT COMPASS is a specialized B2B platform designed to facilitate cruise bookings and provide sales materials to travel agents. The website reflects a mature digital presence with a focus on user-friendly login and registration processes, supported by a comprehensive cookie consent mechanism compliant with GDPR. The platform integrates modern JavaScript libraries and Google Tag Manager for analytics, ensuring effective tracking and marketing capabilities. Security posture is solid with HTTPS enforced and secure form handling, although some security headers could be improved. Overall, the site demonstrates a professional and trustworthy environment aligned with the cruise industry's standards.

T

Top-Light GmbH & Co.KG

top-light.shop

46

Top-Light GmbH & Co.KG operates a professional B2B e-commerce platform specializing in high-quality lighting products for indoor and outdoor applications. The company is well-established in Germany, with a strong market position supported by multiple design and quality awards. Their website targets professional dealers and offers a comprehensive catalog of lighting solutions, emphasizing handcrafted production and high standards. Technically, the site uses a mix of established JavaScript libraries and frameworks, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS assumed, but lacks explicit security headers and published security policies. Privacy compliance is mostly met with a comprehensive privacy policy, though cookie consent mechanisms are missing. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

A

Agicap

agicap.com

69

Agicap is a France-based SaaS company specializing in cash flow management software tailored for SMBs and mid-market companies across Europe. The platform offers comprehensive treasury management, accounts payable and receivable automation, and banking & ERP connectivity, positioning itself as a market leader with over 8000 clients and a 98% satisfaction rating. The website reflects a mature digital presence with modern technologies such as React, Gatsby, and integrations with major analytics and marketing platforms. Security posture is strong, with GDPR and ISO/IEC 27701 compliance, encrypted data storage on Google Cloud, and TLS for data in transit. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, well-structured, and trustworthy, with clear business and contact information.

C

Commune de Chalais

chalais.ch

50

The website www.chalais.ch is the official online presence of the Commune de Chalais, a small municipal government entity in Valais, Switzerland. It serves as an information portal for residents and visitors, providing access to local news, administrative services, community events, and partner resources. The site is primarily in French and targets local citizens and tourists interested in the region. The business model is public service with no commercial intent, focusing on transparency and community engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.6.4 and Nivo Slider for UI elements, alongside Google Analytics and Google Tag Manager for visitor tracking. The site is served over HTTPS with a valid SSL configuration, but lacks modern security headers and uses outdated libraries that pose potential security risks. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and consistent branding. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms, indicating some privacy awareness. However, it lacks explicit security policies, incident response information, and modern security headers. The use of outdated JavaScript libraries introduces vulnerabilities that should be addressed. No critical security issues or blocking mechanisms were detected, and the domain registration aligns well with the website's claims, supporting legitimacy. Overall, the website is a trustworthy and functional municipal portal with room for technical and security improvements. Strategic recommendations include updating legacy libraries, implementing security headers, publishing security and incident response policies, and enhancing privacy compliance to better protect users and improve trust.

F

Fundaziun svizra per uffants cun paralisa cerebrala

cerebral.ch

51

Fundaziun Cerebral is a well-established Swiss non-profit foundation dedicated to supporting children and families affected by cerebral palsy. With over 60 years of history and more than 9700 beneficiaries, it provides essential services including specialized mobility support, therapeutic interventions, and recreational opportunities. The foundation operates primarily through donations and public support, targeting individuals with cerebral palsy and their families across Switzerland. The website is multilingual, with the analyzed page in Romansh, and offers clear donation and contact information, reflecting a transparent and trustworthy organization. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and Google Tag Manager for analytics. The site is mobile-optimized and presents good design and navigation clarity. Security-wise, the site uses HTTPS and obfuscates email addresses to prevent spam, but lacks explicit security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a comprehensive privacy policy linked in German, indicating GDPR awareness. Overall, the website demonstrates a solid security posture with no visible vulnerabilities or blocking mechanisms. The domain registration details align well with the organization's claims, supporting legitimacy. The site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable and professional online presence for the foundation.