Security Directory

N

Nästa Steg

nasta-steg.se

65

Nästa Steg is a Swedish healthcare informational website dedicated to providing comprehensive information about lung cancer, including symptoms, diagnosis, treatment options, and patient rights. The site targets patients and individuals seeking trustworthy medical information in Swedish, English, and Arabic. It operates as a niche educational resource within the healthcare sector in Sweden, founded in 2019. The website demonstrates a consistent and professional brand presence with good content quality and clear navigation.

The website ingavattkoppor.nu is a professionally developed healthcare information portal operated by MSD Sverige AB, a subsidiary of Merck & Co., Inc. It focuses on educating Swedish parents about chickenpox, its symptoms, transmission, and vaccination options. The site includes a vaccination center locator and provides clear, relevant content targeted at parents and guardians. The business model is informational and promotional, supporting public health awareness with backing from a major pharmaceutical company. Technically, the site uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, and is likely built on WordPress. The site is mobile optimized, accessible, and SEO friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. The domain registration is consistent and legitimate, registered since 2019 with no privacy protection, aligning with the business claims. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

M

Merck Sharp & Dohme AB

hpvvaccin.se

51

Hpvvaccin.se is a professionally maintained Swedish website operated by Merck Sharp & Dohme AB (MSD) focused on educating the public about HPV and vaccination options. The site serves as an informational platform targeting the general Swedish population, including parents, young men and women, and healthcare professionals. It provides comprehensive content on HPV risks, vaccination programs, and private vaccination options, supported by MSD's branding and corporate presence. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, ensuring good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and formal policies could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy linked to MSD's main site. Overall, the site is trustworthy, well-branded, and aligned with MSD's healthcare business in Sweden.

M

MSD Sverige

msdinsight.se

63

MSDinsight.se is a professional healthcare portal operated by MSD Sverige, a subsidiary of Merck & Co., Inc. The website serves as a comprehensive resource for healthcare professionals in Sweden, offering therapy-focused information, product details, patient information, and educational webinars. The site is well-branded with MSD's official logos and maintains a consistent presence across multiple social media platforms, reinforcing its market position as a trusted pharmaceutical information provider. Technically, the website is built on WordPress VIP with a modern tech stack including Yoast SEO, Google Tag Manager, and OneTrust for cookie consent. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with no significant technical issues detected. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a cookie consent mechanism compliant with GDPR. No vulnerabilities or exposed sensitive data were found in the analysis. However, the absence of explicit security policy pages and incident response contacts suggests room for improvement in transparency and preparedness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern is the lack of WHOIS data for the domain www.msdinsight.se, which may warrant further investigation to confirm domain registration legitimacy. Strategic recommendations include enhancing contact information visibility, publishing security policies, and maintaining regular audits of third-party scripts to sustain security posture.

M

MSD Pharma Hungary Kft.

hpvoltas.com

54

The website hpvdoktor.hu is an authoritative healthcare information portal operated by MSD Pharma Hungary Kft., focusing on HPV vaccination for seventh-grade children within Hungary's National Immunization Program. It provides detailed educational content, FAQs, and official references to support parents and healthcare professionals. The site is well-positioned in the healthcare sector, targeting Hungarian families and medical practitioners with a clear business model centered on public health education and vaccine promotion. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. It integrates Google Tag Manager and OneTrust for analytics and cookie consent, reflecting a mature digital infrastructure. Accessibility and user experience are well addressed, with a professional and consistent design. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact, which could enhance trust and preparedness. Privacy compliance is strong, with visible cookie consent and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable resource for its audience. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and further enhancing accessibility features to maintain and improve its security posture and user trust.

M

MSD Pharma Hungary Kft.

hpvdoktor.hu

54

The website hpvdoktor.hu is a professionally developed healthcare information portal operated by MSD Pharma Hungary Kft., focusing on human papillomavirus (HPV) education and vaccination awareness. It serves the Hungarian public, including parents and young people, providing comprehensive information about HPV, related cancers, vaccination programs, and personal stories. The site is well-positioned as a trusted source in the Hungarian healthcare market, supported by a reputable pharmaceutical company.

M

MSD Animal Health Magyarország

msd-animal-health.hu

73

MSD Animal Health Magyarország operates a localized Hungarian website providing information and services related to animal health products. The site targets multiple audiences including veterinary professionals and animal owners, offering product details, educational content, and an online ordering platform. The business is positioned as a local branch of the global MSD Animal Health company, with a medium-sized presence in Hungary since 2020. The website is professionally designed with consistent branding and good content quality focused on healthcare for animals. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics 4, and implements cookie consent via OneTrust. Security posture is strong with HTTPS and standard security headers, though explicit privacy and security policies are missing. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.

K

KNRB

knrb-formulieren.nl

43

The KNRB formulieren website serves as an official portal for the Koninklijke Nederlandse Roeibond, providing essential forms and resources to the Dutch rowing community. It is positioned as a non-profit sports federation resource hub, targeting members, volunteers, and affiliated clubs. The site maintains consistent branding aligned with KNRB and offers clear contact information, enhancing its credibility. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, it lacks advanced security headers and visible privacy or cookie policies. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but misses several best practices such as security headers and formal privacy compliance documentation. No critical vulnerabilities or suspicious elements were detected, indicating a generally secure posture suitable for its purpose. Overall, the website is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

O

Odido

odido.nl

66

Odido is a Dutch telecommunications provider offering mobile subscriptions, internet, TV, and fixed telephony services primarily targeting consumers in the Netherlands. The website presents a professional and consistent brand image with clear navigation and comprehensive service offerings. The technical infrastructure includes modern web technologies, analytics, and performance monitoring tools, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and compliant with GDPR, providing a good user experience and business credibility.

K

KNRB

roeien.nl

60

Roeien.nl is the official website of the Koninklijke Nederlandse Roeibond (KNRB), the Dutch national rowing federation. It serves as a comprehensive platform for news, stories, team information, event calendars, and partner promotions related to rowing in the Netherlands. The site targets rowing enthusiasts, athletes, clubs, and supporters of TeamNL Roeien, positioning itself as a key information and community hub within the Dutch rowing ecosystem. The business model is non-profit and partnership-driven, emphasizing sport promotion and community engagement. Technically, the website is built on WordPress, leveraging modern web technologies such as Google Tag Manager and Google Fonts. The site demonstrates good mobile optimization, clear navigation, and solid SEO practices, although some accessibility features could be enhanced. Performance is moderate, with asynchronous loading of scripts to improve user experience. From a security perspective, the site uses HTTPS but lacks advanced security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. No vulnerabilities or suspicious activities were detected. WHOIS data confirms a consistent and legitimate domain registration dating back to 1999, reinforcing trustworthiness. Overall, Roeien.nl is a professional, trustworthy, and content-rich website serving the Dutch rowing community effectively. Strategic improvements in security headers and privacy consent would further enhance its compliance and security posture.

M

Malongo

malongo.com

61

Malongo is a French coffee roasting company established in 1934, specializing in organic and fair-trade coffee products. The company positions itself as a leader in the French market for ethically sourced coffee, offering a range of products including coffee beans, ground coffee, dosettes, and coffee machines. Their e-commerce platform is built on PrestaShop integrated with WordPress, supporting multiple languages and featuring rich multimedia content and marketing integrations. The website demonstrates good design quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and use of modern marketing and analytics tools, though there is room for improvement in security headers and explicit privacy documentation. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, the website is professional and trustworthy, serving a broad audience of coffee consumers with a focus on organic and fair-trade products.

Swisscommunes.ch is a specialized digital solutions provider targeting Swiss communes and local governments. Their offerings include document publication and archiving, parking permits, and room rental management, emphasizing simplicity, autonomy, and cost-effectiveness. The business operates in a niche market with a clear focus on municipal digital services, supported by a small-sized company, Gilston Digital SA. The website is professionally designed with consistent branding and includes trust signals such as customer testimonials and Swiss Made Software certification. Technically, the site is built on WordPress with modern libraries and frameworks, including Bootstrap and Matomo analytics, ensuring a good user experience and privacy-conscious tracking. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its target audience, with room for improvement in privacy documentation and security transparency.

S

SwissCenter

swisscenter.com

59

SwissCenter is a Swiss-based web hosting and datacenter service provider with a long-standing presence since 1995. The company offers a range of hosting solutions including shared web hosting, dedicated servers, server housing, datacenter services, and hosted Exchange email solutions, targeting businesses and professionals seeking reliable Swiss-quality internet services. The website is professionally designed, primarily in French, and showcases key services and customer references from reputable companies, reinforcing its market position as a trusted hosting provider. Technically, the website employs a modern JavaScript stack including jQuery, LayerSlider, and FancyBox, delivering a functional and visually appealing user experience. While mobile optimization and accessibility are basic, the site maintains good SEO practices and performance. Hosting appears to be managed internally with a Swiss datacenter focus, emphasizing data locality and performance with SSD storage and SSL certificates via Let's Encrypt. From a security perspective, the site enforces HTTPS and supports email security standards like DKIM. However, no explicit security headers were detected in the HTML source, and no published security or incident response policies were found. The cookie consent mechanism is present and functional, but privacy policy documentation is lacking or not easily discoverable. WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site and business references. Overall, SwissCenter presents a credible and professional hosting business with solid technical infrastructure but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

M

MSD Manuals

msdmanuals.com

69

MSD Manuals is a globally recognized provider of comprehensive medical reference information, serving doctors, students, consumers, and veterinarians. Established in 1899, the company offers authoritative medical content and educational resources, positioning itself as a trusted leader in healthcare information. The website reflects a mature digital presence with modern technologies such as Next.js and Sitecore hosting, ensuring fast performance and excellent mobile optimization. Security posture is generally good with HTTPS and standard tracking tools implemented, though explicit security headers and privacy policies are not clearly present in the analyzed content. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall brand and content quality indicate a legitimate and professional operation. Strategic improvements in privacy compliance and security transparency would enhance trust and compliance.

M

Merck Sharp & Dohme (Australia) Pty Limited

mymsd.com.au

63

myMSD is a professional healthcare information portal operated by Merck Sharp & Dohme (Australia) Pty Limited, targeting Australian healthcare professionals. The site provides access to product information, therapy area resources, clinical trials, and treatment hubs, positioning itself as a trusted resource in the Australian pharmaceutical healthcare market. The website is well-branded, consistent, and clearly intended for a professional audience, with strong compliance to Australian healthcare regulations and privacy standards. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, New Relic monitoring, and Janrain authentication. It is hosted on a premium platform (WordPress VIP) and uses multiple CDNs and third-party services to optimize performance and user experience. The site is mobile-optimized, accessible, and SEO-friendly, with good navigation and content structure. From a security perspective, the site enforces HTTPS, implements privacy and cookie policies with consent mechanisms, and uses monitoring tools to maintain security posture. While explicit security headers are not fully confirmed, the overall security practices are sound with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy-protected but consistent with a legitimate enterprise healthcare entity. Overall, myMSD presents a low-risk, professionally managed digital presence with strong business credibility and compliance. Strategic recommendations include enhancing explicit security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and security posture.

M

MSD animal Health Australia

msd-animal-health.com.au

73

MSD Animal Health Australia operates as a research-driven company specializing in veterinary medicines and animal health services. It is a subsidiary or affiliate of Merck & Co., Inc., a globally recognized pharmaceutical company. The website presents a professional and consistent brand image, targeting multiple audiences including veterinary professionals and animal owners. The business model focuses on manufacturing, marketing, and supporting veterinary products across various species including poultry, pigs, companion animals, and ruminants. The company maintains a strong market position in the animal health sector within Australia.

M

MSD

msdlicensing.com

70

MSD, known as Merck & Co., Inc. outside the US and Canada, operates a comprehensive pharmaceutical research and development website focused on business development and licensing. The company emphasizes collaboration and innovation to advance healthcare solutions globally. The website is professionally designed, mobile-optimized, and rich in content, targeting researchers, collaborators, and healthcare professionals. Technically, the site uses WordPress CMS with modern SEO and analytics tools, including Google Tag Manager and OneTrust for cookie consent. Security posture is strong with HTTPS and security headers, though explicit privacy and security policies are not prominently linked. WHOIS data is unavailable, which reduces transparency but the site branding and content strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and WHOIS transparency.

M

Merck Sharp & Dohme (I.A.) Corp.

msdconnect.my

66

MSD Connect is a digital education platform operated by Merck Sharp & Dohme (Malaysia) Sdn. Bhd., providing healthcare professionals with access to product information, educational resources, and event registrations. The company holds a strong market position in healthcare sectors including cardiology, infectious diseases, vaccines, and oncology. The website is professionally designed, mobile-optimized, and hosted on a robust WordPress VIP platform with AWS infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and explicit cookie consent mechanisms. Overall, the site reflects a trustworthy and credible business presence in Malaysia with consistent WHOIS registration data.

M

Medscape

univadis.com

62

Medscape is a leading online medical news and education platform targeting healthcare professionals, providing up-to-date medical news, clinical trial information, drug updates, journal articles, and continuing medical education (CME) activities. Owned by WebMD Health Corp, Medscape holds a strong market position as a trusted resource in the healthcare industry. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience. Technically, the site employs modern JavaScript libraries, Adobe DTM for tag management, and robust advertising and analytics tools, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, multiple security headers, and cookie consent mechanisms, although explicit security policy and incident response contacts are not publicly found. WHOIS data is unavailable due to registry privacy, which is common for large brands and justified in this context. Overall, Medscape presents a secure, professional, and trustworthy platform for its target audience.

M

MSD Animal Health Malaysia

msd-animal-health.my

71

MSD Animal Health Malaysia operates as a subsidiary of Merck Sharp & Dohme (I.A.) Corp., providing veterinary vaccines, pharmaceutical products, and health management solutions within Malaysia. The website presents a professional and consistent brand image, targeting multiple audiences in the animal health sector. The business is well-established with a domain age consistent with its operational history since 2016. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and New Relic monitoring, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement in security headers and explicit privacy documentation. Overall, the website is trustworthy and professionally maintained, though it lacks explicit contact and security policy disclosures.

M

Merck & Co., Inc.

msdclinicaltrials.com

67

The website www.msdclinicaltrials.com serves as an official platform for Merck & Co., Inc. (known as MSD outside the US and Canada) to provide information about clinical trials and medical research. It targets patients, caregivers, healthcare professionals, and potential clinical trial volunteers globally. The site offers comprehensive resources on various therapeutic areas, including cardiovascular diseases, oncology, infectious diseases, and vaccines, reflecting MSD's long-standing commitment to healthcare innovation. The business model focuses on pharmaceutical research and development with a strong emphasis on clinical trials to advance medical science. Technically, the website is built on WordPress with modern technologies such as Vue.js and integrates tools like Google Tag Manager and OneTrust for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with multilingual support for global reach. Performance is moderate, with room for improvement in explicit security header implementation. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible advanced security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a notable concern, impacting domain legitimacy trust scores, though the website content and branding strongly suggest it is an official MSD resource. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trustworthiness and compliance posture.

M

MSD ΑΦΕΕ

msdconnect.gr

66

MSD Connect is a professional healthcare information platform operated by MSD ΑΦΕΕ, a subsidiary of Merck & Co., Inc. The website targets healthcare professionals in Greece, providing scientific updates, product information, and therapeutic category details. The platform is well-branded, consistent with corporate identity, and offers secure user authentication and registration processes. Technically, it is built on WordPress VIP with modern plugins and technologies, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, although explicit security headers could be verified further. Privacy policies are comprehensive and GDPR compliant. Overall, the site is trustworthy, professional, and well-maintained.

I

INVOLV

pgosupport.nl

63

INVOLV is a Dutch non-profit organization specializing in promoting participation in healthcare, welfare, and research. They provide advisory services and training primarily targeting patients' organizations, healthcare providers, researchers, and other stakeholders. The website reflects a well-established entity with a clear mission to enhance patient and stakeholder engagement in these sectors. Their market position is that of a trusted advisor and educator within the Dutch healthcare participation ecosystem. Technically, the website employs modern web technologies including Bootstrap for responsive design, Font Awesome for icons, and integrates analytics tools such as HubSpot, Google Tag Manager, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices and a professional design, though some accessibility features are basic. Performance is moderate, with deferred loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS with good SSL configuration and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Security headers are not explicitly detected, suggesting room for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security transparency and incident response readiness would further enhance trust and resilience.

M

Merck Canada

merck.ca

64

Merck Canada is a well-established healthcare company with over 130 years of history, focused on pharmaceutical innovation including medicines, vaccines, and oncology treatments. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, investors, and job seekers. The technical infrastructure is based on WordPress with modern SEO and privacy compliance tools such as Yoast SEO and OneTrust cookie consent. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data suggests privacy protection, which is typical for large corporations. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

HeMED.hr is a Croatian medical education platform operated by Utilis d.o.o., providing free and quality medical educational content in the Croatian language. The platform targets Croatian citizens, medical students, and healthcare professionals, offering resources such as drug databases, medical manuals, and textbooks. The website is positioned as a niche educational resource within the Croatian healthcare sector, with partnerships including the Croatian Medical Chamber and other reputable organizations. Technically, the site is built on ASP.NET WebForms with Bootstrap and jQuery, showing moderate digital maturity with room for modernization and improved accessibility. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, though it could benefit from enhanced security practices and clearer contact information.

M

MSD Animal Health

msd-animal-health.com

68

MSD Animal Health operates as a corporate entity specializing in veterinary products, technologies, and services aimed at advancing animal healthcare. The website presents a professional and consistent brand image, targeting multiple audiences within the animal health sector. The company appears to be an established player in the healthcare industry with a global reach, although specific country information is not disclosed. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a cookie consent mechanism, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the website content and branding suggest a legitimate corporate presence. Overall, the site scores well on content quality and business credibility but should enhance transparency and security practices to strengthen trust and compliance.

M

MSD for Mothers

msdformothers.com

65

MSD for Mothers is a global health initiative dedicated to reducing maternal mortality by addressing preventable pregnancy complications worldwide. The website serves as an informational and advocacy platform targeting healthcare professionals, policymakers, donors, and the global health community. It is branded consistently with MSD, indicating affiliation with the pharmaceutical company Merck & Co., Inc. The business model is non-profit and focused on global health partnerships and education. Technically, the website uses modern frontend technologies including jQuery, Bootstrap, FontAwesome, and integrates Google Tag Manager and OneTrust for analytics and cookie consent respectively. The site is mobile optimized with good navigation and content relevance. Security posture is moderate; while HTTPS is implied, no security headers were detected in the provided data, and no explicit privacy or security policies are visible. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and branding of the site. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.

M

MSD

msdresponsibility.com

68

MSD is a large multinational healthcare company focused on pharmaceuticals, vaccines, and global health solutions. Their website section on sustainability highlights their corporate responsibility efforts, including access to health, philanthropy, environmental sustainability, and impact investing. The company positions itself as a responsible business committed to improving human and animal health worldwide. Technically, the website is built on WordPress with modern SEO practices, lazy loading, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data is incomplete or privacy protected, which slightly reduces domain trustworthiness but the active, professional website and recent expiry date support legitimacy. Overall, the website is professional, well-structured, and trustworthy with room for improvement in transparency and security disclosures.

W

Web Security Scan

websecurityscan.eu

71

Web Security Scan is a specialized cybersecurity service provider focusing on penetration testing and security assessments for applications and IT infrastructures. With over 15 years of ethical hacking experience, the company offers a comprehensive suite of services including pentesting, vulnerability scanning, code reviews, red teaming, and security workshops. Positioned as a trusted partner for businesses seeking to enhance their cybersecurity posture, Web Security Scan emphasizes compliance with major frameworks such as OWASP, PCI-DSS, ISO27001, and NIS2. The company operates as a division of DongIT, leveraging combined expertise in web security and development.

M

Merck & Co., Inc., Rahway, NJ, USA

msdaccessibility.com

64

Merck & Co., Inc., operating under the MSD brand outside the United States and Canada, maintains this accessibility microsite to demonstrate its commitment to digital accessibility and compliance with WCAG 2.2 standards. The site provides information on accessibility policies, tools, and resources, targeting a broad audience including persons with disabilities. The company leverages partnerships with accessibility service providers such as Level Access to enhance user experience and compliance. Technically, the website is built on WordPress with modern SEO and accessibility plugins, supported by Google Tag Manager and OneTrust for privacy and cookie consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data suggests privacy protection or recent registration but does not detract from the site's legitimacy given the strong brand presence and trust indicators. Overall, the site is professional, accessible, and compliant with relevant privacy regulations.

M

MSD Belgium

msdconnect.be

64

MSD Belgium operates a professional digital platform, MSD Connect, targeting healthcare professionals in Belgium and Luxembourg. The platform provides access to therapeutic area information, product details, clinical data, congress updates, and patient educational materials. The website is well-branded, consistent with MSD's corporate identity, and offers multilingual support (French and Dutch). The technical infrastructure is modern, leveraging WordPress VIP, Google Tag Manager, and third-party authentication and consent management tools. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is privacy protected, which is typical for corporate domains in Belgium, and no suspicious patterns were detected. Overall, the website is professional, secure, and compliant with GDPR requirements.

S

Swiss Creative

swisscreative.ch

57

Swiss Creative is a small communication agency based in Echallens, Switzerland, specializing in creative and communication services for local businesses and organizations. The website presents a professional image with clear branding and a focus on digital marketing and communication solutions. The technical infrastructure is built on WordPress using the Enfold theme, with modern fonts and SEO plugins enhancing the site's digital maturity. Analytics and tracking tools such as Hotjar and Google Tag Manager are employed, although privacy compliance is limited due to the absence of explicit privacy and cookie policies. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and a vulnerability disclosure policy. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

S

Stage Entertainment

stage-entertainment.de

70

Stage Entertainment operates a professional German-language website focused on musicals and live shows, offering ticket sales and gift vouchers. The company holds a strong market position in the entertainment sector in Germany, targeting a broad audience interested in family-friendly and popular musical productions. The website is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Segment Analytics, and Optimizely, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though improvements can be made in security headers and cookie consent mechanisms. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR through a comprehensive privacy policy.

N

Netherlands Board of Tourism & Conventions

nbtc.nl

59

The Netherlands Board of Tourism & Conventions (NBTC) operates as the national destination management organization for the Netherlands, focusing on the development, branding, and marketing of the country as a tourism destination. The website reflects a professional and authoritative presence, targeting residents, visitors, companies, and tourism stakeholders with relevant insights and services. NBTC positions itself as a connector and facilitator for cities, regions, and businesses to enhance the Netherlands' appeal as a liveable and valuable destination. Technically, the website is built on the XperienCentral CMS platform and incorporates modern JavaScript libraries and Piwik PRO analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and uses HTTPS with CSRF protection mechanisms, indicating a mature digital infrastructure. SEO is basic but functional, with proper meta tags and structured data. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, consent management for cookies, and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The absence of direct contact emails or phone numbers is mitigated by a contact form and social media presence. The domain registration aligns well with the organization's identity, supporting legitimacy. Strategic recommendations include publishing explicit security policies, incident response information, and enhancing SEO and accessibility further.

M

Mediaworks Hungary Zrt.

vaol.hu

53

VAOL is a regional news portal serving Vas county in Hungary, operated by Mediaworks Hungary Zrt. The website provides local news, economic updates, and domestic information targeted at residents and stakeholders in the region. It operates primarily on an advertising-supported business model, leveraging multiple ad networks and tracking technologies with user consent mechanisms in place. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager, and consent management platforms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks some security best practices such as security headers and explicit privacy policies. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

M

Mediaworks Hungary Zrt.

heol.hu

52

HEOL.hu is a regional news portal serving Heves county in Hungary, operated by Mediaworks Hungary Zrt., a large media company. The website provides local news, economic updates, and domestic information targeted at residents and stakeholders of Heves county. The business model is primarily advertising-supported, leveraging multiple ad networks and consent management platforms to monetize content. The site is positioned as a leading regional news source with consistent branding and good content quality. Technically, the website employs modern web technologies including Google Tag Manager, Facebook SDK, and InMobi's consent management platform, ensuring compliance with cookie regulations. The site uses HTTPS with good security headers, indicating a solid security posture. However, some compliance gaps exist, such as the absence of an explicit privacy policy and terms of service pages, which are critical for GDPR compliance. Security-wise, the site demonstrates good practices with HTTPS enforcement and consent management but lacks explicit incident response contacts or vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy but would benefit from enhanced transparency and compliance documentation. The overall risk is moderate with recommendations to improve privacy disclosures, add security policies, and provide clear contact channels for security incidents to enhance trust and compliance.

M

Mediaworks Hungary Zrt.

boon.hu

32

BOON.hu is a regional news portal serving Borsod-Abaúj-Zemplén county in Hungary, operated by Mediaworks Hungary Zrt. The site focuses on delivering fresh news, economic updates, and local information to residents and interested audiences within the region. It operates primarily on an advertising-supported business model, leveraging multiple ad networks and tracking technologies to monetize content. The website demonstrates a moderate to good level of digital maturity, employing modern analytics, consent management, and SEO best practices, including structured data markup. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks published security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. Overall, the site is legitimate, professionally presented, and safe for general audiences.