Security Directory

L

Lifull Connect

trovit.co.za

57

Trovit South Africa operates as a classified search engine aggregating listings for homes, cars, and jobs from thousands of websites, targeting the South African market. It is part of the Lifull Connect group, a recognized player in the classified ads sector with a global footprint. The website presents a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and advertising technologies such as Google Adsense and Criteo, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published incident response contacts. Privacy compliance is strong, with comprehensive privacy and cookie policies linked to the parent company’s domain, reflecting GDPR adherence. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable likely due to privacy protection. No critical security or content safety issues were detected.

L

Lifull Connect

trovit.hu

65

Trovit Hungary operates as a specialized search engine aggregating classified ads for real estate, cars, jobs, products, and vacations targeted at Hungarian consumers. It is part of the Lifull Connect group, a recognized entity in the online classifieds market. The website demonstrates a mature digital infrastructure with integration of modern JavaScript libraries, Google Analytics, and a comprehensive consent management platform ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and explicit incident response policies could be improved. Overall, the site presents a professional and trustworthy platform with good user experience and privacy practices.

L

Lifull Connect

trovit.es

55

Trovit is a well-established online classified ads aggregator operating primarily in Spain, offering listings in real estate, automotive, and employment sectors. The website is part of the Lifull Connect group, which provides a strong corporate backing and consistent branding. The platform targets a broad general audience seeking aggregated listings from multiple sources, enhancing user convenience and search efficiency. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager and Didomi for consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a consent management platform to comply with GDPR, but lacks some advanced security headers which could improve its security posture. The absence of WHOIS data limits full domain legitimacy verification, but the overall trust signals and corporate association suggest a legitimate and professional operation. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving contact information transparency.

L

Lifull Connect

trovit.com.br

59

Trovit Brasil operates as a classified ads search engine specializing in real estate, automotive, and employment listings targeted at the Brazilian market. It is part of the Lifull Connect group, a recognized entity with a global presence. The website aggregates listings from multiple portals, providing users with a centralized search experience. The business model focuses on advertising revenue and user engagement through classified ad searches. The site is well-branded, consistent, and offers a professional user experience with clear navigation and relevant content for its audience. From a technical perspective, Trovit Brasil leverages modern JavaScript technologies, Google Tag Manager, Google Analytics, and Criteo for advertising and tracking. Hosting is managed via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Privacy and cookie policies are prominently linked and include consent mechanisms, reflecting compliance with GDPR and Brazilian data protection regulations. Security posture is solid with HTTPS enforced and cookie consent implemented. However, the site lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data aligns with the business claims, showing consistent domain registration and professional DNS management. Overall, Trovit Brasil presents a trustworthy and professional online presence with a mature technical infrastructure. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security and compliance posture.

L

Lifull Connect

trovit.be

63

Trovit is a well-established classified ads aggregator operating in Belgium, offering search services for real estate, cars, and job listings. It is part of the Lifull Connect group, which provides a strong corporate backing and professional management. The website targets a broad audience seeking aggregated classified ads from multiple sources, positioning itself as a convenient search engine for these verticals. The business model relies on aggregating listings and monetizing through advertising and partnerships. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and a consent management platform to comply with privacy regulations. The presence of mobile apps on major platforms indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks some advanced security headers and explicit incident response disclosures. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is restricted due to registry policies. The risk profile is low, with recommendations to enhance security headers and publish vulnerability disclosure information.

L

Lifull Connect

trovit.co.uk

62

Trovit is a classified search engine operated under the Lifull Connect umbrella, targeting the United Kingdom market with verticals in property, jobs, cars, and products. The platform aggregates ads from thousands of websites, providing a unified search experience for users. The website demonstrates a professional and consistent brand presence with a focus on user privacy and compliance, including comprehensive privacy and cookie policies with consent management mechanisms. Technically, the site employs modern JavaScript frameworks, Google Analytics, Google Tag Manager, and third-party advertising networks such as Criteo, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The WHOIS data for the domain www.trovit.co.uk is unavailable due to domain naming rules, indicating the domain is likely a subdomain or alias, but the parent company Lifull Connect is a reputable entity. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

L

Lifull Connect

trovit.ch

65

Trovit.ch operates as a comprehensive classified ads search engine specializing in real estate, automobiles, and job listings within Switzerland. It aggregates thousands of listings from various websites, providing users with a unified search experience. The platform is part of Lifull Connect, a larger parent company, which lends credibility and operational support. The website is professionally designed with consistent branding and clear navigation, targeting a broad audience seeking classified ads in the Swiss market. Technically, the site employs modern JavaScript frameworks and integrates Google Analytics and Tag Manager for tracking, alongside a robust consent management platform (Didomi) to ensure GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the site presents a trustworthy and professional online presence with moderate to good technical and security maturity.

L

Lifull Connect

trovit.ng

53

Trovit.ng is a classified search engine specializing in aggregating ads for property, used cars, and jobs within Nigeria. It operates under the parent company Lifull Connect, which provides global privacy and legal policies. The platform targets a broad general audience seeking classified ads and offers a user-friendly interface with consistent branding and good content quality. Technically, the site employs modern JavaScript frameworks and integrates Google Analytics, Google Tag Manager, and Criteo for advertising and tracking purposes. The site is mobile-optimized and SEO-friendly, providing a moderate performance experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

L

Lifull Connect

trovit.it

63

Trovit is a prominent Italian search engine specializing in aggregating classified ads for real estate, automobiles, jobs, and products. It operates under the parent company Lifull Connect, which provides comprehensive privacy and legal frameworks supporting the website. The platform targets a broad general audience in Italy, offering a unified search experience across multiple verticals. Technically, the website employs modern JavaScript frameworks, Google Analytics, Google Tag Manager, and a robust consent management platform (Didomi) to ensure GDPR compliance and user privacy. The site is well-optimized for mobile devices and SEO, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, Trovit presents a trustworthy and professional online presence with strong compliance and technical foundations.

L

Lifull Connect

trovit.ae

56

Trovit.ae operates as a classified search engine specializing in aggregating property, used cars, and job advertisements within the United Arab Emirates. Owned by Lifull Connect, a recognized global entity, the platform serves a broad audience seeking streamlined access to classified ads from thousands of websites. The website demonstrates a consistent brand presence and offers mobile app availability, enhancing user accessibility. Technically, the site employs modern JavaScript frameworks and integrates major analytics and advertising tools such as Google Tag Manager and Criteo, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security policies or vulnerability disclosure channels. Overall, the platform maintains a solid security posture with no evident vulnerabilities or exposed sensitive data. The domain registration aligns well with the business entity, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen compliance and user trust.

L

Lifull Connect

trovit.ro

63

Trovit.ro operates as a specialized search engine aggregating listings for real estate, used cars, and job opportunities in Romania. It is part of the Lifull Connect group, a recognized international digital business entity. The website offers a user-friendly interface with clear navigation and localized content, targeting a broad general audience seeking categorized classified ads. The business model focuses on aggregating listings from multiple sources to provide a comprehensive search experience. Technically, the site employs modern JavaScript frameworks, integrates Google Tag Manager and Didomi for consent management, and enforces HTTPS for secure communications. The presence of detailed privacy and cookie policies reflects a strong commitment to GDPR compliance and user privacy. Security posture is solid with no detected vulnerabilities or WAF blocking, though explicit security headers like CSP could be enhanced. Overall, the domain's privacy-protected WHOIS is typical for large enterprises, and the website's professional presentation and policies support its legitimacy.

L

Lifull Connect

trovit.co.nz

64

Trovit New Zealand operates as a classified search engine specializing in aggregating ads for property, used cars, and jobs from thousands of websites. It is part of the Lifull Connect group, a recognized global player in classified search services. The website targets a general audience in New Zealand seeking convenient access to classified listings across multiple verticals. The business model centers on providing a unified search platform to simplify user access to diverse classified ads, leveraging partnerships and data aggregation.

L

Lifull Connect

trovit.ie

62

Trovit.ie is an established online classified ads search engine specializing in real estate, cars, and job listings in Ireland. Operated under the Lifull Connect brand, it aggregates listings from thousands of websites, providing users a centralized platform to search for property, vehicles, and employment opportunities. The website demonstrates a consistent brand presence and targets a general audience seeking classified ads in Ireland. Technically, the site employs modern JavaScript libraries, Google Analytics, and a robust consent management platform (Didomi) to comply with privacy regulations. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but additional security headers could improve defenses further. The absence of WHOIS data limits domain trust verification, but the website's content and parent company affiliation indicate legitimacy. Overall, Trovit.ie presents a professional and trustworthy platform for classified ads in Ireland.

L

Lifull Connect

trovit.dk

62

Trovit.dk operates as a classified search engine specializing in aggregating listings for real estate, used cars, and job advertisements in Denmark. It is part of the Lifull Connect group, a recognized entity in the real estate and classifieds market. The website offers a user-friendly interface with clear navigation to its verticals and integrates privacy and cookie consent mechanisms compliant with GDPR. The business model focuses on providing a centralized search platform aggregating thousands of listings from various sources, targeting general consumers seeking property, vehicles, or employment opportunities.

L

LiveCareer

livecareer.nl

54

LiveCareer.nl is a professional online platform focused on providing job seekers in the Netherlands with tools to create compelling CVs and cover letters. The website offers a user-friendly CV builder, a variety of recruiter-approved templates, and career advice content. The platform positions itself as a trusted resource for individuals aiming to improve their job application success. Technically, the site employs modern web technologies including JavaScript, SVG graphics, and Google Tag Manager for analytics and marketing. It is well-optimized for mobile devices and accessibility, with strong SEO practices including structured data markup. Security-wise, the site enforces HTTPS, implements key security headers, and provides cookie consent mechanisms, reflecting a mature security posture. However, it lacks a dedicated security policy or incident response contact information. Overall, LiveCareer.nl demonstrates a solid digital presence with good privacy compliance and business credibility, suitable for its target audience of Dutch job seekers.

O

one.com

one.com

67

one.com is a well-established web hosting and domain registration provider targeting primarily the Finnish market with localized content and services. The company offers a comprehensive suite of products including domain registration, web hosting, email services, website building tools, WordPress hosting, e-commerce solutions, and marketing/security tools. Their market position is strong, supported by extensive customer testimonials and trust signals such as Trustpilot reviews and SSL certificates. Technically, the website is built on WordPress with modern JavaScript and CSS technologies, integrating various analytics and marketing tools like Google Tag Manager and Visual Website Optimizer. The site is fast, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced, daily backups, malware scanning, and domain lock features, though some advanced security headers and explicit security policies are missing. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable, likely due to registry restrictions, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional web presence and external trust indicators.

D

dm drogerie markt

dm.at

57

dm drogerie markt operates a comprehensive online retail platform focused on drugstore products in Austria, offering a wide range of cosmetics, health, nutrition, and household items. The website reflects a mature e-commerce presence with strong brand consistency and integration of loyalty programs such as PAYBACK. The technical infrastructure leverages modern web technologies, including consent management and tag management systems, ensuring compliance with privacy regulations. Security posture is robust with HTTPS enforcement and security headers, though no explicit vulnerability disclosure or incident response contacts are published. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

V

vacaVista

vacavista.com

53

vacaVista operates as an online vacation rental search and booking platform offering over one million vacation homes and apartments worldwide. The website targets travelers seeking direct online booking options for holiday accommodations globally. The business model centers on aggregating vacation rental listings and facilitating user searches and bookings. The site appears to have been founded in 1998, indicating a long-standing presence in the hospitality sector, although domain registration data is unavailable to confirm this history. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.12.4. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. However, the use of an outdated jQuery version may pose security risks. There is no detected CMS or hosting provider information, and no advanced frameworks are identified. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, and no HTTPS/SSL configuration details were provided. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No contact information or incident response policies are published, limiting transparency and user trust. The integration of Pipedrive Leadbooster chat indicates some marketing automation but no advanced analytics or tracking services were detected. Overall, vacaVista presents a professional and content-rich platform for vacation rental search but suffers from significant gaps in security posture, privacy compliance, and domain legitimacy. Strategic improvements in security headers, HTTPS enforcement, privacy mechanisms, and transparent contact information are recommended to enhance trust and compliance.

S

SAP Concur

concursolutions.com

70

SAP Concur operates a professional and secure web portal at www.concursolutions.com, primarily serving as a login gateway for its business travel and expense management solutions. The website is well-branded, leveraging modern web technologies such as React and SAP CoreUI, and provides comprehensive privacy and cookie policies, indicating a mature approach to user data protection and compliance. Despite the absence of WHOIS data for the domain, the site aligns closely with SAP Concur's known digital assets and services, suggesting it functions as a branded subdomain or alias within the SAP Concur ecosystem. Technically, the site demonstrates a solid infrastructure with secure HTTPS usage, modern frontend frameworks, and integration of consent management tools like TrustArc. The presence of Bing Ads and tracking pixels indicates active marketing and analytics practices, balanced with user privacy considerations. However, the lack of explicit security headers and absence of direct contact information on the login page represent areas for improvement in transparency and security hardening. From a security perspective, the site shows good practices in secure form handling and cookie consent but would benefit from publishing explicit security policies, incident response contacts, and a vulnerability disclosure program to enhance trust and readiness. The domain's WHOIS inconsistency slightly reduces the overall trust score but does not detract significantly from the site's legitimacy given its association with SAP Concur. Overall, www.concursolutions.com is a professionally maintained enterprise portal with strong business credibility and technical maturity, suitable for its target audience of business users managing travel and expenses. Strategic enhancements in security transparency and contact availability would further strengthen its posture and user trust.

D

dm drogerie markt

dm-jobs.it

64

dm-jobs.it is the Italian job portal for dm drogerie markt, a well-established retail chain operating in multiple European countries. The website offers job opportunities, internships, and career growth options primarily targeted at job seekers in Italy. The site is professionally designed with consistent branding and clear navigation, reflecting the company's strong market position in retail employment. Technically, the website leverages modern frameworks such as Vue.js and Nuxt.js, integrates a consent management platform (Usercentrics), and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms denying ad and analytics storage by default, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy, safe, and compliant with privacy regulations, but could improve transparency by publishing privacy policies and incident response information.

D

dm

dm-jobs.rs

54

The website www.dm-jobs.rs serves as a localized recruitment portal for dm retail operations in Serbia. It provides job listings, company culture insights, and recruitment information tailored to the Serbian market. The site is part of a broader network of dm job portals across Europe, indicating a well-established brand presence. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on Firebase, and integrates a cookie consent management platform (Usercentrics) to comply with privacy regulations. However, the absence of a dedicated privacy policy and terms of service pages limits its full compliance posture. Security-wise, the site uses HTTPS but lacks visible security headers and DNSSEC, which are recommended for enhanced protection. Overall, the site is professional and trustworthy but would benefit from improved privacy disclosures and security hardening.

D

dm

dm-jobs.hr

61

The website www.dm-jobs.hr serves as a regional job portal for the dm retail company in Croatia, providing employment opportunities across various sectors including retail stores, logistics, and corporate functions. The site is part of a broader network of country-specific dm job portals, indicating a well-structured regional recruitment strategy. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on AWS infrastructure, and employs Usercentrics for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and no blocking mechanisms detected, though the absence of visible security headers and explicit privacy and terms of service pages suggests room for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, with a moderate to good technical and security maturity level.

D

dm

dm-jobs.cz

61

The website www.dm-jobs.cz serves as a professional job portal for the dm retail brand in the Czech Republic, focusing on employment opportunities in retail stores, logistics, and administrative sectors. The site is well-branded, multi-lingual, and provides structured navigation to various job categories and application guidance. The technical infrastructure is modern, leveraging Vue.js and Nuxt.js frameworks, with integration of a consent management platform (Usercentrics) and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed privacy policies are not evident in the provided data. The absence of WHOIS registrant data suggests privacy protection, which is common and justified for commercial domains. Overall, the site is professional, trustworthy, and safe for general audiences, with room for improvement in transparency and security header implementation.

D

dm

dm-jobs.hu

60

The website www.dm-jobs.hu serves as a career and job listing portal for dm, a large retail company operating in Hungary and Central Europe. It provides detailed information about job opportunities, corporate culture, employee benefits, and salary information targeted at job seekers interested in working for dm. The site is built using modern web technologies including Vue.js and Nuxt.js, with a content management system likely based on Storyblok. The technical infrastructure supports good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and a cookie consent mechanism that denies ad and analytics storage by default, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-branded, but could improve privacy compliance by publishing a dedicated privacy policy and terms of service pages, and by providing clear contact information for users and security incidents.

D

dm-drogerie markt

dm.de

63

dm-drogerie markt operates a comprehensive retail website focused on drugstore and consumer goods in Germany. The site offers product search, store locator, shopping list, and cart functionalities, reflecting a mature e-commerce platform. The website is well-branded, mobile-optimized, and uses modern web technologies with asynchronous script loading to enhance performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not evident in the provided content. Privacy and cookie policies are not directly found in the HTML snapshot, which may impact compliance perception. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

L

Lifull Connect

trovit.com

65

Trovit operates as a global search engine specializing in classified ads for real estate, cars, and jobs. It aggregates listings from thousands of websites, providing users with a centralized platform to find relevant ads in their local areas. The website is part of Lifull Connect, a parent company that manages multiple regional Trovit domains, indicating a broad international presence. The business model focuses on search aggregation and advertising revenue through partnerships and ad networks. The target audience is general consumers seeking classified ads in various sectors.

Indeed is a globally recognized online job search and recruitment platform that connects job seekers with employers. The platform offers services such as job listings, company reviews, salary information, resume uploads, and employer job postings. It targets a broad audience including individuals seeking employment and companies looking to hire. The website analyzed is a regional subdomain (nl.indeed.com) of the main Indeed.com site. Technically, the site is protected by Cloudflare's security infrastructure, including a Web Application Firewall (WAF) and Turnstile CAPTCHA challenge, which currently blocks direct access to the site's content. The site uses modern web technologies such as JavaScript, CSS, and Cloudflare analytics. However, due to the WAF challenge, detailed technical and content analysis is limited. From a security perspective, the presence of Cloudflare's WAF and CAPTCHA indicates a strong security posture aimed at mitigating automated attacks and abuse. However, the inability to access the full site content restricts the ability to assess security headers, privacy policies, and other compliance measures. No vulnerabilities or exposed sensitive data were detected on the challenge page. Overall, the site is a legitimate, enterprise-level platform with strong security controls in place. The current WAF challenge limits the ability to perform a full analysis. It is recommended to access the site without WAF interference for a comprehensive evaluation.

A

Atelier Bruno

atelier-bruno.fr

50

Atelier Bruno is a French company specializing in vehicle branding, signage, and adhesive printing services since 1988. The company offers comprehensive in-house design, production, and installation services targeting businesses seeking to promote their image through mobile and static advertising media. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning them as an established local player in the transportation and manufacturing sectors. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and hosted on a CDN for fast performance. It is mobile-optimized with good accessibility and SEO practices. Google Analytics is integrated via Google Tag Manager for user tracking, although privacy compliance could be improved with cookie consent mechanisms. Security posture is generally good with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of published security policies or incident response contacts are areas for improvement. The missing WHOIS data reduces domain trustworthiness and should be investigated to confirm domain registration legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing privacy compliance, implementing security headers, and verifying domain registration details to strengthen trust and security posture.

B

Bennes Vincent - GROUPE VINCENT

bennes-rci.fr

48

Bennes Vincent, part of Groupe Vincent, is a French medium-sized manufacturing company specializing in the design, fabrication, and distribution of bennes (dump bodies) for vehicles ranging from 3.5 to 32 tons. The company targets professional sectors including construction, transport, agriculture, recycling, and public services, offering robust and customizable vehicle equipment. Their market position is supported by a dense after-sales service network across France and a 2-year warranty on key components. Technically, the website is built on a custom PHP platform using Bootstrap and Matomo analytics, providing a responsive and professional user experience with moderate performance. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy available but no cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Poliisihallitus

poliisi.fi

55

Poliisihallitus operates the official Finnish Police website, providing comprehensive public safety, permit, and crime reporting services to the Finnish population. The website serves as a critical government portal with a strong market position as the national law enforcement authority. It offers key services including passport and ID card applications, crime reporting, and online service access. The technical infrastructure is built on a modern CMS platform (Liferay) with a mature tech stack including React and jQuery, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and no evident vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR adherence. Overall, the site demonstrates high business credibility and trustworthiness consistent with a government entity.

N

Nordea Finans Norge AS

nordeafinance.no

67

Nordea Finans Norge AS operates as a financial services provider specializing in consumer and business financing solutions in Norway. The company offers a range of products including car loans, leasing, payment insurance, and financing for motorcycles and caravans. The website reflects a strong market position as part of the Nordea group, targeting both private and business customers with tailored financial products. The digital presence is professionally designed, mobile-optimized, and integrates secure login portals leveraging BankID, enhancing user trust and security. Technically, the site uses modern web technologies and a CMS likely based on SDL Tridion, ensuring content management efficiency and scalability. Security posture is strong with HTTPS enforcement and secure authentication mechanisms, though explicit security headers could be improved. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website demonstrates a mature digital infrastructure aligned with business goals, though WHOIS data unavailability slightly impacts trust assessment.

N

Nordea Rahoitus Suomi Oy

nordeafinance.fi

64

Nordea Rahoitus Suomi Oy operates the website www.nordeafinance.fi, providing a range of financial services primarily focused on personal customers in Finland. As part of the Nordea Group, it offers auto financing, credit cards, consumer loans, and digital banking services. The website is professionally designed, multilingual, and targets Finnish consumers seeking flexible financing solutions. The company maintains a strong market position as a reputable financial institution within the Nordic region. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and a proprietary CMS (dotXX2017). It is mobile-optimized, accessible, and SEO-friendly. The infrastructure appears robust with good performance and secure hosting likely managed internally by Nordea. Analytics and marketing tools such as Tealium and CookieReports are used for user tracking and consent management. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Overall, the website demonstrates a high level of professionalism, security, and compliance with privacy regulations such as GDPR. The absence of direct contact emails and phone numbers on the site is typical for large financial institutions that prefer controlled communication channels. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure details to further strengthen security posture and customer trust.

N

Nordea Finans Sverige AB (publ)

nordeafinance.se

66

Nordea Finans Sverige AB operates the Nordea Finance Privat website, providing a range of financial services primarily focused on consumer vehicle financing, credit cards, and loans. The company is part of the larger Nordea group, a well-established financial institution in the Nordic region. The website targets private individuals and businesses in Sweden, offering tailored financing solutions and customer support. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

N

Nordea Finans Danmark A/S

nordeafinance.dk

66

Nordea Finans Danmark A/S operates as a financial services provider specializing in consumer and business financing solutions in Denmark. The company offers a range of products including car loans, private leasing, loans for motorcycles and camping equipment, and daily economy loans. The website reflects a strong market position with consistent branding aligned with the Nordea group, targeting private individuals and businesses seeking financing options. The digital infrastructure is mature, featuring multiple customer portals and online loan application processes, supported by a proprietary CMS framework (dotXX2017). The site is well-optimized for mobile and accessibility, with good SEO practices and professional design quality. Security posture is strong with HTTPS enforcement, nonce usage in scripts, and cookie consent mechanisms, although explicit security headers could be more visible. Privacy compliance is robust, with clear GDPR and cookie policies. Despite the absence of WHOIS data, the website demonstrates legitimacy through official company registration and trust indicators. Overall, the site presents a professional, secure, and user-friendly platform for financial services in Denmark.

N

Nordea

nordeafinance.com

75

Nordea is a leading Nordic financial services group providing comprehensive banking and financing solutions primarily targeting business customers. The website reflects a mature enterprise with a strong market position, offering a wide range of corporate banking services supported by over 1000 employees. The digital infrastructure is built on Drupal 11, ensuring modern CMS capabilities with good mobile optimization and accessibility. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website presents a professional and trustworthy front for Nordea's financial services, though the absence of WHOIS data is a notable anomaly that does not detract significantly from the site's legitimacy given the brand's prominence.

N

Nordea Pension

nordeapension.dk

75

Nordea Pension is a well-established Danish financial services provider specializing in pension and insurance products. The company offers a broad range of services including pension savings, health insurance, life insurance, and investment funds, targeting both private individuals and businesses. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Microsoft Application Insights and Google Tag Manager for analytics and monitoring, and uses a comprehensive cookie consent management system from CookieInformation.com. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are missing, and there is no publicly available security policy or incident response information. The WHOIS data is unavailable or privacy protected, which limits domain trust verification but is common for financial institutions. Overall, the website demonstrates a strong security posture and compliance with privacy regulations, with minor technical and transparency improvements recommended. The risk level is low, and the site is suitable for its intended audience.

A

Africa50 Infrastructure Investment Platform

africa50.com

60

Africa50 Infrastructure Investment Platform is a pan-African infrastructure investment and asset management entity focused on bridging Africa's infrastructure funding gap by developing bankable projects, mobilizing public and private sector capital, and investing in infrastructure projects across the continent. The platform has a significant footprint with investments in over 30 African countries and an aggregated project value exceeding USD 8 billion. Their key services include project development, funding mobilization, and equity investments alongside strategic partners, targeting sectors such as energy, transportation, real estate, and technology. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including service workers and Google Analytics for tracking. The site demonstrates good performance, mobile optimization, and accessibility, with a professional design and clear navigation. Privacy and cookie policies are present and indicate GDPR compliance. However, no explicit security policy or incident response information is published. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks some security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern but does not detract significantly from the overall trustworthiness given the professional presentation and social media presence. Overall, Africa50.com presents a credible and professional digital presence consistent with its business objectives. Strategic recommendations include publishing a security policy, adding security headers, and providing incident response contacts to enhance trust and compliance.

A

Africa Finance Corporation

africafc.org

69

Africa Finance Corporation (AFC) is a leading multilateral financial institution established by African sovereign states to address the continent's infrastructure deficit through pragmatic investment and financing solutions. The organization holds a strong market position as a trusted infrastructure solutions provider with an investment grade rating and a pan-African footprint spanning 45 member countries. Key services include principal investing, project development, financial advisory, and syndications, targeting governments, investors, and project partners across Africa. Technically, the website is built on modern web technologies including Craft CMS, Bootstrap, jQuery, and HTMX, with good mobile optimization and SEO practices. The site is well-structured, professionally designed, and supports multiple languages, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be enhanced for improved protection. The security evaluation reveals no critical vulnerabilities or exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Contact information is clearly provided, including email, phone, and physical address, supporting business credibility. Overall, AFC's website demonstrates a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data limits domain registration insights but does not detract from the evident legitimacy and strong market presence of the organization. Strategic recommendations include enhancing security headers, improving accessibility features, and maintaining regular security audits to sustain and improve the security posture.

O

Ortto

ortto.app

63

Ortto is a technology company specializing in marketing automation solutions, offering a SaaS platform that integrates with various e-commerce and CRM systems. The website analyzed is primarily a login page, indicating a mature digital presence with a focus on customer engagement and campaign management. The platform supports multiple integrations, reflecting a comprehensive service offering for business clients seeking marketing automation. Technically, the website employs modern JavaScript frameworks, likely React, and uses several third-party analytics and tracking services including Google Tag Manager, Facebook Pixel, and Mouseflow. The site is hosted on secure infrastructure with HTTPS enforced, and the design is responsive and professional. However, there is a lack of visible privacy and cookie policies on the login page, which may impact compliance perceptions. From a security perspective, the site demonstrates good practices such as HTTPS usage and no exposed sensitive data in the HTML. However, the absence of explicit security headers and incident response information suggests room for improvement. The extensive use of tracking scripts without clear privacy disclosures may also pose compliance risks under regulations like GDPR. Overall, the website is functional, professional, and secure at a basic level but would benefit from enhanced transparency regarding privacy, security policies, and compliance measures to improve trust and regulatory adherence.

I

Icons8

icons8.com

61

Icons8 is a well-established technology company founded in 2011 that provides a comprehensive suite of design assets including icons, illustrations, photos, music, and AI-powered design tools. The website targets creatives and developers seeking high-quality, consistent design elements and tools to enhance their projects. Icons8 maintains a strong market position with a professional and consistent brand presence, supporting multiple languages and offering a variety of services that cater to a global audience. Technically, the website leverages modern web technologies such as Vue.js and Nuxt.js, hosted on AWS infrastructure, ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, although some security headers and privacy compliance elements are missing. The domain is long-standing and registered with clear and consistent WHOIS data, indicating a legitimate and trustworthy business. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and visible security headers. There is no public security policy, incident response information, or vulnerability disclosure program, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, Icons8 presents a low-risk profile with a strong business and technical foundation but should enhance its privacy and security posture to align with best practices and regulatory requirements.

O

Oracle

estara.com

73

Oracle Commerce is a comprehensive ecommerce platform designed to empower both B2B and B2C businesses by integrating customer, sales, and operational data into a unified digital buying experience. Positioned as a leading enterprise technology provider, Oracle offers cloud-native, API-first solutions with flexible deployment options and advanced AI-driven sales capabilities. The platform supports seamless integration with Oracle's Configure, Price, Quote (CPQ) and Subscription Management suites, enhancing revenue operations and buyer engagement. The website reflects Oracle's strong market presence with professional design, extensive resources, and global reach.

SAP SE is a global leader in enterprise software, specializing in customer experience (CX) and customer relationship management (CRM) solutions. Their offerings are designed to fuel profitable growth by uniting business processes end to end with scalable and intelligent solutions. The website reflects SAP's market position as a mature and trusted provider targeting enterprise customers seeking advanced CRM and CX software. Technically, the site is built on modern frameworks including SAP UI5 and React, hosted on a robust infrastructure with Adobe Experience Manager as the CMS. The site is fast, mobile-optimized, and accessible, demonstrating digital maturity. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, though explicit incident response contacts and vulnerability disclosure mechanisms could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations including GDPR.

SAP is a global leader in enterprise software and technology solutions, offering a broad portfolio including AI, cloud computing, analytics, and business applications. The website targets enterprise customers and IT professionals, providing comprehensive information about SAP's products and services in Finland. The site demonstrates a mature digital infrastructure with modern technologies such as SAP UI5, Adobe Experience Manager, and advanced consent management tools. Security is robust with HTTPS, security headers, and ISO 27001 certification, reflecting a strong commitment to data protection and compliance. Overall, the website is professional, trustworthy, and well-optimized for user experience and privacy compliance.

SAP is a global leader in enterprise software solutions, specializing in human capital management (HCM) software through its SAP SuccessFactors suite. The company targets large enterprises seeking to optimize workforce management, talent development, and payroll processes using advanced AI-driven technologies. The website reflects SAP's strong market position with comprehensive product offerings and a professional digital presence. Technically, the site employs modern frameworks such as SAP UI5 and React, supported by a robust content management system likely Adobe Experience Manager, ensuring good performance, accessibility, and SEO optimization. Security posture is strong with HTTPS enforcement, security headers, and compliance certifications like ISO 27001 and SOC 2. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data is unavailable, which is unusual but likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, SAP's website demonstrates a mature, secure, and trustworthy digital platform aligned with enterprise standards.

C

Concur Technologies, Inc.

concur.co.uk

66

SAP Concur UK operates a comprehensive spend management platform integrating travel, expense, and invoice management solutions. The company is positioned as a market leader with a strong enterprise presence, offering a broad suite of products tailored for businesses of all sizes. Their website reflects a mature digital infrastructure with modern technologies, including Drupal CMS, Google reCAPTCHA, and New Relic monitoring, ensuring a robust user experience and operational monitoring. Security measures such as HTTPS, cookie consent, and form protections are implemented, though explicit security headers and a public security policy are absent. The WHOIS data is unavailable due to domain registration constraints, but the website's branding and content strongly support legitimacy. Overall, the site demonstrates high professionalism, good privacy compliance, and a solid security posture with room for improvement in transparency and security disclosures.

SAP is a global leader in enterprise software and digital transformation services, offering a comprehensive portfolio of services and support to help businesses align their technology strategies and achieve success. The website presents a professional and well-structured platform showcasing SAP's foundational support, success plans, premium engagements, and cloud application services. The technical infrastructure leverages modern web technologies including SAP UI5, Adobe Experience Manager, and robust analytics and consent management tools, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, serving a broad enterprise audience effectively.

SAP is a leading global enterprise software company offering SAP SuccessFactors Work Zone, a digital workplace solution designed to enhance employee engagement through a unified and personalized experience. The website reflects SAP's strong market position and commitment to delivering comprehensive human capital management solutions to enterprise clients. Technically, the site leverages modern frameworks such as SAP UI5 and integrates advanced consent management tools, ensuring a robust and user-friendly digital presence. Security posture is strong, with HTTPS enforcement, security headers, and privacy compliance evident, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site demonstrates a mature digital infrastructure aligned with enterprise standards, though transparency in domain registration and security contact details could be improved.

F

FAUN-Environnement

faun-environnement.fr

49

FAUN-Environnement is a French company specializing in innovative waste collection equipment and related services. The company offers a range of products including B.O.M, Citadines, Balayeuses, and Basculeurs, alongside services such as equipment rental, connected maintenance systems, and data management solutions. The website reflects a medium-sized enterprise with a solid market position in the transportation and manufacturing sectors focused on environmental solutions. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and third-party tools like Google Analytics and Tag Manager for tracking. The site is multilingual, supporting French and English, and demonstrates good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages detected. Overall, the website is professional and trustworthy, though improvements in security and privacy transparency are recommended.

G

Gjensidige Försäkring

gjensidige.se

69

Gjensidige Försäkring is a large, well-established insurance company operating in Sweden, positioned as the third largest insurance provider in the Nordic region. The company offers a broad range of insurance products including car, home, villa, boat, accident, and health insurance, targeting both private individuals and businesses. The website reflects a professional and user-friendly digital presence with clear navigation and comprehensive content tailored to its audience. Technically, the site employs modern web technologies, including JavaScript frameworks, consent management via Usercentrics, and tag management through Tealium, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear GDPR and cookie policies and active consent mechanisms. The absence of WHOIS data for the exact domain suggests the domain may be a subdomain or managed under a parent domain, which is not uncommon for large enterprises. Overall, the site demonstrates high professionalism, trustworthiness, and compliance, supporting Gjensidige's market position.