Security Directory

S

SIA DEPO DIY

depo.lv

53

DEPO.lv is the official website of SIA DEPO DIY, a large retail chain operating primarily in Latvia and the Baltic region. The company offers a wide range of products for home improvement, gardening, food, flowers, pets, construction, and leisure. The website provides detailed store location information, contact details, and online shopping options, targeting general retail customers. The business is well-established with a consistent brand presence and multiple physical stores. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, integrating Google Maps and Google Tag Manager for enhanced user experience and analytics. The site is mobile optimized and SEO friendly, with structured data implemented for better search engine understanding. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Stockmann

stockmann.lv

57

Stockmann is a well-established retail and e-commerce company operating in Latvia and the Baltic region, offering fashion, home goods, and cosmetics for women, men, and children. The website demonstrates a mature digital presence leveraging Salesforce Commerce Cloud as its platform, integrating multiple marketing and analytics tools such as Google Tag Manager, New Relic, and PowerReviews. The site is professionally designed with good navigation, mobile optimization, and comprehensive privacy and cookie policies, reflecting compliance with GDPR requirements. Security measures include HTTPS enforcement and standard security headers, contributing to a strong security posture. No blocking or WAF interference was detected, allowing full content access and analysis.

V

Valsts digitālās attīstības aģentūra

latvija.lv

57

Latvija.gov.lv is the official Latvian government portal providing a wide range of public administration services digitally to citizens and businesses. It serves as a centralized platform for accessing government services such as residence registration, social benefits applications, administrative fine payments, e-address communication, and pension information. The portal targets Latvian residents and enterprises, positioning itself as a key digital government service provider in Latvia. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript frameworks, and a custom government SDK, ensuring fast performance, mobile responsiveness, and strong accessibility compliance. Security-wise, the site enforces HTTPS, includes session management features, and provides cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site demonstrates a mature digital infrastructure with high trustworthiness and professional design, supporting the Latvian government's digital transformation goals.

O

Ostmann Stiftung

ostmann-stiftung.de

57

Ostmann Stiftung is a small non-profit foundation focused on providing unbureaucratic support to people in need within the Nordhessen region of Germany. The foundation primarily offers financial assistance for ambulatory and stationary care services, supporting elderly individuals, people with disabilities, and employees of the Ostmann automotive group in distress. The website presents a professional and regionally focused image with clear descriptions of its mission and recent activities. Technically, the site uses modern web technologies including Bootstrap and Usercentrics for GDPR-compliant cookie management, hosted on netcup infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security policies and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

B

Bürgerliche Allianz Riehen

allianz-riehen.ch

59

The website www.allianz-riehen.ch represents the Bürgerliche Allianz Riehen, a local political alliance focused on the municipal council elections in Riehen, Switzerland. The site primarily serves as an informational platform for the upcoming Gemeinderatswahlen scheduled for October 19, 2025. The business model is centered on political engagement and voter information dissemination within the local government sector. The website is built on the Wix platform, utilizing Wix Thunderbolt technology, and is hosted by Wix.com. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy for its intended local audience but would benefit from enhanced compliance and security measures.

H

Helsana Versicherungen AG

helsana.ch

73

Helsana Versicherungen AG is Switzerland's leading health insurance provider, serving over two million policyholders. The company offers a comprehensive range of insurance products including basic and supplementary health insurance, tailored solutions for special life situations such as cross-border commuters and newborns, and digital services like the myHelsana portal and online premium calculators. The website reflects a mature digital presence with modern technologies such as React and Adobe Helix, combined with strong privacy and consent management via OneTrust. Security posture is robust, with HTTPS enforcement, security headers, and no detected vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, Helsana presents a trustworthy, professional, and user-friendly platform aligned with its market leadership in the Swiss healthcare insurance sector.

The website rent-swiss.com appears to be a parked or placeholder domain with minimal original content. The main visible content is an iframe loading HTTP content from an unrelated and suspicious external domain. There is no privacy policy, cookie policy, terms of service, or contact information available on the site. The domain is registered since 2007 with Network Solutions, indicating a legitimate registration history, but the website itself lacks substantive business information or branding. Technically, the site uses basic JavaScript and external tracking scripts from questionable sources, with no HTTPS on the iframe content and no security headers, which poses security risks. Overall, the website's security posture is weak, privacy compliance is absent, and business credibility is low. The site is likely monetized through advertising and tracking rather than providing genuine services.

F

Q8 FMP

fmp-formation.com

56

The website fmp-formation.com appears to be a newly registered domain (January 2024) hosting a login page for a service titled 'Q8 FMP'. The site content is minimal, focusing solely on user authentication with no public business descriptions, contact information, or policy documents. The domain uses Cloudflare DNS but lacks DNSSEC and security headers, indicating moderate technical maturity. The absence of privacy and cookie policies, as well as contact details, limits compliance and trustworthiness. Security practices include HTTPS and a CSRF token in the login form, but further improvements are needed. Overall, the site is functional but lacks comprehensive business and security transparency, resulting in a moderate risk profile.

The website changenligne.com/lander appears to be a minimal placeholder or parking page with very limited content and no visible business information. The domain is registered with GoDaddy.com, LLC since November 2022 and is currently active with standard domain status locks but lacks DNSSEC. The site uses basic JavaScript and a proprietary framework labeled 'PW' with Google AdSense for advertising. There are no privacy, cookie, or terms of service policies present, nor any contact or security-related information. The technical infrastructure is basic, with moderate performance and minimal mobile optimization. Security posture is weak due to lack of security headers and DNSSEC, and privacy compliance is absent. Overall, the site lacks professionalism and trust indicators, suggesting it is either under development or not actively maintained.

S

SGV Schweizer Grafiker:innen Verband

sgv.ch

50

SGV Schweizer Grafiker:innen Verband is a professional association representing graphic designers active in Switzerland. The organization focuses on promoting and strengthening vocational education and quality standards within the graphic design profession. Their website provides information about the association, member listings, educational programs, and current events, targeting Swiss graphic design professionals. The business model centers on serving as a strategic body for the graphic design profession, fostering education and professional development. Technically, the website employs modern web technologies including HTML5, CSS3, and JavaScript, with integration of the Plyr video player library. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider information was detected. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No privacy or cookie policies were found, indicating gaps in GDPR compliance. Contact information is clearly presented, but no incident response or vulnerability disclosure mechanisms are evident. The WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

M

MG Motor Europe

mgmotor.de

68

MG Motor Europe operates a professional website targeting Finnish customers interested in electric and hybrid vehicles. The site offers detailed product information, configurators, test drive requests, and dealer locators, positioning itself as a key player in the European electric automotive market. The technical infrastructure is modern, leveraging popular JavaScript libraries, Google Analytics, and Imgix CDN for images, hosted likely on cloud.ccm19.de. Security posture is solid with HTTPS and domain verification meta tags, but lacks explicit privacy and cookie policies in the analyzed content. WHOIS data is unavailable due to EURid privacy policies, which is common for EU domains. Overall, the website is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.

B

Brucy.se

brucy.se

59

Brucy.se is a Swedish technology company offering a subscription-based website service tailored for small to medium-sized businesses and larger organizations. Their service includes website design, hosting, SEO, and ongoing support, all bundled into fixed monthly fees. The company positions itself as a cost-effective and comprehensive solution for businesses seeking professional online presence without the hassle of managing technical details. The website demonstrates a modern technical infrastructure using Nuxt.js and integrates Google Tag Manager and cookie consent mechanisms, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced, though explicit security headers and privacy policies are lacking. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the presence of client logos, Google reviews, and structured data enhance credibility. Overall, Brucy.se presents a professional and trustworthy business with room for improvement in privacy and security transparency.

F

Fritz Reuter und Sohn

reuterundsohn.de

56

Fritz Reuter und Sohn is a well-established local painting and renovation company based in Kassel, Germany, with a history spanning over 100 years. The company offers a wide range of interior and exterior painting services, including specialized offerings such as Feng Shui color consulting and mold remediation. Their target audience includes both residential and commercial customers in Kassel and surrounding areas. The website reflects a professional and consistent brand image, supported by active social media channels and modern web technologies.

L

Home

loth-online.de

45

The website loth-online.de is currently under construction and provides minimal content, primarily placeholder images and basic navigation links. There is no detailed business description, contact information, or service offerings visible. The site is hosted on German servers (rzone.de) and uses basic web technologies including HTML, CSS, JavaScript, and jQuery. A cookie consent banner is implemented, indicating some attention to privacy compliance. However, no privacy policy content beyond a linked page is visible, and no terms of service or security policies are present. The WHOIS data is limited, showing only domain status and nameservers, with no registrant details, which reduces trustworthiness. No WAF or blocking mechanisms are detected, and the site is fully accessible.

Masin Idriss is a small German-based interior design and furniture company specializing in creating functional and individual design concepts for various types of spaces including homes, lofts, and commercial premises. The company emphasizes craftsmanship and professional planning, supported by a partner network (GOETHE 64) and a commitment to fostering young talent through internships and coaching. The website reflects a niche market position with a focus on quality and personalized service. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for interactive galleries. It is hosted by IONOS SE, a reputable provider, and shows moderate performance with good mobile optimization. However, the site lacks advanced security headers and DNSSEC, which are recommended for improved security posture. From a security perspective, the site uses HTTPS but does not implement additional security policies or incident response contacts. Privacy compliance is minimal, with a basic privacy policy linked in the imprint but no cookie consent mechanism or GDPR explicit indicators. No forms or tracking scripts are present, reducing data collection risks but also limiting marketing insights. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced security measures and privacy compliance improvements to align with best practices and regulatory requirements.

B

Baum & Söhne Möbelwerkstätten

baum-moebel.de

28

Baum & Söhne Möbelwerkstätten is a small regional manufacturing business specializing in modern woodworking and custom furniture production based in Kassel, Germany. The company combines traditional craftsmanship with modern production techniques, positioning itself as a leading local furniture workshop. The website reflects this focus with clear business descriptions and service offerings related to furniture and interior design. Technically, the website uses modern HTML5, CSS3, and JavaScript assets hosted on kasserver.com, indicating a moderate level of digital maturity. The site is mobile optimized and has good navigation and content quality, though it lacks advanced CMS or frameworks and does not use structured data markup. Security posture is moderate; while no critical vulnerabilities or exposed data are evident, the absence of security headers and cookie consent mechanisms reduces compliance and security scores. WHOIS data is minimal but consistent with a small business hosting provider. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

The website milanocortina2026.org is currently inaccessible beyond a security CAPTCHA challenge page implemented via AWS WAF. This prevents access to any substantive content, including business information, policies, or services. The domain is registered with Key-Systems GmbH since 2018, consistent with the event timeline for the 2026 Winter Olympics. The technical infrastructure leverages AWS WAF and CAPTCHA services to protect against bots and spam. Due to the content being blocked, no privacy, cookie, or terms of service policies are detectable, nor is any contact information or business description available. The security posture is limited to the presence of WAF protections but lacks visible security headers or metadata. Overall, the site cannot be fully analyzed until the CAPTCHA challenge is passed or removed.

A

Airbnb, Inc.

airbnb.com

61

Airbnb, Inc. operates a leading global online marketplace for vacation rentals and travel experiences, serving millions of users worldwide. The platform connects hosts offering diverse lodging options with travelers seeking unique accommodations, supporting over 8 million listings across more than 220 countries. Airbnb's market position is strong, leveraging a scalable digital platform with extensive localization and a trusted brand. Technically, the website employs modern web technologies including React, advanced performance monitoring, and robust SEO and accessibility features, ensuring a fast and user-friendly experience across devices. Security posture is solid with HTTPS enforcement, comprehensive security headers, and active error monitoring, though explicit public security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, reflecting adherence to GDPR and other regulations. Overall, Airbnb demonstrates a mature digital presence with high trustworthiness and professionalism, suitable for its enterprise scale and global audience.

R

Refokus

refokus.com

65

Refokus is a boutique digital agency specializing in high-end branding, web design, and Webflow development services targeted at B2B startups, venture capital firms, and large innovative organizations. The company positions itself as a fast, quality-focused agency leveraging Webflow, AI, and proprietary frameworks to deliver conversion-focused websites. Technically, the website is built on Webflow CMS with modern JavaScript libraries such as GSAP and ThreeJS, ensuring a visually engaging and performant user experience. Analytics and marketing tools like Google Analytics, Ahrefs, and Intellimize are integrated with consent mechanisms. Security posture is strong with HTTPS and some security headers, though explicit privacy and cookie policies are missing, and no contact information or security incident channels are visible. WHOIS data is unavailable, which reduces trust slightly but the professional presentation and technology use indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and security, but privacy compliance and business credibility could be improved.

The website www.myvaud.ch serves as the official tourism portal for the Canton of Vaud in Switzerland, offering comprehensive information on destinations, activities, practical advice, business events, and inspirational content for visitors. It targets tourists, event planners, and local businesses, positioning itself as a key regional tourism authority. The site is built on the MyCity Tourism Information System CMS and employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager. The technical infrastructure supports good mobile optimization and moderate performance, with HTTPS enabled and cookie consent mechanisms in place. However, explicit privacy policies, terms of service, and direct contact information are not clearly found in the provided content, which slightly impacts privacy compliance and user trust. Security posture is adequate with HTTPS and consent-based tracking, but lacks visible security headers and incident response details. Overall, the site is professional, trustworthy, and well-branded, but could improve transparency and security best practices.

S

SIX

ebill.ch

77

eBill is a digital invoicing platform operated by SIX Group AG, serving primarily the Swiss market. It enables over 3.7 million registered users to receive and pay invoices securely and conveniently within their online banking environment. The service is well integrated with 95% of Swiss financial institutions, positioning it as a market leader in digital invoicing in Switzerland. The website provides comprehensive information about eBill's features, benefits, and usage, targeting both private and business customers. The business model focuses on streamlining invoice processing and payments digitally, enhancing user convenience and security.

Strapi Solutions operates the website strapi.io, offering a leading open-source Node.js headless CMS platform. The company provides a comprehensive content management system that enables developers and content managers to create, manage, and deliver content across digital devices. Their business model includes open-source software, an enterprise edition, and cloud hosting services, positioning them strongly in the technology sector with a focus on developer and business teams. The website reflects a mature digital presence with extensive marketing and analytics integrations, modern web technologies, and a professional design that supports excellent user experience and SEO. Technically, the site leverages Next.js, Node.js, and various analytics and marketing tools such as Google Tag Manager, HubSpot, Amplitude, and Hotjar. Hosting is inferred to be on AWS infrastructure, ensuring robust performance and scalability. The site is mobile-optimized and accessible, with fast loading times and proper meta tags. From a security perspective, the site enforces HTTPS, uses reCAPTCHA Enterprise, and implements cookie consent via Cookiebot. However, there is room for improvement in publishing explicit privacy policies, terms of service, incident response contacts, and vulnerability disclosure mechanisms. DNSSEC is not enabled, which could enhance domain security. Overall, the security posture is strong but could benefit from enhanced transparency and formal documentation. The overall risk assessment is low, with no signs of blocking, malware, or phishing. The domain registration is consistent with the business identity and history, supporting legitimacy. Strategic recommendations include adding privacy and terms pages, publishing security contact information, enabling DNSSEC, and maintaining transparency to enhance trust and compliance.

J

Jungfreisinnige Schweiz

jfar.ch

51

Jungfreisinnige Kanton Appenzell Ausserrhoden (JFAR) is a liberal youth political organization in Switzerland focused on promoting freedom and self-responsibility among young citizens. The website serves as an informational and engagement platform for youth interested in liberal politics within the canton. Technically, the site is built on WordPress using the Avada theme and leverages modern plugins such as Yoast SEO and Slider Revolution, indicating a moderate level of digital maturity. The site is mobile optimized and includes event management features, enhancing user engagement. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and formal incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

F

FDP Stein am Rhein

fdp-steinamrhein.ch

46

FDP Stein am Rhein is a local political group representing liberal and reform-oriented policies within the canton of Schaffhausen, Switzerland. The website serves as an informational platform highlighting their goals, political activities, and recent news. The site targets liberal-minded residents of Stein am Rhein and surrounding areas, emphasizing values such as freedom, community, and progress. The business model is that of a political organization focused on local governance and community engagement. Technically, the website uses modern JavaScript frameworks including Livewire and jQuery, with modular scripts and CSS for styling. The site is mobile optimized and provides a good user experience with clear navigation. However, SEO metadata is minimal and accessibility features are basic. No advanced analytics or tracking tools are detected, and cookie consent is implemented properly. From a security perspective, the site uses HTTPS but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is basic but present, with a privacy policy and cookie consent banner. The WHOIS data aligns well with the website's claims, indicating legitimacy and trustworthiness. Overall, the website is a well-structured, safe, and professional platform for a local political party, with room for improvement in security headers, SEO, and accessibility. No critical security issues were detected, and the site is fully accessible without WAF or blocking mechanisms.

S

SIX

six-group.com

80

SIX is a leading Swiss financial market infrastructure provider connecting financial markets with infrastructure, data, and services. The company operates multiple specialized platforms including the Swiss Stock Exchange, securities services, banking services, and financial information products. Their website reflects a mature enterprise with a broad service portfolio targeting financial institutions and market participants. The digital presence is professional, well-structured, and optimized for multiple languages and devices. Technically, the site uses modern web technologies including Adobe Experience Manager CMS, Google Analytics, and OneTrust for privacy compliance. Security posture is strong with HTTPS enforced and secure login portals, though explicit security policies and vulnerability disclosures are not publicly visible. WHOIS data is unavailable, which slightly reduces transparency but is not uncommon for large enterprises. Overall, SIX demonstrates a high level of digital maturity and business credibility.

L

LITRA

litra.ch

58

LITRA is a well-established Swiss association dedicated to public transportation, with nearly 90 years of history and over 200 members. The organization provides comprehensive information services, advocacy, publications, and events focused on the public transport sector in Switzerland. The website reflects a professional and consistent brand image, targeting stakeholders such as transport companies, policymakers, and the general public interested in sustainable mobility solutions. Technically, the site uses modern web technologies including JavaScript and CSS, integrates Google Tag Manager for analytics, and Mailchimp for newsletter management. The site is mobile-optimized and accessible with good SEO practices. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, though it could benefit from enhanced security policies and incident response disclosures.

1

10dencehispahard, S.L.

lecturasdelchester.com

53

Lecturas Del Chester is a small local bookstore based in Spain, operating an online e-commerce platform to sell books to the local community. The website uses WordPress with the Divi theme and WooCommerce plugin, indicating a standard retail e-commerce setup. The site content is primarily in Spanish and targets neighborhood customers interested in books. The business appears to be recently established in 2021, consistent with the domain registration data. Technically, the website is moderately optimized with good mobile responsiveness and basic SEO practices. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improved protection. Privacy compliance is minimal as no privacy or cookie policies are present, which is a compliance risk under GDPR. Contact information and incident response details are not found, limiting user trust and support options. Overall, the website is functional and moderately professional but requires improvements in privacy, security, and transparency to enhance trust and compliance.

B

Banque Cantonale Vaudoise

bcv.ch

68

Banque Cantonale Vaudoise (BCV) is a well-established Swiss bank founded in 1845, serving primarily the canton of Vaud. It offers a broad range of banking services including retail banking, SME credit, private banking, asset management, and digital banking solutions such as e-banking, Apple Pay, and TWINT. The bank holds a strong market position as the leading bank in its region with a high credit rating (AA by Standard & Poor's) and a large customer base of approximately 370,000 clients. The website reflects a mature digital infrastructure built on Adobe Experience Manager, with modern JavaScript technologies and integration with Adobe Analytics for data insights. The design is professional, mobile-optimized, and user-friendly, supporting clear navigation and comprehensive content relevant to its audience.

B

Bigbank Group

bigbank.eu

72

Bigbank Group operates as a financial institution specializing in banking services such as loans and deposits, targeting individuals and businesses in Europe. The website is professionally designed using modern frameworks like Nuxt.js and Bootstrap, with moderate performance and good mobile optimization. Security posture is limited based on the provided data, with no visible security headers or privacy policies, indicating room for improvement in compliance and security best practices. Overall, the website presents a credible business front but lacks visible privacy and security documentation, which are critical for trust and regulatory compliance.

The Consent Framework website by Sirdata presents a professional platform focused on managing user consent for advertising cookies within the European Union and the United Kingdom. The initiative aims to balance privacy with the funding of free content through respectful advertising practices. The website uses modern web technologies including Bootstrap, Google Fonts, Material Icons, and integrates Plausible Analytics for privacy-conscious tracking. The technical infrastructure appears sound with good mobile optimization and moderate performance. Security posture is decent with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. The lack of WHOIS registration data is a significant concern, reducing trust in domain legitimacy. Privacy and cookie policies are not explicitly found, and no contact information is provided, which impacts compliance and business credibility. Overall, the site is safe and suitable for general audiences but requires improvements in transparency and domain registration clarity.

M

Mediapart

mediapart.fr

64

Mediapart is a French independent digital news media outlet specializing in investigative journalism, offering subscription-based access to its content. It is recognized for its editorial independence, absence of advertising, and reliance on reader support. The website provides rich content including articles, videos, podcasts, and newsletters, targeting a general audience interested in in-depth news and analysis. Technically, the site uses modern JavaScript frameworks and tracking tools with a cookie consent mechanism, hosted partially on Azure Blob Storage. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit vulnerability disclosure program is found. Privacy compliance is strong with comprehensive policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-optimized for user experience.

A

Altreconomia

altreconomia.it

45

Altreconomia is an independent Italian media outlet focusing on economy, lifestyles, environment, and culture. The website provides news and analysis targeted at Italian-speaking audiences interested in these topics. The business operates primarily as a media and publishing entity with a small organizational size and a founding date around 2000. Technically, the site is built on WordPress and uses common web technologies and analytics tools such as Matomo and Google Tag Manager. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but no advanced security headers or DNSSEC. A critical concern is the domain's expired status, which poses risks to availability and trust. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR indicators. Contact information and incident response details are absent, limiting user trust and compliance. Overall, the site is functional and professional but requires urgent attention to domain renewal and privacy compliance to improve security and credibility.

S

Shareaholic

openshareweb.com

62

Shareaholic is a well-established content marketing platform offering a comprehensive suite of tools designed to help businesses and content creators engage audiences, increase traffic, and monetize content. The website demonstrates a professional digital presence with strong branding, extensive marketing integrations, and a user-friendly interface. The platform is trusted by over 300,000 users and is featured in major media outlets, indicating a solid market position. Technically, the website employs modern web technologies including JavaScript frameworks, Google Analytics, HubSpot, Drift chat, and New Relic monitoring, supported by AWS Cloudfront CDN for performance. The site is mobile-optimized and SEO-friendly, with good loading speeds and accessibility features, though some accessibility improvements could be made. From a security perspective, the site uses HTTPS and includes monitoring scripts but lacks explicit public security policies or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common for businesses but slightly reduces transparency. Overall, Shareaholic presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance to further strengthen trust and compliance.

A

Autohaus Ostmann

autohaus-ostmann.de

55

Autohaus Ostmann is a regional automotive dealership in Germany offering new and used vehicles from multiple brands including Audi, Volkswagen, Skoda, Seat, Cupra, MG, and Maxus. The company provides a comprehensive range of services such as vehicle sales, leasing offers, service appointments, and parts sales. The website is professionally designed with good navigation and mobile optimization, targeting car buyers primarily in the German regions of Wolfhagen, Bad Arolsen, and surrounding areas. The business model focuses on multi-brand vehicle retail and after-sales services, positioning itself as a trusted regional player in the transportation sector. Technically, the website uses modern web technologies including Bootstrap, FontAwesome, and JavaScript libraries. It employs Usercentrics for consent management and Matomo along with Facebook Pixel for analytics and tracking, indicating a moderate level of digital maturity and privacy awareness. Hosting is supported by Microsoft Azure DNS infrastructure, suggesting reliable backend support. The site is accessible without WAF or security challenges, and SEO practices are well implemented. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of a privacy policy and terms of service pages reduces privacy compliance confidence. WHOIS data is consistent with a legitimate business domain without privacy protection, supporting the site's trustworthiness. Overall, Autohaus Ostmann presents a professional and trustworthy online presence with good business credibility and technical implementation. Improvements in explicit privacy documentation, security headers, and contact information visibility would enhance compliance and security posture. The site is safe for general audiences with no adult or questionable content detected.

GOETHE 64 is a collaborative network of fourteen specialized entrepreneurs primarily focused on craftsmanship and interior design services in the Kassel region of Germany. The network offers a broad range of services including furniture making, custom staircases, lighting design, natural stone work, bathroom and heating solutions, upholstery, painting, landscaping, and construction. The website reflects a well-structured and professional presentation of these services, targeting both private and commercial clients seeking high-quality, integrated room design solutions. Technically, the website is built with standard HTML5, CSS3, and JavaScript, without reliance on major CMS platforms or advanced frameworks. The site is moderately optimized for mobile devices and SEO, though it lacks advanced accessibility features and performance optimizations. No analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, security headers, cookie consent mechanisms, and formal security or incident response policies. These gaps reduce the overall security posture and privacy compliance. The WHOIS data shows a consistent domain setup with professional DNS hosting but lacks detailed registrant information, slightly lowering trustworthiness. Overall, the website is a credible and professional representation of a regional business network with good content quality and business credibility. However, improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and protect user data.

A

Autohaus Jung GmbH

autohaus-jung.de

56

Autohaus Jung GmbH is a small, regionally focused automotive dealership based in Melsungen, Germany, specializing in Ford and MG vehicles. The company offers a comprehensive range of services including new and used car sales, maintenance, and repairs, targeting local customers passionate about automobiles. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting customer engagement and trust. Technically, the website is built on WordPress with modern JavaScript libraries such as Splide.js for sliders and integrates Google Maps with privacy considerations. The site is mobile optimized, accessible, and performs moderately well, indicating a solid digital infrastructure suitable for its business scale. Hosting is provided by Host Europe, a reputable provider. From a security perspective, the site uses HTTPS with good SSL configuration and employs privacy measures for embedded content. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Autohaus Jung GmbH, but improvements in privacy compliance and security transparency are recommended to enhance user confidence and regulatory adherence.

A

AWO Nordhessen

awo-nordhessen.de

54

AWO Nordhessen is a regional non-profit organization focused on social services and community support in the Nordhessen region of Germany. The website serves as an informational and membership platform, emphasizing core social values such as freedom, justice, tolerance, and solidarity. The organization holds an important position in the regional social service sector, providing economic and societal contributions as a member-based association. The website is built on TYPO3 CMS, indicating a mature and stable technical infrastructure. The presence of Cookiebot for cookie consent management and integration of Google Analytics and Meta Pixel demonstrate a moderate digital maturity with attention to privacy compliance, although no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-branded, targeting a general audience interested in social welfare and community engagement.

W

woowes

woowes.com

64

WOOW is a Swedish executive search and recruitment firm specializing in marketing, sales, analysis, and martech sectors. The company focuses on recruiting key personnel from specialists to CxO-level executives, leveraging deep industry expertise and a structured recruitment process. The website presents a professional image with client testimonials and a clear value proposition targeting businesses seeking talent in digital marketing and related fields. Technically, the site is built on modern JavaScript frameworks (Nuxt.js) and integrates common analytics and tracking tools such as Google Tag Manager and LinkedIn Insight. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, raising questions about domain registration legitimacy, though website content suggests a legitimate business. Overall, the site is professional and functional but would benefit from enhanced privacy and security transparency.

N

NewsMachine AB

newsmachine.com

40

NewsMachine AB is a Swedish technology company specializing in AI-powered tools for public relations professionals. Their website presents a professional and modern interface built on WordPress with the Divi theme, targeting businesses and PR professionals seeking to enhance and measure their PR efforts using AI technology. The company appears to have been founded around 2021 and maintains an active digital presence with social media integration. Technically, the site employs common analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA to enhance user experience and security. However, the absence of explicit privacy and cookie policies and missing WHOIS data for the subdomain reduce the overall trust and compliance posture. Security measures like HTTPS are assumed but not fully verifiable from the data, and no advanced security headers were detected. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

G

Guldägget

guldagget.se

40

Guldägget is a well-established Swedish creative communication competition, recognized as the largest and oldest in its sector. The website serves as a platform to showcase winners, provide competition information, and engage the creative community in Sweden. The business model revolves around promoting creativity through awards, supported by sponsors and partners. Technically, the site is built on WordPress with a custom theme, hosted by Loopia AB, and demonstrates moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is professional and trustworthy but could enhance security and compliance to better protect users and data.

EXPERTsuisse is a well-established Swiss professional association specializing in auditing, taxation, and fiduciary services, celebrating its 100-year anniversary in 2025. The organization positions itself as a trusted expert body providing knowledge, industry insights, and events to professionals and companies in the Swiss finance sector. The website reflects this with rich content including expert Q&A, event information, and historical milestones. Technically, the site is built on the Contao CMS, uses modern web technologies including Lottie animations, and integrates Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Contact information is complete and transparent, enhancing trust. Overall, the site is professional, credible, and well-maintained.

L

Lilo

lilo.org

63

Lilo is a French search engine focused on financing social and environmental projects through user searches while ensuring strong privacy protections. It operates a business model that redistributes 80% of its profits to projects chosen by users, positioning itself as a socially responsible alternative to mainstream search engines. The website is well-designed, mobile-optimized, and uses modern technologies including WordPress, React, and Microsoft Bing integration. Privacy policies and terms of service are comprehensive and accessible, though explicit cookie consent mechanisms are lacking. Security posture is strong with HTTPS and security headers in place, but no public security policy or incident response information is found. WHOIS data is unavailable, limiting domain trust verification, but the website's active social presence and partnerships support legitimacy.

F

Fondation Tara Océan

fondationtaraocean.org

68

Fondation Tara Océan is a reputable non-profit organization focused on ocean exploration and environmental awareness. Established in 2019, it conducts scientific expeditions and educational outreach to promote ocean conservation. The website reflects a professional and consistent brand image, targeting a broad audience including the general public, scientists, and educators. The foundation operates primarily in France and maintains a medium organizational size. Technically, the website is built on WordPress, leveraging modern analytics and tracking tools such as Google Analytics, Hotjar, and Google Tag Manager, with appropriate consent mechanisms in place. Hosting is provided by OVH sas, a well-known provider, and the site uses HTTPS with a good SSL configuration.

R

ReseauCulture.fr

reseauculture.fr

55

ReseauCulture.fr is a newly launched Mastodon instance dedicated to the French arts and culture sector, initiated by public and private cultural actors and supported by the French Ministry of Culture. The platform aims to provide a decentralized, independent, and ethical social media environment for cultural information sharing and community engagement. The website content is professionally presented, with clear descriptions of the project's goals and partners, targeting cultural institutions and interested publics in France. Technically, the site runs on Mastodon 4.3.9 with modern web technologies and is hosted by Bearstech, ensuring a stable and secure infrastructure. Security posture is strong with HTTPS, security headers, and script integrity checks, though some compliance aspects like cookie consent and terms of service are missing. Overall, the site is trustworthy and well-positioned for its niche audience, though it would benefit from enhanced privacy compliance and formal security policies.

С

СуперХостинг.БГ

superhosting.bg

68

SuperHosting.BG is a well-established Bulgarian web hosting and domain registration provider, celebrating 20 years in business. The company offers a broad range of services including shared hosting, WordPress optimized hosting, managed WordPress with AI assistance, online store hosting via Shopiko, SSL certificates, VPS, and dedicated servers. Their market position is strong within Bulgaria, targeting individuals and businesses seeking reliable online presence solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and cookie consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent with autoblocking scripts, though explicit security headers and policies are not publicly disclosed. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy or terms of service pages. Overall, the site is trustworthy and professional, with moderate user tracking and good SEO practices.

Pixelworks creative studio is a Greek digital agency established in 2003, specializing in web development, e-commerce solutions, online contests, online marketing, corporate identity, and social media management. The company targets businesses and organizations seeking comprehensive digital presence and marketing services. Their website showcases a broad portfolio of clients, indicating a stable market position within the Greek digital services sector. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript with jQuery, Fancybox for galleries, and Adobe Typekit fonts, alongside Google Analytics for visitor tracking. The site is mobile-optimized with good design and navigation, though accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are present, and no privacy or cookie policies are published. Contact information is clearly provided, but no incident response or data protection officer contacts are available. Overall, the site is professional but lacks some compliance and security best practices.

Filmin is a Spanish online streaming platform specializing in cinema, series, and short films, offering high-definition content primarily to Spanish-speaking audiences. The platform operates on a subscription-based model and is positioned as a quality and curated alternative in the Spanish media streaming market. The website is professionally designed with consistent branding and clear navigation, targeting general audiences interested in independent and quality cinema. Technically, Filmin employs modern web technologies including Vue.js, Hotjar for user behavior analytics, Google Tag Manager for marketing and analytics, and CookieYes for cookie consent management. The site is mobile-optimized and uses HTTPS with a good SSL configuration, though additional security headers could enhance its security posture. Privacy and cookie policies are present and indicate GDPR compliance, reflecting a mature approach to user data protection. Security-wise, the site enforces HTTPS and includes CSRF tokens in forms, but lacks publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data due to query restrictions limits the ability to fully verify domain registration legitimacy, but the overall professionalism and trust indicators suggest a legitimate business. Overall, Filmin presents a solid digital presence with good security and privacy practices, though improvements in transparency around security policies and incident response could further strengthen trust and compliance.

L

Leading Swiss Agencies

leadingswissagencies.ch

49

Leading Swiss Agencies is a website focused on showcasing or listing Swiss agencies, targeting businesses or individuals seeking agency services within Switzerland. The site is built on WordPress using the Elementor page builder, indicating a modern but standard CMS infrastructure. The technical setup includes common JavaScript libraries and Google Tag Manager for analytics. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is basic with room for improvement in headers and data protection disclosures. Overall, the website is accessible and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and user confidence.

B

Blackfire

blackfire.io

61

Blackfire is a European-based technology company specializing in continuous observability solutions for PHP and Python applications. Their SaaS platform empowers developers to monitor application performance in real-time, identify bottlenecks, and optimize code proactively. Positioned as a leading Web Observability solution in Europe, Blackfire serves over 1,000 engineering teams worldwide and is part of Platform.sh, enhancing its market credibility. The website demonstrates a mature digital infrastructure built on modern web technologies like Gatsby and React, offering excellent performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, Blackfire presents a professional, trustworthy, and technically sound online presence aligned with its business objectives.

The website btttag.com is currently inaccessible due to a Cloudflare Edge IP Restricted error, indicating a security or DNS misconfiguration that prevents content delivery. The domain is registered since 2011 with GoDaddy and uses Cloudflare for DNS and security services. Due to the blocked status, no business content, contact information, or policies are available for review. The technical infrastructure relies on Cloudflare's network, but DNSSEC is not enabled, and no advanced security headers are detected. The lack of accessible content and policies results in a low trust and security posture score.