Security Directory

S

Shipstage GmbH

shipstage.com

62

Shipstage GmbH operates a sophisticated B2B shipping platform focused on optimizing and automating shipping processes for online retailers, marketplaces, and fulfillment companies. The platform offers multi-carrier integration, shipping label creation, returns management, and shipment tracking, positioning itself as a comprehensive solution in the e-commerce logistics sector. Founded in 2014 and based in Hamburg, Germany, Shipstage leverages modern web technologies including Next.js and AWS hosting to deliver a performant and mobile-optimized user experience. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though DNSSEC is not enabled, representing a minor area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, Shipstage presents a credible and trustworthy business with transparent pricing and extensive customer support resources.

GamiCool is a newly founded technology company specializing in AI-powered game creation and asset generation. Their platform enables users ranging from beginners to professional teams to create playable games and generate diverse game assets such as images, 3D models, music, and sound effects without requiring coding skills. The company positions itself as an innovative SaaS provider simplifying game development workflows with AI assistance. Technically, the website is built on modern frameworks like Next.js and React, hosted likely behind Cloudflare, and integrates analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive structured data enhancing search visibility. Security posture is solid with HTTPS enforced and domain registration locked, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website and business present a professional and trustworthy front with room for improvement in privacy and security transparency.

P

Privacy service provided by Withheld for Privacy ehf

makeshot.ai

60

MakeShot.ai is a unified AI content creation platform offering professional-grade AI video and image generation services through multiple premium models such as Veo 3, Sora 2, and Nano Banana. The platform targets professional content creators, marketing teams, filmmakers, and businesses seeking high-quality, production-ready AI-generated media. The website demonstrates a modern technical infrastructure leveraging Next.js, React, and Cloudflare DNS, with good mobile optimization and fast performance. However, the absence of privacy and cookie policies, as well as security headers, indicates gaps in privacy compliance and security best practices. The domain WHOIS data is privacy-protected and shows an unusual future creation date, which may be a data anomaly but warrants monitoring. Overall, the platform presents a professional and trustworthy front but should improve transparency and compliance documentation to enhance trust and security posture.

S

SEOAI

seoai.run

59

SEOAI.run is a small technology company offering an AI-powered SEO checker tool designed to help businesses optimize their websites by analyzing keyword density and providing actionable SEO insights. The platform operates on a freemium SaaS model with tiered subscription plans, targeting businesses and website owners seeking affordable and effective SEO solutions. The website is professionally designed using modern web technologies such as Next.js and React, integrating secure payment gateways like Stripe and Paddle, and analytics tools including Microsoft Clarity and Google Tag Manager. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. WHOIS data is limited due to TLD restrictions and privacy protection, but the domain appears legitimate and actively maintained. Overall, SEOAI.run presents a trustworthy and functional online service with room for enhancement in privacy compliance and security best practices.

A

Accent Voice

accentvoice.net

56

Accent Voice is a recently launched technology startup specializing in AI-powered accent detection and speech analysis tools. The platform targets language learners and English speakers worldwide, offering real-time voice recording and accent guessing capabilities. The website is built on a modern tech stack including Next.js and React, optimized for mobile and desktop users, and integrates Google Tag Manager for analytics. Security posture is generally good with HTTPS enforced and domain protections in place, though there are opportunities to enhance DNS security and implement security headers. Privacy policies are present and indicate a privacy-first approach with no storage of voice recordings. However, cookie consent mechanisms are absent despite tracking scripts. Overall, the website is professional, user-friendly, and positioned well in its niche market.

Oeb AI is a newly established AI tools directory website launched in 2024, providing a curated collection of AI tools across multiple categories and languages. The platform targets general users interested in AI productivity tools and offers a free directory with sponsored content. Technically, the site is built on modern frameworks such as Next.js and React, leveraging Cloudflare DNS and integrating analytics tools like Microsoft Clarity and Google Tag Manager. The website demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforcement and security headers, though it lacks DNSSEC and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear contact email and domain registration with clientTransferProhibited status, although registrant details are minimal. Overall, the site is professional, trustworthy, and safe for general audiences.

PhotoCollageMaker.io is a US-based technology company offering a free, privacy-focused online photo collage maker. The platform targets general users seeking an easy-to-use tool for creating photo collages without registration or watermarks. The business model is based on free access supported by advertising partnerships. The website is modern, well-designed, and optimized for mobile and desktop browsers. It uses a contemporary tech stack including Next.js and React, with Cloudflare DNS and CDN services. Privacy is a core feature, with all image processing done locally in the user's browser, and a comprehensive GDPR-compliant consent management platform is implemented. Security posture is good with HTTPS and standard best practices, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy and professional, with strong user trust signals and a clear market position as a leading free photo collage tool.

TempMail3.com is a recently established online service (2025) offering free, anonymous, and secure temporary email addresses to help users protect their real inboxes from spam and maintain privacy. The service operates without requiring user sign-up, providing instant disposable email addresses that auto-delete after a short period. Supported by advertising revenue, the website targets general internet users seeking quick and hassle-free disposable email solutions. Technically, the site is built on modern frameworks such as Next.js and React, hosted behind Cloudflare DNS, and optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and explicit security headers like CSP. Privacy compliance is basic with visible privacy and cookie policies and GDPR consent mechanisms. No direct contact information or advanced security policies are published, which limits transparency. Overall, the domain registration and website content are consistent and legitimate, positioning TempMail3 as a trustworthy player in the disposable email market.

Veo3.im is a technology company specializing in AI-powered video generation tools, offering a SaaS platform that enables users to create professional-quality videos with synchronized audio and advanced editing features. The website positions itself as an innovative player in the AI video creation market, targeting content creators, marketers, educators, and filmmakers. The platform offers both free and premium services, with integrations and partnerships enhancing its ecosystem. Technically, the site is built on modern frameworks like Next.js and React, hosted behind Cloudflare DNS, and uses Google and Microsoft analytics tools. The site is mobile-optimized and performs well with good SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. WHOIS data indicates a legitimate domain with consistent registration details. Overall, Veo3.im presents as a credible and professional AI video generation service with room for improvement in privacy and security transparency.

I

Instagram

instagram.com

77

Instagram is a globally recognized social media platform owned by Meta Platforms, Inc., offering photo and video sharing services with a strong market position. The website analyzed is the official login page, designed with modern web technologies including React and JavaScript, optimized for performance and mobile devices. Security posture is strong with HTTPS enforced and appropriate security headers, though privacy and cookie policies are not directly visible on the login page. The domain WHOIS data is not publicly available, which is typical for large tech companies using privacy protection. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

P

Pinterest

pin.it

74

Pinterest is a leading visual discovery and social media platform founded in 2010, headquartered in the United States. It enables users to discover and save ideas across a wide range of interests including fashion, home decor, and recipes. The platform operates primarily through advertising and e-commerce integrations, positioning itself as a key player in the technology sector with a large global user base. The website reflects a mature, enterprise-level digital presence with consistent branding and high-quality content.

T

Trimble Inc.

trimble.com

67

Trimble Inc. is a global technology company specializing in solutions that connect the physical and digital worlds across industries such as construction, transportation, geospatial, agriculture, government, and utilities. Their website showcases a comprehensive portfolio of hardware, software, and cloud-based services designed to improve operational efficiency and project outcomes. The company positions itself as a leader in industrial technology with a strong focus on innovation and integration. The technical infrastructure of the website is modern, leveraging React and Gatsby frameworks, with good mobile optimization and accessibility features. The site employs standard enterprise-grade security practices including HTTPS, security headers, and secure form handling. Tracking and analytics tools are used moderately, with privacy and cookie policies in place that indicate GDPR compliance. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security communication. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and extensive business information on the site. Overall, the website reflects a mature, enterprise-level digital presence with high content quality and strong business credibility. Strategic recommendations include enhancing security transparency, publishing incident response details, and maintaining vigilance on third-party scripts to sustain security and compliance standards.

T

Tilsig AS

tilsig.com

62

Tilsig AS is a Norwegian technology company specializing in decision support solutions for the optimization and operation of hydropower and water resource management. Their offerings include IoT sensor data collection, real-time monitoring dashboards, and installation services, targeting small to large hydropower companies. The company emphasizes 'Made in Norway' quality and provides comprehensive digitalization solutions for waterway monitoring. Technically, the website is built on modern frameworks such as Next.js and React, with a fast, mobile-optimized, and accessible design. Security posture is strong with HTTPS, security headers, and encrypted IoT communications, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence, though the WHOIS data is missing, indicating possible recent registration or privacy masking. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust and compliance.

Fastly, Inc. is a leading edge cloud platform provider specializing in content delivery network (CDN), video delivery, cloud security, and edge computing services. The company targets enterprises and developers seeking faster, safer, and more scalable digital experiences. Their market position is strong within the technology and telecommunications sectors, supported by a comprehensive suite of services and certifications such as ISO 27001 and SOC 2 Type II. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation tailored to their target audience. Technically, Fastly's website is built on modern frameworks like Gatsby and React, hosted on their own edge cloud infrastructure, ensuring fast performance and excellent mobile optimization. The site employs robust security headers and enforces HTTPS, demonstrating a strong security posture. Published security policies, incident response contacts, and a vulnerability disclosure program further reinforce their commitment to security and compliance. The security evaluation reveals no significant vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms and GDPR adherence. Business credibility is high, supported by transparent contact information, certifications, and trust indicators. Overall, the website and domain exhibit high trustworthiness and professionalism. Recommendations include continuous monitoring and updating of third-party libraries, enhancing accessibility features, and maintaining transparency on data retention policies to sustain and improve their security and compliance posture.

J

JTT Konsultāciju Sistēma | Jēkabpils Tehnoloģiju Tehnikums

jttkonsultacijusistema.lv

42

The website jttkonsultacijusistema.lv serves as an online consultation scheduling system for Jēkabpils Tehnoloģiju tehnikums, a Latvian educational institution. It facilitates students and teachers in managing consultation appointments efficiently, providing features such as viewing available times, subjects, and room information. The platform targets primarily students and pedagogues within the institution, aiming to reduce administrative overhead and improve scheduling clarity. Technically, the site is built using modern web technologies including React and Microsoft Authentication Library (MSAL), indicating a contemporary frontend infrastructure. The use of ES modules and Vite as a build tool further supports a modern development approach. The site is mobile-optimized and demonstrates good design and user experience, although accessibility features are basic. From a security perspective, the site uses HTTPS as implied by the Open Graph URL, but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance given its EU location. No contact information or incident response channels are provided, limiting transparency and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional and well-designed for its niche educational purpose but would benefit from enhanced security practices, privacy compliance measures, and clearer contact information to improve trust and regulatory adherence.

NICENA.LV is a Latvian online platform specializing in real estate transaction data, listings, and market statistics. It targets users interested in the Latvian property market, including buyers, sellers, renters, and analysts. The platform offers detailed filters for neighborhoods, cities, and regions, and provides interactive statistics and data exports. Some features like property listings and blogs are still under development. The website is built on a modern React and Next.js stack with Material-UI components, ensuring good mobile optimization and user experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers and incident response policies are not explicitly present. Overall, the site is safe, professional, and compliant with GDPR requirements.

S

Snippets AI, Ltd

getsnippets.ai

65

Snippets AI, Ltd operates a sophisticated AI prompt management platform designed to enhance productivity for individuals and teams working with AI models. The company offers a SaaS solution that enables users to create, organize, and collaborate on AI prompts and snippets, supporting multiple platforms including Windows, macOS, and Linux. The platform integrates advanced features such as version control, API access, and AI agent building, positioning itself as a key productivity tool in the AI ecosystem. The website demonstrates a high level of digital maturity with modern technologies like React and Next.js, hosted on Vercel, and incorporates comprehensive SEO and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the business presents a trustworthy and professional front with clear contact information, social proof, and partner endorsements, though WHOIS data is unavailable due to privacy protection. Strategic recommendations include enhancing transparency around security policies and incident response, and establishing a public vulnerability disclosure program to further strengthen trust and compliance.

N

National Wealth Fund Limited

nationalwealthfund.org.uk

64

The National Wealth Fund Limited is a UK government-owned entity focused on financing transformational projects across the UK with a capital commitment of £27.8 billion. The organization provides a range of financing tools including loans, guarantees, and equity investments, primarily targeting private sector companies and local authorities. The website reflects a professional and authoritative presence consistent with a government-backed institution, emphasizing impact, strategy, and transparency through published reports and case studies. Technically, the website is built on modern frameworks such as Next.js and React, hosted likely on Azure infrastructure, and integrates analytics and consent management tools to ensure compliance and performance. Security posture is strong with HTTPS enforcement, bot protection via Google reCAPTCHA, and cookie consent mechanisms, although explicit security policies and vulnerability disclosure information are not publicly available. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, though WHOIS data is unavailable due to domain registration constraints, which does not detract from the legitimacy of the entity. Strategic recommendations include publishing a formal security policy and vulnerability disclosure program to enhance transparency and trust.

P

Pentester LLC

pentester.com

69

Pentester LLC operates a cybersecurity software platform specializing in penetration testing and web vulnerability scanning. The company offers a paid software product priced at $49.99 USD, targeting security professionals and IT teams seeking to secure their digital assets. The website is professionally designed using modern technologies such as Gatsby and React, ensuring fast performance and good mobile optimization. The presence of structured data and a comprehensive cookie consent mechanism demonstrates digital maturity and privacy awareness. From a security perspective, the website enforces HTTPS and employs security best practices including Google reCAPTCHA v3 and domain registrar locks. However, DNSSEC is not enabled, and there is no publicly visible security policy or incident response contact information, which could be improved. The site integrates multiple third-party marketing and analytics tools, resulting in extensive user tracking but with appropriate cookie consent controls. Overall, the website presents a trustworthy and professional image with a solid technical foundation. The domain registration history supports the legitimacy of the business. Strategic recommendations include enabling DNSSEC, publishing clear security and incident response policies, and adding terms of service to enhance legal clarity and user trust.

Jahan University is an educational institution based in Afghanistan, offering a range of undergraduate and graduate programs including medical education. The website serves as a portal for academic information, admissions, and research activities. The university positions itself as a leading national academic institution with a focus on teaching, research, and public service. The technical infrastructure is based on a React single-page application hosted behind Cloudflare, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the website is functional but could benefit from enhanced security and privacy practices.

R

Red Sift

redsift.com

10

Red Sift is a cybersecurity company specializing in proactive security solutions across email, web, and PKI infrastructures. Their platform leverages AI to help businesses deploy and manage security protocols such as DMARC and TLS, aiming to create a fundamentally safer internet. The company has established a solid market presence with over 1,200 teams worldwide trusting their services. The website reflects a modern, professional digital presence built on Next.js and React, hosted with Cloudflare DNS services, and includes privacy compliance mechanisms such as Cookiebot for cookie consent. However, explicit privacy policies and terms of service are not clearly found in the provided content, which could be improved for transparency and compliance.

E

edy365.com administrācijas panelis

edy365.com

65

edy365.com operates as a subscription-based platform targeting companies and educational institutions, providing management and support services. The portal.edy365.com subdomain serves as an administration panel login interface, indicating a SaaS model focused on education and corporate clients. The website employs a modern React-based frontend with Mantine UI components, integrating Google Adsense and Google Analytics for advertising and user tracking. Security posture is adequate with HTTPS enforced and secure password input fields, but lacks visible security headers and privacy compliance documentation. No WHOIS data is available for the subdomain, which is typical, but limits domain registration insights. Overall, the platform appears legitimate and professionally maintained with moderate technical maturity and business credibility.

F

Ferratum by Multitude Bank p.l.c.

ferratum.lv

55

Ferratum by Multitude Bank p.l.c. is a licensed financial institution operating primarily in Latvia, offering fast and flexible financial solutions such as consumer loans, credit lines, and a banking app. The company has a strong market presence with over 2 million clients since 2005 and operates in 13 countries. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, it leverages modern frameworks like React and Next.js, with advanced script management via Partytown to enhance performance and security. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure mechanisms, and enhancing security contact channels to further strengthen trust and compliance.

R

Ringier AG

tv8.ch

61

The website boutique.illustre.ch is a subscription platform for L'illustré, a Swiss magazine published by Ringier AG. It offers paper subscriptions for various durations, including 3 months, 6 months, 1 year, and 2 years, with additional access to digital content such as an e-magazine and TV8 channels. The site targets French-speaking Swiss readers interested in lifestyle and entertainment content. Technically, the site is built using modern frameworks like Next.js and React, hosted on AWS infrastructure, and integrates OneTrust for cookie consent and New Relic for performance monitoring. Security posture is strong with HTTPS and standard security headers implemented. However, the site lacks explicit privacy policy and terms of service pages on the analyzed URL, and no direct contact information is visible, which slightly impacts privacy compliance and user trust. WHOIS data confirms the domain is legitimately owned by Ringier AG, matching the website's branding and business claims.

R

Ringier AG

gaultmillau.ch

11

GaultMillau.ch is a leading Swiss gastronomy media platform operated by Ringier AG, providing daily news, recipes, restaurant reviews, and videos featuring top chefs. The website targets food enthusiasts and professionals in Switzerland, offering comprehensive culinary content and partnerships with reputable brands. Technically, the site employs modern web technologies including React and GraphQL, with strong SEO and mobile optimization. Security posture is robust with HTTPS enforcement, cookie consent mechanisms, and no detected vulnerabilities, though explicit security policies and incident response details are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

B

Bitpanda

bitpanda.com

70

Bitpanda is a prominent European online brokerage platform specializing in a wide range of investment products including cryptocurrencies, stocks, ETFs, precious metals, and leverage trading. The platform targets retail investors and crypto enthusiasts across Europe, offering easy access to trading starting from as low as 1 euro. Bitpanda positions itself as a leading broker with a comprehensive suite of services including savings plans, staking, and educational resources to empower users. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile optimization, and good SEO practices. The use of analytics tools like RudderStack indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs multiple security headers, and shows no visible vulnerabilities, reflecting a strong security posture. However, the absence of publicly available WHOIS data and direct company contact details slightly reduces transparency. Overall, Bitpanda presents a professional, trustworthy, and compliant online presence suitable for its financial services business.

J

JobRad GmbH

jobrad.org

68

JobRad GmbH operates as Germany's leading provider of bicycle leasing services, specializing in offering employees, employers, self-employed individuals, and public sector organizations access to leased bicycles and e-bikes as a sustainable mobility benefit. The company maintains a strong market position with over 100,000 corporate clients and a comprehensive service portfolio including digital portals for order management and customer support. The website reflects a mature digital presence with modern technologies such as Next.js and React, integrated consent management, and customer review widgets enhancing user trust and engagement. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registration details slightly impacts domain trust but does not detract from the overall professionalism and legitimacy of the business. Strategic recommendations include publishing detailed security and incident response policies and improving transparency around domain registration data.

E

Energy

energy.ch

57

Energy.ch is a leading Swiss media and entertainment platform focused on radio broadcasting and digital content delivery. The website targets a broad Swiss audience with localized entertainment and streaming services. It is part of the Ringier AG media group, a well-established entity in Switzerland. The site demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, integrated with advertising and tracking tools like Google Tag Manager and Yieldlove. Privacy compliance is well addressed with comprehensive policies and a cookie consent mechanism powered by OneTrust. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

R

Rockit Radio

rockitradio.ch

52

Rockit Radio is a Swiss-based online webradio platform specializing in rock music streaming, ranging from classic rock to alternative genres. The website positions itself as a niche media service targeting rock music enthusiasts primarily in the German-speaking regions of Switzerland. It offers live streaming, curated playlists, and multiple radio channels under its brand umbrella. The platform maintains a consistent brand identity with active social media engagement on Facebook and Instagram, enhancing its market presence. Technically, the website leverages modern web technologies including React and Next.js frameworks, integrated with Contentful as a headless CMS. It employs industry-standard analytics and advertising tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Prebid.js for programmatic advertising. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers to protect users. It also integrates a GDPR-compliant cookie consent mechanism via OneTrust. However, it lacks explicit security policies or incident response contact information, and no vulnerability disclosure policy is present. No critical vulnerabilities or suspicious patterns were detected, indicating a mature security posture appropriate for its business scale. Overall, Rockit Radio presents a professional, trustworthy, and compliant online media service with a solid technical foundation. Strategic improvements in security transparency and incident response readiness could further enhance its risk management and user trust.

V

Vintage Radio

vintageradio.ch

52

Vintage Radio operates as a Swiss-based online webradio streaming service specializing in classic pop music hits from the 1960s through the 1990s. The website presents a professional and consistent brand image, targeting a general audience interested in nostalgic music experiences. Their market position is niche, focusing on vintage pop classics, supported by curated playlists and live streaming services. The business model revolves around digital streaming and advertising revenue. Technically, the site leverages modern web technologies including React and Next.js frameworks, with integration of Google Analytics and advertising platforms such as Google DoubleClick and Ringier Advertising. The site is mobile-optimized and demonstrates good SEO practices, though hosting provider details are not explicitly identified. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact information suggests room for improvement in transparency and preparedness. Privacy compliance is basic, with a privacy policy and cookie banner present but lacking detailed GDPR compliance indicators. Overall, Vintage Radio presents a trustworthy and professionally maintained digital presence with moderate technical maturity and a solid security posture. Strategic enhancements in privacy transparency and incident response readiness would further strengthen their risk management and user trust.

R

Ringier AG

cash.ch

65

Cash.ch is a leading Swiss financial news and trading platform operated by Ringier AG, a reputable family-owned media group. The website offers comprehensive financial news, market data, and online trading services targeting Swiss and European investors and financial professionals. It maintains a strong market position as the largest Swiss financial platform with a broad range of services including news, stock prices, trading brokerage, and financial calculators. The platform is well-branded and professionally maintained, reflecting high content quality and user engagement.

R

Ringier AG

handelszeitung.ch

67

Handelszeitung.ch is a leading Swiss business news website operated by Ringier AG, providing current reports and in-depth analyses on economy, finance, politics, and insurance. The site targets a general audience interested in business and financial news, leveraging a subscription and advertising-based business model. The website demonstrates a mature digital infrastructure with modern technologies such as React, GraphQL, and integrated advertising and consent management tools. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust with comprehensive privacy and cookie policies and active consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the Swiss media market.

J

jobbern.ch

jobbern.ch

53

jobbern.ch operates as a leading job portal focused on the Bern region in Switzerland, offering daily updated job listings and subscription-based job alerts. The platform targets job seekers and employers within the Bern area, positioning itself as a key player in the local employment market. The website employs modern web technologies such as React and integrates Google Tag Manager and ConsentManager for analytics and cookie consent management. While the site demonstrates good design quality and user experience, it lacks explicit privacy and terms of service pages, which are critical for compliance and user trust. Security posture is adequate with HTTPS enforced and basic security headers, but could be improved with additional headers and clearer security policies. The WHOIS data aligns well with the website's business claims, indicating a legitimate and consistent registration. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security transparency.

T

Tamedia Espace AG

berneroberlaender.ch

61

Berner Zeitung is a well-established regional news media outlet under Tamedia Espace AG, serving the Bernese Oberland region with news, events, and subscription services. The website demonstrates a mature digital infrastructure using modern web technologies such as Next.js and UnityCMS, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and consent management for GDPR compliance. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

R

Ringier AG

beobachter.ch

65

Beobachter.ch is a leading Swiss media platform operated by Ringier AG, focusing on daily publications about law, justice, and consumer rights. The website offers independent legal advice and subscription-based content, targeting a broad Swiss audience interested in legal and social issues. The platform is professionally designed, mobile-optimized, and integrates modern technologies such as React, GraphQL, and advanced advertising and tracking tools with GDPR-compliant consent mechanisms. Security posture is strong, with HTTPS enforcement and comprehensive security headers, although a dedicated security policy and vulnerability disclosure page are absent. Overall, Beobachter.ch demonstrates a mature digital presence with high trustworthiness and compliance standards.

R

Ringier AG

interviewbyringier.ch

64

Interview by Ringier is a subscription-based print magazine platform operated by Ringier AG, a reputable Swiss media company. The website offers exclusive interviews with prominent Swiss personalities and targets German-speaking Swiss readers interested in cultural and in-depth interview content. The platform is professionally designed using modern web technologies such as React and Next.js, with performance and mobile optimization considered. Security measures include HTTPS, cookie consent via OneTrust, and monitoring through New Relic. Legal pages such as privacy policy, terms of service, and imprint are present and accessible. Overall, the website demonstrates a mature digital presence with good business credibility and privacy compliance.

S

Sandoz España

sandozfarma.es

62

Sandoz España operates as a subsidiary of Novartis, focusing on providing pharmaceutical products and healthcare solutions within Spain. The website serves as a corporate portal offering information about the company, its leadership, therapeutic areas, patient commitments, and career opportunities. The site targets healthcare professionals, patients, and potential employees, reflecting a mature enterprise presence in the healthcare sector. Technically, the website is built using modern web technologies including React and Next.js, hosted on Amazee.io infrastructure. It employs Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a commitment to privacy compliance and data governance. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, suggesting room for improvement in transparency and security communication. Overall, the website presents a professional and trustworthy digital presence consistent with a large healthcare enterprise. The lack of publicly accessible WHOIS data is due to .es domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include publishing detailed security policies, implementing a security.txt file, and enhancing accessibility to further strengthen trust and compliance.

S

Sandoz

sandoz.ua

67

Sandoz Ukraine operates as a subsidiary of Novartis, a global healthcare company headquartered in Switzerland. The website presents Sandoz as an independent pharmaceutical company focused on providing healthcare solutions in Ukraine. The site targets healthcare professionals, patients, and partners within the Ukrainian market, offering information about corporate values, anti-corruption programs, medical inquiries, and career opportunities. The branding and content align with a professional healthcare organization, reflecting a large enterprise business model within the pharmaceutical sector. Technically, the website is built using modern web technologies including React and Next.js, with integration of Google Tag Manager for analytics and OneTrust for cookie consent management. The site demonstrates good mobile optimization and a moderate performance profile. However, some SEO and accessibility features could be enhanced for better compliance and user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. Nonetheless, the absence of security headers, vulnerability disclosure information, and published privacy or terms of service policies suggests room for improvement in security posture and compliance transparency. The lack of WHOIS data limits the ability to fully verify domain legitimacy, although the website content and branding provide positive trust signals. Overall, the website is professional and trustworthy in appearance but would benefit from enhanced security practices, clearer privacy documentation, and improved domain registration transparency to strengthen its risk profile and stakeholder confidence.

J

jobs.ch

jobs.ch

77

jobs.ch is a prominent Swiss online job portal operated by JobCloud AG, offering a comprehensive platform for job seekers and employers. The website provides extensive job listings, company profiles, salary estimations, and recruitment services, positioning itself as a market leader in Switzerland's employment sector. The platform targets both job seekers and recruiters, facilitating efficient job search and application processes with modern digital tools and integrations.

S

Sandoz

sandoz.com.br

10

Sandoz Brasil is a division of Novartis specializing in generic and biosimilar medicines, serving healthcare professionals and patients in Brazil. The website reflects a mature enterprise with a clear focus on pharmaceutical products, corporate governance, and patient information. Technically, the site uses modern frameworks such as Next.js and React, with integrations for analytics and cookie consent, indicating a good level of digital maturity. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, suitable for its healthcare industry context.

S

Sandoz

sandoz.com.au

10

Sandoz Australia operates as a division of Novartis, focusing on providing access to generic and biosimilar pharmaceutical products. The website reflects a global healthcare leader's digital presence, targeting healthcare professionals and patients with information about their medicines and corporate responsibility. The site is professionally designed with consistent branding and clear navigation, supporting their market position as a major pharmaceutical entity. Technically, the site uses modern frameworks such as Next.js and React, hosted on a reputable platform (Amazee.io), and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be enhanced. WHOIS data is unavailable due to privacy policies, but the domain appears legitimate and consistent with the business identity. Overall, the site demonstrates a mature digital infrastructure suitable for an enterprise healthcare company.

T

Tamedia AG

carteblanche.ch

61

The website www.carteblanche.ch serves as a customer loyalty platform for subscribers of Tamedia AG's newspapers and magazines, offering exclusive discounts, contests, and cultural event benefits. It is well integrated into the Tamedia media ecosystem, reflecting a strong market position in the Swiss media sector. The site targets subscribers interested in cultural, sports, and travel offers, leveraging a digital customer card model to enhance subscriber engagement. Technically, the site is built on modern web technologies including Next.js and React, supported by a robust content management system (UnityCMS). It employs industry-standard analytics and advertising tools such as Google Analytics, DoubleClick, and OneTrust for cookie consent, ensuring compliance and performance. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the website enforces HTTPS, uses multiple security headers, and integrates CAPTCHA on contact forms to mitigate abuse. While no explicit security policy or incident response contacts are published, the overall security posture is strong with no evident vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the business identity of Tamedia AG. It demonstrates a mature digital presence with good security and privacy practices, supporting its role as a customer engagement platform within the media industry.

C

Clearout

clearout.io

77

Clearout.io is a technology company specializing in email validation, email finding, and sales prospecting services. The platform targets businesses seeking to improve their email marketing and sales outreach by providing accurate and verified email data. The company operates primarily in the B2B SaaS market and has established itself as a focused provider in the email validation niche since its founding in 2018. The website presents a professional and modern interface built with Gatsby and React technologies, indicating a mature digital infrastructure. Hosting and DNS services leverage Cloudflare and GoDaddy, ensuring reliable performance and security. Security posture is adequate with HTTPS enabled and domain status protections, but lacks advanced security headers and published policies. Privacy compliance is weak due to absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, Clearout.io demonstrates a solid business and technical foundation with room for improvement in privacy and security transparency.

K

Kantonsspital Baden

kantonsspitalbaden.ch

75

Kantonsspital Baden is a large regional healthcare provider in Switzerland offering comprehensive medical services, research, and patient care. The website reflects a mature digital presence with a modern tech stack including Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

Galaxus

galaxus.be

73

Galaxus.be is a well-established e-commerce platform serving the Belgian market, specializing in IT, electronics, telecommunications, and a broad range of consumer products. It operates as a subsidiary of Digitec Galaxus AG, Switzerland's largest online retailer, leveraging a strong brand presence and extensive product catalog. The website demonstrates a mature digital infrastructure with modern technologies such as Next.js and React, optimized for performance and mobile responsiveness. Privacy and cookie policies are clearly communicated with user consent mechanisms, reflecting compliance with GDPR requirements. Security posture is robust, with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is restricted due to registry policies, but the brand's market reputation supports legitimacy. Overall, Galaxus.be presents a professional, trustworthy, and user-friendly online shopping experience.

G

Galaxus

galaxus.at

73

Galaxus is a large e-commerce platform primarily serving Austria and other European markets, offering a wide range of products including electronics, computers, toys, and home appliances. It operates under the parent company Migros and maintains a strong market position with multiple country-specific portals. The website demonstrates a high level of digital maturity, utilizing modern technologies such as React, Next.js, and GraphQL, supported by robust analytics and payment integrations. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the platform is professional, trustworthy, and compliant with GDPR requirements, making it a reliable online retail destination.

D

Digitec

digitecgalaxus.ch

73

Digitec is a leading Swiss e-commerce platform specializing in consumer electronics, operating under Digitec Galaxus AG. The website serves a broad Swiss consumer audience with a comprehensive product range including smartphones, TVs, notebooks, and more. It maintains a strong market position as Switzerland's online market leader in this sector, supported by quality content, community engagement, and attractive deals. The technical infrastructure is modern, leveraging React and Next.js frameworks, GraphQL APIs, and robust third-party integrations for payments and analytics. Hosting is managed via Akamai, ensuring fast and reliable delivery. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

S

Stichting Activityclub

mastodon.nl

68

Mastodon.nl is an independent Mastodon server operated by Stichting Activityclub, serving the Dutch Mastodon and fediverse community. It provides a social networking platform focused on community engagement without ads or algorithms, emphasizing privacy and open source principles. The website is well designed, mobile optimized, and offers features such as trending posts and profile directories. Technically, it runs Mastodon version 4.4.7 with modern web technologies including Ruby on Rails and React, and employs secure HTTPS connections with DNSSEC enabled for domain security. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site is trustworthy and professional, catering to a niche community audience.

B

BNN Bloomberg

bnnbloomberg.ca

62

BNN Bloomberg is a leading Canadian business news and financial information platform, providing up-to-date market news, stock updates, and expert financial insights. The website is affiliated with Bell Media, a major Canadian media company, which supports its strong market position and brand recognition. The platform targets Canadian business professionals, investors, and financial market participants, offering video content, live streaming, and comprehensive business news coverage. Technically, the website employs modern web technologies including React and Bootstrap, and integrates multiple advertising and analytics services such as Amazon Ads, Rubicon Project, Comscore, and Google Tag Manager. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with a complex tech stack and multiple third-party scripts. From a security perspective, the site uses HTTPS with strong TLS configurations and employs several security-related scripts. However, explicit security headers and privacy compliance mechanisms such as cookie consent banners and privacy policies are not clearly present in the analyzed content. No contact information or incident response channels are visible, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy front for business news, but could benefit from enhanced privacy disclosures and security transparency to align with best practices and regulatory requirements.

L

Level27 BV

level27.eu

46

Level27 BV operates a professional hosting service website targeting agencies and businesses seeking reliable and hassle-free web hosting solutions. The company has been established since 2004 and positions itself as a niche provider offering fast, stable hosting with direct support. The website is built on modern technologies including Next.js and React, with a CMS likely based on Strapi. It employs Cookiebot for GDPR-compliant cookie management and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, with a clean and professional design.