Security Directory

P

Pavillon ADC

pavillon-adc.ch

50

Pavillon ADC is a non-profit cultural association based in Geneva, Switzerland, dedicated to contemporary dance. The organization offers a range of services including dance performances, workshops, participatory projects, and cultural events. The website serves as a comprehensive platform for event information, ticketing, and community engagement, targeting a general audience interested in contemporary dance and cultural activities. The business model focuses on cultural promotion and community involvement rather than commercial profit. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, jQuery, and media plugins for enhanced user experience. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some areas such as security headers and privacy compliance mechanisms like cookie consent are lacking, which could be improved to enhance security and regulatory adherence. From a security perspective, the site demonstrates good practices with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information represents an opportunity for strengthening the security posture. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, Pavillon ADC presents a trustworthy and professional online presence with strong business credibility and good technical implementation. To further improve, the organization should implement privacy and cookie policies, enhance security headers, and provide clear incident response contacts to align with best practices and compliance requirements.

M

Moet ik naar de dokter?

moetiknaardedokter.nl

63

Moet ik naar de dokter? is a Dutch healthcare advice platform that provides patients with direct, reliable guidance on whether they need to contact a general practitioner based on their symptoms. The website offers a self-triage widget, health complaint search, and advice on self-care, positioning itself as a trusted online resource in the Netherlands. The platform targets patients seeking quick and trustworthy medical advice without immediate doctor consultation. Technically, the website is built on WordPress, leveraging modern plugins such as Gravity Forms and Yoast SEO, and integrates third-party services like Google Tag Manager and Pagesense for analytics and marketing. The site is hosted on Microsoft Azure infrastructure, ensuring good performance and scalability. Security-wise, the site enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms, though it lacks explicit published security policies or incident response contacts. Overall, the website demonstrates a mature digital presence with good SEO, accessibility, and user experience, but could improve by publishing formal security and vulnerability disclosure policies.

K

KIWI webgroep

kiwiwebgroep.nl

69

KIWI webgroep is a small, full-service internet agency based in Limburg, Netherlands, specializing in custom web development, SEO, online advertising, branding, and webshop creation. The company targets businesses seeking professional digital solutions and positions itself as a regional expert offering tailored services. The website is built on the Concrete5 CMS platform and employs modern JavaScript libraries and tracking tools, reflecting a mature digital infrastructure. The presence of partner logos and customer testimonials enhances its market credibility. Technically, the website demonstrates good performance, mobile optimization, and SEO practices. It uses HTTPS with a valid SSL certificate and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and Cookiebot for consent management. Security measures include the use of Google reCAPTCHA v2 Invisible on forms and cookie consent banners, although some security headers are not explicitly detected. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contacts and does not have a security.txt file. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

L

LogiPac

ajdistribution.se

45

LogiPac is a Swedish third-party logistics (3PL) service provider specializing in retail and pharmaceutical sectors. Established in 2011, the company offers a range of logistics services including campaign logistics, event logistics, warehousing (lagerhub), post-processing, and sustainable climate-smart logistics solutions. Their website reflects a professional and consistent brand presence targeting retail and pharma brands and chain companies in Sweden. The business model focuses on providing advanced logistics solutions with precision and economic efficiency. The company maintains a medium-sized market presence with multiple notable clients showcased on the site.

M

Merck Sharp & Dohme AB

pneumo.se

49

The website pneumo.se is an educational platform operated by Merck Sharp & Dohme AB, a large pharmaceutical company. It provides comprehensive information about pneumococcal diseases and vaccination, targeting primarily adults over 65 and risk groups in Sweden. The content is medically reviewed and references authoritative health sources such as Folkhälsomyndigheten and 1177 Vårdguiden, establishing strong trust and credibility. The site promotes vaccination awareness and guides users to find local healthcare centers for vaccination services. Technically, the site is built on WordPress and employs modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Hosting details are not explicit but DNS and registrar data indicate a professional setup. Privacy and cookie policies are clearly presented with GDPR compliance mechanisms in place. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks DNSSEC and visible security headers. No vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response information is noted. The domain registration is consistent and transparent, registered with a reputable registrar and appropriate for the business age. Overall, the website demonstrates a strong business credibility and technical maturity with good privacy compliance. Strategic improvements could include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture.

N

Nästa Steg

nasta-steg.se

65

Nästa Steg is a Swedish healthcare informational website dedicated to providing comprehensive information about lung cancer, including symptoms, diagnosis, treatment options, and patient rights. The site targets patients and individuals seeking trustworthy medical information in Swedish, English, and Arabic. It operates as a niche educational resource within the healthcare sector in Sweden, founded in 2019. The website demonstrates a consistent and professional brand presence with good content quality and clear navigation.

M

Merck Sharp & Dohme AB

hpvvaccin.se

51

Hpvvaccin.se is a professionally maintained Swedish website operated by Merck Sharp & Dohme AB (MSD) focused on educating the public about HPV and vaccination options. The site serves as an informational platform targeting the general Swedish population, including parents, young men and women, and healthcare professionals. It provides comprehensive content on HPV risks, vaccination programs, and private vaccination options, supported by MSD's branding and corporate presence. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, ensuring good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and formal policies could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy linked to MSD's main site. Overall, the site is trustworthy, well-branded, and aligned with MSD's healthcare business in Sweden.

M

MSD Sverige

msdinsight.se

63

MSDinsight.se is a professional healthcare portal operated by MSD Sverige, a subsidiary of Merck & Co., Inc. The website serves as a comprehensive resource for healthcare professionals in Sweden, offering therapy-focused information, product details, patient information, and educational webinars. The site is well-branded with MSD's official logos and maintains a consistent presence across multiple social media platforms, reinforcing its market position as a trusted pharmaceutical information provider. Technically, the website is built on WordPress VIP with a modern tech stack including Yoast SEO, Google Tag Manager, and OneTrust for cookie consent. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with no significant technical issues detected. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a cookie consent mechanism compliant with GDPR. No vulnerabilities or exposed sensitive data were found in the analysis. However, the absence of explicit security policy pages and incident response contacts suggests room for improvement in transparency and preparedness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern is the lack of WHOIS data for the domain www.msdinsight.se, which may warrant further investigation to confirm domain registration legitimacy. Strategic recommendations include enhancing contact information visibility, publishing security policies, and maintaining regular audits of third-party scripts to sustain security posture.

K

KNRB

knrb-formulieren.nl

43

The KNRB formulieren website serves as an official portal for the Koninklijke Nederlandse Roeibond, providing essential forms and resources to the Dutch rowing community. It is positioned as a non-profit sports federation resource hub, targeting members, volunteers, and affiliated clubs. The site maintains consistent branding aligned with KNRB and offers clear contact information, enhancing its credibility. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, it lacks advanced security headers and visible privacy or cookie policies. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but misses several best practices such as security headers and formal privacy compliance documentation. No critical vulnerabilities or suspicious elements were detected, indicating a generally secure posture suitable for its purpose. Overall, the website is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

S

SwissCenter

swisscenter.com

59

SwissCenter is a Swiss-based web hosting and datacenter service provider with a long-standing presence since 1995. The company offers a range of hosting solutions including shared web hosting, dedicated servers, server housing, datacenter services, and hosted Exchange email solutions, targeting businesses and professionals seeking reliable Swiss-quality internet services. The website is professionally designed, primarily in French, and showcases key services and customer references from reputable companies, reinforcing its market position as a trusted hosting provider. Technically, the website employs a modern JavaScript stack including jQuery, LayerSlider, and FancyBox, delivering a functional and visually appealing user experience. While mobile optimization and accessibility are basic, the site maintains good SEO practices and performance. Hosting appears to be managed internally with a Swiss datacenter focus, emphasizing data locality and performance with SSD storage and SSL certificates via Let's Encrypt. From a security perspective, the site enforces HTTPS and supports email security standards like DKIM. However, no explicit security headers were detected in the HTML source, and no published security or incident response policies were found. The cookie consent mechanism is present and functional, but privacy policy documentation is lacking or not easily discoverable. WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site and business references. Overall, SwissCenter presents a credible and professional hosting business with solid technical infrastructure but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

M

Merck Sharp & Dohme (Australia) Pty Limited

mymsd.com.au

63

myMSD is a professional healthcare information portal operated by Merck Sharp & Dohme (Australia) Pty Limited, targeting Australian healthcare professionals. The site provides access to product information, therapy area resources, clinical trials, and treatment hubs, positioning itself as a trusted resource in the Australian pharmaceutical healthcare market. The website is well-branded, consistent, and clearly intended for a professional audience, with strong compliance to Australian healthcare regulations and privacy standards. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, New Relic monitoring, and Janrain authentication. It is hosted on a premium platform (WordPress VIP) and uses multiple CDNs and third-party services to optimize performance and user experience. The site is mobile-optimized, accessible, and SEO-friendly, with good navigation and content structure. From a security perspective, the site enforces HTTPS, implements privacy and cookie policies with consent mechanisms, and uses monitoring tools to maintain security posture. While explicit security headers are not fully confirmed, the overall security practices are sound with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy-protected but consistent with a legitimate enterprise healthcare entity. Overall, myMSD presents a low-risk, professionally managed digital presence with strong business credibility and compliance. Strategic recommendations include enhancing explicit security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and security posture.

M

Merck Sharp & Dohme (I.A.) Corp.

msdconnect.my

66

MSD Connect is a digital education platform operated by Merck Sharp & Dohme (Malaysia) Sdn. Bhd., providing healthcare professionals with access to product information, educational resources, and event registrations. The company holds a strong market position in healthcare sectors including cardiology, infectious diseases, vaccines, and oncology. The website is professionally designed, mobile-optimized, and hosted on a robust WordPress VIP platform with AWS infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and explicit cookie consent mechanisms. Overall, the site reflects a trustworthy and credible business presence in Malaysia with consistent WHOIS registration data.

M

Merck & Co., Inc.

msdclinicaltrials.com

67

The website www.msdclinicaltrials.com serves as an official platform for Merck & Co., Inc. (known as MSD outside the US and Canada) to provide information about clinical trials and medical research. It targets patients, caregivers, healthcare professionals, and potential clinical trial volunteers globally. The site offers comprehensive resources on various therapeutic areas, including cardiovascular diseases, oncology, infectious diseases, and vaccines, reflecting MSD's long-standing commitment to healthcare innovation. The business model focuses on pharmaceutical research and development with a strong emphasis on clinical trials to advance medical science. Technically, the website is built on WordPress with modern technologies such as Vue.js and integrates tools like Google Tag Manager and OneTrust for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with multilingual support for global reach. Performance is moderate, with room for improvement in explicit security header implementation. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible advanced security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a notable concern, impacting domain legitimacy trust scores, though the website content and branding strongly suggest it is an official MSD resource. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trustworthiness and compliance posture.

M

MSD ΑΦΕΕ

msdconnect.gr

66

MSD Connect is a professional healthcare information platform operated by MSD ΑΦΕΕ, a subsidiary of Merck & Co., Inc. The website targets healthcare professionals in Greece, providing scientific updates, product information, and therapeutic category details. The platform is well-branded, consistent with corporate identity, and offers secure user authentication and registration processes. Technically, it is built on WordPress VIP with modern plugins and technologies, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, although explicit security headers could be verified further. Privacy policies are comprehensive and GDPR compliant. Overall, the site is trustworthy, professional, and well-maintained.

E

Edital SA

edital.ch

50

Edital SA operates as the publisher of L’Echo du Gros-de-Vaud, an independent official journal serving the Gros-de-Vaud district in Switzerland. The publication has a strong local presence with a subscriber base of 3500 and free distribution to 19600 households eleven times a year. The company is family-owned and has been active for over three decades, positioning itself as a trusted local media outlet. The business model relies on subscriptions and advertising services targeted at local businesses and residents. The website reflects this focus with clear information about subscriptions, advertising opportunities, and contact details.

L

Le Courrier

lecourrier.ch

54

Le Courrier is a French-language Swiss news media outlet offering a wide range of news and cultural content focused on regional, national, and international topics. The website supports a subscription and donation business model, leveraging WooCommerce for e-commerce functionalities. The site is well-branded, professionally designed, and optimized for SEO and accessibility, targeting French-speaking readers interested in news and culture. Technically, the site is built on WordPress with modern JavaScript frameworks and integrates marketing and push notification tools such as Brevo and WonderPush. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is trustworthy and safe for general audiences.

F

Freifunk

freifunk.net

56

Freifunk.net is a well-established community-driven platform dedicated to promoting free and open communication networks in digital data networks. Founded in 2003, it operates as a decentralized non-commercial initiative primarily targeting technology enthusiasts and local community groups in Germany. The website offers a variety of services including community news aggregation, mailing lists, collaborative tools, and event calendars, supporting the growth and maintenance of free wireless mesh networks. The platform maintains a consistent brand presence and provides multilingual support with a focus on German and English audiences. Technically, the website is built on WordPress 6.8.1 with a robust set of plugins for SEO, GDPR compliance, event management, and multilingual content. It employs Matomo analytics, emphasizing privacy-conscious data collection. The site is mobile-optimized with good navigation and accessibility features, although some accessibility aspects could be enhanced. Hosting details are partially known, with domain registration through INWX GmbH and no DNSSEC enabled, representing a minor security gap. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. However, incident response and vulnerability disclosure policies are not publicly available, which could be improved to enhance trust and readiness. Overall, Freifunk.net presents a trustworthy, professional, and community-focused platform with a solid technical foundation and good privacy practices. Strategic improvements in DNS security, security policy transparency, and accessibility would further strengthen its security posture and user trust.

S

Spoedpost Noord-Limburg

huisartsenspoedpostnoordlimburg.nl

54

The website huisartsenpoedpostnoordlimburg.nl serves as the official online presence for Spoedpost Noord-Limburg, a regional healthcare provider specializing in out-of-hours general practitioner emergency services in the Noord-Limburg region of the Netherlands. The site offers relevant health information, contact details, and educational videos to assist patients in urgent care scenarios. The business is positioned as a medium-sized healthcare entity under the parent organization VieCuri, focusing on integrated emergency care services including crisis and pharmacy support. The website is primarily targeted at local residents seeking urgent medical assistance outside regular office hours. Technically, the website is built on WordPress 6.8.1 with a custom theme and uses modern web technologies including jQuery and embedded Vimeo videos. It integrates Google Tag Manager for analytics and uses Azure-hosted widgets for interactive health complaint carousels. The site is mobile-optimized, accessible, and SEO-friendly with structured data implemented. Performance is moderate, with lazy loading for images enhancing load times. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC for domain security and does not explicitly present security headers in the HTML. There is no visible incident response or security policy page, and cookie consent mechanisms are absent despite having a cookie policy page. These gaps suggest room for improvement in security posture and privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with its healthcare mission. Strategic recommendations include enabling DNSSEC, implementing security headers, adding incident response information, and deploying a cookie consent mechanism to enhance GDPR compliance and user trust.

The website www.viiv-studyregister.com appears to be related to study registration, likely in the healthcare or clinical research domain. However, the homepage content is minimal with no visible descriptive text or business information. The site uses modern frontend technologies including Gatsby, Bootstrap, jQuery, and Google reCAPTCHA v3, indicating a contemporary technical infrastructure. Despite this, there is a lack of essential business and compliance information such as privacy policies, cookie consent mechanisms, terms of service, and contact details, which limits the site's credibility and user trust. Security posture is moderate with the use of HTTPS and reCAPTCHA but lacks visible security headers and incident response information. WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the site requires significant improvements in content, compliance, and security disclosures to enhance trust and professionalism.

B

Bys Hosting

byshosting.nl

44

Bys Hosting is a Dutch hosting provider established in 2004, specializing in business hosting solutions with a focus on personal support and reliability. Their services include various hosting packages, VPS, and security offerings, with servers hosted in an ISO 27001 certified data center in the EU. The website is built on WordPress and uses modern frontend technologies, providing a professional and user-friendly experience targeted at business customers in the Netherlands. Security posture is solid with HTTPS and SSL certificates, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic with a privacy policy and terms of service present but lacking cookie consent mechanisms. Overall, the website and business appear legitimate and trustworthy.

Salland Zorgkantoor is a regional healthcare organization in the Netherlands responsible for executing the Long-term Care Act (Wet langdurige zorg - Wlz) for residents in the Salland region, including municipalities such as Deventer, Olst-Wijhe, Raalte, and Voorst. The organization facilitates access to appropriate long-term care services, including care in kind and personal budgets, and provides support through client advisors and informational resources. Their market position is that of a trusted regional care office, supported by clear contact information and a professional web presence. The website is designed to serve individuals needing long-term care and professionals in the healthcare sector.

Putter & de Boer B.V. is a Dutch company providing tailored administrative, fiscal, and payroll services primarily targeting small and medium-sized enterprises (MKB) and private individuals. With over 45 years of experience, the company positions itself as a reliable and comprehensive service provider offering a 'one stop shopping' approach. Their website is built on the concrete5 CMS and integrates common web technologies such as jQuery, Google Analytics, and Facebook SDK for tracking and social media integration. The hosting provider is Easyhosting BV, a reputable Dutch hosting company, consistent with the company's geographic focus. From a security perspective, the website uses HTTPS but lacks important security headers, privacy and cookie policies, and explicit contact information, which are areas for improvement to enhance compliance and trust. No vulnerabilities or suspicious content were detected in the HTML content. The website is accessible without WAF or security challenges, indicating no blocking or filtering mechanisms are interfering with access. Overall, the website demonstrates a moderate level of technical maturity and business credibility but falls short in privacy compliance and security best practices. Strategic improvements in these areas would strengthen the company's digital trustworthiness and regulatory adherence.

Het Koninklijk Nederlands Watersportverbond is the official Dutch national federation for watersports, serving over 350 affiliated clubs and 80,000 members. The organization promotes a wide range of watersports including sailing, windsurfing, kitesurfing, canoeing, SUP, and motorboating. It focuses on safety, accessibility, environmental stewardship, training, event organization, and supporting elite athletes. The website reflects a mature and professional digital presence with comprehensive content and clear navigation tailored to its target audience of watersport enthusiasts and affiliated organizations in the Netherlands. Technically, the site uses modern JavaScript libraries, analytics tools, and is hosted by a reputable Dutch provider with DNSSEC and HTTPS enabled, indicating good infrastructure and security practices. However, some security headers and explicit vulnerability disclosure mechanisms are absent, suggesting room for improvement in security posture. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and serves as a central hub for the Dutch watersport community.

The website www.sitearchief.nl serves as the official platform for web archiving of Dutch government websites, operated under the Rijksoverheid brand. It provides access to archived versions of various government-related web projects and initiatives, enabling users to browse historical web content. The platform is developed and managed by GW Crossmedia using the Archiefweb.eu product tailored for the Dutch government. The target audience includes government agencies, researchers, and the general public interested in government web archives. The site demonstrates consistent branding aligned with government standards and offers a comprehensive archive listing.

K

Koocook

koocook.com

41

Koocook is a French meal planning platform established in 2006, offering users personalized recipes, shopping lists, and meal plans focused on healthy eating and reducing food waste. The business operates a freemium model with a premium subscription unlocking advanced features such as personalized meal plans, nutrition and allergen information, and online grocery ordering. The website is well-designed, mobile responsive, and uses modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Stripe for payments. Hosting appears to be via SwissCenter based on nameservers. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are present and GDPR compliant, though no explicit security or incident response policies are published. Contact is available via a web form, with no direct emails or phone numbers found. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Cafés Cuendet Torréfaction SA

cafes-cuendet.ch

48

Cafés Cuendet Torréfaction SA is a well-established Swiss coffee roasting company founded in 1907, specializing in supplying high-quality coffee products primarily to hospitality professionals in the Swiss Romande region. The company emphasizes artisanal roasting methods and freshness, supporting a strong market position as a trusted supplier with a professional e-commerce presence. Technically, the website is built on WordPress with WooCommerce, leveraging modern libraries and privacy-conscious analytics tools such as Matomo Cloud alongside Google Analytics. The site is well-optimized for SEO and mobile devices, providing a positive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies are absent. Overall, the domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

D

Domaine Croix-Duplex

croix-duplex.ch

49

Domaine Croix-Duplex is a small family-owned vineyard and wine producer located in Lavaux, Switzerland, offering a diverse range of wines and hosting various events including tastings and private functions. The website is professionally designed, multilingual, and supports e-commerce through WooCommerce, targeting wine enthusiasts and local visitors. The technical infrastructure leverages WordPress with modern plugins for performance and multilingual support, alongside Google Analytics and Mailchimp for marketing and analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site presents a trustworthy and professional online presence for a regional wine business.

L

Ligue Romande de Football

lrf.ch

43

The Ligue Romande de Football (LRF) is a well-established non-profit sports association founded in 1899 and based in Lausanne, Switzerland. It focuses on promoting and organizing amateur football activities within the canton of Vaud. The website serves as an information hub for match schedules, results, official communications, and club support services. The target audience primarily consists of amateur football clubs and players in the region. The organization maintains a consistent brand presence and is supported by local sponsors, reinforcing its regional importance. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Fonts for typography. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. No CMS or hosting provider details were identified. Performance is moderate, with no evident critical technical issues. From a security perspective, the site uses HTTPS (assumed from the URL), but no security headers were detected in the provided data. There is no visible privacy policy, cookie consent mechanism, or terms of service, which are important for GDPR compliance given the European location. No incident response or vulnerability disclosure information is present. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the security posture is average with recommendations to enhance headers, policies, and incident response readiness. The overall risk assessment is moderate with a legitimacy score of 90 based on consistent WHOIS data and alignment with the organization's claims. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing vulnerability disclosure and incident response processes, and improving accessibility and SEO. These steps will enhance trust, compliance, and security maturity for the LRF website.

M

Monsieur Maurice

monsieurmaurice.ch

51

Monsieur Maurice is a small Swiss retail business specializing in bespoke tailoring services, offering custom suits and shirts delivered directly to clients at home or work. The company targets customers in the French-speaking region of Switzerland who seek personalized tailoring without the inconvenience of visiting stores. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal privacy policies indicates room for improvement. Cookie consent is implemented via tarteaucitron.io, supporting GDPR compliance to some extent. Overall, the website is professional and trustworthy, with consistent branding and positive customer testimonials. WHOIS data aligns well with the business claims, reinforcing legitimacy.

Swisscommunes.ch is a specialized digital solutions provider targeting Swiss communes and local government entities. Their offerings include document management, parking permits, and room rental management, emphasizing simplicity, autonomy, and affordability. The company behind the site is Gilston Digital SA, a small-sized entity with a clear niche in government-related technology services. The website is built on WordPress with modern front-end frameworks like Bootstrap and integrates privacy-conscious analytics via Matomo. The site includes a cookie consent mechanism and a contact form but lacks explicit privacy and terms of service pages. Security posture is generally good with HTTPS and some best practices but could be enhanced with additional security headers and published policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

G

Gilston Digital SA

gilston.consulting

47

Gilston Consulting, a department of Gilston Digital SA, specializes in delivering pilot projects that combine software and hardware development. Their market position is that of a niche Swiss consulting firm focusing on innovative proofs of concept and embedded systems. The company leverages a modern WordPress-based website with responsive design and standard web technologies, providing a professional digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial due to the absence of a privacy policy page. Overall, the website reflects a credible small business with clear contact channels and partner affiliations.

C

Coeliactive

coeliactive.nl

53

Coeliactive is a Dutch non-profit youth association dedicated to supporting young people aged 18-28 with coeliac disease by organizing social activities and providing community engagement opportunities. The website serves as a hub for event information, blog content, and social media integration, positioning itself as a niche community leader within the gluten-free and coeliac support ecosystem in the Netherlands. The parent organization is the Nederlandse Coeliakie Vereniging, which lends credibility and partnership support. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Instagram Feed, ensuring good SEO and social media presence. The site is mobile-optimized with moderate performance and basic accessibility features. Security is well-managed with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, leveraging the parent organization's comprehensive privacy and cookie policies. Overall, the security posture is solid for a non-profit community site, with no critical vulnerabilities or exposed sensitive data. The site lacks explicit security policies or incident response contacts, which could be enhanced. The domain registration is consistent and transparent, supporting the legitimacy of the organization. Strategically, Coeliactive should focus on enhancing security headers, adding vulnerability disclosure information, and improving accessibility to further strengthen trust and compliance.

B

B. Braun Melsungen AG

bbraun.nl

75

B. Braun Melsungen AG operates a professional and comprehensive website targeting healthcare professionals and patients in the Netherlands. The company is a leading medical technology provider offering a wide range of healthcare solutions, including medical devices, patient care services, and technical support. The website reflects a mature enterprise with consistent branding and a strong market position in the healthcare sector. The content is well-structured, relevant, and presented in Dutch, supporting local market engagement. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates advanced consent management and SSO authentication, indicating a high level of digital maturity. Security posture is strong with HTTPS, CSRF protection, and secure login mechanisms, although explicit security policies and incident response contacts are not published. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and well-maintained, supporting the company's credibility and business goals.

M

MarketResponse

marketresponsegroup.com

70

MarketResponse is a data and insights agency specializing in customer experience and brand activation, leveraging advanced data analytics and AI-powered research technology. The company operates primarily in the Netherlands and the US, providing services such as target group segmentation, CX and EX management, and brand reputation research. The website demonstrates a mature digital infrastructure with WordPress CMS, optimized performance, and modern marketing tools like Google Tag Manager and Algolia Search. Security posture is strong with HTTPS, CAPTCHA on forms, and ISO certification, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business with a clear market position and solid technical foundation.

K

KWF Kankerbestrijding

kwf.nl

71

KWF Kankerbestrijding is a prominent Dutch non-profit organization dedicated to combating cancer through research funding, patient support, and public awareness. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to a broad audience including patients, donors, and volunteers. The organization maintains a strong market position as a leading cancer charity in the Netherlands. Technically, the website is built on Drupal CMS with modern libraries such as jQuery and integrates advanced marketing and analytics tools including Google Tag Manager, Visual Website Optimizer, and Tealium. The site is mobile optimized and accessible, with good SEO practices and performance rated as moderate. From a security perspective, the site enforces HTTPS, implements robust security headers, and uses a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy or incident response contact information, which could enhance trust and preparedness. Overall, the website demonstrates a high level of professionalism, security, and privacy compliance, supporting the organization's credibility and trustworthiness. Strategic improvements in transparency around security policies and incident response would further strengthen its posture.

G

Gilston Digital SA

gilston.digital

50

Gilston Digital SA is a Swiss-based technology company specializing in the creation of web and mobile applications, offering consulting and development services. With nearly 25 years of experience in the digital domain, the company positions itself as a trusted partner for businesses seeking effective and affordable digital solutions. Their portfolio includes diverse projects ranging from e-commerce to bespoke web applications, supported by a strong emphasis on UX design and ongoing maintenance. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Maps and reCAPTCHA for enhanced user experience and security. The presence of a cookie consent mechanism demonstrates awareness of privacy regulations, although a formal privacy policy is not found on the site. Security posture is solid with HTTPS and reCAPTCHA usage, but could be improved by enabling DNSSEC and implementing security headers. Overall, the domain registration data aligns well with the company's Swiss identity and business claims, supporting legitimacy. Strategic recommendations include publishing a privacy policy, enhancing security headers, and establishing a vulnerability disclosure process to strengthen compliance and trust.

S

Stichting VieAmi

vieami.nl

49

VieAmi is a Dutch non-profit foundation dedicated to supporting projects within VieCuri hospital that are not covered by standard healthcare budgets. The organization focuses on enhancing patient experience and regional healthcare quality through fundraising and community engagement. The website serves as a platform for donations, project information, and news updates, targeting patients, local community members, and healthcare supporters. Technically, the site is built on WordPress using the Enfold theme and integrates the GiveWP plugin for donations with Mollie as the payment gateway. The infrastructure demonstrates moderate digital maturity with responsive design and modern JavaScript libraries such as React. Security posture is adequate with HTTPS enabled and nonce tokens protecting forms, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from improved security and privacy transparency.

S

Spoedpost Noord-Limburg

spoedpostnoordlimburg.nl

54

The website huisartsenpoedpostnoordlimburg.nl represents a newly established healthcare emergency service provider in the Noord-Limburg region of the Netherlands. It offers out-of-hours general practitioner emergency care, crisis services, pharmacy services, and collaborates with the local emergency department. The site targets patients requiring urgent medical attention and provides relevant information, contact details, and educational resources. The business is positioned regionally and is affiliated with VieCuri, a known healthcare organization. Technically, the website is built on WordPress with modern plugins and integrations such as Google Tag Manager and embedded Vimeo videos. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response policies are missing. Privacy compliance is basic with privacy and cookie policies present but lacking a consent mechanism. Overall, the domain registration data aligns well with the business purpose and launch timeline, supporting legitimacy. The website is safe, professional, and trustworthy.

S

SWISS SUPPLY

swiss-supply.ch

51

SWISS SUPPLY is a Swiss-based association uniting national organizations and institutions involved in supply, procurement, logistics, freight forwarding, packaging, disposal, and recycling. The website serves as a professional platform providing news updates, event information, market studies, and career resources targeted at professionals and organizations within the Swiss logistics and supply chain sectors. The association positions itself as a key collaborative entity fostering industry development and knowledge sharing. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and GDPR compliance plugins. The site demonstrates good mobile optimization, structured data usage, and SEO best practices, reflecting a mature digital presence. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security headers and a formal security policy suggests areas for improvement. No incident response or vulnerability disclosure information is provided. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic enhancements in security policy transparency and technical security headers would further strengthen its security posture and user trust.

K

Karc FM Média Kft.

hirfm.hu

54

Hír FM, operated by Karc FM Média Kft., is a Hungarian regional news radio station and digital media platform launched in 2023. It offers live radio streaming, podcasts, and news content targeting Hungarian-speaking audiences. The company is affiliated with Mediaworks Hungary Zrt., a major media group, and benefits from governmental support, positioning it as a credible regional media outlet. The website is professionally designed with consistent branding and good content quality, serving a general audience with responsible content management including age verification for restricted categories. Technically, the website is built on WordPress CMS using modern front-end technologies such as Bootstrap, jQuery, and Swiper. It integrates Google Tag Manager and a consent management platform to ensure GDPR compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in hosting and optimization. From a security perspective, the site enforces HTTPS and uses a consent management platform for privacy compliance. However, explicit security headers are not clearly detected, and no published security policy or incident response contacts are found. No vulnerabilities or exposed sensitive data were identified in the analysis. Advertising is managed through reputable ad networks with transparent consent mechanisms. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.

A

ADRIENNE FELLER COSMETICS ZRT.

panarom.hu

49

Panarom.hu is the official website of ADRIENNE FELLER COSMETICS ZRT., a Hungarian company specializing in natural aromatherapy and wellness products. The site offers a comprehensive e-commerce platform featuring essential oils, natural oils, skincare products, and educational workshops. It targets general consumers interested in natural health and wellness, with a strong market presence in Hungary and expanding EU distribution. The website demonstrates a professional and consistent brand image with detailed product information and multiple trust signals including certifications and retail partnerships. Technically, the site employs modern JavaScript frameworks and analytics tools with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response information are absent. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

H

HVG HR Center

jobline.hu

57

Jobline.hu is a well-established Hungarian job portal operated by HVG Kiadó Zrt., providing job listings, employer job posting services, career advice, and downloadable CV templates. The site targets job seekers and employers primarily within Hungary, leveraging its strong brand association with the HVG media group to maintain a reputable market position. The platform offers a comprehensive user experience with good content quality, clear navigation, and mobile optimization. Technically, the site uses a custom CMS with a modern tech stack including Google Analytics, Tag Manager, Gemius, Hotjar, and Criteo for analytics and advertising. Security posture is solid with HTTPS enforced and cookie consent implemented, though some recommended security headers are missing. Privacy compliance is strong with clear policies and GDPR adherence. Contact information is clearly provided, enhancing business credibility.

C

Cvonline.hu

cvonline.hu

60

Cvonline.hu is a well-established Hungarian job portal offering a comprehensive platform for job seekers and employers. It provides extensive job listings, resume management, job alerts, and employer services, positioning itself as a key player in the Hungarian employment market. The website targets primarily Hungarian-speaking users seeking employment opportunities and employers looking to post job ads. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates multiple advertising and analytics services managed through Google Tag Manager and Usercentrics for GDPR compliance. The site demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, implements security headers, and uses a consent management platform, though it lacks a publicly available security policy or incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

J

Jobinfo.hu Kft.

cvdb.hu

49

CVDB.hu is a Hungarian job search platform operated by Jobinfo.hu Kft., offering job seekers a streamlined way to create profiles, upload CVs, and access a wide range of job listings. The platform integrates a prize draw incentive to encourage detailed profile completion, targeting primarily Hungarian job seekers. The website is professionally designed with consistent branding and features partnerships with reputable companies, enhancing its market credibility. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and interactive user experience. However, there is room for improvement in security headers and privacy transparency. Security posture is moderate with HTTPS enforced and anti-bot measures in place, but lacks explicit security policies and incident response contacts. Overall, the site is safe, compliant with GDPR, and trustworthy for its intended audience.

Π

Πανεπιστήμιο Μακεδονίας

uom.gr

59

The University of Macedonia (Πανεπιστήμιο Μακεδονίας) is a well-established public higher education institution in Greece, offering a wide range of academic programs including economics, business administration, informatics, music, and international studies. The website reflects a strong market position as a recognized academic and research hub in Northern Greece, targeting students, academics, and researchers. The digital infrastructure is built on modern web technologies such as jQuery and accessibility tools, with a focus on user experience and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

P

Poczta Polska

poczta-polska.pl

61

Poczta Polska is the national postal operator in Poland, providing a wide range of postal, courier, financial, and logistics services to both individual and business customers. The website reflects a mature digital presence with comprehensive service information, modern design, and clear navigation. The company operates multiple subsidiaries and partner services, enhancing its market reach and service portfolio. Technically, the site is built on WordPress with Bootstrap and jQuery, optimized for SEO and accessibility, and uses Google Analytics for user insights. Security posture is strong with HTTPS and secure form handling, though some security headers could be explicitly verified and enhanced. The absence of WHOIS data is likely due to registry policies rather than suspicious activity, and the website content strongly supports legitimacy. Overall, the site demonstrates a professional, secure, and user-friendly digital platform aligned with a large government entity.

H

home.pl S.A.

mensahome.eu

51

MensaHome.eu is a Polish e-commerce website specializing in high-quality kitchen and home accessories, including porcelain, glassware, cutlery, and decorative items. The site targets general consumers interested in premium home products and operates primarily in the retail sector within Poland. The business model is focused on online retail with a well-structured product catalog and a user-friendly shopping experience. The website demonstrates consistent branding and a professional design, supporting a positive market position in its niche. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics 4, and third-party widgets such as Trusted Shops and Doofinder for search functionality. The hosting and domain registration are managed by home.pl S.A., a reputable Polish provider. The site is mobile-optimized and shows good SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the website uses HTTPS with strong SSL configuration and implements a comprehensive cookie consent mechanism that complies with GDPR requirements to some extent. However, it lacks visible security headers and does not publish explicit privacy or security policies, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business profile, indicating legitimacy. Overall, MensaHome.eu presents a trustworthy and professional online retail platform with a solid technical foundation and good business credibility. Enhancing privacy disclosures and security headers would further strengthen its compliance and security posture.

H

Honegger&Bregenzer

honeggerbregenzer.ch

54

Honegger&Bregenzer is a boutique full-service advertising and marketing agency based in Zürich, Switzerland, specializing in integrated marketing solutions, external marketing departments, and startup-focused services. The company emphasizes a holistic approach combining business consulting and marketing to deliver tailored strategies and creative solutions. Their market position is that of a specialized boutique agency with a strong focus on personalized client collaboration and innovative marketing models. Technically, the website is built on WordPress using modern plugins such as Elementor, Slider Revolution, and integrates marketing and analytics tools like HubSpot, Google Analytics, Hotjar, and Tawk.to for live chat. The site is mobile-optimized, SEO-friendly, and employs standard security best practices including HTTPS and security headers. From a security perspective, the website demonstrates good maturity with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not present, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy digital presence with strong compliance to privacy regulations and a clear business focus. The risk level is low, with recommendations to enhance security transparency and accessibility features to further strengthen the security posture and user experience.

C

Cludo Sp. z o.o.

cludo.pl

45

Cludo Sp. z o.o. is a Polish technology company specializing in cloud-based Contact Center solutions delivered as SaaS. Established in 2011, Cludo offers integrated multi-channel customer service platforms, including AI-powered automation and CRM integrations, targeting businesses seeking to enhance customer communication efficiency. The company holds a strong market position with over 1500 clients and multiple reputable partners. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager, Google Analytics, and CookieYes for compliance. Hosting is provided by a Polish registrar and hosting provider, ensuring regional consistency. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though improvements in DNSSEC and security headers are recommended. Overall, the website is professional, well-branded, and trustworthy, with comprehensive contact details and social media presence. No critical vulnerabilities or suspicious activities were detected.

M

Magyar Reklámszövetség

mrsz.hu

47

The Magyar Reklámszövetség website represents a national marketing communication association in Hungary, providing industry research, regulatory guidance, events, and education to marketing professionals and businesses. The site is professionally designed with clear branding and relevant content targeting Hungarian marketing stakeholders. Technically, the site uses a Yii PHP framework-based CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics for tracking. Performance and mobile optimization are moderate but could be improved. Security posture is basic with HTTPS implied but no visible security headers or published security policies. Privacy compliance is limited with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the site is functional and credible but would benefit from enhanced security and privacy practices.