Security Directory

O

oriented.net LLC

woelkli.com

69

woelkli.com is a Swiss-based secure cloud storage service provider offering encrypted Nextcloud hosting tailored for individuals and businesses seeking privacy and data sovereignty. The company emphasizes ISO/IEC 27001 certification and hosts data in Switzerland using renewable energy-powered data centers. The website is professionally designed, multilingual, and provides clear information about its services, including file synchronization, calendar, and contact management. The business operates under oriented.net LLC, established in 2014, aligning with the domain age and registration data. Technically, the site uses modern web technologies with JavaScript and CSS, and employs Matomo analytics for privacy-conscious user tracking. Security practices include 256-bit SSL encryption and server-side encryption, though DNSSEC is not enabled and security headers are missing. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Contact is available via a contact form, but no direct emails or phone numbers are published. Overall, the website is trustworthy, secure, and professionally maintained with room for improvement in privacy disclosures and security headers.

A

Asos

asosservices.com

61

The website at test.asosservices.com is a non-production test environment for Asos, a known e-commerce brand. The site serves internal or development purposes and does not provide public-facing business content or services. The technical infrastructure is based on modern web technologies including React and Akamai mPulse for performance monitoring, indicating a mature digital setup for internal testing. However, the site lacks public business information, privacy policies, and contact details, reflecting its non-production nature. Security posture is minimal with no detected security headers and no visible HTTPS enforcement in the provided data. The domain WHOIS data is unavailable for the subdomain, consistent with internal use. Overall, the site poses low risk but also offers limited trust signals for external users.

A

aprendo - Digitale Kompetenz

aprendo.ch

58

The website aprendo.ch serves as a digital competence training platform targeted at teachers and school leaders in the canton of St. Gallen, Switzerland. It offers educational services focused on strengthening digital skills within the education sector. The site uses modern frontend technologies such as React and JavaScript modules, indicating a contemporary technical infrastructure. However, the content is minimal and primarily informational without interactive elements or extensive content. Security posture is weak due to the absence of security headers, privacy policies, and contact information, which limits trust and compliance with data protection regulations. Overall, the site appears functional but lacks critical security and privacy features necessary for a professional educational platform. Strategic improvements in security, privacy compliance, and contact transparency are recommended to enhance trust and regulatory adherence.

N

Neonmedia Oy

neonmedia.fi

65

Neonmedia Oy is a Finnish company specializing in providing media devices and real-time information solutions for public transportation. Established in 2000, it holds a leading position in Finland's public transportation media sector, offering services such as real-time progress tracking and passenger information systems. The website reflects a professional and consistent brand image, targeting transportation operators and stakeholders within Finland. Technically, the site is built on WordPress with Visual Composer and uses modern web technologies including Google Fonts and FontAwesome. The hosting and domain registration are managed by Planeetta Internet Oy, a Finnish provider, ensuring local infrastructure support. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are not found, indicating a gap in compliance with GDPR best practices. Overall, the website is functional, well-designed, and credible but would benefit from improved security and privacy disclosures.

R

Roche

roche.com

71

Roche is a globally recognized healthcare company specializing in innovative medicines and diagnostic tests. Founded in 1896 in Basel, Switzerland, it holds a leading market position in the pharmaceutical and diagnostics sectors. The website reflects a mature enterprise with a clear focus on healthcare professionals, patients, and partners. The digital infrastructure leverages modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security measures are robust, including HTTPS enforcement and comprehensive security headers, complemented by ISO 27001 certification. Privacy policies and GDPR compliance are well addressed, with clear contact points for data protection and incident response. Despite the absence of WHOIS data, the website's content and external trust signals strongly support its legitimacy. Overall, Roche's digital presence is professional, secure, and user-friendly, aligning with its stature as a healthcare industry leader.

L

Leibniz-Institut für Wissensmedien

e-teaching.org

64

e-teaching.org is a well-established, non-commercial educational portal operated by the Leibniz-Institut für Wissensmedien, providing scientifically grounded and practice-oriented information on digital media in higher education. The portal targets educators, students, and higher education professionals primarily in Germany, offering resources such as online events, blogs, podcasts, and thematic specials. The website demonstrates a consistent and professional brand presence with excellent content quality and user experience. Technically, the site is built on the Plone CMS platform, utilizing modern front-end technologies including Bootstrap Icons and Font Awesome. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal incident response documentation. The WHOIS data is unavailable due to a malformed query response, limiting domain registration trust analysis. Despite this, the website's affiliation with a reputable research institute and the presence of privacy and legal policies support its legitimacy. No blocking or WAF mechanisms were detected, allowing full content access. Overall, e-teaching.org is a credible and authoritative resource in the education sector with a solid technical foundation and good security practices. Enhancements in privacy consent mechanisms and security header implementation are recommended to further strengthen compliance and security posture.

Answear.si is a large-scale European fashion e-commerce platform operating in multiple countries, offering over 200,000 products from more than 500 global brands. The website targets general consumers interested in fashion apparel, shoes, and accessories, providing fast delivery and loyalty discounts. Technically, the site is built on modern web technologies including React and service workers, supported by a robust CDN infrastructure likely from Akamai. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, although explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a mature digital presence with good performance and user experience but could improve transparency around privacy and contact information.

Answear.cz is a well-established online multi-brand fashion retailer operating primarily in the Czech Republic and multiple European countries. The platform offers a wide range of clothing, footwear, and accessories for women, men, and children, featuring over 500 brands including premium and sports labels. The company emphasizes fast delivery, free returns, and a loyalty program to enhance customer experience. Technically, the website is built on modern web technologies including React and service workers, hosted on Akamai infrastructure, and integrates marketing and analytics tools such as Google Tag Manager and Braze. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service pages in the provided content. Overall, the website presents a professional and trustworthy e-commerce experience with room for enhanced transparency and security documentation.

R

Roche Schweiz

roche.ch

70

Roche Schweiz is a leading healthcare company specializing in innovative pharmaceuticals and diagnostic tests, serving millions of patients worldwide. The website reflects a mature digital presence with a modern tech stack based on Gatsby and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Business credibility is high, supported by consistent branding, clear contact information, and trust indicators such as certifications and official corporate data. Overall, the website is professional, secure, and trustworthy, suitable for its enterprise healthcare audience.

N

net2phone

ucontactcloud.com

76

net2phone is a well-established telecommunications company founded in 1990 and operating under the legal name IDT Domestic Telecom Inc. The company offers a comprehensive AI-powered cloud communications platform that integrates voice, video, messaging, and email to enhance business operations and customer experience. Their market position is strong, targeting businesses seeking unified communications and contact center solutions with a broad portfolio including AI Coach, AI Agent, and Microsoft Teams integrations. Technically, the website is built on HubSpot CMS with modern analytics and marketing tools, showing good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

W

Whalebone, s.r.o.

joindns4.eu

58

DNS4EU is an EU-backed initiative operated by Whalebone, s.r.o., focused on providing secure, privacy-compliant DNS services to strengthen digital sovereignty across Europe. The project targets governments, critical infrastructure, telcos, and the general public, emphasizing privacy, compliance with EU regulations such as GDPR, and enhanced cybersecurity through regional threat intelligence sharing. The website reflects a professional and consistent brand aligned with EU digital sovereignty goals. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and integrated with Google Analytics 4 and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS enforcement and privacy consent mechanisms, although some security headers could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contacts is a minor gap. WHOIS data is unavailable due to privacy protection, but the domain's legitimacy is supported by the professional website, EU co-funding, and clear company information. Overall, DNS4EU presents a trustworthy and professional digital presence with strong alignment to EU cybersecurity and privacy standards, suitable for its target audience and mission.

S

SIDN

sidn.nl

74

SIDN is the official registry operator for the .nl domain namespace, providing domain registration and cybersecurity services primarily to businesses and individuals in the Netherlands. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It offers key services such as Whois lookup, domain portfolio management, and cybersecurity solutions including brand monitoring to protect against phishing and reputational damage. The company maintains a strong market position as the authoritative .nl domain registry. Technically, the website employs modern web technologies including JavaScript, CSS, Algolia for search, Google Tag Manager, and Piwik PRO for analytics, alongside a consent management platform (Usercentrics) to ensure GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. While the site lacks a dedicated security policy or incident response page, it demonstrates good privacy and cookie policy implementation with consent mechanisms. WHOIS data aligns well with the website's claims, confirming legitimacy and trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Overall, SIDN's website reflects a mature, trustworthy, and professional digital presence suitable for its role as a critical internet infrastructure provider in the Netherlands.

A

Alma Mobility

nettix.fi

49

Alma Mobility is a Finnish company specializing in providing comprehensive solutions for the vehicle trade industry. Their platform offers tools for vehicle acquisition, modeling, buyer discovery, inventory management, and real-time market analytics, targeting automotive dealers and market participants. The website is built using modern technologies such as React and Gatsby, indicating a contemporary and scalable technical infrastructure. The site is well-designed with good mobile optimization and clear navigation, although some accessibility features could be improved. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers or policies are visible, and privacy compliance documentation is missing. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and providing clear contact information to improve trust and compliance.

M

msg systems ag

msg.group

68

msg systems ag is a large German enterprise specializing in IT services, digital transformation, and industry-specific consulting across sectors such as automotive, banking, insurance, public sector, and telecommunications. The company operates a comprehensive and professionally designed website with extensive service offerings and multiple subsidiaries, reflecting a mature market position. The technical infrastructure includes modern web technologies, consent management via Usercentrics, and Google Tag Manager for analytics, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit incident response contacts and vulnerability disclosure mechanisms are not publicly visible. Overall, the website is trustworthy, well-structured, and compliant with GDPR, serving a broad enterprise audience.

S

Symbolon AG

symbolon.com

61

Symbolon AG is a small business coaching and training provider based in Liechtenstein, specializing in the Symbolon method which uses art reflection for personal and organizational development. The company targets individuals, teams, project groups, management, and organizations seeking professional development and coaching services. The website is professionally designed using the Wix platform, providing a good user experience and clear business information including contact phone and physical address. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Technically, the site uses Wix's Thunderbolt framework and standard web technologies, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy compliance documentation. Overall, the site is safe and trustworthy for general audiences but would benefit from enhanced privacy, security policies, and WHOIS transparency.

C

CORE d.o.o.

core.hr

40

CORE d.o.o. operates the Catapult Trading Platform, a customizable electronic trading software solution targeting brokerage firms and traders. The platform emphasizes modular architecture, multi-device accessibility, and extensibility with brokerage-specific add-ons. The company is positioned as a niche provider in the finance technology sector with a focus on delivering tailored trading infrastructure. Technically, the website uses standard HTML5, CSS, and jQuery, but lacks modern security practices such as HTTPS and security headers. The site is functional with good content quality but limited privacy and compliance features. Security posture is weak due to missing HTTPS and insecure external resource loading. Overall, the domain registration data supports the legitimacy and longevity of the business. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect user data.

A

Alma Mobility

almamobility.fi

49

Alma Mobility is a Finnish company providing comprehensive solutions for the vehicle trade market, including vehicle acquisition, modeling, buyer discovery, and inventory management. Their platform offers real-time 360° market insights to support business operations. The company operates under the parent company Alma Media Oyj, indicating a solid corporate backing and market presence in Finland. The website is built using modern technologies such as React and Gatsby, reflecting a contemporary digital infrastructure. The site is well-designed with good mobile optimization and clear navigation, although some accessibility features could be improved. Security posture is moderate; HTTPS is presumably enabled but lacks visible security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration details are consistent and legitimate, supporting the business credibility.

M

MTV Oy

mtvuutiset.fi

65

MTV Uutiset is a leading Finnish news media website operated by MTV Oy, providing up-to-date news, sports, entertainment, lifestyle, and weather information. The site targets a general Finnish audience and operates a comprehensive digital media platform with video streaming and news publishing services. The website demonstrates a mature technical infrastructure using modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy and professionally maintained, with transparent advertising and analytics practices.

Nettimoto is Finland's largest online marketplace specializing in used motorcycles, scooters, mopeds, ATVs, and snowmobiles. Founded in 2000, it serves primarily Finnish buyers and sellers, providing a platform to easily find or sell vehicles. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. Technically, the site uses modern web technologies including JavaScript and Google Tag Manager for analytics and advertising, with good mobile optimization and accessibility features. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. Security posture is moderate with no visible security headers or explicit policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, Nettimoto presents a professional business front but should improve transparency and security practices to enhance trust and compliance.

Adria Media TV is a regional media company based in Serbia, providing a broad range of video streaming content including news, entertainment, and TV shows. The website is well structured, targeting a general Serbian-speaking audience with a focus on current events, lifestyle, and popular culture. The company has been established since 2011, indicating a mature presence in the media sector. Technically, the website uses modern web technologies including JavaScript, CSS, and integrates analytics and tracking services such as Google Analytics and Gemius. Hosting and DNS are managed via Cloudflare, providing a reliable infrastructure. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks some advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. No direct contact emails or phone numbers are publicly listed, but a contact form is available. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

A

Alma Insights

almatalent.fi

55

Alma Insights is a Finnish-based digital data and content services provider operating under the Alma Media group. The company offers organizations digital data, content, and marketplace services designed to deliver valuable insights through accurate information. The website reflects a professional B2B business model targeting enterprises seeking data-driven solutions. Technically, the site is built using modern technologies such as React and Gatsby, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS and relevant security headers implemented, although explicit privacy and cookie policies are missing. Overall, the site is trustworthy and well-designed but could improve compliance transparency and incident response visibility.

A

Alma Mobility

almaajo.fi

49

Alma Mobility is a Finnish company specializing in providing comprehensive solutions for the vehicle trade industry, offering services such as vehicle acquisition, modeling, buyer discovery, inventory management, and real-time market insights. The website is built using modern technologies including React and Gatsby, reflecting a contemporary digital infrastructure with good mobile optimization and user experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The WHOIS data confirms the legitimacy of the domain registration, consistent with the company's business claims in Finland. Overall, the website presents a professional business presence but would benefit from enhanced security and privacy compliance measures.

Nettiauto is Finland's largest and most popular online vehicle marketplace, established in 2000. The platform offers a comprehensive selection of new and used cars, targeting vehicle buyers and sellers primarily within Finland. The website presents a professional and user-friendly interface with good mobile optimization and clear navigation, supporting its strong market position. Technically, the site employs modern web technologies including Google Tag Manager and integrates advertising via Adnami, indicating a mature digital infrastructure. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structured data suggest a legitimate business. Security posture is moderate with no visible security headers or explicit security policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, Nettiauto demonstrates a solid business presence but should improve transparency and security practices to enhance trust and compliance.

A

Alma Insights

almainsights.fi

55

Alma Insights is a Finnish digital services company specializing in providing organizations with digital data, content, and marketplace services. The company operates under the Alma Media group, a well-established media entity in Finland. The website presents a professional and modern digital presence built with React and Gatsby, indicating a mature technical infrastructure optimized for performance and mobile devices. However, the site lacks explicit privacy and cookie policies, as well as visible contact information, which are important for compliance and user trust. Security posture is generally good with HTTPS enabled, but the absence of security headers and vulnerability disclosure policies suggests room for improvement. Overall, Alma Insights demonstrates a solid business and technical foundation with moderate security and privacy compliance, suitable for its market segment.

A

Alma Media Oyj

ampparit.com

61

Ampparit.com is a Finnish news aggregation website operated by Alma Media Oyj, a prominent media company in Finland. The site offers a comprehensive overview of the latest news across various categories including sports, politics, technology, and culture, targeting Finnish-speaking audiences. The business model focuses on aggregating and delivering news content efficiently to users, positioning itself as a leading news aggregator in the Finnish media landscape. Technically, the website employs modern web technologies such as React and uses Google Tag Manager for analytics and tracking. The site is well-structured with JSON-LD structured data to enhance SEO and social media integration. Mobile optimization is good, and the site provides a professional user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and includes some best practices but lacks explicit security headers and visible privacy or cookie policies, which are critical for GDPR compliance. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and structured data strongly indicate a legitimate operation by Alma Media Oyj. Overall, the website is professionally designed and content-rich but would benefit from enhanced privacy compliance, security header implementation, and verification of domain registration details to improve trust and security posture.

B

Basel vorwärts

baselvorwaerts.ch

62

Basel vorwärts is a community-focused organization dedicated to fostering a strong and vibrant city of Basel. The website serves as an informational platform to engage local residents and stakeholders in urban development and civic activities. The organization positions itself as a non-profit or government-related entity with a clear physical presence in Basel, Switzerland. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies, providing a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enforced and some security best practices observed, though explicit security headers and privacy compliance measures are lacking. The absence of privacy and cookie policies, as well as contact emails and phone numbers, represents areas for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and clearer contact channels.

H

Handelskammer beider Basel

basel-vernetzt.ch

53

The website 'Basel vernetzt - Ja zur trinationalen S-Bahn' is an advocacy and community platform initiated by the Handelskammer beider Basel to support the development of a trinational S-Bahn connecting Basel's train stations. The site targets regional community members and stakeholders interested in public transportation improvements. Technically, the site is built on the Wix platform using Wix Thunderbolt framework, with standard Wix scripts and styles, providing a moderate level of performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some script hardening, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate with consistent branding and relevant content but lacks explicit contact details and trust signals. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

The domain zipthelake.com currently serves a 404 Not Found error page with minimal content describing the role of Admiral, a service provider for digital publishers offering copyright access control and privacy consent management. The site is hosted on Google Cloud Platform and uses AWS DNS services. The technical infrastructure is modern but the website itself lacks substantive content, contact information, or business details. Security posture is moderate with HTTPS enforced and certificate rotation mentioned, but no security headers or vulnerability disclosure mechanisms are present. Privacy compliance is basic with a privacy statement and cookie policy described, including GDPR compliance. Overall, the site appears to be a placeholder or service endpoint rather than a full business website, limiting the ability to assess business credibility and user engagement.

R

Raiffeisen Mirovinski fond

rmf.hr

64

Raiffeisen Mirovinski fond operates as a pension fund management entity in Croatia, offering mandatory and voluntary pension fund services. The website reflects a mature digital presence with comprehensive content about pension fund categories, member information, calculators, and financial literacy initiatives. The site is well-structured, mobile-optimized, and integrates cookie consent mechanisms aligned with GDPR requirements. Technically, the site is built on IBM WebSphere Portal technology, with standard web technologies and moderate performance. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. WHOIS data is privacy-protected due to GDPR, but the domain and website content are consistent and trustworthy. Overall, the site serves its target audience effectively with a professional and compliant digital platform.

T

TrustRadius

trustradius.com

77

TrustRadius is a technology and business research firm specializing in providing a credible platform for verified B2B software reviews and comparisons. Based in Austin, Texas, and operating since 2013, it serves technology buyers and vendors by offering in-depth product information and user feedback to facilitate confident technology decisions. The platform emphasizes quality, trust, and unbiased reviews, supported by a proprietary algorithm and human verification processes. TrustRadius is a subsidiary of HG Insights, reinforcing its market credibility. Technically, the website employs a modern tech stack including React and Next.js, with integrations for analytics and consent management such as Google Analytics, Segment, and OneTrust. The site is well-optimized for performance, mobile responsiveness, and accessibility, featuring structured data for SEO enhancement. Security best practices are observed with HTTPS enforcement, strict content security policies, and secure form handling. From a security perspective, TrustRadius demonstrates a mature posture with comprehensive privacy and security policies publicly available. However, the absence of WHOIS registration data raises questions about domain registration transparency, though the website content and social presence strongly support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, TrustRadius presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around domain registration, publishing a vulnerability disclosure policy, and providing direct incident response contacts to further strengthen trust and security posture.

M

MA Lighting International GmbH

malighting.com

72

MA Lighting International GmbH is a Germany-based company specializing in the manufacturing and worldwide distribution of advanced lighting control systems, including the renowned grandMA series. The company serves professional lighting industry users, distributors, and technical professionals globally, offering comprehensive product support, training, and software downloads. Their market position is that of an established leader in lighting technology with a strong global presence. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating Google Tag Manager and Google Analytics for performance and user behavior insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. From a security perspective, the site enforces HTTPS, uses secure login forms with CSRF protection, and implements a granular cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The risk level is low, with recommendations focusing on improving security headers and transparency around security policies to further strengthen trust and resilience.

N

Njuškalo

njuskalo.hr

65

Njuškalo.hr is a leading Croatian online classifieds platform established in 2008, offering a wide range of services including vehicle sales, real estate listings, job postings, marketplace items, and tourism accommodations. The platform enjoys significant daily traffic and a strong market position in Croatia's e-commerce and classifieds sector. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates multiple analytics and advertising technologies, and implements a robust cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforced and consent management in place, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital infrastructure with good user experience and privacy compliance, positioning it as a trustworthy and professional service in its market.

C

Coca-Cola Hellenic Bottling Company

cchbcshop.com

59

The website cchbcshop.com serves as the customer portal for Coca-Cola Hellenic Bottling Company (Coca-Cola HBC), a major beverage bottler operating across multiple countries. The portal enables customers to place orders, track shipments, access invoices, and benefit from exclusive discounts, supporting a B2B e-commerce business model focused on beverage distribution. The site branding and content align well with Coca-Cola HBC's corporate identity, reflecting a large, established enterprise with a professional online presence. Technically, the site leverages modern web technologies including React and Microsoft Bot Framework Web Chat, integrated with third-party services such as Gigya for customer identity management and WordLift for content enhancement. The site is mobile optimized and demonstrates moderate performance, though some SEO and accessibility features could be improved. Hosting and domain registration are managed through reputable providers, with HTTPS enforced and domain status protections in place. From a security perspective, the site benefits from HTTPS and domain registration safeguards but lacks visible security headers and explicit privacy or cookie policies on the prelogin page. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. No suspicious or vulnerable libraries were detected, and no adult or questionable content is present, indicating a safe environment for users. Overall, the website presents a trustworthy and professional portal for Coca-Cola HBC customers, though improvements in privacy compliance, security headers, and transparency around incident response would strengthen its security posture and regulatory adherence.

S

SEMPL

sempl.si

57

SEMPL is a well-established media trends conference organizer based in Slovenia, targeting marketing, media, and communication professionals across Central and Southeastern Europe. The website showcases a professional event with a strong regional presence, offering networking opportunities, media awards, and industry insights. The technical infrastructure is modern, leveraging Next.js and React frameworks, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response details are not publicly available. Privacy compliance is addressed with cookie consent mechanisms and a basic privacy policy. Overall, SEMPL presents a credible and trustworthy digital presence aligned with its business objectives.

A

Alma Career

lmc.cz

69

Alma Career is a prominent HR and recruitment services provider operating primarily in Czechia and Central Europe. The company offers a comprehensive suite of products including job portals, online education platforms, recruitment management systems, employee engagement tools, salary benchmarking services, and career fairs. Their market position is strong, supported by a broad portfolio of subsidiary brands and a long-standing presence in the labor market since 1996. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the website is built using modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. The use of Google Tag Manager indicates a mature approach to analytics and marketing. Security posture is robust with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and registration transparency, which should be further investigated. However, the overall business credibility is supported by consistent branding, comprehensive privacy and cookie policies, and active social media presence. Strategically, Alma Career is well positioned in the HR technology sector with a diversified service offering and strong market penetration. Continued focus on transparency in security and compliance documentation would enhance trust and regulatory alignment.

T

Tidio

tidio.co

69

Tidio is a technology company specializing in AI-driven customer service chatbots and live chat software designed to help businesses convert leads, provide support, and increase revenue. Their product suite includes AI agents, chatbot automation, help desk software, live chat, and ticketing systems, positioning them as a competitive SaaS provider in the customer support technology market. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js, integrates analytics and marketing tools like Amplitude and Google Tag Manager, and employs robust security headers and HTTPS encryption, indicating a strong technical foundation. Security posture is solid with best practices observed, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the company's visible market presence and trust signals. Overall, Tidio presents a low-risk profile with recommendations to enhance transparency around security and incident response.

R

RD Station

rdstation.com.br

64

RD Station is a leading Brazilian technology company specializing in marketing automation, CRM, and sales enablement software. The company offers a comprehensive suite of products designed to help businesses automate marketing campaigns, manage sales pipelines, and enhance customer service, including AI-powered chatbots and WhatsApp messaging solutions. Positioned as the number one marketing and sales solution in Brazil, RD Station targets businesses seeking to scale their digital presence and sales operations efficiently. The website demonstrates a modern technical infrastructure built on React and Next.js frameworks, hosted on AWS Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site employs advanced SEO techniques, structured data, and accessibility features, reflecting a mature digital presence. Security best practices are observed with HTTPS enforcement and robust security headers, although explicit security policies and incident response information are not publicly detailed. While the WHOIS data for the domain is unavailable, which is unusual and slightly impacts trust, the website's professional design, comprehensive product offerings, and integration with reputable partners like Shopify, Facebook, and OpenAI reinforce its legitimacy. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, RD Station presents a strong business and technical profile with minor areas for improvement in transparency and security disclosures.

R

RTL Hrvatska d.o.o.

rtl.hr

67

RTL Hrvatska d.o.o. operates as a leading media company in Croatia, providing a wide range of television and digital content including news, entertainment, reality shows, and series. The company is part of the Central European Media Enterprises (CME) group, indicating a strong market position and backing. Their website rtl.hr serves as a comprehensive portal for their content offerings, targeting a general audience with professionally curated media content. Technically, the website employs modern web technologies and integrates multiple third-party analytics and advertising services, ensuring a robust digital presence. Security-wise, the site enforces HTTPS, uses security headers, and implements GDPR-compliant consent management, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

A

Ant International

ant-intl.com

60

Ant International is a prominent global fintech and digital payment provider headquartered in Singapore, with operations spanning Asia, Europe, the Middle East, and Latin America. The company offers a suite of unified payment platforms and financial services designed to enable inclusive growth for merchants and consumers worldwide. Their portfolio includes brands such as AlipayPlus, Antom, Bettr, and WorldFirst, each targeting specific market needs from cross-border payments to embedded financial services. The website reflects a mature digital presence with a strong emphasis on sustainability, trust, and compliance.

S

SerNet GmbH

samba.plus

72

SerNet GmbH operates the SAMBA+ website, offering enterprise-grade Samba software packages and identity and access management solutions for Linux and IBM AIX platforms. The company targets enterprise customers, appliance vendors, and cloud service providers globally, providing software subscriptions, support, and consulting services. The website is professionally designed, well-structured, and provides comprehensive contact and policy information, reflecting a mature business presence. Technically, the website is built on TYPO3 CMS, uses modern web technologies including JavaScript and CSS, and integrates Matomo analytics for user tracking. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and CAPTCHA protection on forms, though explicit security headers and incident response policies are not published. The WHOIS data is privacy protected, which is common for software companies, and no suspicious patterns were detected. The domain is linked to SerNet GmbH, a reputable entity in the Samba ecosystem. Overall, the website demonstrates a solid security and compliance posture with room for improvement in publishing security policies and headers. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and continuing to maintain GDPR compliance and transparent contact channels.

The website congress-registration.ch is a specialized platform operated by Medworld AG, focused on providing registration and overview services for medical and healthcare-related conferences primarily in Switzerland. It features a comprehensive list of upcoming and past events targeting medical professionals and educators. The platform is built on the Converia CMS and employs standard web technologies such as JavaScript, CSS, and HTML5. The site is accessible, mobile responsive to a basic degree, and offers content primarily in German with English as an alternative language. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. Business credibility is strong due to consistent branding and domain registration matching the operating company. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

M

Maciej Sawicki

maciejsawicki.com

55

Maciej Sawicki's website serves as a professional portfolio showcasing his expertise in UX design, web development, music production, and related creative fields. The business operates as a small, independent service provider based in Poland, with over a decade of experience. The website is well-structured, visually appealing, and targets clients seeking user-friendly product design and multimedia services. Technically, the site leverages modern web technologies including Webflow CMS, JavaScript libraries like Three.js and GSAP, and integrates Google Analytics for visitor tracking. Hosting appears to be managed via Polish DNS providers, consistent with the registrant's location. Security posture is moderate; HTTPS is implied but no advanced security headers or DNSSEC are enabled, and no privacy or cookie policies are present, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures to align with best practices and regulatory requirements.

FastModel Sports is a well-established provider of basketball play diagramming and coaching software, targeting high school and small college coaches. The company operates an e-commerce platform built on Shopify, offering software products and playbook tools. The website is professionally designed with consistent branding and good user experience, reflecting its market leader position in the sports coaching software niche. Technically, the site leverages modern web technologies and integrates multiple analytics and marketing tools, hosted on AWS infrastructure with Shopify CMS. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a mature digital presence aligned with its business goals and ownership by Hudl, a recognized parent company.

C

Cybersecurity and Infrastructure Security Agency

americabydesign.gov

56

America by Design is an official U.S. government initiative led by the Cybersecurity and Infrastructure Security Agency, aimed at modernizing and improving the design and user experience of government digital interfaces. The website serves as a National Design Studio initiative platform, promoting a presidential executive order to upgrade government digital services to be more user-friendly and modern. The target audience includes U.S. citizens and residents who interact with government digital services. Technically, the website is built using modern frameworks such as React and Next.js, hosted on Cloudflare, and optimized for performance and mobile devices. Security posture is good with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.

D

diagraf GmbH

diagraf.ch

46

diagraf GmbH is a small graphic design atelier based in Bern, Switzerland, specializing in corporate design, branding, illustrative graphics, and web design services. The company targets brands and businesses seeking professional visual communication solutions. The website presents a professional portfolio with clear navigation and detailed references, positioning diagraf as a trusted local design service provider. Technically, the site uses modern web technologies including Svelte and Craft CMS, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enforced but lacks security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

J

Jedes Alter zählt

jedesalter.ch

54

The website 'Jedes Alter zählt' is a German-language site likely focused on community or educational content, as suggested by the presence of the Edwiser Bridge plugin which integrates Moodle LMS with WordPress. The site uses WordPress CMS with the Astra theme, indicating a standard and modern technical infrastructure. However, the content is minimal with no explicit business descriptions, contact information, or privacy and security policies, which limits the ability to fully assess the business model or market position. Technically, the site is moderately optimized for mobile and uses common web technologies but lacks advanced SEO and accessibility features. Security posture is weak due to absence of security headers and policies, and the domain WHOIS is privacy protected, reducing transparency. Overall, the site appears to be a small-scale or community-oriented platform with room for improvement in compliance, security, and business transparency.

FSF France is a small non-profit association dedicated to promoting free software in France. The organization provides support and hosting for free software projects and collaborates with other free software and open data initiatives. The website is an archived version of their older site, primarily in French, with basic content focused on news and advocacy. The technical infrastructure is simple, with static HTML and CSS, hosted by Hetzner Online AG. There is no evidence of modern CMS or advanced web technologies. Security posture is basic, with no DNSSEC, security headers, or visible HTTPS enforcement. Privacy and cookie policies are absent despite CNIL registration, indicating compliance gaps. Contact information is clearly provided, including a generic association email and physical addresses in Paris. Overall, the site is trustworthy but lacks modern security and privacy features.

P

Parabola Project

parabola.nu

48

Parabola GNU/Linux-libre is a community-driven free software operating system distribution based on Arch Linux, emphasizing software freedom and compliance with GNU guidelines. It targets free software enthusiasts and power users seeking a fully libre and hackable OS. The project provides packages, documentation, and community support through forums, mailing lists, and IRC channels. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript with jQuery 1.8.3. The site is accessible, uses HTTPS, but lacks modern security headers and privacy policies, indicating room for improvement in compliance and security posture. No tracking or advertising scripts are present, reflecting a privacy-respecting approach. The WHOIS data for the exact domain www.parabola.nu is unavailable, likely because it is a subdomain or alias, but the project’s long-standing presence since 2009 supports legitimacy. Overall, the website is professional, trustworthy, and safe, but could enhance security and privacy compliance.

D

Dyne.org

dynebolic.org

66

Dyne.org operates the Dynebolic project, a 100% free GNU+Linux distribution focused on multimedia production and free software advocacy. The organization is a non-profit foundation based in Amsterdam, Netherlands, established in 2005, with a domain registration dating back to 2000, indicating a mature and stable presence. The website clearly communicates its mission to empower users with free tools for creative expression without cost or proprietary restrictions. The target audience includes users interested in open source multimedia production and free operating systems. Technically, the website is built using the Hugo static site generator, employs modern web technologies such as CSS and JavaScript, and is optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with privacy and cookie policies present but no explicit GDPR compliance or consent mechanisms. Overall, the site is trustworthy, professional, and well-aligned with its non-profit mission.

D

Domeneshop AS

domainname.shop

75

Domeneshop AS operates a professional domain registration and web hosting platform targeting primarily the Scandinavian market. Established in 1996 and based in Norway, the company manages over 650,000 domains and serves more than 120,000 customers, positioning itself as a leading domain provider in the region. Their services include domain registration, email hosting, web hosting with AI-powered site building, and Microsoft 365 offerings. The website is well-structured, multilingual, and supports multiple currencies, enhancing user accessibility and market reach. Technically, the website employs modern web standards including HTML5, CSS, and JavaScript with WebGL for enhanced UI effects. It is mobile-optimized with responsive design and includes user-friendly features such as password visibility toggles and device fingerprinting for login security. The site uses HTTPS with secure cookie settings, indicating a strong baseline security posture. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program. From a security perspective, the site demonstrates good practices such as encrypted connections and secure form handling but could improve by implementing additional HTTP security headers and publishing incident response and vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with a strong business reputation. Strategic improvements in security transparency and accessibility could further enhance its posture and user trust.