Security Directory

I

INSTITUTUL NAȚIONAL DE CERCETARE-DEZVOLTARE ÎN INFORMATICĂ - ICI BUCUREȘTI

rotld.ro

61

RoTLD is the official Romanian national registry for .ro top-level domains, operated by the National Institute for Research and Development in Informatics (ICI Bucharest). The website provides domain registration, administration, WHOIS lookup, and IP address allocation services. It serves Romanian businesses, individuals, and IT professionals seeking to register or manage .ro domains. The domain is well-established since 2001 and is the authoritative source for .ro domain management. Technically, the website uses a combination of Bootstrap and jQuery 1.8.3 with Mezzanine CMS, supported by Google Analytics and Tag Manager for tracking. The site is mobile responsive with a moderate performance profile. Security best practices include HTTPS enforcement and DNSSEC enabled on the domain, though some security headers are missing and the jQuery version is outdated. Security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with clear privacy and cookie policies and a consent mechanism. However, no explicit security policy or incident response contacts are published, which could be improved. Overall, the site is trustworthy, professional, and aligned with its official registry role. Recommendations include publishing a formal security policy, adding incident response contact info, updating JavaScript libraries, and enhancing security headers and accessibility features to further strengthen the security and compliance posture.

F

Föreningen för utvecklingsfrågor

fuf.se

61

Föreningen för utvecklingsfrågor (FUF) is a well-established Swedish non-profit organization dedicated to knowledge sharing, debate, and engagement on global development and sustainability issues. The website serves as a platform for articles, reports, events, and educational programs targeting academics, students, professionals, and organizations interested in international development. With over 50 years of history, FUF holds a strong market position in Sweden's development discourse. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates various plugins for enhanced user experience, including social media feeds and sliders. Hosting is provided by Loopia AB, a reputable Swedish registrar and hosting provider. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS and implements basic security best practices such as cookie consent and safe external link attributes. However, DNSSEC is not enabled, and some security headers like Content Security Policy are missing. There is no visible security policy or vulnerability disclosure page, which could be areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit terms of service and direct contact emails or phone numbers. The domain registration is consistent with the organization's profile, enhancing legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing a security policy to strengthen security posture and user trust.

S

Sovrn Holdings, Inc.

lijit.com

62

Lijit.com is an informational website representing an ad serving domain owned by Sovrn Holdings, Inc., a company specializing in advertising technology and publisher monetization. The site serves primarily as a landing page to clarify the domain's purpose and directs users to Sovrn's main website for further information and contact. The business is positioned as a technology provider in the digital advertising space, targeting publishers and advertisers seeking monetization solutions. The domain has a long-established history dating back to 2006, consistent with the company's operational timeline. Technically, the website employs standard web technologies including Bootstrap for responsive design, HTML5, CSS3, and JavaScript. The site is mobile optimized with basic accessibility and SEO features, though it lacks advanced metadata and security headers. DNS is managed via NS1, but DNSSEC is not enabled, representing a potential security enhancement opportunity. The site does not implement privacy or cookie policies, nor does it provide contact information or forms, limiting user engagement and compliance transparency. From a security perspective, the site is accessible without WAF or challenge pages, but it lacks critical security headers and DNSSEC, which could improve its security posture. The WHOIS data is consistent and trustworthy, with domain registration managed by GoDaddy and domain status flags preventing unauthorized changes. No vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies and contact information for incident response reduces compliance and trust levels. Overall, the website is functional and consistent with its stated purpose but is minimalistic and lacks comprehensive compliance and security features. Strategic improvements in privacy compliance, security headers, and user contact mechanisms would enhance trust and security posture.

F

Flaticons

flaticons.net

67

Flaticons.net is a specialized online platform offering over 8,000 royalty free flat icons with a user-friendly customization tool aimed at web developers, designers, and businesses. Established in 2013, the site provides free icon packs and a flaticon generator to create personalized icons for personal and commercial use. The business operates a freemium model, monetizing primarily through advertising and possibly premium services. The website is well-structured with clear navigation and a consistent brand presence, targeting a niche market in the technology sector focused on digital assets for web projects. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Adsense, and Google Tag Manager, hosted behind Cloudflare DNS. The site is mobile optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. The domain is well-established and registered with NameCheap, showing consistency between domain age and business maturity. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks DNSSEC, security headers, and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected, but the absence of terms of service and security policies suggests areas for compliance and trust enhancement. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no GDPR-specific indicators. Overall, Flaticons.net presents a moderate risk profile with a solid business foundation and technical implementation but could benefit from enhanced security practices and compliance documentation to improve trust and resilience against threats.

C

Cartell Car Check

cartell.ie

68

Cartell Car Check is a well-established Irish company specializing in comprehensive vehicle history reports for Irish and UK cars. The website offers a broad range of services including mileage, finance, write-off, tax, and ownership checks, positioning itself as Ireland's leading car history check provider. The business targets individual motorists and automotive professionals, providing trusted data and valuation tools such as the VRT calculator. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and advertising tools, including Google Analytics and Didomi for consent management. The website is well-structured, mobile-optimized, and SEO-friendly, offering a professional user experience. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks explicit security headers and published security policies, indicating room for improvement. Overall, the site is trustworthy and professional, though the absence of WHOIS data limits full domain legitimacy verification.

Lincoln Motor Company operates as a premium luxury automotive brand under the Ford Motor Company umbrella, specializing in luxury SUVs and plug-in hybrid electric vehicles. The website www.lincoln.com serves as a comprehensive digital platform showcasing their vehicle lineup, financing options, and customer services. The site targets luxury vehicle consumers primarily in the United States, emphasizing comfort, wellness, and advanced automotive technology. The business model focuses on manufacturing, retail sales, and after-sales services for luxury vehicles, positioning Lincoln as a key player in the premium automotive market segment. Technically, the website is built on Adobe Experience Manager (AEM) CMS and leverages a modern technology stack including Adobe Target for personalization, OneTrust for cookie consent management, Google Tag Manager, and various analytics tools such as Adobe Analytics, Mouseflow, and ContentSquare. The site is optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices evident in meta tags and structured data. Hosting and content delivery are supported by Akamai CDN, ensuring fast and reliable user experience. From a security perspective, the website enforces HTTPS with excellent SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. Cookie consent mechanisms comply with GDPR and other privacy regulations, although no explicit security policy or incident response contact information is publicly available. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The domain WHOIS data is not publicly available, likely due to privacy protection, but the website's professional presentation and brand consistency strongly indicate legitimacy. Overall, www.lincoln.com demonstrates a mature digital presence with strong business credibility, technical sophistication, and privacy compliance. Strategic recommendations include publishing a dedicated security policy, establishing a vulnerability disclosure program, and providing incident response contact details to enhance transparency and trust. These steps would further solidify Lincoln's reputation as a secure and customer-focused luxury automotive brand.

K

Kloudend, Inc.

ipapi.co

69

ipapi.co is a professional IP address lookup and geolocation API service operated by Kloudend, Inc., a US-based technology company founded in 2016. The company offers a scalable and reliable API service trusted by major enterprises including Fortune 500 companies. Their business model is subscription-based with a free tier for testing and multiple paid plans for production use. The website provides comprehensive documentation, pricing plans, and customer testimonials, reflecting a mature and customer-focused business. Technically, the site is built on modern web technologies including Bootstrap and hosted on AWS, ensuring good performance and scalability. The presence of HTTPS and PCI compliant payment processing indicates a strong security posture, although explicit security headers and cookie consent mechanisms could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity suitable for enterprise clients.

C

Choice Bank

bankwithchoice.com

75

Choice Bank is a community-focused financial institution offering a broad range of business and personal banking services, including insurance, succession planning, employee benefits, and wealth management. The bank emphasizes a "People First" approach, aiming to build strong relationships with clients through local decision-making and personalized service. It holds a solid market position with industry recognitions and serves customers primarily in the United States. The website reflects a medium-sized enterprise with consistent branding and professional content.

H

Homiris

homiris.fr

67

Homiris is a French-based security service provider specializing in home and professional alarm systems with integrated telesurveillance. Operated by EPS, a recognized leader in the French security market, Homiris offers subscription-based connected alarm solutions with included equipment, maintenance, and 24/7 monitoring. The company holds multiple certifications and awards, reinforcing its market position and trustworthiness. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to its French audience. Technically, the site uses modern JavaScript libraries and integrates third-party services for analytics, advertising, and customer reviews. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers are not explicitly detected and reCAPTCHA is configured but disabled. WHOIS data is unavailable, which slightly reduces domain trust but the overall business credibility remains high due to certifications and transparent business information. Strategic recommendations include enhancing security headers, enabling anti-bot protections, publishing explicit security policies, and adding a security.txt file for vulnerability disclosures.

L

Le Temps

letemps.ch

61

Le Temps is a prominent Swiss media company delivering continuous news coverage, in-depth investigations, and multimedia content including podcasts and videos. The website targets a general audience interested in Swiss and global news, operating on a subscription and advertising business model. Technically, the site employs modern web technologies such as Turbo, StimulusJS, and integrates multiple analytics and advertising platforms, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses nonce-based script loading, and implements GDPR-compliant consent management, reflecting a strong security posture with room for improvement in explicit security policy disclosures. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source of news content.

C

Corporate LiveWire

corporatelivewire.com

50

Corporate LiveWire is a specialized media platform providing news, expert guides, deals, awards, and virtual round tables focused on the corporate finance sector globally. The website targets business professionals and individuals interested in corporate finance, legal, and investment topics. It maintains a moderate market position as a niche content provider with a consistent brand and professional content quality. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Bootstrap, CKEditor, and Google reCAPTCHA, hosted on MyUKCloud infrastructure. While the site is functional and moderately optimized for mobile, there is room for improvement in performance and accessibility. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanism. Overall, the site is trustworthy but could enhance security and privacy practices to improve risk posture.

C

Crédit Mutuel du Sud-Ouest

cmso.com

68

Crédit Mutuel du Sud-Ouest operates as a regional cooperative and mutual bank serving individuals, professionals, enterprises, associations, and local authorities primarily in the South-West of France. The website presents a professional banking service offering including accounts, cards, and online management, positioning itself as a local bank committed to customer projects and community engagement. The site is well-branded and consistent with the Crédit Mutuel Arkéa group identity. Technically, the website leverages modern web technologies including Bootstrap for responsive design, Jalios CMS for content management, and integrates advanced analytics and consent management tools such as Piano Analytics and Didomi. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. It implements GDPR-compliant cookie consent mechanisms, demonstrating a commitment to privacy. However, the absence of explicit security policies, incident response information, and direct security contact channels limits transparency. The WHOIS data is notably missing or unavailable, which raises questions about domain registration legitimacy despite the professional appearance and branding. Overall, the website is a credible and professional digital presence for a regional bank, with strong privacy and security practices but some gaps in transparency and domain registration clarity. Strategic improvements in publishing security policies and verifying domain registration would enhance trust and compliance.

C

Crédit Mutuel de Bretagne

cmb.fr

66

Crédit Mutuel de Bretagne is a regional cooperative and mutual bank serving individuals, professionals, enterprises, associations, and collectives primarily in Brittany, France. The website offers comprehensive banking services including account management, online account opening, and card services, positioning itself as a trusted regional financial institution under the Crédit Mutuel Arkéa group. The site is professionally designed with consistent branding and clear navigation tailored to its diverse audience segments. Technically, the website leverages modern web technologies including JavaScript, CSS, Bootstrap, and Jalios CMS. It integrates advanced consent management via Didomi and analytics through Piano Analytics and Google Tag Manager, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. From a security perspective, the website enforces HTTPS, employs cookie consent mechanisms aligned with GDPR, and avoids exposing sensitive data. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities. The absence of WHOIS data is likely due to privacy protection, which is justified for a financial institution. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a major regional bank. Strategic recommendations include enhancing visible security headers, publishing clear security and incident response policies, and maintaining vigilance on third-party scripts to sustain trust and compliance.

A

Arbeiterkammer

arbeiterkammer.at

68

Arbeiterkammer is a prominent Austrian non-profit organization dedicated to advising and representing workers and consumers. The website serves as a comprehensive portal offering extensive information and services related to labor law, tax law, consumer protection, education, family support, and workplace health. It is well-positioned as a leading advocacy group in Austria with a strong regional presence through multiple subdomains. The site targets employees, workers, and consumers seeking legal advice and social support.

Ford Motor Company operates a comprehensive and professionally designed website showcasing its extensive lineup of vehicles including hybrid, electric, SUVs, trucks, and commercial vehicles. The site targets consumers and commercial buyers in the automotive sector, providing detailed product information, pricing, and dealer location services. The company is a major player in the global automotive market with a strong brand presence and consistent messaging. Technically, the website leverages modern web technologies including Adobe Experience Manager, Adobe Target, and Akamai CDN, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not prominently published. WHOIS data for the domain is unavailable, likely due to registry restrictions, but the website's legitimacy is supported by strong brand signals and professional content. Overall, the site reflects a mature digital presence with good security and privacy practices, suitable for a large enterprise in the transportation industry.

A

AB Syna

syna.se

63

AB Syna is a well-established Swedish company specializing in credit reporting and market information services since 1947. Their website, upplysningar.syna.se, targets Swedish businesses and government entities, offering credit reports, register maintenance, market analysis, and subscription-based services. The company emphasizes professional service, personal support, and compliance with GDPR regulations. Technically, the website uses modern frameworks like Bootstrap and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS, anti-forgery tokens, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the subdomain is noted but does not detract significantly from the overall trustworthiness given the company's established presence and consistent branding. Overall, the site is professional, secure, and compliant, serving a clear B2B finance sector niche.

S

SCOR

scor.com

71

SCOR is a leading global reinsurance company headquartered in France, offering a broad portfolio of innovative Property & Casualty, Life & Health, and Investment solutions. The company targets insurance firms and investors, positioning itself as a financially solid and innovative market leader. The website reflects a mature digital presence with comprehensive corporate, investor, and compliance information, supporting transparency and trust. Technically, the site is built on Drupal 10 with modern web technologies including Matomo analytics for privacy-respecting user tracking, lazy loading images, and embedded multimedia content. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and professional user experience. From a security perspective, the website enforces HTTPS, uses security cookies, and implements a robust cookie consent mechanism aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like Content-Security-Policy could be improved, and a security.txt file is absent. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, but the website's professional content and compliance posture support legitimacy. The risk profile is low, with recommendations to enhance security transparency and incident response visibility.

A

ABTA Ltd

abtatravelinsurance.com

67

ABTA Travel Insurance operates as a travel insurance provider offering multiple levels of coverage including medical, cancellation, baggage, and cruise insurance. The business is positioned as a trusted intermediary partnered with ABTA Ltd and AXA Group, leveraging regulatory authorizations from the FCA and Prudential Regulation Authority. Their target audience includes families, solo travelers, and cruise holidaymakers seeking comprehensive travel protection. The website provides clear product information, online quote capabilities, and customer support access.

L

Linux Professional Institute (LPI)

lpi.org

62

Linux Professional Institute (LPI) is a well-established non-profit organization specializing in global Linux and open source certification and career support. It holds a strong market position as the world's first and largest vendor-neutral Linux certification body, serving over 350,000 certified professionals across more than 180 countries. The organization offers a comprehensive portfolio of certifications, training partnerships, and community engagement programs, targeting IT professionals, educators, and organizations worldwide. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Bootstrap, Elementor, and various performance and analytics tools such as Matomo and Google Tag Manager. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and integrates CAPTCHA for form protection. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection is justified given the organization's non-profit status and global presence. Overall, the website reflects a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for Linux certification and open source community support.

B

BSD Taiwan

bsdtw.org

53

BSD Taiwan is a niche community website dedicated to BSD operating system enthusiasts in Taiwan. It serves as a hub for community engagement, event promotion, and resource sharing related to FreeBSD and other BSD variants. The website is modest in scale, targeting BSD users primarily in Taiwan but also accessible globally. It leverages common front-end technologies such as Bootstrap and Font Awesome, hosted by Gandi SAS, with a domain registered since 2017, reflecting a stable and consistent presence. Technically, the website employs a straightforward and responsive design with moderate performance and basic SEO and accessibility features. It lacks advanced CMS or analytics integrations, indicating a simple, community-focused infrastructure. The absence of privacy and cookie policies, as well as security headers, suggests room for improvement in compliance and security hardening. From a security perspective, the domain is well-registered with clientTransferProhibited status and no privacy protection, appropriate for a community organization. However, the lack of DNSSEC and security headers, combined with no visible incident response or vulnerability disclosure mechanisms, indicates a basic security posture. No forms or sensitive data collection points reduce immediate risk, but the site would benefit from enhanced security practices and compliance documentation. Overall, BSD Taiwan presents a trustworthy and professional community platform with good content quality and user experience but requires improvements in privacy compliance, security headers, and contact transparency to enhance its security posture and trustworthiness.

C

Crnogorska nezavisna informativna agencija Montenegro Independent News Agency Infomont doo/MINA

mina.news

62

Agencija MINA is an independent Montenegrin news agency providing comprehensive news coverage including politics, society, sports, economy, and culture primarily targeting the Montenegrin audience. The website offers a variety of news categories and multimedia content, positioning itself as a key regional media outlet with a medium-sized operation founded in 2002. The company maintains a professional online presence with active social media channels and clear contact information, reinforcing its credibility in the media sector. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. The site is hosted behind Cloudflare, ensuring good performance and security at the infrastructure level. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. The site uses HTTPS with an excellent SSL configuration, but lacks some security headers that could enhance protection. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent mechanisms. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie banner present but no dedicated privacy policy or terms of service pages found. Overall, the website is trustworthy and professionally maintained with a solid business foundation. Strategic improvements in privacy documentation, security headers, and transparency around security policies would enhance its security posture and compliance. The domain WHOIS data is privacy protected but consistent with the business claims, supporting legitimacy.

U

University of St.Gallen

hsg.ch

75

The University of St.Gallen is a prestigious Swiss educational institution specializing in management, economics, law, social sciences, international affairs, and computer science. The website serves a diverse audience including students, academics, and business partners, offering comprehensive information about academic programs and research activities. The university holds a strong market position as a leading Swiss university with international recognition. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap and jQuery. It integrates multiple third-party analytics and marketing tools, including Google Analytics, Crazy Egg, and various advertising pixels, all managed through a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the website enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. The domain registration data aligns well with the website's identity, reinforcing its legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, with minor recommendations to enhance transparency around security policies and vulnerability disclosures.

P

Prestige Awards

prestigeawards.co.uk

50

Prestige Awards is a UK-based awards platform established in 2019 that recognizes small and medium-sized businesses for excellence in their respective markets. The website offers a nomination process for businesses to showcase achievements and gain recognition through regional and international awards. The platform leverages WordPress with popular plugins and frameworks, providing a professional and user-friendly experience. Social media integration and partnerships with organizations like Corporate Livewire enhance its market presence. Technically, the site is well-structured with SSL encryption and moderate performance, though it lacks some advanced security headers and cookie consent mechanisms. Security posture is solid but could be improved with additional policies and disclosures. Overall, the site is trustworthy and serves its niche effectively.

K

KEEST

keest.ch

51

KEEST is a regional competence center specializing in renewable energy systems and energy efficiency services targeted primarily at small and medium-sized enterprises (KMU) in the Thurgau region of Switzerland. The organization offers a broad range of consulting services including energy efficiency analyses, process optimization, photovoltaic self-consumption studies, and decarbonization support. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google reCAPTCHA v3, managed via the admiralCX CMS. Security posture is solid with HTTPS enforced and bot protection on forms, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-positioned within its niche, supported by partnerships with reputable regional and energy organizations.

E

ESB Marketing Netzwerk AG

markenfestival.com

48

MARKENFESTIVAL is a professional marketing event organized by ESB Marketing Netzwerk AG, targeting CMOs, brand decision-makers, agencies, and media professionals primarily in Germany. The event focuses on current megatrends such as sustainability, purpose, influencer marketing, and employer branding, with a notable emphasis on emerging digital trends like the Metaverse. The website is well-branded, content-rich, and provides comprehensive information about the event, speakers, partners, and registration. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and frameworks, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS, uses secure login forms, and integrates a consent management platform for GDPR compliance. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which should be verified. Overall, the site demonstrates a mature digital presence with strong marketing and compliance practices.

E

ESB Marketing Netzwerk AG

sporttourismusforum.com

47

SPORT.TOURISMUS.FORUM is a specialized event and networking platform organized by ESB Marketing Netzwerk AG, focusing on the sport tourism sector primarily in the German-speaking D-A-CH region. The website serves as a hub for event information, expert articles, speaker presentations, and participant registration. The business positions itself as a niche leader in sport tourism events, offering valuable insights and networking opportunities to tourism destinations, sports organizations, and related stakeholders. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates GDPR-compliant consent management and security features such as Google reCAPTCHA. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and business presence appear professional and trustworthy. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, with room for improvement in security headers and domain registration transparency.

E

ESB Marketing Netzwerk

sport-marke.at

46

SPORT & MARKE is Austria's largest sport business congress organized by ESB Marketing Netzwerk, serving as a key platform for industry professionals to exchange knowledge, network, and explore sponsorship opportunities. The website demonstrates a mature digital presence with a modern CMS (TYPO3), multimedia content, and integrated consent management, reflecting a solid technical infrastructure. Security posture is good with HTTPS and consent mechanisms, though some security headers and explicit incident response policies are absent. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but overall the site appears professional and trustworthy. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust.

E

ESB Marketing Netzwerk

sportmarkemedien.com

47

SPORT MARKE MEDIEN, operated by ESB Marketing Netzwerk, is a professional event and marketing platform focused on the sports ecosystem, particularly in the DACH region. It organizes congresses and networking events in conjunction with the ISPO Munich trade fair, bringing together media, sponsors, sports organizations, and startups. The website demonstrates a mature digital presence with rich content, multimedia integration, and active social media engagement. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant consent management. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers could be improved. The absence of WHOIS domain registration data is a notable concern, slightly impacting trust. Overall, the site is professional, well-structured, and serves its target audience effectively.

E

ESB Marketing Netzwerk

fancommerce.de

44

The website www.fancommerce.de represents the Center of FanCommerce, operated by ESB Marketing Netzwerk, focusing on merchandising and licensing trends primarily in the sports and entertainment sectors. It offers industry studies, forums, and an annual event to provide knowledge and networking opportunities for professionals. The platform is positioned as a niche media and event organizer with a strong presence in the German market. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Tag Manager, reCAPTCHA, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

E

ESB Marketing Netzwerk AG

sportforumschweiz.ch

47

SPORT.FORUM.SCHWEIZ is a leading sport business congress in Switzerland organized by ESB Marketing Netzwerk AG. It serves as a premier networking and knowledge-sharing platform for top decision-makers in the Swiss sport industry, including clubs, associations, media, sponsors, and tourism destinations. The website provides detailed event information, speaker profiles, partner collaborations, and expert articles, positioning itself as the largest sport business event in the country. The business model revolves around event organization, sponsorship, and industry networking.

S

SCOR Investment Partners SE

scor-ip.com

65

SCOR Investment Partners SE operates as the asset management arm of the SCOR Group, a leading global reinsurer. The company specializes in investment strategies that emphasize risk diversification, recurring returns, and capital preservation, with a strong commitment to sustainable development financing. Their market presence spans Paris, London, and Zurich, targeting professional institutional investors. The website reflects a mature digital presence built on Drupal 10, incorporating modern web technologies and compliance with EU privacy regulations. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. The absence of WHOIS registration data is a notable risk factor, potentially indicating privacy protection or registration issues. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in domain registration and security disclosures.

T

Tolomeo Capital AG

tolomeo-capital.com

59

Tolomeo Capital AG is a Swiss-based systematic asset management firm specializing in quantitative, technology-driven investing strategies. Founded in 2011, the company manages its own fund with a fully audited track record since 2012 and holds a license from the Swiss Financial Market Supervisory Authority (FINMA). Positioned uniquely between high-frequency and long-term asset managers, Tolomeo leverages scientific and technological expertise to deliver market-neutral, uncorrelated returns to professional and institutional investors. Their offerings include proprietary funds, systematic investment strategies, advisory services, and risk management tools.

S

Swiss Fund Data AG

swissfunddata.ch

58

Swiss Fund Data AG operates a professional online platform providing comprehensive data, documents, and market insights related to investment funds approved for public distribution in Switzerland. The company targets Swiss residents interested in investment funds, including both qualified and private investors, and offers personalized services such as the MyFunds user account. The website is positioned as a trusted publication organ approved and supervised by FINMA, reinforcing its credibility in the Swiss financial market. Technically, the website employs a traditional but stable technology stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile-optimized with good navigation and content quality. However, some JavaScript libraries are outdated, and no explicit security headers are detected, which could be improved. The site uses HTTPS with good SSL configuration, but personalized data transmission is unencrypted, which is a notable security risk acknowledged in the legal disclaimers. From a security perspective, the website demonstrates moderate maturity with HTTPS enforcement and privacy-conscious analytics configurations such as IP anonymization. However, the lack of security headers and unencrypted personalized data exchange represent vulnerabilities. No explicit incident response or vulnerability disclosure mechanisms are present. Privacy policies are comprehensive and GDPR-compliant, with clear data protection officer contact information. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations, but it could benefit from enhanced security controls and clearer incident response provisions to strengthen its security posture and user trust.

K

KA Webbyrå

kawebb.se

56

KA Webbyrå is a Stockholm-based digital agency specializing in custom WordPress website development, digital marketing, and media production services. Established in 2006, the company has a strong local presence with a portfolio of hundreds of clients, positioning itself as a trusted digital partner. The website reflects a professional and modern digital infrastructure leveraging WordPress CMS, Gravity Forms, Google Analytics, and other contemporary web technologies. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the site is well-structured, GDPR compliant, and provides comprehensive contact information, supporting a high level of business credibility and user trust.

S

SEE ME Agency

seeme.agency

64

SEE ME Agency is a Swiss-based marketing and web design agency specializing in creating compelling websites and digital strategies to help businesses succeed. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, though there is room for improvement in security headers and explicit privacy and security policies. Overall, the site appears legitimate and trustworthy, targeting businesses in Switzerland seeking marketing services.

I

Inbox IT Solutions

itsinbox.com

47

Inbox IT Solutions is a medium-sized technology company specializing in IT services and software products such as content management systems, media management software, time tracking, and banner management systems. The company has a solid market presence with over 20 years of experience, more than 50 employees, and a broad client and partner base. Their website reflects a professional business focus, targeting other businesses seeking IT solutions and partnerships. Technically, the website employs a modern and diverse technology stack including Java, JavaScript frameworks, Microsoft technologies, and Linux platforms, indicating a mature and versatile infrastructure. The site is mobile optimized and well-structured, though some accessibility features could be improved. Security-wise, the website uses HTTPS but lacks advanced security headers and published security policies, which lowers its security posture. No privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

C

CAMPUS SURSEE

campus-sursee.ch

51

CAMPUS SURSEE is a leading Swiss educational and seminar hotel center specializing in construction training, seminars, sports facilities, and hospitality services. The website reflects a mature digital presence with a professional design, clear navigation, and a broad offering targeting construction professionals, event organizers, athletes, and hotel guests. Technically, the site is built on WordPress with modern libraries and frameworks, including Bootstrap and jQuery, and integrates consent management and analytics tools. Security posture is solid with HTTPS and consent mechanisms but lacks visible security headers and formal policies. Overall, the site is trustworthy and well-positioned in its market segment.

W

Water Group d.o.o.

watergroup.me

46

Water Group d.o.o. is a Montenegrin company specializing in the distribution and sale of beverages and Horeka-related products, including mineral and spring water, espresso coffee, and hot and cold drinks for hotels. Established in 2006, the company operates multiple distribution centers across Montenegro and serves the Horeka market segment with a broad product portfolio including brands like RADA, Suza, MOAK, and Tchibo. The website reflects a professional business presence with consistent branding and relevant content tailored to its target audience. Technically, the website is built on Joomla CMS with the Gridbox framework and uses common libraries such as jQuery and Bootstrap. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and DNS infrastructure align with the business location, and the domain is privacy protected but registered through a reputable registrar. Performance is moderate with no blocking or WAF detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are present. Social media integration is evident, enhancing trust and engagement. Overall, the security posture is adequate but could be improved with standard best practices and compliance documentation. The overall risk assessment indicates a moderate risk profile primarily due to compliance gaps and missing security headers. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enabling DNSSEC, and establishing vulnerability disclosure processes to enhance trust and security maturity.

M

MCH Group AG

swissbau.ch

73

Swissbau is a leading trade fair platform in Switzerland for the construction and real estate industry, operated by MCH Group AG. It serves as a major event connecting industry professionals, exhibitors, and partners to showcase innovations and trends. The website demonstrates a mature digital presence with good content quality, professional design, and clear navigation. Technically, it employs modern web technologies, security best practices including HTTPS and security headers, and integrates multiple analytics and marketing tools with user consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, and no vulnerability disclosure program is evident. Overall, the site is trustworthy, GDPR compliant, and well-positioned in its market segment.

W

Work-ID

work-id.ch

47

Work-ID is a Swiss technology company providing a digital skills identification platform designed to document and showcase the capabilities of employees in Switzerland. Positioned as the largest skills-based ecosystem in the Swiss labor and education market, it connects individuals and companies through a digital skills ID and a skills manager tool for employers. The website reflects a professional and consistent brand presence with partnerships from reputable Swiss institutions. Technically, the site is built on WordPress with modern web technologies including Google reCAPTCHA and Google Tag Manager, ensuring a secure and privacy-conscious user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

K

KünzlerBachmann Directmarketing

kbdirect.ch

50

KünzlerBachmann Directmarketing is a Swiss-based company specializing in data-driven marketing services, including address sales, customer analytics, mailing production, and fundraising solutions. The company targets businesses seeking direct marketing and data analytics to optimize customer reach. Their market position is that of an established, medium-sized player in the Swiss marketing sector, offering a broad portfolio of services tailored to B2B clients. The website reflects a professional brand with consistent messaging and a clear focus on marketing and data services. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Google Fonts for typography, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized with good SEO practices and moderate performance. Accessibility is basic but functional. Hosting details are not explicitly identified, but SSL is properly configured with strong security headers. From a security perspective, the site enforces HTTPS, uses a comprehensive cookie consent mechanism compliant with GDPR, and integrates major advertising and analytics platforms with transparent disclosures. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and a security.txt file, which are recommended for enhanced security posture. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include publishing terms of service, enhancing accessibility, and formalizing security and incident response documentation to further strengthen trust and compliance.

W

Work-ID AG

skills-manager.ch

50

Work-ID AG operates the Skills-Manager platform, a B2B SaaS solution focused on effective competence management by enabling companies to identify and manage employee skills and talent pools. The website is professionally designed, targeting HR professionals and companies seeking to optimize recruiting and internal talent management. Technically, the site is built on WordPress with modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA for security. SEO and accessibility are well implemented, and the site is mobile optimized. Security posture is solid with HTTPS enforced, security headers present, and a cookie consent mechanism in place, though a dedicated security policy and incident response information are absent. Overall, the domain registration aligns with the business identity, indicating legitimacy and trustworthiness.

E

ESB Marketing Netzwerk

esb-online.com

50

ESB Marketing Netzwerk operates as a specialized networking platform targeting decision-makers in the sports, entertainment, and marketing sectors primarily in Germany. The platform offers a comprehensive suite of services including live events, educational academy courses, a content hub with industry insights, and a partner network comprising over 600 companies. The website demonstrates a strong market position with over 30 years of industry know-how and recognized certifications such as the SQS certification from SLC Management. Technically, the site is built on TYPO3 CMS with modern front-end technologies like Bootstrap and jQuery, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforcement and consent management, though some security headers are missing and no explicit incident response contacts are provided. The absence of WHOIS registration data reduces transparency but does not detract significantly from the site's professionalism and trustworthiness. Overall, the site is well-positioned for its target audience with a strong digital presence and content quality.

V

VADIAN.NET AG

firmen.ch

58

firmen.ch is a Swiss business directory platform operated by VADIAN.NET AG, providing a comprehensive marketplace for SMEs to present their company profiles, job listings, news, and seminars. The platform targets Swiss small and medium-sized enterprises and business professionals, offering services that facilitate business networking and recruitment. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern web technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel, and is hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced and multiple security headers present, though the site lacks a visible cookie consent mechanism and dedicated security policies. Overall, the domain registration is transparent and consistent with the business claims, indicating high legitimacy. Recommendations include implementing cookie consent, publishing security policies, and enhancing accessibility features to improve compliance and user trust.

S

SOUL

souldesign.gr

45

SOUL is a small, award-winning creative agency operating in Athens, Greece, and New York, USA. The company specializes in branding, UI/UX design, packaging, and marketing services, targeting businesses seeking innovative and purposeful visual communication. Their website reflects a professional portfolio showcasing diverse projects and emphasizes their dual-location presence. Technically, the website is built on Joomla CMS and leverages modern JavaScript libraries and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks visible security headers and formal security policies, suggesting room for improvement in security posture. Overall, the website is trustworthy, well-branded, and compliant with basic privacy standards, though it could enhance transparency and incident response readiness.

J

Job & Karriere Blog

jobundkarriereblog.ch

46

Job & Karriere Blog is a professional online platform providing valuable career advice, job market insights, and related content primarily targeting German-speaking professionals and job seekers in Switzerland. The website offers a range of articles on topics such as salary negotiation, job market trends, resume writing, and work-life balance, positioning itself as a niche content provider in the career development space. Technically, the site is built on WordPress, leveraging modern web technologies including Bootstrap, jQuery, and Google Tag Manager for analytics and marketing. The site demonstrates good digital maturity with responsive design, SEO optimization, and accessibility considerations. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security headers and a published security policy. Overall, the site is legitimate, professionally maintained, and safe for general audiences, with no detected vulnerabilities or suspicious indicators.

G

Gentoo Foundation, Inc.

gentoo.org

63

Gentoo Linux is a well-established open source Linux distribution project known for its flexibility and source-based package management. The website serves as a hub for the community, providing downloads, documentation, security advisories, and forums. The project is supported by various partners and sponsors, including the Oregon State University Open Source Lab, which hosts critical infrastructure. Technically, the website uses modern web technologies such as Bootstrap and jQuery, with a responsive design and good SEO practices. Security-wise, HTTPS is enabled and security advisories are actively published, but the site lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable or malformed, which limits domain registration trust analysis but does not detract from the strong community and brand presence. Overall, the site is professional, trustworthy, and serves its target audience effectively.

B

Bavarian Nordic

bavarian-nordic.com

56

Bavarian Nordic is a well-established Danish biotechnology company specializing in the research, development, manufacturing, and commercialization of innovative vaccines targeting infectious diseases. With a domain age dating back to 1997 and multiple global locations, the company demonstrates a strong market presence and commitment to life-saving healthcare solutions. Their website reflects a professional and comprehensive approach to business communication, targeting healthcare professionals, investors, and the general public. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Flowplayer, Cookiebot for consent management, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices, accessible, and SEO-friendly, though some improvements in security headers and DNSSEC could enhance its security posture. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. The WHOIS data confirms the legitimacy and consistency of the domain registration with the company's Danish roots. Overall, Bavarian Nordic's digital presence is robust, secure, and compliant with privacy regulations, supporting its credibility as a leader in vaccine development. Strategic enhancements in security transparency and DNS security would further strengthen its trustworthiness and resilience.

A

ARIAQ

ariaq.ch

58

ARIAQ is a Swiss-based company specializing in quality and performance training and consulting services. With over 30 years of experience, it offers a wide range of professional courses and consulting in quality management, regulatory compliance, and operational excellence. The website is well-structured, professionally designed, and targets organizations and professionals seeking to improve their quality systems and performance. Technically, the site is built on Drupal 10 with modern frameworks like Bootstrap and includes lazy loading and analytics integrations. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.