Security Directory

T

TOPODRONE

topodrone.com

58

TOPODRONE is a specialized service provider focusing on LiDAR and UAV surveying technologies, offering aerial data collection and mapping solutions. The company appears to target businesses and organizations requiring advanced surveying services, positioning itself as a niche technology provider in this sector. The website is built on the Bitrix CMS platform with integrated Bitrix24 CRM tools, indicating a moderate level of digital maturity and customer engagement infrastructure. The technical stack includes modern JavaScript libraries and frameworks, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from improved transparency and security practices.

S

SETUPAD Inc.

setupad.com

62

SETUPAD Inc. operates a specialized website monetization platform focused on optimizing ad revenue for publishers through advanced programmatic advertising technologies. The company offers tailored products such as Setupad Self-Serve, Setupad Bidder, and Managed Prebid services, targeting digital publishers and advertisers globally. With over 500 international websites and partnerships with 31 SSPs, Setupad holds a strong market position in the ad tech industry, supported by certifications like Google Certified Publishing Partner and Prebid.org membership. The website reflects a mature digital presence built on WordPress with modern frameworks and CDN support, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, domain transfer protection, and Cloudflare DNS, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by client success stories and transparent contact information.

M

Mallard Manufacturing

mallardmfg.com

54

Mallard Manufacturing is a well-established company specializing in gravity flow storage solutions including pallet flow racks, carton flow racks, and gravity conveyor systems. The company targets warehouse managers and logistics professionals seeking to optimize warehouse productivity. Their market position is strong as a leading manufacturer in this niche, supported by a domain age dating back to 2000 and consistent branding across their digital presence. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern frameworks like Bootstrap and integrating Google reCAPTCHA and Cookiebot for security and privacy compliance. The site demonstrates good SEO and mobile optimization, though accessibility is basic. Security posture is solid with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism. However, the absence of a terms of service page and explicit security policy or incident response contacts are notable gaps. Overall, the website is professional, trustworthy, and business credible with moderate technical and security maturity.

P

People & Planet First

peopleandplanetfirst.org

53

People & Planet First is a recently established (2023) global verification and collective organization focused on promoting enterprises that prioritize social and environmental impact over profit maximization. The website serves as a platform for verification, partner engagement, and supporter offers, leveraging a network of partners to facilitate verification processes and visibility. The business model centers on verification services and community building within the social enterprise sector. Technically, the website is built on WordPress with Elementor and Bootstrap, featuring modern web technologies and a cookie consent mechanism to comply with privacy regulations. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though improvements such as enabling DNSSEC and publishing security policies are recommended. Overall, the website is professional, trustworthy, and well-positioned within its niche, though it lacks explicit privacy and terms of service documentation on the homepage. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and providing clearer contact details to improve trust and compliance.

S

Systems & Components

systemsandcomponents.com

9

Systems & Components is a specialized platform associated with the AGRITECHNICA trade fair, focusing on systems and components in the agricultural machinery sector. The website serves as an informational hub for event dates, news, and press releases, targeting industry professionals and exhibitors. The business is positioned as an important player within the agricultural manufacturing and trade fair industry in Germany, with a domain age consistent with its operational timeline since 2013. Technically, the website uses TYPO3 CMS and Bootstrap frameworks, with external resources loaded from trusted CDNs and Cloudflare DNS services. The site is moderately optimized for mobile and SEO, with a good user experience and professional design. Security posture is moderate, with no visible advanced security headers and DNSSEC not enabled, but no critical vulnerabilities detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy disclosures.

Z

Zalo Group

zalo.me

68

Zalo Group operates a leading Vietnamese communication platform offering Zalo PC software for Windows and Mac OS, along with business services such as Official Accounts and developer APIs. The website is professionally designed, targeting general users and business teams in Vietnam, providing fast file sharing and chat synchronization features. The technical infrastructure includes modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC, security headers, and explicit security policies. The domain registration uses privacy protection but aligns with the business profile and age. Overall, the site is trustworthy and compliant with basic privacy standards.

A

AlphaInvest Holdings Pte Ltd

alphainvestholdings.com

68

AlphaInvest Holdings Pte Ltd is a Singapore-based integrated investor communication company operating across Southeast Asia. It positions itself as the largest investor relations network in ASEAN, providing digital communication solutions, investor relations services, market data tools, and investor education. The company targets corporate clients, particularly public listed companies, and investors in the ASEAN region. The website reflects a professional and consistent brand image with clear service offerings and regional presence. Technically, the website uses modern front-end technologies including Bootstrap, jQuery, and Smart Slider 3 for interactive content. The site is mobile optimized and has good SEO practices. Hosting and domain registration are transparent and consistent with the business claims. However, DNSSEC is not enabled and no advanced security headers were detected, indicating room for security improvements. Security posture is moderate with HTTPS implied but lacking explicit security policies or incident response contacts. Cookie consent is implemented, but GDPR compliance indicators are minimal. No analytics or tracking scripts were detected, suggesting minimal user tracking. Contact information is comprehensive across multiple ASEAN offices, enhancing business credibility. Overall, the website is functional, professional, and trustworthy with moderate security and privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance trust and compliance.

V

Viet Thai Plastchem Joint Venture Company Limited

viet-thai.com

48

Viet Thai Plastchem Joint Venture Company Limited is a Vietnam-based manufacturer specializing in PVC compound production and distribution of raw materials and chemicals for the plastics industry. Established in 2015, the company targets industrial sectors such as electric cable, bottle, shoe sole, and plumbing industries. The website reflects a focused business model with clear product offerings and company information, positioning itself as a niche manufacturer within the Vietnamese market. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Swiper, and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Hosting appears local to Vietnam, consistent with the business location. However, no CMS or advanced analytics tools are detected, indicating a relatively simple technical infrastructure. From a security perspective, the site uses HTTPS and Google reCAPTCHA, but lacks DNSSEC and important security headers, which could improve its security posture. No incident response or security policy information is provided, and privacy compliance is basic with only a cookie notice and privacy page. The WHOIS data is consistent with the business claims, showing a legitimate domain registration with no privacy protection. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in security and privacy compliance. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing detailed security and incident response policies, and improving privacy compliance to align with GDPR standards.

G

Go-Pak Group

go-pakuk.com

62

Go-Pak Group is a medium-sized manufacturing and packaging solutions company, operating primarily in the foodservice, cash & carry, and retail sectors globally. As a British subsidiary of SCG Packaging (SCGP), it offers a broad range of disposable products, bespoke printing, and retail packaging solutions. The company has established a strong market position with consistent growth and multiple industry certifications, reflecting its commitment to quality and sustainability. The website is professionally designed, mobile-optimized, and provides comprehensive information about the company’s products, partnerships, and values. Technically, the site uses modern web technologies including Bootstrap, Plyr video player, and Swiffy Slider, hosted on a platform likely powered by Swift CMS and using GoDaddy nameservers. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

The Catapult Network

catapult.org.uk

58

The Catapult Network website represents a well-established UK government-backed innovation network focused on supporting businesses through cutting-edge R&D facilities and expertise. The network comprises multiple specialized centres aimed at accelerating technology commercialization and fostering collaboration between academia and industry. The website is professionally designed, mobile-optimized, and provides comprehensive content including leadership testimonials, publications, and interactive resources. Technically, the site leverages WordPress CMS with modern performance optimizations such as NitroPack and uses popular libraries like jQuery and Swiper.js. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site reflects a mature digital presence aligned with its mission and audience.

H

Hypertherm, Inc.

hypertherm.com

65

Hypertherm, Inc. is a leading manufacturer and provider of plasma cutting systems, software, and consumables, holding the position as the world's #1 requested plasma brand. The company targets metal fabricators and industrial cutting businesses globally, offering a comprehensive product portfolio including handheld and automated plasma cutters, CAD/CAM software, CNC controls, and technical support services. The website reflects a mature digital presence with multi-language support and extensive product and resource information. Technically, the site uses modern web technologies including Bootstrap, Google Tag Manager, and Microsoft Application Insights, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, secure login forms, and security headers, though public security policies and incident response information are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, though the absence of WHOIS data limits domain registration trust analysis.

W

Welbilt M.E. - FZE

welbilt.uk

71

Welbilt EMEA operates as a major player in the commercial kitchen equipment sector, representing multiple well-known brands such as Convotherm, Delfield, Frymaster, Garland, Lincoln, and Merrychef. The company targets hospitality and foodservice professionals across the EMEA region, offering sales, service, warranty registration, and educational resources. The website reflects a professional B2B business model with a strong brand presence and comprehensive resource offerings. Technically, the website employs modern web technologies including jQuery, Bootstrap, Usercentrics for consent management, Google Tag Manager, HubSpot, and Microsoft Application Insights for analytics and monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy compliance is well addressed through visible privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS and uses consent management but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a notable concern, slightly reducing trust in domain legitimacy despite the professional website. Overall, Welbilt EMEA's website is a well-constructed digital asset supporting its business operations with minor areas for security and transparency improvement. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to improve trust and compliance.

C

Curtiss-Wright Corporation

curtisswright.com

71

Curtiss-Wright Corporation is a well-established industrial and defense engineering company with a strong presence in the energy, commercial, and industrial sectors. The company offers specialized manufacturing and engineering solutions tailored to these markets, positioning itself as a reliable and efficient partner. The website reflects a professional and consistent brand image, targeting B2B clients in specialized sectors. Technically, the website is built on Drupal 10 with modern front-end technologies such as jQuery and Bootstrap, hosted behind Cloudflare DNS services. While the site is mobile-optimized and offers a good user experience, there is room for improvement in accessibility and performance optimization. Security posture is moderate; domain registration protections are strong, but the site lacks visible security headers and DNSSEC is not enabled. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy transparency.

C

Constellation Energy

constellation.com

66

Constellation Energy operates a professional and comprehensive website offering electricity and natural gas supply services to residential, commercial, and small business customers across multiple US states. The company positions itself as a trusted energy provider with a broad portfolio including renewable energy and EV plans. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as AngularJS, Adobe Experience Manager, and advanced analytics tools including Adobe Target and Google Tag Manager. Security measures like HTTPS, reCAPTCHA, and Content Security Policy are implemented, reflecting a strong security posture. However, the absence of WHOIS data and lack of visible privacy policy or terms of service links introduce trust and compliance concerns. Overall, the site is well-designed and functional but would benefit from enhanced transparency and compliance documentation.

S

S-Communication Services GmbH

sparkassen-shop.de

62

The Sparkassen-Shop website is an e-commerce platform operated by S-Communication Services GmbH, offering financial products and services primarily related to the Sparkasse banking group. The site targets Sparkasse customers and financial service users in Germany, providing products such as TAN generators, chip card readers, financial software, and industry reports. The business model focuses on retailing specialized financial hardware and software through an online storefront. The website demonstrates consistent branding aligned with Sparkasse and maintains a professional presentation with clear navigation and relevant content. Technically, the site employs modern web technologies including jQuery, Bootstrap, Vue.js, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is solid with enforced HTTPS, secure form validation, and cookie consent mechanisms, although explicit security headers are not detected and no incident response contacts are published. Privacy compliance is strong, with comprehensive privacy and cookie policies in German and GDPR-aligned consent management. Overall, the website is trustworthy and professionally managed, with no signs of blocking or malicious activity.

C

camindu GmbH

aktion-barrierefrei.org

10

Aktion Barrierefrei, operated by camindu GmbH, is a specialized provider of digital accessibility solutions focused on helping organizations comply with legal standards such as WCAG, BITV, and EN301549. Their offerings include assistive widgets, automated audits, AI-powered language simplification, and certification services, targeting public authorities, companies, agencies, and associations. The website demonstrates a high level of professionalism, with clear navigation, comprehensive content, and strong branding consistency. Technically, the site uses modern frameworks like Bootstrap and integrates Matomo for analytics, ensuring good performance and accessibility. Security posture is solid with HTTPS and CSRF protections, though DNSSEC is not enabled and some security headers could be improved. The WHOIS data shows a domain creation date in the future, which is unusual and should be verified, but overall the domain and website content are consistent and trustworthy. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

S

SCGJWD Logistics

scgjwd.com

71

SCGJWD Logistics is a leading logistics and supply chain company operating primarily in the ASEAN region, with a strong presence in Thailand. The company offers a comprehensive range of services including integrated logistics for B2B and B2C clients, international logistics, logistics infrastructure, and industry-specific solutions. Their website reflects a mature business with detailed service offerings, sustainability initiatives, and investor relations information, positioning them as a major player in the transportation sector. Technically, the website is built on modern frameworks such as Vue.js, incorporates performance optimizations like lazy loading, and uses trusted third-party services including OneTrust for privacy compliance and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and business transparency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

บ

บริษัท ปูนซิเมนต์ไทย จำกัด (มหาชน) (SCG)

scg.com

66

SCG (Siam Cement Group) is a leading Thai conglomerate operating primarily in manufacturing sectors such as cement, chemicals, packaging, and energy. The company emphasizes sustainable growth aligned with ESG principles and inclusive green growth, targeting both domestic and ASEAN markets. Their website reflects a mature digital presence with comprehensive business, sustainability, and investor relations content. Technically, the site uses modern frameworks like Next.js and React, with good mobile optimization and performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though no public vulnerability disclosure or incident response contacts are found. Overall, SCG's website demonstrates high professionalism and trustworthiness, supporting its enterprise status and market leadership.

L

Landkreis Aurich

landkreis-aurich.de

44

Landkreis Aurich operates as a local government authority in Germany, providing a wide range of public services including social welfare, health, environmental management, and administrative support to residents. The website serves as an official portal for information dissemination, citizen engagement, and access to government services. It targets local residents, businesses, and stakeholders within the district. The business model is that of a public sector entity focused on governance and community services. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap for responsive design and various JavaScript libraries such as jQuery, Swiper.js, and DataTables to enhance user experience. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and professional design. Cookie consent is implemented with user choice, reflecting GDPR compliance. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with the domain's purpose, supporting legitimacy. Social media presence and external partnerships further reinforce trust. Overall, the website is a well-maintained government portal with good content quality and technical implementation. Strategic improvements in security headers and transparency around security policies would enhance its security posture and trustworthiness.

I

IEL GmbH

iel-gmbh.de

47

IEL GmbH is a small German company specializing in environmental noise measurement and consulting services, including noise emission and immission assessments and wind energy consulting. The company holds accreditation from the DAkkS, indicating recognized competence in measurement services. Their website is professionally designed using Fork CMS and Bootstrap, providing clear navigation and relevant content targeted at businesses and organizations requiring noise and environmental consulting services. The technical infrastructure is moderate with standard web technologies and hosting through kasserver.com. Security posture is basic with no advanced security headers detected and no explicit incident response or security policies published. Privacy compliance is adequate with a privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy and professional, though improvements in security practices and transparency could enhance their digital maturity and risk posture.

Jāņa sēta is a leading cartography and geospatial solutions company based in Latvia, serving the Baltic region. The company specializes in producing traditional cartographic publications, providing high-quality geospatial data services, and delivering custom mapping and research projects. Their market position is strong within the Baltic states, targeting both business and individual customers interested in maps, education, tourism, transport, and research. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress and WooCommerce technologies to offer products and services online. Technically, the website is built on a modern WordPress platform with a comprehensive plugin ecosystem including Yoast SEO, WooCommerce, and cookie consent management tools. The site is mobile-optimized, moderately performant, and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved and explicit incident response information is absent. Overall, the website is trustworthy, professionally designed, and compliant with GDPR requirements. It maintains clear contact channels and social media presence, supporting business credibility. No critical vulnerabilities or suspicious patterns were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

N

NoMuda VisualFactory

nomuda.com

59

NoMuda VisualFactory is a UK-based company specializing in Lean Manufacturing Execution System software designed to digitize and optimize shop floor operations for manufacturing companies. Their Visual Factory product aims to improve manufacturing efficiency, ensure quality compliance, and provide flexibility in production processes. The company is recognized by Gartner as a Customers Choice and serves a range of industrial clients across sectors such as automotive, aerospace, and industrial manufacturing. The website demonstrates a professional digital presence with client logos, social media engagement, and comprehensive product information. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager with consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. However, the domain WHOIS data is unavailable, which slightly reduces trustworthiness but is mitigated by the company's visible market presence and third-party endorsements. Overall, the website and business present a credible and professional front with room for enhanced transparency in security and incident response policies.

ECM33.it is a specialized Italian e-learning platform providing accredited continuing medical education (ECM) courses primarily for healthcare professionals including doctors, pharmacists, dentists, psychologists, and veterinarians. The platform offers a comprehensive catalog of online and residential courses designed to deliver ECM credits required for professional development. The business operates under Imagine S.r.l., a medium-sized company based in Italy and coordinated by parent company Edra S.p.A., reflecting a stable market position in the healthcare education sector. Technically, the website is built on the Moodle LMS platform, enhanced with JavaScript libraries such as jQuery and YUI, and styled with Bootstrap. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. It integrates Google Tag Manager and Usercentrics for analytics and cookie consent management, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with a well-configured SSL setup and secure login forms. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved. Privacy policies and cookie consent mechanisms are comprehensive and clearly presented, with a named Data Protection Officer contact. Overall, ECM33.it presents a professional, trustworthy, and compliant platform for medical education with a solid technical foundation and good privacy practices. Strategic improvements in security policy transparency and technical security headers would enhance its security posture and trustworthiness further.

E

Edra S.p.A.

doctor33.it

43

Doctor33 is a professional Italian medical news portal operated by Edra S.p.A., targeting healthcare professionals with comprehensive news, educational courses, announcements, and special reports. The website demonstrates a mature digital infrastructure with modern technologies such as Bootstrap, Google Tag Manager, and Usercentrics for cookie consent. It integrates with Medikey for user authentication, indicating a trusted user base. The content is rich, well-structured, and professionally presented, supporting a high level of user engagement and trust. From a security perspective, the site enforces HTTPS and uses standard tracking and advertising technologies. However, it lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. No security.txt or vulnerability disclosure mechanisms are present, representing an area for improvement. The site does not show signs of WAF or content blocking, allowing full content accessibility. Overall, Doctor33 presents a strong business and technical profile with excellent content quality and good security posture but needs to address compliance gaps related to privacy and security policies to enhance trust and regulatory adherence.

The website www.crimemedicine.ro is an official platform managed by the Romanian National Agency for Medicines and Medical Devices (ANMDMR). It serves as a public resource to combat counterfeit medicines by collecting reports from citizens and healthcare professionals, analyzing these reports, and coordinating with authorities to remove counterfeit products from the market. The site features a comprehensive archive of important announcements and alerts related to counterfeit medicines, demonstrating a commitment to public health and safety. Technically, the website is built on WordPress using the Parallax-One theme, incorporating common web technologies such as jQuery, Bootstrap, and Font Awesome. The site is accessible over HTTPS with a cookie consent mechanism in place, indicating a basic level of privacy compliance. However, there is room for improvement in security headers and incident response transparency. From a security perspective, the site shows good practices like HTTPS enforcement and cookie consent but lacks visible security headers and a published vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected. The WHOIS data is privacy protected by ROTLD, which is typical for Romanian domains, and the domain appears legitimate and consistent with the official nature of the website. Overall, the site is trustworthy, professionally maintained, and serves an important public health function. Strategic recommendations include enhancing security headers, publishing an incident response contact, and maintaining regular updates to software components to ensure ongoing security and compliance.

D

Datapharm

datapharm.com

67

Datapharm is a UK-based company specializing in digital medicines information solutions, primarily through its flagship platform emc, which serves healthcare professionals, patients, and pharmaceutical companies. The company holds a strong market position as a trusted partner for over 320 Pharma companies in the UK, providing regulatory, compliance, market access, and intelligence services. The website reflects a professional and consistent brand image with a focus on healthcare and life sciences sectors. Technically, the site employs modern web technologies including jQuery, Bootstrap, Swiper.js, and integrates Google Analytics and OneTrust for compliance and analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks published security policies or incident response information. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

P

Publish0x

publish0x.com

66

Publish0x is a cryptocurrency-focused content platform that enables both authors and readers to earn cryptocurrency rewards. It occupies a niche market position by combining blogging with crypto incentives, targeting crypto enthusiasts and content creators. The platform offers a crypto-agnostic model, allowing users to earn various cryptocurrencies through publishing and engaging with quality content. Technically, the website employs modern web technologies including Bootstrap, Vue.js, jQuery, and integrates Google Analytics and reCAPTCHA for security and analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security posture is strong with HTTPS, CSRF tokens, and security headers, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS domain registration data is a concern for transparency but does not detract significantly from the site's legitimacy given its professional presentation and active social media presence. Overall, Publish0x presents a credible and functional platform with room for improvement in transparency and security disclosures.

M

Media Network s.r.o.

medianetwork.cz

56

Media Network s.r.o. is a Czech-based publishing and educational agency specializing in delivering critical information on legislative and regulatory developments impacting public administration, local governments, and the business sector. The company operates several influential news portals including Ekonomický deník, Zdravotnický deník, and Česká justice, targeting professionals with decision-making authority in economics, law, and healthcare. Their business model includes content publishing and organizing conferences and educational events, positioning them as a key media player in their niche market. Technically, the website is built on WordPress with modern frameworks like Beaver Builder and employs common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site uses HTTPS correctly but lacks some security headers and formal security policies. Tracking tools like Google Tag Manager and Smartlook are used for analytics and session recording, with moderate user tracking levels. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

O

Občina Šmarješke Toplice

smarjeske-toplice.si

54

Občina Šmarješke Toplice operates as the official municipal government portal for the Šmarješke Toplice municipality in Slovenia. The website provides a comprehensive range of e-government services including electronic applications, online payments, local news, event calendars, public tenders, and citizen notifications. It targets local residents and stakeholders, facilitating digital interaction with municipal authorities. The business model is focused on public service delivery and community engagement, positioning itself as a trusted local government resource. The domain has been active since 2007, reinforcing its established presence in the region. Technically, the website employs a modern yet straightforward technology stack including jQuery, Bootstrap, and TinyMCE, running on a custom CMS tailored for Slovenian municipalities. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting is provided by HITROST.COM, a known Slovenian hosting provider. Structured data is implemented for organization details, enhancing search engine understanding. From a security perspective, the site enforces HTTPS and includes user alerts for legacy browsers, indicating some attention to user security. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious content were detected in the analysis. Privacy compliance is supported by a comprehensive GDPR policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is a professional, trustworthy municipal portal with solid content and technical foundations. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance. The risk level is low, with no critical issues identified, making it a reliable digital presence for the municipality.

B

Bijwerkingencentrum Lareb

lareb.nl

75

Bijwerkingencentrum Lareb is the Dutch national pharmacovigilance center dedicated to collecting and disseminating information on adverse reactions to medicines, vaccines, and health products. The website serves healthcare professionals, patients, and the general public, providing reporting mechanisms, research insights, and educational content focused on drug safety and pregnancy-related medication use. The organization operates as a non-profit entity with a strong national presence and trusted reputation in healthcare safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Semantic UI for responsive design and user experience. It integrates Piwik PRO analytics for user tracking and captcha.at for bot protection, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses CAPTCHA to mitigate automated abuse. However, it lacks explicit security policy documentation and incident response contact details, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a low-risk profile with high trustworthiness and professional credibility. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

Š

Štátny ústav pre kontrolu liečiv

sukl.sk

46

ŠÚKL (Štátny ústav pre kontrolu liečiv) is the Slovak State Institute for Drug Control, a government regulatory agency responsible for the oversight of pharmaceuticals, medical devices, clinical trials, and drug safety within Slovakia. The website serves as a comprehensive portal for healthcare professionals, pharmaceutical companies, and the public, offering databases, regulatory information, inspection details, and safety alerts. It is positioned as the authoritative national body for drug regulation in Slovakia, providing essential public services and regulatory functions.

C

Channel 4 and GetMyFirstJob

4skillsworkexperience.com

60

4Skills Work Experience is a UK-based educational platform offering a free virtual programme designed to introduce young individuals and career advisors to the creative TV and broadcasting industry. The programme is run in partnership with Channel 4 and GetMyFirstJob, providing real-world challenges and insights to help participants explore creative career pathways. The website is professionally designed with clear navigation and relevant content targeting individuals aged 14 and above, particularly those new to the industry. Technically, the website employs modern web technologies including Blazor Server, Bootstrap, and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is hosted with Cloudflare DNS, ensuring reliable domain resolution. Performance and mobile optimization are good, though accessibility features are basic. SEO is present but could be enhanced. From a security perspective, the site uses HTTPS and bot protection but lacks DNSSEC and visible security headers, which are recommended for improved security posture. No cookie consent mechanism is implemented, which may impact privacy compliance. WHOIS data is transparent and consistent with the business claims, indicating a trustworthy domain. Overall, the website presents a credible and professional educational service with moderate technical maturity and a good security baseline. Enhancements in privacy compliance and security headers would further strengthen its posture.

N

Netcare Limited

netcare.co.za

63

Netcare Limited is a leading private healthcare provider in South Africa, operating a comprehensive ecosystem of healthcare services including hospitals, specialist doctors, emergency medical services, and digital healthcare platforms. The company serves a broad audience seeking private healthcare solutions and emphasizes personalized care and innovation. The website reflects a mature digital presence with a mobile app, online appointment booking, and patient management services. Technically, the site is built on ASP.NET with modern JavaScript frameworks like Vue.js and uses Cloudflare for analytics and CDN services. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some security headers and explicit security policies. WHOIS data is missing, which is unusual for a large enterprise and reduces domain trustworthiness. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency on privacy and security policies.

D

Desitin Pharma s.r.o.

desitin.sk

57

Desitin Pharma s.r.o. is a Slovak subsidiary of the German pharmaceutical company Desitin Arzneimittel GmbH, established in 1993. The company specializes in pharmaceutical products, nutritional supplements, and provides information for patients and healthcare professionals. Their market position is that of a regional player with strong ties to the parent company and sister sites across Europe. The website targets both patients and medical professionals, offering product information and support resources. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance. The site uses HTTPS and integrates Google Analytics and Google Maps APIs, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly confirmed. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policy and incident response contact details.

Medochemie Ltd is a well-established pharmaceutical company founded in 1998, operating globally with 15 manufacturing sites and sales in 122 countries. The company focuses on providing quality drug treatments at affordable prices and offers services including manufacturing, marketing authorizations, contract manufacturing, and licensing. The website is built on Kentico CMS, uses modern JavaScript libraries like jQuery, and integrates Google Analytics and OneTrust for privacy compliance. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. The site is professional, mobile-optimized, and GDPR compliant with a comprehensive privacy policy and cookie consent banner. No critical security issues or blocking mechanisms were detected, indicating a mature and trustworthy online presence.

E

eMags

emags.com

69

eMags operates as a subscription-based digital magazine platform providing unlimited access to a wide range of trusted magazine brands. The service targets magazine readers who prefer digital consumption with features such as offline reading and voice narration, enhancing accessibility and convenience. The company positions itself as a reliable and user-friendly media platform with a consistent brand presence and positive user testimonials. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Swiper.js, and Font Awesome, hosted likely on Amazon AWS infrastructure. The site is mobile-optimized with good SEO and accessibility practices, though some security headers are not evident. Google Tag Manager is used for analytics and marketing tracking, indicating moderate user tracking. From a security standpoint, the site enforces HTTPS and domain registration protections but lacks DNSSEC and visible security headers. No explicit security policies or incident response contacts are published, which could be improved. The domain is long-established and consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital media service with moderate technical sophistication and a good security baseline. Strategic improvements in security headers, cookie consent mechanisms, and incident response transparency would enhance compliance and user trust.

C

Color Pigments Manufacturers Association, Inc.

pigments.org

52

The Color Pigments Manufacturers Association, Inc. (CPMA) is a well-established industry association serving the color pigments manufacturing sector in North America since 1925. The organization provides advocacy, membership benefits, committee collaboration, and industry resources to its members. The website reflects a professional and consistent brand presence targeting industry professionals and stakeholders. It offers event information, news updates, and educational resources relevant to the pigments industry. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, leveraging plugins such as MetaSlider and Contact Form 7. It employs HTTPS with good SSL configuration and integrates Google Analytics for user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data limits full trust verification, but the website's content and contact information support its legitimacy. Overall, the site presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen its security posture and trustworthiness.

E

Eurolab

eurolab.co.za

50

Eurolab is a well-established South African company specializing in generic oncology medicines and innovative cancer treatment technologies. Positioned as the largest generic oncology company in South Africa, Eurolab serves oncologists and cancer patients by providing affordable, quality treatment options and advanced technologies such as Gamma Knife radiosurgery. The company demonstrates a strong market presence with a clear focus on innovation and strategic partnerships. Technically, the website is built on WordPress with WooCommerce and WPBakery, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is strong with accessible policies and GDPR-aligned consent. Overall, the website reflects a credible and professional healthcare business with consistent branding and trust indicators.

G

Generics and Biosimilars Initiative

gabionline.net

56

The Generics and Biosimilars Initiative (GaBI) operates a well-established online platform providing comprehensive news, research, and policy information focused on generic and biosimilar medicines. Founded in 2008, the website serves healthcare professionals, pharmaceutical industry stakeholders, and policy makers with up-to-date editorial content and specialized resources. The platform maintains a strong market position as a niche media provider in the healthcare sector, emphasizing cost-effective treatment options. Technically, the website leverages a mature technology stack including IBEXA CMS, Bootstrap, YUI, and jQuery, supported by Google Fonts and Font Awesome for design consistency. Hosting is provided by Hosting Concepts B.V., with domain registration dating back to 2008, indicating a stable digital presence. The site is mobile-optimized and demonstrates good SEO practices, although some modernization opportunities exist, such as updating jQuery and enabling DNSSEC. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. Cookie consent is implemented, and privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or suspicious content were detected, and the site maintains a high trustworthiness rating. Overall, GaBI presents a professional, secure, and privacy-conscious web presence suitable for its target audience. Strategic improvements in security headers, DNSSEC, and incident response transparency could further enhance its security posture and trustworthiness.

G

GetMyFirstJob

providersonline.co.uk

57

GetMyFirstJob operates a specialized apprenticeship recruitment platform targeting training providers, colleges, and businesses in the UK. The platform offers a comprehensive recruitment management system with features such as candidate shortlisting, telephone interviewing, screening, reporting, CV building, and CRM capabilities. The website is built on the DNN CMS platform with AngularJS and Bootstrap, indicating a moderately modern technical infrastructure. While the site uses HTTPS and includes anti-forgery tokens in forms, it lacks several security headers and privacy compliance elements such as privacy and cookie policies. Tracking technologies like Google Analytics and Facebook SDK are present, but no explicit cookie consent mechanism is detected. Overall, the website presents professional content relevant to its audience but could improve in privacy compliance and security best practices.

S

SURF B.V.

edu.nl

60

edu.nl is a specialized URL shortening service tailored for the Dutch education and research sector, operated by SURF B.V. The service emphasizes privacy and security by restricting link creation to verified users authenticated via SURFconext. The website content is professionally presented, with clear messaging about privacy and educational focus, and is available in multiple languages. The technical infrastructure leverages modern frontend technologies such as Bootstrap and jQuery, ensuring a responsive and user-friendly experience. No tracking or analytics scripts are present, aligning with the privacy-first approach. Security posture is solid with DNSSEC enabled and controlled access, though visible security headers and explicit security policies are absent. The domain registration is consistent with the business purpose and ownership, indicating high legitimacy.

K

Kaplan

mykaplan.co.uk

63

Kaplan operates an educational platform accessible via the MyKaplan login portal, providing users with account management and access to learning resources. The website is professionally designed with consistent branding and targets students and learners primarily in the United Kingdom. The platform leverages modern web technologies such as Bootstrap and custom fonts to deliver a responsive and user-friendly experience. Privacy and cookie policies are clearly linked, indicating attention to regulatory compliance. However, no direct contact information or detailed security policies are present on the login page. Technically, the site uses standard web technologies and frameworks, with a moderate performance profile and good mobile optimization. Security practices include HTTPS usage and form anti-forgery tokens, but there is no evidence of advanced security headers or explicit incident response information. The WHOIS lookup for the subdomain identity.mykaplan.co.uk failed due to it being a subdomain rather than a registered domain, which is consistent with standard domain management practices. Overall, the security posture is adequate but could be improved by implementing additional HTTP security headers and publishing clear security and incident response policies. The site content is safe for general audiences, with no adult or questionable content detected. The absence of contact details and vulnerability disclosure mechanisms suggests room for improvement in transparency and user support. The risk assessment indicates a generally trustworthy and professional educational service platform with moderate technical maturity and compliance. Strategic recommendations include enhancing security headers, improving accessibility, and publishing comprehensive security policies to strengthen user trust and regulatory compliance.

MARKETview Education Partners operates a specialized data platform tailored for higher education leaders, delivering real-time, aggregated data insights to support enrollment, financial aid, and retention strategies. The company positions itself as a niche leader by combining proprietary analytics with comprehensive student and household data, offering unique market intelligence and expert consulting services. The website reflects a professional and consistent brand image targeting higher education institutions in the United States, with a medium-sized organizational footprint founded in 2021. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools including HubSpot forms, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Hosting and DNS services are managed via Cloudflare, ensuring robust performance and security. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices evident. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms. However, DNSSEC is not enabled and some security headers are not explicitly detected, indicating room for improvement. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Overall, MARKETview's digital presence is trustworthy and professional, with a solid security posture and compliance framework. The risk level is low, but recommendations include enabling DNSSEC, enhancing security headers, and publishing a formal security policy and incident response contacts to further strengthen trust and compliance.

The Language Technology and Data Analysis Laboratory (LADAL) is an academic and research support platform established in 2019 by the School of Languages and Cultures at the University of Queensland. It provides free, open-source resources including tutorials, interactive notebooks, and events focused on language technology, data analysis, and computational humanities. LADAL is well-positioned within the Australian research ecosystem, partnering with initiatives such as the Language Data Commons of Australia and the Australian Text Analytics Platform, supported by national research infrastructure funding. The platform targets researchers and learners in the humanities and social sciences, ranging from novices to experts, emphasizing accessibility and best practices in data handling.

D

DataCite

datacite.org

54

DataCite is a well-established global non-profit organization founded in 2009, focused on connecting research outputs and advancing knowledge through the provision of DOI registration and metadata services. It serves a broad audience of research organizations, academic institutions, and service providers, positioning itself as a leader in the open science infrastructure space. The website reflects a mature digital presence with comprehensive content, clear navigation, and active community engagement. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance, mobile optimization, and SEO compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in DNSSEC and security headers. The domain is privacy protected but consistent with the organization's profile and history, supporting legitimacy. Overall, the site is professional, trustworthy, and aligned with its mission to support open research.

T

Taro Pharmaceutical Industries Ltd.

taro.ca

53

Taro Pharmaceutical Industries Ltd. is a Canadian pharmaceutical company specializing in the development, manufacturing, and marketing of affordable prescription and over-the-counter medications. It operates as a subsidiary of Sun Pharma, a global healthcare company. The website serves healthcare professionals and consumers with product information, resources, and customer service. The company has a strong market position in the generic pharmaceutical sector in Canada, supported by its parent company’s global presence. Technically, the website is built on Drupal 7 with a technology stack including jQuery and Bootstrap. It is mobile optimized and provides a good user experience with clear navigation and professional design. Google Analytics and Google Tag Manager are used for analytics and tracking. However, some technical debt is evident, such as the use of an outdated jQuery version and lack of DNSSEC, which could pose security risks. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. No incident response or security policies are publicly documented. Privacy compliance is basic, with a privacy policy and terms of use present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a contact form without direct emails or phone numbers visible. Overall, the website is legitimate, professional, and trustworthy but could improve its security posture and privacy compliance to better protect users and align with modern standards.

U

University of Florida

ufl.edu

62

The University of Florida website represents a major public land-grant research university in the United States, offering educational and research services. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it leverages WordPress CMS with modern frameworks and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, though some security headers and formal policies like privacy and cookie notices are missing. The absence of WHOIS data is typical for .edu domains and does not detract from the site's legitimacy. Overall, the site is trustworthy and well-maintained, serving a broad audience including students, faculty, and the public.

E

Electronic Textual Cultures Lab

dhsi.org

55

The Digital Humanities Summer Institute (DHSI) is an established educational organization focused on providing courses, workshops, and events in the field of digital humanities. Founded in 2007 and operated by the Electronic Textual Cultures Lab in Canada, DHSI targets academics, researchers, and students interested in digital culture and humanities research. The website reflects a professional educational institute with a consistent brand and clear navigation. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various UI libraries. Hosting appears to be managed through secure.openum.ca, with GoDaddy as the domain registrar. The site is mobile optimized and uses HTTPS, though some security enhancements such as DNSSEC and security headers could be improved. Performance is moderate with good mobile responsiveness. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR, linking to comprehensive privacy and terms of service pages hosted by Université de Montréal. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are publicly available. DNSSEC is not enabled, and security headers are not detected, suggesting room for improvement. Overall, the website is trustworthy and safe, with no adult or questionable content. The domain registration data is consistent with the business identity and history, supporting legitimacy. Strategic recommendations include enhancing DNS security, adding security headers, and publishing security policies to improve transparency and trust.

V

Vergic AB

vergic.com

60

Vergic AB operates the Vergic Engage platform, a digital-first customer engagement solution designed to improve customer experience and revenue through personalized digital interactions. The platform offers a suite of services including live chat, chatbots, video, co-browsing, messaging channels, and digital voice, targeting businesses and public organizations aiming to enhance their digital customer service and sales capabilities. The company is positioned as a medium-sized technology firm based in Sweden and is a subsidiary of Puzzel, which acquired Vergic. The website content is professional and well-structured, reflecting a mature digital presence with a focus on B2B SaaS offerings. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Bootstrap, and various marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight, Hotjar, and Leadfeeder. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, supporting the company's commitment to data protection. Security-wise, the site shows good practices but lacks explicit security and incident response policies publicly available. The WHOIS data for the domain is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. However, the business legitimacy is supported by visible client logos, press releases, and social media presence. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, with recommendations to enhance security headers and publish formal security policies. Strategically, Vergic should focus on improving domain registration transparency, enhancing security policy visibility, and maintaining up-to-date technical and security standards to strengthen trust and compliance in the competitive digital engagement market.