Security Directory

S

SECCIÓN SINDICAL UGT BBVA

fesmcugt.online

49

SECCIÓN SINDICAL UGT BBVA is a union section representing employees of BBVA under the umbrella of the Unión General de Trabajadores (UGT) in Spain. The website serves as an information portal providing updates on labor rights, collective bargaining, union activities, and member services. It targets BBVA employees and union members, offering resources such as circulars, negotiation updates, and affiliation information. The business model is focused on union representation and member engagement within the finance sector. The website is medium-sized, founded in 2018, and maintains consistent branding aligned with UGT standards. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including GDPR Cookie Compliance, Contact Form 7, and The Events Calendar. It employs modern web technologies such as jQuery and Google Tag Manager for analytics. Hosting is provided by Dinahosting SL, a Spanish registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized transfers or deletions. However, it lacks advanced security headers and DNSSEC is not enabled. The site includes a GDPR-compliant cookie consent mechanism and privacy policy but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its niche audience with relevant content and functional features. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

M

Mateos Legal

mateos.legal

55

Mateos Legal is a professional legal and economic advisory firm based in Barcelona, Spain, founded in 2001. The firm offers a broad range of legal services including fiscal, civil, commercial, corporate, and family law, supported by a multidisciplinary team of lawyers and economists. The website reflects a mature and professional business with a clear market position serving businesses and individuals seeking comprehensive legal and economic consulting. Technically, the website is built on WordPress using modern plugins such as Elementor and JetEngine, with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. WHOIS data is unavailable due to unsupported TLD or privacy protection, but the website content and structure indicate legitimacy. Overall, the site is well-designed, trustworthy, and compliant with GDPR regulations.

C

Children's of Alabama

childrensalcareers.org

69

Children's of Alabama operates a dedicated career website focused on recruiting healthcare professionals for its pediatric hospital in Birmingham, Alabama. The site highlights the organization's long-standing commitment to pediatric care, emphasizing a compassionate culture and comprehensive employee benefits. The platform targets healthcare job seekers and professionals interested in pediatric healthcare careers, positioning itself as a regional leader with a legacy of over a century. Technically, the website leverages the TalentBrew career site platform, integrating modern JavaScript libraries such as jQuery, Slick Carousel, and Fancybox for enhanced user experience. It employs multiple third-party services for analytics, marketing automation, and accessibility improvements. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are not explicitly present. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, reflecting compliance with privacy regulations such as GDPR. However, WHOIS data is unavailable due to privacy protection or malformed queries, limiting domain transparency. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security or incident response policy and security.txt file suggests areas for improvement. Overall, the website presents a professional, trustworthy, and secure platform for healthcare recruitment. Strategic enhancements in security header implementation and transparency could further strengthen its security posture and trustworthiness.

C

Children's of Alabama

childrensalblog.org

57

Children's of Alabama operates a dedicated blog platform providing educational and awareness content focused on pediatric health and safety. The site serves as a trusted resource for parents, caregivers, and healthcare professionals in the Alabama region, leveraging its affiliation with Children's of Alabama and the University of Alabama at Birmingham. The content is professionally presented, relevant, and consistent with the organization's mission to support children's health. Technically, the website is built on WordPress and hosted on WordPress.com, utilizing common web technologies such as jQuery and Jetpack for analytics and social integration. While the site benefits from HTTPS and domain registration protections, it lacks advanced DNS security features and security headers, representing areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website demonstrates a solid business credibility and content quality but requires enhancements in privacy and security posture to strengthen trust and compliance.

T

TTRacing Australia

ttracing.com.au

66

TTRacing Australia operates an e-commerce platform specializing in gaming chairs, ergonomic office chairs, and smart standing desks, targeting gamers and professionals seeking ergonomic comfort. The company leverages licensed entertainment brands such as Marvel and Star Wars to enhance product appeal. Technically, the website is built on Shopify, utilizing modern JavaScript libraries and third-party marketing and analytics tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and secure checkout, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site presents a professional and trustworthy e-commerce presence with room for enhanced compliance and security.

J

JBL CAR AUDIO

jbl-caraudio.com.au

52

JBL Car Audio Australia operates as a specialized e-commerce retailer offering a range of JBL branded car audio products including speakers, subwoofers, and amplifiers. The website targets vehicle owners and audio enthusiasts within Australia, positioning itself as a trusted source for high-quality car audio equipment. The site features professional branding consistent with JBL's global identity and integrates social media channels linked to official JBL accounts, enhancing credibility. Technically, the website is built on the Magento platform, utilizing common web technologies such as jQuery, Owl Carousel, and Revolution Slider. It employs HTTPS for secure communications and integrates Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile-optimized with a good user experience and clear navigation, although accessibility features are basic. From a security perspective, the site enforces HTTPS but lacks visible security headers which could improve protection against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a privacy policy and terms of service are present, there is no cookie consent mechanism, which may impact GDPR compliance. Contact information is limited to a support ticket system without direct emails or phone numbers. Overall, the website presents a moderate risk profile with good business credibility but opportunities exist to enhance security posture and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency are recommended to strengthen trust and regulatory adherence.

D

DataGrail, Inc.

datagrail.io

72

DataGrail, Inc. operates a sophisticated AI-powered data privacy management platform designed to help businesses comply with GDPR, CCPA, and other data privacy regulations. Positioned as an enterprise-grade SaaS provider, DataGrail offers key services including live data mapping, consent management, request handling, privacy assessments, and risk management. The platform integrates with a broad ecosystem of partners such as Salesforce, Okta, Shopify, Zendesk, and Webflow, enhancing its market reach and functionality. Technically, the website is built on WordPress with modern technologies including jQuery, Google Tag Manager, Matomo analytics, and HubSpot forms. It demonstrates excellent performance, mobile optimization, and SEO practices. Security measures include HTTPS enforcement and reCAPTCHA on forms, though explicit security headers and policies could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the site lacks explicit incident response and vulnerability disclosure information, which could be enhanced to build further trust. Overall, the website and business present a high level of professionalism and trustworthiness. The lack of WHOIS data is consistent with privacy protection practices common in this industry. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen security and compliance posture.

D

Domeinenbank

domeinenbank.nl

60

Domeinenbank is a specialized domain name brokerage and advisory service provider based in the Netherlands, operating since 1999. The company offers services including buying, renting, selling, and appraising domain names, targeting individuals and businesses seeking premium domain names. The website reflects a mature digital presence built on WordPress with Elementor and SEO optimizations, indicating a solid technical infrastructure. Security posture is good with HTTPS and DNSSEC enabled, though some security headers and incident response policies are absent. Privacy policies are present and GDPR compliant, but cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

O

Oil Price Information Service, LLC.

opisnet.com

62

OPIS, a Dow Jones company, is a leading provider of energy and chemical commodity pricing, news, and analytics. The company offers benchmark pricing data, market insights, and software solutions to a broad audience including refiners, wholesalers, retailers, traders, and financial institutions. Their market position is strong, serving as a definitive price benchmark in the energy sector since 1980. The website reflects a mature digital presence with professional design, comprehensive content, and extensive use of marketing and analytics tools. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is generally good with HTTPS and best practices in place, but could benefit from enhanced security headers and explicit incident response information. Overall, the website is trustworthy and professional but should address compliance and domain legitimacy concerns to strengthen its security and privacy posture.

S

Sightline Media Group

sightlinemediagroup.com

57

Sightline Media Group is a specialized media organization focused on military, defense, and federal technology news, operating multiple well-known brands. The company offers a broad portfolio of multimedia products and advertising solutions targeting defense and public sector audiences. The website is built on WordPress with modern plugins and hosted on WP Engine, reflecting a moderate level of technical maturity. The site is professionally designed with good content quality and consistent branding. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are publicly listed, relying on contact forms. Overall, the website is trustworthy and functional but could improve privacy compliance and security practices.

T

The Pitch

thepitch.no

57

The Pitch is a small, established marketing and printing agency based in Fredrikstad, Norway, founded in 2015. The company offers a range of services including printing, advertising, design, and website development, targeting local businesses and individuals seeking comprehensive marketing solutions. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though additional security headers and policies could enhance protection. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service pages. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious patterns detected.

C

Children's of Alabama

childrensal.org

67

Children's of Alabama is a well-established pediatric healthcare provider based in Birmingham, Alabama, recognized nationally for excellence in multiple specialties. The organization offers a comprehensive range of pediatric services including emergency care, outpatient centers, behavioral health, and patient support through a secure online portal. Their market position is strong, supported by numerous awards and recognitions, reflecting a trusted brand in pediatric healthcare. The website targets parents, patients, healthcare professionals, and donors, providing extensive resources and easy access to services. Technically, the website is built on Drupal CMS with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Crazy Egg. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. The use of secure patient portals and cookie consent mechanisms indicates attention to user privacy and data protection, although explicit security policies and incident response information are not publicly disclosed. From a security perspective, the site enforces HTTPS and employs standard best practices, but could improve by publishing explicit security headers and vulnerability disclosure information. The WHOIS data is unavailable due to privacy protection, which is common and justified for healthcare entities. Overall, the domain and website appear legitimate and trustworthy with a high level of professionalism and compliance. The overall risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response, and ensuring all third-party scripts remain secure and up to date. The website serves as a reliable and professional digital presence for Children's of Alabama, supporting its mission to provide exceptional pediatric care.

B

Barcelona Activa

barcelonactiva.cat

68

Barcelona Activa is the official local economic development agency of Barcelona, providing services to citizens, entrepreneurs, and businesses to promote employment, entrepreneurship, business growth, and training. The website is professionally designed, multilingual, and integrates well with the Barcelona city government branding. Technically, it uses a modern CMS (Liferay) and includes various JavaScript libraries and analytics tools with proper consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. WHOIS data is not publicly available due to the .cat domain registry policies, but the website content and branding strongly indicate legitimacy. Overall, the site is trustworthy, well-maintained, and serves as a comprehensive resource for economic development in Barcelona.

3

3Cat

3cat.cat

43

3Cat is a digital media platform focused on delivering quality Catalan language content including exclusive digital premieres, original programs, and live streams from TV3, Catalunya Ràdio, and SX3. It serves a regional audience with a strong cultural focus and operates under the umbrella of CCMA, a known Catalan media corporation. The platform uses a modern technology stack including React (Next.js), Bitmovin Player, and various analytics and advertising tools. Security posture is strong with HTTPS and security headers properly configured, and a consent management platform is implemented to comply with cookie regulations. However, the absence of publicly available WHOIS data and lack of explicit privacy policy or contact information pages reduce trust from a compliance and transparency perspective. Overall, the site is professional, well-branded, and technically sound but could improve privacy disclosures and domain registration transparency.

T

Talentech

hr-manager.dk

63

Talentech is a well-established Danish technology company specializing in providing a comprehensive SaaS HR platform tailored for the Nordic market. With over 20 years of experience and a user base exceeding 600,000, Talentech positions itself as a leading provider of recruitment, onboarding, and HR management solutions enhanced by AI capabilities. The website reflects a mature digital presence with multi-language support, customer testimonials, and a clear focus on GDPR compliance and data-driven HR processes. Technically, the site is built on WordPress with modern SEO and performance optimizations, leveraging tools like Google Tag Manager and Google Optimize for analytics and marketing. Security posture is solid with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Overall, the company demonstrates strong business credibility and digital maturity.

W

weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice

weimar.de

52

The website www.weimar.de serves as the official digital portal for the city of Weimar, Germany, managed by weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice. It provides extensive information on cultural events, tourism, city administration, and economic activities, targeting residents, tourists, and local businesses. The site is well-positioned as a trusted source for city-related services and cultural promotion, leveraging a public service business model focused on tourism and community engagement. Technically, the site is built on TYPO3 CMS with a modern frontend stack including jQuery and Bootstrap, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks some advanced security headers and explicit incident response policies. Overall, the site demonstrates a high level of professionalism, compliance with GDPR, and effective use of analytics while maintaining user privacy. Strategic improvements could focus on enhancing security headers, publishing security policies, and providing clearer direct contact information to further strengthen trust and compliance.

M

MUSIKFONDS E.V.

musikfonds.de

50

Musikfonds e.V. is a German non-profit organization dedicated to supporting contemporary music projects through funding programs, events, and networking. The website reflects a well-established cultural institution with governmental backing, targeting musicians, composers, and cultural organizations within Germany. The business model focuses on grant-making and fostering the contemporary music scene. Technically, the site is built on Drupal 10, leveraging modern libraries such as jQuery and UIkit, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, with clear contact information and social media presence. No adult or questionable content is present, making it safe for general audiences.

H

Hochschule für Musik FRANZ LISZT Weimar

hfm-weimar.de

56

The Hochschule für Musik FRANZ LISZT Weimar is a specialized higher education institution focused on music education, research, and cultural events. It serves students, faculty, researchers, and the broader community interested in music and related disciplines. The institution offers a variety of academic programs, research projects, and cultural activities, positioning itself as a reputable music university in Germany with a tradition dating back to 1872. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and Matomo for analytics. The site demonstrates good mobile optimization and a structured navigation system, providing a positive user experience. Hosting appears to be managed by university-related infrastructure, ensuring alignment with the institution's academic nature. From a security perspective, the website employs HTTPS and asynchronous script loading, contributing to a secure and performant environment. However, explicit security headers are not detected, and no visible privacy or cookie policies are present in the analyzed content, indicating areas for improvement in compliance and security best practices. Overall, the website is trustworthy and professional, with a strong business credibility score. The absence of explicit privacy and cookie policies and contact information slightly lowers the privacy compliance and content quality scores. There are no indications of adult or unsafe content, and no WAF or blocking mechanisms interfere with content accessibility.

S

Sparkassen-Kulturstiftung Hessen-Thüringen

sparkassen-kulturstiftung.de

63

The Sparkassen-Kulturstiftung Hessen-Thüringen is a well-established non-profit foundation focused on promoting arts, culture, and education in the German regions of Hessen and Thüringen. It operates under the umbrella of the Sparkassen-Finanzgruppe and has a strong market position as a major cultural funder. The website reflects a professional and consistent brand image with comprehensive information about its projects, goals, and engagement activities. Technically, the site uses Concrete CMS, modern JavaScript libraries, and integrates accessibility and cookie consent tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is moderate due to the absence of an explicit privacy policy page, despite the presence of cookie consent mechanisms. Overall, the site is trustworthy, well-designed, and serves its target audience effectively.

B

ByBi

bybi.no

51

ByBi is a Norwegian environmental non-profit organization focused on urban beekeeping and biodiversity in Oslo. The organization operates with approximately 300 members and offers services including membership, courses, honey sales, and corporate partnerships. Their website reflects a well-structured and professionally maintained digital presence, leveraging WordPress with modern plugins and SEO tools. The site is optimized for mobile and includes clear navigation and relevant content for their target audience of urban beekeepers, environmentalists, and local stakeholders. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the website demonstrates a trustworthy and credible presence aligned with its mission and audience.

Jazzmeile Thüringen is a regional cultural festival organization dedicated to promoting jazz music throughout the German state of Thüringen. It operates under the patronage of the Thüringer Staatskanzlei and organizes events year-round, including seasonal jazz festivals and workshops. The website serves as an information portal for upcoming events and partners with various cultural and governmental institutions. Technically, the site is built on the Contao CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox. The site is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected, and no incident response or security policies are publicly available. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. WHOIS data is incomplete, limiting trust from a domain registration perspective. Overall, the site is trustworthy and professional but could improve security and privacy transparency.

H

Høyskolen for yrkesfag

hfy.no

68

Høyskolen for yrkesfag is a Norwegian educational institution specializing in vocational training, established around 2020. The website presents a professional and consistent brand image with a focus on providing educational services to students and professionals interested in vocational studies. The technical infrastructure leverages modern web technologies including Bootstrap 5, jQuery, and Google services such as Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. Security posture is solid with HTTPS enforced and integration of security best practices like reCAPTCHA, although some improvements such as explicit security headers and vulnerability disclosure policies are recommended. Overall, the website is trustworthy, safe, and well-positioned within its niche educational sector.

G

Goetheanum TV

goetheanum.tv

67

Goetheanum TV is a specialized media platform offering video content centered on anthroposophy, targeting a general audience interested in cultural and educational material. The platform operates on a subscription and video-on-demand business model, leveraging a modern technical infrastructure including Uscreen OTT platform, Tailwind CSS, and various JavaScript libraries. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing accessibility and user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. Overall, the platform presents a trustworthy and professional digital presence with moderate tracking and advertising practices.

M

Minel Teledata Øst Lillehammer AS

teledataost.no

39

Minel Teledata Øst Lillehammer AS is a small regional business based in Norway specializing in providing technical solutions for enterprises, including security and camera surveillance, fiber and cabling solutions, meeting room and videoconferencing setups, and telecom and IT services. The company operates under the parent company Minel and targets business customers requiring telecom and IT infrastructure support. The website reflects a professional and consistent brand presence with clear contact information and service offerings. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tracking tools such as HubSpot and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and business information appear legitimate. Overall, the site presents a trustworthy and professional business presence with room for improvement in security and privacy practices.

S

Surfers Against Sewage

sas.org.uk

64

Surfers Against Sewage is a UK-based grassroots environmental charity dedicated to protecting oceans, rivers, and beaches from pollution, particularly sewage and plastic pollution. The organization operates through community engagement, campaigning, data collection, and education, positioning itself as a leading voice in ocean activism within the UK. Their website reflects a mature digital presence with comprehensive content, active campaigns, and multiple avenues for public involvement including membership, fundraising, and volunteering. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Popup Maker, integrating analytics tools like Google Analytics and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. Security measures include HTTPS enforcement and CAPTCHA on forms, though explicit security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data for the domain is unavailable due to a domain naming rules error, which does not impact the legitimacy given the charity registration and consistent branding. Overall, the website demonstrates a strong commitment to transparency, user engagement, and compliance, making it a trustworthy platform for its audience and stakeholders.

D

Delta Reisen s.r.o.

deltareisen.cz

58

Delta Reisen s.r.o. is a Czech travel agency specializing in offering vacations through German and Austrian travel agencies, providing a wide range of travel packages with over one million available dates. The company targets Czech customers seeking high-quality travel experiences with trusted German and Austrian partners. Their business model focuses on travel package brokerage, online booking, and customer support with a medium-sized market presence since 2016. The website reflects a professional and consistent brand image with good content quality and customer trust signals such as reviews and certifications. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Matomo analytics, integrated with a specialized travel system (CeSYS). The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are not explicitly detected. No WHOIS data is available, which impacts transparency and trust. Security-wise, the site shows good practices such as reCAPTCHA on forms and no exposed sensitive data, but lacks a public security policy or incident response information. Privacy compliance is good with GDPR-aligned cookie consent and privacy notices. Overall, the risk is moderate with recommendations to improve WHOIS transparency, security headers, and incident response disclosures. Strategically, Delta Reisen should focus on enhancing security transparency, maintaining up-to-date technology, and expanding trust signals to strengthen market position and customer confidence.

S

STIEFEL EUROCART s.r.o.

stiefel.sk

47

STIEFEL EUROCART s.r.o. is a Slovak company specializing in providing comprehensive educational solutions and didactic aids for kindergartens, primary, and secondary schools. Their offerings include digital interactive tools, educational materials, and workshops, targeting educational institutions and parents. The website reflects a niche market position focused on supporting modern teaching methods through digital technologies. Technically, the website employs common web technologies such as jQuery, Facebook SDK, and Google Tag Manager, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and standard tracking scripts but lacks explicit security headers and published privacy or incident response policies, suggesting room for improvement in security posture. Overall, the website is professional and functional with clear contact information, but enhancing privacy compliance and security best practices would strengthen trust and compliance.

Mateřská škola Borohrádek operates as a local preschool educational institution in the Czech Republic, providing early childhood education services with a focus on a natural environment. The website serves primarily parents and guardians seeking information about the school, its classes, events, and admission procedures. The business model is community-focused education with a small organizational size and a founding date around 2010. Technically, the website is built using standard web technologies including HTML5, CSS, JavaScript, and jQuery, likely managed via the WebConfig CMS platform. The site is moderately optimized for mobile devices and offers a clear navigation structure. However, performance and accessibility are basic, and there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS (inferred but not explicitly confirmed), includes cookie consent mechanisms, and employs common tracking tools such as Google Analytics and Facebook Pixel. There is a lack of advanced security headers and no visible incident response or security policy pages. WHOIS data is missing, which reduces domain trustworthiness, though the website content and structure suggest a legitimate educational entity. Overall, the website is functional and provides relevant content for its audience but would benefit from enhanced security practices, improved transparency in contact information, and better technical optimization to strengthen trust and compliance.

Č

Čermná nad Orlicí

cermna-n-orl.cz

39

The website www.cermna-n-orl.cz serves as the official online presence for the municipality of Čermná nad Orlicí in the Czech Republic. It provides residents and visitors with information about local government, community events, public announcements, and municipal projects. The site is designed to support the local population with relevant news and administrative resources, reflecting a small government entity focused on community engagement. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with additional integration of a Smart App Banner to promote a mobile application. The CMS appears to be WebConfig, a platform commonly used for municipal websites in the region. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and good content relevance. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy. No forms or direct contact information are present on the site, limiting user interaction and support channels. Overall, the website is functional and serves its purpose as a municipal information portal but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

W

World Clinical Laser Institute

learnlasers.com

57

The World Clinical Laser Institute (WCLI) is a well-established professional organization specializing in dental laser technology education, certification, and events. Founded in 2000, it has grown to become the largest dental laser organization globally with over 19,000 members. The website reflects a professional and consistent brand presence targeting dental professionals and researchers interested in advancing dental care through laser technologies. The business model centers on membership, training, certification, and knowledge sharing through symposiums and webinars. Technically, the website is built on WordPress using the Elementor page builder, hosted with GoDaddy as registrar and DNS managed via Cloudflare. The site is mobile optimized with good navigation and content quality. However, performance is moderate and accessibility is basic. No advanced analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, DNSSEC is not enabled and no security headers were detected, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and professional but would benefit from enhanced security headers, privacy compliance improvements, and DNSSEC implementation to strengthen its security posture and regulatory adherence.

I

Irving Shipbuilding Inc.

shipsforcanada.ca

46

Irving Shipbuilding Inc. operates the Halifax Shipyard as a key partner in Canada's National Shipbuilding Strategy, focusing on constructing naval combatant ships for the Royal Canadian Navy. The company has invested heavily in modernizing its facilities and emphasizes Canadian economic impact, supplier engagement, and career opportunities. The website reflects a professional and consistent brand image targeting government stakeholders, suppliers, and potential employees. Technically, the site uses modern web technologies including JavaScript frameworks, social media integrations, and video content, hosted under a reputable registrar with HTTPS enabled. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its market niche.

D

Dab Pumps Spa

dabpumps.id

10

Dab Pumps Spa is a well-established manufacturer specializing in efficient water movement and management technologies. The company operates internationally with localized websites such as the Indonesian version analyzed here. Their business model focuses on manufacturing, after-sales services, training, and digital product support, positioning them as a key player in the energy and manufacturing sectors. The website reflects a professional and consistent brand image targeting industrial clients, professionals, and end users interested in water pump solutions. Technically, the website is built on Drupal 9 CMS with modern front-end technologies including jQuery, Bootstrap, Owl Carousel, and Selectric for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security is implemented with HTTPS and secure forms, but lacks explicit security headers and incident response disclosures. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with clear privacy and cookie policies, though a cookie consent mechanism is absent. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Social media and partner domains are well integrated, enhancing trust and outreach. Overall, the website is professional, secure, and business credible with room for improvement in security headers and privacy mechanisms. The risk level is low, and the site effectively supports the company's market presence and customer engagement.

D

Dab Pumps Spa

dabpumps.com.au

9

Dab Pumps Spa is a well-established company specializing in water technology solutions with over 40 years of experience. The company focuses on manufacturing and providing technological solutions for water movement and management across residential, commercial, agricultural, and irrigation sectors. Their offerings emphasize reliability, efficiency, and energy optimization. The website reflects a professional and consistent brand presence targeting industrial and commercial audiences primarily in Australia and internationally. Technically, the website is built on Drupal 9 with modern frontend libraries such as jQuery, Bootstrap, and Owl Carousel, ensuring a responsive and user-friendly experience. Security-wise, the site uses HTTPS and secure login forms but lacks advanced security headers and incident response disclosures. Privacy and cookie policies are present, though cookie consent mechanisms are missing. WHOIS data is incomplete and malformed, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

D

DAB PUMPS SPA

dabpumps.mx

10

DAB PUMPS SPA is a well-established company specializing in water technology solutions with over 40 years of industry presence. The company offers a broad portfolio of products and services including pumps, digital connectivity solutions, and training programs, targeting residential, commercial, and agricultural sectors. The website reflects a mature digital presence built on Drupal 9, with modern UI components and a clear focus on user experience and compliance. The security posture is adequate but can be improved by implementing additional security headers and renewing the expired domain promptly. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and serves as a solid digital asset for the company.

D

DAB PUMPS S.p.A.

dabpumps.us

11

DAB PUMPS S.p.A. is an established Italian manufacturer specializing in pump products with a significant presence in North America through its subsidiary DAB Pumps Inc. The company offers a broad portfolio of pump solutions, complemented by customer service, training, and technical support. The website reflects a mature digital presence built on Drupal 9, integrating modern frontend technologies and a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and some advanced HTTP security headers are missing. The WHOIS data is consistent with the business claims, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-structured for its industrial target audience.

D

Dab Pumps Spa

dabpumps.es

10

Dab Pumps Spa is a well-established company specializing in water technology solutions, focusing on the manufacturing and distribution of water pumps and related services. With over 40 years of experience and a strong presence in Spain and Italy, the company targets both professional sector users and end consumers. Their website reflects a mature digital presence built on Drupal 9, featuring comprehensive content, clear navigation, and a consistent brand image. The site integrates modern web technologies and provides extensive resources including technical advisory, training, and digital tools for pump selection and connectivity.

D

Dab Pumps Spa

dabpumps.nl

62

Dab Pumps Spa operates a professional website focused on water pump manufacturing and related services, targeting industrial, agricultural, and building management sectors primarily in the Netherlands and internationally. The company has a strong market presence with over 40 years of history and offers a comprehensive product range, service contracts, training, and technical support. The website is built on Drupal 9 with modern front-end technologies and includes a secure login form protected by Google reCAPTCHA. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Security posture is good with HTTPS and secure practices, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, supporting the company's business credibility.

N

NIBE Industrier AB

nibe.com

71

NIBE Industrier AB is a large enterprise specializing in sustainable energy solutions, including climate solutions, heating elements, and stoves. The company positions itself as a global player focused on reducing greenhouse gas emissions through innovative products and corporate sustainability. The website reflects a mature digital presence with comprehensive corporate governance, investor relations, and sustainability content. Technically, the site uses modern web technologies including SiteVision CMS, Google Tag Manager, and UIkit CSS framework, delivering good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and content. Strategic recommendations include publishing security and incident response policies, adding a security.txt file, and improving transparency around data protection officer contact details.

A

Airport Hotel Budapest**** Kft.

vip-parkolo.hu

49

VIP Parkoló is a well-established airport parking service provider located near Budapest Liszt Ferenc International Airport. Operating since 2005, the company offers secure, guarded parking with free airport transfer and online booking capabilities. The website is professionally designed using Joomla CMS with modern frameworks and provides clear contact information and social media presence, supporting a trustworthy user experience. Technically, the site employs HTTPS with good security headers and modern JavaScript libraries, though it lacks a visible cookie consent mechanism and explicit security policies. Overall, the business demonstrates a solid market position in the transportation and hospitality sectors within Hungary.

BlueVendo S.A. is a Poland-based technology company specializing in high-tech proprietary software solutions for the tourism industry. Their offerings include integrated booking software, backoffice and inventory management systems, CMS platforms for tourism websites, and automation technologies such as OCR and RPA. The company targets touroperators and travel agencies, positioning itself as a niche provider with a mature product suite and a medium-sized business footprint. The website is professionally designed, content-rich, and optimized for SEO and mobile use, reflecting a solid digital maturity. Technically, the site runs on WordPress with modern plugins and frameworks, delivering moderate performance and good user experience. Security posture is adequate with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the domain registration data supports the legitimacy and stability of the business.

B

Blue Sky Travel

blueskytravel.hu

47

Blue Sky Travel is a Hungarian travel agency established in 2018, specializing in air and bus travel packages primarily to Greek islands and various exotic destinations. The company offers competitive pricing, last-minute deals, and comprehensive travel organization services targeting Hungarian-speaking travelers. Their website features a professional design with clear navigation, mobile optimization, and integrated booking forms, reflecting a medium-sized business with a solid market presence. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and popular analytics and marketing tools such as Google Tag Manager, Hotjar, Microsoft Clarity, and Tawk.to live chat. Hosting is provided via a CDN, ensuring moderate performance and good mobile responsiveness. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site enforces HTTPS and employs consent-based loading of tracking scripts, demonstrating a privacy-aware approach. However, it lacks several important security headers and does not publish a security policy or incident response contacts. No critical vulnerabilities or suspicious activities were detected, and WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a trustworthy and professional travel service with room for improvement in privacy policy transparency and security hardening. The risk level is moderate with no immediate threats identified.

P

Personal Tours

personaltours.hu

57

Personal Tours is a well-established Hungarian travel agency specializing in personalized travel packages primarily to Greek islands and exotic destinations. With nearly three decades of experience, the company offers a variety of services including flight-inclusive trips, individual accommodation bookings, cruises, and city tours. The website reflects a professional and user-friendly design, targeting Hungarian-speaking travelers seeking affordable and customized holiday options. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement, reCAPTCHA for forms, and a comprehensive cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not present on the site, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and provides a solid digital presence for the business.

C

Children's of Alabama Indy Grand Prix

indyalabama.com

56

The Children’s of Alabama Indy Grand Prix website represents a well-established motorsports event held annually at Barber Motorsports Park in Birmingham, Alabama. The event supports the Children’s of Alabama hospital and is powered by AmFirst, indicating a strong charitable and community focus. The website provides comprehensive information about the event, ticketing, hospitality, fan activities, and sponsorship opportunities, targeting motorsports enthusiasts and local supporters. The site is professionally branded and maintains consistent messaging aligned with its charitable mission. Technically, the website is built on WordPress using the Total theme, incorporating modern web technologies such as jQuery, Revolution Slider, and Gravity Forms. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and accessible, with a user-friendly design and clear navigation. However, it lacks an explicit cookie consent mechanism, which may impact privacy compliance. From a security perspective, the site enforces HTTPS and uses standard tracking and marketing scripts. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. Security headers are not explicitly detected but HTTPS presence suggests a baseline security posture. The absence of WHOIS registration data is a concern for domain legitimacy, although the site content and branding appear trustworthy. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website demonstrates a solid digital presence with good content quality and technical implementation. Privacy compliance could be improved by adding cookie consent and GDPR indicators. The lack of WHOIS data reduces trustworthiness slightly but does not outweigh the professional presentation and clear business purpose. Strategic recommendations include enhancing security headers, implementing a vulnerability disclosure policy, and improving privacy compliance to strengthen trust and security posture.

G

Green Savoree St. Petersburg, LLC

gpstpete.com

44

The Firestone Grand Prix of St. Petersburg website represents a well-established motorsports event organizer with a history dating back to 2001. The company, Green Savoree St. Petersburg, LLC, operates a premier motorsports festival in St. Petersburg, Florida, offering ticket sales, hospitality packages, and merchandise. The website effectively targets motorsports fans, tourists, and local attendees with clear event information and partner engagement. Technically, the site is built on Joomla CMS with modern frameworks like Helix3 and Bootstrap, ensuring responsive design and moderate performance. The use of analytics and marketing tools such as Google Analytics, Hotjar, and Constant Contact indicates a mature digital marketing approach, though lacking explicit cookie consent mechanisms. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and business credible, with room for privacy compliance enhancements.

N

Nestle Professional

nestleprofessional.ca

70

Nestlé Professional Canada operates as a B2B supplier specializing in culinary and beverage solutions for the hospitality and foodservice sectors. The website presents a professional and consistent brand image aligned with the global Nestlé brand, targeting Canadian foodservice operators and culinary professionals. The business model focuses on providing products, systems, and expertise to grow operations in the food and beverage industry. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. The site is mobile-optimized and accessible with good SEO practices. Security posture is moderate; HTTPS is implied, but no explicit security headers or vulnerability disclosures are present. The absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or registration issues. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in privacy and security policies.

F

fittkau metallgestaltung gmbh

fittkau-metallbau.de

54

Fittkau Metallgestaltung GmbH is a German small-sized manufacturing company specializing in metalworking, forge, and artistic metal structures. The company presents a professional website built on Joomla! CMS, showcasing a portfolio of projects and providing essential contact information. The website targets architects, construction firms, and clients seeking specialized metal fabrication services. The business holds a reputable market position with recent award recognition, indicating industry credibility. Technically, the website employs legacy JavaScript libraries such as jQuery and MooTools, with moderate performance and basic mobile optimization. The absence of advanced analytics and tracking tools suggests a privacy-conscious approach. However, the lack of visible security headers and outdated libraries indicate areas for technical improvement. From a security perspective, the site uses HTTPS (assumed from base URL), includes a cookie consent mechanism, and provides a privacy policy compliant with GDPR. No incident response or security policy pages are found, and no phone contact is provided, which could limit user trust. No critical vulnerabilities or blocking mechanisms are detected, but updating security practices and technical stack is recommended. Overall, the website is professional and trustworthy with good business credibility but could benefit from technical modernization and enhanced security measures to improve resilience and compliance.

WGBG Wirtschafts-Genossenschaft Berliner Grundbesitzer eG is a specialized real estate management cooperative based in Berlin, offering comprehensive property management, technical support, and advisory services tailored to property owners in Berlin and Brandenburg. The cooperative business model emphasizes owner interests without investor or shareholder influence, positioning WGBG as a trusted niche player in the local real estate market. Technically, the website is built on WordPress with modern plugins and themes, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent, but lacks published privacy policies and incident response information, indicating room for compliance and security maturity improvements. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency to strengthen user trust and regulatory compliance.

Hoffnungstaler Stiftung Lobetal is a German non-profit foundation providing a broad range of social, medical, and educational services primarily in Berlin and Brandenburg. The website presents a professional and accessible digital presence built on Joomla CMS, incorporating modern technologies such as Usercentrics for cookie consent and Matomo for privacy-respecting analytics. The organization targets individuals seeking social support, healthcare, and education, emphasizing inclusion and community engagement. While the site is well-structured and content-rich, explicit privacy policies and terms of service are not found, which could be improved for compliance and transparency. Security posture is solid with HTTPS and consent management, but lacks explicit incident response contacts or vulnerability disclosure mechanisms.

V

Valfrigo

valfrigo.com

43

Valfrigo is a Kosovo-based company specializing in the sale of thermal pumps for central heating, ventilation, air conditioning, and related services such as filtering and degassing of oil transformers. The company markets products from well-known brands like NIBE, TOSHIBA, CARRIER, and CLIVET, positioning itself as a specialized provider in the green energy sector. The website reflects a small-sized business with a clear focus on green energy heating solutions, targeting both businesses and consumers interested in sustainable energy technologies. The domain age of 20 years supports a mature business presence. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It employs modern web technologies including jQuery and Google Fonts, and integrates Google Maps API. The site is mobile optimized with good design quality and navigation clarity, although SEO and accessibility features are basic. Hosting appears to be managed via Name.com, consistent with the domain registrar information. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, no DNSSEC is enabled, and no security headers were detected in the provided data, which are areas for improvement. The absence of privacy and cookie policies, as well as incident response contacts, indicates gaps in compliance and security transparency. No evidence of tracking or advertising scripts was found, suggesting minimal user tracking. Overall, the website is professional and trustworthy with moderate security posture and limited privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance the site's security and compliance standing.