Security Directory

1

1-700 Digital S.A.

1700digital.com

50

1-700 Digital S.A. operates an established e-commerce and physical retail business in Ecuador specializing in computer hardware, laptops, PC parts, peripherals, and electronics. Founded in 2006, the company serves both individual consumers and businesses, positioning itself as a recognized local distributor of major technology brands. The website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and a CDN for performance. While the site is well-structured and mobile-optimized, it lacks some privacy compliance features such as cookie consent banners and explicit GDPR indicators. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and some security headers. Marketing relies on Facebook Pixel tracking. Overall, the domain registration and website content are consistent and trustworthy, supporting a credible business presence in Ecuador.

S

S.J. & G. Fazul Ellahie (Pvt) Limited

sjggroup.com

56

S.J. & G. Fazul Ellahie (Pvt) Limited, operating as SJG Group, is a well-established pharmaceutical manufacturer and distributor based in Pakistan with a legacy dating back to 1889. The company positions itself as a pioneer in the pharmaceutical industry, offering innovative healthcare solutions and maintaining a strong commitment to quality and sustainability. Their market presence extends internationally, supported by a robust logistics and supply chain infrastructure. The website reflects a professional digital presence built on WordPress with modern design elements and clear branding. Technically, the website leverages popular CMS and page builder technologies such as WordPress and Elementor, alongside Slider Revolution for dynamic content. The site is hosted with Cloudflare DNS services and uses HTTPS, ensuring secure communications. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices appear solid with proper meta tags and structured content. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks published privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms, which are important for compliance and trust. Security headers could be enhanced to improve protection against common web threats. No WAF or blocking mechanisms interfere with content access. Overall, the website is credible and professional but would benefit from improved privacy compliance and security transparency to align with best practices and regulatory requirements.

U

Universidade Federal do Rio de Janeiro

ufrj.br

58

Universidade Federal do Rio de Janeiro (UFRJ) is a prestigious public university in Brazil with a long history dating back to the 19th century. It is recognized as one of the top universities in Brazil and Latin America, offering a wide range of undergraduate and graduate programs, as well as extensive research and extension activities. The university maintains strong international partnerships and exchange programs, targeting students, researchers, and academic collaborators worldwide. The website reflects a professional academic institution with clear branding and comprehensive content about its offerings and history. Technically, the website is built on WordPress with modern web technologies including jQuery, Font Awesome, and Google Analytics for tracking. It incorporates accessibility features such as the VLibras widget for sign language translation. The site is mobile-optimized and performs moderately well, with good SEO and accessibility standards. However, there is room for improvement in security headers and explicit privacy and cookie policies. From a security perspective, the site uses HTTPS with a strong SSL configuration and does not expose sensitive data. WHOIS data is transparent and consistent with the university's identity, enhancing trustworthiness. Incident response contacts are provided in WHOIS, but the website lacks a dedicated security policy or vulnerability disclosure page. Overall, the security posture is solid but could be enhanced with additional headers and policies. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include publishing clear privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

S

Sociedade de Pediatria de São Paulo - SPSP

spsp.org.br

56

Sociedade de Pediatria de São Paulo (SPSP) is a well-established non-profit professional association serving pediatricians and healthcare professionals in São Paulo, Brazil. It operates as the pediatric department of the Associação Paulista de Medicina (APM) and is affiliated with the Sociedade Brasileira de Pediatria (SBP). The website provides educational resources, event information, publications, and membership services, targeting medical professionals and members of the pediatric community. The organization maintains a credible market position as a regional leader in pediatric healthcare education and advocacy. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized, SEO-friendly, and integrates multiple Google tracking and analytics tools. Performance is moderate, with good design quality and user experience. Privacy and cookie policies are present, though GDPR compliance is basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit advanced security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or malicious content were detected. The presence of multiple tracking scripts suggests moderate user tracking, which could be improved for privacy compliance. Overall, SPSP's website is professional, trustworthy, and serves its audience well, with room for improvement in security policies and privacy transparency to enhance user trust and compliance.

U

UK Wing Chun Assoc.

ukwingchun.com

49

The UK Wing Chun Association operates as a small, specialized martial arts organization focused on Wing Chun Kung Fu training and community building within the United Kingdom. Founded in 1985 by Master James Sinclair, it holds a respected position in the martial arts community and offers classes, instructor resources, and merchandise through its website. The digital presence is built on a modern WordPress platform utilizing WooCommerce for e-commerce and Elementor for design, indicating a moderate level of digital maturity. The website is well-structured, mobile-optimized, and integrates social media and payment processing via PayPal, supporting a seamless user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and employs Facebook Pixel for marketing and analytics. However, the absence of explicit security headers and a visible privacy policy or terms of service page indicates room for improvement in compliance and security posture. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and trustworthiness, despite the professional appearance and established business history claimed on the site. Overall, the website presents a professional and trustworthy front for its target audience but should address privacy compliance and domain registration transparency to enhance trust and security. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and verifying domain registration details to align with best practices and regulatory requirements.

A

Axxis

axxisconsulting.com.mx

48

Axxis is a Mexico-based technology consulting firm specializing in business process management, robotic process automation, and digital transformation solutions. Established in 2004, the company positions itself as a leader in intelligent process automation, serving medium to large enterprises with services including BPM, RPA, cloud optimization, and digital marketing consulting. The website reflects a mature digital presence built on WordPress with modern plugins and a professional design. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enabled, but could benefit from enhanced security headers and published incident response policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

R

Russell Certified Home Inspections

rchi.ca

58

Russell Certified Home Inspections is a small, professional home inspection service provider based in Kemptville, Ontario, Canada. The company offers a comprehensive range of inspection services including pre-purchase, new home warranty, WETT, BGRS, maintenance inspections, thermal imaging, and drone services. Led by Lucas Russell, an InterNACHI certified master inspector with over 10 years of experience, the business positions itself as a market leader in the local real estate inspection sector. The website reflects a professional image with detailed service descriptions and strong customer testimonials, supporting its credibility and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, Owl Carousel, and Google Maps integration. SEO is enhanced by the Yoast SEO plugin and structured data markup. The site is mobile optimized and provides a good user experience. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to strengthen security posture. Security-wise, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers. There is no visible privacy policy or cookie consent mechanism, which is a compliance gap especially under GDPR. Incident response and vulnerability disclosure information are absent, indicating room for improvement in security transparency and readiness. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and establishing a vulnerability disclosure policy.

Wholesale 4 Inc. operates an e-commerce platform specializing in residential and commercial hardware products, locksmith supplies, and specialty locks. The company offers a broad catalog of hardware items from multiple well-known brands, targeting hardware retailers, locksmiths, and commercial and residential customers. The business model is primarily retail and wholesale via an online store, with an established domain since 2003 indicating a mature presence in the hardware retail sector. The website is built on WordPress with WooCommerce, leveraging popular plugins and technologies such as WPBakery Page Builder and Slider Revolution to deliver a functional and visually consistent user experience. Mobile optimization and navigation are good, supporting usability across devices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the business to regulatory risks. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy practices.

Т

Тіса меблі

tisa-mebli.com

55

The website 'Тіса меблі' represents a Ukrainian furniture manufacturing company established in 2003, offering a broad range of furniture products including beds, cabinets, tables, and children's furniture. The site serves as an online catalog and sales platform, targeting general consumers seeking quality and affordable furniture. Technically, the site is built on Joomla CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics, hosted by Hosting Ukraine LLC. The website is accessible, mobile-optimized, and professionally designed, though performance is moderate. From a security perspective, the site uses HTTPS but lacks advanced security headers and policies such as privacy and cookie notices, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The WHOIS data indicates a consistent and legitimate domain registration with no privacy protection, aligning with the business claims and history. Overall, the website demonstrates a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Centro de Administraciones Tributarias Subnacionales (CeATS)

ceats.org

44

Centro de Administraciones Tributarias Subnacionales (CeATS) is a well-established non-profit organization based in Argentina, focused on subnational tax administration collaboration, training, and research. The website reflects a professional presence with clear navigation, relevant content, and active engagement through events and educational programs. The organization partners with universities and government tax agencies, reinforcing its credibility and market position in the government and education sectors. Technically, the website uses a modern but standard technology stack including Bootstrap, jQuery, and various carousel and slider libraries. Hosting is stable with a reputable registrar, and the site is mobile optimized with moderate performance. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

C

Castorani

castorani.it

49

Castorani is a small Italian wine producer and retailer with a well-established online presence since 2002. The website offers e-commerce capabilities for purchasing wines, along with hospitality services such as tastings and vineyard tours. The company targets wine enthusiasts and tourists interested in authentic Italian wine experiences. Technically, the site is built on PrestaShop, uses modern web technologies, and integrates Cookiebot for GDPR-compliant cookie management. Security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, though additional security headers could enhance protection. Privacy compliance is strong, with clear cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

O

Outlet das Tintas

outletdastintas.com.br

59

Outlet das Tintas is a Brazilian retail network specializing in paint products, primarily offering Tintas Coral directly from the factory with special discounts. The company operates a multi-location franchise model with city-specific subdomains, facilitating easy ordering via Whatsapp and rapid delivery. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Cookie Law Info to enhance SEO and privacy compliance. Hosting is provided by DigitalOcean, indicating a reliable infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the site presents a professional and trustworthy retail presence in the Brazilian paint market.

B

Be The Change Stiftung

baeume-fuer-den-wandel.de

47

Be The Change Stiftung is a German non-profit organization dedicated to environmental sustainability, particularly through tree planting projects in Kenya. Their website showcases detailed project information, funding status, and transparency reports, positioning them as a trustworthy entity in the environmental non-profit sector. The organization targets environmentally conscious donors and partners, leveraging digital tools to engage and inform stakeholders. Technically, the website is built on WordPress with modern plugins such as WooCommerce, Yoast SEO, and Borlabs Cookie for compliance and user experience. Hosting is provided by Manitu, a reputable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, with good SEO and mobile optimization.

L

Lassana

lassana.si

42

Lassana is a well-established beauty salon chain based in Ljubljana, Slovenia, offering a wide range of hairdressing, pedicure, cosmetic, and massage services. The company operates 14 salons and also retails professional cosmetics both in-store and online. The website reflects a mature digital presence with integrated online booking via Fresha and an e-commerce platform for product sales. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance, SEO, and mobile responsiveness. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Berufsverband der Frauenärzte e.V.

bvf.de

56

The Berufsverband der Frauenärzte e.V. (BVF) is a professional association representing gynecologists in Germany, providing a broad range of member services including insurance benefits, professional advice, continuing education through the BVF Akademie, and a members-only online portal. The website is well-structured, professionally designed, and targets medical professionals in the gynecology sector. It maintains a strong market position with approximately 15,000 members and offers relevant content such as news, press releases, and event calendars. Technically, the site is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, FlexSlider, and SlickNav for responsive navigation and interactive elements. The site employs Matomo analytics configured to be cookie-free, demonstrating a commitment to user privacy and GDPR compliance. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its niche audience effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security and trustworthiness.

M

Monks - Ärzte im Netz

monks-aerzte-im-netz.de

58

Monks - Ärzte im Netz is a German telemedicine service provider offering digital health portals, including a doctor directory, practice app, certified video consultation, and online appointment management. The website targets medical professionals across various specialties and their patients, positioning itself as a partner to multiple medical professional associations. The business model focuses on B2B telemedicine solutions and patient-facing health information portals. Technically, the website is built on TYPO3 CMS with jQuery and SlickNav for responsive navigation, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and incident response contacts suggests room for improvement. Privacy compliance is adequate with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its healthcare industry focus.

E

event lab. GmbH

ja-ped.de

50

The website ja-ped.de serves as the official platform for the JA-PED 2025 conference, a specialized medical event focusing on pediatric endocrinology and diabetology in Germany. The site is professionally designed, providing comprehensive information about the event, including program details, registration, certification, and seminars. The target audience primarily consists of medical professionals and members of the DGPAED. Technically, the site is built on WordPress with the Avada theme and employs modern plugins such as LayerSlider and Borlabs Cookie for enhanced user experience and compliance. Accessibility is a strong focus, with multiple modes to accommodate users with disabilities. Security posture is good, with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is robust, with clear GDPR-aligned policies. Overall, the site reflects a credible and trustworthy business entity in the healthcare event sector.

Ö

ÖGKJ – Österreichische Gesellschaft für Kinder- und Jugendheilkunde

oegkj-jahrestagung.at

52

The website represents the Austrian Society for Pediatrics and Adolescent Medicine's 63rd annual conference, scheduled for September 2025 in Graz, Austria. It serves as an information and registration portal for healthcare professionals specializing in pediatrics. The site is professionally designed using WordPress with WooCommerce and Elementor, providing a modern and responsive user experience. GDPR compliance is well implemented with a cookie consent banner and detailed privacy policy. Security posture is adequate with HTTPS enforced, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the professional content and clear contact information support legitimacy. Overall, the site effectively supports its business purpose as a professional medical conference platform.

P

Politische Kindermedizin

besserbehandelt.at

59

The website besserbehandelt.at is a professionally designed non-profit advocacy platform dedicated to improving healthcare for children and adolescents in Austria. It consolidates expertise, experiences, and voices from affected individuals to influence political decision-making. The platform operates with a clear mission and has established partnerships with reputable organizations, enhancing its credibility. Technically, the site uses Joomla CMS with modern UIkit framework and integrates Matomo for privacy-conscious analytics. It employs a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is limited to an email address, and no explicit terms of service or security policies are published. Overall, the site is trustworthy, well-branded, and accessible, serving its advocacy purpose effectively.

T

Theater Waidspeicher e.V.

waidspeicher.de

53

Theater Waidspeicher e.V. is a small, established non-profit cultural organization based in Germany specializing in puppet and music theatre. Founded in 1993, it offers a diverse program targeting a broad audience including children and adults, with performances, workshops, and tours. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries and frameworks to provide a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a trustworthy and legitimate online presence aligned with its cultural mission.

B

Bixby Knolls Business Improvement Association

bixbyknollsinfo.com

41

Bixby Knolls Business Improvement Association is a small, community-focused non-profit organization established in 2002, dedicated to supporting local businesses and residents in the Bixby Knolls area of Long Beach, California. The website serves as a hub for community events, business directories, donation campaigns, and programs aimed at fostering neighborhood engagement and economic growth. The organization recently transitioned to a 501(c)(3) nonprofit status to facilitate tax-deductible donations, reflecting its commitment to sustainable community support. The target audience includes local business owners, residents, and community members interested in neighborhood development and events. Technically, the website is built on WordPress using the Divi theme, supplemented by popular plugins such as LayerSlider, DataTables, Contact Form 7, and Bloom for newsletter management. Hosting is provided by Bluehost, with domain registration dating back to 2002, indicating a mature digital presence. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Analytics integration via MonsterInsights is present but not configured, suggesting room for improvement in data-driven insights. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers are detected, which could expose the site to certain DNS and web-based attacks. Privacy compliance is lacking, with no visible privacy or cookie policies, and no consent mechanisms for data collection, despite the presence of multiple forms collecting personal information. There is no public incident response or vulnerability disclosure information, which could be a concern for transparency and trust. Overall, the website is trustworthy and professional in its presentation and business credibility but requires enhancements in privacy compliance and security best practices to align with modern standards. Strategic improvements in these areas will strengthen user trust and regulatory adherence.

4

4th Street Long Beach

4thstreetlongbeach.com

56

4th Street Long Beach is a community-focused website promoting a unique pocket of Long Beach with nearly 100 independently owned stores offering diverse goods, foods, and experiences. The site serves as a local business directory and event promotion platform, targeting a general audience interested in local culture and commerce. The website is built on the Squarespace platform, leveraging modern web technologies including jQuery, Typekit fonts, and YouTube embeds, with an accessibility widget integrated to enhance usability. While the site demonstrates good design quality, mobile optimization, and basic SEO, it lacks critical privacy and cookie policies, as well as visible contact information, which impacts its compliance and trustworthiness. Security posture is generally good with HTTPS enforced, but the absence of security headers and WHOIS data raises concerns about domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and transparency measures.

Rancho Los Alamitos is a non-profit historic site and gardens located in Long Beach, California, dedicated to educating and engaging the public about California's rich history. The organization offers free public access to its historic ranch house and gardens, along with educational programs, events, and volunteer opportunities. The website reflects a community-focused mission with clear calls to action for visits, donations, memberships, and volunteering. Technically, the site is built on the EditMySite platform (a Weebly reseller), leveraging common web technologies such as jQuery, Google Analytics, and Microsoft Clarity for analytics, and EqualWeb for accessibility compliance. The site is mobile-optimized and provides a good user experience with consistent branding and clear navigation. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is typical for non-profit organizations. Overall, the website is trustworthy, professional, and serves its community-oriented purpose effectively.

The City of Long Beach official website serves as a comprehensive portal for residents, businesses, visitors, and city employees. It provides detailed information about city officials, municipal services, business resources, visitor attractions, and employment opportunities. The site is well-structured with clear navigation and a professional design consistent with government standards. The target audience includes local residents, business owners, visitors, and municipal staff. The business model is that of a government service provider, focusing on transparency, accessibility, and community engagement.

The Long Beach City Prosecutor Doug Haubert website serves as the official online presence for the city prosecutor's office responsible for prosecuting adult misdemeanor crimes within Long Beach, California. The site provides comprehensive information about prosecutorial services, community programs, diversion initiatives, and resources for victims and residents. It targets local residents and community stakeholders, positioning itself as a trusted government service provider. The business model is public service under the government sector, with a medium-sized operational scope and a founding date consistent with the domain registration in 2011. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Language Translator, hosted by GoDaddy. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. SEO practices are adequately implemented, though accessibility features are basic. The presence of multiple external domains, some suspicious, suggests potential security review is warranted. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, enhancing business credibility. No incident response or vulnerability disclosure information is available, which could be improved. Overall, the website is functional, professional, and trustworthy for its intended government service role but would benefit from enhanced security measures and privacy compliance to strengthen its posture and user trust.

L

Long Beach City Auditor's Office

cityauditorlauradoud.com

44

The Long Beach City Auditor's Office website serves as the official online presence for the city government auditing authority. It provides information about independent audits, fraud investigations, and promotes transparency and accountability in city operations. The site targets residents, government officials, and community stakeholders interested in city financial oversight. Technically, the website is built on WordPress with common plugins and uses Google Analytics and Google Translate for analytics and multilingual support. The site is accessible, mobile-optimized, and professionally designed with consistent branding. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration or data retrieval issues, which impacts domain legitimacy assessment. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced security and privacy compliance measures.

Periscope Holdings is a U.S.-based company specializing in procurement software solutions tailored for government buyers and suppliers. Their flagship product, Periscope ePro, automates the procure-to-pay process, enhancing compliance and cost savings. The company holds exclusive rights to market the National Institute of Governmental Purchasing (NIGP) Commodity/Services Code and maintains a strong presence in the public sector procurement market with a broad agency network. The website reflects a professional and consistent brand image, targeting government entities and suppliers with clear messaging and comprehensive service offerings. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and conditional loading of Hotjar and Google Analytics based on user cookie consent. The site is mobile-optimized with good SEO practices and a responsive design. However, some security best practices such as explicit security headers are not evident, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. The security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, but the absence of detailed security policies and incident response information suggests room for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies linked to a partner domain. Overall, the site is trustworthy and professional, though the domain registration inconsistency slightly reduces the overall trust score. Strategically, Periscope Holdings should focus on enhancing domain registration transparency, implementing additional security headers, and publishing explicit security and incident response policies to strengthen trust and compliance posture.

C

California Green Business Network

greenbusinessca.org

47

The California Green Business Network is a well-established non-profit organization founded in 2008, dedicated to promoting sustainability and green business practices across California. It operates as a coalition of cities and counties, providing certification services, resource conservation guidance, and community support to small and medium-sized businesses. The website reflects a strong market position as a leader in the green business certification space, with a clear focus on environmental impact and community engagement. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and Mailchimp integration. It demonstrates good SEO practices, mobile optimization, and accessibility features, although performance is moderate. The site uses HTTPS with a solid SSL configuration but lacks some advanced security headers and DNSSEC, which could enhance its security posture. From a security perspective, the site follows basic best practices including secure forms and no exposed sensitive data. However, it lacks a formal security policy, incident response contact information, and a cookie consent mechanism, which are important for compliance and user trust. The WHOIS data is consistent and supports the legitimacy of the domain and organization. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively. Strategic improvements in privacy compliance and security policies would further strengthen its position and reduce risk.

S

Scribble Software, Inc.

marinago.com

45

MARINAGO Office, operated by Scribble Software, Inc., offers a comprehensive cloud-based marina management software solution designed to streamline operations for marinas, ports, harbors, and boatyards. The platform integrates key functionalities such as slip reservations, fuel dock sales, ship store management, accounting integration, enterprise reporting, and automated customer communications. Positioned as a trusted and scalable solution, MARINAGO Office targets marina professionals seeking efficient and profitable management tools. The website reflects a professional and consistent brand image with strong customer testimonials and integration with reputable accounting software providers. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various UI libraries, with Google Tag Manager and Google Ads for analytics and marketing. The site is mobile-optimized with good SEO practices and clear navigation, although accessibility features are basic. Security posture is moderate with HTTPS usage implied but lacking visible security headers and explicit security policies. Privacy and cookie policies are not found, indicating room for compliance improvement. The WHOIS data is notably missing or unavailable, which raises some concerns about domain registration transparency and legitimacy. Despite this, the website content and external references strongly indicate a legitimate business operation. Overall, the site scores well on content quality and business credibility but needs enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

I

International Transport Workers’ Federation (ITF)

itfglobal.org

58

The International Transport Workers’ Federation (ITF) operates a professional and comprehensive website serving as the global voice for 16.5 million transport workers across 150 countries. The organization focuses on union representation, workers' rights, equality, and justice within the transport sector. The website is built on Drupal 10, leveraging modern web technologies and includes multilingual support and social media integration. Privacy and cookie policies are prominently implemented with consent mechanisms, reflecting good privacy compliance. Security posture is generally strong with HTTPS enforced, though security headers are not evident and no explicit security or incident response policies are published. WHOIS data is unavailable due to malformed responses, but the website's professional presentation and organizational scope indicate legitimacy. Overall, the site is well-designed, accessible, and trustworthy, serving a large international non-profit federation.

B

Belljar

belljar.com

54

Belljar is an Australian cybersecurity company specializing in advanced web application firewalls, DDoS protection, bot protection, and CAPTCHA/spam filtering solutions. Founded in 2002, the company offers both products and managed services with a focus on protecting legacy applications and providing premium support backed by a 99.999% SLA. The website reflects a professional and consistent brand image, targeting businesses requiring robust web security solutions. Technically, the site uses modern JavaScript libraries and Cloudflare DNS services, indicating a moderate level of digital maturity. However, there are gaps in privacy compliance and security best practices such as missing privacy and cookie policies, lack of DNSSEC, and absence of security headers. The security posture is decent but could be improved with better header implementation and published incident response information. Overall, the website is trustworthy and well-positioned in its niche but would benefit from enhanced compliance and security transparency.

B

Bündnis Kinder- und Jugendreha e.V. (BKJR)

kinder-und-jugendreha-im-netz.de

55

The website 'Kinder- und Jugendreha im Netz' serves as a comprehensive informational portal dedicated to medical rehabilitation for chronically ill children and adolescents in Germany. Operated by the Bündnis Kinder- und Jugendreha e.V. (BKJR) in collaboration with the Deutsche Gesellschaft für Pädiatrische Rehabilitation und Prävention e.V. (DGPRP), it provides detailed guidance on rehabilitation services, clinics, application procedures, and downloadable resources. The platform targets families, medical professionals, and stakeholders involved in pediatric rehabilitation, positioning itself as a trusted non-profit resource within the healthcare sector in Germany. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Flexslider for UI components, Cookiebot for consent management, and Matomo for analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Hosting appears to be managed by monks.de, inferred from tracking domains. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. Tracking includes Facebook Pixel and Matomo, with moderate user tracking balanced by privacy compliance measures. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional, trustworthy, and well-maintained informational resource with a strong focus on pediatric rehabilitation. Strategic improvements could include enhancing security headers, publishing security policies, and expanding contact information to bolster trust and compliance.

G

Gesellschaft für angewandte Psychologie in Architektur und Onkologie e.V.

psycho-onkologie.net

59

Psycho-Onkologie Online is a specialized non-profit organization providing psycho-oncological support services to cancer patients and their families in Germany. The website offers three main services: an online screening tool for psychological burdens related to cancer, a finder to locate qualified psycho-oncologists and therapy options nearby, and an online practice for direct consultation. The platform is positioned as a trusted resource with partnerships and funding from recognized organizations in the healthcare and cancer support sectors. Technically, the website is built on the TYPO3 CMS platform and uses common JavaScript libraries such as jQuery and Modernizr. It integrates Piwik/Matomo analytics for user tracking and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. The WHOIS data is unavailable, which reduces trustworthiness somewhat, but the website content and partner affiliations support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a well-structured, trustworthy resource for psycho-oncological support, with moderate technical maturity and a good privacy posture. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security and compliance standing.

M

MK Netzdienste GmbH & Co. KG

mk.de

61

MK Netzdienste GmbH & Co. KG is a German telecommunications company specializing in providing intelligent network solutions including internet access, VPN, IP telephony, and data center services. The company targets business customers, distribution partners, ISPs, and carriers with a focus on secure, scalable, and innovative communication technologies. Their market position is that of a reputable regional provider with a strong emphasis on customer service and tailored business solutions. The website reflects a mature digital presence with a Joomla CMS platform, modern UIkit framework, and integration of advanced tools such as 3CX cloud telephony and Google reCAPTCHA for security. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is strong with HTTPS, DNSSEC, and no visible vulnerabilities, although some security headers could be improved. Overall, the domain registration is consistent with a legitimate business, despite limited WHOIS data due to DENIC privacy restrictions.

The website paediatrie.at represents the Österreichische Gesellschaft für Kinder- und Jugendheilkunde (ÖGKJ), a well-established Austrian non-profit professional association for pediatricians. It serves as a resource hub for over 2,000 members, providing educational content, event information, newsletters, and a directory of pediatricians and clinics. The site targets healthcare professionals and families seeking pediatric care information in Austria. The business model focuses on professional development and healthcare advocacy within the pediatric sector. Technically, the website is built on Joomla CMS with modern front-end technologies including Bootstrap 5 and jQuery. It integrates several specialized Joomla extensions for events, newsletters, and content sliders. The site is hosted by a reputable Austrian provider (myNET gmbh) and uses HTTPS with a good SSL configuration. Mobile optimization and SEO practices are adequately implemented, though accessibility could be improved. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and includes cookie consent and blocking mechanisms. However, it lacks some recommended security headers and does not provide a security.txt or explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Overall, the website demonstrates a solid security posture and professional digital presence appropriate for a healthcare association. Strategic improvements in security headers, accessibility, and incident response transparency would enhance trust and resilience.

T

TTG Czech Republic

ttg.cz

34

TTG Czech Republic is a Czech media outlet specializing in news, analysis, and inspiration related to the travel and tourism industry. The website offers comprehensive coverage of travel destinations, agencies, transportation, hospitality, events, and industry trends, targeting professionals and enthusiasts in the tourism sector. The site is well-branded and maintains a consistent professional appearance with active social media channels on Facebook, Twitter, and Instagram. Technically, the website is built on WordPress with modern plugins and libraries, including The Events Calendar and WPForms, and uses HTTPS for secure communications. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enabled but missing security headers. Overall, the site is functional, relevant, and trustworthy for its audience but would benefit from enhanced privacy disclosures and security hardening.

ACK.Travel is the official website of the Asociace cestovních kanceláří ČR, a Czech association representing travel agencies. The site provides news, travel information, and resources primarily targeting travel professionals and travelers within the Czech Republic. The content is professionally presented with a clear focus on travel and tourism industry updates and member services. Technically, the website employs common JavaScript libraries such as jQuery and AmCharts for interactive maps and user interface elements, and uses Matomo for analytics tracking. However, the site lacks visible privacy and cookie policies, and no WHOIS data could be extracted due to malformed WHOIS responses, which limits the ability to fully verify domain legitimacy. Security headers and SSL configuration details are not provided in the data, indicating potential areas for improvement in security posture. Overall, the website appears legitimate and professionally maintained but would benefit from enhanced privacy compliance and security transparency.

H

HardyPress SRL

hardypress.com

54

HardyPress SRL operates a specialized WordPress hosting service that transforms WordPress sites into static websites to enhance performance, security, and reduce maintenance overhead. Their market position targets WordPress site owners and agencies seeking fast, secure, and zero-maintenance hosting solutions. The company offers tiered subscription plans including personal, professional, VPS, and enterprise levels, with features such as support for popular WordPress plugins, instant search, and REST API access. The website is professionally designed, mobile optimized, and includes GDPR-compliant privacy and cookie policies via Iubenda. Technically, the site runs on WordPress 4.8.22 with Visual Composer and integrates modern web technologies including jQuery, FontAwesome, Google Tag Manager, and Mailchimp for marketing. The hosting infrastructure is implied to be global with 30 locations using SSD technology for fast delivery. Security posture is strong due to static site generation reducing attack surface, enforced HTTPS, and privacy compliance. However, the absence of explicit security headers and incident response information are areas for improvement. The WHOIS data is incomplete, showing no registrar or registrant information, which raises some legitimacy concerns. Despite this, the website content, business information, and active client area suggest a legitimate and operational business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with moderate business credibility due to WHOIS data gaps. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and resolving WHOIS data transparency to improve trust and compliance posture.

O

Oljearbeidernes Sosiale Ordninger – OSO

oso.as

50

Oljearbeidernes Sosiale Ordninger (OSO) is a Norwegian organization administering social schemes for trade union members working on the offshore oil sector. The website clearly presents its services including health certificates, pension compensation, and a retirement fund for saturation divers. The target audience is union members in the energy sector, specifically offshore workers. The business model is non-profit and focused on social welfare. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and serves its niche audience effectively.

K

Košický samosprávny kraj

kosickazupa.sk

57

Košický samosprávny kraj operates as the official regional government authority for the Košice region in Slovakia, providing a comprehensive digital platform for citizens and stakeholders. The website offers extensive information on governance, social services, culture, health, education, transport, and regional development, positioning itself as a key resource for regional administration and public engagement. The site maintains a strong market position as a trusted government entity with a clear focus on transparency and citizen services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google reCAPTCHA v3, and Hotjar for analytics and user experience enhancement. The site is mobile-optimized, accessible, and SEO-friendly, with secure HTTPS implementation and ISO 27001 certification indicating a mature security posture. Forms are protected with CSRF tokens and reCAPTCHA, ensuring secure data collection. Security-wise, the site demonstrates good practices such as HTTPS enforcement and certified information security management. However, it lacks explicit security headers and a visible incident response or vulnerability disclosure policy, which are recommended for enhanced security transparency and readiness. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance standing.

K

Kinstellar

kinstellar.com

68

Kinstellar is a well-established European law firm founded in 2008, providing a broad range of legal services across Central Europe and Asia. The firm specializes in sectors such as M&A, banking and finance, real estate, energy, data privacy, and healthcare. Their market position is strong with multiple offices and a professional online presence. The website is professionally designed, content-rich, and optimized for user experience with clear navigation and mobile responsiveness. Technically, the site uses modern technologies including JavaScript, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is robust with a detailed cookie consent mechanism and linkage to a comprehensive privacy policy via Cookiebot. Overall, the site is trustworthy and credible, with no signs of malicious activity or adult content.

M

Magyar Játékfejlesztő Egyesület

gamedevday.hu

44

The Budapest Game Dev Day website represents a professional event platform organized by the Magyar Játékfejlesztő Egyesület, targeting the Hungarian game development community. It offers a comprehensive program including presentations, pitch contests, exhibitions, and networking opportunities, positioning itself as a central hub for local developers and industry professionals. The site is built on WordPress with Elementor, integrating modern web technologies and external services for ticketing and analytics. Security posture is adequate with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are missing. The WHOIS data shows an anomalous future creation date, likely a data error, but the website content and external references support legitimacy. Overall, the site is well-designed, user-friendly, and serves its business purpose effectively.

G

Grindstone

grindstone.sk

38

Grindstone is a small boutique videogame production and publishing company based in Slovakia, targeting gamers and industry professionals. The website presents a professional and consistent brand image with a focus on their game titles and services. The technical infrastructure is built on WordPress with modern plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in compliance and security transparency.

B

brand MARINE CONSULTANTS

consultfixed.com

50

Consultfixed.com is a specialized website offering an international marine consultancy services agreement developed by brand MARINE CONSULTANTS. The site targets marine industry clients and consultants, providing a standardized contract to clarify project requirements, deliverables, and financial commitments. The business operates in a niche market with a small company size and a focus on contract clarity and flexibility. Technically, the website is built on the Contao CMS platform, leveraging jQuery, Bootstrap, and Font Awesome for frontend functionality and styling. The site is mobile-optimized with good navigation and SEO practices, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a privacy and cookie policy present but no explicit GDPR statements or terms of service. Contact is limited to a single company email address with no phone or physical address listed. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

PANDI SERVICES J. & K. Brons GmbH is a well-established maritime claims management and P&I club correspondent service provider with a history dating back to 1865. The company operates internationally with multiple offices in Germany, the UK, Singapore, and Indian Ocean regions. It is part of the bMC Group and holds ISO 9001:2015 certification, reflecting a commitment to quality management. Their core services include claims management for ships, cargo, crew, and non-marine incidents, serving shipowners, insurers, and maritime professionals. The website is professionally designed, mobile-optimized, and provides comprehensive contact information and service details.

C

Captain Förster GmbH

captainfoerster.de

47

Captain Förster GmbH is a well-established marine and cargo surveying company operating primarily in Germany with offices in Hamburg and Bremen. Founded in the 1970s, the company serves a global clientele including shipping companies, insurers, freight forwarders, and industrial clients. Their service portfolio is comprehensive, covering a wide range of marine survey and consultancy services. The company is part of the bMC GROUP and holds ISO 9001:2015 certification, underscoring their commitment to quality. The website reflects a professional and trustworthy business presence with clear contact details and compliance with data privacy regulations. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and specialized libraries for UI and cookie management. The site is mobile-optimized and includes a cookie consent mechanism with blocking until acceptance, demonstrating good privacy compliance. Analytics are handled via Matomo, an open-source platform, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses session and CSRF protection cookies. However, there is no explicit security policy or incident response contact information published, which could be improved. Security headers are not explicitly detected in the provided data, suggesting room for enhancement. No vulnerabilities or suspicious content were identified. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and incident response readiness would further strengthen their security posture.

B

bMC GROUP

salvageapp.com

53

SalvageApp is a specialized web application developed and operated by the bMC GROUP, targeting the marine claims sector. It offers a suite of modules designed to improve information flow, cost transparency, project scheduling, risk management, and reporting for marine salvage and insurance claims. The platform is provided complimentary to bMC GROUP clients, positioning it as a value-added service within a niche maritime insurance market. The website presents a professional and consistent brand image with clear contact information and detailed descriptions of its modules and benefits. Technically, the website is built on the Contao CMS with modern frontend technologies including Bootstrap and jQuery. It demonstrates good mobile optimization and user experience, though some SEO and accessibility features are basic. The site uses HTTPS and includes client login functionality, but lacks visible security headers and DNSSEC is not enabled, indicating room for security improvements. Analytics and tracking are implemented via brand-analytics.de, with a basic cookie consent mechanism in place. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the provided data. However, the absence of DNSSEC and security headers suggests moderate security posture. The domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy. Overall, SalvageApp's website is a credible, well-structured platform serving a specialized business audience with a moderate security posture and good business credibility. Strategic improvements in security headers, DNSSEC, and privacy compliance could enhance trust and resilience.

T

TAC360

tac360.ca

47

TAC360 is a specialized online platform dedicated to showcasing Canadian Technology Access Centres (TACs) through curated video content. The website serves as an educational and promotional resource, targeting stakeholders interested in advanced manufacturing, agriculture, clean technology, and other innovation sectors in Canada. It provides a searchable video gallery filtered by sector and region, enhancing accessibility to TAC information. The platform is relatively new, founded in 2021, and operates within the technology industry with a focus on Canadian markets. Technically, TAC360 is built on WordPress with AMP integration for mobile optimization and uses several plugins including Yoast SEO and All-in-One Video Gallery. The site employs HTTPS with a valid SSL certificate and uses Clicky Analytics for visitor tracking. While the site is generally well-structured and mobile-friendly, it lacks some security headers and does not have DNSSEC enabled, which are areas for improvement. From a security perspective, the website demonstrates basic good practices such as HTTPS and domain transfer protection. However, the absence of a privacy policy, cookie consent mechanism, and security headers reduces its privacy compliance and security posture. No critical vulnerabilities or adult content were detected, and the domain registration is privacy protected but consistent with the business profile. Overall, TAC360 presents a professional and trustworthy platform with good content quality and business credibility. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, enabling DNSSEC, and adding a vulnerability disclosure policy to improve compliance and security maturity.

T

Tech-Access Canada

meetthetacs.ca

55

Tech-Access Canada operates as a Canadian non-profit organization providing access to assistive technology through a network of Technology Access Centres (TACs). The website serves as a member portal offering information about TACs, equipment, specialization, and engagement opportunities. The organization targets individuals and entities seeking assistive technology services across Canada, positioning itself as a national resource in this niche. The business model is centered on facilitating access and information rather than direct commercial sales. Technically, the website employs a modern but basic technology stack including jQuery, Bootstrap 4, Kendo UI, and Font Awesome. The site is mobile optimized with good navigation and professional design, though accessibility and SEO features are basic. Hosting and CMS details are not explicitly identified. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided. The WHOIS data shows privacy protection but is consistent with a legitimate small non-profit domain registration. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. The risk level is moderate with no critical vulnerabilities detected but some compliance and security best practices gaps.