Security Directory

F

Fornybar Norge

fornybarnorge.no

63

Fornybar Norge is a Norwegian nationwide interest and employer organization dedicated to the renewable energy sector. The organization focuses on promoting renewable energy across Norway, offering numerous courses, conferences, publications, and research projects to support the energy industry. Their market position is strong within the Norwegian renewable energy sector, serving industry professionals and stakeholders. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and marketing tools, and uses a CMS likely based on Episerver. The site is well-optimized for mobile and accessibility, with good SEO practices. Security-wise, the website enforces HTTPS, uses reCAPTCHA Enterprise, and manages cookie consent via Cookiebot, reflecting a mature security posture. However, explicit security policies and vulnerability disclosures are absent. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable due to Norid's privacy policies. Strategic recommendations include enhancing security transparency and publishing incident response information.

F

Finans Norge

finansnorge.no

10

Finans Norge is a prominent employer and industry organization representing approximately 250 financial companies and around 50,000 employees in Norway. It operates as one of the largest associations within the Norwegian Confederation of Enterprise (NHO), providing advocacy, industry news, events, and member services tailored to the financial sector. The website serves as a comprehensive resource for industry updates, political work, statistics, and consumer information related to banking, insurance, and financial services. Technically, the website is built on a modern CMS platform (likely Episerver), utilizing advanced analytics tools such as Google Analytics, Microsoft Application Insights, and Siteimprove Analytics. It employs Google Tag Manager and Cookiebot for marketing and privacy compliance, and integrates Google reCAPTCHA Enterprise to secure user input forms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to mitigate bot abuse, and manages cookie consent effectively. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a public WHOIS record is standard for Norwegian .no domains and does not detract from the site's legitimacy. However, the site lacks a published security policy or vulnerability disclosure program, which could enhance trust. Overall, Finans Norge's website is a professional, trustworthy, and well-maintained platform that effectively supports its role as a leading financial industry association in Norway. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen stakeholder confidence.

K

KnowledgeOwl

knowledgeowl.com

67

KnowledgeOwl is a technology company specializing in knowledge base software designed to help teams create, organize, and deliver knowledge efficiently. The company positions itself as a trusted provider with advanced features such as AI authoring, semantic search, and SAML SSO authentication, targeting business teams and organizations seeking to improve customer support and internal knowledge management. The website demonstrates a mature digital presence with professional design and modern technology usage, including Framer for site building and integration of analytics and consent management tools. Security posture is generally good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly that impacts trustworthiness. Overall, the site is professional and functional, but the domain registration inconsistency warrants further investigation.

D

Deutsche Herzstiftung e.V.

herzstiftung.de

65

Deutsche Herzstiftung e.V. is Germany's largest independent non-profit organization dedicated to providing information and support to patients and interested parties in the field of heart diseases. The website serves as a comprehensive resource for patient education and awareness, positioning itself as a trusted authority in cardiology-related health information. The organization operates primarily in the healthcare and non-profit sectors, targeting patients and the general public seeking reliable heart health information. Technically, the website is built on Drupal 10, leveraging modern web technologies including Cloudflare for DNS and CDN services, Google Tag Manager for analytics, Cookiebot for cookie consent management, and Eye-Able for accessibility enhancements. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS, employs cookie consent with granular user controls, and integrates bot protection via hCaptcha. While explicit security headers are not fully visible in the HTML, the overall posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie management. Overall, the website presents a professional, trustworthy, and user-friendly platform aligned with its mission. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party libraries, and expanding contact information transparency to further strengthen user trust and compliance.

E

▷ Umfragetool | KI-Auswertung | Kostenlos | DSGVO-konform

easy-feedback.de

57

Easy-Feedback.de is a German-based online survey tool provider offering AI-powered survey evaluation with a focus on GDPR compliance. The website targets businesses and organizations seeking secure and privacy-conscious feedback solutions. Technically, the site is built on WordPress using Elementor and Yoast SEO, with performance and mobile optimization rated as good. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security policies and contact information for incident response. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

T

Triniti

triniti.eu

56

Triniti is a leading Pan-Baltic law firm providing comprehensive legal advisory services across Estonia, Latvia, and Lithuania. With a team of over 90 professionals, the firm targets corporate clients and businesses seeking expert legal counsel in areas such as corporate law, intellectual property, sustainability, and venture capital. The website reflects a strong market position with professional branding and multilingual support, catering to a diverse regional audience. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

G

GOG.com

gog.com

11

GOG.com is a prominent digital distribution platform specializing in DRM-free PC games, offering a wide selection of classic and new titles for Windows, Mac, and Linux. Owned by CD Projekt, it holds a strong market position in the gaming e-commerce sector, emphasizing user-friendly policies such as a 30-day money-back guarantee and free extras. The website is well-designed, mobile-optimized, and provides a seamless user experience with clear navigation and professional branding. Technically, it leverages modern web frameworks like Angular and integrates Google Tag Manager and Cookiebot for analytics and compliance. Security posture is robust with HTTPS, security headers, and consent mechanisms in place, though explicit security policies and incident response contacts are not publicly visible. WHOIS data is unavailable due to registrar restrictions, but the domain and brand legitimacy are well-established. Overall, the site demonstrates a mature digital infrastructure and trustworthy business model.

W

World Challenge Game

worldchallengegame.com

62

World Challenge Game is an innovative company offering a hybrid board game integrated with a mobile app and Artificial Intelligence, targeting both traditional board game players and digital gamers worldwide. Their business model includes physical game sales, a free mobile app, NFT avatar collections, and upcoming merchandise with royalty incentives. The company has established partnerships and a registered trademark with EUIPO, supporting its international ambitions. Technically, the website uses modern frameworks like Next.js and React, hosted on AWS infrastructure, with good mobile optimization and basic SEO. Security posture is solid with HTTPS and security headers, though DNSSEC is not enabled and privacy policies are missing, indicating areas for compliance improvement. Overall, the website is professional and trustworthy, with moderate user tracking and advertising practices. Strategic recommendations include adding privacy and terms policies, enabling DNSSEC, and enhancing accessibility and SEO.

M

Mava

mava.app

10

Mava is a technology company specializing in providing ticket bot support solutions for online communities across platforms such as Discord, Telegram, Slack, Web Chat, and Email. Their SaaS platform aims to streamline community support with AI-powered features, shared inboxes, analytics, and team collaboration tools. The website presents a professional and consistent brand image with a clear focus on community support automation. Technically, the site is built on Webflow and integrates modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is free from adult or questionable content and targets general online community managers and support teams.

M

MNFORCE, s.r.o.

mnforce-panel.sk

49

MNFORCE, s.r.o. operates the ePanel online survey platform targeting Slovak internet users interested in participating in paid surveys. The platform rewards users with points convertible to money or sweepstakes entries, positioning itself as an active player in the Slovak market research sector with over 49,000 members. The website content is professionally presented in Slovak language with clear navigation and relevant business information. Technically, the site uses common web technologies including jQuery, Google Analytics, Cookiebot for cookie consent, and Lucky Orange for user behavior analytics. The site is served over HTTPS with a functional cookie consent mechanism, indicating a moderate level of digital maturity.

Webout is a technology company specializing in personalized and interactive video marketing solutions designed to convert passive viewers into active customers. Their platform enables brands to create real-time personalized video campaigns that enhance engagement and conversion rates. The company demonstrates a strong market position with multiple client case studies, awards, and a consistent brand presence. Technically, the website is built on modern frameworks such as Next.js and React, integrating advanced tracking and consent management tools like Cookiebot and Smartlook. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, Webout presents a professional, trustworthy, and technically mature digital presence.

S

STORE MEDIA, s. r. o.

storemedia.eu

54

STORE MEDIA, s. r. o. is a small Slovakian company specializing in sensory marketing solutions including aroma marketing, in-store radio, digital signage, and POS advertising. The company positions itself as an expert in sensory marketing, targeting retail and marketing professionals seeking to enhance customer experience through multi-sensory engagement. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technical infrastructure is based on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for GDPR compliance. The site implements HTTPS with good security headers and a comprehensive cookie consent mechanism, reflecting a mature approach to privacy and security. However, WHOIS data is not publicly available due to EURid privacy policies, which is common for .eu domains and does not detract from the site's legitimacy. Overall, the website demonstrates a solid digital presence with good privacy and security practices.

G

GROWYO consulting s.r.o.

growyo.cz

51

Growyo consulting s.r.o. is a Czech-based marketing consultancy specializing in sustainable brand development and AI-enhanced marketing strategies. The company offers a full spectrum of marketing services including strategy, creative design, campaign activation, and AI-powered content production. Their market position is niche, focusing on long-term sustainability and innovative marketing solutions. The website is built on WordPress with Elementor, showing a modern and professional digital presence. Security posture is good with HTTPS and cookie consent implemented, but lacks some security headers and formal privacy and terms policies. WHOIS data is unavailable, which slightly impacts trust but the website content and contact information are consistent and professional. Overall, the site demonstrates a mature digital infrastructure with room for improvement in compliance and security transparency.

A

ACCIONA Energía

acciona-energia.com

69

ACCIONA Energía is a leading global renewable energy company exclusively focused on sustainable energy solutions. The website presents a comprehensive portfolio of renewable technologies including wind, solar, hydroelectric, biomass, and emerging solutions like green hydrogen and electric mobility. The company positions itself as a pioneer in decarbonization with a strong commitment to innovation and environmental impact. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and marketing tools such as Google Analytics, Hotjar, TikTok, and Twitter tracking, alongside robust cookie consent management via Cookiebot. Security posture is strong with HTTPS, reCAPTCHA, and consent mechanisms, though explicit security headers should be verified. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for large enterprises. Overall, the site is professional, well-structured, and compliant with GDPR, targeting businesses and consumers interested in renewable energy solutions.

E

ENERCON

enercon.de

63

ENERCON is a leading manufacturer and service provider specializing in onshore wind turbines and integrated green energy solutions. The company positions itself as a pioneer in wind energy, offering a comprehensive portfolio that spans turbine manufacturing, service and maintenance, SCADA remote monitoring, training, and energy marketing and financing. Their website reflects a mature digital presence with professional design, multilingual support, and clear navigation aimed at business customers and stakeholders in the renewable energy sector. Technically, the website leverages modern technologies including Webflow CMS, Cookiebot for consent management, and Matomo for privacy-focused analytics. Hosting is managed via Netlify for staging and Azure DNS for domain services, indicating a robust infrastructure. Performance and mobile optimization are good, with accessibility and SEO practices well implemented. From a security perspective, the site enforces HTTPS and uses Cookiebot to manage cookie consent, enhancing privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are published. There is no vulnerability disclosure or security.txt file, which could improve transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong business credibility score. Recommendations include enhancing security headers, publishing security policies, and providing clearer incident response contacts to further strengthen the security posture and user trust.

L

LAMA ENERGY GROUP

lamagroup.cz

54

LAMA ENERGY GROUP is a large, established business operating primarily in the energy sector with diversified activities including oil and gas extraction, telecommunications, geological exploration, industrial manufacturing, and trade in petroleum products. The company serves both households and businesses across multiple countries including the Czech Republic, Slovakia, Canada, USA, and Mongolia. Their business model focuses on long-term partnerships and reliable service delivery. Technically, the website is built on WordPress with modern scripts such as jQuery, Cookiebot for cookie consent, and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and multimedia content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or privacy policies, which could be improved. Overall, the domain WHOIS data is privacy protected, which is common and justified for this business type. The website shows no signs of malicious activity or suspicious content, and the business credibility is high based on content and presentation.

N

NorthStandard

north-standard.com

58

NorthStandard is a marine insurance provider specializing in Protection & Indemnity (P&I) coverage, positioning itself as one of the largest P&I clubs within the International Group. The company targets marine industry professionals including ship owners and operators, offering specialized insurance services. The website reflects a professional and consistent brand image with a focus on marine insurance services. Technically, the site employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, Hotjar for analytics, Adobe Typekit, and Google Fonts, hosted under a reputable registrar IONOS SE. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS implied, clientTransferProhibited domain status, and cookie consent mechanisms in place; however, DNSSEC is not enabled and no explicit security headers or incident response policies are found. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

P

PF Forsikring

pfforsikring.no

64

PF Forsikring is an insurance provider affiliated with the Norwegian Police Federation, offering specialized insurance products tailored to police officers and related personnel in Norway. The website presents a professional and focused service offering, targeting a niche audience within the government sector. The digital infrastructure leverages modern technologies such as EPiServer CMS, Google Tag Manager, Cookiebot for consent management, and Azure Application Insights for monitoring, indicating a moderate level of digital maturity. Security posture is generally strong with HTTPS enforced and cookie consent implemented, though the absence of explicit privacy policies and terms of service pages suggests room for improvement in compliance documentation. The lack of WHOIS data limits the ability to fully verify domain registration legitimacy, but the website's branding and content strongly indicate a legitimate and professional operation. Overall, the site is well-designed, accessible, and trustworthy for its intended audience.

A

Akademiet

akademiet.no

69

Akademiet is a Norwegian educational institution offering a range of schooling options including secondary schools, private candidate schools, primary schools, and exchange programs. The website positions Akademiet as a leading and future-oriented school in Norway, targeting students and parents seeking quality education. The digital infrastructure is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, indicating a mature and well-maintained technical environment. The site is mobile-optimized, uses HTTPS, and includes a cookie consent mechanism, reflecting good privacy and security awareness. However, the absence of visible privacy and terms of service pages and the lack of WHOIS transparency slightly reduce trust. Overall, the security posture is solid with no critical vulnerabilities detected, but improvements in security headers and incident response disclosures are recommended.

G

Gamma Group

nimsys.nl

67

Nimsys, a subsidiary of Gamma Group, is a specialized ICT service provider based in the Netherlands, focusing on business IT solutions such as internet connectivity, cloud telephony, network services, and security. The company targets businesses seeking reliable and high-quality workspace IT infrastructure. Their market position is strengthened by partnerships with notable clients and ISO 27001 certification, reflecting a commitment to security and quality. Technically, the website is built on WordPress with modern optimization tools like NitroPack and uses standard tracking and consent technologies, indicating a mature digital presence. Security posture is strong with HTTPS, DNSSEC, and adherence to privacy regulations, though incident response contact details and vulnerability disclosure mechanisms could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

G

Gamma

gammacom.es

10

Gamma is a Spanish telecommunications operator specializing in communication and collaboration services for businesses. Their offerings include virtual PBX (centralita virtual Centrex), IP telephony, CRM integrations, Microsoft Teams telephony, and contact center solutions. The company targets enterprises seeking unified communication solutions with professional support and advanced analytics. The website reflects a medium-sized, established business with a professional digital presence and active content updates. Technically, the site is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA, though some security headers and explicit privacy policies are missing. Overall, Gamma demonstrates a trustworthy and credible online presence with room for improvement in compliance documentation and security best practices.

G

Gamma Communications

gammagroup.co

71

Gamma Communications is a UK-based telecommunications and communications services provider focused on empowering businesses through effective communication solutions. The company positions itself as a trusted partner in the B2B telecommunications sector, offering a range of services designed to support good business practices. The website reflects a professional and consistent brand image, targeting business customers seeking reliable communication services. Technically, the site is built on WordPress and optimized with NitroPack, leveraging a modern tech stack including multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for consent management. The site demonstrates good performance and mobile optimization, with structured data enhancing SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Privacy compliance is moderate due to the lack of a visible privacy policy and terms of service. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility compliance to further strengthen the website's security and compliance posture.

G

Gaidelis

gaidelisklasika.lt

47

Gaidelis is a Lithuanian brand specializing in traditional crispy crackers and biscuits, with a heritage dating back to 1969. The website presents the brand's products, emphasizing original recipes and new mini cracker offerings. The site targets general consumers interested in traditional Lithuanian snacks and operates an e-commerce platform powered by WooCommerce. The domain is relatively new but consistent with the brand's local presence. Technically, the website uses a modern WordPress CMS with popular plugins and frameworks, ensuring a good user experience and mobile optimization. Cookie consent is managed via Cookiebot, reflecting attention to privacy compliance. Security posture is good with HTTPS enabled, though some security headers could be improved. No explicit privacy or terms of service pages were found, and contact information is not directly visible in the HTML content. Overall, the site is professional, trustworthy, and well-positioned in its niche.

N

No Brakes Games

nobrakesgames.com

52

No Brakes Games is a Lithuania-based game development studio known primarily for its innovative physics-based games, including the popular Human: Fall Flat series. The company operates a professional website built on WordPress, showcasing its games, studio culture, and career opportunities. The site targets gamers, industry professionals, and potential employees, emphasizing creativity and unique gameplay experiences. The business model centers on game development and publishing, with a medium-sized team and a solid market position in the gaming industry. Technically, the website employs a modern technology stack including WordPress 6.8.3, Foundation CSS framework, and various JavaScript libraries for UI and interactivity. Hosting is provided by Hostex, with Google Analytics integrated for traffic analysis and Cookiebot managing GDPR-compliant cookie consent. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating areas for improvement. No exposed sensitive data or vulnerable libraries were found. The absence of explicit security policies or incident response contacts suggests a need for enhanced transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and maintaining regular audits of third-party scripts to strengthen security posture and user trust.

N

Nordcurrent

nordcurrent.com

68

Nordcurrent is a medium-sized game development company founded in 2008, specializing in creating and publishing games across multiple platforms including Steam, GOG, Epic Store, Playstation, and Xbox. The company targets gamers and developers, positioning itself as an established player in the technology and media sectors. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable third-party services such as Cookiebot for cookie consent and Google Analytics for traffic analysis. Hosting is provided by Amazon AWS, ensuring reliable infrastructure. Security posture is good with HTTPS enforced, domain registration locks, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner supporting GDPR. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security disclosures and accessibility.

N

Nimbus Hosting Ltd

nimbushosting.co.uk

72

Nimbus Hosting Ltd operates a UK-focused premium managed web hosting platform targeting agencies and freelancers. Their website emphasizes managed WordPress hosting backed by UK-based support, positioning them as a specialized hosting provider in the UK market. The company has been established since 2011, indicating a mature presence in the hosting industry. Their business model centers on providing reliable, managed hosting services with a focus on performance and customer support. Technically, the website is built on WordPress with a modern tech stack including Font Awesome, Yoast SEO, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good mobile optimization and SEO practices, with moderate performance. Integration with marketing and analytics tools like HubSpot, Ortto, FullStory, and LinkedIn Insight Tag reflects a mature digital marketing infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a published security policy, incident response information, or vulnerability disclosure reduces transparency. Contact information is limited to contact forms without explicit emails or phone numbers. Overall, the website is professional, trustworthy, and well-structured, with a strong UK market focus. The main risks relate to incomplete privacy and security policy disclosures and limited direct contact information. Strategic improvements in these areas would enhance compliance and trust.

W

White Shark

whiteshark.gg

55

White Shark is an e-commerce website targeting gamers who are passionate about gaming but constrained by budget limitations. The site offers gaming equipment aimed at this niche market. Technically, the website is built using modern web technologies including Nuxt.js, Google Analytics, and Cookiebot for cookie consent management. The site demonstrates good design quality, mobile optimization, and basic SEO practices. However, it lacks critical compliance documents such as privacy policy and terms of service, and does not provide explicit contact information, which impacts trust and compliance. Security posture is moderate with HTTPS implied but no visible security headers or incident response policies. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.

S

Span

span.eu

10

Span.eu is a professional IT services company focused on empowering businesses through technology, people, and processes to leverage digital transformation. The website presents a modern, well-structured digital presence with a clear business focus on IT consulting and digital solutions. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, Hotjar, and Cookiebot for consent management, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and use of reCAPTCHA; however, the absence of explicit security headers and security policy pages suggests room for improvement. The lack of visible WHOIS data due to privacy protection is typical for European domains and does not raise immediate concerns. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in privacy and security policies.

B

Bangor University

bangor.ac.uk

73

Bangor University is a well-established higher education institution in the United Kingdom, offering undergraduate and postgraduate education alongside world-leading research. The website reflects a professional and consistent brand presence, targeting prospective and current students as well as the academic community. The technical infrastructure is modern, leveraging Drupal 10 CMS and integrating multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and TikTok Pixel. The site is mobile optimized and demonstrates good SEO and accessibility practices, although accessibility could be further improved. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of explicit security headers, security policies, incident response contacts, and vulnerability disclosure information suggests room for improvement in security transparency and maturity. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and technical indicators support a generally trustworthy profile. Overall, Bangor University's website is functional, professional, and secure at a basic level, with extensive user tracking and marketing integrations. Strategic enhancements in privacy policy visibility, security disclosures, and WHOIS transparency would strengthen trust and compliance posture.

B

Barona Group Oy

gamesjobs.fi

66

Games Jobs Finland operates as the largest job portal dedicated to the gaming industry in Finland, connecting game companies with candidates seeking employment opportunities. The platform is owned by Barona Group Oy, a Finnish company with a transparent domain registration dating back to 2013, indicating a stable and established presence in the market. The website's content and services focus on job listings and facilitating connections within the gaming sector, targeting professionals and job seekers in Finland. The business model is primarily a digital job portal, leveraging modern web technologies and integrations to serve its audience effectively. Technically, the website is built on WordPress with WooCommerce and the Divi theme, supported by Google Tag Manager and Cookiebot for analytics and cookie consent management. Hosting is provided via Amazon AWS infrastructure, as indicated by the nameservers. The site demonstrates good SEO practices, mobile optimization, and a professional design, contributing to a positive user experience. However, some areas such as accessibility and explicit security headers could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms that deny ad personalization by default, reflecting a privacy-conscious approach. The absence of DNSSEC and explicit security policies or incident response contacts are areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data aligns well with the business claims, supporting the site's legitimacy. Overall, Games Jobs Finland presents a trustworthy and professionally maintained platform with a solid market position in the Finnish gaming job market. Strategic recommendations include implementing DNSSEC, enhancing security headers, publishing clear privacy and security policies, and maintaining vigilance on third-party scripts to further strengthen security and compliance.

V

VIDEO GAMES EUROPE

videogameseurope.eu

73

Video Games Europe is an established industry association representing the European video games sector since 1998. The organization focuses on advocacy, supporting the creative and economic potential of the sector, and promoting responsible gaming experiences. The website reflects a professional digital presence built on WordPress with the Divi theme, incorporating modern web technologies and SEO best practices. While the site is well-structured and visually consistent, it lacks visible privacy and terms of service policies, as well as explicit contact information, which are important for trust and compliance. Security posture is adequate with HTTPS and cookie consent mechanisms, but could be improved by adding security headers and vulnerability disclosure information. Overall, the domain WHOIS data is privacy protected, which is typical for such organizations, but limits verification of domain age and registrant details.

C

CD PROJEKT

cdprojekt.com

70

CD PROJEKT is a prominent global digital entertainment company headquartered in Poland, known primarily for its game development studio CD PROJEKT RED and the digital distribution platform GOG. The company specializes in creating high-profile video games such as the Witcher series and Cyberpunk 2077, positioning itself as a leader in the interactive entertainment industry. The website reflects a mature digital presence with comprehensive content tailored to gamers and digital consumers. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain introduces a minor trust concern, but overall the site demonstrates professionalism and compliance with privacy regulations. Strategic recommendations include publishing detailed privacy and security policies and improving transparency around incident response.

A

Anex Tour GmbH GmbH

anextour.com

60

Anex Tour GmbH GmbH operates as a travel agency based in Düsseldorf, Germany, specializing in affordable package holidays including flights, hotels, and transfers. The website targets German-speaking travelers seeking all-inclusive vacation packages with flexible cancellation options. The company presents itself professionally with consistent branding and clear contact information, positioning itself as a medium-sized player in the hospitality sector. Technically, the website leverages modern technologies such as Google Tag Manager, Cookiebot for consent management, and Cloudflare for DNS and hosting services. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The use of structured data enhances search engine visibility and provides clear business information. From a security perspective, the site employs HTTPS with anonymized IP tracking in Google Analytics and a manual blocking mode for cookie consent, indicating a good privacy posture. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious patterns were detected. Overall, the website is safe, trustworthy, and compliant with GDPR requirements, with extensive user tracking managed via consent. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and compliance.

S

Seeding Alliance GmbH

seeding-alliance.de

64

Seeding Alliance GmbH operates a leading native advertising platform targeting the DACH region, reaching up to 80 million people with innovative advertising formats. The company positions itself as a key player in the media and digital marketing sector, offering native advertising solutions to advertisers and marketers. Their website is built on WordPress, enhanced with SEO and multilingual capabilities, reflecting a mature digital infrastructure. The use of Cookiebot for consent management and integration of Google Analytics and Meta advertising tools indicates a modern approach to user tracking and marketing analytics. Security posture is adequate with HTTPS enabled and cookie consent implemented, though improvements in security headers and explicit security policies are recommended. Overall, the website is professional, well-branded, and trustworthy, with extensive tracking and advertising technologies in use. No critical vulnerabilities or compliance gaps were detected in the accessible content.

S

Seeding Alliance GmbH

nativendo.de

64

Seeding Alliance GmbH operates a specialized native advertising self-booking platform targeting advertisers and marketers who want to create native ad campaigns efficiently. The company positions itself as a flexible solution provider in the media sector, offering a self-service platform that simplifies native advertising campaign management. The website is professionally designed with consistent branding and good content quality, primarily in German with English alternatives. Technically, the site is built on WordPress with Yoast SEO for optimization, Cookiebot for GDPR-compliant cookie consent, and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is good with cookie consent but lacks a visible privacy policy and terms of service on the analyzed page. No direct contact information is found on the page, which could impact user trust. Overall, the site is trustworthy, safe, and well-optimized for its business purpose.

D

DAB Pumps Spa

internetofpumps.com

48

DAB Pumps Spa operates a professional website offering digital remote control solutions for residential and commercial water pump systems under the DConnect brand. The company leverages its expertise in pumps combined with digital services to provide real-time monitoring and control, targeting both professional and private users. The website reflects a mature market position with a clear business model focused on product and service integration, supported by mobile applications and digital platforms. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, reCAPTCHA, and Cookiebot, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS, consent mechanisms, and anti-bot protections, though improvements in security headers and explicit security policies are recommended. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

D

DAB PUMPS SPA

esyboxline.com

51

DAB PUMPS SPA operates the esyboxline.com website, offering innovative water pressure booster systems and digital water management solutions. The company positions itself as a leader in energy-efficient water pressurisation products, targeting installers and commercial/residential building services. The website is well-structured, multilingual, and showcases award-winning products, reflecting a strong market presence and commitment to innovation. Technically, the site is built on WordPress with modern libraries like Swiper.js and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

M

marbis GmbH

nitrado.net

63

Nitrado, operated by marbis GmbH, is a technology company specializing in providing instant and affordable game server rental services. The website targets gamers and gaming communities seeking reliable hosting solutions. The company appears to have a medium-sized operation with a professional online presence, leveraging modern web technologies such as Nuxt.js and Tailwind CSS to deliver a responsive and user-friendly experience. Analytics and tracking tools like Google Tag Manager, Segment, Microsoft Clarity, and Sentry are integrated for performance monitoring and user insights. Security posture is generally strong with HTTPS enforced, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the website is safe, professional, and well-structured, but would benefit from enhanced privacy compliance and clearer business contact information.

W

Wasserturm Hotel Cologne

wasserturm-hotel-cologne.com

66

Wasserturm Hotel Cologne is a hospitality business offering unique hotel accommodation and bar services located in the heart of Cologne, Germany. The website presents a professional and visually appealing experience targeting travelers and tourists seeking authentic city experiences. The business positions itself as a boutique hotel with panoramic city views, catering to a niche market segment. Technically, the website is built on the Webflow platform, leveraging modern technologies such as Google Tag Manager, Adobe Tag Manager, Mapbox, and Cookiebot for analytics, marketing, and privacy compliance. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data raises concerns about domain legitimacy, although the website content and branding appear consistent and professional. Overall, the site shows moderate digital maturity with room for improvement in transparency and security documentation.

E

ESGO - European Society of Gynaecological Oncology

esgo.org

68

The European Society of Gynaecological Oncology (ESGO) operates a professional website serving healthcare professionals and researchers in the field of gynaecological oncology. The site provides information about annual meetings, position statements, and educational resources, positioning ESGO as a leading European society in its domain. The website is well-branded, professionally designed, and targets a specialized audience in healthcare. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and integrates essential SEO and analytics tools including Yoast SEO, Google Analytics, and Facebook Pixel. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and appropriate security headers present, though explicit incident response and security policy pages are absent. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site demonstrates a mature digital presence with good privacy and security practices but could improve transparency by publishing contact and security-related information.

P

PLAION

plaion.com

69

PLAION is a prominent independent developer and producer in the gaming and entertainment industry, operating multiple development studios and publishing units globally. Founded in 2021 and headquartered in Germany, PLAION offers game development and publishing services under well-known subsidiaries such as Koch Media, Deep Silver, Prime Matter, and Ravenscourt. The company targets gamers and entertainment consumers worldwide, positioning itself as a leading player in the media sector. Technically, the PLAION website is built using modern web technologies including Angular and Material Design components, with a focus on responsive design and user experience. The site employs Cookiebot for cookie consent management, indicating a commitment to privacy compliance. Hosting and domain registration are managed through reputable providers, with domain registration details consistent with the company's profile. From a security perspective, the website enforces HTTPS and implements clientTransferProhibited status on the domain, enhancing trustworthiness. However, explicit security policies and incident response contacts are not publicly available, and DNSSEC is not enabled, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected during analysis. Overall, PLAION demonstrates a strong business and technical foundation with good privacy compliance and a professional web presence. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture and trustworthiness of the online presence.

B

Bahnhit

bahnhit.de

68

Bahnhit.de is an online travel booking platform specializing in affordable city trips that include train and hotel packages, targeting German-speaking travelers. The website presents a professional and consistent brand image with a clear focus on transportation and hospitality sectors. The platform leverages modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for consent management, ensuring a good level of digital maturity. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy and professionally maintained, with extensive use of third-party advertising and analytics services.

C

Craq Design Studio S.R.L.

craqdesignstudio.it

54

Craq Design Studio S.R.L. is a small digital agency based in Bologna, Italy, specializing in web design, UX/UI, graphic design, social media marketing, SEO, digital marketing, and multimedia production. The company targets businesses and professionals seeking comprehensive digital marketing solutions in the local and regional market. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on WordPress, leveraging modern tools such as Google Tag Manager, Cookiebot for GDPR compliance, and analytics platforms like Google Analytics and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS with DNSSEC enabled and implements cookie consent mechanisms, though it lacks explicit security headers and a published security policy. No vulnerabilities or blocking mechanisms were detected, indicating a solid security posture for a small agency. Overall, the website is trustworthy, compliant with privacy regulations, and professionally presented.

4

4Players GmbH

4players.io

61

4Players GmbH is a technology company specializing in scalable real-time voice, data, and server solutions primarily targeting gaming platforms and developers. The company positions itself as a niche provider offering essential infrastructure services to enhance gaming communication and data handling. The website reflects a professional and consistent brand image with clear messaging about its core services. The target audience is B2B clients in the gaming industry seeking real-time communication solutions. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Matomo for analytics, and Cookiebot for privacy compliance. The site is well-optimized for mobile devices and includes SEO best practices such as meta tags and Open Graph data. Performance is moderate with asynchronous loading of scripts and font preloading. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, explicit security headers like CSP and HSTS are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website and domain appear legitimate and professionally maintained, though the WHOIS data is privacy protected, which is common for tech companies. The absence of direct contact information and terms of service pages slightly reduces transparency. Strategic improvements in security headers and publishing security policies would enhance trust and compliance.

F

Fondazione Bologna Welcome

bolognawelcome.com

59

Fondazione Bologna Welcome operates the official tourism portal for Bologna and its metropolitan area, providing comprehensive information on places to visit, events, activities, and hospitality services. The website serves tourists and visitors with multilingual support, ticketing, and merchandise sales, positioning itself as a key resource for tourism promotion in the region. The site is well-branded, professionally designed, and supported by official government and regional partners, enhancing its market credibility. Technically, the website leverages modern web technologies including Angular 15, integrates analytics and consent management tools such as Microsoft Clarity and Cookiebot, and employs security best practices with HTTPS and security headers. The site is optimized for mobile devices and accessibility, ensuring a positive user experience across platforms. From a security perspective, the site demonstrates a strong posture with enforced HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks a public vulnerability disclosure policy and explicit incident response contacts, which are recommended for enhanced security transparency. Overall, the website presents a low risk profile with high trustworthiness and professionalism. The absence of WHOIS data slightly reduces domain trust but is mitigated by the site's official nature and strong partner ecosystem. Strategic recommendations include publishing a vulnerability disclosure policy and incident response information to further strengthen security and compliance.

P

Planning

planning.it

52

Planning is an established Italian company specializing in the organization of congresses and events, primarily in the scientific, associative, and corporate sectors. Founded in 1988 in Bologna, the company has over 35 years of experience and offers services including event organization, training, and consulting. The website reflects a mature business with a clear market position and a commitment to sustainability, evidenced by its ISO 20121 certification. The target audience includes scientific communities, associations, and corporate clients seeking professional event management and educational services. Technically, the website is built on WordPress with modern libraries such as jQuery and FontAwesome, and it employs Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No explicit privacy policy or terms of service were found, which is a compliance gap. Overall, the website is trustworthy and professional but could improve in privacy transparency and security hardening.

C

CME

cme.net

63

CME is a prominent media and entertainment company operating across multiple Central and Eastern European countries, including Bulgaria, Croatia, the Czech Republic, Romania & Moldova, Slovakia, and Slovenia. The website presents a professional and modern digital presence built on the Framer platform, utilizing Google Tag Manager for analytics and Cookiebot for cookie consent management. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The site lacks visible privacy policies and terms of service, which are critical for compliance and user trust. Security posture appears moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in technical security controls. Overall, the website serves its business purpose well but requires enhancements in compliance, security, and transparency to strengthen trust and reduce risk.

U

UK P&I Club

ukpandi.com

78

UK P&I Club is a well-established mutual marine insurance organization providing protection and indemnity insurance to shipowners, charterers, and offshore operators. The website reflects a mature business with a strong market position, offering a broad range of insurance products and risk management services. The company emphasizes safety, compliance, and sustainability, supported by a global network and a AAA S&P rating. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections in place. The site demonstrates good privacy compliance with clear cookie consent mechanisms and GDPR adherence. WHOIS data is unavailable, which is a minor concern, but the overall trustworthiness and professionalism of the site mitigate this. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance transparency and trust.

T

TT Club

ttclub.com

71

TT Club operates as a leading provider of insurance and risk management services tailored to the international transport and logistics industry. The website presents a professional and enterprise-grade digital presence, leveraging TYPO3 CMS and integrating modern consent management tools such as Cookiebot and Cloudflare Turnstile for bot detection. The site is optimized for mobile and includes comprehensive cookie consent categories, reflecting a commitment to privacy compliance. However, the absence of explicit privacy policy and terms of service pages, as well as missing contact information, limits transparency. The WHOIS data is notably absent or inaccessible, raising concerns about domain registration legitimacy despite the professional front-end presentation. Security posture is strong with HTTPS and consent mechanisms, but could be improved with additional security headers and published security policies.

U

UK P&I Club

thomasmillerspecialty.com

71

UK P&I Club is a well-established mutual marine insurance provider specializing in Protection & Indemnity (P&I) insurance, with a dedicated Fixed Premium division for smaller ships. The website reflects a professional maritime insurance business with clear service offerings, including claims management handled by Thomas Miller Claims Management. The site is built on TYPO3 CMS and integrates modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and Google reCAPTCHA for form security. The security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. WHOIS data is unavailable, which slightly impacts trust but the overall legitimacy is supported by consistent branding and professional content. The site is accessible with no WAF or blocking detected, and content is safe for general audiences.