Security Directory

C

Capgemini

capgemini.no

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology expertise with deep sector knowledge. The company targets enterprise clients seeking to innovate and transform their business operations digitally. The website reflects a mature digital presence with a professional design, comprehensive content, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern JavaScript frameworks like React, supported by marketing and analytics tools such as Pardot and Google Tag Manager. Security posture is robust, with HTTPS enforced and multiple security headers implemented, alongside clear privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the overall legitimacy of the site. Strategic recommendations include maintaining up-to-date security practices and enhancing incident response visibility.

N

Personlige Navneskilt, Høydemålere & Strikketilbehør i Tre – Håndlaget i Norge

nostenett.no

61

Nøstenett.no is a Norwegian e-commerce website specializing in handcrafted wooden products such as personalized nameplates, height charts, and knitting accessories. The business targets a general audience interested in personalized gifts and craft supplies, positioning itself as a niche artisan retailer within Norway. The website demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and customer chat integration. Security measures include CSRF token implementation in forms, but lack explicit security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the site appears legitimate and functional with a good user experience and mobile optimization, but would benefit from enhanced transparency and security practices.

V

Vinofil Vinkurs

vinforedrag.no

52

Vinofil Vinkurs is a Norwegian small business specializing in wine education through in-person and digital courses, targeting both corporate and private clients. The website presents a professional and consistent brand image with clear offerings such as wine courses at workplaces, private homes, and gift cards. The business is newly established in 2023, and the domain registration aligns with this timeline. The site leverages modern web technologies and analytics tools but lacks critical privacy and security disclosures, which impacts compliance and trustworthiness. No blocking or WAF mechanisms hinder content access, allowing full analysis.

G

Gutta på Haugen

gutta.no

59

Gutta på Haugen is a well-established Norwegian gourmet food retailer, operating both a physical delicatessen store in Oslo and an e-commerce platform serving customers across Norway. The website reflects a mature business with a focus on quality food products and a loyal customer base. Their digital infrastructure includes modern tracking and marketing tools, with a CMS platform customized for retail needs. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Privacy policies and cookie consent mechanisms are present and localized in Norwegian, supporting GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, with moderate technical performance and good mobile optimization.

B

beIN MENA

bein.com

64

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

U

Uhelný mlýn

uhelnymlyn.cz

40

Uhelný mlýn is a Czech Republic-based small business operating a multifunctional event space, contemporary art gallery, and design loft. The website presents the business as a local cultural venue with a focus on events and art exhibitions. The digital infrastructure is built on WordPress with integration of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is professional and functional, but could improve transparency and security documentation.

M

MASMOVIL

masmovil.com

67

MASMOVIL is a major Spanish telecommunications company offering mobile telephony, fiber optic internet, fixed telephony, and television services. The company targets general consumers and businesses in Spain with a business model focused on simple, flexible tariffs and competitive pricing. The website reflects a strong market position with clear branding and comprehensive service offerings. Technically, the site is built on modern frameworks such as Next.js and React, integrated with Contentful CMS and various marketing and payment platforms, ensuring a robust and scalable digital presence. Security posture is solid with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear contact information. However, WHOIS data is inaccessible, limiting domain legitimacy verification.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

J

Journées d'Octobre

journees-octobre.fr

46

Journées d'Octobre is a regional event organizer based in Mulhouse, France, specializing in hosting an annual artisan and creator fair alongside the Folie'Flore floral show. The event attracts a large audience and features numerous exhibitors, restaurants, and entertainment stages, positioning itself as a key cultural and commercial event in the Alsace region. The website effectively promotes the event with detailed information, imagery, and structured data for enhanced search engine visibility. Technically, the site uses modern JavaScript libraries like jQuery, integrates Google Analytics and Facebook Pixel for marketing, and employs HTTPS with a valid SSL certificate, ensuring secure user connections. However, the absence of explicit security headers and limited contact information slightly reduce the security posture. The WHOIS data is unavailable, which is common for .fr domains but reduces transparency. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security policies and contact transparency.

M

Ma planète BIO

maplanetebio.com

60

Ma planète BIO is a regional event organizer focused on organic agriculture, sustainable living, and related cultural activities in South Alsace, France. The website promotes an annual event held at Parc Expo Mulhouse, targeting enthusiasts and professionals interested in organic farming and eco-friendly lifestyles. The business is relatively new, founded in 2022, and operates primarily in French. The website provides event information, exhibitor details, conference schedules, and visitor guidance, positioning itself as a key regional player in the organic agriculture event space. Technically, the website uses a combination of jQuery, Bootstrap, Owl Carousel, and cookie management via tarteaucitron.js. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is hosted by OVH sas, a reputable hosting provider, and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website presents a professional and trustworthy front for a niche event business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

E

Eiffage Infra-Bau SE

eiffage-infra.de

47

Eiffage Infra-Bau SE is a large, well-established infrastructure construction company with over 150 years of experience, operating primarily in Germany and Europe. The company offers a broad range of construction and engineering services including infrastructure, rail, noise protection, and specialized construction sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and comprehensive organizational information. The technical infrastructure is modern and includes GDPR-compliant cookie consent and analytics via Google Tag Manager. Security posture is good with HTTPS enforced and basic security best practices observed, though some HTTP security headers could be improved. Contact information and multiple company locations are clearly provided, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

R

Redback Solutions

rb.com.au

55

Redback Solutions is a well-established digital marketing and web design agency based in Newcastle, Australia, operating since 1999. The company offers a comprehensive range of services including web design and development, ecommerce solutions, SEO, digital marketing, and creative content production. Their market position is strong, supported by multiple industry partnerships and awards such as the 2025 Australian Web Awards. The website reflects a professional and trustworthy digital presence targeting businesses seeking digital growth and online results. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and live chat services, demonstrating a mature digital infrastructure. Performance and mobile optimization are good, with SEO best practices well implemented. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and credible with room for improvement in privacy and security transparency.

P

PlanetHoster

planethoster.live

57

PlanetHoster Forums is an official community platform supporting PlanetHoster's web hosting services. It serves as a hub for customers to discuss maintenance, outages, reviews, tutorials, and technical support. The forum is well-structured, bilingual (primarily French), and actively maintained with thousands of discussions and messages. The website uses modern web technologies including XenForo CMS, jQuery, FontAwesome, and integrates Google Analytics and Tag Manager for analytics. HTTPS is enforced with a valid SSL certificate, and forms include CSRF tokens, indicating a good security baseline. However, some security headers are missing, and no explicit security or incident response policies are published on the forum site. Privacy and terms of service pages are present and linked, showing attention to compliance. The WHOIS data is privacy protected but consistent with an active and legitimate domain. Overall, the site demonstrates a professional and trustworthy presence with a strong community focus.

U

UP&KO

alfieformation.fr

46

Alfie Formation is a French digital marketing training organization founded in 2020 and operating under the legal entity UP&KO. The company offers personalized and actionable digital marketing training programs delivered by a network of over 220 experts across France. Their business model includes matching clients with suitable trainers, organizing training sessions, and facilitating up to 100% financing through OPCO, supported by their QUALIOPI certification. The website is professionally designed, well-structured, and optimized for SEO, targeting professionals and companies seeking digital marketing skills development. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and HubSpot. Security posture is solid with HTTPS, hCaptcha for forms, and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site presents a credible, professional, and user-friendly platform for digital marketing education.

L

LWS

lws-hosting.be

60

LWS is a well-established French web hosting and domain registration company founded in 1999, offering a broad range of services including shared hosting, VPS, dedicated servers, WordPress optimized hosting, email solutions, and cloud storage. The company targets individuals, professionals, and agencies seeking reliable and affordable web presence solutions. Their market position is strong with over 680,000 hosted sites and 800,000 registered domains, supported by ISO 27001 certified datacenters in France. Technically, the website demonstrates a mature digital infrastructure using modern JavaScript libraries, Google Tag Manager, Bing Ads tracking, and cookie consent mechanisms. The site is fast, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. Hosting is self-managed with servers located in France, emphasizing data sovereignty and security. From a security perspective, LWS enforces HTTPS, implements daily backups, and operates ISO 27001 certified datacenters. However, explicit security headers like CSP and HSTS are not detected, and no public vulnerability disclosure or incident response contacts are published, indicating areas for improvement. The WHOIS data for the domain is restricted, which is common for .be domains but slightly reduces transparency. Overall, LWS presents a professional and trustworthy web presence with strong business credibility and technical implementation. The risk profile is low, with recommendations to enhance security headers and publish clearer security policies to further strengthen trust and compliance.

L

LWS

lws-hosting.ca

64

LWS is a well-established French web hosting company with a strong presence in Canada, offering a wide range of hosting services including domain registration, VPS, WordPress hosting, and cloud storage. Founded in 1999, it hosts over 680,000 websites and operates 4500 servers in France, emphasizing performance, security, and customer support. The company targets individuals, enthusiasts, and businesses seeking reliable and affordable web hosting solutions. Technically, the website employs modern technologies such as jQuery, Google Tag Manager, and integrates cookie consent mechanisms, ensuring GDPR compliance. The hosting infrastructure is self-managed with ISO 27001 certified datacenters in France, providing robust security and data protection. Security posture is strong with HTTPS enforced, daily backups, and secure data centers, though some security headers could be improved and a security.txt file added. The website is professional, mobile-optimized, and SEO-friendly, with extensive trust signals including customer reviews and certifications. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, though the overall business credibility remains high.

S

SEMNAUT

semnaut.com

43

SEMNAUT operates as a SaaS platform focused on SEO project management, targeting SEO professionals, agencies, freelancers, and e-retailers. The platform offers features such as position tracking, action management, automated reporting, SEO alerts, and suggestions to improve SEO performance. The website is professionally designed, with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with modern plugins and analytics tools, including Matomo and Google Tag Manager, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks some security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

C

ChatVusyon | Der einfache KI-Chatbot für deine Webseite

chatvusyon.ai

61

ChatVusyon.ai is a small technology company offering an AI chatbot solution designed to enhance website customer support, lead generation, and ensure GDPR compliance. The website is professionally designed using modern tools such as Framer and integrates multiple third-party analytics and marketing technologies including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. While the technical infrastructure is modern and the website is mobile optimized with good SEO practices, there are notable gaps in privacy compliance and security best practices. No privacy or cookie policies are present, and no contact information or security policies are published, which may impact user trust and regulatory compliance. The domain registration uses privacy protection, which is common for startups but reduces transparency. Overall, the website presents a functional and professional front but requires improvements in privacy, security headers, and contact transparency to enhance trust and compliance.

W

whos.amung.us Inc.

amung.us

64

whos.amung.us Inc. operates a web analytics platform offering free and pro-tier real-time visitor statistics and heatmap widgets for websites and blogs. The service targets website owners and bloggers seeking immediate insights into visitor behavior without requiring account registration. The company positions itself as an established player in the web analytics market, with a business model centered on free widget usage complemented by paid Pro features. The website content is professionally designed, consistent, and supported by mentions in reputable technology media outlets, indicating moderate market trust and recognition. Technically, the website employs a modern JavaScript technology stack including jQuery, Bootstrap, Fancybox, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and moderate performance. However, accessibility features are basic and no CMS or hosting provider details are evident. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and no explicit security policies are published. From a security and compliance perspective, the site lacks explicit cookie consent mechanisms and GDPR compliance indicators, which could pose privacy compliance risks. The absence of WHOIS data due to privacy protection reduces transparency but is common for this business type. No incident response or vulnerability disclosure policies are found, limiting the security maturity visibility. Overall, the site is safe with no adult or questionable content, but improvements in privacy compliance and security transparency are recommended. Strategically, whos.amung.us should enhance its privacy and security disclosures, implement cookie consent, and publish incident response and vulnerability disclosure policies to strengthen trust and compliance. Technical modernization focusing on accessibility and security headers would further improve the security posture and user experience.

I

Iskra d.d.

iskra.eu

10

Iskra d.d. is a well-established industrial company specializing in intelligent industrial solutions and electrotechnical products. With over 80 years of history and a workforce of approximately 1650 employees, Iskra serves a broad international market across energy, transportation, manufacturing, and telecommunications sectors. Their product portfolio includes capacitors, low voltage switchgear, measuring instruments, power automation, batteries, antenna systems, and traffic solutions. The company maintains a strong market position supported by subsidiaries and partnerships across Europe, including Croatia and North Macedonia. Technically, the website is built on a modern CMS platform (BCMS) with integration of popular technologies such as Bootstrap, Google Analytics, and JivoSite chat. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some technical improvements are recommended, particularly in security headers and accessibility compliance. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and explicit security or incident response policies. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance, though a dedicated privacy policy page was not found. The domain WHOIS data is privacy protected, which is typical for European companies, and no suspicious patterns were detected. Overall, Iskra presents a credible and professional online presence with moderate technical maturity and room for security enhancements. Strategic recommendations include strengthening security headers, publishing comprehensive privacy and security policies, and enhancing accessibility features to align with best practices and regulatory requirements.

I

ISTRABENZ PLINI d.o.o.

istrabenzplini.hr

11

Istrabenz plini d.o.o. is a Croatian energy company specializing in the supply of technical gases, LPG in bottles and tanks, natural gas, and innovative energy solutions. As part of the international SIAD Group, it holds a strong market position in Croatia, serving households, industrial clients, and public institutions. The company emphasizes sustainability and modern energy technologies. The website reflects a mature digital presence built on WordPress with modern SEO and user experience practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Contact and business information is transparent and comprehensive, supporting trust and credibility.

I

Intra Lighting

intra-lighting.com

10

Intra Lighting is a globally recognized provider of architectural luminaires and smart lighting solutions, positioning itself as a significant player in the lighting market. The company targets professional audiences such as architects, lighting designers, and commercial clients, offering B2B manufacturing and distribution services. The website reflects a professional and consistent brand image with multi-language support, enhancing its global reach. Technically, the site leverages a mature technology stack including DotNetNuke CMS and AngularJS, integrated with modern analytics and marketing tools managed through Google Tag Manager. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements in security headers and accessibility could be made. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website's professional presentation and compliance features suggest a trustworthy business. Overall, the site demonstrates good digital maturity and business credibility with moderate technical and security robustness.

I

Impol

impol.si

33

Impol is a well-established Slovenian aluminum manufacturing group with a strong presence in Europe and the USA. The company specializes in producing a wide range of aluminum products serving diverse industries such as automotive, pharmaceutical, food, transport, and aerospace. Their market position is strong, being the 6th largest Slovenian exporter and a leader in aluminum rod production in Europe. The website reflects a mature digital presence with multilingual support, detailed product and industry information, and a focus on sustainability and innovation. Technically, the site uses WordPress with modern libraries and integrates Google Analytics and Tag Manager for tracking, alongside a comprehensive cookie consent mechanism. Security posture is good with HTTPS and reCAPTCHA in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

GIC

gic.si

43

GIC is a well-established Slovenian construction company specializing in a wide range of building and infrastructure services, including industrial, commercial, and residential projects. With over 33 years of experience and more than 1000 completed projects, they maintain a strong market position as experts in their field. Their integrated business model includes in-house laboratories, concrete plants, and quarries, enabling comprehensive project management and execution. The website reflects a professional and modern digital presence, leveraging technologies such as Bootstrap, Leaflet, and Google Tag Manager for analytics and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

F

Fragmat

fragmat.eu

54

Fragmat is a medium-sized manufacturing company specializing in insulation solutions for modern construction and related industries. The company holds a leading market position in Slovenia and is recognized across Europe for its high-quality thermal insulation, waterproofing, radiant heating, and packaging products. The website reflects a professional business with clear product offerings and references to significant projects, targeting construction professionals and industry clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers and explicit security policies are absent. The domain WHOIS data is privacy protected by EURid, which is typical for European domains and justified for this business type. No suspicious patterns were found. Contact information is transparent and consistent with the company brand. Privacy and cookie policies are present and indicate GDPR compliance. Overall, Fragmat's digital presence is solid, supporting its business credibility and market position. Security and privacy practices are adequate but could be enhanced with additional policies and technical controls.

D

Dunapack Packaging

dunapack-packaging.com

66

Dunapack Packaging is a large European manufacturer specializing in customized corrugated cardboard packaging solutions, operating 24 plants across 12 countries. The company is part of the Prinzhorn Group and emphasizes sustainability and circular economy principles in its business model. The website is professionally designed, multilingual, and provides comprehensive information about products, locations, and corporate values. Technically, the site is built on TYPO3 CMS with modern front-end frameworks and integrates Google Tag Manager and analytics tools with user consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly but the overall corporate presence and transparency mitigate concerns. Contact information is clear and extensive, supporting business credibility.

D

DAT – CON d.o.o.

dat-con.com

51

DAT – CON d.o.o. is a medium-sized technology company specializing in defense and security products, including advanced surveillance systems, anti-drone technology, thermal and SWIR cameras, pan-tilt units, and specialized software solutions. The company targets government agencies and security organizations, positioning itself as a niche player in the defense technology sector. The website presents a professional and consistent brand image with detailed product offerings and a clear focus on innovation and quality. Technically, the website is built on WordPress using the Avada theme and includes modern plugins such as Yoast SEO and Slider Revolution. Google Analytics and Tag Manager are used for analytics and marketing purposes. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and explicit privacy and cookie policies. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks security headers and incident response contact information. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer domain registration transparency.

Č

Čazmatrans - Nova d.o.o.

cazmatrans.hr

53

Čazmatrans - Nova d.o.o. is a Croatian transportation company specializing in bus services within Croatia and international routes. The website provides an online ticket purchasing platform targeting general travelers and commuters. The company has a medium-sized presence with multiple subsidiaries and a well-established market position since 2012. The website is professionally designed with good navigation, mobile optimization, and relevant content focused on transportation services. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google services like Tag Manager and Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, cookie consent implemented, and secure payment logos displayed, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

Crowe LLP is a large, established public accounting and consulting firm specializing in audit, tax, and consulting services for public and private entities. The website reflects a mature digital presence with comprehensive service descriptions, industry insights, and a strong emphasis on client engagement. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, Google Tag Manager, and TrustArc for privacy compliance, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is notable but does not detract from the professional presentation and trustworthiness of the site. Overall, Crowe LLP demonstrates a high level of digital maturity and compliance with privacy regulations.

C

Comark - Project Logistics Company

comark-logistics.com

50

Comark is a specialized project logistics company based in Slovenia, focusing on the transportation and packing of cargo worldwide. The company offers a range of services including project cargo handling, heavy and oversized transport, government and defence logistics, cargo packing, permits and escorts, and relocation and assembly. With over 25 years of experience in oversize load logistics and ISO 9001:2015 certification, Comark positions itself as a reliable and knowledgeable partner in complex logistics projects. The website reflects a professional and consistent brand image targeting businesses requiring specialized logistics solutions globally. Technically, the website is built on WordPress using a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and WPML for multilingual support. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security measures include HTTPS, reCAPTCHA for forms, and cookie consent mechanisms; however, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. The security posture is solid but could be enhanced by implementing DNSSEC, security headers, and publishing a formal security policy and incident response contacts. Privacy compliance is basic but present, with clear cookie and privacy policies and GDPR compliance indicators. Contact information is comprehensive and clearly presented, enhancing business credibility. No signs of malicious activity or suspicious domains were found, and the domain registration details align well with the business claims, supporting legitimacy. Overall, Comark's digital presence is professional and trustworthy, with good business credibility and moderate technical maturity. Strategic improvements in security and privacy transparency would further strengthen their posture and trustworthiness.

Colliers Finland Oy is a leading global real estate advisory and consultancy firm, providing expert services in the Finnish market. The company positions itself as a world leader in real estate advisory, targeting professionals, investors, and clients seeking comprehensive property services. Their website reflects a mature digital presence with multiple language and regional versions, indicating a broad international footprint. The business model focuses on professional services including property management, investment advisory, and consultancy, catering to an enterprise-level clientele. Technically, the website is built on the Sitecore CMS platform, leveraging modern technologies such as Google Tag Manager, Google Analytics, and OneTrust for privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a clean and professional design. Security measures include HTTPS enforcement, Cloudflare Turnstile captcha for bot mitigation, and cookie consent management, demonstrating a strong security posture. While the WHOIS data for the domain is unavailable, which is unusual for a large enterprise, the website's professionalism and trust signals mitigate concerns. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the site presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing transparency around data retention to further strengthen trust and compliance.

C

Coface

coface.si

62

Coface Slovenia is a leading credit insurance and risk management company supporting business growth by offering credit insurance, debt collection, and business information services. Established in 1946 and part of the global Coface Group, it serves a broad B2B audience across Slovenia and internationally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information. Technically, the site uses modern frameworks such as Symfony and is hosted on AWS infrastructure, with integrations for consent management and analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, GDPR compliant, and well-optimized for SEO and accessibility.

C

Claus Møller Consulting

clausmoller.com

52

Claus Møller Consulting is a small, specialized consulting and training organization focused on developing General Business Excellence for companies, teams, and individuals. Their services emphasize improving productivity, relationships, quality, leadership, and management at multiple organizational levels. The company is well established with a domain registered since 2002 and operates primarily from Slovenia. The website is professionally designed using WordPress with Divi theme and integrates e-commerce and learning management systems to support their training offerings. Technically, the site employs modern web technologies and third-party services such as Google Analytics, Zoho SalesIQ, and social media tracking pixels, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy policy or terms of service found. Overall, the website presents a trustworthy and professional image with room for improvement in security and privacy transparency.

Aquafil is a well-established company specializing in the production of Polyamide 6 and pioneering circular business models in the textile and clothing sector. The company positions itself as a leader in sustainable textile manufacturing with a focus on environmental responsibility. Their website reflects a mature digital presence built on WordPress, incorporating modern technologies such as Google Tag Manager and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, demonstrating a commitment to GDPR compliance. However, explicit contact details such as emails and phone numbers are not directly provided, relying instead on a contact form for communication. The WHOIS data for the domain is unavailable or indicates the domain may not be registered, which is inconsistent with the company's claimed history and raises questions about domain registration transparency. Security posture is generally strong with HTTPS enforced and cookie consent implemented, but additional security headers and explicit security policies could enhance trust. Overall, the website is professional and trustworthy, but the domain registration ambiguity warrants further investigation.

R

Robert Bosch Stiftung

deutsches-schulportal.de

54

Deutsches Schulportal is a German educational platform affiliated with the Robert Bosch Stiftung, focusing on improving school quality through articles, dossiers, expert opinions, and events. The website serves educators, school leaders, and policymakers with rich, well-structured content and practical resources. Technically, the site is built on WordPress with modern SEO and performance optimizations, including WP Rocket and Yoast SEO, and integrates analytics and consent management tools. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and contact information are lacking. Overall, the site is professional, trustworthy, and well-positioned in the German education sector.

C

chiliSCHARF GmbH

chilischarf.studio

55

chiliSCHARF GmbH operates a professional photography studio specializing in industrial, advertising, business portrait, and food photography services primarily in Austria. The company targets businesses and professionals requiring high-quality visual content for marketing, catalogs, online shops, and corporate branding. Their website demonstrates a strong market position as a specialized regional service provider with a comprehensive portfolio and clear contact channels. Technically, the website is built on TYPO3 CMS with Bootstrap framework, ensuring a modern, responsive, and accessible user experience. The site integrates advanced consent management via Usercentrics and tracking tools like Leadinfo and Google Tag Manager, reflecting a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to excellent content quality and navigation clarity. From a security perspective, the site uses HTTPS and employs email obfuscation to protect contact details. However, no explicit security headers or published security policies were detected, and WHOIS data is unavailable, which slightly reduces domain trustworthiness. Cookie consent mechanisms and GDPR compliance indicators are present, but incident response and vulnerability disclosure information are missing. Overall, the website presents a professional, trustworthy, and user-friendly platform for chiliSCHARF GmbH's photography services. The main risk lies in the lack of WHOIS transparency and limited visible security policies, which should be addressed to enhance trust and compliance.

S

Sinklar Conference Management B.V.

wco-iof-esceo.org

10

The website www.wco-iof-esceo.org represents the 26th World Congress on Osteoporosis, Osteoarthritis and Musculoskeletal Diseases, a globally recognized clinical congress organized by reputable healthcare organizations IOF and ESCEO. The event targets healthcare professionals and researchers in musculoskeletal health, offering a comprehensive scientific program and various engagement opportunities such as abstract submissions and awards. The site is professionally designed using Drupal 10, with good mobile optimization and accessibility features. It includes GDPR-compliant cookie consent mechanisms and clear contact information, enhancing user trust and compliance. However, the absence of WHOIS data limits domain trust assessment, and security headers are not detected, suggesting room for security improvements.

I

International Osteoporosis Foundation

buildbetterbones.org

39

Build Better Bones is a non-profit educational website operated by the International Osteoporosis Foundation, providing global resources to individuals diagnosed with osteoporosis, their caregivers, and those seeking prevention strategies. The site offers comprehensive guidance on exercise, nutrition, and home safety to support bone health. The website is well-branded, professionally designed, and clearly targeted at a healthcare audience with a focus on osteoporosis education. Technically, the website is built on Drupal 9, leveraging modern web technologies including Google Tag Manager and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are present and linked to the parent foundation's domain, indicating good privacy compliance. However, explicit security policies and incident response information are not published. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. No vulnerabilities or suspicious domains were found. WHOIS data is unavailable due to privacy protection, which is justified given the non-profit nature of the organization. Overall, the site demonstrates a trustworthy and professional presence with minor areas for security enhancement. The overall risk is low, with recommendations focusing on improving security headers, publishing security policies, and adding vulnerability disclosure information to enhance transparency and trust.

I

International Osteoporosis Foundation

fundamentals-osteoporosis.org

10

The Fundamentals of Osteoporosis website is operated by the International Osteoporosis Foundation, a reputable non-profit organization based in Switzerland. The site offers specialized educational courses aimed at healthcare professionals to enhance their knowledge and clinical skills in osteoporosis diagnosis and management. The business model centers on providing training and certification, positioning itself as a key resource in osteoporosis education globally. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome for a responsive and accessible user experience. The site includes a cookie consent mechanism compliant with GDPR standards and integrates Google Tag Manager for analytics. Performance and SEO optimizations are moderate to good, with clear navigation and mobile responsiveness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers in the provided HTML. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which limits domain trust verification; however, the website content and branding strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained platform for osteoporosis education. Strategic improvements in security headers and WHOIS transparency could further enhance trust and compliance.

I

International Osteoporosis Foundation

iofacademy.org

40

IOF Academy is a specialized e-learning platform dedicated to osteoporosis and bone health education, operated by the International Osteoporosis Foundation. It offers a range of CME accredited courses designed by global experts, targeting healthcare professionals and researchers. The platform is well-branded, professionally designed, and provides comprehensive educational content with certificates of achievement. Technically, the website is built on Drupal 10 with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness, supported by its association with a reputable international foundation.

V

Verband binationaler Familien und Partnerschaften Leipzig

binational-leipzig.de

55

The Verband binationaler Familien und Partnerschaften Leipzig is a non-profit organization focused on supporting binational families and partnerships, operating primarily in Leipzig with nationwide relevance in Germany. Their services intersect family, migration, and education policy, providing advisory and support functions. The website reflects a professional and consistent brand image with clear contact information and a cookie consent mechanism, indicating attention to privacy compliance. Technically, the site is built on WordPress using modern themes and plugins, including Bootstrap and Google Tag Manager, hosted likely by 1&1 IONOS. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is trustworthy and well-maintained, serving a specialized non-profit audience.

Y

Young Entrepreneurs in Science

youngentrepreneursinscience.com

10

Young Entrepreneurs in Science (YES) is a well-established non-profit educational program based in Germany, focused on equipping master’s students, doctoral candidates, and postdocs with entrepreneurial skills through free workshops and training programs. Supported by government ministries and business partners, YES aims to foster a cultural shift in science towards entrepreneurship and innovation. The website reflects a professional and consistent brand presence with clear messaging and a strong partnership ecosystem, including the Falling Walls Foundation as a parent organization. Technically, the site is built on WordPress with modern technologies and integrates multiple analytics and marketing tools, though it lacks a cookie consent mechanism and some security headers. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by adding security policies and incident response contacts. Overall, the website is trustworthy, well-designed, and serves its target audience effectively.

F

Falling Walls Foundation

berlinscienceweek.com

65

Berlin Science Week is a well-established annual science and culture festival organized by the Falling Walls Foundation, showcasing hundreds of free events across Berlin. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. It targets a broad audience including researchers, students, and the general public interested in science. The technical infrastructure is modern, leveraging Drupal 10 CMS, Bootstrap, and various analytics and consent management tools. Security posture is good with HTTPS enabled and consent mechanisms in place, though some security headers could be improved. The domain is long-standing and consistent with the organization's history, enhancing trustworthiness. Overall, the website demonstrates strong compliance with privacy regulations and offers a rich user experience.

C

Creative Bureaucracy Festival

creativebureaucracy.org

62

Creative Bureaucracy Festival is a well-established international event focused on public sector innovation, attracting thousands of participants from government and civil society. The website is professionally designed using Drupal 10, with modern analytics and consent management tools implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC and security headers could be improved. The domain registration data aligns well with the festival's founding and operations, indicating legitimacy. Overall, the website effectively supports the festival's mission and audience engagement.

A

ACADEMIA d.o.o.

lahko.si

46

Lahko.si is a Slovenian educational platform dedicated to promoting lifelong learning through various educational programs, including live and online courses. The platform is supported by recognized educational entities such as ACADEMIA d.o.o. and ACS, positioning it as a reputable resource in the Slovenian education sector. The website offers video content with accessibility features like captions and transcripts, enhancing user engagement and inclusivity. Technically, the site is built on Drupal 10 with modern front-end technologies, ensuring a responsive and accessible user experience. However, explicit privacy policies and terms of service are not readily found, which may impact user trust and compliance. Security posture is moderate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and incident response contacts. Overall, the platform is a credible educational resource with room for improvement in privacy and security transparency.

W

Webtasy, d.o.o.

teachxr.si

45

teachXR.si is a Slovenian educational project focused on integrating advanced XR (virtual, augmented, and extended reality) technologies into primary and secondary schools. The project aims to transform educational processes by equipping teachers with knowledge and tools to develop XR content, establishing learning laboratories across Slovenia, and creating digital learning materials. The website serves as an informational platform for the project, targeting educators and students within the Slovenian education system. Technically, the site is built on WordPress using the Divi child theme, with performance optimizations via LiteSpeed Cache and tracking implemented through Google Tag Manager. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professionally designed and content-rich but would benefit from enhanced privacy compliance and security best practices.

C

Center RS za poklicno izobraževanje

nok.si

10

The website nok.si serves as the official portal for the Slovensko ogrodje kvalifikacij (SOK), the national qualifications framework of Slovenia. It provides a comprehensive system for classifying qualifications across 10 levels based on learning outcomes. The portal targets individuals, employers, and educational institutions, offering tools such as qualification registers, level determination applications, and educational resources. The site is operated by the Center RS za poklicno izobraževanje, a recognized Slovenian educational entity, and is well-positioned as a national authoritative source for qualification information.