Security Directory

M

Miami International Holdings, Inc.

miaxoptions.com

62

Miami International Holdings, Inc. operates a global exchange group providing access to U.S. and international capital markets through multiple electronic exchanges specializing in options, equities, futures, and international securities. The company leverages award-winning technology platforms to deliver superior customer service tailored to financial market participants. The website reflects a mature business with a broad market presence and a diverse product portfolio. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses advanced charting libraries such as Highcharts. It integrates Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized and offers good navigation and content quality, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. However, there is a lack of visible security headers and no published security or incident response policies. Privacy compliance is minimal with no explicit privacy or cookie policies detected on the main page. The absence of WHOIS data raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the website presents a professional and credible business front but should improve transparency around domain registration and privacy compliance to enhance trust and security posture.

E

Elisa Eesti AS

elisa.ee

60

Elisa Eesti AS is a leading telecommunications provider in Estonia, offering a comprehensive range of services including mobile and fixed internet, telephony, TV packages, and digital applications. The company targets private consumers with a strong e-commerce platform for devices and accessories. The website reflects a mature digital presence with modern technologies such as Drupal CMS and Angular framework, ensuring fast performance, mobile optimization, and good accessibility. Security posture is robust with HTTPS enforcement, security headers, and secure login mechanisms, although no public vulnerability disclosure or incident response contacts were found. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies aligned with GDPR. Overall, the website demonstrates high professionalism, trustworthiness, and market leadership.

L

Luminor Bank AS

luminor.lv

46

Luminor Bank AS operates a comprehensive banking website targeting private individuals and businesses in Latvia, offering a wide range of financial services including loans, savings, insurance, and internet banking. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and Google analytics tools integrated, alongside a robust cookie consent mechanism powered by OneTrust. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. However, explicit incident response contact details and vulnerability disclosure mechanisms are not found, representing an area for improvement. Overall, the website reflects a mature digital presence suitable for a large financial institution with high trustworthiness and good user experience.

S

SA Tallinna Lauluväljak

lauluvaljak.ee

46

Tallinna Lauluväljak is a well-established event venue and cultural site in Tallinn, Estonia, operating since 2010. The organization offers rental services for event spaces, furniture, and equipment, alongside visitor services such as a visitor center and park attractions. The website is professionally designed using Drupal CMS, with integration of modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and provides clear navigation and relevant content for event organizers and visitors. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though security headers are not explicitly detected. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. Contact information is clearly provided, enhancing business credibility.

W

Wunderkraut

wunder.io

76

Wunder is a Finnish digital solutions company specializing in digital transformation, software development, data analytics, and cloud hosting services. Established in 2012, the company serves a diverse client base including public sector organizations and enterprises, positioning itself as a trusted partner in delivering user-centered digital services. The website reflects a mature digital presence with comprehensive content, client success stories, and clear service offerings. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on reliable platforms with Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be explicitly added. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital maturity level.

R

Recticel

recticel.com

61

Recticel is a well-established insulation company focused on sustainable thermal and acoustic solutions, targeting investors, customers, and partners in the energy sector. The website demonstrates a mature digital presence with comprehensive content, investor relations, and sustainability reporting. Technically, the site uses Drupal CMS with modern libraries and includes GDPR-compliant cookie consent and security measures such as HTTPS and Google reCAPTCHA. However, the absence of WHOIS registration data is unusual and warrants monitoring, though the website's content and linked domains strongly support legitimacy. Security posture is good but could be improved by adding more security headers and publishing a formal security policy or incident response information. Overall, the site is professional, trustworthy, and well-optimized for users and compliance.

E

Elisa Eesti AS

starman.ee

60

Elisa Eesti AS is a leading telecommunications company in Estonia, providing a broad range of services including mobile and fixed internet, telephony, TV packages, and e-commerce for devices and accessories. The company targets private customers with a comprehensive portfolio of digital services and applications, positioning itself as a market leader with a strong brand presence and multiple industry recognitions. The website reflects a mature digital infrastructure built on Drupal CMS and custom Elisa design systems, offering good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, security headers, and a robust cookie consent mechanism, although explicit security policy and incident response contacts are not publicly detailed. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR requirements, supporting Elisa Eesti AS's reputation as a reliable telecommunications provider.

E

Eesti Rahva Muuseum

erm.ee

48

Eesti Rahva Muuseum (ERM) is a prominent national museum in Estonia dedicated to preserving and showcasing Estonian ethnography, culture, and history. Operated under the Estonian Ministry of Education and Research, ERM offers a wide range of exhibitions, educational programs, events, and visitor services including a restaurant and retail shop. The museum targets a broad audience including the general public, educators, researchers, and cultural enthusiasts, positioning itself as a leading cultural institution in Estonia. Technically, the website is built on Drupal CMS with modern web technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. It integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel, demonstrating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA on forms to prevent abuse. However, it lacks some security headers that could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through a GDPR-compliant privacy policy, though a cookie consent mechanism is not clearly present. Overall, ERM's website reflects a professional, trustworthy, and well-maintained digital presence suitable for a government cultural institution. The domain registration aligns with the official entity, reinforcing legitimacy. Strategic improvements in security headers and cookie consent transparency could further strengthen the site's security and compliance posture.

V

Voetbalmedia B.V.

voetbal.nl

67

Voetbal.nl is a well-established online platform dedicated to amateur football in the Netherlands, operated by Voetbalmedia B.V. It serves a broad audience including players, referees, coaches, and supporters by providing match results, standings, schedules, and multimedia content. The platform is closely affiliated with the KNVB, the Dutch football association, reinforcing its market position as a trusted source for amateur football information. Technically, the website leverages modern web technologies including Drupal CMS, Google Analytics, Google Tag Manager, and various advertising networks, ensuring a robust and scalable infrastructure. The site is mobile-optimized and incorporates consent management for privacy compliance. Security-wise, the platform enforces HTTPS, uses reCAPTCHA for login forms, and includes standard security headers, reflecting a mature security posture. However, explicit security policies and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website demonstrates a strong balance of business credibility, technical maturity, and privacy compliance, making it a reliable resource for its target audience.

T

TIPSA

tip-sa.com

65

TIPSA is a well-established logistics and urgent parcel delivery company operating primarily in Spain and Portugal, offering a wide range of services including express deliveries, healthcare logistics, eCommerce specialized shipping, and international transport. The website is professionally designed using Drupal CMS, with modern technologies and good mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place. However, the WHOIS data is missing or inconsistent, which raises concerns about domain registration legitimacy. Overall, the website presents a trustworthy and professional front but requires verification of domain registration details to fully confirm legitimacy.

B

BIODERMA

bioderma.lt

61

BIODERMA is a dermatological skincare brand operating under the NAOS group, targeting consumers in Lithuania with a focus on sensitive skin, children, and sun protection products. The website is professionally designed using Drupal CMS and integrates modern marketing and review tools such as Google Tag Manager and Yotpo. Privacy policies are present and GDPR compliant, though explicit contact and security incident response information are not readily found. The site is accessible without WAF or blocking mechanisms, indicating good availability. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website demonstrates a mature digital presence with good security posture but could improve transparency in contact and security policies.

I

Industrial Railways Company

industrialrailways.com

46

Industrial Railways Company is a specialized general engineering contractor focused on railroad track construction, maintenance, and related services primarily in Northern California and Nevada. Established in 1956, it is one of the oldest firms in its sector in the region, offering a comprehensive range of services including design, engineering, emergency repairs, and transloading logistics through its subsidiary Industrial Transloading. The company targets businesses requiring railroad infrastructure solutions and logistics support. Technically, the website is built on Drupal CMS with standard web technologies including jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. The presence of legacy font replacement technology (Cufon) suggests some outdated front-end practices. From a security perspective, the site uses HTTPS (assumed from external Google Analytics scripts loaded over HTTPS), but lacks visible security headers and does not provide privacy or cookie policies, which are critical for compliance and user trust. No incident response or security contact information is provided. The absence of WHOIS registration data for the domain is a significant red flag impacting trust and legitimacy assessment. Overall, while the business content and presentation are professional and relevant, the lack of domain registration transparency and privacy compliance measures pose risks. Strategic improvements in security posture, privacy policy implementation, and domain registration verification are recommended to enhance trust and compliance.

U

UAB Vestaka

vestaka.lt

52

UAB Vestaka is a Lithuanian freight forwarding and logistics company established in 1999, specializing in rail and road transport services. The company has a solid market position in Lithuania, offering comprehensive logistics solutions including freight forwarding, terminal services, insurance, and consulting. Their website is professionally designed, multilingual, and provides detailed information about their services and wagon fleet. Technically, the site is built on Drupal CMS with standard web technologies and integrates Google Analytics and Facebook Pixel for tracking. Security posture is good with HTTPS enforced, but could be improved by adding security headers and updating legacy libraries. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the company demonstrates credible business operations with transparent contact information and active industry participation.

K

Kamieninių ląstelių bankas

klb.lt

28

Kamieninių ląstelių bankas (KLB) is a Lithuanian healthcare service specializing in stem cell banking, particularly umbilical cord blood stem cells. The website positions itself as a trusted provider affiliated with the international brand Vita 34, offering storage and consultation services to families interested in preserving stem cells for future medical use. The site targets parents and healthcare consumers in Lithuania and neighboring countries, providing educational content and testimonials to build trust. Technically, the website is built on the Drupal CMS platform, utilizing jQuery, Facebook SDK, and Google Analytics for tracking. The design is professional and content-rich, though mobile optimization and accessibility features are basic. The site lacks HTTPS, which is a significant security concern, and no privacy or cookie policies are present, indicating gaps in compliance with modern data protection standards. Security posture is weak due to the absence of HTTPS and security headers, and redundant analytics scripts suggest some technical oversight. The WHOIS data is unavailable due to query limits, preventing verification of domain registration details, which reduces trustworthiness from a domain legitimacy perspective. Overall, while the business appears legitimate and professionally presented, the lack of HTTPS and privacy compliance, combined with missing WHOIS transparency, pose risks. Strategic improvements in security, privacy, and technical hygiene are recommended to enhance trust and compliance.

I

Ignitis grupė

etic.lt

68

Ignitis grupė is a prominent energy company focused on building a 100% green and secure energy ecosystem in Lithuania. The website reflects a professional and modern digital presence, leveraging Drupal CMS and integrating advanced cookie consent mechanisms to ensure GDPR compliance. The company targets energy consumers and stakeholders interested in sustainable energy solutions, positioning itself as a leader in the green energy sector. The site includes comprehensive cookie and privacy policies, demonstrating a commitment to user privacy and regulatory adherence. However, explicit contact information and detailed security policies are not readily visible in the provided content. The technical infrastructure is robust, with use of Google Analytics and Tag Manager for data-driven insights, and Cookiebot for consent management. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in publishing incident response and vulnerability disclosure information. Overall, the website is trustworthy and well-structured, supporting the company's market position and business objectives.

U

UAB Ignitis

ignitis.lt

71

UAB Ignitis operates as the largest electricity and gas supplier in Lithuania, serving over 1.6 million customers nationwide. The company offers a broad range of energy services and positions itself as a provider of smart energy solutions. The website content is professionally presented in Lithuanian, targeting both residential and business customers within Lithuania. The business model focuses on energy supply and related services, with a strong market position as the leading energy provider in the country. Technically, the website is built on the Drupal CMS platform and integrates multiple modern technologies including Google Tag Manager, Cookiebot for cookie consent management, and various analytics and marketing tools such as Hotjar, Gemius, VWO, and MailerLite. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident in the analyzed content, and the jQuery version used is outdated, which could pose security risks. There is no publicly available security policy or incident response contact information, and no vulnerability disclosure program is detected. Overall, the website is legitimate and professionally maintained, with strong privacy compliance and business credibility. The absence of WHOIS data limits domain registration analysis, but the business presence and content quality support a high trust level. Strategic improvements in security headers, updated libraries, and published security policies would enhance the security posture and trustworthiness further.

M

Monks

mediamonks.com

77

Monks is a large, award-winning digital content, data, media, and technology agency focused on delivering innovative marketing solutions driven by AI and digital transformation. Their website demonstrates a high level of digital maturity with modern technologies including Drupal CMS, advanced JavaScript frameworks, and integrations with analytics and marketing platforms such as Google Tag Manager, mParticle, and Zaius. The site is professionally designed, mobile-optimized, and rich in multimedia content, reflecting a strong brand presence and market position. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. The absence of WHOIS data is notable and may indicate privacy protection or registration inconsistencies, but the overall trust signals from awards and social media presence support legitimacy. Privacy compliance could be improved by publishing clear privacy and terms of service policies. Overall, Monks presents as a credible and professional digital marketing powerhouse with room for enhanced transparency in privacy and security disclosures.

S

Sobha Realty

sobharealty.com

75

Sobha Realty is a leading luxury real estate developer based in the United Arab Emirates, specializing in high-end apartments, penthouses, villas, and investment properties primarily in Dubai. The company positions itself as a premium brand focused on craftsmanship, thoughtful design, and signature quality, targeting affluent buyers and investors in the UAE real estate market. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, supporting its market position effectively. Technically, the site is built on Drupal CMS, leveraging modern JavaScript libraries and multiple analytics and marketing tools, indicating a well-developed digital infrastructure. Security posture is good with HTTPS enforced and anti-clickjacking measures, though improvements such as enabling DNSSEC and adding security.txt could enhance trust further. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website and domain registration data indicate a legitimate, professional business with a strong online presence and good security hygiene.

B

Baker Hughes

bakerhughesds.com

55

Baker Hughes is a leading energy technology company focused on advancing energy solutions that are safer, cleaner, and more efficient. The company offers a broad portfolio of services and technologies including energy transition, hydrogen technologies, carbon capture, emissions abatement, and AI-driven energy operations. Positioned as a large enterprise in the energy sector, Baker Hughes targets industry professionals, investors, and customers seeking innovative energy solutions. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the website is built on Drupal CMS and integrates modern technologies such as Google Tag Manager and OneTrust for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data detected. However, explicit security policies and incident response information are not published, which could be improved. Overall, the security and privacy compliance are good, with clear privacy and cookie policies and consent mechanisms in place. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given the professional presentation and verified contact information. Strategic recommendations include publishing security policies, adding vulnerability disclosure information, and enhancing transparency around data protection roles. This analysis suggests Baker Hughes maintains a robust online presence aligned with its enterprise stature, though there are opportunities to enhance security transparency and compliance documentation.

E

Exponent

exponent.com

69

Exponent is a premier scientific and engineering consulting firm delivering multidisciplinary insights to address complex challenges across various industries including energy, transportation, manufacturing, and healthcare. Their website reflects a mature digital presence with comprehensive service descriptions and a professional design that targets businesses seeking expert consulting services. The technical infrastructure is built on Drupal CMS with integrations such as Google Tag Manager and OneTrust for privacy compliance, indicating a modern and privacy-aware digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published, representing an area for improvement. Overall, the website is trustworthy and professional, but the lack of WHOIS registration data introduces some uncertainty about domain legitimacy, warranting further verification.

D

Digitaliseringsdirektoratet

difi.no

72

Digitaliseringsdirektoratet (Digdir) is the Norwegian government agency responsible for driving efficient, user-oriented, and coordinated digitalization of the public sector. The agency focuses on increasing participation, value creation, and innovation within public services. The website reflects a mature digital presence with comprehensive content targeting public sector entities, citizens, and businesses interacting with government digital services. It offers guidance on digital architecture, information security, innovation, and digital inclusion, positioning itself as a central authority in Norway's digital transformation efforts. Technically, the website is built on Drupal CMS, leveraging modern front-end frameworks like Bootstrap and FontAwesome icons, and integrates multimedia content via Vimeo. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and structured content. Analytics are implemented via Siteimprove, indicating a focus on performance and user experience monitoring. From a security perspective, the site enforces HTTPS and employs secure form handling mechanisms inherent to Drupal. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no public vulnerability disclosure or incident response contact information. Privacy and cookie policies are comprehensive and GDPR-compliant, with a designated data protection officer contact available. Overall, the website demonstrates a strong digital maturity and trustworthy government presence. The lack of WHOIS data limits domain registration verification, but the official branding and content quality strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and providing explicit incident response contacts to further strengthen security posture and transparency.

A

Alstom

alstom.com

80

Alstom is a global leader in sustainable and smart mobility solutions, specializing in integrated rail transport systems and services. The company targets transportation stakeholders worldwide, offering a broad portfolio including rolling stock, rail infrastructure, and digital mobility innovations. Their market position is strong, supported by a legacy of innovation and commitment to environmental sustainability. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content aligned with their business objectives. Technically, the site uses Drupal CMS, modern web technologies, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit vulnerability disclosure and incident response contacts are not publicly detailed. WHOIS data is missing, which slightly impacts trust but is likely due to privacy or registry policies. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility.

B

Budapest Főváros II. Kerület Önkormányzata

masodikkerulet.hu

55

Budapest Főváros II. Kerület Önkormányzata operates as the official local government authority for the 2nd district of Budapest, Hungary. The website serves as a comprehensive portal for residents and stakeholders, providing news, public service information, community engagement opportunities, and administrative contacts. The site is well-branded, consistent, and targets local citizens with relevant municipal content. Technically, the site is built on Drupal CMS with modern frontend frameworks like Bootstrap and jQuery, supplemented by Google Analytics and Facebook SDK for analytics and social media integration. The website is mobile-optimized and accessible, with good SEO practices in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a cookie consent mechanism are missing, representing areas for improvement. The domain is longstanding and registered consistently with the official municipal entity, enhancing trust and legitimacy. Overall, the site demonstrates a mature digital presence suitable for a government entity, though it could benefit from enhanced privacy compliance and security transparency.

G

Gemeente Hilversum

hilversum.nl

69

Gemeente Hilversum operates as the official municipal government website for the city of Hilversum in the Netherlands, providing a broad range of citizen services including passport applications, social benefits, parking permits, and governance information. The website targets residents and visitors, offering multilingual support and clear navigation to facilitate access to municipal resources. The business model is that of a government service provider, with a medium-sized organizational footprint and a well-established domain since 1997. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries such as jQuery and jQuery UI, and integrates third-party services like Siteimprove Analytics and GTranslate for analytics and multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could be improved. From a security perspective, the website enforces HTTPS with DNSSEC enabled, uses asynchronous script loading to minimize performance impact, and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and does not provide explicit security or incident response policies publicly. Privacy compliance is strong with a clear privacy policy and cookie policy, though no explicit cookie consent mechanism is present. Overall, the website presents a high level of trustworthiness and professionalism consistent with a government entity. Recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing security and incident response information to further improve transparency and compliance.

V

Veiligheidsregio Noord-Holland Noord

vrnhn.nl

73

Veiligheidsregio Noord-Holland Noord (VRNHN) is a governmental regional safety authority responsible for coordinating emergency services including fire brigade, ambulance care, crisis management, and medical assistance in the Noord-Holland Noord region of the Netherlands. The website serves residents, municipalities, and crisis partners by providing timely incident information, safety advice, and organizational details. The organization positions itself as a reliable and proactive public safety entity with a clear focus on community safety and crisis readiness. Technically, the website is built on Drupal CMS with Matomo analytics for user tracking, featuring good mobile optimization, accessibility, and SEO practices. Security posture is moderate with cookie consent implemented but lacks explicit security headers and published security policies. The domain registration aligns well with the organization's claims, indicating legitimacy and trustworthiness. Overall, the site is professional, content-rich, and compliant with privacy regulations, serving as an effective communication platform for regional safety information.

U

Universidad de Jaén

ujaen.es

66

The Universidad de Jaén website serves as the official digital presence of a large public university in Spain, offering comprehensive academic programs, research initiatives, and community engagement services. The site targets a broad audience including prospective and current students, academic staff, alumni, and institutional partners. It features multilingual support, rich content, and clear navigation, reflecting a mature digital presence. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, jQuery, and various accessibility tools including ReadSpeaker. The site enforces HTTPS and implements a Content Security Policy, alongside a robust cookie consent mechanism, indicating a good level of digital maturity and privacy compliance. From a security perspective, the site demonstrates solid practices with HTTPS, basic security headers, and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement by adding additional security headers and HSTS. The WHOIS data is restricted due to registry policies, but no suspicious indicators were found, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and well-maintained, with strong compliance to privacy regulations and a clear focus on user experience and accessibility. Strategic recommendations include enhancing security headers, expanding incident response visibility, and continuous monitoring of third-party scripts for vulnerabilities.

I

INSANA, SIA

buveletak.lv

50

Buveletak.lv is an established Latvian e-commerce retailer specializing in construction materials, garden supplies, and household products. The company, INSANA, SIA, operates a comprehensive online catalog targeting local customers including construction professionals and homeowners. The website is built on Drupal CMS with a responsive design and provides clear contact information and legal policies in Latvian. Technically, the site uses modern front-end libraries and enforces HTTPS, though it lacks some advanced security headers. No WAF or blocking mechanisms are detected, indicating open accessibility. The WHOIS data confirms the registrant as a Latvian legal entity, supporting legitimacy, though registrar and creation date details are missing. Overall, the site demonstrates a solid business presence with room for technical and security enhancements.

C

Comunidad de Madrid

comunidad.madrid

64

The Comunidad de Madrid website serves as the official digital portal for the regional government of Madrid, Spain. It provides segmented thematic information relevant to citizens, including services, news, government actions, and digital administration tools. The site targets residents, businesses, tourists, and media, positioning itself as a comprehensive government resource with a strong market presence in the public sector. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as jQuery, Owl Carousel, and Video.js, and uses Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The infrastructure appears stable and professionally maintained. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs standard security best practices. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professional, and well-aligned with its government role. Strategic improvements include implementing explicit cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to enhance transparency and user trust.

I

Inetum

impaqgroup.com

62

Inetum Poland is a medium-sized agile IT services company with 600 specialists across six centers of excellence in Poland. It operates as part of the Inetum Group, providing digital transformation services including AI, cloud, SAP, IoT, and application management to European clients. The company emphasizes impact-driven solutions, collaboration, and continuous improvement, supported by strong partnerships with Microsoft, SAP, and others. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Security posture is strong with HTTPS, certifications (ISO 27001, TISAX), and cookie consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and legitimate business. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving accessibility compliance.

C

Capita

capita-it.co.uk

49

Capita plc is a leading international business process outsourcing and customer experience professional services company, primarily serving public and private sector clients across the UK and Europe. The company offers a broad range of services including automation, cloud solutions, digital connectivity, robotic process automation, and workforce development. Their market position is strong as one of the largest IT organizations in the UK, with a focus on technology-enabled business process outsourcing. The website infrastructure is built on Drupal CMS and integrates a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and other marketing and analytics tools. The site demonstrates good mobile optimization, accessibility features, and SEO practices, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. While explicit security headers are not fully visible in the HTML, best practices appear to be followed. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with comprehensive privacy and cookie policies, and GDPR compliance is evident. Overall, the website reflects a professional, trustworthy, and well-maintained digital asset consistent with Capita's enterprise stature. Strategic recommendations include enhancing explicit security header implementation, publishing vulnerability disclosure information, and providing clearer incident response contacts to further strengthen security transparency and trust.

L

Linedata

linedata.com

60

Linedata is a well-established global financial technology company specializing in software, services, and data solutions for asset managers, fund administrators, and lending institutions. With over 25 years of experience, it holds a strong market position supported by a comprehensive portfolio of products and services including portfolio management, order management, risk management, and AI-driven data analytics. The website reflects a mature digital presence built on Drupal CMS, integrating modern marketing and analytics tools such as Google Tag Manager, Marketo, and Hotjar. Security posture is robust with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers should be verified. The company demonstrates strong privacy compliance and transparent user consent management. Overall, the website is professional, user-friendly, and trustworthy, supporting Linedata's credibility in the financial technology sector.

B

Blackrock Health

hermitageclinic.ie

48

Blackrock Health is a leading private healthcare provider in Ireland operating multiple modern hospitals and diagnostic clinics across key locations including Dublin, Galway, Hermitage, and Limerick. Their services encompass private hospital care, emergency departments, rapid cardiac care, and specialist consultant services, targeting private patients and healthcare professionals. The website reflects a mature digital presence with a professional design, clear navigation, and relevant content tailored to their audience. Technically, the site is built on Drupal CMS with modern front-end libraries such as Bootstrap and Swiper.js, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security posture is moderate with HTTPS usage implied and cookie consent mechanisms in place, though explicit security headers and policies are not visible. Overall, the site demonstrates good privacy compliance and business credibility, though improvements in security transparency and incident response documentation are recommended.

I

Indra Sistemas S.A.

indracompany.com

54

Indra Sistemas S.A. is a leading global technology and consulting company specializing in transportation, air traffic management, defense, and digital transformation solutions. The company serves a broad international audience including governments and large enterprises, positioning itself as a key technology partner in critical sectors. The website reflects a mature digital presence built on Drupal CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools with strong privacy compliance mechanisms. Security posture is solid with HTTPS enforcement and cookie consent, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the company's claims, supporting high legitimacy. Overall, the website is professional, well-structured, and compliant with GDPR and cookie regulations.

Wintershall Dea GmbH is a leading independent gas and oil company in Europe, with a strong market position in the energy sector. The company focuses on exploration and production of gas and oil, targeting investors, partners, and customers within the energy industry. The website reflects a professional corporate presence with comprehensive content about the company's history, management, and responsibility. The digital infrastructure is built on Drupal CMS, enhanced with Matomo analytics for user tracking under GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and accessible, with clear navigation and consistent branding. From a security perspective, the website enforces HTTPS and employs cookie consent categories, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site integrates multiple marketing and tracking tools including LinkedIn Insight, Google Ads, Meta Pixel, and Twitter tracking, all gated behind user consent. Overall, the security posture is solid but could be improved by adding formal security policies and headers. The domain registration details align well with the company's identity, showing consistency and legitimacy. No WAF or blocking mechanisms interfere with content access, allowing full analysis. The website demonstrates a high level of professionalism and trustworthiness, suitable for its corporate audience and business model.

M

Manuchar

manuchar.com

49

Manuchar is a well-established global chemical distribution company headquartered in Belgium, with over 40 years of experience and a strong presence in more than 180 locations across 40+ emerging market countries. The company offers comprehensive chemical distribution services complemented by international trade in steel, polymers, and pulp & paper, supported by a robust logistics network. Their business model focuses on providing end-to-end supply chain, commercial, and financing solutions tailored to industries such as home care, nutrition, mining, and energy. The website reflects a mature digital infrastructure built on Drupal CMS, integrating modern analytics and mapping technologies, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, CSP, and secure form handling, though incident response and vulnerability disclosure policies are not explicitly published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site projects high professionalism, trustworthiness, and business credibility, supported by detailed contact information and social responsibility initiatives.

T

Transamerica Corporation

transamerica.com

57

Transamerica Corporation is a well-established financial services company specializing in life insurance, retirement plans, annuities, investments, and employee benefits. With over 120 years of history and a large customer base, it operates as a subsidiary of the Aegon Group and serves individuals, employers, and financial professionals. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses Drupal CMS and integrates modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though incident response and vulnerability disclosure information could be enhanced. Overall, the domain registration and WHOIS data align well with the company's claims, supporting high legitimacy and trustworthiness.

S

SICPA HOLDING SA

sicpa.com

58

SICPA HOLDING SA is a globally recognized leader specializing in security inks and authentication solutions primarily serving governments, central banks, and high-security printers. The company offers a comprehensive platform that integrates material and digital technologies to address challenges in currency protection, revenue mobilisation, brand protection, and identity verification. Their market position is strong, supported by a long history and ISO 27001 certification, reflecting a commitment to security and trust. Technically, the website is built on Drupal CMS with modern JavaScript libraries and includes robust privacy and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, CAPTCHA on forms, and cookie consent, though explicit security headers could be enhanced. Overall, the site demonstrates high professionalism, good privacy compliance, and trustworthy business information consistent with WHOIS data.

S

Seasus Ltd.

seasus.com

55

Seasus Ltd. is a Malta-based technology company established in 1995, specializing in web design, mobile application development, custom-built software, and business optimisation solutions. The company has a strong market position supported by numerous industry awards and a portfolio of reputable clients. Their business model focuses on delivering tailored technology solutions to enhance business efficiency and customer engagement. The website reflects a mature digital presence with clear service offerings and client engagement channels. Technically, the website is built on the Drupal CMS platform, leveraging modern JavaScript libraries such as jQuery, Slick Slider, and Lozad for performance and user experience enhancements. Hosting is supported by Amazon CloudFront CDN, ensuring good content delivery speeds. The site is mobile-optimized and SEO-friendly, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the business claims, reinforcing legitimacy. Overall, Seasus demonstrates a solid digital and business foundation with room to enhance privacy compliance and security transparency to further strengthen trust and regulatory adherence.

M

Mount Carmel Health System

mountcarmelhealth.com

49

Mount Carmel Health System is a large, well-established healthcare provider based in Columbus, Ohio, offering a comprehensive range of medical services including primary care, urgent care, heart and vascular care, orthopedics, and women's health. The organization operates under the parent company Trinity Health and serves a broad patient base in central Ohio with multiple care sites and a strong community outreach program. The website reflects a professional and patient-focused approach with easy access to scheduling, billing, and patient portal services. Technically, the site is built on Drupal CMS with modern web technologies and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Privacy compliance is basic with cookie consent mechanisms and privacy policies present but lacks clear GDPR compliance indicators. Overall, the website is trustworthy, well-branded, and provides a positive user experience.

B

Betsson AB

betssonab.com

57

Betsson AB is a leading Swedish online gaming investment company listed on Nasdaq Stockholm. The company focuses on owning and growing fast-growing online gaming businesses with a strong emphasis on profitable and sustainable growth. Their website is professionally designed, mobile-optimized, and rich in investor-related content including financial reports, governance, and sustainability information. Technically, the site uses Drupal CMS, integrates Google Tag Manager for analytics, and employs Cloudflare for hosting and security. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a mature, credible business with a high level of digital maturity and trustworthiness.

M

MS Canada

mssociety.ca

57

MS Canada is a well-established Canadian non-profit organization dedicated to supporting people living with multiple sclerosis, advocating for change, and funding research to find a cure. The website reflects a strong market position as a leading MS organization in Canada with extensive resources, support programs, and community engagement opportunities. The site targets individuals affected by MS, caregivers, researchers, donors, and volunteers. Technically, the website is built on Drupal CMS with a modern tech stack including various analytics and marketing tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and secure form handling, though some security headers are missing and no explicit cookie consent mechanism was found, indicating areas for improvement. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's claims. Overall, the website is professional, trustworthy, and comprehensive, supporting MS Canada’s mission effectively.

E

Elmo Insurance Limited

elmoinsurance.com

52

Elmo Insurance Limited is a Malta-based insurance company offering a broad range of personal and commercial insurance products including motor, home, health, travel, and commercial insurance. The company emphasizes financial stability, honest customer relationships, and personalized service. Their website reflects a medium-sized enterprise with a professional online presence targeting individuals and businesses in Malta. Technically, the website is built on Drupal CMS with common web technologies such as jQuery, Bootstrap, and various UI libraries. While the site is mobile-optimized and well-structured, some technical debt is evident, notably the use of an outdated jQuery version and lack of security headers. Security posture is moderate with HTTPS enabled and cookie consent implemented, but improvements are needed in security headers and library updates. The domain registration details align well with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could benefit from enhanced security practices and clearer legal documentation.

B

Bond University

bond.edu.au

59

Bond University is a leading private university in Australia, renowned for its accelerated degree programs and exceptional student experience. The website reflects a strong market position with comprehensive academic offerings and a global student community. Technically, the site is built on Drupal CMS with modern frameworks and integrates analytics and live chat tools, demonstrating digital maturity. Security posture is robust with HTTPS and secure form practices, though some security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Bond University's reputation as a credible educational institution.

B

bpost nv

bpost.be

77

bpost nv is the official Belgian postal service provider, offering a wide range of postal and parcel delivery services both nationally and internationally. The company targets residential and business customers, providing key services such as parcel sending and receiving, registered mail, and digital tools including a mobile app for shipment tracking and management. The website reflects a strong market position as Belgium's leading postal operator with a comprehensive service portfolio. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and integrates various third-party tools for analytics, marketing, and user feedback. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and follows good security practices, though explicit security policies and incident response contacts are not publicly available. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

V

Valsts prezidenta kanceleja

president.lv

63

The website www.president.lv is the official online presence of the Office of the President of Latvia, providing comprehensive information about the President, the presidential institution, state awards, news, events, and contact details. It serves a broad audience including Latvian citizens, government officials, media, and international partners. The site is well-branded, professionally designed, and offers clear navigation and accessibility features. Technically, it is built on Drupal CMS, uses modern web technologies, and integrates Google Analytics for visitor insights. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with a clear cookie consent mechanism and a detailed privacy policy. Overall, the site reflects a high level of professionalism and trustworthiness consistent with a government institution.

Ā

Ādaži

adazunovads.lv

60

Ādaži is the official municipal government website for Ādaži novads in Latvia, providing comprehensive information about local government structure, services, news, cultural and sports activities, and community engagement. The site targets residents, businesses, and visitors seeking official information and e-services. The website is built on Drupal CMS with modern web technologies and includes accessibility features and mobile optimization. It integrates Google Analytics with privacy-conscious settings and offers a cookie consent mechanism. Contact information is clearly presented with official emails, phone numbers, and physical addresses, enhancing trust and transparency. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Overall, the site is professional, trustworthy, and serves as a key digital platform for local government communication.

Ādaži is the official website of the Ādaži municipality local government in Latvia, providing comprehensive information about municipal services, governance, community events, and public resources. The site serves residents, businesses, and visitors with a broad range of content including e-services, news, cultural and sports activities, and contact details. The website is built on Drupal CMS and integrates modern web technologies, ensuring a responsive and accessible user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Overall, the site demonstrates a professional and trustworthy digital presence for the local government entity.

A

ApQ EL AB

apqel.se

34

ApQ EL AB is a Swedish electrical services company specializing in power projects, electrical installations, fire and safety systems, and maintenance services. The company targets business and public sector clients, emphasizing quality, detailed planning, and project management. Their market position is supported by significant contracts with public entities such as Malmö Stad and Kävlinge kommun. The website reflects a professional and consistent brand image with clear service offerings and regional contact points. Technically, the website is built on Drupal CMS, utilizing Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS and cookie consent mechanisms, but lack advanced security headers and published security policies. Security posture is adequate but could be improved by adding explicit privacy policies, incident response information, and vulnerability disclosure channels. No critical vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

C

Copenhagen Business School

cbs.dk

56

Copenhagen Business School (CBS) is a globally recognized Nordic business school offering a wide range of educational programs including bachelor, master, PhD, and continuing education. The institution is well-positioned in the education sector with multiple international accreditations such as EQUIS, AACSB, AMBA, CEMS, and PIM, reflecting its high academic standards and global reach. The website targets students, researchers, alumni, and organizations, providing comprehensive information about programs, research, and strategic initiatives. CBS operates a professional and content-rich website built on Drupal CMS, integrating modern web technologies and analytics tools to enhance user experience and data-driven insights.

K

Karlstads universitet

kau.se

47

Karlstads universitet is a well-established Swedish university providing higher education, research, and collaboration services primarily in the education sector. The website targets students, staff, alumni, and the press, offering comprehensive information about programs, research, and university news. The institution maintains a strong market position as a regional university with a focus on quality education and societal collaboration. Technically, the website is built on Drupal CMS, uses Matomo for privacy-conscious analytics, and is well-optimized for mobile and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.