Security Directory

H

Hospic sv. Štěpána Litoměřice

prohospic.cz

42

The website prohospic.cz represents a small non-profit hospice organization based in Litoměřice, Czech Republic, focused on providing home-based palliative care for terminally ill patients. It serves as an informational and donation platform, targeting local donors and families seeking hospice services. The site is professionally designed with consistent branding and clear donation options, including detailed explanations of donation impacts. Technically, the site uses a custom CMS by Jasnet, with common JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Tag Manager for visitor tracking. Mobile optimization and user experience are good, though some technical debt is present due to outdated libraries. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and the use of outdated jQuery versions poses potential risks. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. No terms of service or incident response policies are published, which could be improved. Overall, the domain registration data is consistent and supports the legitimacy of the organization. Strategic improvements in security and compliance would enhance trust and resilience.

F

FW Africa

foodbusinessafrica.com

47

Food Business Middle East & Africa, operated by FW Africa, is a leading media publication and event organizer focused on the food and beverage industry across Africa and the Middle East. The website serves as a comprehensive platform providing industry news, insights, and advertising opportunities targeting business owners, CEOs, and professionals in the sector. It holds a strong market position as the No.1 food and beverage industry magazine and website in the region, supported by a consistent brand presence and professional content quality. Technically, the website is built on WordPress using the Pressbox theme and Divi Builder framework, integrating modern technologies such as Google Tag Manager, Google Analytics, Matomo Analytics, and advanced advertising plugins. The site demonstrates good performance, mobile optimization, and SEO practices, ensuring a positive user experience and accessibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with a mature digital presence, though the lack of WHOIS data and some security policy disclosures slightly reduce trustworthiness. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure information, and enhancing transparency around data protection officers to strengthen compliance and trust.

I

Italyexport

italyexport.net

62

Italyexport is a specialized magazine dedicated to promoting Italian products worldwide, with a focus on sectors such as food, hardware, houseware, and horeca. Established in 1984, it serves as a key promotional platform for Italian exporters targeting international markets. The website is built on WordPress using the Divi theme and integrates modern marketing and analytics tools such as Google Tag Manager and Google Analytics. It demonstrates good digital maturity with GDPR compliance and cookie consent mechanisms in place. Security posture is adequate with HTTPS enforced, though some security headers are not explicitly detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and long-standing business history support legitimacy. Overall, the website is a credible resource for Italian export promotion, though improvements in published contact and security policies would enhance trust.

R

Reed Exhibitions Limited

rxglobal.com

72

RX Global, operated by Reed Exhibitions Limited, is a leading global events organizer with over 350 events across 25 countries and 43 industry sectors. The company focuses on creating impactful business experiences and has a strong market position as a large enterprise in the event management industry. Their services include event organization, sales support, event technology, and sustainability initiatives. The website reflects a mature digital presence with a modern Drupal CMS infrastructure, responsive design, and integration of marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent management. Security posture is strong with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations.

V

Verdo

verdo.com

64

Verdo is an energy solutions company specializing in sustainable energy production, energy savings, and bioenergy fuel sales. The website presents a professional and consistent brand image targeting general and business audiences interested in sustainable energy. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and LinkedIn marketing integrations, supported by a cookie consent mechanism that complies with GDPR principles. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding mitigate some risk. Security posture is moderate with room for improvement in security headers and published security policies. Overall, the website is functional and professional but requires enhanced transparency and security practices to improve trust and compliance.

S

Domácí zdravotní péče a pečovatelská služba | Sestřička.cz

sestricka.cz

62

The website www.sestricka.cz provides professional home healthcare and caregiving services across the Czech Republic. It targets individuals seeking medical and caregiving support in the comfort of their homes. The site is built on modern web technologies including Webflow CMS, Google Fonts, Microsoft Clarity for analytics, and Cookiebot for cookie consent management. The presence of Google Tag Manager and Facebook Pixel indicates active marketing and user behavior tracking. Despite the lack of WHOIS data, the website content and cookie compliance suggest a legitimate business operation focused on healthcare services. Security posture is moderate with room for improvement in implementing security headers and publishing clear privacy and security policies. No contact emails or phone numbers were found in the HTML content, which may impact user trust and business credibility. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its target audience.

H

Hospic sv. Štěpána, z.s.

hospiclitomerice.cz

45

Hospic sv. Štěpána Litoměřice is a well-established non-profit healthcare organization providing comprehensive hospice and palliative care services in the Czech Republic since 2004. The website serves as an informative platform for patients, families, healthcare professionals, and donors, detailing services such as inpatient care, home hospice, counseling, and educational programs. The organization maintains a strong community presence and partnerships with governmental and charitable entities. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for user tracking. The site is mobile-optimized and professionally designed, offering a good user experience. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some advanced security headers and a published vulnerability disclosure policy. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages. Overall, the site is trustworthy and credible, reflecting the organization's mission and operational maturity.

B

Běhy pro hospice

behyprohospice.cz

54

Běhy pro hospice is a Czech non-profit platform established in 2017 that organizes charity running events and personal challenges to support hospice care across the Czech Republic. The website encourages public participation through runs and donations, aiming to fulfill the wish of many terminally ill people to remain at home at the end of life. The platform is partnered with Nadacni fond Avast, enhancing its credibility and reach. Technically, the website uses AngularJS framework with integration of Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and calls to action. Hosting and domain registration are consistent with the Czech market and business focus. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts, but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policy is present but cookie policy and terms of service are missing or not clearly linked. Overall, the website presents a trustworthy and professional front for a small non-profit organization with moderate technical maturity. Strategic improvements in privacy compliance and security headers would enhance its posture and user trust.

Palla Media, s.r.o. is a small Czech media company that has announced the termination of its brand effective March 13, 2025. The website serves primarily as an informational portal to communicate this change to its audience and maintain contact channels under a different brand. The company operates in the media sector and targets a general audience including existing clients and partners. The business model appears to be service-oriented media provision with a local market focus. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Bootstrap 5, and jQuery. Hosting is provided by VAS Hosting, with domain registration consistent with the company's location and founding date. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR requirements. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent with opt-in for analytics and advertising cookies. However, no explicit security policy or incident response information is published, and security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found. The security posture is adequate but could be improved with additional policies and headers. Overall, the website is professional and trustworthy with moderate risk. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and maintaining transparency in data protection practices to improve compliance and trust.

R

Relias

feedtrail.com

68

Relias is an enterprise-level healthcare technology company specializing in lifelong workforce enablement and quality improvement solutions. Their website focuses on delivering real-time data insights, patient feedback mechanisms, and prescriptive interventions to optimize healthcare quality. The company positions itself as a trusted provider in the healthcare sector with a comprehensive suite of services aimed at healthcare organizations. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Tag Manager, Hotjar, and Cookiebot for analytics, marketing, and compliance. The site demonstrates good performance, mobile optimization, and accessibility features. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR considerations are evident. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility.

T

tiptop GROUP

tiptop-group.de

51

tiptop GROUP is a German-based company specializing in comprehensive building and industrial cleaning services, including facility maintenance and security services. The website presents a professional image with clear service offerings and multiple subsidiary brands, positioning itself as a regional expert in the real estate services sector. The technical infrastructure is modern, leveraging WordPress with Elementor, Google Tag Manager, and performance optimization plugins, indicating a mature digital presence. Security posture is adequate with HTTPS and anti-spam measures, but lacks published privacy policies and incident response contacts, which are critical for compliance and trust. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

AdvertServe

advertserve.com

64

AdvertServe is a mature, cloud-hosted ad management platform targeting B2B and niche publishers with direct sales teams. The company offers a comprehensive suite of ad serving, targeting, tracking, and real-time reporting services, including video streaming and VAST/VPAID support. With a claimed 25+ years of experience and a customer base exceeding 30,000 sites globally, AdvertServe positions itself as a reliable and feature-rich solution in the ad tech industry. The platform emphasizes uptime reliability, AI-powered monitoring, and free technical support to differentiate itself in a competitive market. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, Bootstrap, and integrates Google Fonts and Font Awesome for styling. It uses Google Tag Manager and Pingdom for analytics and performance monitoring. The site is mobile-optimized with good SEO practices and a clear navigation structure, providing an excellent user experience. However, some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses secure asynchronous ad tags. The contact form includes validation and anti-spam measures. Despite these strengths, the absence of WHOIS data for the domain is a notable concern, as it conflicts with the company's claimed long operational history. Additionally, the site lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for trust and compliance. Overall, AdvertServe presents as a professional and trustworthy business with a strong technical foundation and good privacy compliance. The main risk lies in the domain registration opacity, which should be investigated further to ensure legitimacy. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and reduce potential risks.

SFNCM is a French professional association dedicated to clinical nutrition and metabolism, providing healthcare professionals with training, scientific publications, events, and practical resources. The website is well-structured, professionally designed, and targets healthcare practitioners interested in nutrition clinical care. The technical infrastructure leverages modern JavaScript libraries and a reputable CMS platform (AssoConnect), with good mobile optimization and SEO practices. Security posture is solid with HTTPS, cookie consent management, and nonce-based script loading, though explicit security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the site presents a trustworthy and professional front for its audience.

S

Swoogo LLC

swoogo.com

58

Swoogo LLC operates a sophisticated event management software platform designed to support in-person, virtual, and hybrid events. The company targets event professionals and organizers, offering a comprehensive SaaS solution that covers event registration, data insights, logistics, marketing, and mobile applications. Founded in 2015 and based in Los Angeles, Swoogo positions itself as an enterprise-ready platform with a strong market presence and a focus on customer support and user experience. The website reflects a professional brand with consistent messaging and rich content, including testimonials and educational resources. Technically, the website is built on WordPress and leverages modern JavaScript frameworks such as Alpine.js, along with embedded video content via Wistia. It integrates multiple analytics platforms including Google Tag Manager, PostHog, and Fathom, and employs Osano for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, fast-loading, and SEO-friendly, with good accessibility features. From a security perspective, the site enforces HTTPS and uses consent management tools to comply with privacy regulations. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. WHOIS data is privacy protected but consistent with a legitimate business entity, and no suspicious patterns were detected. Overall, Swoogo demonstrates a high level of professionalism, technical maturity, and security awareness, making it a trustworthy platform in the event management software market.

E

edie

edie.net

68

edie is a UK-based media platform specializing in sustainability news, resources, and events aimed at empowering sustainable business practices. The website offers a variety of content including news articles, podcasts, case studies, and webinars, targeting business professionals interested in sustainability and net-zero initiatives. The platform is positioned as a reputable source within the sustainability sector, supported by a consistent brand presence and active social media channels. Technically, the site is built on WordPress with modern web technologies such as jQuery and Google Tag Manager, and it employs advertising and tracking services like AdvertServe and Lytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but explicit security headers and policies are not clearly identified. WHOIS data is unavailable, likely due to privacy protection, which is common for media businesses but slightly reduces transparency. Overall, the site is professional, content-rich, and trustworthy with room for improvement in security and privacy disclosures.

Konzertbüro Leipzig, operating under the agency name SADLERMUSIC since 2002, is a small German event management company specializing in organizing live concerts across various genres. The company offers comprehensive services including event planning, PR, technical and gastronomic support, and ticketing. The website is built on WordPress with a focus on event calendar management and SEO optimization, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy policies. Overall, the website is professional and functional but could improve in privacy compliance and contact transparency to enhance trust and security.

V

VR Bits GmbH

vrbits.de

44

VR Bits GmbH is a specialized development studio based in Germany, focusing on Virtual Reality, Augmented Reality, and gaming technologies to support digital transformation. Established in 2010, the company positions itself as a pioneer in the German VR scene, offering tailored interactive 3D solutions such as virtual handbooks, showrooms, and trade fair appearances. Their business model is project-based, serving corporate clients seeking innovative digital experiences. The website reflects a professional and consistent brand image with a clear presentation of services and team members. Technically, the site is built on WordPress with modern plugins for caching, lazy loading, and form handling, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and CAPTCHA-protected contact forms, though lacking explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, but terms of service and incident response information are absent. Overall, the site is trustworthy and well-maintained, suitable for its target audience of businesses undergoing digital transformation.

D

Daniel Remler - Videographer | Producer | Cutter

danielremler.com

50

Daniel Remler operates a professional videography and video production service with a strong focus on generative AI content. The website showcases a portfolio of work, emphasizing over 20 years of experience and expertise in both traditional video production and AI-driven content creation. The business targets clients seeking high-quality visual storytelling and AI prompt expertise, positioning itself as a niche expert in the media sector within Germany. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor, Bootstrap, and Google services integration, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, user-friendly, and compliant with privacy regulations, but the lack of WHOIS domain registration data introduces a moderate trust concern.

S

Seven2one

seven2one.de

58

Seven2one is a specialized technology partner and full-service software provider focused on the energy sector in Germany and the DACH region. With over 20 years of experience, they offer cloud-native platform technology (Questra®) and comprehensive consulting, development, and support services to energy companies. Their market position is strong with over 120 customers and 50 productive systems. Technically, the website is built on modern Webflow CMS with integrations like Google Analytics and Cloudflare security features, demonstrating digital maturity and good performance. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit privacy and terms policies are missing, representing compliance gaps. Overall, the website is professional and trustworthy, but could improve transparency and GDPR compliance by publishing dedicated policy pages and contact details.

Karsan is a well-established Turkish automotive manufacturer specializing in commercial vehicles such as minibuses, buses, and electric minibuses. With over 50 years of experience, the company positions itself as a key player in the Turkish transportation manufacturing sector, targeting commercial vehicle buyers and industry partners. The website reflects a professional and consistent brand image with multilingual support, indicating an international market focus. Technically, the site employs modern frameworks like Bootstrap and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS enforcement and standard security headers, though there is a lack of publicly available security policies or incident response information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and contact information. Strategic recommendations include publishing security policies and incident response contacts to enhance trust and compliance.

P

PT Jakarta International Expo

jiexpo.com

51

Jakarta International Expo (JIEXPO) is a large-scale event venue provider based in Indonesia, offering convention, exhibition, and theatre facilities. The website presents a professional and consistent brand image targeting event organizers and exhibitors in the hospitality sector. The technical infrastructure is built on WordPress with modern plugins and tracking tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is incomplete, which slightly impacts trustworthiness but the website content and branding support legitimacy. Overall, the site is functional and well-structured but could improve privacy compliance and security transparency.

M

Michael Heilemann

binarybonsai.com

58

The website binarybonsai.com serves as a personal portfolio and blog for Michael Heilemann, a design professional affiliated with Squarespace. The site showcases blog content focused on design, architecture, and personal insights, targeting a general audience interested in these topics. The business model is primarily personal branding and content sharing, with no commercial transactions or services offered directly through the site. The market position is that of an individual professional with a strong online presence supported by social media profiles and a well-maintained blog. Technically, the site is built on the Squarespace platform, leveraging its CMS capabilities, integrated Google Analytics and Tag Manager for visitor tracking, and Typekit for fonts. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO is adequately addressed through meta tags and structured data. The hosting and infrastructure are managed by Squarespace, ensuring reliable uptime and standard security measures. From a security perspective, the site enforces HTTPS and has domain transfer and update locks enabled, indicating a basic but effective security posture. However, it lacks DNSSEC and HSTS headers, which are recommended to enhance DNS and transport security. No formal security policies, incident response plans, or vulnerability disclosure mechanisms are published, which is typical for a personal portfolio site but represents an area for improvement. Privacy compliance is minimal, with no privacy or cookie policies present, which could be a concern depending on visitor jurisdiction. Overall, the site is low risk, professionally maintained, and trustworthy as a personal portfolio. Strategic recommendations include implementing DNSSEC, enabling HSTS, publishing privacy and cookie policies to improve compliance, and considering a vulnerability disclosure statement to enhance transparency and trust.

N

N+P Informationssysteme GmbH

spartacus-fm.de

60

N+P Informationssysteme GmbH operates the SPARTACUS Facility Management software platform, a comprehensive CAFM solution designed to optimize facility management processes such as maintenance, space management, energy controlling, and cost tracking. Established in 1996, the company holds a solid market position with over 200 customers and a strong presence in Germany. The website reflects a professional and consistent brand image, targeting facility management professionals and organizations seeking integrated software solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot, Google Analytics, and Usercentrics for consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence aligned with business goals and compliance requirements.

N

N+P Informationssysteme GmbH

nuptools.de

58

N+P Informationssysteme GmbH operates the NuPTools website offering proprietary productivity software components designed to enhance IT core systems in manufacturing and construction industries. With over 30 years of experience, the company provides tailored IT solutions including automation tools for Autodesk Inventor, Vault, APplus, and PRO.FILE, supporting digital transformation initiatives such as Industry 4.0 and BIM. The website is built on TYPO3 CMS and integrates modern marketing and analytics technologies including HubSpot, Google Analytics, and Usercentrics for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site presents a professional, trustworthy digital presence aligned with the company's business focus and market position.

M

MLP SE

mlp-se.de

66

MLP SE operates as a financial services group in Germany, providing consulting and financial solutions to private customers, companies, and institutional investors. The website serves multiple audiences including press, investors, and career applicants, reflecting a mature and established market position. The company emphasizes transparency through detailed investor relations, corporate governance disclosures, and a corporate university for training and certification. Technically, the website uses modern tools such as Google Tag Manager and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

M

MLP Finanzberatung SE

mlp-financify.de

67

MLP financify is a specialized financial advisory platform targeting students, medical students, and private customers in Germany. It offers a broad range of financial services including retirement planning, insurance, financing, asset management, and digital banking solutions. The company leverages a large network of over 2,000 advisors across 90 locations, positioning itself as a trusted partner in personal finance. The website is professionally designed with comprehensive content and clear navigation, supporting an excellent user experience. Technically, the site uses modern web technologies including Google Tag Manager and Usercentrics for consent management, and likely runs on the FirstSpirit CMS platform. Security posture is strong with HTTPS enforced and privacy compliance well implemented, though some security headers could be explicitly confirmed. No critical vulnerabilities or blocking mechanisms were detected. Overall, the domain and WHOIS data align well with the MLP brand, supporting legitimacy and trustworthiness.

M

MacAlister Elliott & Partners Ltd

macalister-elliott.com

56

MacAlister Elliott & Partners Ltd is a specialized consultancy focused on sustainable fisheries and aquaculture, providing expert services to governments, communities, and businesses worldwide. The company positions itself as a leader in environmental sustainability within the blue economy sector, offering a broad range of services including business planning, impact assessments, seafood supply chain improvements, and community support. The website reflects a professional and consistent brand image with clear service offerings and a target audience of stakeholders in fisheries and aquaculture. Technically, the website is built on WordPress with modern web technologies including Google Analytics and Tag Manager for tracking, Typekit fonts for typography, and various plugins for enhanced functionality such as maps and menus. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and anti-spam measures but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern for domain legitimacy and trustworthiness, warranting further investigation. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced privacy compliance, security policy publication, and domain registration transparency to improve its security posture and user trust.

P

Peterson Technologies

petersontechnologies.com

74

Peterson Technologies is a medium-sized technology company specializing in sustainability and agritech digital solutions. Operating globally across multiple industries, it offers services including geoservices, data analytics, software development, and ESG compliance solutions. The company is the technology arm of Peterson Solutions, supporting a large global workforce. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, HubSpot, and Google Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms policies. Overall, the domain registration and website content indicate a legitimate and credible business presence.

C

Control Union Global

petersoncontrolunion.com

75

Control Union Global is a large international service provider specializing in testing, inspection, certification, laboratory services, collateral management, and pest control. Operating in over 80 countries, the company targets businesses requiring trustworthy trade and compliance services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating a mature approach to privacy compliance. Technically, the site is built on WordPress with modern technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Hotjar, and Sentry. The security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not detected and no explicit security or incident response policies are published. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for global enterprises. Overall, the website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

8

80:20 Procurement

lscustoms.com

65

LS Customs is a UK-based customs consultancy specializing in bespoke customs compliance solutions primarily for the energy sector. The company positions itself as a trusted partner to businesses needing to comply with HMRC regulations, offering expert advice and implementation of customs processes. The website reflects a professional and well-branded business with ISO certifications and client testimonials that reinforce its credibility. Technically, the site is built on WordPress using Elementor and JetEngine plugins, with modern SEO and analytics tools integrated, including Google Analytics and Google Tag Manager. Security is well managed with HTTPS and appropriate security headers, although privacy and cookie policies are notably absent, representing a compliance gap. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy despite the professional web presence. Overall, the website is accessible, well-designed, and business-focused, but the lack of WHOIS data and privacy documentation should be addressed to improve trust and compliance.

I

Interrijn

interrijn.com

65

Interrijn is a well-established European water logistics and transportation company with over 50 years of experience, specializing in port logistics, floating storage, inland shipping, and project cargo including RoRo services. The company positions itself as a smart, green, and reliable partner for European supply chains, focusing on sustainable water-based transportation solutions. Their website reflects a professional and consistent brand image, targeting businesses requiring efficient cargo transport and storage solutions across European inland and seaports. Technically, the website is built on WordPress using the Enfold theme and integrates modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides clear navigation and comprehensive content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers, which could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not overshadow the professional presentation and active business presence. Overall, Interrijn demonstrates a mature digital presence aligned with its business operations.

P

Peterson

petersonlighthouse.com

57

Peterson Lighthouse is a B2B software ecosystem focused on digitalizing the end-to-end logistics supply chain, particularly for the energy and transportation sectors. The platform offers a suite of specialized applications that enhance visibility, planning, and management of logistics operations, including port activity, transport management, and vessel activity capturing. The company positions itself as an expert-driven provider leveraging decades of logistics experience to deliver operational efficiencies and advanced analytics. Technically, the website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is professional and trustworthy, with room for improvement in security and compliance documentation.

Z

Zentrum für Berufungspastoral

berufung.org

46

Zentrum für Berufungspastoral is a German non-profit organization dedicated to vocation pastoral care within the Catholic Church. The website provides resources, events, and contact information for diocesan vocation pastoral offices primarily targeting young people and church members in Germany and neighboring countries. The organization has an established presence since 2000, reflected by the domain age and consistent content. Technically, the site runs on TYPO3 CMS version 4.7 with common JavaScript libraries and Google Analytics for tracking, though the CMS version is outdated and may pose security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and DNSSEC. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Vatican News

vaticannews.va

69

Vatican News is the official news portal of the Holy See, providing authoritative and up-to-date information about the Pope, the Vatican, and the global Catholic Church. The site targets a global audience interested in religious news and Vatican affairs, offering multilingual content and live media such as radio and podcasts. The business model is non-profit and government-affiliated, emphasizing information dissemination and community engagement rather than commercial activities. Technically, the website employs modern web technologies, including Google Tag Manager for analytics, and appears to be built on Adobe Experience Manager, ensuring a professional and responsive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration is consistent with the Vatican's official presence, enhancing trust and legitimacy. Overall, the site demonstrates high content quality, professional design, and solid technical implementation, making it a reliable source for Vatican-related news.

T

The Holy See

vatican.va

67

The website www.vatican.va is the official online presence of the Holy See, serving as an authoritative source for Catholic teachings, papal documents, and information about the Roman Curia and liturgical celebrations. It targets a global audience including the Catholic faithful, scholars, and pilgrims. The site offers multilingual content and event calendars, reinforcing its role as a key informational hub for the Vatican. Technically, the site employs modern web technologies such as jQuery, Bootstrap 5, Swiper.js, and Google Tag Manager, and appears to be built on Adobe Experience Manager (AEM). The site is mobile-optimized and has good SEO practices, though performance is moderate. Accessibility is basic but functional. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks visible security headers and does not provide a privacy or cookie policy on the analyzed page. No incident response or vulnerability disclosure information is present. No WAF or blocking mechanisms were detected, and no suspicious content or vulnerabilities were found. Overall, the site is highly credible and trustworthy given its official status and domain registration. However, it would benefit from improved privacy compliance, explicit security policies, and enhanced security headers to align with best practices.

B

Biopol GN s.r.o.

alavis-plus.cz

54

The website alavis-plus.cz is an official e-commerce platform operated by Biopol GN s.r.o., offering health and veterinary products under multiple well-known brands such as Alavis, Barnys, Alavis Maxima, and Max Genetics. It targets consumers and pet owners primarily in the Czech Republic, providing a consolidated shopping experience for health supplements and veterinary care products. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience and trustworthiness. Technically, the site leverages a modern e-commerce platform (Upgates) and integrates multiple analytics and marketing tools including Google Analytics 4, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a privacy policy page are missing, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and branding strongly suggest a legitimate business. Overall, the site is well-positioned in its niche with good technical and business maturity but should enhance privacy and security transparency to further strengthen trust.

T

ThePay, a.s.

thepay.cz

64

ThePay, a.s. operates a payment gateway service primarily targeting e-commerce businesses in the Czech Republic and Slovakia. The company offers a variety of modern payment methods including card payments, PSD2-compliant payments, QR code payments, and supports multiple currencies. With over 3,000 clients, ThePay is positioned as a reliable and flexible payment solution provider in its market segment. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Leady.cz, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and PCI DSS certification displayed, although some security headers are missing and no explicit privacy policy or terms of service pages were found in the provided content. Overall, the site is well-structured and trustworthy, but could improve transparency and compliance documentation.

F

Fimlab Laboratoriot Oy

fimlab.fi

74

Fimlab Laboratoriot Oy operates as a leading healthcare laboratory service provider in Finland, specializing in medical testing and diagnostics. The company targets healthcare professionals and patients, offering comprehensive laboratory services. The website reflects a mature digital presence with a WordPress CMS, WooCommerce integration for service offerings, and modern JavaScript libraries enhancing user experience. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of a public security policy and incident response information suggests room for improvement in transparency. WHOIS data confirms the domain's legitimacy and consistency with the business identity, supporting trustworthiness. Overall, the website demonstrates a solid balance of business credibility, technical implementation, and privacy compliance, suitable for a healthcare service provider.

N

National Heritage Institute (Národní památkový ústav)

zamek-slatinany.cz

43

The website represents the official online presence of the Slatiňany State Chateau, managed by the National Heritage Institute of the Czech Republic. It serves as a cultural heritage and tourism portal providing detailed visitor information, historical context, event announcements, and online ticketing options. The site targets tourists and cultural enthusiasts interested in historic sites and government-managed heritage locations. The business model is governmental and non-profit, focusing on preservation and public engagement. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for maps, Google Analytics and Tag Manager for analytics, and uses Typekit and Google Fonts for typography. The site is hosted by REG-WEBGLOBE and uses HTTPS with cookie consent mechanisms that allow granular user control, indicating a mature digital infrastructure. Mobile optimization and accessibility are well addressed. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the institution. Overall, the site demonstrates a good security posture but could improve transparency on security policies. The overall risk is low given the official nature and absence of suspicious elements. Strategic recommendations include publishing a dedicated privacy policy on the main domain, adding security headers, and providing incident response contact details to enhance trust and compliance.

M

Medicross s.r.o.

medicross.cz

65

Medicross s.r.o. operates a professional e-commerce platform specializing in medical supplies and healthcare products primarily serving the Czech market. Established since 2004, the company offers a broad product range including syringes, surgical sutures, disinfectants, gloves, and other medical consumables. Their business model targets both healthcare professionals and individual customers, providing fast delivery and personalized customer service. The website reflects a mature digital presence with a consistent brand identity and clear navigation. Technically, the website leverages modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and Facebook Pixel for marketing. The platform is built on a proprietary CMS by Binargon, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs consent mechanisms for GDPR compliance. While no explicit security policy or incident response information is published, the site follows best practices such as secure forms and no exposed sensitive data. The absence of WHOIS data limits domain registration insights, but the overall trust signals and business information support legitimacy. Overall, Medicross.cz presents a trustworthy and professional online presence with solid technical and security foundations. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

F

Fórum mobilních hospiců

mobilnihospice.cz

58

Fórum mobilních hospiců is a Czech non-profit organization dedicated to supporting mobile hospices, improving the quality and accessibility of hospice care, and providing education and networking opportunities within the hospice community. The organization represents a significant portion of mobile hospices in the Czech Republic and actively engages in campaigns, job offerings, and advocacy to enhance end-of-life care at home. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Google Tag Manager. The site is mobile-optimized, well-structured, and includes essential privacy and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in capabilities. However, it lacks explicit security headers and incident response contact information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for the organization, with clear business information, active content updates, and social media engagement. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic improvements in security headers and privacy compliance could further strengthen the site's security and trustworthiness.

Z

Zdravotní ústav Most k domovu z.ú.

mostkdomovu.cz

55

Most k domovu is a Czech non-profit healthcare organization specializing in comprehensive home-based palliative and health care services. Founded in 2007, it serves patients and families primarily in Prague and surrounding areas, offering a range of services including home hospice care, home health care, social counseling, and spiritual care. The organization emphasizes compassionate, professional care enabling patients to remain in their homes during critical health phases. The website reflects a mature digital presence with clear service descriptions, testimonials, and partnership affiliations, positioning it as a leading provider in its sector.

K

Křižovnická pečovatelská služba

pecovatelska-sluzba.com

50

Křižovnická pečovatelská služba is a small non-profit organization based in Prague, Czech Republic, providing registered social care services primarily to citizens over 40 years old who require assistance due to age or disability. The organization is affiliated with the religious order Křižovníků s červenou hvězdou and operates in cooperation with a Catholic girls' school, offering practical training opportunities for future caregivers. Their key services include personal care assistance, household help, accompaniment to medical and administrative appointments, and pastoral care. They also provide a compensatory aids rental service through a partner domain. Technically, the website is built using a custom CMS by Webmium, hosted partially on Microsoft Azure Blob Storage, and incorporates modern tracking and security tools such as Google Analytics, Google Tag Manager, and invisible Google reCAPTCHA v3. The site is mobile-optimized with a clear navigation structure and professional design. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and explicit privacy or cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the website is functional and professional but would benefit from improved transparency and security practices.

P

Partos

partos.nl

62

Partos is a Dutch non-profit branch association representing over 100 organizations involved in international cooperation. The website serves as an informational and membership platform, providing resources and advocacy for its members. The organization targets Dutch development organizations and stakeholders interested in international collaboration. Technically, the website is built on WordPress using a child theme of FoundationPress, with integrations such as Gravity Forms for data collection and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking, with appropriate consent mechanisms in place. Security posture is good with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing security headers and publishing security policies. The site is professional, well-branded, and trustworthy, with no signs of malicious or suspicious activity. However, explicit privacy and terms of service pages were not found in the provided content, which could be improved for compliance and transparency.

V

VEJ-EU

vej-eu.dk

64

VEJ-EU is a Danish organization focused on developing and transforming the road sector through educational courses, conferences, and workplace initiatives. The website positions itself as a key resource for professionals in the transportation sector in Denmark, offering sector-specific knowledge and networking opportunities. The domain has been active since 1999, indicating a well-established presence in the market. Technically, the website is built on a modern Next.js framework with React, ensuring a responsive and user-friendly experience. The use of Cookiebot for consent management and integration of analytics tools like Google Analytics and Hotjar demonstrate a mature digital infrastructure with attention to privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks explicit contact information and detailed security policies.

N

NaboGO

nabogo.com

57

NaboGO operates the Nabogo platform, facilitating local carpooling primarily in Denmark and three other countries. The company partners with provinces and public transport authorities to promote sustainable shared transportation solutions. Their business model centers on enabling daily shared rides for commuting, schooling, and leisure, leveraging a mobile app and local partnerships. The website reflects a medium-sized, professional organization with a clear focus on transportation and mobility services. Technically, the site is built on WordPress with Elementor and Yoast SEO, supported by Cloudflare for CDN and security. The site is mobile-optimized and includes modern tracking and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and Cloudflare protections, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is present. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency around security policies and incident response.

I

Industry 5.0 konverents - Industry 5.0

industry40.ee

45

Industry 5.0 is a specialized conference website focused on enhancing the competitiveness of Estonian industrial enterprises through innovation, AI, sustainability, and export strategies. The event is scheduled for May 14, 2025, in Tartu, Estonia, targeting manufacturing professionals, government, and educational sectors. The website is built on WordPress with modern plugins such as Yoast SEO, Elementor, and Google Analytics integration, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

M

Moment Digital Oy

momentdigital.fi

60

Moment Digital Oy is a Finnish technology company specializing in enhancing customer experiences across phone, chat, and digital channels. Positioned as a customer experience expert, the company offers a range of services including Moment Health, Life, Flow, Retail, Home, Tech, and customer service design and consulting. Their market focus is B2B, targeting businesses aiming to strengthen customer relationships at critical moments. The website reflects a professional and consistent brand image with good content quality and clear navigation.

A

American Tort Reform Association

atra.org

57

The American Tort Reform Association (ATRA) is a well-established non-profit organization dedicated to advocating for fairness and balance in the civil justice system through legal reform and public education. Founded in 1986, ATRA operates as a nationwide network of state-based liability reform coalitions with a strong track record of legislative success. Their key services include advocacy, public education, legislative support, and publication of reports and amicus briefs aimed at reducing lawsuit abuse. The organization targets legislators, legal professionals, manufacturers, and policy makers in the United States.

F

Filip Vlček

vlcoun.cz

44

Vlčoun.cz is a Czech Republic-based informational portal focused on transportation news, including public transit, railways, and infrastructure updates. Founded in 2011 and operated by Filip Vlček, it serves a niche audience of commuters, transport enthusiasts, and professionals. The site offers news articles, schedules, special reports, and advertising opportunities, positioning itself as a trusted source within the Czech transportation sector. The portal maintains active social media profiles on Facebook and Instagram, enhancing community engagement. Technically, the website runs on an outdated Joomla 1.5 CMS platform, which poses security and maintenance challenges. It uses common web technologies such as jQuery and MooTools, along with Google Analytics and Tag Manager for tracking. The presence of deprecated Flash content and lack of modern security headers indicate technical debt and potential vulnerabilities. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism compliant with EU regulations. However, the absence of a privacy policy, terms of service, and security headers reduces its compliance posture. The outdated CMS and Flash usage increase risk exposure. WHOIS data is consistent and legitimate, supporting the site's credibility. Overall, the security posture is moderate but requires upgrades to meet modern standards. Strategically, Vlčoun.cz should prioritize upgrading its CMS to a supported version, removing deprecated technologies, and implementing comprehensive security headers. Enhancing privacy documentation and improving mobile and accessibility features will boost user trust and compliance. These steps will strengthen the portal's position as a reliable transportation information source in the Czech Republic.