Security Directory

T

Tenarry Slovakia s.r.o.

tenarry.sk

48

Tenarry Slovakia s.r.o. is a specialized waste management company focusing on the sorting and processing of PET bottles, supplying major European manufacturers. The company operates advanced optical sorting technology capable of processing up to 3 tons of waste per hour and produces solid and alternative fuels. They also engage in social responsibility initiatives supporting children and schools through PET bottle cap collection programs. The website reflects a professional and consistent brand presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern libraries such as Bootstrap and jQuery, with responsive design and moderate performance. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

BJ DENT

bjdent.sk

48

BJ DENT is a dental clinic based in Bardejov, Slovakia, offering a comprehensive range of dental services including aesthetic dentistry, dental hygiene, surgery, implants, and emergency care. The clinic emphasizes professional patient care and modern technology to ensure high-quality dental treatments. The website reflects a well-established local healthcare provider with clear contact details and a user-friendly interface. Technically, the site uses modern frameworks such as Bootstrap and integrates analytics and marketing tools like Google Analytics and Facebook Pixel, demonstrating a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks advanced security headers and formal security policies. Overall, the website is safe, professional, and compliant with GDPR cookie regulations, supporting trustworthiness and business credibility.

W

webex.digital, s.r.o.

realvia.sk

47

REALVIA is a Slovak-based digital service provider specializing in web solutions, official property export services, and real estate management platforms tailored for real estate agencies and brokers. The company positions itself as a reliable partner with over 400 real estate agencies as clients, emphasizing excellent customer support and official integrations with real estate portals. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and integrates marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized and uses HTTPS with good SSL configuration. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. From a security perspective, the website demonstrates a mature posture with ISO 9001 and ISO 27001 certifications, HTTPS enforcement, and cookie consent. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and professionally maintained, with a strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a security.txt file to improve transparency and security readiness.

S

Chytrá čidla nejen pro domácnost – Senzoor

senzoor.sk

45

The website senzoor.sk appears to be a newly established business entity based in Slovakia, with domain registration dated February 27, 2024. The site uses modern frontend technologies such as Google Fonts, Google Tag Manager, and Font Awesome icons, hosted on Forpsi's infrastructure with DNSSEC enabled, indicating a baseline of domain security. However, the website content is minimal and lacks critical compliance documents such as privacy policy, cookie policy, and terms of service. No contact information or business certifications are present, which limits trust and credibility from a user perspective. The technical implementation is basic with room for improvement in mobile optimization, accessibility, and SEO. Security posture is moderate due to HTTPS and DNSSEC but lacks security headers and incident response information. Overall, the site is accessible with no WAF or blocking detected, and content is safe for general audiences.

W

Winchester Arms Collectors Association

winchestercollector.org

56

The Winchester Arms Collectors Association (WACA) is a well-established non-profit organization dedicated to the collection and preservation of Winchester firearms history. Founded in 1977 and incorporated in Montana, WACA serves a global community of over 3,000 members through publications, events, forums, and educational resources. The website acts as the official portal for membership management, event announcements, and historical information, positioning WACA as a niche leader in the firearms collecting community. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS and CDN services. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, there is room for improvement in accessibility and security hardening, such as enabling DNSSEC and implementing security headers. From a security perspective, the site enforces HTTPS and uses domain transfer protection, indicating a baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited, with no cookie consent mechanism or explicit GDPR compliance indicators. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and professional, serving its target audience effectively. Strategic improvements in privacy compliance and security configurations would further strengthen its posture and user trust.

A

Adafruit Industries

adafruit.com

69

Adafruit Industries operates a professional e-commerce website specializing in unique and fun DIY electronics and kits. The company targets hobbyists, educators, and makers with a broad range of products including Arduino boards, sensors, LEDs, Raspberry Pi accessories, and educational kits. The website is well-branded and positioned as a niche leader in the maker community with a strong focus on educational content and community engagement. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Zencart for e-commerce functionality, providing a responsive and accessible user experience. Security posture is solid with HTTPS enabled and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the provided content. Overall, the site is trustworthy and professional, but WHOIS data is unavailable, which slightly reduces trustworthiness from a domain registration perspective.

P

Plastic guys ♻

plasticguys.cz

46

PlasticGuys.cz is a small business website established in 2021, operating in the plastics manufacturing or products sector in the Czech Republic. The website presents a professional design with good user experience and moderate technical implementation, leveraging modern web fonts, tracking scripts, and analytics tools such as Google Tag Manager and Facebook Pixel. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but absence of security headers and explicit incident response policies are notable gaps. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

A

AUVERSUM — The first visible nanotechnology

auversum.com

51

The website auversum.com appears to be a newly registered domain with minimal publicly accessible content. The site lacks critical business information such as privacy policies, cookie policies, terms of service, and contact details, which limits the ability to fully assess the business operations or credibility. Technically, the site employs common third-party analytics and tracking tools including Google Tag Manager, Facebook Pixel, Hotjar, and Google Analytics, indicating some level of digital marketing activity. The hosting and DNS are managed by WEDOS Internet, a.s., with Cloudflare DNS servers, but DNSSEC is not enabled, which is a minor security gap. Security headers and advanced security policies are not evident in the provided content. Overall, the security posture is basic with room for improvement in policy transparency and technical hardening. The absence of contact and compliance information suggests the site is either in early development or lacks maturity in privacy and security compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and incident response information to enhance trust and compliance.

I

Institut für Medizininformatik (IMI) des Universitätsklinikums Frankfurt

se-atlas.de

52

SE-ATLAS is a specialized healthcare information platform operated by the Institut für Medizininformatik (IMI) of the Universitätsklinikum Frankfurt, focusing on mapping care centers and patient organizations for individuals with rare diseases in Germany. The platform serves patients, healthcare providers, and patient organizations by providing a searchable directory of specialized centers and networks. The website is well-positioned in a niche healthcare segment, offering valuable resources to a targeted audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and CSRF protections, though some HTTP security headers are missing and no explicit security policy or vulnerability disclosure is published. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in formal security documentation and header implementation.

A

Anadolu Ajansı

anadoluimages.com

59

Anadolu Images is the digital content platform of Türkiye’s Global News Agency Anadolu Ajansı, offering a vast archive of editorial photos and videos alongside recent content from global news photographers. The platform targets media outlets and companies worldwide, providing subscription and pay-per-download services. The website is professionally designed with a clear navigation structure and responsive design, leveraging modern web technologies such as Bootstrap, jQuery, and Owl Carousel. Security posture is moderate with HTTPS usage and CSRF protections in forms, but lacks DNSSEC and explicit security headers. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms are absent. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established media service.

C

C&Rsenal

candrsenal.com

42

C&Rsenal is a niche media and e-commerce website focused on firearms history and related educational content. The site offers blog posts, videos, and an online shop targeting firearms enthusiasts and collectors. The business appears small and specialized, with a consistent brand presence and active social media channels. Technically, the site is built on WordPress with WooCommerce, leveraging common web technologies such as jQuery and Font Awesome. Performance and mobile optimization are adequate, though there is room for improvement in accessibility and SEO. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.

S

Steko s.r.o.

stekovranov.sk

43

Steko s.r.o. is a Slovakian company specializing in vehicle technical inspections, emission controls, originality checks, and car wash services primarily serving motorists in the Vranov nad Topľou region. The company has been operational since 2010, positioning itself as a trusted regional provider with a focus on quality and customer satisfaction. The website reflects this with clear service offerings, contact information, and relevant business documentation such as pricing and certifications. Technically, the website employs modern web technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and DNSSEC enabled, complemented by a GDPR-compliant cookie consent mechanism and privacy policy. However, there is room for improvement in implementing additional security headers and formal incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

ADS Vranov, s.r.o.

sadka.sk

43

ADS Vranov, s.r.o. operates as a regional provider of fuel sales, automotive washing, and servicing in Slovakia, specifically in the Vranov nad Topľou, Svidník, and Humenné areas. The company offers motor fuels including Slovnaft branded gasoline and diesel, a loyalty program named SADKART, multiple car wash facilities, and authorized servicing for brands such as SOR and IVECO IRISBUS. Their market position is that of a small but established regional business with multiple physical locations and a focus on customer service. The website reflects this with clear contact information, service descriptions, and operational hours for each location. Technically, the website uses a traditional tech stack including jQuery 1.11.1, Bootstrap, and Font Awesome, with a cookie consent mechanism compliant with GDPR. However, some libraries are outdated, which may pose security risks. Security posture is moderate with HTTPS enabled and privacy policies in place, but lacks advanced security headers and explicit incident response contacts. Overall, the site is professional and trustworthy but could benefit from technical and security improvements.

D

Deutsches Thoraxregister

thoraxregister.de

51

The Deutsches Thoraxregister website serves as an interdisciplinary benchmarking project under the patronage of the DGAI and DGT, focusing on thoracic surgery and anesthesia in Germany. It provides an online portal for data entry and benchmarking, targeting medical professionals, patients, and participants in the registry. The site is built on Joomla CMS with a healthcare-oriented template and integrates modern web technologies such as Bootstrap, jQuery, and Font Awesome. Matomo analytics is used with privacy-conscious settings, avoiding tracking cookies. The website is well-structured, professionally designed, and provides clear contact and legal information, supporting trust and credibility. However, explicit security policies and headers are not evident, and no incident response or vulnerability disclosure mechanisms are published.

N

Netigate

netigate.se

68

Netigate is a leading provider of experience management software, offering an AI-powered SaaS platform that unifies customer and employee feedback to drive business growth. The company targets businesses seeking to enhance their experience management capabilities through advanced analytics and actionable insights. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong SEO practices. Technically, the site is built on WordPress with Elementor, integrating multiple analytics and marketing tools such as HubSpot, Piwik PRO, and LinkedIn Insight, reflecting a modern and data-driven infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the site is trustworthy and professional, but the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing transparency around security policies and domain registration details to further build trust.

M

MOJEOBRAZOVKA.CZ

mojeobrazovka.cz

43

MojeObrazovka.cz is a Czech-Slovak advertising and media agency specializing in managing a unique network of out-of-home (OOH) digital LCD panels placed in public spaces such as hospitals, clinics, offices, and fitness centers. The company claims to reach approximately 2.9 million viewers monthly, positioning itself as a regional player in the digital advertising market. The website reflects a professional business model focused on providing advertising space and campaign management services with a clear target audience of businesses seeking OOH advertising solutions. The company is part of the CZECH Digital Media group, enhancing its credibility and market presence. Technically, the website is built on Joomla CMS using modern frameworks such as Helix Ultimate and SP Page Builder. It incorporates common web technologies including jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics, Google Tag Manager, and Leady tracking for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are consistent with the business claims, with the domain created in 2019. From a security perspective, the website uses HTTPS with a valid SSL certificate and implements CSRF tokens for AJAX requests, indicating some security awareness. However, it lacks important security headers like Content-Security-Policy and HSTS, which could improve protection against common web attacks. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No vulnerability disclosure or incident response contact information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced security measures and improved privacy compliance documentation. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to strengthen security posture and regulatory compliance.

H

HART 2026 Proposed Service Changes

hartserviceinput.com

47

HART 2026 Proposed Service Changes website serves as the official platform for Hillsborough Area Regional Transit to communicate upcoming transit route adjustments and gather public feedback. The site targets local residents and transit users in Tampa, Florida, providing detailed route changes, public meeting schedules, and bilingual content to ensure accessibility. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and translation plugins to enhance user experience. Security measures include HTTPS and Google reCAPTCHA v3 integration on forms, though some security headers are not explicitly detected. The absence of privacy and cookie policies represents a compliance gap. WHOIS data shows an unusual future domain creation date, which slightly impacts trust but does not negate the site's legitimacy. Overall, the website is professional, informative, and trustworthy with room for improvement in privacy compliance and security hardening.

R

Rerivo s.r.o.

rerivo.cz

44

Rerivo s.r.o. is a Czech Republic based small enterprise specializing in energy sector services including production, trade, and optimization of energy costs, as well as photovoltaic installations and automotive alternative fuel conversions. The company has been operational since 2013 and targets municipal offices, private companies, and individuals. The website is built on WordPress using Elementor, featuring a professional design with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks a privacy policy and security headers. Contact is available via phone and a contact form, though no direct email addresses are published. Overall, the website is functional and trustworthy but could improve compliance and security practices.

P

Pluton Logistics

plutonlogistics.com

43

Pluton Logistics is a Serbian-based logistics and transportation information platform established in 2013. The website provides news, insights, and updates related to logistics, freight forwarding, transport, and warehousing sectors, targeting professionals and businesses in the regional transportation industry. It maintains a consistent brand presence with regularly updated content and a professional design. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Font Awesome, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. While HTTPS is properly implemented, DNSSEC is not enabled, and advanced security headers are not explicitly detected. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Contact information is minimal on the main site, with no explicit emails or phone numbers found. Overall, the site demonstrates a moderate to good security posture but could improve in privacy compliance and security policy transparency.

P

Pure Silver Creative

puresilvercreative.com

64

Pure Silver Creative is a Tampa-based digital marketing agency established in 2013, offering a broad range of tailored online marketing services including SEO, content marketing, data dashboards, reputation management, and website design. The company positions itself as a full-service marketing partner for businesses seeking to enhance their digital presence and marketing effectiveness. The website reflects a professional and consistent brand image with strong client testimonials and social media engagement. Technically, the site is built on WordPress using modern plugins and frameworks, hosted on AWS infrastructure, and incorporates standard marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers and vulnerability disclosure mechanisms are missing. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates a mature digital presence with room for security and privacy improvements.

I

IT BŘECLAV s.r.o.

cistenimotoru.cz

41

The website www.cistenimotoru.cz represents a small local business, IT BŘECLAV s.r.o., specializing in engine cleaning and dekarbonization services primarily in the Břeclav and Brno regions of the Czech Republic. The business offers services aimed at improving engine performance, reducing fuel consumption, and extending engine life. The website is professionally designed using WordPress and popular plugins such as Elementor and Yoast SEO, providing a good user experience with clear navigation and mobile optimization. However, the absence of privacy and cookie policies, as well as missing security headers, indicates gaps in compliance and security best practices. The WHOIS data is unavailable, which reduces domain trustworthiness but does not necessarily indicate malicious intent given the local service nature. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and security hardening.

Windenergie, s.r.o. is a small Czech Republic-based company specializing in wind energy projects and renewable energy solutions. The website showcases various wind farm projects and references, targeting businesses and stakeholders interested in sustainable energy development. The company appears to be a regional player in the wind energy sector with a focus on project development and management. The website is built on WordPress using the OceanWP theme and Elementor page builder, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. Security posture is adequate with HTTPS enforced and a cookie consent banner present, but lacks advanced security headers and explicit incident response contacts. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie banner. Overall, the website is functional but basic in content quality and technical sophistication.

P

Peepl

tabler.world

52

The website rti.roundtable.world is a login portal branded as RTI, operated under the roundtable.world domain and associated with the company Peepl. The site provides a secure login interface with CSRF protection and input validation but lacks visible privacy, cookie, or terms of service policies. The business appears to be focused on providing a secure authentication platform or service, though detailed business model information is not publicly available on the login page. The site links to the main round-table.org website and Peepl.io, indicating a partnership or parent company relationship. Technically, the site uses modern web technologies including jQuery and Font Awesome, with a moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and form protections but could be improved with additional security headers and privacy compliance measures. No WHOIS registrant data is publicly available, suggesting privacy protection is in place, which aligns with the professional and security-focused nature of the site. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and compliance documentation.

T

TriTec good choice s.r.o.

tritec.cz

43

TriTec good choice s.r.o. operates a professional automotive service center in Břeclav, Czech Republic, offering a wide range of vehicle repair and maintenance services including mechanical repairs, diagnostics, tire services, and parts sales. The company targets vehicle owners in the Czech Republic and neighboring countries, providing multilingual support and convenient pick-up services. The website reflects a well-structured and professionally designed digital presence with clear contact information and service descriptions. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a good user experience and mobile optimization. Security-wise, the site implements a detailed cookie consent mechanism but lacks visible security headers and published privacy or security policies, indicating room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Envision Saint John: The Regional Growth Agency

envisionsaintjohn.com

10

Envision Saint John: The Regional Growth Agency is a government-affiliated organization focused on promoting economic growth, investment, and quality of life in the Saint John region of Canada. The website serves as a comprehensive portal for investors, residents, visitors, and businesses, offering detailed information on regional advantages, services, and community highlights. The agency positions itself as a key regional player facilitating growth through strategic initiatives in real estate, workforce development, and destination marketing. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, Slick Carousel, and various tracking pixels for analytics and marketing. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and user trust. From a security perspective, the site uses HTTPS and integrates secure forms with CAPTCHA, but lacks visible security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and branding suggest legitimacy. Overall, the website is a well-executed regional growth platform with strong business credibility and user experience. Strategic improvements in privacy compliance, security headers, and domain transparency would further strengthen its security posture and trust signals.

F

FIRS

firsnet.org

63

The Forum of International Respiratory Societies (FIRS) is a well-established non-profit organization founded in 2004, dedicated to uniting leading respiratory societies worldwide to improve global lung health. The website serves as an information and collaboration platform targeting healthcare professionals and respiratory societies. It holds a strong market position as a global leader in respiratory health collaboration, offering key services such as uniting societies and providing resources to improve lung health globally. Technically, the website is built on WordPress with modern technologies including jQuery, Font Awesome, and Google Analytics, and employs plugins for performance and GDPR compliance. The site demonstrates good mobile optimization, SEO, and accessibility at a basic level. Security posture is good with HTTPS enabled and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is professional, trustworthy, and safe for general audiences.

S

SAD Humenné, a.s.

sadhe.sk

41

SAD Humenné a.s. is a regional transportation company based in Slovakia, providing a range of passenger transport services including urban, suburban, long-distance domestic, international, and occasional charter transportation. The company targets the general public and passengers in Eastern Slovakia and neighboring regions, operating with a medium-sized business model focused on public transport and ticket sales. Their website reflects a consistent brand presence and offers clear contact information and partner affiliations. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Font Awesome, ensuring a responsive and user-friendly experience. The site includes a cookie consent mechanism compliant with GDPR, uses Google Analytics with IP anonymization, and maintains good SEO and mobile optimization standards. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the website uses HTTPS and implements cookie consent but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and formal policies are recommended to enhance the security posture. Overall, the website is professional, safe, and trustworthy with moderate user tracking and good privacy compliance. The domain registration aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and auditing third-party scripts to maintain and improve security and compliance.

P

Purple Lamp Studios

purplelamp.com

52

Purple Lamp Studios is a Vienna-based game development company founded by industry veterans in 2020. The company focuses on creating games and related services, targeting gamers and industry partners. The website is professionally designed using WordPress with the Salient theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and SEO-friendly, though some technical improvements are possible. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting trust. Overall, the site presents a credible business but would benefit from enhanced transparency and security practices.

A

Aktionsbündnis Nichtrauchen e.V. (ABNR)

abnr.de

39

Aktionsbündnis Nichtrauchen e.V. (ABNR) is a German non-profit coalition of 22 nationwide health organizations focused on tobacco and nicotine prevention advocacy. The website serves as an information hub for political lobbying, public awareness, and dissemination of publications and newsletters related to tobacco control. The organization targets health professionals, policymakers, and the general public in Germany. Technically, the website is built on the REDAXO CMS platform, uses jQuery and skrollr for UI effects, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. No contact emails or phone numbers are directly exposed, relying on a contact form instead. WHOIS data shows the domain is active with domaincontrol.com nameservers, typical for GoDaddy hosting, with no privacy protection but limited registrant info. Overall, the site is professional, trustworthy, and safe, with room for improvement in security policy transparency and technical security headers.

S

Scribble Software, Inc.

scribblesoftware.com

9

Scribble Software, Inc. is a specialized software provider focused on marina, boatyard, and harbor management solutions. Their offerings include cloud-based and desktop software products designed to streamline operations such as slip reservations, fuel sales, inventory control, service management, and integrated accounting. The company positions itself as a trusted partner for marina professionals, emphasizing efficiency, profitability, and connectivity through their MARINAGO Office platform and desktop solutions. The website reflects a mature business with a medium-sized footprint in the transportation and real estate sectors, targeting marina operators primarily in the United States. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various UI libraries, alongside Google Tag Manager and Google Ads for marketing and analytics. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be enhanced. Security posture is moderate with HTTPS usage implied but lacking visible security headers and explicit privacy or cookie policies. The absence of WHOIS data is a notable transparency gap, though the professional presentation and customer testimonials support business credibility. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from implementing security headers, formal privacy and cookie policies, and incident response disclosures. Overall, the risk is moderate with recommendations to improve compliance and security best practices to enhance trust and regulatory alignment.

P

PädExpert

paedexpert.de

57

PädExpert operates as a pioneering telemedicine platform in Germany, specializing in pediatric ambulatory care by connecting general pediatricians with specialized pediatric experts to improve diagnosis and treatment of chronic and rare diseases. The platform is recognized with notable healthcare awards, indicating strong market positioning and innovation leadership. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are implemented with GDPR compliance, and the site uses Piwik analytics for user tracking with moderate privacy adherence. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response information. No contact emails or phone numbers are directly available on the main page, which could be improved for better user support. Overall, the site is safe, trustworthy, and well-aligned with its healthcare audience.

A

Atoz Marketing Services, spol. s r. o.

doveryhodneznacky.sk

10

Dôveryhodné Značky is a Slovak marketing program operated by Atoz Marketing Services, spol. s r. o., focused on evaluating and awarding brands trusted by Slovak consumers. The program conducts annual consumer surveys, organizes gala events, and provides marketing support to winning brands. The website is built on WordPress with a moderate technical infrastructure including common plugins and Google Maps integration. The content is professionally presented, targeting Slovak market participants and consumers. Security posture is adequate with HTTPS enforced and Wordfence plugin presence, but lacks advanced security headers and cookie consent mechanisms. Privacy policy is present but basic, with no visible terms of service or incident response information. Overall, the website is trustworthy and professionally maintained but could improve compliance and security practices.

G

Gaidelis

gaidelisklasika.lt

47

Gaidelis is a Lithuanian brand specializing in traditional crispy crackers and biscuits, with a heritage dating back to 1969. The website presents the brand's products, emphasizing original recipes and new mini cracker offerings. The site targets general consumers interested in traditional Lithuanian snacks and operates an e-commerce platform powered by WooCommerce. The domain is relatively new but consistent with the brand's local presence. Technically, the website uses a modern WordPress CMS with popular plugins and frameworks, ensuring a good user experience and mobile optimization. Cookie consent is managed via Cookiebot, reflecting attention to privacy compliance. Security posture is good with HTTPS enabled, though some security headers could be improved. No explicit privacy or terms of service pages were found, and contact information is not directly visible in the HTML content. Overall, the site is professional, trustworthy, and well-positioned in its niche.

C

Children’s National Hospital

childrensnational.org

60

Children’s National Hospital is a leading pediatric healthcare provider based in Washington, D.C., recognized nationally as a top 10 pediatric hospital. The organization offers comprehensive pediatric medical services and has a long-standing history of over 150 years serving children and families. Their website reflects a strong market position with clear communication of services and trust indicators such as rankings and certifications. Technically, the website is built on modern frameworks including React and Sitecore CMS, leveraging AWS CloudFront CDN for performance and scalability. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, supporting responsible data handling. Overall, the digital maturity of the hospital’s online presence is high, supporting their business credibility and trustworthiness.

R

Rethink Racing

rethinkracing.com

44

Rethink Racing is a small sports team focused on Prokart and Sim Racing, competing in the British Prokart Endurance Championship and iRacing.com. The website serves primarily as a placeholder with minimal content and links to a legacy site. The business targets motorsport enthusiasts and sim racing communities, operating in a niche segment of the transportation industry. The domain is registered since 2019, consistent with the business age and scope. Technically, the website uses basic modern web technologies including HTML5, CSS3, Google Fonts, and Font Awesome icons. Hosting appears to be with Gandi based on DNS nameservers. The site lacks advanced frameworks or CMS and shows basic mobile optimization and accessibility. SEO and performance are moderate but could be improved. From a security perspective, the site lacks critical security headers and DNSSEC is not enabled. No privacy or cookie policies are present, and no contact or incident response information is provided. The domain registration is stable and legitimate with no privacy protection, but security posture is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is safe with no adult or explicit content, but it is basic and lacks important compliance and security features. Strategic improvements in privacy, security headers, and contact transparency are recommended to enhance trust and compliance.

G

Games Jobs Germany sagt Danke

gamesjobsgermany.de

41

Games Jobs Germany was a voluntary job board platform dedicated to the German games industry, hosting over a thousand job listings over eight years. The platform served as a community resource connecting employers and job seekers within the gaming sector and supported charitable causes such as Gaming Aid e.V. Due to declining job postings and challenging market conditions, the site has been taken offline. Technically, the website was built on WordPress using Bootstrap and Font Awesome, hosted on German servers (rzone.de). The site shows basic mobile optimization and SEO practices but lacks advanced technical features or performance optimizations. No analytics or advertising tools were detected, indicating a minimal digital footprint. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and incident response information. The absence of HTTPS status data limits full SSL evaluation, but the presence of a favicon and external font loading suggests standard web practices. No forms or data collection points were found, reducing attack surface but also limiting user engagement. Overall, the site presents a low-risk profile but also lacks modern compliance and security best practices. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

G

Game Dev Rev

gamedevrev.com

44

Game Dev Rev is a small, technology-focused event organizer specializing in game development conferences, specifically the upcoming Game Dev Rev Conference 2025 in Skopje, North Macedonia. The website serves as an informational and promotional platform for the event, targeting game developers and industry professionals. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.

C

CYBER_FOLKS S.R.L.

desprejocurivideo.ro

38

DespreJocuriVideo.ro is an educational website focused on providing resources, guides, and news related to video games, parental control, and educational benefits of gaming. The site targets parents, teachers, and families primarily in Romania, offering curated content to help create safe and engaging gaming environments for children. The business operates as a small entity founded in 2020, with a niche market position in the educational sector related to gaming. Technically, the website is built on WordPress with Elementor and integrates Google Analytics for user tracking. The site demonstrates moderate digital maturity with good design, mobile optimization, and SEO practices. Security posture is adequate with HTTPS enabled and some tracking opt-out mechanisms, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

P

PPMG Content Tuners

contenttuners.com

40

Content Tuners, operated under PPMG, is a specialized B2B service provider focused on the automotive aftermarket industry. The company offers comprehensive content creation, design, production, sales, and distribution services tailored to automotive brands and dealers. Their portfolio includes multiple supporting brands such as PASMAG and Tuner Battlegrounds, positioning them as a notable player in automotive media and marketing. The website reflects a professional and consistent brand image with clear service offerings and a target audience of automotive businesses and enthusiasts. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, hosted on AWS infrastructure. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technology stack includes common libraries such as jQuery and Bootstrap, ensuring a modern and maintainable platform. From a security perspective, the site uses HTTPS and implements CSRF tokens for AJAX requests, indicating basic security hygiene. However, it lacks DNSSEC, security headers, and visible privacy or cookie policies, which are critical for compliance and enhanced security posture. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is functional and professional but requires improvements in privacy compliance, security headers, and transparency to enhance trust and regulatory adherence. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in security and privacy policies will strengthen the company's digital maturity and stakeholder confidence.

D

Dr Peter Butcher

pbutcher.uk

47

The website pbutcher.uk serves as the personal academic and professional portfolio of Dr Peter Butcher, a Lecturer in Human-Computer Interaction at Bangor University. It highlights his academic credentials, entrepreneurial ventures such as Sim Broadcasts, and leadership role at Rethink Racing. The site targets academic peers, students, and professional collaborators, positioning itself as a niche platform for personal branding and professional networking within education and technology sectors. Technically, the website employs a straightforward modern tech stack including HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome icons. It is hosted via Namecheap with DNSSEC enabled, indicating a secure domain configuration. The site is moderately performant and mobile-optimized, though accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected, reflecting a simple but effective technical implementation. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks important security headers and formal privacy or cookie policies, which limits its compliance posture. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. The absence of vulnerability disclosure or incident response information suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy and professionally presented with a high legitimacy score based on domain age and WHOIS data. However, it would benefit from enhanced privacy compliance, security headers, and formal policies to improve user trust and regulatory adherence.

A

Availity

availity.com

73

Availity is a prominent healthcare technology company specializing in revenue cycle management solutions that streamline payer-provider collaboration and improve healthcare workflows. Their platform offers a range of services including multi-payer portals, network connectivity, clinical data solutions, and digital correspondence, targeting healthcare payers, providers, and HIT organizations. The company positions itself as a leader in healthcare revenue cycle management with a large enterprise footprint primarily in the United States. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Font Awesome, Google Fonts, and integrates with Google Tag Manager and OneTrust for privacy compliance. The site demonstrates good performance, mobile optimization, accessibility, and excellent SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and implements cookie consent mechanisms, indicating a strong security posture. However, there is no publicly available dedicated security policy or incident response contact information, and no vulnerability disclosure policy was found. The WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the overall legitimacy is supported by the professional website and business presence. Overall, Availity's website is professional, secure, and privacy compliant, serving a critical role in the healthcare technology sector. Strategic improvements include publishing explicit security and incident response policies and enhancing transparency around domain registration.

A

American Academy of Pediatrics

healthychildren.org

66

HealthyChildren.org is a comprehensive parenting website operated by the American Academy of Pediatrics, providing trusted pediatric health information and resources for parents and caregivers. The site covers a wide range of topics including child development stages, health issues, safety, family life, and nutrition. It serves as an authoritative educational platform with a strong market position in the healthcare non-profit sector. Technically, the website is built on Microsoft SharePoint and incorporates modern web technologies including JavaScript libraries, Google Tag Manager, and various marketing widgets. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could be improved with enhanced security headers and explicit privacy and cookie policies. The website does not show signs of WAF blocking or content restrictions, allowing full content access. However, WHOIS data is unavailable or privacy protected, which is typical for large organizations but limits domain registration transparency. Overall, the site is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing clear privacy and cookie policies, adding a security.txt file for vulnerability disclosures, and enhancing security headers to further strengthen security and compliance posture.

The Children's Oncology Group website serves as a comprehensive resource hub for pediatric cancer research, patients, families, and industry partners. It is operated by a well-established non-profit organization with a domain registered since 1999, reflecting a mature and credible presence in the healthcare research sector. The site offers educational materials, research collaboration information, and links to affiliated projects and foundations, positioning itself as a leader in pediatric oncology research and support. Technically, the website is built on the Sitefinity CMS platform and leverages modern web technologies including jQuery, Bootstrap, and Google Tag Manager. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. However, some areas such as accessibility and SEO could be improved for enhanced reach and compliance. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers. There is no visible cookie consent mechanism despite the use of tracking scripts, and no published incident response or security policies, indicating room for improvement in privacy compliance and security transparency. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic recommendations include implementing cookie consent for GDPR compliance, enabling DNSSEC, adding security headers, and publishing security and incident response policies to strengthen the security posture and user trust.

T

The University of Alabama at Birmingham

uab.edu

70

The University of Alabama at Birmingham (UAB) operates a professional and content-rich website representing an internationally renowned research university and academic medical center. The site targets students, researchers, faculty, and the academic community, offering educational programs and research services. The digital infrastructure is built on Joomla CMS with modern frameworks such as Bootstrap and UIkit, and includes analytics and cookie consent mechanisms, indicating a mature digital presence. Security posture is strong with HTTPS and Content Security Policy headers, though additional security headers could enhance protection. The absence of explicit privacy and terms of service policies and missing WHOIS data are notable gaps but do not detract significantly from overall trust given the .edu domain and institutional branding. Strategic recommendations include enhancing security headers, publishing clear privacy and incident response policies, and improving accessibility compliance.

R

REV TV Canada

revtv.ca

45

REV TV Canada operates as a specialized 24/7 motorsports media network delivering live race broadcasts, news, interviews, and automotive content primarily targeting Canadian motorsports enthusiasts. The website presents a professional and content-rich platform with a clear focus on motorsports programming and partnerships with relevant industry entities. Technically, the site is built on Joomla CMS with modern web technologies and is hosted on AWS infrastructure, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies, which is a critical gap for user trust and regulatory adherence. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security practices to strengthen its digital maturity and compliance.

P

Performance Publications Media Group

roadescapes.ca

9

RoadEscapes.ca is a Canadian travel media website operated by Performance Publications Media Group, focusing on road trip features, destination guides, and travel hacks. The site targets travel enthusiasts and general audiences interested in road travel content. It operates a content publishing business model supported by advertising and partnerships with related media sites. Technically, the website is built on Joomla CMS with SP Page Builder and uses common web technologies such as jQuery and Bootstrap. The site is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which impacts compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is legitimate and professionally presented but would benefit from improved security and privacy compliance measures.

P

PASMAG - Performance Auto & Sound

pasmag.com

10

PASMAG is a well-established online media publication specializing in automotive tuning, performance, and modified car culture. Operating since 1999 with a domain registered in 2000, it serves a niche audience of automotive enthusiasts by providing news, features, product reviews, buyer guides, and event coverage. The website uses Joomla CMS and integrates modern front-end libraries and Google services, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, PASMAG demonstrates strong business credibility and content quality but should improve privacy and security transparency to enhance trust and compliance.

Reallusion is a technology company specializing in 3D character creation and 2D cartoon animation software, targeting media entertainment, metaverse, digital twinning, architectural visualization, and AI simulation sectors. Their product suite includes flagship software such as iClone, Character Creator, Cartoon Animator, and various motion capture and AI-assisted animation tools. The company positions itself as an established player in the digital content creation industry with a medium-sized business profile and a focus on professional users and educators. Technically, the website employs a modern tech stack including Google Fonts, Font Awesome, jQuery UI, and multiple analytics and tracking services such as Google Analytics, Microsoft Clarity, and Crazy Egg. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers are recommended. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in security transparency. Overall, the website is professional and trustworthy in appearance but suffers from incomplete WHOIS data and missing privacy compliance documentation. Strategic improvements in privacy policy publication, security header implementation, and WHOIS transparency would enhance trust and compliance.

D

Dab Pumps Spa

h2d.com

44

H2D is a smart platform developed by Dab Pumps Spa, an established Italian company specializing in hydraulic pump technology since 1997. The website promotes a remote monitoring app designed to optimize the performance and energy consumption of DAB pumps, targeting both professional and end users. The company positions itself as an innovator in smart water control solutions with a focus on environmental sustainability and operational efficiency. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the website reflects a credible and professional business with a strong market position in the energy sector.

P

PPMG Content Tuners

ppmghq.com

40

PPMG Content Tuners is a specialized B2B service provider focused on the automotive aftermarket industry, delivering comprehensive content creation, design, production, sales, and distribution services. The company leverages over two decades of experience and operates several well-known automotive media brands such as PASMAG and Tuner Battlegrounds, positioning itself as a key player in automotive enthusiast media and marketing solutions. The website reflects a professional and consistent brand image targeting automotive businesses and enthusiasts across North America and beyond. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, incorporating modern frontend technologies like Bootstrap and jQuery. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, there is room for improvement in technical SEO and accessibility compliance. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements CSRF tokens for AJAX requests, indicating some security awareness. However, the absence of DNSSEC, security headers, and published privacy or cookie policies highlights gaps in security best practices and privacy compliance. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information. These improvements would strengthen the company's digital trustworthiness and regulatory adherence.