Security Directory

D

Dožít doma

dozitdoma.cz

52

Dozitdoma.cz is a Czech non-profit healthcare website dedicated to promoting and supporting mobile hospice care services. The site provides comprehensive information about hospice care, emphasizing the importance of dignified end-of-life care at home. It features an interactive map of hospice providers across Czechia and encourages early engagement with hospice services. The website is built on Drupal 10 and integrates modern web technologies including Google Maps API and social media tracking tools. It demonstrates good digital maturity with mobile optimization and cookie consent mechanisms in place. Security posture is solid with HTTPS and tracking controls, though some security headers could be improved. Overall, the site is trustworthy and professionally presented, serving a critical healthcare niche with clear and relevant content.

Palla Media, s.r.o. is a small Czech media company that has announced the termination of its brand effective March 13, 2025. The website serves primarily as an informational portal to communicate this change to its audience and maintain contact channels under a different brand. The company operates in the media sector and targets a general audience including existing clients and partners. The business model appears to be service-oriented media provision with a local market focus. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Bootstrap 5, and jQuery. Hosting is provided by VAS Hosting, with domain registration consistent with the company's location and founding date. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR requirements. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent with opt-in for analytics and advertising cookies. However, no explicit security policy or incident response information is published, and security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found. The security posture is adequate but could be improved with additional policies and headers. Overall, the website is professional and trustworthy with moderate risk. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and maintaining transparency in data protection practices to improve compliance and trust.

R

Relias

feedtrail.com

68

Relias is an enterprise-level healthcare technology company specializing in lifelong workforce enablement and quality improvement solutions. Their website focuses on delivering real-time data insights, patient feedback mechanisms, and prescriptive interventions to optimize healthcare quality. The company positions itself as a trusted provider in the healthcare sector with a comprehensive suite of services aimed at healthcare organizations. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Tag Manager, Hotjar, and Cookiebot for analytics, marketing, and compliance. The site demonstrates good performance, mobile optimization, and accessibility features. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR considerations are evident. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility.

W

WOSZ FAN SHOP

wosz-fan-shop.de

43

Wosz Fan Shop is a German-based e-commerce retailer specializing in sports fan merchandise and team sports apparel, featuring well-known brands such as Puma, Jako, Craft, Erima, and Hummel. The website targets sports teams, clubs, and fans primarily within Germany, offering a broad catalog of products including jerseys, balls, accessories, and team outfitting solutions. The business operates on the PrestaShop platform, leveraging standard e-commerce modules and security features like Google reCAPTCHA to protect user interactions. The site is secured with HTTPS and presents a professional design with clear navigation and mobile optimization. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and form protection via reCAPTCHA. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the website's business claims, showing consistent domain registration without privacy protection, which supports legitimacy. Overall, the website is functional, secure, and professionally presented, though improvements in privacy compliance and security headers would strengthen its posture. There are no indications of adult or unsafe content, making it suitable for a general audience. The business credibility is supported by clear contact information and brand partnerships, though explicit email contacts are not visible in the analyzed content.

S

Stölting Service Group

stoelting-gruppe.de

62

Stölting Service Group is a well-established German company specializing in cleaning, security, and personnel services. With a history spanning over 125 years, it holds a strong market position as one of the leading nationwide service providers in Germany. The company offers tailored service solutions to businesses, enabling clients to focus on their core operations. The website reflects a professional and consistent brand image, supported by certifications such as VdS and Ecozert 2024, enhancing trust and credibility. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern technologies like Google Maps API and Borlabs Cookie for privacy compliance. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and privacy mechanisms in place, but could be improved by adding explicit security headers and publishing security policies. No WAF or blocking mechanisms were detected, allowing full content access. Contact information is clearly provided, including phone, email, and physical address. However, the absence of a visible privacy policy and terms of service on the homepage slightly impacts privacy compliance scores. Overall, the site demonstrates a strong business credibility and a secure, professional digital presence.

H

Hofmann Metall GmbH

hofmann-metall.de

57

Hofmann Metall GmbH is a medium-sized German company specializing in metal recycling and resource recovery, with over 30 years of industry experience. The company operates multiple locations and offers services including metal scrap acceptance, container services, and certified recycling processes. Their market position is solid with certifications such as ISO 9001 and ISO 14001, reflecting a commitment to quality and environmental standards. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries, and integrates GDPR-compliant consent management and analytics tools. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, user-friendly, and trustworthy, supporting a clear business model focused on sustainable metal recycling.

B

Bonifatius Verlag

bonifatius-verlag.de

60

Bonifatius Verlag is a German publishing company specializing in socially relevant, spiritual, and biographical literature. Their website offers an e-commerce platform for book sales, targeting readers interested in life guidance, social sciences, and spirituality. The company positions itself as a niche publisher with a focus on positive and warm-hearted content. Technically, the website is built on WordPress with WooCommerce and German Market plugins, providing a solid e-commerce infrastructure. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, the site uses HTTPS and some security best practices but lacks comprehensive security headers and visible security policies. Privacy compliance is minimal with no explicit privacy or cookie policies found. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

D

Der Dom

derdom.de

71

Der Dom is a German-language regional religious news magazine operated under the Bonifatius GmbH publishing group. It provides independent, high-quality journalism focused on the Erzbistum Paderborn community, offering subscription-based print and digital content, newsletters, and event information. The website demonstrates a mature digital infrastructure built on WordPress with modern SEO and accessibility features. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

A

AdvertServe

advertserve.com

64

AdvertServe is a mature, cloud-hosted ad management platform targeting B2B and niche publishers with direct sales teams. The company offers a comprehensive suite of ad serving, targeting, tracking, and real-time reporting services, including video streaming and VAST/VPAID support. With a claimed 25+ years of experience and a customer base exceeding 30,000 sites globally, AdvertServe positions itself as a reliable and feature-rich solution in the ad tech industry. The platform emphasizes uptime reliability, AI-powered monitoring, and free technical support to differentiate itself in a competitive market. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, Bootstrap, and integrates Google Fonts and Font Awesome for styling. It uses Google Tag Manager and Pingdom for analytics and performance monitoring. The site is mobile-optimized with good SEO practices and a clear navigation structure, providing an excellent user experience. However, some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses secure asynchronous ad tags. The contact form includes validation and anti-spam measures. Despite these strengths, the absence of WHOIS data for the domain is a notable concern, as it conflicts with the company's claimed long operational history. Additionally, the site lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for trust and compliance. Overall, AdvertServe presents as a professional and trustworthy business with a strong technical foundation and good privacy compliance. The main risk lies in the domain registration opacity, which should be investigated further to ensure legitimacy. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and reduce potential risks.

E

Event Engine CMS Ltd

eventengine.tv

66

Event Engine CMS Ltd is a specialized web development company focused on delivering custom web applications and software solutions for the events industry. Founded in 2016 and based in Great Britain, the company offers a range of products including a CMS platform (Rondayvoo CMS), live streaming and networking solutions (Rondayvoo Live), and AI-powered content assistants (Rondayvoo AI). Their market position is that of a niche provider trusted by notable event brands and professional conference organizers. The website reflects a professional and consistent brand image with excellent content quality and clear service offerings. Technically, the website is built on WordPress using modern frameworks such as the Bricks theme builder and The SEO Framework plugin. It employs standard web technologies including JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though performance is moderate. Hosting appears to be via NameCheap, consistent with the registrar information. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, the contact form's Google reCAPTCHA implementation is broken due to an invalid site key, which poses a risk of spam. Additionally, security headers are not detected, and there is no visible incident response or vulnerability disclosure information. Privacy and cookie policies are present and appear GDPR compliant. Overall, the website demonstrates a solid business credibility and technical maturity with minor security and compliance gaps. Strategic improvements in security controls and transparency would enhance trust and reduce risk.

The website 'eefhsrv.com' represents 'Event Engine', a technology platform focused on event services. The site is built on WordPress with a basic but consistent branding and content structure. It leverages modern web technologies including Bootstrap and Google Analytics, indicating a moderate level of digital maturity. However, the content is minimal, with no privacy policy, terms of service, or contact information readily available, which limits transparency and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published policies. Overall, the site is functional but would benefit from enhanced compliance and security documentation to improve trust and regulatory adherence.

SFNCM is a French professional association dedicated to clinical nutrition and metabolism, providing healthcare professionals with training, scientific publications, events, and practical resources. The website is well-structured, professionally designed, and targets healthcare practitioners interested in nutrition clinical care. The technical infrastructure leverages modern JavaScript libraries and a reputable CMS platform (AssoConnect), with good mobile optimization and SEO practices. Security posture is solid with HTTPS, cookie consent management, and nonce-based script loading, though explicit security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the site presents a trustworthy and professional front for its audience.

B

BlockMark Technologies Ltd

blockmarktech.com

48

BlockMark Technologies Ltd operates a specialized certificate management platform called BlockMark Registry, targeting organizations and individuals involved in certification processes. The company leverages cloud and blockchain technologies to provide secure, efficient, and user-friendly digital certificate issuance, management, and verification services. With a growing user base and extensive certificate records, BlockMark positions itself as a trusted player in the digital credential space. Technically, the website is built on WordPress with modern SEO and security plugins, including Yoast SEO and Google reCAPTCHA. The site is well-structured, mobile-optimized, and integrates analytics for performance monitoring. However, some security headers are missing, and cookie consent mechanisms are not explicitly implemented, which could be improved for better compliance. Security posture is solid with HTTPS enforced and anti-bot protections in place, but the absence of published security policies and incident response information limits transparency. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by clear company registration details and active social media presence. Overall, the website and business demonstrate a professional and credible presence with room for enhancement in privacy compliance and security transparency.

E

edie

edie.net

68

edie is a UK-based media platform specializing in sustainability news, resources, and events aimed at empowering sustainable business practices. The website offers a variety of content including news articles, podcasts, case studies, and webinars, targeting business professionals interested in sustainability and net-zero initiatives. The platform is positioned as a reputable source within the sustainability sector, supported by a consistent brand presence and active social media channels. Technically, the site is built on WordPress with modern web technologies such as jQuery and Google Tag Manager, and it employs advertising and tracking services like AdvertServe and Lytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but explicit security headers and policies are not clearly identified. WHOIS data is unavailable, likely due to privacy protection, which is common for media businesses but slightly reduces transparency. Overall, the site is professional, content-rich, and trustworthy with room for improvement in security and privacy disclosures.

E

Entwässerungsbetrieb Lutherstadt Wittenberg

abwasser-wittenberg.de

58

The Entwässerungsbetrieb Lutherstadt Wittenberg is a municipal utility specializing in wastewater management and treatment services for the Lutherstadt Wittenberg region in Germany. The website serves as an informational portal providing details on wastewater treatment plants, sewer networks, disposal services, environmental protection, and customer service. It is part of the Stadtwerke Lutherstadt Wittenberg group, indicating a stable local market position with a medium-sized operational scale. The company emphasizes environmental responsibility and community service. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates accessibility tools like eyeAble. The site is mobile-optimized, well-structured, and includes SEO best practices. Security-wise, the site enforces HTTPS and implements a robust cookie consent mechanism, though it lacks explicit security headers and published incident response policies. Overall, the website demonstrates a good security posture with room for improvement in formal security documentation and header implementation. The domain WHOIS data is minimal but consistent with the business profile, and no suspicious indicators are present. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts to maintain security and compliance.

B

Bäder und Freizeit GmbH Lutherstadt Wittenberg

baden-in-wittenberg.de

58

Bäder und Freizeit GmbH Lutherstadt Wittenberg operates public swimming pools, sauna, and outdoor leisure facilities serving the Lutherstadt Wittenberg community in Germany. The company is part of the Stadtwerke Lutherstadt Wittenberg group, which includes several subsidiaries in utilities and municipal services. Their website provides detailed information on opening hours, pricing, and services, targeting local residents and visitors interested in recreational water activities. Technically, the website is built on the TYPO3 CMS platform, enhanced with accessibility tools such as eyeAble and modern JavaScript libraries like Swiper.js and jQuery. The site is mobile-optimized, accessible, and uses HTTPS with a cookie consent mechanism that complies with GDPR requirements. Performance is moderate with good SEO and navigation clarity. From a security perspective, the site enforces HTTPS and uses secure cookie settings. However, it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business's local and municipal nature, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by publishing formal security policies and enhancing security headers. The risk profile is low, with recommendations focusing on strengthening security transparency and incident readiness.

K

Kommunalservice GmbH Lutherstadt Wittenberg

kommunalservice-wittenberg.de

58

Kommunalservice GmbH Lutherstadt Wittenberg operates as a municipal service provider for the city of Lutherstadt Wittenberg, Germany. The company offers a range of services including street cleaning, winter maintenance, green care, and mobility solutions such as e-mobility and fleet management. The website reflects a well-structured municipal service entity with clear ties to the Stadtwerke group, indicating a stable local market position and trusted service delivery. The target audience primarily consists of local residents and municipal clients seeking public service solutions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. Accessibility is enhanced through the integration of the eyeAble plugin, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. No critical vulnerabilities or exposed sensitive data were found, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its municipal function effectively. Strategic improvements in security transparency and incident response readiness would further enhance its risk profile and stakeholder confidence.

T

theTribe

advenir.mobi

45

Advenir.mobi is the official website for the Advenir program, a French national initiative led by Avere-France to finance electric vehicle charging infrastructure. The program targets individuals, professionals, and public entities, providing financial incentives to accelerate the deployment of EV charging points across France. The website offers comprehensive information about the program, including eligibility, project definition, installer directories, and news updates. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices, accessibility features, and cookie consent mechanisms. Security posture is generally good with HTTPS and consent management, but the domain's expired status and lack of DNSSEC are notable risks. Overall, the site is professional, trustworthy, and well-positioned to serve its audience, though domain renewal is critical to maintain trust and availability.

Triagonale is a small, professional design studio based in Germany specializing in product and communication design. Their services include product design, editorial design, web design, and spatial design, targeting businesses and organizations seeking tailored design solutions. The website is well-structured, visually appealing, and demonstrates a strong commitment to GDPR compliance with comprehensive privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and email obfuscation, though additional security headers and explicit security policies could enhance protection. Overall, the site reflects a trustworthy and professional business presence with room for technical and security improvements.

N

netzGiraffe

netz-giraffe.de

38

netzGiraffe is a German-based digital agency specializing in web development, e-commerce solutions, and online strategy consulting. The company leverages popular CMS platforms such as WordPress, Drupal, and TYPO3, alongside e-commerce systems like Prestashop, Woocommerce, and Shopware. They also develop custom portals using the Symfony framework. The website presents a professional image with clear service offerings and client references, targeting businesses seeking comprehensive online presence and digital solutions. Technically, the site is built on WordPress with modern libraries including jQuery and Bootstrap, and employs SEO best practices via Yoast SEO. Hosting is provided by a German hosting provider, consistent with the company's regional focus. Security posture is solid with HTTPS enabled and spam protection plugins in use, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is well-structured, performant, and trustworthy, reflecting a mature small business digital presence.

Konzertbüro Leipzig, operating under the agency name SADLERMUSIC since 2002, is a small German event management company specializing in organizing live concerts across various genres. The company offers comprehensive services including event planning, PR, technical and gastronomic support, and ticketing. The website is built on WordPress with a focus on event calendar management and SEO optimization, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy policies. Overall, the website is professional and functional but could improve in privacy compliance and contact transparency to enhance trust and security.

O

OVRLAB GmbH

ovrlab.de

44

OVRLAB GmbH is a pioneering joint-venture network of XR experts in Germany, specializing in software development, hardware provisioning, and consulting services focused on virtual and mixed reality technologies. The company targets B2B clients seeking innovative XR solutions and digital transformation support. Their market position is strong within the German XR scene, supported by partnerships with regional technology firms. Technically, the website is built on WordPress using WPBakery and Yoast SEO, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

D

Daniel Remler - Videographer | Producer | Cutter

danielremler.com

50

Daniel Remler operates a professional videography and video production service with a strong focus on generative AI content. The website showcases a portfolio of work, emphasizing over 20 years of experience and expertise in both traditional video production and AI-driven content creation. The business targets clients seeking high-quality visual storytelling and AI prompt expertise, positioning itself as a niche expert in the media sector within Germany. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor, Bootstrap, and Google services integration, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, user-friendly, and compliant with privacy regulations, but the lack of WHOIS domain registration data introduces a moderate trust concern.

S

Stadtgeschichtliches Museum Leipzig

stadtgeschichtliches-museum-leipzig.de

44

The Stadtgeschichtliches Museum Leipzig operates as a public cultural institution focused on preserving and presenting the history and culture of Leipzig through multiple museum houses and exhibitions. The website serves as an information portal for visitors, educators, and researchers, offering details on exhibitions, events, educational programs, and access to collections. The museum holds a solid regional position with a clear target audience including the general public and educational sectors. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and hosted via Ordergate. The site demonstrates good mobile optimization, clear navigation, and solid SEO practices, though performance is moderate. The absence of advanced analytics or tracking tools suggests a privacy-conscious approach. From a security perspective, the site enforces HTTPS but lacks several security headers and does not publicly disclose security policies or incident response procedures. No cookie consent mechanism was detected, which may be a compliance gap under GDPR. No vulnerabilities or exposed sensitive data were found, indicating a generally secure posture but with room for improvement. Overall, the website is professional, trustworthy, and serves its informational purpose well. Strategic enhancements in privacy compliance, security headers, and incident response transparency would strengthen its security posture and user trust.

INSTRAN is an Indonesian online platform dedicated to providing inspiration and information on sustainable transportation development. The website offers a variety of content including news articles, research reports, opinion pieces, campaigns, and discussion forums, targeting a general audience interested in transportation and sustainability. The platform positions itself as a niche media outlet within Indonesia's transportation sector, founded in 2020 and maintained with consistent branding and regularly updated content. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Tiny Slider, and Google Translate integration. It is hosted on Niagahoster servers and employs HTTPS for secure communication. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks DNSSEC and important security headers like Content-Security-Policy. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are gaps in compliance and security best practices. The site uses Google AdSense and Google Tag Manager for advertising and analytics, indicating moderate user tracking without explicit privacy disclosures. Overall, INSTRAN presents a professional and trustworthy platform within its niche but would benefit from enhanced security measures, privacy compliance, and clearer contact information to improve user trust and regulatory adherence.

B

Bismania Community

bismaniacommunity.org

47

Bismania Community is an Indonesian community organization focused on bus enthusiasts, primarily in Java and other Indonesian regions. The website serves as a hub for community engagement, event announcements, merchandise sales, and information sharing related to buses and transportation. The organization aims to unite bus fans and contribute to the advancement of transportation infrastructure and automotive business activities in Indonesia. The website is built on WordPress using Elementor and Yoast SEO, hosted by HOSTINGER operations, UAB. It features a moderate technical infrastructure with good mobile optimization and SEO practices but lacks some advanced security headers and privacy compliance elements. Security posture is adequate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and no explicit security policies are published. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

P

PT Jakarta International Expo

jiexpo.com

51

Jakarta International Expo (JIEXPO) is a large-scale event venue provider based in Indonesia, offering convention, exhibition, and theatre facilities. The website presents a professional and consistent brand image targeting event organizers and exhibitors in the hospitality sector. The technical infrastructure is built on WordPress with modern plugins and tracking tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is incomplete, which slightly impacts trustworthiness but the website content and branding support legitimacy. Overall, the site is functional and well-structured but could improve privacy compliance and security transparency.

N

N+P Informationssysteme GmbH

spartacus-fm.de

60

N+P Informationssysteme GmbH operates the SPARTACUS Facility Management software platform, a comprehensive CAFM solution designed to optimize facility management processes such as maintenance, space management, energy controlling, and cost tracking. Established in 1996, the company holds a solid market position with over 200 customers and a strong presence in Germany. The website reflects a professional and consistent brand image, targeting facility management professionals and organizations seeking integrated software solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot, Google Analytics, and Usercentrics for consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence aligned with business goals and compliance requirements.

P

Peterson Solutions (Malaysia)

petersonmalaysia.com

62

Peterson Solutions (Malaysia) is a well-established sustainability consulting firm offering ESG, sustainability strategy, reporting, GHG management, and sustainable finance advisory services primarily in Malaysia. The company leverages a professional website built on WordPress with modern plugins and SEO optimizations to present its services and engage clients. The technical infrastructure includes Cloudflare DNS and standard WordPress technologies, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with policies present but lacking explicit consent mechanisms. Overall, the website reflects a credible business with strong branding and trust signals, suitable for its target audience of businesses seeking sustainability solutions.

M

MacAlister Elliott & Partners Ltd

macalister-elliott.com

56

MacAlister Elliott & Partners Ltd is a specialized consultancy focused on sustainable fisheries and aquaculture, providing expert services to governments, communities, and businesses worldwide. The company positions itself as a leader in environmental sustainability within the blue economy sector, offering a broad range of services including business planning, impact assessments, seafood supply chain improvements, and community support. The website reflects a professional and consistent brand image with clear service offerings and a target audience of stakeholders in fisheries and aquaculture. Technically, the website is built on WordPress with modern web technologies including Google Analytics and Tag Manager for tracking, Typekit fonts for typography, and various plugins for enhanced functionality such as maps and menus. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and anti-spam measures but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern for domain legitimacy and trustworthiness, warranting further investigation. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced privacy compliance, security policy publication, and domain registration transparency to improve its security posture and user trust.

P

Peterson Technologies

petersontechnologies.com

74

Peterson Technologies is a medium-sized technology company specializing in sustainability and agritech digital solutions. Operating globally across multiple industries, it offers services including geoservices, data analytics, software development, and ESG compliance solutions. The company is the technology arm of Peterson Solutions, supporting a large global workforce. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, HubSpot, and Google Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms policies. Overall, the domain registration and website content indicate a legitimate and credible business presence.

C

Core29

core29.co.uk

58

Core29 is a UK-based business intelligence and digital transformation consultancy specializing in energy and industrial sectors. Founded in 2012, it offers services including consulting, business process mapping, technology implementation, data analytics, ESG, and digital HR solutions. The company positions itself as a niche provider delivering customisable applications and rapid implementation with competitive pricing. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress with Elementor and performance optimizations via WP Rocket. Hosting and domain registration are managed through Cloudflare with DNSSEC enabled, indicating a secure and stable infrastructure. However, the site lacks publicly accessible privacy and cookie policies, which is a compliance gap. Security posture is good with HTTPS and DNSSEC but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, content-rich, and well-targeted to business clients seeking digital transformation services.

C

Control Union Global

petersoncontrolunion.com

75

Control Union Global is a large international service provider specializing in testing, inspection, certification, laboratory services, collateral management, and pest control. Operating in over 80 countries, the company targets businesses requiring trustworthy trade and compliance services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating a mature approach to privacy compliance. Technically, the site is built on WordPress with modern technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Hotjar, and Sentry. The security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not detected and no explicit security or incident response policies are published. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for global enterprises. Overall, the website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

I

Interrijn

interrijn.com

65

Interrijn is a well-established European water logistics and transportation company with over 50 years of experience, specializing in port logistics, floating storage, inland shipping, and project cargo including RoRo services. The company positions itself as a smart, green, and reliable partner for European supply chains, focusing on sustainable water-based transportation solutions. Their website reflects a professional and consistent brand image, targeting businesses requiring efficient cargo transport and storage solutions across European inland and seaports. Technically, the website is built on WordPress using the Enfold theme and integrates modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides clear navigation and comprehensive content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers, which could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not overshadow the professional presentation and active business presence. Overall, Interrijn demonstrates a mature digital presence aligned with its business operations.

P

Peterson

petersonlighthouse.com

57

Peterson Lighthouse is a B2B software ecosystem focused on digitalizing the end-to-end logistics supply chain, particularly for the energy and transportation sectors. The platform offers a suite of specialized applications that enhance visibility, planning, and management of logistics operations, including port activity, transport management, and vessel activity capturing. The company positions itself as an expert-driven provider leveraging decades of logistics experience to deliver operational efficiencies and advanced analytics. Technically, the website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is professional and trustworthy, with room for improvement in security and compliance documentation.

Z

Zentrum für Berufungspastoral

berufung.org

46

Zentrum für Berufungspastoral is a German non-profit organization dedicated to vocation pastoral care within the Catholic Church. The website provides resources, events, and contact information for diocesan vocation pastoral offices primarily targeting young people and church members in Germany and neighboring countries. The organization has an established presence since 2000, reflected by the domain age and consistent content. Technically, the site runs on TYPO3 CMS version 4.7 with common JavaScript libraries and Google Analytics for tracking, though the CMS version is outdated and may pose security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and DNSSEC. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is professional, trustworthy, and safe for general audiences.

T

The Holy See

vatican.va

67

The website www.vatican.va is the official online presence of the Holy See, serving as an authoritative source for Catholic teachings, papal documents, and information about the Roman Curia and liturgical celebrations. It targets a global audience including the Catholic faithful, scholars, and pilgrims. The site offers multilingual content and event calendars, reinforcing its role as a key informational hub for the Vatican. Technically, the site employs modern web technologies such as jQuery, Bootstrap 5, Swiper.js, and Google Tag Manager, and appears to be built on Adobe Experience Manager (AEM). The site is mobile-optimized and has good SEO practices, though performance is moderate. Accessibility is basic but functional. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks visible security headers and does not provide a privacy or cookie policy on the analyzed page. No incident response or vulnerability disclosure information is present. No WAF or blocking mechanisms were detected, and no suspicious content or vulnerabilities were found. Overall, the site is highly credible and trustworthy given its official status and domain registration. However, it would benefit from improved privacy compliance, explicit security policies, and enhanced security headers to align with best practices.

W

Web Commerce GmbH

digitalpastoral.de

45

Digitalpastoral.de is a German-language digital platform focused on providing resources, networking, and content for Catholic church communities and pastoral workers. The platform serves as a marketplace and knowledge hub for digital church practice, offering articles, event listings, and community engagement tools. It is developed and maintained by Web Commerce GmbH, with affiliations to multiple (Erz-)Bistümer, indicating a trusted position within the church digital ecosystem. The website targets church professionals and digital faith communities, positioning itself as a niche but important resource in the religious digital media space. Technically, the site is built on Edith CMS and leverages modern web technologies including jQuery, Bootstrap, and FontAwesome. It integrates Matomo analytics with privacy-conscious tracking controls and uses HTTPS to secure communications. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and professional design. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. The lack of a published security policy or incident response contacts is a gap in transparency and readiness. Privacy compliance is partial, with a privacy policy present but no cookie consent banner detected. Overall, the domain and hosting infrastructure appear legitimate and consistent with the business claims, with no signs of suspicious WHOIS data or blocking by WAFs. The overall risk assessment is moderate with recommendations to implement explicit cookie consent, add security headers, and publish security and incident response policies to strengthen trust and compliance. The platform is well-positioned as a specialized digital resource for church communities but should address these gaps to maintain and improve its credibility and security posture.

F

Fimlab Laboratoriot Oy

fimlab.fi

74

Fimlab Laboratoriot Oy operates as a leading healthcare laboratory service provider in Finland, specializing in medical testing and diagnostics. The company targets healthcare professionals and patients, offering comprehensive laboratory services. The website reflects a mature digital presence with a WordPress CMS, WooCommerce integration for service offerings, and modern JavaScript libraries enhancing user experience. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of a public security policy and incident response information suggests room for improvement in transparency. WHOIS data confirms the domain's legitimacy and consistency with the business identity, supporting trustworthiness. Overall, the website demonstrates a solid balance of business credibility, technical implementation, and privacy compliance, suitable for a healthcare service provider.

N

NordLab

nordlab.fi

53

NordLab is a publicly owned clinical laboratory service provider operating in northern Finland, serving healthcare professionals and patients with reliable and high-quality laboratory and sample collection services. The organization is owned by four northern welfare areas and focuses on ensuring the availability of advanced and trustworthy laboratory services to support regional healthcare. The website reflects a professional and regionally focused healthcare entity with clear service offerings and patient guidance. Technically, the site is built on WordPress with modern web technologies including jQuery, FontAwesome, and integrates Google Analytics and a chatbot service for enhanced user interaction. The site is mobile optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and a detailed privacy policy. However, the site lacks explicit security headers and published security or incident response policies, representing areas for enhancement. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the entity. The website is safe, professional, and well-suited for its healthcare audience.

Mikroregion Chrudimsko is a regional government association website serving 29 municipalities in the Pardubice region of the Czech Republic. The site provides information about member municipalities, official notices, financial management, realized projects, and tourism opportunities. It targets local residents, government officials, and tourists interested in the region. The business model is informational and supportive of regional development, with a small organizational size and a founding date consistent with the domain registration. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is hosted likely by WEDOS, a Czech hosting provider, and shows moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No forms collect sensitive data, reducing risk, but the absence of privacy and cookie policies indicates compliance gaps with GDPR. No vulnerability disclosures or incident response contacts are provided. The WHOIS data is consistent and trustworthy, with no privacy protection or suspicious patterns. Overall, the website is professional, trustworthy, and well-aligned with its regional government purpose. However, it would benefit from improved privacy compliance, enhanced security headers, and formalized security policies to strengthen its security posture and regulatory adherence.

N

National Heritage Institute (Národní památkový ústav)

zamek-slatinany.cz

43

The website represents the official online presence of the Slatiňany State Chateau, managed by the National Heritage Institute of the Czech Republic. It serves as a cultural heritage and tourism portal providing detailed visitor information, historical context, event announcements, and online ticketing options. The site targets tourists and cultural enthusiasts interested in historic sites and government-managed heritage locations. The business model is governmental and non-profit, focusing on preservation and public engagement. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for maps, Google Analytics and Tag Manager for analytics, and uses Typekit and Google Fonts for typography. The site is hosted by REG-WEBGLOBE and uses HTTPS with cookie consent mechanisms that allow granular user control, indicating a mature digital infrastructure. Mobile optimization and accessibility are well addressed. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the institution. Overall, the site demonstrates a good security posture but could improve transparency on security policies. The overall risk is low given the official nature and absence of suspicious elements. Strategic recommendations include publishing a dedicated privacy policy on the main domain, adding security headers, and providing incident response contact details to enhance trust and compliance.

K

Křižovnické lesy, s.r.o.

krizovnickelesy.eu

49

Křižovnické lesy, s.r.o. is a Czech forestry management company founded in 2015, managing forest assets owned by the Rytířský řád Křižovníků s červenou hvězdou. The company operates across multiple regions in the Czech Republic, focusing on sustainable forest management and timber supply, with certifications such as PEFC and participation in FSC. The website is built on WordPress using a standard theme, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Contact is primarily via a contact form on a dedicated page. Overall, the site presents a professional and trustworthy image consistent with a small regional forestry business.

Z

Zdravotní ústav Most k domovu z.ú.

mostkdomovu.cz

55

Most k domovu is a Czech non-profit healthcare organization specializing in comprehensive home-based palliative and health care services. Founded in 2007, it serves patients and families primarily in Prague and surrounding areas, offering a range of services including home hospice care, home health care, social counseling, and spiritual care. The organization emphasizes compassionate, professional care enabling patients to remain in their homes during critical health phases. The website reflects a mature digital presence with clear service descriptions, testimonials, and partnership affiliations, positioning it as a leading provider in its sector.

P

Partos

partos.nl

62

Partos is a Dutch non-profit branch association representing over 100 organizations involved in international cooperation. The website serves as an informational and membership platform, providing resources and advocacy for its members. The organization targets Dutch development organizations and stakeholders interested in international collaboration. Technically, the website is built on WordPress using a child theme of FoundationPress, with integrations such as Gravity Forms for data collection and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking, with appropriate consent mechanisms in place. Security posture is good with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing security headers and publishing security policies. The site is professional, well-branded, and trustworthy, with no signs of malicious or suspicious activity. However, explicit privacy and terms of service pages were not found in the provided content, which could be improved for compliance and transparency.

E

EIK Certificering

eikcertificering.nl

51

EIK Certificering is a Dutch certification body specializing in audits and certifications based on ISO 9001, ISO 27001, and various sector-specific standards. The company offers tailored audits, training, and development of industry norms to help organizations improve quality and compliance. The website reflects a professional and well-established business with accreditation from the Raad voor Accreditatie, client testimonials, and a clear focus on quality and growth. Technically, the site is built on WordPress with Elementor and Yoast SEO, showing good digital maturity with modern technologies and solid SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the site lacks a dedicated security policy or incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, though it could improve cookie consent mechanisms and publish vulnerability disclosure details.

Hermes Traffic Intelligence ApS is a Denmark-based company specializing in traffic data analytics and bicycle movement data ecosystems. They provide advanced algorithms and tools to assist road administrators in making informed decisions to improve traffic infrastructure. Their BIKE™ ecosystem aggregates anonymized bicycle data from multiple suppliers to enhance bicycle infrastructure planning. The company operates a professional website with clear contact information and a newsletter subscription service, targeting government and regional traffic planners. Technically, the website is built on the One.com Web Editor platform, uses modern JavaScript libraries like Swiper.js and jQuery, and integrates Mailchimp for marketing. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism, reflecting basic GDPR compliance. Security posture is adequate but could be improved by adding security headers and publishing a security policy. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

SFMCON.dk is a professional consultancy specializing in smart ticketing and Mobility as a Service (MaaS) solutions primarily targeting public transport stakeholders. Founded by Søren H. Sørensen in 1998 and based in Copenhagen, Denmark, the company offers expert consulting and program management services to facilitate integrated mobility solutions combining public and private shared vehicles. The website reflects a niche market position with clear service offerings and a professional presentation. Technically, the website is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No analytics or tracking services are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which lowers its security posture. There are no visible privacy, cookie, or incident response policies, which impacts compliance and user trust. The domain WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance measures, and improved technical optimization to strengthen trust and user experience.

I

Industry 5.0 konverents - Industry 5.0

industry40.ee

45

Industry 5.0 is a specialized conference website focused on enhancing the competitiveness of Estonian industrial enterprises through innovation, AI, sustainability, and export strategies. The event is scheduled for May 14, 2025, in Tartu, Estonia, targeting manufacturing professionals, government, and educational sectors. The website is built on WordPress with modern plugins such as Yoast SEO, Elementor, and Google Analytics integration, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

E

e-estoniax.com

e-estoniax.com

10

e-estoniax.com is a specialized website representing e-solutions from the Estonian ICT cluster, focusing on assisting public sector and business clients in building digital societies and profitable businesses. The site positions itself as a trusted advisor and solution provider in legislation, organizational change, and technology development. The technical infrastructure is based on WordPress with modern web technologies, including cookie consent management and Google Analytics integration. The website is well-structured, mobile-optimized, and SEO-friendly, reflecting a moderate to high level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though some security headers and DNSSEC are missing. No explicit security or incident response policies are published, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, targeting government and business sectors primarily in Estonia and Denmark.