Security Directory

B

Britannia P&I Club

britanniapandi.com

75

Britannia P&I Club is a well-established mutual marine insurance provider, specializing in Protection & Indemnity insurance for the maritime industry. With a history dating back to 1855, it holds a strong market position as a leader within the International Group of P&I Clubs. The website clearly targets shipowners, operators, charterers, and maritime professionals, offering a comprehensive range of insurance and loss prevention services. The business model focuses on underwriting, claims handling, and additional insurances tailored to the shipping sector. Technically, the website is built on WordPress using modern frameworks like Bootstrap 5 and jQuery, with SEO optimization via Yoast and analytics through Google Analytics and Tag Manager. Hosting appears to be with UKFast, and the site demonstrates good mobile responsiveness and user experience. Security measures include HTTPS, domain transfer protections, and cookie consent mechanisms, although DNSSEC is not enabled and some security headers could be improved. The security posture is solid but could be enhanced by implementing DNSSEC, a Content-Security-Policy header, and publishing a vulnerability disclosure policy. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. No critical vulnerabilities or suspicious content were detected, and the site maintains a professional and trustworthy online presence. Overall, Britannia P&I Club’s website reflects a mature digital infrastructure supporting a reputable maritime insurance business. Strategic recommendations include strengthening DNS security, enhancing security headers, and formalizing incident response and vulnerability disclosure processes to further improve trust and resilience.

M

Michal Danko

michaldanko.com

45

Michal Danko operates as a freelance full stack web developer based in Košice, Slovakia, with over 10 years of experience. The website serves as a professional portfolio showcasing his skills in web development technologies including WordPress, WooCommerce, Laravel, and front-end frameworks. The business model is focused on freelance client engagements, targeting clients seeking custom web development and design services. The website is well-structured and presents a clear overview of services and past projects, positioning Michal as an experienced independent developer in the Slovak market. Technically, the website uses a modern tech stack with HTML5, CSS3, Bootstrap, JavaScript, PHP frameworks, and CMS platforms like WordPress and October CMS. Hosting is provided by Websupport, a Slovak hosting provider, with domain registration consistent with the business location. Google Analytics is used for visitor tracking, and Google Fonts are loaded for typography. The site is mobile optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected, which could improve security posture. There are no privacy or cookie policies present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response information is provided. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low to moderate. The site is professional and trustworthy but lacks formal privacy and cookie policies and some security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing vulnerability disclosure information to improve compliance and security maturity.

D

Development KSK s. r. o.

bikey.sk

51

Bikey.sk is a regional e-bike rental platform serving the Košice region in Slovakia, operated by Development KSK s. r. o. The website presents a unified brand for multiple e-bike rental locations, aiming to boost tourism and provide accessible cycling equipment. The business model is focused on regional tourism and transportation services, targeting visitors and tourists interested in e-bike rentals. The website is built on WordPress with a modern tech stack including Google Analytics and Tag Manager for tracking, and uses cookie consent mechanisms to comply with GDPR. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, well-branded, and trustworthy, with good SEO and mobile optimization.

K

Košice Region Film Office

kosicefilmregion.sk

43

Košice Region Film Office is a government-backed entity dedicated to promoting the Košice region as a film-friendly destination. It serves as a primary contact point for filmmakers, offering support services including location scouting, permit assistance, accommodation recommendations, and financial incentives. The office aims to foster regional audiovisual industry growth and enhance film tourism. Technically, the website is built on WordPress with Elementor, employing modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

I

IDS Východ, s.r.o.

idsvychod.sk

41

IDS Východ, s.r.o. operates as a regional integrated public transportation project in Eastern Slovakia, jointly initiated by the Prešovský and Košický self-governing regions. The company focuses on creating a seamless transport system combining rail, bus, and urban transit services to improve mobility and accessibility for residents and visitors. The website reflects a well-structured, government-backed initiative with clear communication channels and comprehensive information about tariffs, projects, and partner operators. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations, including GDPR-compliant cookie management and analytics integration. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust further. Overall, IDS Východ presents a credible, professional digital presence aligned with its public service mission.

The website 'www.farktography.com' is a WordPress-based community platform focused on 'Farktography', likely a photography-related forum or parody community. It offers forums and blog content to engage users interested in this niche. The site uses common web technologies such as WordPress CMS, Bootstrap framework, jQuery, and Font Awesome icons, indicating a standard modern web infrastructure. The site is accessible over HTTPS with a valid SSL certificate, ensuring secure communication. However, the absence of privacy, cookie, and terms of service policies, as well as lack of contact information, limits its compliance and trustworthiness. The WHOIS data is unavailable or indicates the domain is unregistered, which raises legitimacy concerns despite the active website content. Overall, the site provides basic community services but lacks comprehensive business and security policies.

O

Oil Price Information Service, LLC

axxispetro.com

65

Axxis is a specialized provider of fuel management automation software and services targeting fuel retailers, wholesalers, and jobbers. The company offers a modular suite of integrated solutions designed to automate fuel sourcing, pricing, inventory management, dispatching, billing, and analytics. The website reflects a professional and consistent brand identity aligned with its parent company, Oil Price Information Service (OPIS), a Dow Jones company. The digital infrastructure is built on WordPress with modern plugins and tracking tools, supporting a good user experience and SEO. Security posture is solid with HTTPS and reCAPTCHA implemented, though explicit security headers and incident response information are absent. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy despite the professional presentation and valid contact information. Overall, the site is a credible business platform with room for improvement in transparency and security disclosures.

S

SECCIÓN SINDICAL UGT BBVA

fesmcugt.online

49

SECCIÓN SINDICAL UGT BBVA is a union section representing employees of BBVA under the umbrella of the Unión General de Trabajadores (UGT) in Spain. The website serves as an information portal providing updates on labor rights, collective bargaining, union activities, and member services. It targets BBVA employees and union members, offering resources such as circulars, negotiation updates, and affiliation information. The business model is focused on union representation and member engagement within the finance sector. The website is medium-sized, founded in 2018, and maintains consistent branding aligned with UGT standards. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including GDPR Cookie Compliance, Contact Form 7, and The Events Calendar. It employs modern web technologies such as jQuery and Google Tag Manager for analytics. Hosting is provided by Dinahosting SL, a Spanish registrar and hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized transfers or deletions. However, it lacks advanced security headers and DNSSEC is not enabled. The site includes a GDPR-compliant cookie consent mechanism and privacy policy but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its niche audience with relevant content and functional features. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

F

Fagskolen Vestfold og Telemark

fagskolen-vestfoldogtelemark.no

44

Fagskolen Vestfold og Telemark is a vocational higher education institution in Norway, founded in 2024 and operated under Telemark fylkeskommune. The website presents a professional and comprehensive digital presence, offering various study programs, industry-specific courses, and student support services. The institution targets students and professionals seeking flexible and practical education aligned with labor market needs. Technically, the website is built on WordPress with modern JavaScript frameworks and integrates Google Analytics and Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy educational organization.

W

World Clinical Laser Institute

learnlasers.com

57

The World Clinical Laser Institute (WCLI) is a well-established professional organization specializing in dental laser technology education, certification, and events. Founded in 2000, it has grown to become the largest dental laser organization globally with over 19,000 members. The website reflects a professional and consistent brand presence targeting dental professionals and researchers interested in advancing dental care through laser technologies. The business model centers on membership, training, certification, and knowledge sharing through symposiums and webinars. Technically, the website is built on WordPress using the Elementor page builder, hosted with GoDaddy as registrar and DNS managed via Cloudflare. The site is mobile optimized with good navigation and content quality. However, performance is moderate and accessibility is basic. No advanced analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, DNSSEC is not enabled and no security headers were detected, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and professional but would benefit from enhanced security headers, privacy compliance improvements, and DNSSEC implementation to strengthen its security posture and regulatory adherence.

C

Children's of Alabama Indy Grand Prix

indyalabama.com

56

The Children’s of Alabama Indy Grand Prix website represents a well-established motorsports event held annually at Barber Motorsports Park in Birmingham, Alabama. The event supports the Children’s of Alabama hospital and is powered by AmFirst, indicating a strong charitable and community focus. The website provides comprehensive information about the event, ticketing, hospitality, fan activities, and sponsorship opportunities, targeting motorsports enthusiasts and local supporters. The site is professionally branded and maintains consistent messaging aligned with its charitable mission. Technically, the website is built on WordPress using the Total theme, incorporating modern web technologies such as jQuery, Revolution Slider, and Gravity Forms. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and accessible, with a user-friendly design and clear navigation. However, it lacks an explicit cookie consent mechanism, which may impact privacy compliance. From a security perspective, the site enforces HTTPS and uses standard tracking and marketing scripts. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. Security headers are not explicitly detected but HTTPS presence suggests a baseline security posture. The absence of WHOIS registration data is a concern for domain legitimacy, although the site content and branding appear trustworthy. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website demonstrates a solid digital presence with good content quality and technical implementation. Privacy compliance could be improved by adding cookie consent and GDPR indicators. The lack of WHOIS data reduces trustworthiness slightly but does not outweigh the professional presentation and clear business purpose. Strategic recommendations include enhancing security headers, implementing a vulnerability disclosure policy, and improving privacy compliance to strengthen trust and security posture.

WGBG Wirtschafts-Genossenschaft Berliner Grundbesitzer eG is a specialized real estate management cooperative based in Berlin, offering comprehensive property management, technical support, and advisory services tailored to property owners in Berlin and Brandenburg. The cooperative business model emphasizes owner interests without investor or shareholder influence, positioning WGBG as a trusted niche player in the local real estate market. Technically, the website is built on WordPress with modern plugins and themes, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent, but lacks published privacy policies and incident response information, indicating room for compliance and security maturity improvements. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency to strengthen user trust and regulatory compliance.

T

Traildeer

traildeer.com

48

Traildeer is a specialized bike travel agency offering mountain bike adventures and guided tours primarily in Europe. The company operates a professional WordPress-based website with e-commerce capabilities for booking trips and purchasing merchandise. The technical infrastructure includes modern web technologies and standard marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website presents a credible and professional front for a niche travel service provider.

congocash.ar is a niche content website dedicated to the Congo Cash slot game by Pragmatic Play, providing detailed guides, gameplay features, and casino-related information primarily targeting Spanish-speaking online gambling enthusiasts in Argentina. The site is built on WordPress with SEO optimization via Rank Math and is mobile-optimized, offering a good user experience and relevant content for its audience. However, it lacks critical compliance elements such as privacy and cookie policies, and does not provide any contact or business verification information, which impacts its trustworthiness. The domain WHOIS data is suspicious due to a future creation date, raising questions about legitimacy or data accuracy. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts.

R

Rhoss

rhoss.it

56

Rhoss S.p.a. is a well-established Italian company specializing in air conditioning and air handling solutions, serving both public and private sectors since 1968. As part of the NIBE Group, Rhoss offers a broad portfolio of HVAC products including chillers, heat pumps, fan coils, and air handling units, targeting large buildings and residential markets. The website reflects a mature digital presence with multilingual support and comprehensive product and reference information. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and related regulations.

DDAIR GROUP is a recognized leader in the HVAC industry within Albania, specializing in heating, ventilation, and air conditioning solutions. The company targets architects, building owners, contractors, and designers, positioning itself as a key market player with a focus on energy-saving technologies and renewable energy projects. Their website reflects a professional business with clear contact information and partnerships with reputable manufacturers. Technically, the site is built on WordPress with modern plugins like Slider Revolution, offering a visually rich and mobile-optimized experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security measures.

Ö

Österreichische Gesellschaft für Gynäkologie und Geburtshilfe (OEGGG)

oeggg.at

10

The Österreichische Gesellschaft für Gynäkologie und Geburtshilfe (OEGGG) is a well-established Austrian professional society focused on gynecology and obstetrics. The website serves as a comprehensive resource for healthcare professionals, offering guidelines, educational modules, campaigns, and member services. The organization has a strong market position with over 2000 members and maintains a professional online presence with clear navigation and relevant content. Technically, the site is built on WordPress with modern plugins and respects privacy through the use of Matomo analytics and a compliant cookie consent mechanism. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, compliant with GDPR, and serves its target audience effectively.

N

NSBacademy

nsb-academy.com

10

NSB Academy is a specialized maritime training center based in Germany, offering certified leadership and simulator-based training for maritime professionals. The company has an established presence since 2008 and provides a range of services including simulator training, in-person courses, online learning modules, and custom services tailored to maritime officers. The website reflects a professional and consistent brand image, targeting maritime professionals seeking advanced training solutions. Technically, the site is built on WordPress with Elementor and Astra theme, showing good SEO and mobile optimization but moderate performance. Security posture is adequate with HTTPS and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its niche, though it lacks explicit security and incident response policies.

D

Deutsche Gesellschaft für Psychiatrie und Psychotherapie, Psychosomatik und Nervenheilkunde e. V.

dgppn.de

61

The Deutsche Gesellschaft für Psychiatrie und Psychotherapie, Psychosomatik und Nervenheilkunde e. V. (DGPPN) is a leading German professional society dedicated to psychiatry, psychotherapy, psychosomatics, and neurology. The organization provides a comprehensive range of services including clinical guidelines, congresses, educational resources, and advocacy aimed at healthcare professionals, researchers, patients, and the general public interested in mental health. The website reflects a mature and professional digital presence with consistent branding and high-quality content tailored to its target audience. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, enhanced with Bootstrap and jQuery for responsive and interactive features. It employs modern web standards, including HTTPS and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with external dependencies on common CDNs and libraries. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended best practices. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with clear policies and minimal tracking limited to necessary cookies and reCAPTCHA. Overall, the DGPPN website presents a trustworthy and professional front for the organization, with a solid technical foundation and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its security posture and user trust.

P

Parco Commerciale Le Fontane

parcocommercialelefontane.it

53

Parco Commerciale Le Fontane is a retail shopping center located in Catanzaro, Italy, offering a variety of shopping, entertainment, and relaxation services. The website positions the business as a local/regional destination with key offerings including retail stores, events, expo spaces, and a cinema. The site is built on WordPress using the Enfold theme and integrates modern web technologies such as jQuery and Google Fonts. Cookie consent is managed via CookieYes, ensuring GDPR compliance. Social media integration is robust, spanning major platforms like Instagram, Facebook, TikTok, YouTube, and Twitter. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. Overall, the website is professional, user-friendly, and trustworthy, supporting the business's market presence effectively.

S

Sociedade de Pediatria de São Paulo - SPSP

spsp.org.br

56

Sociedade de Pediatria de São Paulo (SPSP) is a well-established non-profit professional association serving pediatricians and healthcare professionals in São Paulo, Brazil. It operates as the pediatric department of the Associação Paulista de Medicina (APM) and is affiliated with the Sociedade Brasileira de Pediatria (SBP). The website provides educational resources, event information, publications, and membership services, targeting medical professionals and members of the pediatric community. The organization maintains a credible market position as a regional leader in pediatric healthcare education and advocacy. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized, SEO-friendly, and integrates multiple Google tracking and analytics tools. Performance is moderate, with good design quality and user experience. Privacy and cookie policies are present, though GDPR compliance is basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit advanced security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or malicious content were detected. The presence of multiple tracking scripts suggests moderate user tracking, which could be improved for privacy compliance. Overall, SPSP's website is professional, trustworthy, and serves its audience well, with room for improvement in security policies and privacy transparency to enhance user trust and compliance.

Ö

ÖGKJ – Österreichische Gesellschaft für Kinder- und Jugendheilkunde

oegkj-jahrestagung.at

52

The website represents the Austrian Society for Pediatrics and Adolescent Medicine's 63rd annual conference, scheduled for September 2025 in Graz, Austria. It serves as an information and registration portal for healthcare professionals specializing in pediatrics. The site is professionally designed using WordPress with WooCommerce and Elementor, providing a modern and responsive user experience. GDPR compliance is well implemented with a cookie consent banner and detailed privacy policy. Security posture is adequate with HTTPS enforced, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the professional content and clear contact information support legitimacy. Overall, the site effectively supports its business purpose as a professional medical conference platform.

R

Rancho Los Cerritos

rancholoscerritos.org

61

Rancho Los Cerritos is a non-profit historic site dedicated to preserving and sharing California's rich cultural history through tours, events, and educational experiences. The website reflects a well-established local attraction with a clear focus on community engagement and cultural education. Technically, the site is built on WordPress using the Bricks Builder framework, hosted with BunnyCDN for performance optimization, and demonstrates excellent mobile responsiveness and SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of visible privacy and cookie policies and incomplete WHOIS data present areas for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

G

Generation PSY – DGPPN e.V.

generation-psy.de

61

Generation PSY is a non-profit youth initiative under the German Society for Psychiatry and Psychotherapy, Psychosomatics and Neurology (DGPPN). The website serves as an educational and engagement platform targeting young psychiatrists, medical students, and healthcare professionals interested in psychiatry. It offers campaigns, mentoring, networking events, and career information to promote psychiatry as a profession. The site is well-branded, professionally designed, and content-rich, reflecting a clear mission and target audience. Technically, the website is built on WordPress with modern web technologies, including lazy loading and cookie consent management, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, supporting its role as a reputable non-profit healthcare initiative.

A

Aktionsbündnis Seelische Gesundheit

seelischegesundheit.net

64

Aktionsbündnis Seelische Gesundheit is a well-established German non-profit coalition comprising over 180 member organizations dedicated to raising awareness and acceptance of mental health issues. The website serves as an information hub and advocacy platform, offering resources, event information, and campaign details to a broad audience including affected individuals, families, professionals, and policymakers. The organization enjoys a strong market position within the German healthcare advocacy sector, supported by governmental projects and a large network of partners. Technically, the website is built on WordPress with modern optimization plugins such as Autoptimize and Borlabs Cookie for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the professional content and contact information mitigate this risk. No explicit security or incident response policies are published, which could be improved. Overall, the website is a credible and professional resource for mental health advocacy in Germany, with recommendations to enhance security headers, publish incident response information, and clarify domain registration status to strengthen trust and compliance.

V

Archiv československých her a vývojářů Visiongame Visiongame

visiongame.cz

46

Visiongame.cz is a niche Czech and Slovak gaming archive and community platform established in 2006. It catalogs games, studios, and developers from the region, providing news, articles, and curated collections. The website targets gamers and developers interested in regional game development history and current projects. Technically, it is built on WordPress with modern JavaScript libraries and uses Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and reCAPTCHA but lacks some security headers and explicit privacy and cookie policies, indicating room for compliance improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and support accessibility. Overall, the domain registration data is consistent with the website's regional focus and age, supporting legitimacy.

T

TAC360

tac360.ca

47

TAC360 is a specialized online platform dedicated to showcasing Canadian Technology Access Centres (TACs) through curated video content. The website serves as an educational and promotional resource, targeting stakeholders interested in advanced manufacturing, agriculture, clean technology, and other innovation sectors in Canada. It provides a searchable video gallery filtered by sector and region, enhancing accessibility to TAC information. The platform is relatively new, founded in 2021, and operates within the technology industry with a focus on Canadian markets. Technically, TAC360 is built on WordPress with AMP integration for mobile optimization and uses several plugins including Yoast SEO and All-in-One Video Gallery. The site employs HTTPS with a valid SSL certificate and uses Clicky Analytics for visitor tracking. While the site is generally well-structured and mobile-friendly, it lacks some security headers and does not have DNSSEC enabled, which are areas for improvement. From a security perspective, the website demonstrates basic good practices such as HTTPS and domain transfer protection. However, the absence of a privacy policy, cookie consent mechanism, and security headers reduces its privacy compliance and security posture. No critical vulnerabilities or adult content were detected, and the domain registration is privacy protected but consistent with the business profile. Overall, TAC360 presents a professional and trustworthy platform with good content quality and business credibility. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, enabling DNSSEC, and adding a vulnerability disclosure policy to improve compliance and security maturity.

T

The Signal

signalhfx.ca

55

The Signal is a student-run media website produced by senior journalism students at the University of King’s College in Halifax, Nova Scotia. It provides a variety of news content including local news, arts, science, sports, business, and investigative journalism. The site also offers podcasts and video content, targeting a general audience interested in regional news and culture. The business model is educational and media-focused, supported by the university. Technically, the website is built on WordPress, uses modern web technologies such as jQuery, Font Awesome, and Google Tag Manager, and is hosted on AWS infrastructure. The site is mobile optimized and accessible with good SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and some security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. No direct contact information or security policies are publicly available, which limits transparency. Overall, the website is professional, trustworthy, and serves its educational media purpose well.

I

IC Studio

icstudio.online

58

IC Studio is a Ukrainian-based IT and web development company specializing in custom software solutions using Laravel and October CMS frameworks. The company targets B2B and B2C clients, offering services including corporate websites, CRM and ERP systems, and digital marketing. With over 4 years in the market and more than 104 projects completed, IC Studio positions itself as a reliable partner for IT infrastructure transformation. Technically, the website demonstrates a mature technology stack with modern cloud hosting providers and development tools, indicating a good level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

F

Finansduden

finansduden.no

10

Finansduden is a Norwegian finance-focused website established in 2022, providing comprehensive information and comparison tools related to personal finance, loans, and investments. It positions itself as one of Norway's largest personal finance portals, targeting Norwegian consumers seeking guidance on financial products. The website employs a modern WordPress infrastructure with performance optimizations such as WP Rocket and integrates Google Analytics via Google Tag Manager for user tracking. The design is professional, mobile-optimized, and SEO-friendly, supporting a positive user experience. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some security headers and formal privacy and cookie policies, which are areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the site is trustworthy and well-maintained but should address compliance gaps to strengthen privacy and security assurances.

S

Sequoia

sequoia.com

72

Sequoia is a strategic partner specializing in helping investor-backed companies optimize their compensation, benefits, and risk management strategies. Positioned as a trusted advisor, Sequoia serves a B2B market focused on financial and operational excellence. The company leverages a professional digital presence with a well-structured website that clearly communicates its value proposition and services. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and marketing tools such as Google Analytics, Marketo, and LinkedIn Insight, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the absence of WHOIS data introduces some uncertainty about domain registration transparency.

V

VRINN Immersive Learning Cluster – VR/AR/XR and gamification

vrinn.no

50

VRINN Immersive Learning Cluster is a Norwegian cluster organization specializing in VR, AR, XR, and gamification technologies focused on immersive learning. The cluster provides a collaborative platform for companies to exchange ideas, develop projects, and advance immersive learning applications across various sectors including healthcare and crisis management. The website is built on WordPress with standard plugins and moderate performance, featuring good design and navigation but lacking key compliance documents such as privacy and cookie policies. Security posture is adequate with HTTPS but missing important security headers and incident response information. Tracking technologies like Facebook Pixel and Google Tag Manager are present without explicit consent mechanisms, indicating privacy compliance gaps. Overall, the domain registration is consistent with the business launch timeline, supporting legitimacy.

GFX-pulse is a Slovak technology company specializing in mobile and TV application development, web design, e-commerce solutions, and enterprise software such as ERP and CRM systems. Established since 2000 with a domain registered in 2003, the company has a solid market presence in Slovakia and serves a diverse client base including businesses and public sector entities. Their portfolio includes notable mobile apps and web projects, demonstrating technical competence and industry experience. Technically, the website uses a broad technology stack including Objective-C, Java, PHP, Python, and modern web standards, supported by Google Analytics for user tracking. However, the site lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Security posture is moderate with no visible vulnerabilities but room for improvement in SSL configuration and security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to align with modern standards.

O

Ocean Summit

ocean-summit.de

54

Ocean Summit is a non-profit organization dedicated to marine conservation education, actions, and networking primarily in Schleswig-Holstein, Germany. The website serves as a platform to engage marine enthusiasts of all ages through educational programs, events, and media content such as podcasts and magazines. It positions itself as a regional leader in marine protection advocacy and education. Technically, the website is built on WordPress using the Enfold theme and several plugins including EventON and Toolset Blocks. It employs modern web technologies such as jQuery and Google Maps API, and is hosted with domain control services likely provided by GoDaddy. The site is mobile-optimized and SEO-friendly with structured data markup and social media integration. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, explicit security headers are not detected, and no formal security policy or incident response information is published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is professional, trustworthy, and safe for general audiences. It demonstrates good privacy compliance and technical maturity but could improve its security posture by adding security headers and incident response details.

S

Stiftung Chancen für Kinder

stiftung-chancenfuerkinder.de

60

Stiftung Chancen für Kinder is a German non-profit foundation established in 2004, dedicated to improving the lives of children worldwide through projects in education, culture, and medical care. The foundation has a solid market position supported by reputable partners and a clear mission to provide children in poverty with better opportunities. The website is professionally designed using WordPress, featuring modern plugins for marketing and cookie management, and offers content in German with an English version available. Technically, the site is well-structured, mobile-optimized, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a trustworthy and credible organization with transparent domain registration and consistent business information.

D

Društvo Ujedinjenih Građanskih Akcija

dugabih.ba

10

Društvo Ujedinjenih Građanskih Akcija (Duga BiH) is a non-profit organization based in Bosnia and Herzegovina dedicated to supporting children, youth, parents, and professionals through educational and psychosocial programs. The organization positions itself as a leading entity in social inclusion and community support, offering training, counseling, and project-based services. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern frameworks and plugins, ensuring good performance and mobile optimization. Security measures such as HTTPS and security headers are properly implemented, although explicit privacy and cookie policies are missing, representing a compliance gap. Overall, the domain registration data aligns well with the organization's claims, supporting the legitimacy of the site.

T

Tech-Access Canada

tech-access.ca

47

Tech-Access Canada operates as a national network of 70 Technology Access Centres (TACs) across Canada, providing critical support to entrepreneurs and businesses by facilitating access to emerging technologies and applied research. The organization plays a pivotal role in driving innovation and business growth nationwide, positioning itself as a key enabler in the Canadian technology ecosystem. Their services include technology access, industry collaboration, and innovation facilitation, targeting primarily Canadian businesses and industry stakeholders. The website reflects a medium-sized, well-established non-profit entity founded in 2016, with a clear focus on supporting technology-driven economic development. From a technical perspective, the website is built on WordPress CMS with a modern but somewhat dated technology stack including jQuery 1.11.3 and several popular plugins such as RevSlider and Modern Events Calendar Lite. The site is mobile optimized, accessible, and incorporates SEO best practices. Analytics and tracking are implemented via Google Analytics, Google Tag Manager, and Clicky Analytics, with basic privacy compliance mechanisms including cookie consent and privacy policies. Security posture is generally good with HTTPS enforced and domain transfer protections in place. However, there are areas for improvement such as enabling DNSSEC, upgrading outdated JavaScript libraries, and implementing additional security headers like Content Security Policy. No explicit security policy or incident response information is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy digital presence aligned with its mission. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include technical security enhancements, improved transparency on security policies, and continued adherence to privacy regulations to maintain and strengthen stakeholder trust.

W

World Clinical Laser Institute

wcli.org

57

The World Clinical Laser Institute (WCLI) is a well-established professional organization founded in 2000, focused on advancing dental care through laser technologies. It serves a global membership of over 19,000 dental professionals, researchers, and manufacturers. The organization provides education, certification, events, and resources to its members, positioning itself as the largest dental laser group worldwide. The website reflects a professional and consistent brand image, targeting dental professionals seeking advanced training and certification in laser dentistry. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins to deliver a responsive and user-friendly experience. Hosting and DNS are managed through reputable providers, with HTTPS enabled ensuring secure communications. However, some security best practices such as DNSSEC and security headers are not implemented, representing areas for improvement. From a security perspective, the site maintains a good posture with HTTPS and domain registration protections but lacks explicit security policies and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the organization to regulatory risks. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

O

October CMS

octobercms.com

63

October CMS is a mature, developer-focused content management system built on the Laravel PHP framework. It targets developers, agencies, and businesses seeking a flexible, extensible CMS platform. The website demonstrates strong branding, professional design, and a comprehensive presentation of services including free licenses, premium support, and a marketplace for plugins and themes. The technical infrastructure leverages modern technologies such as Laravel, PHP, AWS hosting, and Google Tag Manager for analytics, indicating a solid digital maturity. Security posture is good with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic with no visible cookie consent mechanism or detailed privacy policy disclosures. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

G

Goetheanum, Dornach

steiner100.ch

48

The website steiner100.ch is a dedicated platform commemorating the 100th anniversary of Rudolf Steiner's death in 2025. It serves as a regional cultural hub focusing on events, exhibitions, and initiatives related to Rudolf Steiner in Northwest Switzerland and the tri-border area. The site targets a general audience interested in cultural, spiritual, and educational activities linked to Steiner's legacy. The business model is non-profit and event-driven, with partnerships involving notable cultural institutions such as the Goetheanum. Technically, the site is built on WordPress using modern themes and plugins, ensuring a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

J

Jazzklub Altenburg

jazzklub-altenburg.de

43

Jazzklub Altenburg is a small, non-profit cultural organization based in Germany dedicated to promoting jazz music through concerts and community events. The website serves as an information hub for event schedules, membership, and gallery content, targeting jazz enthusiasts and local community members. The organization operates primarily as a cultural club with a focus on live music and membership engagement. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with common plugins such as Contact Form 7. Hosting is provided by RZone, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technical infrastructure is standard for small cultural organizations but could benefit from modernization and enhanced security measures. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit privacy or security policies. No cookie consent mechanism is present, indicating partial GDPR compliance. The absence of contact emails and phone numbers reduces direct communication options, relying instead on a contact form. Social media integration is present via Facebook and Instagram links. Overall, the security posture is moderate but could be improved with better headers, policies, and compliance mechanisms. The overall risk is low given the non-commercial nature and limited sensitive data handling. Strategic recommendations include implementing security headers, adding cookie consent and privacy compliance features, and enhancing contact information transparency to improve trust and compliance.

J

Jazzclub Sondershausen e.V.

jazzclub-sondershausen.de

55

Jazzclub Sondershausen e.V. is a small non-profit cultural organization based in Germany dedicated to promoting jazz music through live events and concerts. The website serves as a platform to announce upcoming events, showcase photo galleries from past concerts, and provide contact avenues primarily via a contact form. The organization leverages reputable external ticketing platforms to facilitate event ticket sales, enhancing trust and convenience for attendees. The site targets jazz enthusiasts and the local community, positioning itself as a key cultural player in the Sondershausen region. Technically, the website is built on WordPress 6.8.3 with Bootstrap 5 and jQuery, ensuring a modern and responsive design. The site demonstrates good SEO practices with comprehensive meta tags and Open Graph data, supporting social media sharing and discoverability. Mobile optimization is good, and the site loads with moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. There are no detected vulnerabilities or malicious scripts. However, the absence of security headers and a vulnerability disclosure policy indicates potential areas for enhancement. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented, which may be a compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include implementing cookie consent, adding security headers, publishing a vulnerability disclosure or security.txt file, and providing clearer direct contact information to improve user trust and compliance posture.

IG Jazz Arnstadt e.V. is a small non-profit cultural association based in Germany focused on organizing and promoting jazz music events in Arnstadt. The website serves as an information hub for upcoming concerts, ticket sales, and archival content related to jazz. The target audience primarily consists of jazz enthusiasts and the local community interested in cultural events. The organization maintains an active presence on social media platforms such as Facebook and Instagram and offers a newsletter subscription to engage its audience. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, and several plugins for SEO, booking, and GDPR compliance. The site is hosted on servers associated with avidesign.eu and employs HTTPS with a valid SSL certificate. Performance and mobile optimization are good, with SEO best practices implemented via Yoast SEO. The site includes a cookie consent mechanism compliant with GDPR regulations and uses Matomo for analytics and Mailchimp for marketing. From a security perspective, the site has HTTPS enabled and uses cookie consent tools to manage user privacy. However, no advanced security headers were detected, and there is room for improvement by implementing CSP, HSTS, and other HTTP security headers. No vulnerabilities or exposed sensitive data were found in the provided content. Incident response and security policies are not explicitly documented on the site. Overall, the website presents a professional and trustworthy front for a local cultural organization with good privacy compliance and moderate security posture. Recommendations include enhancing security headers, maintaining up-to-date software, and possibly publishing explicit security and incident response policies to improve trust and compliance.

F

FÉDÉRATION INTERNATIONALE CINÉMA TÉLÉVISION SPORTIFS

sportmoviestv.com

47

FICTS (Fédération Internationale Cinéma Télévision Sportifs) is an internationally recognized federation based in Milan, Italy, dedicated to promoting the values of sport through cinema and television. It is the only federation in its sector recognized by the International Olympic Committee (CIO), with a membership spanning 130 nations. The organization hosts major events such as the SPORT MOVIES & TV festival and the World FICTS Challenge, focusing on cultural and educational initiatives related to sports media. The website reflects a professional digital presence with comprehensive content, multimedia integration, and active social media engagement.

O

Organisation du Sport Africain Travailliste et Amateur (OSTA)

osta-officiel.org

57

The Organisation du Sport Africain Travailliste et Amateur (OSTA) is a non-profit international sports organization founded in 2001, focused on promoting and coordinating amateur and workers' sports activities across Africa. It holds official recognition from the African Union and other continental sports bodies, positioning itself as a key player in African amateur sports governance. The organization operates from its headquarters in Yaoundé, Cameroon, and engages with multiple national sports organizations through regional liaison offices. The website serves as an informational platform detailing its history, structure, and activities, primarily targeting African sports organizations and amateur athletes. Technically, the website is built on the WordPress platform hosted by Automattic Inc. (WordPress.com), utilizing standard WordPress technologies including Jetpack, jQuery, and Swiper.js. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks advanced security headers such as Content-Security-Policy and X-Frame-Options. No privacy or cookie policies are published, indicating gaps in compliance with data protection regulations. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. These improvements would strengthen its security posture and regulatory adherence, thereby increasing stakeholder confidence.

P

POSA – Pole Sports & Arts World Federation

posaworld.org

54

POSA – Pole Sports & Arts World Federation is a non-profit organization dedicated to the recognition and development of pole dance as a sport, supporting both its athletic and artistic aspects. The organization hosts international championships and provides judge training, positioning itself as a key global authority in pole sports and arts. The website is built on WordPress with modern plugins and demonstrates good technical maturity, including mobile optimization and SEO best practices. Security posture is strong with HTTPS and security headers implemented, though some security policy documentation is absent. Privacy and cookie policies are present and GDPR compliant, reflecting a responsible approach to user data. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission.

A

AWSNA

waldorfeducation.org

60

The website www.waldorfeducation.org represents AWSNA, an established educational organization promoting Waldorf education across North America. The site highlights over 100 years of educational legacy, serving a broad audience of parents and educators interested in Waldorf pedagogy. The business model is non-profit, focusing on providing resources, community engagement, and support for independent Waldorf schools. The website is professionally designed with consistent branding and strong content relevance, targeting families and educational stakeholders. Technically, the site is built on WordPress using modern themes and plugins such as Astra, Yoast SEO, and Smart Slider 3. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security-wise, HTTPS is enforced, and reCAPTCHA is used to protect forms, but explicit security headers and privacy policies are missing, which could be improved to strengthen compliance and trust. Overall, the security posture is solid but could benefit from enhanced transparency around privacy and incident response. The absence of WHOIS data limits domain trust verification, but the website's professional presentation and social media presence support its legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts to improve compliance and user trust.

D

Di Themes

dithemes.com

52

Di Themes is a small technology company specializing in the development and sale of multipurpose WordPress themes tailored for business websites. Their offerings include free and premium themes, comprehensive demos, and documentation, targeting WordPress users and small to medium businesses. The website is built on WordPress with modern technologies such as WooCommerce and Elementor, hosted on DigitalOcean, and uses SSL for secure connections. The site demonstrates good SEO and mobile optimization but lacks explicit privacy and security policies. Security posture is moderate with room for improvement in DNS security and HTTP headers. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

S

solarLAGO

solarlago.de

59

solarLAGO is a specialized expert network focused on renewable energies and energy efficiency in the international Bodenseeregion. Established around 2016, it serves as a catalyst and connector for stakeholders from business, science, politics, and civil society to accelerate the energy transition. The website reflects a professional regional platform offering networking, knowledge exchange, project support, and educational activities. It targets a diverse audience interested in sustainable energy solutions within the region. Technically, the site is built on WordPress with modern plugins for SEO, cookie compliance, and interactive content such as sliders and event listings. The infrastructure is stable with a reputable registrar and no blocking mechanisms detected.

E

esc Aerospace US, Inc

esc-aerospace.us

9

esc Aerospace US, Inc is a US-based aerospace technology company founded in 2021, focusing on innovative aerospace solutions and targeting investors and industry stakeholders. The company maintains a professional online presence with a well-structured WordPress website hosted on Bluehost, utilizing modern plugins such as Yoast SEO and LayerSlider to enhance user experience and SEO. The website is mobile-optimized and provides clear navigation, although it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but missing DNSSEC and security headers reduce the overall security maturity. Contact information is limited to an investment email address, with no phone numbers or physical addresses explicitly provided. Overall, the website reflects a legitimate and emerging aerospace business with room for improvement in privacy compliance and security best practices.