Security Directory

Corbett Keeling Limited is a well-established, independent corporate finance advisory firm based in London, specializing in guiding private company owners through selling their business, raising capital, and acquisitions. With over 30 years of bespoke advice and a strong track record of 90% deal completion and 40% average uplift in sale value, the company positions itself as a trusted partner in the mid-market UK corporate finance sector. The website reflects a professional, client-focused approach with comprehensive service descriptions and client testimonials. Technically, the site is built on HubSpot CMS, leveraging modern marketing and analytics tools, though some legacy libraries like jQuery 1.11.2 are used. Security posture is good with HTTPS and privacy consent mechanisms, but could be improved with explicit security headers and updated libraries. The absence of WHOIS data for the domain introduces some uncertainty in domain legitimacy, but the FCA registration and professional content mitigate concerns. Overall, the website demonstrates strong business credibility, good technical implementation, and solid privacy compliance, making it a reliable digital presence for the firm.

Trickbox TV is a UK-based broadcast services company specializing in multi-camera outside broadcast facilities, equipment hire, virtual events, live streaming, and studio design and system integration. The company targets broadcast professionals, corporate event organizers, and media production companies, positioning itself as a trusted provider with notable clients such as Pfizer, Shell, and Red Bull. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website runs on WordPress with WooCommerce and uses modern JavaScript libraries and Google Tag Manager for analytics and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, indicating possible domain registration issues or privacy protection, which slightly reduces trustworthiness. However, the professional website, clear contact information, and privacy compliance mitigate concerns. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, Trickbox TV demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data clarity. Strategic recommendations include enhancing security headers, publishing security policies, and monitoring domain registration status to strengthen trust and compliance.

S

Slate

helloslate.co.uk

48

Slate is a small, specialized web design and marketing agency based in East London, focusing on WordPress website design, development, and ongoing maintenance. The company has an established domain since 2009 and maintains a consistent brand presence across social media platforms. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Hotjar, and Mailchimp. The site demonstrates good SEO practices and mobile optimization, providing a professional user experience. Security-wise, the website uses HTTPS and includes cookie consent mechanisms and Google reCAPTCHA for form protection, but lacks explicit privacy policies, terms of service, and incident response information, which are areas for improvement. Overall, the website is trustworthy and professional, with moderate technical and security maturity.

A

ADLIB Recruitment

adlib-recruitment.co.uk

68

ADLIB Recruitment is a purpose-driven recruitment agency based in the United Kingdom, proudly B Corp certified and operating since 2001. The company specializes in permanent, contract, integrated recruitment partnerships, and senior appointments across multiple sectors including technology, data, engineering, and sustainability. Their market position is that of a trusted partner supporting growth and change with a strong emphasis on ethical business practices and diversity. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular plugins and analytics tools such as Google Analytics and Bing Ads. The site is well-optimized for SEO and mobile devices, with good content quality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. Overall, the website presents a professional and trustworthy image with strong compliance to privacy regulations.

L

Londonwide Local Medical Committees Limited

lmc.org.uk

52

Londonwide Local Medical Committees Limited operates as the professional voice of general practice in London, representing 27 boroughs and providing specialist advice, guidance, and support to GPs and practice teams. The organization offers a range of services including workforce training, buying group services, representation, and communications to help practices navigate the complex healthcare environment. The website reflects a well-established entity with a clear focus on healthcare professionals in London. Technically, the website is built on WordPress and leverages modern JavaScript libraries and analytics tools such as Matomo, Google Tag Manager, and Hotjar. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs a comprehensive cookie consent mechanism and maintains privacy compliance, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain naming rules error limits full trust verification, but the professional presentation and company registration details support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical and privacy compliance. Strategic improvements in security header implementation and incident response transparency would enhance the security posture further.

H

Howard & Howard Attorneys PLLC

howardandhoward.com

65

Howard & Howard Attorneys PLLC is a well-established law firm specializing in business and corporate law, intellectual property, litigation, mergers and acquisitions, and related legal services. With offices in multiple U.S. states and a domain registered since 1996, the firm targets business clients seeking sophisticated legal counsel. Their website reflects a professional and consistent brand image, providing clear navigation and relevant content tailored to their audience. Technically, the site uses modern frameworks like Bootstrap and jQuery, is hosted behind Cloudflare, and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the firm demonstrates strong business credibility and digital maturity.

S H & D Smith operates a UK-based office supplies e-commerce website targeting schools and businesses. The company offers a broad range of products including paper supplies, technology, furniture, facilities management, and catering items. The website supports account applications, quick order functionality, and price match offers, positioning itself as a regional supplier with a focus on B2B sales. Technically, the site uses common JavaScript libraries such as jQuery, Typeahead.js, and Google reCAPTCHA for form security, hosted on a PulseStore platform. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is moderate, with HTTPS implied but no visible security headers or advanced policies. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain legitimacy, though the website content and contact information appear consistent and professional. Privacy and cookie policies exist but are basic, and no advanced incident response or security certifications are evident.

Maximus UK is a specialist 24/7 contact centre outsourcing provider delivering flexible and scalable customer experience services primarily to government, charities, and businesses across the United Kingdom. The company emphasizes compassionate support for vulnerable populations and integrates award-winning contact teams with advanced technology solutions, including AI, to enhance service delivery. Their market position is strong within public sector frameworks and the voluntary sector, supported by certifications such as Disability Confident Leader. Technically, the website is built on WordPress with modern plugins and integrations like HubSpot and Google Tag Manager, reflecting a mature digital infrastructure with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for user experience and compliance.

B

BAE Systems OneArc

bisimulations.com

66

BAE Systems OneArc is a leading global provider of defense and civilian training and simulation software, delivering synthetic environments that support modern defense needs. The company leverages decades of innovation in simulation, interoperability, and geospatial technology, backed by the scale and trust of BAE Systems. Their product portfolio includes virtual desktop training environments, geospatial tools, image generators, and interoperability solutions, complemented by professional services and training. The website reflects a mature, well-established business with a strong market position and trusted brand identity. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Yoast SEO, Contact Form 7, and GDPR compliance plugins. It is hosted with reputable providers and uses Cloudflare DNS services. The site is fast, mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and shows good security hygiene with no exposed sensitive data. However, it lacks DNSSEC and some advanced HTTP security headers. There is no public security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the website presents a professional, trustworthy, and compliant digital presence for a large enterprise in the defense technology sector. Strategic improvements in DNS security and explicit security disclosures would further strengthen its posture.

L

Littlecroft Properties Limited

littlecroftproperties.co.uk

55

Littlecroft Properties Limited is a UK-based real estate company specializing in residential, retail, office, and development properties primarily in East London and Essex. Established since 1975, the company serves property buyers, renters, investors, and developers with a focus on local market expertise. The website reflects a professional and consistent brand presence with clear contact information and comprehensive privacy and cookie policies, indicating a commitment to user privacy and regulatory compliance. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various UI plugins. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Analytics are implemented via Google Tag Manager, and cookie consent mechanisms are in place, supporting GDPR compliance. From a security perspective, the site uses HTTPS and secure login forms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected, but improvements in security headers and transparency would enhance the security posture. Overall, the website is trustworthy and professionally maintained, though the WHOIS data query was performed incorrectly on a subdomain, resulting in missing domain registration details. This discrepancy slightly reduces trust but does not indicate malicious intent. Strategic recommendations include enhancing security headers, publishing security policies, and verifying WHOIS data for domain legitimacy.

P

Pekalp of London

pekalp.co.uk

42

Pekalp of London is a UK-based luxury furniture manufacturer and retailer with over 40 years of design and manufacturing experience. The company specializes in bespoke and standard furniture collections, serving both residential and commercial clients including hotels and restaurants. Their website is built on WordPress with WooCommerce, featuring a modern e-commerce platform and a professional design that supports good user experience and navigation. Social media presence on Facebook and Instagram supports brand visibility. Technically, the site uses contemporary plugins and frameworks, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable and shows an error, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security posture.

J

JMT

jmt.co.uk

66

JMT is a Netherlands-based company specializing in the rental of furniture and floor coverings for exhibitions, events, and congresses across Europe. The website presents a professional and comprehensive catalog of products and services, targeting event organizers and corporate clients. The company maintains a strong market position with a broad event calendar and emphasizes sustainability and service quality. Technically, the website employs modern technologies such as Google Tag Manager, Google Analytics, and a Symfony-based backend, ensuring good performance and mobile optimization. Security practices include HTTPS enforcement, secure form handling, and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, GDPR compliant, and free from suspicious content or blocking mechanisms.

P

Prospects

prospects.ac.uk

64

Prospects is a well-established UK-based online platform providing comprehensive career guidance, job search, and postgraduate study advice primarily targeting students and graduates. It operates under the parent company Jisc, a reputable organization in the education sector. The website offers a rich set of services including job matching, course search, career advice, and employer advertising, positioning itself as a key resource for UK higher education and career development. Technically, the site employs modern web technologies such as AngularJS, integrates multiple analytics and marketing tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.

T

Tanz Limited

tanztanning.co.uk

60

Tanz Limited operates a regional tanning and beauty service business in Scotland, offering sunbeds, spray tans, slimming products, and teeth whitening services. The company maintains a professional online presence with an e-commerce platform and active social media channels, targeting consumers seeking beauty and tanning solutions. The website is built on WordPress with WooCommerce and uses modern plugins and technologies to support booking and sales functionalities. The technical infrastructure is solid with HTTPS enforced and a good level of SEO and mobile optimization. Security posture is generally good, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The WHOIS data for the domain is unavailable due to a registration error, which raises concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site presents a trustworthy business front with moderate technical maturity and some compliance gaps.

A

AddSecure GmbH

addsecure.de

65

AddSecure GmbH is a leading European provider of secure IoT connectivity and end-to-end solutions, focusing on optimizing business operations and securing critical functions across multiple industries including energy, transport, healthcare, and government sectors. The company operates primarily in Europe with a large workforce exceeding 1,000 employees. Their website reflects a mature digital presence with comprehensive content, professional design, and strong branding consistency. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and Complianz GDPR for privacy compliance. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and accessible, with structured data enhancing SEO and user experience. From a security perspective, the site enforces HTTPS, implements key security headers, and follows best practices for secure forms and data handling. However, there is no explicit public vulnerability disclosure or incident response contact information, which could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Overall, the website and business demonstrate a high level of professionalism, trustworthiness, and security maturity. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and continuous monitoring of third-party scripts to maintain security posture.

A

AddSecure

addsecure.pl

59

AddSecure is a leading European provider of secure IoT connectivity and comprehensive transport management solutions. The company offers a range of services including fleet management, transport management systems, alarm signaling, and video telematics, targeting businesses in transportation, logistics, utilities, and corporate fleets. The Polish branch operates from Wrocław, with the main headquarters in Stockholm, Sweden. The website demonstrates a mature digital presence with professional design, clear navigation, and strong SEO practices. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and integrates third-party services like Cloudflare Stream and AddToAny for enhanced functionality. Security measures include HTTPS enforcement, multiple security headers, and monitoring via Sentry, indicating a strong security posture. Privacy compliance is evident with GDPR-aligned policies and cookie consent mechanisms. Overall, the security posture is robust with no detected vulnerabilities or suspicious content. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. The site maintains high trustworthiness and professionalism, supporting its market position as a reliable IoT and transport solutions provider. Strategic recommendations include establishing a public vulnerability disclosure policy, enhancing incident response contact visibility, and continuous auditing of third-party scripts to maintain security integrity.

F

France Alumni

francealumni.fr

66

France Alumni is an official international network platform dedicated to graduates of French higher education institutions. It serves as a comprehensive community hub offering networking, events, and partnership opportunities tailored to alumni worldwide. The platform is supported by French educational and governmental entities, positioning it as a key player in alumni engagement globally. Technically, the website employs a modern stack including jQuery, Bootstrap, Leaflet.js for interactive maps, and security features such as HTTPS and hCaptcha for form protection. Privacy compliance is robust with clear policies and cookie consent mechanisms in place. Security posture is strong with no evident vulnerabilities, though explicit security policies and headers could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and official social media presence support its legitimacy. Overall, France Alumni demonstrates a mature digital presence with good content quality, technical implementation, and privacy adherence, making it a trustworthy platform for its target audience.

S

SIA Madara

madara.lv

48

SIA Madara operates a website focused on providing office and industrial space rental services in Jelgava, Latvia, alongside metal container sales and machine building services. The company targets local businesses and industrial clients seeking large rental spaces and related manufacturing products. The website is professionally designed with clear navigation and multilingual support, primarily in Latvian with English and Russian options. The technical infrastructure employs a variety of JavaScript libraries and frameworks, including jQuery, Bootstrap, and Google Maps API, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate; while HTTPS is presumed, no explicit security headers or incident response policies are evident. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism implemented. Business credibility is supported by clear contact information and a certification page, though the absence of terms of service and incident response contacts are noted. Overall, the website presents a trustworthy and professional front for a small local business with room for security and compliance improvements.

G

Global Elite Car

globalelitecar.pl

39

Global Elite Car is a specialized car rental service based in Poland, focusing on luxury and sports vehicles. The company offers a variety of rental options including short-term, long-term, VIP transport, and vouchers, targeting customers primarily in Warsaw and across Poland. The website is professionally designed with clear navigation and a good user experience, supporting the business model effectively. Technically, the site is built on WordPress with modern libraries and tracking tools, showing a moderate to good level of digital maturity. Security posture is adequate with HTTPS and no visible vulnerabilities, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and clear contact information.

D

De Vinci Higher Education

devinci.fr

56

De Vinci Higher Education operates an online portal primarily for student access and educational services. The website serves as a login gateway for users, indicating a focus on digital education delivery. The institution appears to be based in France, targeting students and academic users. The business model revolves around providing online higher education resources and account management. Technically, the site employs a modern JavaScript and CSS stack including libraries such as jQuery, SweetAlert2, CropperJS, and Matomo analytics for user tracking. The site is mobile responsive and uses HTTPS, but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with secure login forms but missing security headers and explicit CSRF protections. WHOIS data is unavailable, which reduces domain trustworthiness and complicates legitimacy verification. Overall, the site is functional and moderately secure but would benefit from enhanced privacy disclosures and security hardening.

N

NetPro SIA

nasstore.lv

54

NAS STORE, operated by NetPro SIA, is an authorized reseller specializing in networking and storage solutions including brands like Synology, MikroTik, QNAP, Ubiquiti, and Ajax. The company targets customers across the European Union with a focus on fast courier delivery services. The website is built on WordPress with WooCommerce, leveraging modern plugins and integrations such as Trustpilot for customer reviews and Stripe for payment processing. The technical infrastructure is solid with HTTPS and Cloudflare DNS, ensuring secure and reliable access. However, the absence of explicit privacy policies and terms of service on the homepage indicates room for improvement in compliance and transparency. Security posture is generally good but could benefit from enhanced security headers and incident response disclosures. Overall, NAS STORE presents a professional and trustworthy online presence in the technology reseller sector.

A

Aizkari1.lv - internetveikals

aizkari1.lv

40

Aizkari1.lv is a Latvian-based e-commerce business specializing in custom-made day and night curtains tailored to customer measurements. The company emphasizes fast production times of 3-4 days and delivery within Latvia and the European Union. The website is professionally designed using WordPress with the Astra theme and WooCommerce for e-commerce functionality. It integrates Google Tag Manager for analytics and marketing purposes and maintains an active social media presence on Facebook, Instagram, and TikTok. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response contact information. Overall, the business appears legitimate and focused on the local retail market with a small company size and good branding consistency.

D

Department of Health - National Malaria Control and Elimination Program

nmcep.net

59

The Online Malaria Information System (OLMIS) is a government-backed platform managed by the Department of Health's National Malaria Control and Elimination Program in the Philippines. It serves as a centralized portal for malaria data management, surveillance, and program coordination aimed at malaria elimination by 2030. The website is professionally designed with clear branding and provides comprehensive information about the program's mission, objectives, and partners. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and various plugins to deliver a responsive and user-friendly experience. Security measures include HTTPS enforcement and CSRF protection on forms, though advanced security headers and bot protections are lacking. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or registration issues, which slightly impacts trust. Overall, the platform demonstrates a solid digital presence supporting a critical public health initiative.

S

SIA NMS RIGA

e-medica.lv

53

E-MEDICA, operated by SIA NMS RIGA, is a Latvian-based supplier specializing in disinfection, hygiene, and medical products with a focus on fast delivery across Latvia. The website presents a professional e-commerce platform targeting both business and consumer customers in the healthcare and hygiene sectors. The company offers a broad catalog of medical supplies, paper hygiene products, and cleaning agents, supported by an online ordering system with integrated cart and checkout functionalities. Technically, the site employs a modern JavaScript stack including jQuery, Select2, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and basic security best practices, though improvements such as enhanced security headers and a vulnerability disclosure policy are recommended. Privacy compliance is supported by a clear cookie consent mechanism and a privacy policy page, aligning with GDPR requirements. Overall, the website is trustworthy, well-structured, and suitable for its target market.

L

Latvijas tenisa amatieru līga (LTAL)

ltal.lv

49

Latvijas tenisa amatieru līga (LTAL) operates as a niche sports league focused on organizing amateur tennis competitions in Latvia, including men's and women's singles matches and the Pāvilostas kauss tournament. The website serves as a platform for scheduling, ranking, and providing news related to amateur tennis players. The organization targets Latvian amateur tennis enthusiasts and maintains an active presence on social media platforms. Technically, the website is built on a modern Ruby on Rails stack with contemporary JavaScript libraries and frameworks, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS enforced and CSRF protections in place, but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. Overall, the domain registration data aligns well with the website content and business purpose, indicating legitimacy and consistency.

O

OpenExchange

open-exchange.net

65

OpenExchange is a professional service provider specializing in managed virtual meetings and events for corporate clients, including investor relations, corporate engagement, and institutional banking sectors. Founded in 2011, the company has established a strong market presence with a medium-sized operation based in the United States. Their website reflects a mature digital infrastructure leveraging WordPress CMS, integrated marketing and analytics tools such as HubSpot, Google Tag Manager, and multiple tracking pixels, indicating a sophisticated approach to customer engagement and data collection. Security posture is solid with HTTPS enabled, domain transfer protection, and some security best practices observed, though there is room for improvement in DNSSEC and explicit security policies. Overall, the website is professional, well-branded, and trustworthy, targeting business audiences seeking high-quality virtual event solutions.

E

EWE s.r.o.

ewe.cz

45

EWE s.r.o. is a Czech Republic-based small manufacturing and service company specializing in electrotechnical components, cable assemblies, and professional hand assembly including soldering and coating. The company also operates a home work portal, a hospitality pension in Croatia, and a car sales brand (EWE-cars). Their market position is that of a specialist serving diverse industrial sectors internationally. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern frontend libraries and frameworks but lacks visible security headers and privacy policies, which are areas for improvement. Security posture is moderate with no critical vulnerabilities detected but missing some best practices. Overall, the site is safe, business-focused, and trustworthy with clear contact information and social media presence.

D

DANIELO Sportswear | Sklep online

danieloshop.pl

37

DANIELO Sportswear is a specialized Polish e-commerce retailer focused on professional cycling and sportswear for both groups and individual customers. The website offers a range of cycling clothing and accessories, positioning itself as a niche player in the sports apparel market. The business appears to be small-sized and founded in 2018, with a clear focus on quality and targeted audience engagement. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as Yoast SEO and Google Analytics for SEO and analytics. The site is mobile-optimized and uses modern web technologies, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and includes GDPR-compliant cookie consent mechanisms, but lacks explicit security policies or incident response information. Overall, the site is professional and trustworthy with a moderate risk profile.

K

Koninklijke Staalfederatie

staalfederatie.nl

51

Koninklijke Staalfederatie operates as a professional platform and representative body for steel and metal traders in the Netherlands, focusing on relationship management and knowledge exchange within the manufacturing sector. The website is built on WordPress using the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics with privacy features enabled. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enforced and tracking anonymization, but lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website presents a credible and professional image consistent with its business purpose.

Vin De Constance is a premium wine brand website showcasing a rich history of over 300 years in winemaking. The site targets adult consumers interested in high-quality alcoholic beverages and brand heritage. The business model focuses on brand marketing and storytelling through multimedia content, including images and videos, to engage visitors and promote their products. The website is professionally designed with consistent branding and good user experience, optimized for mobile devices and featuring clear navigation.

P

Pastebin

pastebin.com

69

Pastebin.com is a well-established online platform founded in 2002 that provides users with the ability to store and share text snippets and code online. It holds a strong market position as a leading paste tool, offering features such as syntax highlighting, API access, and a Pro membership for enhanced capabilities. The website targets a broad audience including developers, programmers, and general users needing temporary text storage. Technically, the site employs modern web technologies including Bootstrap, jQuery, and the Yii framework, hosted with Cloudflare DNS and secured with HTTPS. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security posture is solid with HTTPS and CSRF protections, but could be improved by enabling DNSSEC and adding security headers. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place for tracking and advertising. Overall, the website is professional, trustworthy, and safe for general audiences.

H

Hrvatske vode

voda.hr

54

Hrvatske vode is the official Croatian government agency responsible for managing water resources, flood protection, and related environmental projects. The website serves as a comprehensive portal providing information, public notices, project details, and access to e-services primarily targeting Croatian citizens, government bodies, and professionals in water management. The agency is well-established with a domain registered since 2011 and operates transparently with clear contact information and public tenders. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates Google Analytics with privacy-conscious configurations. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

R

REGARTIS s.r.o.

regartis.com

44

REGARTIS s.r.o. is a specialized consulting company focused on providing compliance and advisory services primarily for the chemical industry. Their expertise includes navigating complex regulatory frameworks such as REACH, CLP, UK REACH, BPR, and RoHS, targeting businesses that require adherence to national and European legislation. The company maintains a professional online presence with multilingual support and offers educational resources like webinars and training courses, positioning itself as a niche expert in the Czech Republic and broader EU market. Technically, the website employs a modern technology stack including jQuery, Select2, PhotoSwipe, Google Analytics, and Drift chat for customer engagement. The site is built on a custom CMS platform, optimized for mobile devices, and includes GDPR-compliant consent mechanisms. While performance is moderate, the site demonstrates good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site uses HTTPS and implements GDPR consent banners, indicating a baseline of privacy compliance. However, the absence of WHOIS registration data for the domain www.regartis.com raises concerns about domain legitimacy and registration status, which impacts overall trust. No critical vulnerabilities or exposed sensitive data were detected, but security headers should be enhanced to improve protection. Overall, REGARTIS s.r.o. presents a credible and professional business front with solid technical implementation and privacy compliance. The primary risk lies in the unclear domain registration status, which should be addressed to strengthen trust and legitimacy. Strategic recommendations include verifying domain registration, enhancing security headers, and maintaining regular audits of third-party scripts and privacy policies.

M

MEVA-HU Kft

mevakomi.hu

44

MEVA-HU Kft is a Hungarian company specializing in industrial products including waste storage, oil management, warehousing, workshop equipment, and outdoor equipment. The company operates a B2B e-commerce platform supported by regional partner sites in Slovakia, Poland, Germany, and the Czech Republic. Their market position is that of an established regional supplier with a comprehensive product catalog and ISO 9001:2015 certification, indicating quality management standards. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for industrial clients. Technically, the site uses a BohemiaSoft e-commerce platform with common JavaScript libraries and Google Analytics for tracking. Security posture is generally good with HTTPS, CSRF protections, and cookie consent mechanisms, though some outdated libraries and missing security headers present moderate risks. Privacy compliance is strong with clear GDPR-aligned policies and consent banners. Overall, the site is trustworthy and credible, with clear contact information and certifications. Recommendations include updating JavaScript libraries, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security and trust.

V

Verkehrsverbund Rhein-Neckar GmbH

vrn.de

49

Verkehrsverbund Rhein-Neckar GmbH operates as a regional public transportation authority in the Rhein-Neckar area of Germany, providing comprehensive services including bus, train, and tram schedules, ticketing, and mobility solutions such as carsharing and e-scooters. The website serves as a central portal for journey planning, traffic updates, and customer service, targeting commuters and general public users in the region. The business model is focused on facilitating public transport and mobility services within a defined geographic area, positioning VRN as a key regional transport provider. Technically, the website is built on the Imperia CMS platform and leverages modern web technologies including jQuery, Leaflet for maps, and Foundation for responsive design. It integrates Matomo analytics with user consent, demonstrating a mature approach to data privacy. Accessibility features such as skip links and visual assistance tools are implemented, enhancing usability for diverse users. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with a legitimate regional transport entity. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy communication. The overall risk is low given the nature of the business and the absence of suspicious indicators. Strategic recommendations include publishing a dedicated security policy, providing incident response contact details, enhancing HTTP security headers, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

C

Conseil départemental des Vosges

vosges.fr

58

The website www.vosges.fr is the official online presence of the Conseil départemental des Vosges, a regional government entity in France. It serves as a comprehensive portal for residents and visitors, offering information on public services, cultural events, tourism, and local governance. The site is positioned as a trusted source for regional information and services, targeting a broad audience including citizens, businesses, and tourists. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, FontAwesome, and various analytics tools including Matomo and Facebook Pixel. The infrastructure supports good mobile optimization, accessibility, and SEO practices, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. While no critical vulnerabilities were detected, the absence of a publicly available security policy and incident response contact suggests room for improvement in transparency and preparedness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a strong legitimacy and trustworthiness profile consistent with an official government entity. The lack of WHOIS data is likely due to privacy protection policies common in French domains. Strategic recommendations include publishing explicit security and incident response policies, enhancing monitoring of third-party scripts, and considering a vulnerability disclosure program to further strengthen security posture.

D

DevaGroup

devagroup.pl

56

DevaGroup is a well-established Polish digital marketing agency specializing in SEO, SEM, Google Ads, social media campaigns, marketplace advertising, and professional training. With a history dating back to 2005 and certifications such as Google Premier Partner and Allegro Ads Partner, they hold a strong market position in Poland. The website demonstrates a mature technical infrastructure based on WordPress with modern analytics and tracking tools integrated. Security posture is solid with HTTPS and anti-spam measures, though some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the site projects professionalism and trustworthiness, supporting their business credibility.

C

Centre of Tourist Information in Torun

visittorun.com

52

Visit Toruń is the official tourism portal for the city of Toruń, Poland, providing comprehensive information on sightseeing, entertainment, accommodations, gastronomy, activities, and transportation. The website targets tourists and visitors, offering multilingual content primarily in Polish and English. It serves as a key promotional platform for local attractions and events, supported by the local government and tourism organizations. Technically, the site is built on Drupal CMS with a range of JavaScript libraries including jQuery, Colorbox, and Slick Slider, delivering a good user experience with mobile optimization and accessibility features. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and modern security headers, and it uses outdated JavaScript libraries which may pose risks. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no terms of service or explicit security policies are published. Overall, the website is professional, trustworthy, and well-positioned as a city tourism information source, but it would benefit from technical and security updates to enhance its posture.

K

KRKA ΕΛΛΑΣ ΜΟΝΟΠΡΟΣΩΠΗ Ε.Π.Ε.

krka.gr

10

Krka Hellas Monoprosopi E.P.E. operates as a subsidiary of Krka, a leading global generic pharmaceutical company with over 70 years of experience. The company focuses on manufacturing and distributing generic prescription drugs, over-the-counter products, and animal health products. The website is professionally designed, primarily in Greek, targeting healthcare professionals and consumers in Greece. The digital infrastructure is modern, leveraging Nuxt.js and other contemporary JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies are not explicitly published. Overall, the website reflects a credible and trustworthy healthcare business with clear contact information and compliance with GDPR requirements.

K

KRKA

krka.fr

10

KRKA is a well-established pharmaceutical company specializing in generic medicines with nearly 70 years of experience. The French website presents a professional and comprehensive digital presence targeting healthcare professionals and the general public. It offers a product catalog, detailed company information, and multilingual support through links to various country-specific KRKA sites. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, although some security headers and explicit security policies are absent. WHOIS data is unavailable, which limits domain registration trust analysis, but the overall site content and contact information support legitimacy. The site is GDPR compliant and provides clear data protection officer contact details.

O

ODEG – Ostdeutsche Eisenbahn GmbH

odeg.de

10

ODEG – Ostdeutsche Eisenbahn GmbH is the largest private railway operator in eastern Germany, providing regional passenger rail services. The company offers comprehensive information on schedules, fares, tickets, and customer service through its website. The business targets a broad audience including daily commuters and travelers in the region. The website demonstrates a moderate level of digital maturity, leveraging TYPO3 CMS and modern JavaScript libraries to deliver a responsive and user-friendly experience. Privacy compliance is well addressed with a comprehensive privacy policy and a cookie consent mechanism that includes retargeting disclosures. Security posture is adequate with HTTPS enforcement and no visible vulnerabilities, though the absence of a published security policy and incident response contacts suggests room for improvement. Overall, the website is professional, trustworthy, and aligned with the company's business objectives.

BIOK laboratorija is a Lithuanian cosmetics manufacturing company specializing in natural and innovative cosmetic and oral care products. They manage multiple brands and serve Nordic and European markets with over 250 products. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site uses a mix of legacy and modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and tracking. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and uses an outdated jQuery version. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and domain registration visibility.

M

MAMFORCE

mamforce.hr

45

MAMFORCE is a Croatian-based organization specializing in Diversity, Equity, and Inclusion (DEI) certifications and consulting services aimed at improving workplace culture for families and women. Their offerings include multiple certification standards such as MAMFORCE Standard, DADFORCE Standard, and INC.Q EQUAL PAY, alongside training and employer branding services. The company positions itself as a leader in promoting fair and inclusive organizational cultures within Croatia. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and various plugins enhancing user experience and tracking capabilities. The site is mobile-optimized and SEO-friendly, reflecting a good level of digital maturity. Security-wise, the site enforces HTTPS and uses some security best practices but lacks certain headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. No privacy policy or terms of service were found, which is a compliance gap. Overall, the domain registration is consistent with the business claims, and no suspicious patterns were detected, supporting a high legitimacy score.

J

Johnson & Johnson Medical Devices Companies

e-ifu.com

55

The website www.e-ifu.com serves as a digital portal for accessing Instructions for Use (IFU) documents related to Johnson & Johnson Medical Devices. It targets medical professionals and patients, providing multilingual support and a structured interface for document retrieval. The site is branded consistently with Johnson & Johnson Medical Devices Companies and uses modern web technologies including Drupal 10, Bootstrap 5, and various JavaScript libraries for enhanced user experience and functionality. Despite the professional presentation and clear business focus, the absence of WHOIS registration data raises questions about domain legitimacy, although the content and branding strongly suggest a legitimate enterprise presence. From a technical perspective, the site employs a robust technology stack with good mobile optimization and accessibility features. The use of Google Analytics, Google Tag Manager, and Qualtrics indicates moderate user tracking and marketing analytics integration. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance rating. Security best practices such as HTTPS usage and secure form handling are observed, but security headers and incident response contact information are not evident. Overall, the security posture is moderate with no critical vulnerabilities detected in the provided content. The missing WHOIS data and lack of explicit privacy documentation are notable gaps. The website is safe for general audiences, with no adult or questionable content detected. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents to improve trust and compliance.

Broker Trust is a leading brokerpool in the Czech Republic, specializing in providing financial advisory and brokerage services to financial advisors and intermediaries. The company positions itself as the largest and fastest-growing brokerpool in the Czech market, offering a comprehensive suite of services tailored to financial professionals. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with integrated SEO and analytics tools to optimize user engagement and compliance. The technical infrastructure includes modern JavaScript libraries and cookie consent mechanisms, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. Overall, the website and business demonstrate a mature digital footprint with moderate risk due to lack of WHOIS transparency. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance.

K

Krajowa Izba Komunikacji Ethernetowej

kike.pl

49

Krajowa Izba Komunikacji Ethernetowej (KIKE) is a Polish industry association representing small and medium-sized telecommunication operators. The organization focuses on advocacy, industry representation, and providing information and events for its members. The website serves as a portal for news, official positions, event announcements, and member resources. Technically, the site is built on WordPress with common plugins for SEO, events, and forms, and it employs modern tracking and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security policies and vulnerability disclosure information. Overall, the site is professional, well-branded, and trustworthy, targeting telecom operators in Poland.

D

Digital Poland Foundation

aipoland.org

61

AI Poland is a non-profit initiative under the Digital Poland Foundation focused on promoting and developing the Polish AI ecosystem. The website serves as a hub for information, events, research, and partnerships related to AI in Poland, targeting businesses, researchers, and policymakers. The initiative enjoys strong market positioning supported by reputable partners and ambassadors from leading technology companies. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Swiper.js, and Bootstrap, hosted behind Cloudflare for performance and security. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and published security policies. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the website is trustworthy and professional, with no signs of malicious content or vulnerabilities.

B

BTL

btlaesthetics.de

54

BTL Aesthetics is a global provider of innovative non-invasive aesthetic medical devices and treatments, including flagship products like EMSCULPT NEO and EMFACE. The company targets both professional providers such as doctors, physiotherapists, and beauticians, as well as patients seeking aesthetic treatments. Their market position is strong within the healthcare aesthetics sector, offering a broad portfolio of body shaping and skin rejuvenation solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive GDPR compliance mechanisms including cookie consent management. Technically, the site leverages modern web technologies such as Google Tag Manager, YouTube API, and Ruby on Rails frameworks, hosted on WEDOS infrastructure. Security posture is good with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

B

BTL

btlaesthetics.com

54

BTL Aesthetics operates as a global provider of innovative non-invasive aesthetic medical solutions, including flagship products like EMSCULPT NEO and EMFACE. The website targets both professional providers such as doctors and beauticians, and patients seeking aesthetic treatments. The business model is primarily B2B and B2C, focusing on body shaping and skin rejuvenation technologies. The company maintains a strong market position as an innovator in the healthcare aesthetics sector, with a consistent brand presence and comprehensive product offerings.

A

Autoneum. Mastering Sound and Heat.

autoneum.com

71

Autoneum is a global market leader specializing in acoustic and thermal management solutions for the automotive industry. The company presents a professional and well-structured website built on WordPress, leveraging modern SEO and analytics tools to engage its target audience of automotive professionals and suppliers. The website content emphasizes Autoneum's leadership position and key services, including product brochures, supplier portals, and career opportunities. Technically, the site uses a mature tech stack with popular plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS data raises concerns about domain registration transparency, but the overall business credibility and website professionalism mitigate immediate trust issues. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing direct contact information for incident response.