Security Directory

C

ConocoPhillips

conocophillips.com

73

ConocoPhillips is a leading global independent exploration and production company specializing in oil and gas. The company operates worldwide with a strong focus on responsible and reliable energy production. Their website reflects a mature enterprise with comprehensive investor relations, sustainability reporting, and global operational information. The digital infrastructure uses modern technologies including jQuery, Google Tag Manager, and OneTrust for privacy compliance, indicating a well-maintained and professional online presence. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website is trustworthy and professionally managed, but the lack of WHOIS data is a notable anomaly that should be further investigated to confirm domain registration legitimacy.

Wisepress Ltd. operates as an online retailer specializing in medical and veterinary books, serving medical professionals worldwide. The company has a longstanding presence in the market, participating in medical conferences across the UK and Europe. Their website offers a comprehensive e-commerce platform with categorized medical literature, corporate sales, and voucher options. The target audience includes healthcare professionals, students, and veterinary practitioners. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Analytics and Facebook SDK for tracking, and uses HTTPS to secure communications. Mobile optimization and accessibility are basic but functional. Security posture is moderate with HTTPS enabled but lacks explicit security headers and public security policies. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security practices and clearer business contact information.

H

HRH Geology

hrhgeology.com

52

HRH Geology operates a specialized geological software platform called GravitasEDGE, targeting the energy sector with cloud-based operations geology tools. The platform integrates multiple applications for well data visualization, analysis, and reporting, supporting mobile access and global collaboration. Technically, the website is built on WordPress with Elementor and uses modern tracking and analytics tools. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and active content. Overall, the site demonstrates good technical maturity but requires improvements in compliance and transparency.

N

NextEra Energy, Inc.

nexteraenergy.com

72

NextEra Energy, Inc. is a leading American energy company specializing in a diverse portfolio of power generation including renewables, natural gas, nuclear, and battery storage. The company operates primarily in the United States and Canada, serving millions of customers and investing heavily in energy infrastructure to support economic growth and energy reliability. Their business model focuses on innovation, customer value, and sustainable energy solutions, positioning them as a market leader in the energy sector. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and multiple analytics and marketing tools such as Adobe Analytics, Google Tag Manager, Facebook Pixel, LinkedIn Insight, and Twitter tracking. The site is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, indicating a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a visible cookie consent banner and lack of published incident response or vulnerability disclosure information are areas for improvement. Overall, the website presents a professional, trustworthy, and content-rich digital presence for NextEra Energy. The lack of publicly available WHOIS data slightly reduces trust but is not uncommon for large corporations. Strategic recommendations include implementing cookie consent mechanisms, publishing security incident contacts, and enhancing accessibility compliance to further strengthen security and privacy posture.

HCA Healthcare UK operates The Harley Street Clinic, a leading private healthcare provider in London offering a broad range of specialist medical services including cancer care, cardiac care, neurology, orthopaedics, and women's health. The clinic is recognized for its outstanding care quality, supported by a CQC Outstanding rating and thousands of verified patient reviews. The website reflects a mature digital presence with comprehensive service descriptions and patient resources, targeting private healthcare patients both locally and internationally. Technically, the site leverages modern frameworks such as Next.js and Sitecore CMS, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source for healthcare information and services.

R

Red Planet Pictures

redplanetpictures.co.uk

55

Red Planet Pictures is an independent UK-based TV production company specializing in high-end drama, founded in 2006 by Tony Jordan and managed by Belinda Campbell and Alex Jones. The company holds a leading position in the UK drama production market, targeting media professionals and drama audiences. The website reflects a professional media business with clear branding and relevant content focused on their production services. Technically, the site uses modern front-end technologies including JavaScript, YouTube iframe API, and Typekit fonts, with indications of Statamic CMS usage. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security posture is weak due to lack of visible security headers, privacy policies, and incident response information. No WAF or blocking mechanisms are detected, and the domain WHOIS data supports legitimacy with consistent registration and appropriate domain age. Overall, the website is functional and professional but lacks critical privacy and security disclosures.

A

Alpha Electrical Eastern Ltd

alphaelectricalnorwich.co.uk

57

Alpha Electrical Eastern Ltd is a well-established electrical services provider based in Norwich, UK, serving both domestic and commercial clients throughout East Anglia. Founded in 1967, the company offers a comprehensive range of electrical services including emergency call outs, full property rewires, PAT testing, and landlord safety certificates. The business positions itself as a reliable and affordable option with strong local presence and certifications such as NICEIC and CHAS membership, enhancing its credibility in the market. The website infrastructure is built on the MultiScreenSite platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and embedded video content from YouTube and Vimeo. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. Analytics and marketing tools are integrated for user tracking and engagement, though privacy compliance is primarily managed through linked third-party privacy and cookie policies. From a security perspective, the site enforces HTTPS and employs CAPTCHA mechanisms on its contact form to mitigate spam. However, explicit security headers are not evident, and there is no published security or incident response policy, which could be improved to enhance trust and compliance. The WHOIS data for the domain is unavailable and flagged as invalid by the UK registry, which raises concerns about domain registration legitimacy, though the website content and business information appear professional and consistent. Overall, Alpha Electrical Eastern Ltd presents a trustworthy and professional online presence for its electrical services business, with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing comprehensive security headers, publishing incident response information, and resolving domain registration inconsistencies to strengthen trust and co…

S

Swagelok

swagelok.com

67

Swagelok is a well-established, privately held manufacturer specializing in fluid system solutions, including components, assemblies, and engineering services. The company targets industrial customers across critical sectors such as energy and manufacturing, offering a comprehensive portfolio of products and services supported by a global presence and local support centers. The website reflects a mature digital infrastructure with professional design, clear navigation, and multilingual support, indicating a strong commitment to customer engagement and accessibility. Technically, the site employs modern web technologies, including Google Tag Manager and OneTrust for privacy compliance, and demonstrates good mobile optimization and SEO practices. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly disclosed. The WHOIS data is limited and inconsistent, likely due to privacy or registry policies, but the overall trustworthiness of the domain and website content remains high. Strategic recommendations include enhancing transparency around security policies and incident response, adding vulnerability disclosure mechanisms, and improving accessibility features to further strengthen the company's digital maturity and security posture.

R

R D Johns

rdjohns.co.uk

45

R D Johns Limited is a well-established family-run food wholesaler operating primarily in the South West of England. With over 50 years of experience, the company serves a broad range of food service businesses including restaurants, pubs, and catering services. The website reflects a mature business with a strong market position, offering extensive product catalogs, online ordering, and promotional materials to support its customers. The company maintains active social media channels to engage with its audience and enhance brand visibility. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, indicating a good level of digital maturity. The site is mobile-optimized and uses HTTPS with reCAPTCHA for form security, though it lacks some advanced security headers and explicit privacy and cookie policies. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site demonstrates good practices like HTTPS and form protection but could improve by implementing security headers and publishing clear privacy and cookie policies to enhance GDPR compliance. No critical vulnerabilities or suspicious activities were detected. The domain registration is consistent with the business claims, showing a long-standing presence and legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to meet modern standards fully.

A

Aurora Flight Sciences

aurora.aero

73

Aurora Flight Sciences is a large aerospace technology company specializing in the design, manufacturing, and testing of advanced and uncrewed aircraft systems, aerospace components, and space hardware. As a subsidiary of Boeing, it leverages significant industry expertise and scale to deliver innovative solutions for government and commercial customers. The company’s website reflects a mature digital presence with comprehensive content about its programs, services, and corporate identity. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit privacy policies are recommended. The lack of public WHOIS data is consistent with privacy protection practices common in aerospace sectors and does not detract from the company’s legitimacy. Overall, Aurora Flight Sciences presents a professional, trustworthy, and technologically advanced profile online.

F

Fatra UK Ltd

fatra.co.uk

48

Fatra UK Ltd is a specialized supplier of recyclable flat roofing membranes and waterproofing systems, targeting the UK construction and refurbishment market. Their product portfolio includes single ply membranes, liquid applied systems, and two-layer felt solutions, all supported by certified quality and professional installation services. The company positions itself as a leading provider with a focus on environmental sustainability and long-lasting roofing performance. The website reflects a professional digital presence with clear navigation, relevant content, and active social media engagement. Technically, the website is built on the Concrete5 CMS platform, utilizing common web technologies such as jQuery and YouTube APIs, alongside Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security headers and privacy compliance features, as no privacy or cookie policies were found. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. The absence of security headers and incident response information suggests moderate security maturity. The WHOIS data is notably missing due to a domain registration error, which introduces uncertainty about domain legitimacy despite the professional site presentation. Overall, the website is functional, professional, and trustworthy from a user perspective but requires enhancements in privacy compliance and security best practices. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.

J

Jove International

joveinternational.com

61

Jove International is a specialist recruitment firm focusing on delivering exceptional talent in quantitative and technology-driven finance markets globally. The company targets major financial centers including London, Hong Kong, Tokyo, New York, Chicago, San Francisco, and Paris. Their key services include contingent and retained search, market mapping, competitor analysis, and compensation analysis. The website presents a professional image with clear business focus and global market coverage. Technically, the site is built on the Readymag platform, utilizing modern fonts and analytics tools such as Google Analytics and TikTok Pixel. The site is mobile optimized and has good SEO practices but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with no detected security headers and unclear SSL configuration. WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is functional and professional but would benefit from improved compliance and security transparency.

E

Everywhen

tandr.co.uk

69

Everywhen is a specialist personal and business insurance provider based in the United Kingdom, offering sector-specific insurance solutions with a focus on trusted relationships and in-depth knowledge. The website demonstrates a professional digital presence with a clear focus on insurance services for businesses and individuals. The technical infrastructure incorporates modern analytics and marketing tools such as Google Tag Manager, Hotjar, VWO, and Cookiebot, indicating a mature approach to user experience and data-driven optimization. Security posture is strong with HTTPS enforced and anti-CSRF protections evident, although some security headers are not explicitly detected. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service pages were not found in the provided content. The WHOIS data query failed due to an invalid subdomain query, limiting domain registration trust verification. Overall, the website is professional, secure, and compliant with good business credibility, but would benefit from enhanced transparency in privacy and security policies.

P

Paragon Global Brands

communisis.com

62

Paragon Global Brands is a prominent global outsourced services provider specializing in retail execution solutions that help brands succeed at critical consumer touchpoints. The company operates worldwide with expert teams that create integrated multi-agency ecosystems supported by data platforms to streamline retail processes, reduce costs, and improve brand compliance. Their offerings include strategy, design, procurement, fulfillment, and AI-driven insights, positioning them as a leader in retail services. The website reflects a mature digital presence built on Drupal 10, incorporating modern technologies such as Cookiebot for consent management and Cloudflare Insights for analytics. The site is well-optimized for mobile and accessibility, with professional design and clear navigation. Security posture is strong with HTTPS and consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, typical for corporate domains, and does not raise immediate concerns. Overall, the website and business demonstrate high professionalism and trustworthiness, with room for improvement in transparency and security policy disclosures.

Stanley Motta Limited is a publicly listed real estate development company based in Jamaica, specializing in commercial office space leasing and property management. The company owns and operates 58 HWT, a major business process outsourcing and technology park in Kingston, offering over 300,000 square feet of commercial office space on prime land. Their business model focuses on triple-net leases denominated in US dollars, targeting investors and commercial tenants in the Caribbean region. Technically, the website is built on WordPress using the Elementor framework, integrating modern web technologies such as jQuery and YouTube API for multimedia content. Google Analytics is employed for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs domain transfer protection. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website presents a professional and trustworthy digital presence for Stanley Motta Limited, with a solid security posture and compliance framework. Strategic improvements could include enhancing security headers, publishing a security policy, and expanding accessibility features to further strengthen trust and compliance.

Piece of Cake is a small retail bakery business based in Atlanta, Georgia, specializing in gourmet cakes, cupcakes, and treats with nationwide shipping capabilities. Established in 1985, the company has built a loyal customer base and offers custom baked goods for celebrations and everyday enjoyment. Their business model combines local retail presence with e-commerce through a dedicated online ordering platform. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting consumers and corporate clients seeking quality baked goods and gifts. Technically, the website uses a classic Bootstrap framework with jQuery and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Twitter tracking. While the site is mobile optimized and performs moderately well, some technical debt is evident with the use of outdated libraries and lack of modern security headers. Security posture is adequate with HTTPS usage but lacks explicit security policies, incident response information, and cookie consent mechanisms, which are important for compliance and trust. The absence of WHOIS data for the domain is a notable anomaly that reduces overall trustworthiness, although the website content and business information appear legitimate and professional. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance the site's credibility and security stance.

C

Consumer Financial Protection Bureau

consumerfinance.gov

63

The Consumer Financial Protection Bureau (CFPB) is a United States government agency dedicated to ensuring a fair, transparent, and competitive consumer finance marketplace. The website serves as an official platform to provide consumer education, facilitate complaint submissions, supervise financial institutions, enforce consumer financial laws, and publish data and research. The CFPB positions itself as a key federal regulator and resource for American consumers and financial service providers. Technically, the website employs modern JavaScript frameworks and integrates advanced monitoring and analytics tools such as New Relic and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure consistent with enterprise-level government standards. From a security perspective, the site enforces HTTPS and uses monitoring scripts to maintain operational integrity. While explicit security headers were not detected in the provided data, the overall posture is strong with no exposed sensitive data or vulnerabilities identified. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, the CFPB website demonstrates high professionalism, trustworthiness, and compliance with regulatory standards. The lack of WHOIS data is typical for .gov domains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen security transparency.

C

Cronofy Ltd

cronofy.com

66

Connect calendars and share the availability of your team. Enterprise-ready, HIPAA & GDPR compliant interview scheduling software, calendar APIs and scheduling APIs.

S

Sabiedriba ar ierobezotu atbildibu "VARDS & CO"

lkr.lv

46

Latvijas Kristīgais Radio (LKR) is a Latvian Christian media organization operating a 24/7 Christian radio station and providing related news, programs, and video content. The organization targets the Latvian-speaking Christian community and broader audiences interested in religious content. The website is professionally designed, consistent in branding, and offers a variety of media including live streaming and video broadcasts. The business appears to be a small-sized media entity with a clear focus on Christian content and community engagement. Technically, the website uses modern JavaScript frameworks likely Nuxt.js, integrates video.js for media playback, and leverages YouTube for video content. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers are missing. No major vulnerabilities or exposed sensitive data were detected. The WHOIS data, while missing registrar and creation date, shows an active domain with registrant information matching the business identity and location in Latvia. Privacy and cookie policies are present and GDPR compliant. No signs of blocking or WAF interference were found, allowing full content access. Overall, the site is trustworthy, professionally maintained, and suitable for its target audience. Recommendations include enhancing security headers and publishing a vulnerability disclosure policy to further improve security posture.

Schulen am Maiengrün is a Swiss educational institution serving the Verbandsgemeinden of Dottikon, Hägglingen, and Hendschiken. The website provides comprehensive information about primary and secondary education offerings, targeting local parents, students, and community members. The institution operates multiple school locations and offers classes from kindergarten through ninth grade. The site is well-branded and consistent with the institution's identity, featuring official logos and clear contact information. Technically, the website is built on WordPress using Elementor and several plugins for SEO, events, and team management. It employs modern web technologies including HTTPS, jQuery, and integrates YouTube videos. The site is moderately performant with good mobile optimization and basic accessibility features. SEO is enhanced by Rank Math PRO and structured data in JSON-LD format. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is adequate with a clear privacy policy and cookie banner. Overall, Schulen am Maiengrün presents a trustworthy, professional online presence appropriate for its educational mission. The site is safe for general audiences, free of adult or questionable content, and provides transparent contact details. Strategic improvements could include enhanced security headers and publishing a formal security policy to strengthen trust and compliance.

C

CAP TODAY

captodayonline.com

61

CAP TODAY is a specialized online publication serving the pathology and laboratory medicine community, offering articles, product guides, webinars, and event information. The website is built on WordPress and integrates multiple third-party services for analytics and advertising, reflecting a moderate level of digital maturity. The content is professionally presented, targeting healthcare professionals in pathology and laboratory management. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks explicit security policies and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain registration transparency, though the site appears legitimate and active. Strategic recommendations include enhancing privacy and security disclosures and verifying domain registration details to improve trust.

L

Lidl Slovenija

lidl.si

76

Lidl Slovenija operates as a leading retail supermarket chain in Slovenia, providing a broad assortment of grocery and household products to general consumers. The website serves as a digital storefront and information portal, reflecting the company's strong market position and brand consistency. The business is part of the larger Schwarz Gruppe, indicating a solid backing and extensive retail experience. The site is well-structured, professionally designed, and targets Slovenian consumers effectively. From a technical perspective, the website employs modern web technologies including JavaScript frameworks, YouTube integration, and advanced cookie consent management via OneTrust. Hosting is managed through Akamai, ensuring reliable content delivery. The site demonstrates good performance, mobile optimization, and accessibility features, supporting a positive user experience. Security posture is robust with HTTPS enforced, comprehensive cookie consent, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Privacy compliance is strong, with GDPR-aligned policies and a dedicated data protection officer contact. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust further.

M

Mladinska knjiga

mladinska-knjiga.si

60

Mladinska knjiga is a leading Slovenian publishing and retail company specializing in books, magazines, school supplies, and office materials. The website reflects a mature digital presence with a comprehensive catalog, multimedia content, and active marketing channels. The company targets a broad audience including children, students, and general readers, positioning itself as a cultural and educational hub in Slovenia. Technically, the site is built on Drupal 8, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, ensuring good performance and user experience across devices. Security posture is solid with HTTPS, cookie consent, and domain verification, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

Z

Zaslon

zaslon.si

41

Zaslon.si operates the largest network of digital advertising screens in Slovenia, primarily installed on public transport buses in Ljubljana, Maribor, and Celje. The company offers a variety of advertising formats including full-screen ads, masked ads, event announcements, and promotional banners, targeting public transport users. The website is built on WordPress with SEO optimization and integrates Google Analytics for traffic monitoring. While the site is professionally designed and mobile optimized, it lacks critical privacy and cookie policies, which are essential for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the website presents a credible business with room for improvement in privacy and security transparency.

R

Renault Hrvatska

renault.hr

54

Renault Hrvatska operates as the official Croatian website for the Renault automotive brand, providing comprehensive information on new and used vehicles, financing options, after-sales services, and vehicle configurators. The website targets Croatian consumers interested in purchasing Renault vehicles, offering a broad portfolio including electric and hybrid models. The site reflects a mature digital presence consistent with a large automotive brand, supported by structured navigation and official branding. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Plausible Analytics, alongside a cookie consent mechanism compliant with GDPR signals. Security posture is strong with HTTPS enforced and privacy-respecting analytics loading conditioned on user privacy signals. However, explicit privacy policies, terms of service, and security incident response information are not directly visible in the provided content. WHOIS data confirms domain legitimacy and consistency with Renault's global presence. Overall, the site is professional, trustworthy, and well-optimized for its audience.

N

Nationale staalprijs

nationalestaalprijs.nl

46

Nationale staalprijs is a Dutch organization dedicated to promoting and awarding excellence in steel construction projects. The website serves as a platform to showcase nominations, winners, and project submissions related to steel construction within the Netherlands. It targets professionals and companies in the steel construction industry, providing information and recognition to encourage innovation and quality in this sector. The business model appears to be non-profit or industry promotional in nature, focusing on national recognition rather than commercial sales. Technically, the website is built on Drupal 10 CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, YouTube and Vimeo APIs, and Google reCAPTCHA for form security. The site is mobile optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on user registration and login forms to mitigate automated abuse. However, no explicit security headers were detected in the provided content, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is limited as no privacy or cookie policies were found on the homepage content, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and well-targeted to its audience. The main risks relate to privacy compliance and security policy transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance.

S

Semenarna Ljubljana d.o.o.

semenarna.si

57

Semenarna Ljubljana d.o.o. is a well-established Slovenian company specializing in the sale of high-quality agricultural and gardening products, including seeds and various tools. The company targets farmers, gardeners, and agricultural professionals primarily within Slovenia but also maintains an international presence. Their website reflects a medium-sized business with a professional online presence, offering comprehensive contact options and product catalogs. Technically, the website is built on the NBSHOP CMS platform and utilizes modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses anti-spam measures on forms but lacks some advanced security headers and explicit cookie consent mechanisms. Overall, the domain's long registration history and consistent WHOIS data support the legitimacy and trustworthiness of the business.

M

Mladinska knjiga

mladinska.com

60

Mladinska knjiga is a leading Slovenian publishing and retail company specializing in books, magazines, school supplies, and office materials. The website reflects a mature digital presence with a strong focus on user engagement through events, newsletters, and social media. The company maintains a consistent brand image and offers a comprehensive product catalog targeting a broad audience including children, students, and businesses. Technically, the site is built on Drupal 8 and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a data-driven approach to customer insights. Security posture is good with HTTPS enforced and consent-based script loading, though improvements can be made by adding explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

M

MOBOTIX AG

mobotix.com

68

MOBOTIX AG is a German company specializing in high-resolution IP security camera systems and IoT video technology. Established in 1999, the company offers innovative decentralized edge video solutions and software to improve operational efficiency and safety for businesses and organizations across multiple sectors including industry, government, healthcare, and retail. The website is professionally designed, multilingual, and provides comprehensive information about products, services, and partner programs. Technically, the site uses Drupal CMS with modern analytics tools like Google Analytics and Tag Manager, implementing privacy-conscious features such as IP anonymization and cookie consent mechanisms. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published incident response policies. WHOIS data for the domain is missing or unavailable, which is unusual for a .com domain and slightly impacts trustworthiness. Overall, the website is credible, well-maintained, and business-focused, with recommendations to improve security transparency and domain registration visibility.

G

Gibraltaz

gibraltaz.fr

10

Gibraltaz is a French technology company founded in 2020, specializing in custom digital business solutions and software services primarily serving enterprises, associations, and territorial organizations in the Grand Est region and Luxembourg. The company offers a broad range of services including consulting, software development, UX/UI design, maintenance, and digital transformation support. They are recognized partners of regional industry initiatives and have won awards for innovation. Technically, the website is built on WordPress with modern plugins and frameworks, hosted by OVH, and uses HTTPS with some security best practices but lacks explicit security headers and formal policies. Contact is primarily via email and web forms, with social media presence on LinkedIn and Facebook enhancing credibility. Privacy and cookie policies are missing, representing compliance gaps. Overall, the website is professional, content-rich, and trustworthy, with moderate technical and security maturity.

R

RedRhino Inc.

red-rhino.com

54

RedRhino Inc. is a well-established marketing and advertising agency based in London, Ontario, with nearly three decades of experience. The company specializes in integrated marketing, branding, and digital services including mobile-first website development. Their client portfolio spans multiple sectors such as consumer goods, healthcare, manufacturing, and professional services, positioning them as a reputable mid-sized agency in their market. The website reflects a professional and consistent brand image with strong content quality and user experience. Technically, the site is built on WordPress using modern frameworks and includes multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency.

O

Oraclum Intelligence Systems

oraclum.co.uk

51

Oraclum Intelligence Systems is a UK-based data science company specializing in predictive analytics and market research. Their proprietary Bayesian Adjusted Social Network (BASON) Survey technology enables them to deliver highly accurate predictions, including notable successes such as Brexit and US election outcomes. The company targets businesses and organizations seeking advanced data-driven insights to optimize market strategies and understand customer behavior. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on their predictive services. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized and performs moderately well, with good SEO practices and structured data implemented. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for enhancement. The WHOIS data for the domain www.oraclum.co.uk is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. Despite this, the website is fully accessible and professionally maintained, suggesting the domain may be an alias or subdomain. This discrepancy slightly reduces trust but does not indicate malicious intent. Privacy policy is present and GDPR compliant, but cookie consent is missing. Contact information is limited to a contact form, with no explicit emails or phone numbers provided. Overall, Oraclum presents a credible and innovative business with a strong technical foundation and good security practices. Strategic improvements in compliance and security headers would enhance trust and user confidence.

S

SOS dětské vesničky

kdyzboliduse.cz

46

The website 'Když bolí duše, jednej rychle' is a mental health awareness campaign operated by SOS dětské vesničky, a recognized non-profit organization in the Czech Republic. It targets children, adolescents, and their families, providing support, crisis plans, and access to helpline contacts. The site is well-branded and professionally designed, reflecting a strong commitment to youth mental health. Technically, it leverages modern web technologies such as React and Next.js, with embedded multimedia content and integration of Google Analytics under a cookie consent framework. Security posture is solid with HTTPS and consent management, though explicit security headers and privacy policies are missing, which are recommended for compliance and trust. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit campaigns. Overall, the site is trustworthy, safe, and professionally maintained, serving an important social cause.

S

SOMA GmbH

flexassistant.de

11

The website www.flexassistant.de represents SOMA GmbH's flexAssistant product, a digital worker assistance system designed for manual assembly and production processes. The company is positioned as a medium-sized, well-established player in the manufacturing technology sector, with a strong focus on Industry 4.0 solutions such as Pick by Light systems and paperless manufacturing. The site demonstrates a professional and comprehensive digital presence, supported by modern CMS technology (TYPO3), consent management, and analytics tools. Security posture is good with HTTPS and standard best practices, though some security headers could be improved. The business credibility is high, supported by certifications like ISO 9001 and awards such as the TOP 100 Innovator. Contact information is clear and includes a named contact person, enhancing trust.

C

Cornelissen aannemingsbedrijf

cornelissenbouw.nl

43

Cornelissen aannemingsbedrijf is a Dutch construction contracting company specializing in managing both large and small building projects with an emphasis on craftsmanship and customer involvement. The company targets individuals and businesses in the Netherlands seeking reliable construction services. The website is built on WordPress, utilizing Yoast SEO for search engine optimization and Google Analytics for visitor tracking. The technical infrastructure is modern but lacks some advanced security headers and privacy compliance features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to align with best practices and regulatory requirements.

A

Anixy

anixy.eu

42

Anixy is a French company specializing in comprehensive ticketing and event management services for fairs and public trade shows. Positioned as a leader in its domain within France, the company offers end-to-end solutions including pre-event access preparation, on-site management of human and financial flows, and post-event result analysis. The website reflects a professional business model targeting event organizers, supported by client references and experience counters indicating over two decades of operation. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager and Axeptio for cookie consent. The site is mobile-optimized with good SEO and basic accessibility features. Hosting details are not explicit, but the domain is registered with a reputable registrar, GANDI. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, it lacks explicit security headers, a published security policy, and incident response contacts. No vulnerabilities or suspicious elements were detected in the analysis. Overall, the website presents a trustworthy and professional digital presence with moderate to good technical and security posture. Strategic improvements in privacy compliance documentation and security policy publication would enhance trust and compliance.

G

GL events

gl-events.com

65

GL events is a large, internationally active event management company based in France, offering integrated services across event conception, venue management, and exhibitions. The website is professionally designed using Drupal 8, with modern technologies such as YouTube API, Matomo analytics, and accessibility tools. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Security posture is good with HTTPS and no exposed sensitive data, but lacks explicit security headers and published security policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and content quality of the site. Overall, the website presents a strong digital presence but would benefit from improved transparency in domain registration and security disclosures.

S

Sjednocená organizace nevidomých a slabozrakých České republiky, zapsaný spolek

sons.cz

44

The website represents Sjednocená organizace nevidomých a slabozrakých České republiky, a large non-profit organization dedicated to supporting blind and visually impaired individuals across the Czech Republic. The organization provides a wide range of social services including counseling, training, guide dog programs, and barrier removal, positioning itself as a leading national entity in this sector. The website content is comprehensive, well-structured, and targets both members and the general public interested in their services. Technically, the site uses a modern JavaScript stack with jQuery, Bootstrap, and Masonry for layout, hosted by T-Mobile Czech Republic, and integrates Google Analytics for visitor tracking. Privacy compliance is addressed with GDPR-related pages and cookie consent mechanisms. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks advanced security headers and vulnerability disclosure policies. The absence of WHOIS data reduces domain trustworthiness, but the website's content and external references support its legitimacy. Overall, the site is professional, accessible, and trustworthy with room for security and technical improvements.

D

DRiV

drivparts.com

63

DRiV is a company specializing in the manufacturing and distribution of quality automotive parts, targeting automotive professionals and parts buyers. The website presents a professional and consistent brand image with a focus on quality and safety in auto parts. Technically, the site is built on Adobe Experience Manager CMS and employs modern web technologies including jQuery, Vue.js components, and integrates tracking tools such as Google Tag Manager and Facebook Pixel. The site is accessible, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data is a significant concern, indicating potential issues with domain legitimacy or privacy protection. Overall, the site is functional and professional but requires improvements in privacy compliance and transparency to enhance trust and security.

U

University of Alaska

alaska.edu

67

The University of Alaska operates the website www.alaska.edu as a subdomain under its main alaska.edu domain, serving as a digital portal for educational and research services. The institution is a large public university system focused on providing higher education and community outreach within the state of Alaska. The website targets students, faculty, researchers, and the general public interested in academic programs and university resources. The business model is that of a public educational institution, with a strong market position as the primary higher education provider in Alaska. Technically, the website employs modern frontend technologies such as Bootstrap 4.6.1 and FontAwesome 6.7.2, along with multiple analytics and marketing tools including Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel. The site appears to be mobile optimized and has a moderate performance profile. However, no CMS or hosting provider details were explicitly identified from the provided data. From a security perspective, the site uses HTTPS and standard third-party scripts but lacks visible security headers and explicit privacy or cookie policies in the analyzed content. No forms or contact information were detected, which limits the assessment of input security and user data handling. The absence of privacy and cookie policies suggests potential compliance gaps with GDPR and other privacy regulations. Overall, the website is legitimate and trustworthy as an educational institution's digital presence, but it would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

B

Banque centrale du Luxembourg

apieceofluxembourg.lu

60

The website 'A Piece of Luxembourg' is an official platform managed by the Banque centrale du Luxembourg, offering unique numismatic products that celebrate Luxembourg's culture, history, and heritage. It targets collectors and enthusiasts interested in Luxembourg-themed euro coins and related products, positioning itself as a niche leader in this specialized market. The business model revolves around e-commerce sales combined with cultural promotion, leveraging the authority and trust of the central bank. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, FontAwesome, Swiper.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain registration transparency but does not significantly detract from the site's legitimacy given its official affiliation. Overall, the website presents a low-risk profile with strong business credibility and good technical and security posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen trust and compliance.

M

Mulgi Elamuskeskus MTÜ

mulgielamuskeskus.ee

40

Mulgi Elamuskeskus MTÜ operates a cultural and experience center in Mulgimaa, Estonia, dedicated to showcasing the region's history, traditions, and cultural heritage. The center functions as a museum, event venue, and local product sales point, targeting tourists, families, and educational groups. The website is professionally designed using WordPress and Elementor, providing clear navigation and relevant content about visiting hours, ticketing, and events. Social media integration with Facebook and Instagram supports community engagement. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies. Contact information is clearly presented, enhancing business credibility.

A

Allee restoran

alleerestoran.ee

44

Allee restoran is a small hospitality business located in Tallinn, Estonia, offering a diverse and seasonal menu with a focus on fresh, local ingredients catering to omnivores and vegans alike. The restaurant operates at two addresses and provides services including lunch offers, breakfast, drinks, group menus, and event hosting. The website is professionally designed, mobile-optimized, and integrates modern web technologies and analytics tools, reflecting a mature digital presence. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy, content-rich, and well-positioned in its market segment.

T

Telia Eesti AS

winterplace.ee

45

Otepää Winterplace is Estonia's largest winter park located in the city center of Otepää, offering a variety of winter leisure activities including snowtubing, ice skating, igloo cinema, and play areas for children. The business targets families, youth, and groups such as schools and companies, positioning itself as a premier winter entertainment destination in Estonia. The website reflects a well-structured and visually appealing platform with integration of social media and mapping services to enhance user engagement. Technically, the site employs modern JavaScript libraries and Google services, managed via the Greativ CMS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic consent mechanisms, but lacks explicit privacy policies and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy online presence for the business.

M

Mulgi Kultuuri Instituut

mulgimaa.ee

45

The website mulgimaa.ee serves as a cultural and tourism portal for the Mulgimaa region in Estonia, promoting local traditions, events, and products. It is operated by regional cultural institutions such as Mulgi Kultuuri Instituut and Mulgimaa Arenduskoda, which are small-sized organizations focused on community development and cultural preservation. The site provides comprehensive information on events, local crafts, tourism guides, and news relevant to the Mulgimaa area. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, Facebook SDK, and YouTube iframe API, built on the Greativ CMS platform. It is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider, with a domain age consistent with the business history. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic, lacking a privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-structured, targeting tourists, cultural enthusiasts, and the local community.

E

Ekotek Eesti OÜ

ekotek.com

45

Ekotek Eesti OÜ operates as the authorized distributor of Victorinox products in the Baltic region, primarily serving Estonia with a retail presence in over 50 stores. The company focuses on offering high-quality Victorinox pocket tools, kitchen knives, and corporate gifting solutions, targeting both consumers and business clients. Founded in 1997, Ekotek has established a reputable market position as a trusted regional distributor. Technically, the website is built on the Greativ CMS platform and leverages modern JavaScript libraries such as Swiper.js and Plyr.js for enhanced user experience. It integrates Google Fonts, Facebook SDK, and YouTube APIs, indicating a mature digital infrastructure. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, DNSSEC is not enabled, and explicit security headers are not detected in the HTML content, suggesting room for improvement in hardening security posture. No incident response or vulnerability disclosure policies are publicly available, which could be enhanced to improve trust and compliance. Overall, Ekotek's website is professional, trustworthy, and compliant with privacy regulations, with a solid business foundation and a clear focus on retail distribution. Strategic improvements in security headers and DNS security would further strengthen its security posture.

Lesoochranárske zoskupenie VLK operates the website 'Všetko pre NIČ' as a non-profit environmental advocacy platform focused on protecting natural forests in Slovakia. The organization promotes non-intervention in forest areas, organizes petitions, legal actions, and educational events to safeguard wildlife and natural reserves. The website serves as a communication and fundraising tool targeting environmentally conscious Slovak citizens and supporters. Technically, the site employs modern JavaScript libraries, Google Analytics, Facebook Pixel, and Google Tag Manager for tracking and user engagement. It integrates YouTube videos and Google Maps for enhanced content delivery. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a published privacy policy or terms of service, which are areas for improvement. Overall, the website is well-designed, user-friendly, and trustworthy, with moderate tracking practices and a clear call to action for donations.

E

Emma Marie Andersson

opassande.se

48

Emma Marie Andersson's website serves as a personal portfolio and blog focused on her artwork, particularly drawings and alcohol ink techniques, as well as her professional work as a graphic designer. The site targets art enthusiasts and potential clients interested in original artwork or graphic design services. The business model is primarily a personal showcase with potential for direct sales through contact. The website is built on WordPress using the Twenty Seventeen theme, with integration of social media platforms such as Instagram, YouTube, and Bluesky to extend reach and engagement. Hosting and domain registration are managed by Loopia AB, a Swedish provider, consistent with the website's Swedish language and content.

A

AquaBabes 2019

aquababes.cz

39

AquaBabes 2019 is a niche music platform based in the Czech Republic, showcasing a group of female artists collaborating on music production, video content, and live performances. The website serves as a promotional hub for their songs, videos, and concert events, targeting a general audience interested in music and cultural events. The platform leverages modern web technologies including Nuxt.js and Vue.js, and integrates multimedia content primarily through YouTube and social media embeds. While the site is visually appealing and mobile-optimized, it lacks critical privacy and security policies, as well as explicit contact information, which impacts its overall trustworthiness. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the content itself appears legitimate and professionally presented.

B

Basic Template 2

acredia.at

74

ACREDIA is a service-oriented business operating primarily in Austria, as indicated by the domain and language usage. The website presents itself as a professional entity with a moderate market presence, targeting a general audience with approximately 2,500 satisfied customers. The business model appears to be service provision, possibly in the insurance or financial sector, although explicit services are not detailed in the provided content. The website uses WordPress with Elementor and several modern plugins, indicating a moderate level of digital maturity and SEO awareness. Technical infrastructure includes cookie consent management via Usercentrics and analytics through Google Tag Manager, supporting compliance and marketing efforts. Security posture is adequate but could be improved by implementing security headers and publishing explicit security policies. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the website is functional and professional but lacks some critical compliance and contact transparency elements.