Security Directory

L

Lumi Capital

lumicapital.eu

43

Lumi Capital is a Baltic real estate company specializing in the development and management of residential rental apartment buildings across Tallinn, Riga, and Vilnius. Managing a portfolio of approximately 2000 apartments, the company partners with institutional investors such as insurance companies and pension funds. Their business model focuses on long-term rental housing with an emphasis on sustainability, innovation, and digital services, positioning themselves as a preferred brand for urban renters valuing flexibility and community. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating Google Analytics for user tracking. The site is mobile-optimized and presents a professional design with clear navigation. While performance is moderate, the technical stack is modern and well-maintained. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy or terms of service pages. The WHOIS data is unavailable due to EURid privacy restrictions, but the website content and business information appear legitimate and consistent. Overall, Lumi Capital's digital presence reflects a professional real estate business with good technical implementation and moderate security posture. Enhancements in privacy documentation, security headers, and incident response transparency would strengthen trust and compliance.

S

Sihtasutus Tartu Ülikooli Kliinikum

kliinikum.ee

53

Tartu Ülikooli Kliinikum is a leading university hospital in Estonia providing comprehensive healthcare services including emergency care, specialist consultations, and patient digital services. The institution is well-positioned in the Estonian healthcare sector with recognized clinical quality, evidenced by awards such as the ESO Angels diamond status. The website targets patients, healthcare partners, and medical professionals, offering extensive information and digital tools for patient engagement. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and CAPTCHA integration, though additional security headers and formal security policies could enhance protection. Privacy compliance is evident with clear privacy and cookie policies, though consent mechanisms could be improved. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's public identity. Overall, the website is professional, trustworthy, and functional, supporting the institution's mission effectively.

Lifeworld is a Belgian real estate development business led by Serge Hannecart, with over three decades of experience in residential, commercial, and international real estate projects. The company also engages in creative ventures such as a unique gin and a rock musical, reflecting a diversified business model. The website presents a professional and visually rich experience, showcasing multiple related ventures and projects. Technically, the site uses concrete5 CMS and common JavaScript libraries, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and cookie consent implemented, though security headers are not explicitly detected. WHOIS data is restricted by the registry, limiting domain ownership transparency, which impacts trust assessment. Overall, the website is professional and credible but would benefit from enhanced security headers and clearer contact information.

C

CLdN

cldn.com

61

CLdN is a well-established logistics company specializing in integrated maritime and multimodal transport solutions across Europe. Founded in 1929, it operates a large fleet of RoRo ships and maintains a network of terminals and transport units, serving major economic regions including the UK, Ireland, Iberia, and Scandinavia. The company emphasizes sustainability with a low CO2 footprint and employs around 3,000 staff. The website reflects a professional and comprehensive digital presence built on Drupal 10, featuring modern web technologies and good mobile optimization. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data for the domain www.cldn.com is a notable anomaly that slightly impacts trust. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit incident response or vulnerability disclosure information. Overall, the website is functional, professional, and trustworthy, but could improve transparency and security documentation to enhance confidence further.

A

Ayuntamiento de Málaga

malaga.eu

66

The Ayuntamiento de Málaga website serves as the official digital portal for the municipal government of Málaga, Spain. It provides comprehensive information about the city's governance, news, events, and citizen services including an electronic headquarters for administrative procedures. The site targets local citizens, businesses, and visitors, positioning itself as a trusted source for municipal information and services. The presence of multiple official social media channels and integration of modern web technologies reflects a mature digital infrastructure. Technically, the website employs a combination of established JavaScript libraries such as jQuery and Bootstrap, along with specialized tools like TinyMCE and Google reCAPTCHA, indicating a focus on usability and security. The CMS appears to be a proprietary or specialized platform (SAGA Suite), tailored for municipal needs. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and includes bot protection mechanisms. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. The WHOIS data is privacy-protected as per EURid policies, which is typical for .eu domains and justified for a government entity. No signs of blocking or WAF interference were detected, allowing full content access. Overall, the website demonstrates a solid business credibility and technical foundation, with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would further strengthen trust and regulatory adherence.

B

BeCommerce

becomsummit.digital

51

Becom Summit is a professionally managed event platform organized by BeCommerce, the Belgian e-business federation, targeting the Belgian e-commerce sector. The website effectively communicates event details, past editions, and upcoming dates, positioning itself as a leading e-commerce event in Belgium. The technical infrastructure is based on WordPress with modern plugins and multilingual support, indicating a mature digital presence. Security posture is adequate with HTTPS and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the website presents a trustworthy and credible business front with clear contact information and legal disclosures.

S

Sopro Polska Sp. z o.o.

sopro.pl

50

Sopro Polska Sp. z o.o. is a well-established manufacturer and distributor of construction chemical products based in Warsaw, Poland. The company offers a broad portfolio including tile adhesives, grouts, sealants, primers, impregnations, floor screeds, and thermal insulation systems, targeting professional builders and contractors. Their digital presence is supported by a multilingual website built on TYPO3 CMS, reflecting a mature technical infrastructure with modern web technologies and a focus on user experience and accessibility. The website incorporates a comprehensive cookie consent mechanism and privacy policy, demonstrating compliance with GDPR and related regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the domain and website present a trustworthy and professional business with a strong market position in the manufacturing sector.

O

Overalia

overalia.com

49

Overalia is a specialized digital marketing agency based in Spain, with a strong focus on online marketing strategies, web development, traffic acquisition, and analytics. The company positions itself as a Google Analytics Certified Partner and Google Partner, serving a diverse client base with over 1,200 projects completed. Their website demonstrates a professional and modern digital presence, utilizing contemporary web technologies and providing comprehensive content including case studies and detailed service descriptions. The technical infrastructure is solid, with HTTPS enforced and integration of security features like Google reCAPTCHA. Privacy and cookie policies are well implemented, reflecting good compliance with GDPR standards. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, although the website content and certifications strongly support the business's credibility.

S

Stad Hasselt

hasselt.be

60

Stad Hasselt is the official municipal government website for the city of Hasselt, Belgium, providing residents and visitors with comprehensive information about city services, governance, events, and local news. The website is well-structured, professionally designed, and targets Dutch-speaking users primarily within the Hasselt region. It offers key services such as document requests, traffic and parking information, waste management, education, leisure, healthcare, and business support. The site uses Drupal 10 CMS with modern front-end technologies and integrates Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure form handling, though some security headers and incident response information are absent. Privacy and cookie policies are present and appear GDPR compliant. WHOIS data is restricted due to domain policy, but the official branding and domain usage confirm legitimacy. Overall, the website demonstrates a good balance of usability, security, and compliance suitable for a government entity.

V

Visualead Ltd.

visualead.com

56

Visualead Ltd. operates a specialized online platform offering visual QR code generation services aimed at businesses and marketers seeking enhanced engagement through branded and mobile-optimized QR codes. The company positions itself as a medium-sized technology firm with a global client base including major brands, providing a SaaS model with campaign management and analytics capabilities. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and tracking tools, with HTTPS enforced and secure form handling, though some security headers are missing. Privacy compliance is partially addressed with clear privacy and terms of use pages, but lacks a cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, potentially indicating registration or privacy issues, but the active and consistent web presence mitigates some trust concerns. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and privacy practices.

The website www.czesha.cz represents the Union of School Associations of the Czech Republic (CZESHA), a non-profit organization focused on educational advocacy and coordination among school associations. The site provides meeting resolutions, policy documents, and information relevant to educational stakeholders in the Czech Republic. The business model centers on member representation and policy influence rather than commercial activities. Technically, the website uses a traditional tech stack including jQuery 1.10.2, Bootstrap, Google Fonts, and Google Analytics. The site is mobile responsive and moderately performant but uses an outdated jQuery version which could pose security risks. The site lacks modern CMS indicators and does not expose hosting provider details. From a security perspective, the site enforces HTTPS and uses secure form submission for login. However, it lacks important security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. No WHOIS data is available, which reduces domain trustworthiness and transparency. Overall, the site is functional and professionally presented but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trust and security posture.

H

HR organizer

hrorganizer.be

69

HR organizer is a Belgian technology company specializing in SaaS-based applicant tracking system (ATS) and employer branding solutions tailored for HR professionals and recruiters in Belgium. Their platform supports the entire recruitment lifecycle from job posting to onboarding, integrating with major job boards and social media channels. The company positions itself as a leading ATS provider trusted by Belgian enterprises, emphasizing productivity and seamless recruitment workflows. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, Google Fonts, and Facebook SDK for social integration. The site is mobile-optimized, SEO-friendly, and includes structured data for enhanced search engine understanding. Cookie consent mechanisms are robust, supporting GDPR compliance with multiple cookie categories and user preferences. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but is mitigated by the professional site and GDPR compliance. Overall, HR organizer presents a mature digital presence with strong business credibility and privacy compliance. The main risk lies in the lack of WHOIS transparency and missing explicit security policy disclosures. Strategic improvements in security headers and incident response documentation would enhance trust and security posture.

Sopro Bauchemie GmbH is a German manufacturer specializing in tile adhesives, grouts, surface fillers, primers, bonding agents, screeds, renders, and waterproofing products. The company targets construction professionals and distributors across multiple European markets, supported by a multilingual website infrastructure. Their market position is that of an established medium-sized manufacturer with a consistent brand presence and professional digital assets. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform (Usercentrics) ensuring GDPR compliance. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and secure form handling, though some HTTP security headers are missing. The absence of WHOIS data for the domain www.sopro.com is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly reduces overall trust. Contact information and privacy policies are clearly presented, supporting compliance and user trust.

C

Concrete Sustainability Council

csc.eco

52

The Concrete Sustainability Council (CSC) operates a global certification system focused on responsibly sourced ready-mixed and precast concrete, promoting sustainability in the construction materials sector. The organization targets concrete producers, suppliers, and construction professionals, positioning itself as a key authority in sustainable concrete certification. The website is built on WordPress with modern technologies including Bootstrap and Google Maps integration, providing a professional and user-friendly experience. Security posture is adequate with HTTPS enabled and domain registration consistent with the business entity, though there are gaps in privacy compliance and vulnerability disclosure. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security transparency.

B

Bethere

bethere.be

45

Bethere is a small communication and digital services company based in Waregem, Belgium, founded in 2006. The company specializes in branding, website and webshop design, and marketing services targeted primarily at local businesses and organizations. Their website reflects a professional and consistent brand image with a focus on clear communication and client references. Technically, the site is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile optimized and provides a user-friendly experience with clear navigation. Security posture is good with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility.

Neustar Localeze is an enterprise-level technology company specializing in local search and business listing management services. As a subsidiary of Neustar, it holds a strong market position as a leader in providing accurate and relevant local business data to consumers and partners. Their key services target small businesses, large chains, resellers, and data licensors, emphasizing data accuracy and real-time updates. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their B2B audience. Technically, the website employs modern front-end technologies including Bootstrap, Font Awesome, and jQuery, supplemented by analytics and tracking tools such as Google Analytics and Crazy Egg. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Hosting and domain registration are stable and reputable, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS and has domain transfer protections in place but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy linked on the parent company domain but no cookie consent mechanism present. No vulnerabilities or exposed sensitive data were detected. Overall, Neustar Localeze presents a trustworthy and professional online presence with room for improvement in security headers, privacy compliance, and incident response transparency. Strategic enhancements in these areas would strengthen their security posture and regulatory compliance.

A

Atelier Souffriau

atelier-souffriau.be

38

Atelier Souffriau is a small Belgian retail business specializing in traditional butchery and catering services, emphasizing artisanal quality and customer experience. The website reflects a well-structured digital presence with clear branding and content focused on their mission and product quality. The company targets local customers interested in authentic, high-quality meat products and catering. Technically, the site is built on WordPress with common frameworks and libraries such as Bootstrap, jQuery, and Font Awesome, and integrates marketing tools like Google Analytics and Facebook Pixel. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is addressed with visible privacy and cookie policies, indicating GDPR awareness. WHOIS data is restricted by the .be registry, limiting domain ownership transparency but the website content and professional presentation support legitimacy. Overall, the site scores well in content quality and technical implementation but could improve in security best practices and business credibility transparency.

F

Franky Fresh Food nv

bourgon.be

50

Bourgon, operated by Franky Fresh Food nv, is a Belgian company specializing in quality meat products and related food services such as food trucks and recipe sharing. The company targets both consumers and B2B clients, positioning itself as a regional player in the retail meat sector with a focus on premium products and event catering. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive contact information. It leverages WordPress CMS with modern technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. WHOIS data is restricted due to DNS Belgium policies, but the website's professionalism and consistent business information support its legitimacy. Overall, the site presents a trustworthy and well-maintained digital presence.

Pool Conception SRL is a specialized Belgian company focused on designing, constructing, and renovating high-end swimming pools for both indoor and outdoor environments. With nearly 15 years of experience, the company positions itself as a niche provider offering bespoke aquatic solutions tailored to client needs. Their business model includes personalized design collaboration, construction services, and a showroom offering related products such as water treatment accessories and outdoor furniture. The website is built on the Odoo CMS platform and hosted by OVH, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. The presence of partner logos and a regularly updated blog indicates active market engagement and credibility. Security posture is moderate with some best practices like cookie consent and CSRF tokens, but lacks visible security headers and DNSSEC. Privacy compliance is basic with a privacy and cookie policy present but no explicit GDPR compliance statements or incident response information. Overall, the website is professional and trustworthy but could improve in security and compliance transparency.

A

Architektenkammer Berlin

ak-berlin.de

45

Architektenkammer Berlin is a professional self-governing chamber representing architects, urban planners, landscape architects, and interior architects in Berlin. The organization provides membership services, continuing education, legal advice, event management, and publishes relevant industry content. It holds a key position as the official chamber for architectural professions in Berlin, targeting professionals and stakeholders in the built environment sector. The website reflects a medium-sized government-related entity with a clear focus on professional development and community engagement. Technically, the website is built on TYPO3 CMS and leverages modern frontend technologies including jQuery, Bootstrap, Flexslider, and Leaflet.js for interactive maps. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Analytics are handled via Matomo with user consent, reflecting a privacy-conscious approach. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the site lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's mission effectively. Strategic improvements in security transparency and formal policies would further strengthen its posture.

T

Technische Hochschule Nürnberg Georg Simon Ohm

th-nuernberg.de

61

Technische Hochschule Nürnberg Georg Simon Ohm is a large public university in Germany, serving over 13,000 students with a broad range of academic programs, research initiatives, and continuing education offerings. The website reflects a mature digital presence built on TYPO3 CMS with modern web technologies and a clear focus on accessibility and internationalization. The institution maintains a strong market position as the largest university in Nuremberg and third largest in Northern Bavaria, with key services spanning education, research, and career support. Social media integration and comprehensive navigation enhance user engagement. Security posture is solid with HTTPS and asynchronous script loading, though improvements are recommended in security headers and explicit privacy consent mechanisms. The WHOIS data aligns with the institution's German educational identity, supporting legitimacy. Overall, the website is professional, trustworthy, and well-structured, supporting the university's mission and stakeholder needs.

BNO (Beroepsorganisatie Nederlandse Ontwerpers) is a well-established Dutch professional association for designers and design agencies, boasting a history of over 100 years. It serves as the largest community of designers in the Netherlands, offering a broad range of services including advice, training, coaching, events, publications, and mentoring. The website reflects a mature organization with a clear market position and a strong focus on supporting and promoting the design sector in the Netherlands. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is solid with HTTPS enforced, CSRF protection, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

B

Bezirk Mittelfranken

bezirk-mittelfranken.de

44

Bezirk Mittelfranken is a regional government entity in Germany focused on providing social services, cultural preservation, health care, education, and regional development for the citizens of Mittelfranken. The website serves as an official portal offering comprehensive information about its services, events, and administrative functions. It targets residents, social service providers, cultural organizations, and educational institutions within the region. The business model is public sector service delivery with a strong emphasis on social welfare and cultural heritage. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, hosted on Hetzner infrastructure. It incorporates accessibility features and a consent management platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and avoids exposing sensitive data. However, it lacks some advanced security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities were detected in the visible content or scripts. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively supports the public institution's mission but could improve security posture by adding explicit security policies and enhancing HTTP headers.

T

Theater Pfütze e. V.

theater-pfuetze.de

50

Theater Pfütze e. V. is a non-profit cultural organization based in Nürnberg, Germany, specializing in theater and music theater performances targeted at young audiences, including children and youth. The organization offers a variety of services including theatrical performances, educational theater pedagogy courses, workshops, and festival events such as the Südwindfestival. The website reflects a well-established local cultural institution with a clear focus on youth engagement and education. Technically, the website is built on the TYPO3 CMS platform using the Bootstrap framework, ensuring a modern and responsive design. It integrates Matomo for analytics and Usercentrics for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and employs email obfuscation techniques to protect contact information. While no explicit security policies or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies and active consent mechanisms. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements could include publishing formal security policies and vulnerability disclosure information to enhance transparency and security posture.

The website unicode.lt/auth serves as a user login and registration portal primarily targeting Lithuanian-speaking users. It is associated with the company UAB "Interneto vizija", a Lithuanian registrar, which aligns with the domain registration data. The site provides basic user authentication services without extensive business content or marketing information, indicating a focused utility platform rather than a broad commercial presence. The technical infrastructure relies on common web technologies such as jQuery, Bootstrap, and FontAwesome, hosted behind Cloudflare DNS services, suggesting a moderate level of digital maturity but lacking advanced modern frameworks or CMS platforms. Security posture is moderate; while forms use secure POST methods and password confirmation, the absence of security headers, anti-CSRF tokens, and cookie consent mechanisms highlight areas for improvement. No direct contact or incident response information is provided, which may impact user trust and compliance. Overall, the site is functional but basic in design and security, suitable for a small business or service with limited public-facing content.

Č

Česko platí kartou

ceskoplatikartou.cz

57

Česko platí kartou is a Czech program aimed at facilitating merchants' adoption of card payment acceptance by providing access to free terminals and payment gateways for an initial period. The website positions itself as a trusted intermediary connecting merchants with multiple payment providers, promoting cashless payments to increase sales and customer convenience. The program targets small and medium-sized businesses in Czechia, emphasizing ease of use and modern payment technologies including mobile terminals and online payment gateways. Technically, the website employs modern web technologies such as Bootstrap and Google Tag Manager, hosted behind Cloudflare, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are missing, representing compliance gaps. The absence of WHOIS data limits domain legitimacy verification, but the presence of multiple reputable payment partners and clear business messaging supports trust. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security transparency.

A

Analytics SEO Limited (t/a Authoritas)

linkdex.com

52

Linkdex is a UK-based technology company operating under Analytics SEO Limited (t/a Authoritas), providing a comprehensive SEO platform tailored for professional marketers, agency teams, and in-house SEO teams. The platform offers extensive SEO data, content marketing insights, outreach strategy tools, ranking intelligence, and project management capabilities. The company positions itself as a trusted partner for global agencies and enterprises, supported by a professional website with strong branding and client endorsements. Technically, the website is built on WordPress with modern frameworks such as React and Bootstrap, integrating key marketing and analytics tools like Google Analytics, Google Tag Manager, and Intercom. The site demonstrates good mobile optimization, SEO practices, and user experience, though performance is moderate and accessibility is basic. From a security perspective, the site enforces HTTPS and employs secure forms but lacks visible security headers and explicit cookie consent mechanisms, indicating areas for improvement in compliance and security hardening. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not negate the professional presence and business legitimacy evident on the site. Overall, Linkdex presents a solid business and technical profile with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen its market position and trustworthiness.

L

LDP International

ldp-int.com

49

LDP International is a specialized event marketing and organization company focused on international motorsport events, including car, motorcycle, and kart racing. Established in 2006 and based in the Netherlands, it holds a strong market position as the owner of the largest combined motorsport race event in Europe. The company offers key services such as sponsorship marketing and hospitality, targeting motorsport enthusiasts, sponsors, and event attendees. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the website is built on the Gridbox CMS platform with Bootstrap and jQuery frameworks, integrating modern web technologies and embedding multimedia content such as YouTube videos. The site is hosted with a reputable registrar and uses HTTPS, ensuring secure communication. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC and security headers, which are recommended to enhance protection. No explicit security policies or incident response contacts are provided, indicating room for improvement in security transparency and compliance. Privacy compliance is partial, with a cookie policy present but no privacy policy or GDPR compliance details. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in security policies, privacy compliance, and DNS security would further strengthen its posture and user trust.

A

AIC Visser

visser-assen.nl

46

AIC Visser operates a professional e-commerce platform specializing in construction materials, measurement instruments, and related equipment primarily serving the Dutch construction and infrastructure sectors. The website demonstrates a solid market position with a broad product catalog and clear navigation targeting construction professionals and contractors. The business model focuses on B2B and B2C sales with an emphasis on quality and variety of construction-related products. Technically, the site is built on the OpenCart platform using the Journal2 theme, leveraging modern JavaScript libraries and integrations such as Google Tag Manager, Facebook Pixel, and Trustpilot for marketing and analytics. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security posture is adequate with HTTPS enforced and some security best practices observed; however, the absence of explicit security headers, privacy policy, and incident response contacts indicates room for improvement. Privacy compliance is limited due to missing privacy and terms of service pages, though a cookie consent mechanism is implemented. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

J

Jack's Casino

jackscasino.nl

50

Jack's Casino operates a large chain of physical casinos across the Netherlands, offering gaming and entertainment services with free entry. The website is professionally designed, localized in Dutch, and provides comprehensive information about casino locations, promotions, and loyalty programs. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and third-party analytics and optimization tools such as Google Tag Manager and Visual Website Optimizer. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site reflects a mature digital presence aligned with the hospitality and gaming industry in the Dutch market.

AUTOUNIT Ν. ΠΟΥΛΑΚΗΣ ΑΕΒΕ is a well-established Greek automotive company specializing in the sale of new and used cars, automotive parts, and comprehensive vehicle services including maintenance, bodywork, and painting. With over 30 years of experience and an authorized Renault-Dacia dealership, the company holds a strong market position in Greece's transportation sector. Their business model combines retail and service offerings targeting automotive customers seeking quality vehicles and parts. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and slick carousel, ensuring a responsive and user-friendly experience. Integration of Google Tag Manager and Facebook Pixel indicates moderate user tracking for marketing purposes. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit published security policies or incident response contacts, and security headers are not detected. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the security posture is solid but could be improved by adding formal security documentation and enhancing HTTP security headers. The overall risk assessment is low, with the website demonstrating good business credibility, privacy compliance, and technical implementation. Strategic recommendations include publishing security policies, adding incident response contacts, and implementing additional security headers to further strengthen the security posture and trustworthiness.

A

AUTOPARK

autopark.gr

48

AUTOPARK is a Greek used car dealership based in Athens, specializing in the sale, leasing, financing, and import/export of used vehicles. The website targets Greek-speaking customers interested in purchasing or leasing used cars, offering a range of services including trade-ins and financing options. The business operates primarily in the transportation sector with a small company size profile. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery plugins for UI enhancements, and integrates Google Analytics and Tag Manager for tracking. Hosting appears to leverage AWS S3 for image assets. The site is mobile optimized with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, indicating awareness of privacy and security best practices. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a local used car dealership. Strategic improvements in security headers, incident response transparency, and terms of service publication would enhance compliance and trustworthiness further.

Ό

Όμιλος Σφακιανάκη

sfakianakis-epiloges.gr

54

Sfakianakis-epiloges.gr is a Greek website specializing in the sale and promotion of used cars under the reputable Όμιλος Σφακιανάκη brand. The platform offers a comprehensive search service for used vehicles, including special offers, financing options, and trade-in services. The website targets Greek consumers seeking reliable used cars with warranty assurances. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Font Awesome, and integrates Google services for analytics and maps. It is mobile responsive and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements a robust cookie consent mechanism via Cookiebot, categorizing cookies by purpose and provider. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility, suitable for its market niche.

kestate.gr is a Greek online classifieds platform specializing in real estate, jobs, vehicles, tourism, and miscellaneous items. It serves Greek-speaking users primarily in Greece, offering a modern and user-friendly interface with multiple search filters and categories. The platform is associated with the reputable Καθημερινή newspaper, enhancing its market credibility. Technically, the website employs a variety of modern JavaScript libraries and frameworks such as jQuery, Bootstrap, Select2, and Google Maps API, providing a responsive and interactive user experience. The site is mobile-optimized and features secure payment badges, indicating support for credit card payments with secure protocols. From a security perspective, the website enforces HTTPS and includes CSRF tokens, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerabilities were detected in the HTML content. Privacy compliance is addressed with a visible privacy policy, cookie consent mechanism via Quantcast CMP, and GDPR compliance indicators. Contact information is clearly provided, including email, phone, and physical address, but no dedicated security or incident response policies are found. Overall, kestate.gr demonstrates a solid business and technical foundation with good security hygiene and privacy awareness. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance.

V

VERSUS SOFTWARE ΟΕ

versus-software.gr

59

VERSUS SOFTWARE ΟΕ is a Greek technology company specializing in website construction, e-commerce solutions, mobile app development, and custom software services. The company targets businesses and organizations seeking comprehensive digital solutions, positioning itself as a reliable local provider with a focus on quality and client satisfaction. Their website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site employs modern frameworks such as Bootstrap and integrates analytics and consent management tools like Google Analytics and Cookiebot, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, uses CSRF protection, and manages cookie consent effectively, though it could improve by implementing additional security headers and publishing a formal security policy. Overall, the site demonstrates good compliance with GDPR and offers transparent contact information, supporting trustworthiness and business credibility.

A

Alamo El Salvador

alamo.sv

44

Alamo El Salvador operates a localized car rental service website targeting travelers and residents within El Salvador. The website offers vehicle rental reservations, fleet information, and customer support primarily in Spanish with an English option. The business is positioned as a local branch of the global Alamo brand, focusing on multiple rental locations including airports and city centers. The website integrates modern web technologies such as Bootstrap, jQuery, and third-party booking widgets to provide a functional and responsive user experience. Analytics and marketing tools including Google Analytics and Facebook Pixel are actively used for user tracking and marketing purposes. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and published security policies. Privacy compliance is basic with privacy and cookie policies present but no explicit consent mechanisms. Contact information is available mainly via phone and contact forms, with social media presence on Facebook, Instagram, and WhatsApp. WHOIS data aligns well with the business claims, supporting domain legitimacy. Overall, the website is professional and functional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

F

Feldhaus Klinker

feldhaus.lt

50

Feldhaus Klinker is a Lithuanian-based company specializing in the sale of clinker tiles, bricks, and pavers, representing a historic European brand established since 1857. The website serves as an e-commerce and product catalog platform targeting construction professionals and retail customers primarily in Lithuania and neighboring regions. The business model focuses on providing high-quality building materials with additional tools such as a product configurator and galleries to support customer decision-making. The company maintains a consistent brand presence with active social media channels and a clear contact phone number. Technically, the website is built on the OpenCart platform using the Journal2 theme, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and various UI and gallery plugins. Hosting and DNS are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. No incident response or security policy information is publicly available, indicating room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and functional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

U

UAB "Švaros spektras"

svarosspektras.lt

38

UAB "Švaros spektras" is a Lithuanian company specializing in professional cleaning services across Lithuania, including carpet, mattress, sofa, leather furniture, window cleaning, and hygiene product supply. The company has a well-established market presence since 2012, targeting both residential and commercial clients. Their website reflects a professional service offering with clear pricing and service descriptions. Technically, the website uses modern frameworks such as Bootstrap and integrates Google services for analytics and security, including reCAPTCHA. The site is hosted on AWS Cloudfront CDN, ensuring good performance and availability. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies, which are compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

S

Stadttheater Gießen

stadttheater-giessen.de

59

Stadttheater Gießen is a prominent publicly funded cultural institution in Hessen, Germany, operating as a five-division theater with a broad regional influence. The website serves as a comprehensive portal for visitors, offering detailed information about performances, ticketing, educational programs, and services for people with disabilities. The organization targets theatergoers, schools, and the local community, positioning itself as a key cultural hub with a strong public service orientation. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various UI libraries such as Fancybox and Slick Slider, likely built on the Kirby CMS platform. Hosting is managed via Schlundtech, a reputable provider. The site is mobile-optimized with good SEO practices and moderate performance, delivering a professional and accessible user experience. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The website demonstrates high business credibility with clear contact details, social media presence, and trust signals such as privacy policies and terms of service. The domain registration aligns with the business profile, showing no suspicious patterns. The overall risk is low, with recommendations focusing on improving security headers and incident response transparency to further strengthen trust and compliance.

M

Menų spaustuvė

menuspaustuve.lt

44

Menų spaustuvė is a well-established Lithuanian cultural organization founded in 2005, focusing on arts, festivals, education, and creative projects. It serves artists, cultural communities, and the general public interested in contemporary arts. The organization operates a website that provides information on events, projects, and festivals, supported by a moderate technical infrastructure using October CMS and common web technologies like Bootstrap and jQuery. The website is accessible, mobile-optimized, and includes social media integration and partner networks. Security posture is adequate with HTTPS and cookie consent implemented, though improvements in security headers and incident response transparency are recommended. Overall, the site reflects a credible and professional cultural institution with a strong local presence.

T

Talex

talex-sj.pl

39

Talex is a well-established Polish company specializing in the production of agricultural machinery, serving primarily agricultural businesses and farmers. Founded in 2005, the company maintains a medium-sized operation with a consistent brand presence and a professional website built on WordPress. The site is well-optimized for SEO and mobile devices, featuring clear navigation and relevant content that supports its business model of manufacturing and sales. Social media integration and active profiles on Facebook, Instagram, LinkedIn, and YouTube enhance its market reach and customer engagement. Technically, the website leverages modern web technologies including Bootstrap, FontAwesome, and Google Fonts, with Yoast SEO plugin for search optimization. Hosting is provided by cyber_Folks S.A., a reputable Polish hosting provider. The site employs HTTPS with good SSL configuration and includes a comprehensive cookie consent mechanism compliant with GDPR, demonstrating a mature approach to privacy and user data protection. From a security perspective, while HTTPS and cookie consent are properly implemented, the absence of DNSSEC and advanced security headers like Content-Security-Policy indicates room for improvement. No vulnerability disclosure or incident response policies are publicly available, which could be enhanced to improve trust and security posture. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Overall, Talex's digital presence reflects a solid business with good technical and privacy practices, though it would benefit from enhanced security measures and clearer policies on incident response and vulnerability disclosure to further strengthen its risk management and compliance posture.

V

Viešoji įstaiga „Šilutės sportas“

silutessportas.lt

39

The website represents Viešoji įstaiga „Šilutės sportas“, a public institution focused on coordinating and promoting sports activities in the Šilutė region of Lithuania. It primarily supports basketball and football teams, youth sports training, and organizes local sports events. The site targets local community members, youth, and sports enthusiasts, positioning itself as a regional sports coordinator with a clear mission to enhance sports accessibility and development. Technically, the website uses a modern but straightforward tech stack including jQuery, Bootstrap, and popular UI libraries. It is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. The site includes a cookie consent mechanism aligned with GDPR requirements and uses Google Analytics for minimal user tracking. From a security perspective, the site lacks visible HTTP security headers and explicit security or incident response policies. The SSL configuration could not be verified from the provided data. The cookie consent implementation is a positive privacy feature, but the absence of vulnerability disclosure and security.txt pages indicates room for improvement in security transparency. Overall, the site is professional and trustworthy in content and design but is hindered by missing WHOIS domain registration data, which raises questions about domain legitimacy. Strategic improvements in security headers, incident response information, and domain registration verification are recommended to enhance trust and compliance.

E

Extradigital

extradigital.eu

42

Extradigital is a European-based e-commerce distributor specializing in smart electronics, computer accessories, and security products, notably DAHUA CCTV systems. The company positions itself as a leading distributor with the largest warehouse in Europe, offering competitive pricing and fast shipping across the continent. Their product range includes smartphone accessories, computer components, GPS trackers, smart home devices, and more, targeting retailers, installers, and end consumers in the technology and security sectors. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Slick Carousel, with Google Tag Manager for analytics. The site is mobile-optimized and features a clear navigation structure, although accessibility features are basic. HTTPS is properly implemented, ensuring secure communications. From a security perspective, the site follows good practices such as secure forms and no exposed sensitive data. However, it lacks visible security policies, incident response information, and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is unavailable due to privacy protection, which is common but slightly reduces domain trust verification. Overall, Extradigital presents a professional and functional e-commerce platform with a solid market position in European electronics distribution. To enhance trust and compliance, the company should implement cookie consent banners, publish security policies, and consider providing more transparency about data protection and incident response.

T

toprent.lv

toprent.com

65

Toprent.lv operates as a regional car rental service primarily targeting customers in the Baltic states, including Latvia, Lithuania, and Estonia. The company offers an online platform for vehicle rentals with multilingual support, catering to both local and international clients. The website's content and structure reflect a professional and user-friendly approach, with clear navigation and relevant business information. The business model focuses on providing accessible car rental services with customer support and FAQ resources to enhance user experience. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, leveraging Cloudflare for DNS services. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented through meta tags and structured data. The presence of Cookiebot for cookie consent and Google Analytics for traffic analysis indicates a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with granular user controls. However, some standard security headers are missing, and there is no explicit security policy or incident response information publicly available. No critical vulnerabilities or exposed sensitive data were detected, suggesting a reasonable security posture but with room for improvement in header implementation and formal security documentation. Overall, Toprent.lv presents a credible and professional online presence with solid business credibility and compliance with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a formal security policy, and establishing a vulnerability disclosure program to further strengthen trust and security maturity.

L

LITNET

eduroam.lt

60

Eduroam.lt is a Lithuanian academic network service provider affiliated with the international eduroam project, delivering secure wireless internet access to educational and research institutions. The website serves as an information and support portal for institutions and users to connect to the eduroam WiFi service, providing instructions, service descriptions, and contact details. The platform targets academic institutions, students, and staff, facilitating seamless roaming internet access nationally and internationally. The business model focuses on service provision and technical support within the education sector, positioning itself as a key national player in academic network services.

M

Marijampolės apskrities atliekų tvarkymo centras

maatc.lt

33

The website maatc.lt represents the Marijampolės apskrities atliekų tvarkymo centras, a regional government entity responsible for waste management services in Marijampolė county, Lithuania. The site provides comprehensive information about waste collection, sorting, regulatory documents, and public services, targeting local residents and businesses. The business model is public sector focused, delivering essential environmental services with a clear regional mandate. Technically, the website is built on WordPress using Elementor and several common plugins, including cookie consent management and responsive design frameworks. The site is well-structured, mobile-optimized, and includes accessibility features such as an accessibility toolbar. Performance is moderate, with modern libraries and no evident technical debt. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the website's content and domain usage suggest legitimacy and trustworthiness. Overall, the site presents a solid digital presence for a regional government service, with good privacy compliance and a professional user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

M

Market Rats

marketrats.lt

55

Market Rats is a professional SEO agency based in Lithuania, offering comprehensive SEO services including audits, keyword research, technical and content optimization, and international SEO projects. Established in 2010, it is one of the largest specialized SEO agencies in Lithuania with a strong client portfolio and a focus on long-term results. The website is well-structured, content-rich, and professionally designed, targeting businesses seeking SEO optimization for websites and e-commerce platforms. Technically, the site uses Joomla CMS with Bootstrap framework and integrates Google Analytics, Tag Manager, and reCAPTCHA for analytics and security. Security posture is strong with HTTPS and form protections, though security headers could be improved. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable due to query limits or privacy protection, which slightly reduces domain trust but the overall business credibility is high based on website content and contact information.

E

Eket.lt

eket.lt

51

Eket.lt is a Lithuanian online educational platform specializing in preparation for the Regitra driving theory exam. The website offers a comprehensive set of KET tests (driving theory tickets) updated to the latest 2025 standards, including free and paid subscription plans. The platform supports personalized learning with detailed explanations, online lectures, and individual consultations with experienced driving instructors. It serves a large user base with over 59,900 registered students and partnerships with 12 driving schools, positioning itself as a leading service in the Lithuanian driving education market. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and various analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Visual Website Optimizer. The site is mobile responsive and optimized for SEO with proper metadata and structured data. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. No WHOIS data was available due to query limits, limiting domain legitimacy assessment. Overall, Eket.lt demonstrates a professional and trustworthy online presence with strong content quality and user experience. The extensive use of tracking and marketing tools suggests a mature digital marketing strategy. Privacy compliance is basic but present, with GDPR-aligned policies and cookie consent. The absence of explicit security policies and incident response information is a minor gap. The platform is well suited for its target audience of learner drivers and driving schools in Lithuania.

V

VairavimoTestai.lt

vairavimotestai.lt

57

VairavimoTestai.lt is a specialized Lithuanian online platform focused on providing comprehensive KET theory tests and driving exam preparation materials. It targets individuals preparing for the official AB Regitra driving theory exam, offering multilingual support and individual instructor consultations to enhance learning outcomes. The platform operates on a paid access model with flexible time-based packages and secure payment integration via Stripe. Technically, the website employs modern frameworks such as Bootstrap and integrates popular analytics and marketing tools including Google Analytics and Facebook Pixel. Security posture is strong with HTTPS enforced and secure payment processing, though some HTTP security headers are not explicitly detected. Privacy compliance is addressed with a cookie consent banner and accessible privacy policy, indicating good adherence to GDPR requirements. Overall, the website presents a professional, user-friendly experience with clear navigation and relevant content, positioning it well within the Lithuanian driving education market.

D

Kilimai, Grindų Dangos, Parketas ir kitos Interjero Detalės - Dubingiai

dubingiai.lt

52

Dubingiai.lt is a Lithuanian e-commerce retailer specializing in floor coverings such as carpets, parquet, and other interior accessories. The website targets homeowners and office clients within Lithuania, offering a broad selection of interior finishing materials. The business operates on the PrestaShop platform, leveraging modern web technologies including jQuery, Bootstrap, and various marketing and analytics tools. The site is well-structured, mobile-optimized, and employs HTTPS with a good SSL configuration, reflecting a moderate level of digital maturity. Security measures include the use of Google reCAPTCHA and a cookie consent mechanism, although explicit privacy policies and contact information are not readily visible, indicating room for improvement in compliance and transparency. Overall, the website presents a professional retail presence with moderate trustworthiness but would benefit from enhanced privacy disclosures and clearer contact channels.