Security Directory

The Children's Oncology Group website serves as a comprehensive resource hub for pediatric cancer research, patients, families, and industry partners. It is operated by a well-established non-profit organization with a domain registered since 1999, reflecting a mature and credible presence in the healthcare research sector. The site offers educational materials, research collaboration information, and links to affiliated projects and foundations, positioning itself as a leader in pediatric oncology research and support. Technically, the website is built on the Sitefinity CMS platform and leverages modern web technologies including jQuery, Bootstrap, and Google Tag Manager. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. However, some areas such as accessibility and SEO could be improved for enhanced reach and compliance. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers. There is no visible cookie consent mechanism despite the use of tracking scripts, and no published incident response or security policies, indicating room for improvement in privacy compliance and security transparency. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic recommendations include implementing cookie consent for GDPR compliance, enabling DNSSEC, adding security headers, and publishing security and incident response policies to strengthen the security posture and user trust.

P

Performance Publications Media Group

roadescapes.ca

9

RoadEscapes.ca is a Canadian travel media website operated by Performance Publications Media Group, focusing on road trip features, destination guides, and travel hacks. The site targets travel enthusiasts and general audiences interested in road travel content. It operates a content publishing business model supported by advertising and partnerships with related media sites. Technically, the website is built on Joomla CMS with SP Page Builder and uses common web technologies such as jQuery and Bootstrap. The site is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks DNSSEC and security headers, and does not publish privacy or cookie policies, which impacts compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is legitimate and professionally presented but would benefit from improved security and privacy compliance measures.

P

PASMAG - Performance Auto & Sound

pasmag.com

10

PASMAG is a well-established online media publication specializing in automotive tuning, performance, and modified car culture. Operating since 1999 with a domain registered in 2000, it serves a niche audience of automotive enthusiasts by providing news, features, product reviews, buyer guides, and event coverage. The website uses Joomla CMS and integrates modern front-end libraries and Google services, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, PASMAG demonstrates strong business credibility and content quality but should improve privacy and security transparency to enhance trust and compliance.

A

ARDEVAR LIMITED

ardevarltd.com

45

Ardevar Limited is a Hong Kong-based company specializing in marketing sports data and feeds through APIs and live data solutions. The company positions itself as a leader in the sports data marketing sector, offering services such as API content, data feeds, risk management, reporting tools, and CRM solutions. The website reflects a professional and consistent brand image targeting businesses that require sports data integration and marketing services. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, OwlCarousel, and EmailJS for contact form handling. The site is mobile optimized and has a moderate performance profile. Security posture is moderate; while HTTPS is presumably enabled, the site lacks important security headers and DNSSEC is not enabled, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is supported by clear company registration details and contact emails. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

P

PPMG Content Tuners

ppmghq.com

40

PPMG Content Tuners is a specialized B2B service provider focused on the automotive aftermarket industry, delivering comprehensive content creation, design, production, sales, and distribution services. The company leverages over two decades of experience and operates several well-known automotive media brands such as PASMAG and Tuner Battlegrounds, positioning itself as a key player in automotive enthusiast media and marketing solutions. The website reflects a professional and consistent brand image targeting automotive businesses and enthusiasts across North America and beyond. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, incorporating modern frontend technologies like Bootstrap and jQuery. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, there is room for improvement in technical SEO and accessibility compliance. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements CSRF tokens for AJAX requests, indicating some security awareness. However, the absence of DNSSEC, security headers, and published privacy or cookie policies highlights gaps in security best practices and privacy compliance. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information. These improvements would strengthen the company's digital trustworthiness and regulatory adherence.

BlueVendo S.A. is a Polish technology company specializing in integrated reservation systems and backoffice solutions for the travel industry, particularly touroperators and travel agents. Their flagship product, BlueVendo, combines booking, inventory, and backoffice management into a single platform, offered in multiple package tiers. The company also provides a proprietary CMS and automation solutions such as OCR and RPA, targeting travel businesses seeking digital transformation. The website is professionally designed, multilingual, and well-structured, reflecting a mature and established business presence since 2008. Technically, the site runs on WordPress with modern plugins and SEO optimizations, though some security headers and cookie consent mechanisms are missing. The security posture is generally good with HTTPS enabled, but DNSSEC is not active and some security best practices could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

TELECO SpA

telecogroup.com

51

TELECO SpA is an established Italian company specializing in high-tech travel comfort products for recreational vehicles, including satellite systems, multimedia devices, air conditioners, solar panels, and generators. The company has a strong European market presence and offers a broad product portfolio supported by a multilingual dealer network and customer assistance. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site is built on Joomla CMS with modern libraries and tracking tools such as Google Analytics, Facebook Pixel, and Mixpanel. Security posture is moderate with HTTPS enabled and CSRF protection on forms, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is limited due to absence of cookie consent mechanisms despite extensive user tracking. Overall, the domain registration data supports the legitimacy and longevity of the business. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and compliance.

B

Bullseye

bullseyelocations.com

62

Bullseye Locations operates as a provider of store locator software solutions aimed at businesses seeking to enhance customer experience and dealer support. The website presents a professional and modern interface built on WordPress with React components and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and Facebook Pixel. Despite the technical maturity and good content quality, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. Overall, the site is functional and business-oriented but requires improvements in compliance and transparency to enhance trust and security.

D

dotNice International Limited

dotnice.com

56

dotNice International Limited operates a professional website focused on brand protection, domain management, and brand enforcement services. The company offers specialized services including domain portfolio management, enterprise DNS infrastructure management, digital brand enforcement, and intellectual property consultancy. The website is well-structured, multilingual, and uses modern web technologies such as WordPress, Bootstrap, and Google Tag Manager, indicating a mature digital infrastructure. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, reflecting a good security posture. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which should be addressed to enhance trust. Overall, the website presents a credible business presence with room for improvement in privacy policy visibility and security header implementation.

SPSP Educa is an educational platform focused on pediatric healthcare, offering a variety of courses, both live and recorded, as well as specialist meetings and events primarily targeting healthcare professionals in Brazil. The website serves as a portal for course registration, event information, and access to educational content. It positions itself as a niche provider in pediatric education with a medium-sized operational scale. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, and Google services such as Analytics and Tag Manager. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and availability. The site is mobile optimized and provides a user-friendly experience with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. It has a cookie consent mechanism and a privacy policy, though these are basic and lack detailed security or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data and DNS configuration are consistent with a legitimate business presence. Overall, SPSP Educa presents a trustworthy and professional online presence with moderate security and privacy compliance. Strategic improvements in security headers, detailed security policies, and incident response information would enhance its security posture and compliance standing.

I

Info Networking GmbH

inet-mainz.de

42

INFO Networking GmbH is a German IT service provider specializing in web services, app development, domain hosting, and print product design. Established in 1996, the company serves primarily business clients, with a strong focus on customized software solutions and specialized offerings for the tourism sector. Their website reflects a professional and consistent brand image with clear service descriptions and accessible contact information. Technically, the site is built on WordPress using a custom theme and standard plugins, hosted likely via Deutsche Telekom infrastructure. The site is mobile-optimized and performs moderately well. From a security perspective, the website employs HTTPS and secure contact forms but lacks visible security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a privacy policy and terms of service pages, though no cookie consent mechanism is evident. The WHOIS data is minimal but domain age aligns with the company's claimed history, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security best practices and privacy transparency. There are no indications of malicious content or blocking mechanisms, enabling full content accessibility and analysis.

F

Funcom

funcom.com

62

Funcom is an established independent game developer and publisher founded in 1993, specializing in PC and console games such as Conan Exiles and Secret World Legends. The company maintains a professional and content-rich website that effectively communicates its brand, products, and career opportunities. The technical infrastructure is modern, leveraging WordPress CMS, Bootstrap framework, and various JavaScript libraries, hosted likely on DigitalOcean. The site is well-optimized for SEO, mobile responsive, and includes privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. WHOIS data is unavailable in the provided raw output, which slightly reduces domain trust but does not undermine the legitimacy of the business given the professional web presence and consistent branding. Overall, the website presents a trustworthy and credible digital front for Funcom.

R

RoasUp

roasup.com

48

RoasUp is a specialized marketing agency focused on providing multi-channel marketing strategies and creative production services for mobile game developers and publishers. The company leverages a proprietary dashboard tool to optimize and automate user acquisition campaigns across major ad networks. Their website presents a professional image with client testimonials, case studies, and detailed service descriptions, positioning them as a data-driven and creative partner in the mobile gaming industry. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, hosted on Linode infrastructure. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses CSRF tokens in forms but lacks visible security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

S

Società Italiana per lo Studio delle Cefalee

sisc2025.it

50

The website sisc2025.it represents the official online presence for the 39th National Congress of the Società Italiana per lo Studio delle Cefalee (SISC), a specialized medical society focused on headache disorders. The site provides comprehensive information about the event, including scientific committee members, thematic areas, registration details, ECM accreditation, and abstract submission guidelines. The target audience is healthcare professionals involved in headache treatment and research. The business model centers on professional education and event organization with paid registrations and official accreditation. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, Font Awesome, and various UI libraries to deliver a responsive and user-friendly experience. The site is mobile optimized and well-structured, though it lacks a CMS and advanced SEO or accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain benefits from DNSSEC and HTTPS (implied by URL), but the website lacks visible HTTP security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data shows the domain is newly registered specifically for the 2025 event, which is consistent but limits long-term trust signals. Contact information is clearly provided, enhancing credibility. Overall, the site is professional and fit for purpose but would benefit from improved privacy compliance and security hardening to meet modern standards and regulatory requirements.

U

Upsoft sp. z o.o.

patchkit.net

63

PatchKit, operated by Upsoft sp. z o.o., is a specialized SaaS platform focused on game publishing and updating solutions. It offers a comprehensive suite of tools including customizable game launchers, a visual launcher builder, CDN delivery via Amazon Cloudfront, CLI power tools, and integration with emerging Web 3.0 technologies such as MetaMask. The platform targets game developers and publishers of all sizes, providing an easy-to-use web panel for game management and monetization. The company has established a solid market position with over 2000 users and multiple reputable clients, supported by positive testimonials and partner integrations. Technically, the website employs a modern and robust technology stack including Bootstrap, jQuery, Google Tag Manager, and various analytics and marketing tools. Hosting and domain registration are managed via Amazon AWS, ensuring reliable infrastructure and performance. The site is well-optimized for SEO, mobile responsiveness, and accessibility, with fast loading times and professional design. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and integrates Google reCAPTCHA to mitigate abuse. However, it lacks a dedicated security policy or incident response page and does not enable DNSSEC. Security headers are not explicitly detected in the HTML content. No vulnerabilities or exposed sensitive data were found. The domain WHOIS data is consistent with the business profile, enhancing trustworthiness. Overall, PatchKit presents a professional, secure, and privacy-conscious web presence with strong business credibility. Strategic improvements include publishing explicit security and incident response policies, enabling DNSSEC, and enhancing security headers to further strengthen the security posture.

I

InGame Job — Find job in game development (game industry)

ingamejob.com

68

InGame Job operates as a specialized online job board and career platform focused on the global game development industry. It provides services such as job listings, salary information, events, courses, and industry surveys to professionals and companies within the gaming sector. The platform targets both job seekers and employers, positioning itself as a niche player in the technology sector with a medium-sized market presence. Founded in 2019, the website demonstrates consistent branding and good content quality tailored to its audience. Technically, the website leverages modern web technologies including Google Tag Manager, Bootstrap, and Laravel framework, hosted on AWS infrastructure. It employs HTTPS for secure communications and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a cookie consent mechanism, though it lacks visible privacy policy and terms of service pages in the provided content. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No direct contact information or incident response policies are published, which could be improved to enhance trust and compliance. The cookie consent banner indicates some level of GDPR awareness, but full compliance cannot be confirmed without a privacy policy. Overall, InGame Job presents a professional and focused platform with moderate technical maturity and security posture. Strategic improvements in privacy documentation, security headers, and incident response transparency would strengthen its risk profile and user trust.

I

Indie Game Fest

indiegamefest.de

42

Indie Game Fest is a niche event organizer focused on celebrating indie games in Cologne, Germany. The website serves as an information hub for event details, ticketing, and community engagement. The business targets indie game developers, gamers, and industry professionals primarily in Europe. The event is positioned as a creative and collaborative platform within the indie gaming community. Technically, the website is built on WordPress with Elementor and uses modern web technologies including Bootstrap and Google services. It demonstrates good SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent, though lacks explicit security policies or incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

P

Planning Congressi SRL

ecai2025.org

61

The website ecai2025.org represents the official platform for the 28th European Conference on Artificial Intelligence scheduled for October 2025 in Bologna, Italy. It is managed by Planning Congressi SRL and supported by prominent AI associations such as EurAI and AIxIA. The site provides comprehensive event information, including key dates, program details, calls for papers, and sponsorship opportunities, targeting researchers and professionals in the AI field. The business model centers on event organization and academic conference hosting, positioning itself as a leading European AI event.

P

Plastic-51

plastic-51.com

47

Plastic-51 is a small local business based in Murmansk, Russia, specializing in the production of plastic cards, printing, and design services. The company has been operating for over 5 years and offers a broad range of products including plastic cards with barcodes and magnetic stripes, business cards, banners, calendars, and website development through a partner entity. The website is built on OctoberCMS and uses common web technologies such as jQuery and Bootstrap, with Yandex Metrika for analytics. The site is well-structured, mobile-optimized, and provides multiple contact channels including phone, email, and contact forms. However, it lacks explicit privacy and cookie policies, which impacts its compliance posture.

The University of New Brunswick (UNB) is a well-established Canadian educational institution with a rich history dating back to 1785. The website serves as a comprehensive portal for prospective and current students, faculty, staff, alumni, and partners, offering detailed information on academic programs, admissions, student life, research, and athletics. UNB positions itself as a leading university on Canada's East Coast with a broad range of study options and strong community engagement. The site reflects a mature business model focused on education, research, and community partnerships.

The Shipowners' Club website presents a professional maritime insurance business offering cover and insurance services to vessel owners, operators, and charterers worldwide. The site is well-structured with clear descriptions of its core business focus in the transportation sector. The technical infrastructure leverages Concrete CMS, Bootstrap, jQuery, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and lack of visible privacy policy or terms of service pages highlight areas for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trustworthiness. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

M

Michal Danko

michaldanko.com

45

Michal Danko operates as a freelance full stack web developer based in Košice, Slovakia, with over 10 years of experience. The website serves as a professional portfolio showcasing his skills in web development technologies including WordPress, WooCommerce, Laravel, and front-end frameworks. The business model is focused on freelance client engagements, targeting clients seeking custom web development and design services. The website is well-structured and presents a clear overview of services and past projects, positioning Michal as an experienced independent developer in the Slovak market. Technically, the website uses a modern tech stack with HTML5, CSS3, Bootstrap, JavaScript, PHP frameworks, and CMS platforms like WordPress and October CMS. Hosting is provided by Websupport, a Slovak hosting provider, with domain registration consistent with the business location. Google Analytics is used for visitor tracking, and Google Fonts are loaded for typography. The site is mobile optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected, which could improve security posture. There are no privacy or cookie policies present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response information is provided. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low to moderate. The site is professional and trustworthy but lacks formal privacy and cookie policies and some security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing vulnerability disclosure information to improve compliance and security maturity.

T

THQ Nordic GmbH

thqn.net

61

THQ Nordic GmbH is a well-established global video game publisher and developer founded in 2011, operating primarily in the media industry with a focus on gaming. The company maintains a professional and content-rich website that targets gamers and video game consumers worldwide. Their business model revolves around publishing and developing video games, supported by a strong digital presence and partnerships with development studios such as Purple Lamp Studios. The website reflects a consistent brand image and provides clear legal and privacy documentation, supporting trustworthiness and compliance with GDPR regulations. Technically, the website is built on a modern Drupal CMS platform with Bootstrap and jQuery frameworks, integrating Google Analytics and other marketing tools. The site is mobile-optimized and offers good user experience and navigation clarity. However, some minor technical improvements could be made, such as enabling DNSSEC and implementing comprehensive HTTP security headers to enhance security posture. From a security perspective, the website uses domain status locks to protect against unauthorized domain changes and implements a cookie consent mechanism aligned with GDPR. There is no visible security policy or incident response contact information published, which could be improved. No critical vulnerabilities or malicious content were detected, and the domain registration details align well with the company's history, supporting legitimacy. Overall, the website demonstrates a solid digital maturity level with good content quality, privacy compliance, and business credibility. Strategic improvements in security policies and technical security controls would further strengthen the company's security posture and trust with users.

T

THQ Nordic GmbH

thqnordic.com

62

THQ Nordic GmbH is a well-established global video game publisher and developer founded in 2011, operating under the parent company Embracer Group. The company targets gamers worldwide, offering a portfolio of video games and related digital content. Their website reflects a professional and consistent brand presence with clear navigation and relevant content focused on their gaming products and services. The business model centers on publishing and developing video games, supported by digital and physical distribution channels. Technically, the website is built on Drupal CMS with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to enhance security posture. From a security perspective, the site uses HTTPS and has a cookie consent mechanism compliant with GDPR, but lacks a published security policy or incident response contact details. No critical vulnerabilities or suspicious content were detected. WHOIS data is transparent and consistent with the company’s profile, supporting the legitimacy of the domain and business. Overall, the website demonstrates a solid digital presence with room for security enhancements.

N

Nadácia KSK

nadaciaksk.sk

43

Nadácia KSK is a Slovak non-profit foundation dedicated to supporting children and families in the Košice region, focusing on vulnerable groups such as low-income and single-parent families. Their services include educational support, sports funding, arts and cultural activities, and leisure programs like camps. The website is professionally designed using WordPress with modern technologies including Bootstrap and Google reCAPTCHA for form security. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. However, no explicit security policy or incident response contact information is provided. The site is accessible without WAF or security challenges, uses HTTPS, and shows consistent WHOIS data matching the organization's identity, indicating legitimacy and trustworthiness.

T

Torstar Corporation

torstar.com

45

Torstar Corporation is a well-established Canadian holding company primarily invested in news and media, including the Toronto Star and other city and community news organizations. The website reflects a professional corporate presence with clear business descriptions and a focus on media services. The company targets a general audience interested in news and media content. Technically, the website is built on Joomla CMS with the Helix3 framework, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome. It is mobile-optimized and includes Google Analytics for user tracking. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Privacy compliance is partially met with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with a domain age consistent with the company's history.

Active, s.r.o. is a small Slovakian company established in 2004, operating under the domain active.sk. The website provides minimal content primarily focused on contact information and company registration details, with no explicit description of business activities or services. The digital presence is basic, relying on jQuery and Bootstrap for frontend functionality, with no detected CMS or advanced platform usage. The site lacks privacy, cookie, and terms of service policies, which limits its compliance posture. Security features such as HTTPS status and security headers are not explicitly confirmed, indicating potential areas for improvement. Overall, the website is functional but minimalistic, with moderate trustworthiness based on consistent WHOIS data and clear contact details.

W

weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice

weimar-gmbh.com

55

The weimar GmbH is the official marketing and tourism service company for the city of Weimar, Germany. It operates key city assets such as the congress centrum weimarhalle and the Tourist Information Weimar. The company focuses on tourism promotion, city marketing, and event management, targeting tourists, local businesses, and residents interested in cultural and economic activities. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries including jQuery, Bootstrap, and accessibility tools like eyeAble. The site is mobile-optimized and includes SEO best practices. Performance is moderate, with asynchronous loading of scripts and responsive images enhancing user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, no explicit security policies or incident response information are published, and no security headers were detected in the HTML. The absence of WHOIS registration data for the domain is a notable concern, impacting the overall trustworthiness assessment. Overall, the website is safe, professional, and compliant with privacy regulations but would benefit from enhanced transparency regarding domain registration and security policies to improve trust and security posture.

P

Platon Technologies, s.r.o.

platon.sk

57

Platon Technologies, s.r.o. is a Slovak IT services company specializing in domain registration, hosting, server management, SSL certificates, mass mailing, and CDN cloud services. With over 15 years of experience, they operate their own infrastructure and data center, targeting businesses and individuals primarily in Slovakia. The website is professionally designed, mobile-optimized, and provides comprehensive product and support information including customer testimonials and clear contact channels. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Google reCAPTCHA for security. Security posture is good with HTTPS enforced and bot protection, though additional security headers could enhance protection. Privacy compliance is evident with a cookie consent mechanism and privacy policy, supporting GDPR adherence. Overall, the site is trustworthy, well-maintained, and reflects a credible business presence.

T

TTRacing Australia

ttracing.com.au

66

TTRacing Australia operates an e-commerce platform specializing in gaming chairs, ergonomic office chairs, and smart standing desks, targeting gamers and professionals seeking ergonomic comfort. The company leverages licensed entertainment brands such as Marvel and Star Wars to enhance product appeal. Technically, the website is built on Shopify, utilizing modern JavaScript libraries and third-party marketing and analytics tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and secure checkout, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site presents a professional and trustworthy e-commerce presence with room for enhanced compliance and security.

S

Sightline Media Group

sightlinemediagroup.com

57

Sightline Media Group is a specialized media organization focused on military, defense, and federal technology news, operating multiple well-known brands. The company offers a broad portfolio of multimedia products and advertising solutions targeting defense and public sector audiences. The website is built on WordPress with modern plugins and hosted on WP Engine, reflecting a moderate level of technical maturity. The site is professionally designed with good content quality and consistent branding. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are publicly listed, relying on contact forms. Overall, the website is trustworthy and functional but could improve privacy compliance and security practices.

B

Barcelona Activa

barcelonactiva.cat

68

Barcelona Activa is the official local economic development agency of Barcelona, providing services to citizens, entrepreneurs, and businesses to promote employment, entrepreneurship, business growth, and training. The website is professionally designed, multilingual, and integrates well with the Barcelona city government branding. Technically, it uses a modern CMS (Liferay) and includes various JavaScript libraries and analytics tools with proper consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. WHOIS data is not publicly available due to the .cat domain registry policies, but the website content and branding strongly indicate legitimacy. Overall, the site is trustworthy, well-maintained, and serves as a comprehensive resource for economic development in Barcelona.

W

weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice

weimar.de

52

The website www.weimar.de serves as the official digital portal for the city of Weimar, Germany, managed by weimar GmbH Gesellschaft für Wirtschaftsförderung, Kongress- und Tourismusservice. It provides extensive information on cultural events, tourism, city administration, and economic activities, targeting residents, tourists, and local businesses. The site is well-positioned as a trusted source for city-related services and cultural promotion, leveraging a public service business model focused on tourism and community engagement. Technically, the site is built on TYPO3 CMS with a modern frontend stack including jQuery and Bootstrap, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks some advanced security headers and explicit incident response policies. Overall, the site demonstrates a high level of professionalism, compliance with GDPR, and effective use of analytics while maintaining user privacy. Strategic improvements could focus on enhancing security headers, publishing security policies, and providing clearer direct contact information to further strengthen trust and compliance.

H

Hochschule für Musik FRANZ LISZT Weimar

hfm-weimar.de

56

The Hochschule für Musik FRANZ LISZT Weimar is a specialized higher education institution focused on music education, research, and cultural events. It serves students, faculty, researchers, and the broader community interested in music and related disciplines. The institution offers a variety of academic programs, research projects, and cultural activities, positioning itself as a reputable music university in Germany with a tradition dating back to 1872. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and Matomo for analytics. The site demonstrates good mobile optimization and a structured navigation system, providing a positive user experience. Hosting appears to be managed by university-related infrastructure, ensuring alignment with the institution's academic nature. From a security perspective, the website employs HTTPS and asynchronous script loading, contributing to a secure and performant environment. However, explicit security headers are not detected, and no visible privacy or cookie policies are present in the analyzed content, indicating areas for improvement in compliance and security best practices. Overall, the website is trustworthy and professional, with a strong business credibility score. The absence of explicit privacy and cookie policies and contact information slightly lowers the privacy compliance and content quality scores. There are no indications of adult or unsafe content, and no WAF or blocking mechanisms interfere with content accessibility.

D

Delta Reisen s.r.o.

deltareisen.cz

58

Delta Reisen s.r.o. is a Czech travel agency specializing in offering vacations through German and Austrian travel agencies, providing a wide range of travel packages with over one million available dates. The company targets Czech customers seeking high-quality travel experiences with trusted German and Austrian partners. Their business model focuses on travel package brokerage, online booking, and customer support with a medium-sized market presence since 2016. The website reflects a professional and consistent brand image with good content quality and customer trust signals such as reviews and certifications. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Matomo analytics, integrated with a specialized travel system (CeSYS). The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are not explicitly detected. No WHOIS data is available, which impacts transparency and trust. Security-wise, the site shows good practices such as reCAPTCHA on forms and no exposed sensitive data, but lacks a public security policy or incident response information. Privacy compliance is good with GDPR-aligned cookie consent and privacy notices. Overall, the risk is moderate with recommendations to improve WHOIS transparency, security headers, and incident response disclosures. Strategically, Delta Reisen should focus on enhancing security transparency, maintaining up-to-date technology, and expanding trust signals to strengthen market position and customer confidence.

B

Blue Sky Travel

blueskytravel.hu

47

Blue Sky Travel is a Hungarian travel agency established in 2018, specializing in air and bus travel packages primarily to Greek islands and various exotic destinations. The company offers competitive pricing, last-minute deals, and comprehensive travel organization services targeting Hungarian-speaking travelers. Their website features a professional design with clear navigation, mobile optimization, and integrated booking forms, reflecting a medium-sized business with a solid market presence. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and popular analytics and marketing tools such as Google Tag Manager, Hotjar, Microsoft Clarity, and Tawk.to live chat. Hosting is provided via a CDN, ensuring moderate performance and good mobile responsiveness. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site enforces HTTPS and employs consent-based loading of tracking scripts, demonstrating a privacy-aware approach. However, it lacks several important security headers and does not publish a security policy or incident response contacts. No critical vulnerabilities or suspicious activities were detected, and WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a trustworthy and professional travel service with room for improvement in privacy policy transparency and security hardening. The risk level is moderate with no immediate threats identified.

P

Personal Tours

personaltours.hu

57

Personal Tours is a well-established Hungarian travel agency specializing in personalized travel packages primarily to Greek islands and exotic destinations. With nearly three decades of experience, the company offers a variety of services including flight-inclusive trips, individual accommodation bookings, cruises, and city tours. The website reflects a professional and user-friendly design, targeting Hungarian-speaking travelers seeking affordable and customized holiday options. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement, reCAPTCHA for forms, and a comprehensive cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response contacts are not present on the site, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and provides a solid digital presence for the business.

G

Green Savoree St. Petersburg, LLC

gpstpete.com

44

The Firestone Grand Prix of St. Petersburg website represents a well-established motorsports event organizer with a history dating back to 2001. The company, Green Savoree St. Petersburg, LLC, operates a premier motorsports festival in St. Petersburg, Florida, offering ticket sales, hospitality packages, and merchandise. The website effectively targets motorsports fans, tourists, and local attendees with clear event information and partner engagement. Technically, the site is built on Joomla CMS with modern frameworks like Helix3 and Bootstrap, ensuring responsive design and moderate performance. The use of analytics and marketing tools such as Google Analytics, Hotjar, and Constant Contact indicates a mature digital marketing approach, though lacking explicit cookie consent mechanisms. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and business credible, with room for privacy compliance enhancements.

S

Sirius Facilities GmbH

siriusfacilities.com

53

Sirius Facilities GmbH is a prominent German commercial real estate company specializing in flexible leasing of office spaces, storage, production halls, conference centers, and virtual office services. With over 70 locations and a large portfolio, they cater primarily to small and medium-sized enterprises as well as larger firms. Their website demonstrates a mature digital presence with a professional design, comprehensive service offerings, and multiple contact channels. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes privacy compliance tools such as Usercentrics CMP and analytics via Google Analytics and Matomo. Security posture is strong with HTTPS and secure forms, though some HTTP security headers could be improved. The WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and transparent contact information.

N

NIBE

nibe.ua

58

NIBE.ua is a website representing NIBE, a leading enterprise in the energy sector specializing in heat pumps and smart home heating and cooling solutions. The company claims a strong market position in Ukraine and internationally, supported by a large workforce and significant annual sales. The website offers detailed product information, dealer contacts, and service options, targeting residential and commercial customers in Ukraine. Technically, the site uses modern frameworks like Bootstrap and integrates analytics tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF protection but lacks comprehensive security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

B

BigRock

bigrock.com

68

BigRock is a well-established web presence solutions provider focusing on domain registration, web hosting, and related services primarily targeting small businesses, professionals, and individuals. The website indicates a transition away from the .com domain for new orders, directing new customers to the .in domain, which suggests a strategic regional focus. The company is part of Newfold Digital, a known parent company in the web services industry. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Analytics, with a moderate performance and good mobile optimization. Security practices include HTTPS usage and cookie consent mechanisms, though explicit security headers are not evident in the provided content. The WHOIS data for the domain www.bigrock.com is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is professional and trustworthy from a user perspective but would benefit from improved security header implementation and clearer domain registration information.

V

Visit Heim

visitheim.no

57

Visit Heim is a regional tourism website dedicated to promoting the Heim municipality in Trøndelag, Norway. It offers information on local attractions, accommodations, dining, events, and outdoor activities, targeting tourists and visitors interested in nature and cultural experiences. The website is built on a modern technical stack including Bootstrap, jQuery, and Google Maps API, and is powered by the WisWeb CMS platform. While the site presents good content quality and user experience, it lacks comprehensive privacy and security policies, including cookie consent and security headers. The domain registration is consistent with the business purpose and shows no suspicious indicators, supporting the site's legitimacy. Overall, the website serves as a useful tourism portal but would benefit from enhanced security and privacy compliance measures.

M

Montana Tours

montanatours.hu

54

Montana Tours is a well-established Hungarian travel agency based in Szeged, operating since 1998 with a domain registered since 2001. The company offers a broad range of travel services including family holidays, ski trips, cruises, and exotic travel packages. The website is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Bootstrap, and Google reCAPTCHA for security. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy in Hungarian. However, the site lacks explicit terms of service and security policy pages. Security posture is good with HTTPS and bot protection but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, user-friendly, and compliant with GDPR requirements, serving a general audience interested in travel and tourism.

R

Rhoss

rhoss.it

56

Rhoss S.p.a. is a well-established Italian company specializing in air conditioning and air handling solutions, serving both public and private sectors since 1968. As part of the NIBE Group, Rhoss offers a broad portfolio of HVAC products including chillers, heat pumps, fan coils, and air handling units, targeting large buildings and residential markets. The website reflects a mature digital presence with multilingual support and comprehensive product and reference information. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and related regulations.

C

Carl von Ossietzky Universität Oldenburg

icbm.de

61

The ICBM is an interdisciplinary marine sciences institute under the Carl von Ossietzky Universität Oldenburg, Germany. It operates research and teaching activities in marine chemistry and biology with multiple working groups and research platforms. The website is professionally designed using TYPO3 CMS, with good technical infrastructure and modern web technologies. Security posture is strong with HTTPS and privacy-conscious analytics (Matomo with disabled cookies). Contact information and social media presence enhance trust. No critical vulnerabilities or compliance gaps were detected, though explicit security policies could be improved. Overall, the site reflects a reputable academic institution with a clear focus on marine research and education.

C

CommerceGurus

commercegurus.com

64

CommerceGurus is a specialized eCommerce company focused on providing WooCommerce themes, plugins, and expert tutorials to help users build and grow online stores. Their flagship product, Shoptimizer, emphasizes speed and conversion optimization, supported by a suite of tools like CommerceKit and Popups. The company maintains a strong online presence with active social media channels and a well-structured website offering comprehensive content and customer testimonials. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Facebook Pixel, and PostHog. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit cookie consent mechanisms suggests room for improvement. The WHOIS data is missing, which raises questions about domain registration legitimacy, but the professional content and business operations indicate a legitimate entity. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

S

S.J. & G. Fazul Ellahie (Pvt) Limited

sjggroup.com

56

S.J. & G. Fazul Ellahie (Pvt) Limited, operating as SJG Group, is a well-established pharmaceutical manufacturer and distributor based in Pakistan with a legacy dating back to 1889. The company positions itself as a pioneer in the pharmaceutical industry, offering innovative healthcare solutions and maintaining a strong commitment to quality and sustainability. Their market presence extends internationally, supported by a robust logistics and supply chain infrastructure. The website reflects a professional digital presence built on WordPress with modern design elements and clear branding. Technically, the website leverages popular CMS and page builder technologies such as WordPress and Elementor, alongside Slider Revolution for dynamic content. The site is hosted with Cloudflare DNS services and uses HTTPS, ensuring secure communications. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices appear solid with proper meta tags and structured content. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks published privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms, which are important for compliance and trust. Security headers could be enhanced to improve protection against common web threats. No WAF or blocking mechanisms interfere with content access. Overall, the website is credible and professional but would benefit from improved privacy compliance and security transparency to align with best practices and regulatory requirements.

S

Sociedade de Pediatria de São Paulo - SPSP

spsp.org.br

56

Sociedade de Pediatria de São Paulo (SPSP) is a well-established non-profit professional association serving pediatricians and healthcare professionals in São Paulo, Brazil. It operates as the pediatric department of the Associação Paulista de Medicina (APM) and is affiliated with the Sociedade Brasileira de Pediatria (SBP). The website provides educational resources, event information, publications, and membership services, targeting medical professionals and members of the pediatric community. The organization maintains a credible market position as a regional leader in pediatric healthcare education and advocacy. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, supported by Cloudflare for DNS and CDN services. The site is mobile-optimized, SEO-friendly, and integrates multiple Google tracking and analytics tools. Performance is moderate, with good design quality and user experience. Privacy and cookie policies are present, though GDPR compliance is basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit advanced security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or malicious content were detected. The presence of multiple tracking scripts suggests moderate user tracking, which could be improved for privacy compliance. Overall, SPSP's website is professional, trustworthy, and serves its audience well, with room for improvement in security policies and privacy transparency to enhance user trust and compliance.

R

Russell Certified Home Inspections

rchi.ca

58

Russell Certified Home Inspections is a small, professional home inspection service provider based in Kemptville, Ontario, Canada. The company offers a comprehensive range of inspection services including pre-purchase, new home warranty, WETT, BGRS, maintenance inspections, thermal imaging, and drone services. Led by Lucas Russell, an InterNACHI certified master inspector with over 10 years of experience, the business positions itself as a market leader in the local real estate inspection sector. The website reflects a professional image with detailed service descriptions and strong customer testimonials, supporting its credibility and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, Owl Carousel, and Google Maps integration. SEO is enhanced by the Yoast SEO plugin and structured data markup. The site is mobile optimized and provides a good user experience. However, some technical improvements are recommended such as enabling DNSSEC and implementing security headers to strengthen security posture. Security-wise, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers. There is no visible privacy policy or cookie consent mechanism, which is a compliance gap especially under GDPR. Incident response and vulnerability disclosure information are absent, indicating room for improvement in security transparency and readiness. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and establishing a vulnerability disclosure policy.

C

Centro de Administraciones Tributarias Subnacionales (CeATS)

ceats.org

44

Centro de Administraciones Tributarias Subnacionales (CeATS) is a well-established non-profit organization based in Argentina, focused on subnational tax administration collaboration, training, and research. The website reflects a professional presence with clear navigation, relevant content, and active engagement through events and educational programs. The organization partners with universities and government tax agencies, reinforcing its credibility and market position in the government and education sectors. Technically, the website uses a modern but standard technology stack including Bootstrap, jQuery, and various carousel and slider libraries. Hosting is stable with a reputable registrar, and the site is mobile optimized with moderate performance. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.