Security Directory

P

Preciosa Ornela

preciosa-ornela.com

54

Preciosa Ornela is a Czech-based manufacturer specializing in traditional Czech beads and glass products, targeting crafters, jewelry designers, and manufacturers. The website showcases a broad product range including seed beads, pressed beads, and glass rods, supported by tutorials, product news, and event information. The company appears to have a solid market position within the decorative glass manufacturing sector. Technically, the website uses modern JavaScript libraries, Google Tag Manager for analytics and consent management, and integrates YouTube content. The site is mobile-optimized with good navigation and professional design. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and detailed privacy policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

A

ArgeData GmbH

argedata.at

65

ArgeData GmbH operates a professional online business and project management software platform primarily targeting small to medium-sized enterprises in Austria. Their product offers scalable, intuitive, and platform-independent solutions for personnel management, project management, controlling, and other business processes. The company emphasizes ease of use, real-time data access, and GDPR-compliant data handling. The website is well-structured, professionally designed, and provides comprehensive information about services, team members, and contact options. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and mobile optimization. Security practices include HTTPS enforcement, cookie consent management, and data pseudonymization, though explicit security headers and incident response policies are not publicly detailed. The absence of WHOIS data limits domain trust assessment, but the overall digital presence and compliance posture suggest a legitimate and professional business. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

C

CZECH NEWS CENTER a.s.

sportovniprogram.cz

51

SportovniProgram.cz is a Czech sports event information portal providing comprehensive schedules, previews, results, and live broadcast information for various sports. Operated by the reputable media company CZECH NEWS CENTER a.s., the website targets sports fans in the Czech Republic with a focus on delivering timely and relevant sports content. The business model centers on media content delivery supported by advertising and affiliate partnerships. The site is relatively new, launched in 2023, and benefits from the backing of a large media group, enhancing its market credibility and reach. Technically, the website employs a modern technology stack including ASP.NET WebForms, jQuery, Google Tag Manager, Google Analytics 4, and a consent management platform (Didomi) to ensure GDPR compliance. The site is hosted via Webglobe and uses multiple third-party scripts for advertising and analytics. Performance is moderate with good mobile optimization and SEO practices. Accessibility is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration and implements consent mechanisms for privacy compliance. While some security headers could be improved, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business profile, showing a recent domain registration without privacy protection, which aligns with the transparent nature of the business. Overall, SportovniProgram.cz presents a professional, trustworthy, and well-maintained online presence with good content quality and compliance posture. Strategic recommendations include enhancing security headers, updating legacy libraries, and improving accessibility to further strengthen the site’s security and user experience.

D

Dowty

dowty.com

66

Dowty, a GE Aerospace company, is a globally recognized provider of integrated composite propeller systems and related services for commercial and defense aerospace sectors. The company offers high-quality, reliable propeller solutions and tailored maintenance services, supporting large regional turboprops, military transporters, and hovercraft. The website reflects a professional and consistent brand image aligned with its parent company, GE Aerospace, targeting aerospace manufacturers and operators. Technically, the website is built on Drupal 11, leveraging modern web technologies including Google Tag Manager for analytics and Evidon for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and dedicated security policies are absent. The WHOIS data is unavailable or withheld, which is unusual but the website's professional presentation and association with GE Aerospace mitigate concerns about legitimacy. No direct contact emails or phone numbers are publicly listed, with contact primarily via web forms. Privacy and terms policies are comprehensive and linked to the parent company domain, indicating good privacy compliance. Overall, the website demonstrates a mature digital presence with strong business credibility and good security hygiene, though improvements in explicit security policies and incident response disclosures are recommended to enhance trust and compliance.

B

Bon Group Oy

bongroup.fi

43

Bon Group Oy is a Finnish hospitality group operating in growth centers and popular tourist destinations, focusing on beverage, entertainment, and food restaurant services. The company is growing and committed to sustainable development of its venues and operations. Their market position is that of a passionate and expanding hospitality operator aiming to become a leading experience hospitality company in Finland. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Tag Manager, Analytics, and reCAPTCHA for security and analytics. Cookie consent mechanisms are implemented with granular user controls, reflecting good privacy compliance. Security posture is strong with HTTPS and reCAPTCHA, though some security headers and explicit security policies are missing. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

Airex AG operates a professionally designed website focused on the manufacture and sale of high-quality Swiss-made training and therapy mats. The company holds a strong market position as a world leader in its niche, with a history dating back to 1952 and a broad international presence. The website supports this with clear product categorization, educational resources, and community engagement. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, and Google Analytics, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

G

GE Aerospace

geaerospace.com

71

GE Aerospace is a leading global provider of jet and turboprop engines and integrated aircraft systems serving commercial, military, business, and general aviation sectors. The company offers a broad portfolio of propulsion products and services, including engine maintenance and customer support, positioning itself as a key player in the aerospace industry. The website reflects a mature enterprise with comprehensive content targeting industry professionals, investors, and potential employees. Technically, the website is built on Drupal 10 and incorporates modern web technologies such as Google Tag Manager and Evidon for cookie consent, ensuring a responsive and accessible user experience. The site demonstrates good SEO practices, mobile optimization, and accessibility features, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS, employs security headers, and integrates consent mechanisms for privacy compliance. However, it lacks a public vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS domain registration data raises questions about domain legitimacy that warrant further verification. Strategic improvements in security disclosure and incident response communication would strengthen the security posture and stakeholder confidence.

C

CrossFit Kemijärvi

itakairanpatsi.fi

45

Itäkairan Pätsi is a specialized CrossFit pairs competition event held in Kemijärvi, Finland, organized by CrossFit Kemijärvi. The website provides detailed information about the event, including competition categories, schedules, ticketing, and volunteer opportunities. It targets CrossFit athletes and fitness enthusiasts primarily in Finland. The site uses WordPress with Elementor and integrates external ticketing and registration platforms. Security posture is adequate with HTTPS but lacks some security headers and privacy compliance elements. The site is professional and trustworthy with clear business focus but should improve privacy and cookie policies to enhance compliance and user trust.

I

Institut National Du Cancer

e-cancer.fr

58

The website www.cancer.fr is the official portal of the Institut National Du Cancer, a French national institute dedicated to providing authoritative information on cancer. It serves patients, caregivers, health professionals, and the general public with comprehensive resources on cancer types, prevention, screening, treatments, and support services. The site is well-branded with official government insignia and uses the .fr domain, reinforcing its legitimacy and trustworthiness. Technically, the site is built on the Ibexa Platform CMS and incorporates modern web technologies including responsive design, Google Fonts, and YouTube integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers could be improved. Privacy compliance is partially addressed with a cookie consent mechanism, but a clear privacy policy URL was not found in the provided content. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries in the visible content. However, the absence of WHOIS data from the AFNIC database is unusual and reduces the domain trust score. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a high-quality, authoritative resource with excellent content and user experience. The main risk is the missing WHOIS data which could be due to database issues or privacy protection. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and providing clear contact information for incident response and data protection inquiries.

A

Aicado

aicado.ai

66

Aicado.ai is a technology startup founded in 2023, offering a no-code AI implementation platform that enables businesses and non-technical users to embed customizable AI models into their websites. The platform supports a wide range of AI functionalities including image generation, editing, speech transcription, chatbots, and more, positioning itself as an accessible AI integration hub. Technically, the website is built on the Bubble.io platform, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager and Microsoft Clarity. The site is hosted on a CDN with HTTPS enabled, ensuring secure access. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of security headers, indicates room for improvement in compliance and security posture. No direct contact information or incident response channels are publicly available, which may impact user trust. Overall, the website presents a professional and functional interface with moderate security and privacy compliance, suitable for its startup stage.

S

Sherpas, s.r.o. (projekt WebTop100)

webtop100.cz

65

WebTop100 is a well-established digital marketing competition platform primarily serving the Czech and Slovak markets. Operated by Sherpas, s.r.o., it offers a comprehensive ecosystem for digital marketing professionals including competitions, conferences, and strategic consultations. The platform targets marketing managers and specialists responsible for corporate digital presentations, positioning itself as a leading authority in the digital marketing space in the region. The website features detailed category descriptions, expert judges, and strong media partnerships, enhancing its market credibility. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and YouTube APIs, ensuring robust tracking and user engagement capabilities. The site is mobile-optimized with good accessibility and SEO practices, providing a positive user experience. However, some security headers are not explicitly detected, and there is no visible privacy policy or terms of service, which are areas for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are implemented, indicating attention to privacy compliance, though explicit privacy and terms documents are missing. The absence of WHOIS data reduces transparency and trust assessment, but the professional presentation and structured data suggest legitimacy. Overall, WebTop100 presents a professional, content-rich, and user-friendly platform with strong business credibility. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and clarifying domain registration details to improve trust and compliance.

B

Bageterie Boulevard

bbbox.cz

60

BBBOX is an online food delivery and catering service affiliated with the Bageterie Boulevard brand, targeting corporate clients and individuals in the Czech Republic. The website offers snack boxes and catering solutions for meetings and events, positioning itself as a convenient and quality-focused service. The business is operated by Lithio spol. s r.o., a company credited in the website metadata and footer. The site is well-branded and professionally designed, with clear navigation and multilingual support.

E

Elsevier

scival.com

63

SciVal, a product of Elsevier, is a sophisticated research analytics platform designed to visualize research performance, benchmark against peers, and facilitate collaborative partnerships. The platform targets academic institutions, researchers, and policy makers, offering comprehensive insights into research trends. The website demonstrates a mature technical infrastructure leveraging Adobe Analytics, Pendo, and OneTrust for analytics and consent management, hosted on AWS infrastructure. The site is well-branded and professionally designed, with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and security headers are not evident in the provided data. Privacy compliance is moderate, with a cookie policy and consent mechanism present but no explicit privacy policy found on the landing page. Overall, the website reflects a credible enterprise-level service with room for improvement in transparency and security hardening.

T

Teatro La Fenice

teatrolafenice.it

59

Teatro La Fenice di Venezia is a renowned cultural institution offering theatrical performances and cultural events. The website serves as an official portal providing information and ticketing services to a general audience interested in the arts and theatre. The business model focuses on cultural hospitality and event management within Italy. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and third-party integrations such as YouTube and Cookiebot for enhanced user experience and compliance. The site demonstrates good SEO practices and mobile optimization, although accessibility could be improved. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

A

American College of Foot and Ankle Surgeons

acfas.org

62

The American College of Foot and Ankle Surgeons (ACFAS) operates as a professional society dedicated to foot and ankle surgeons, providing education, advocacy, research, and membership services. Established in 1942, it serves a large membership base of over 7,800 professionals, positioning itself as a leading authority in its niche healthcare sector. The website reflects this professional stature with comprehensive resources, educational content, and active social media engagement. Technically, the site is built on the Kentico CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Swiftype for search functionality. The site is mobile optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response contacts are absent. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. The WHOIS data is privacy protected, which is typical for professional organizations, and does not raise legitimacy concerns given the website's professional content and branding. Overall, the site is trustworthy, professionally maintained, and serves its target audience effectively. Strategic improvements could focus on enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.

Young Survival Coalition is a well-established nonprofit organization dedicated to supporting young adults diagnosed with breast cancer. Their website campaign page is professionally designed and hosted on the Classy fundraising platform, integrating modern web technologies such as AngularJS, Stripe for payments, and analytics tools like Google Analytics and New Relic. The site demonstrates a strong digital maturity with good performance and mobile optimization. Security posture is robust with HTTPS enforced and multiple security headers present, although explicit security policy and incident response information are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant, supporting trust and compliance. Overall, the website reflects a credible and trustworthy nonprofit entity with a clear mission and effective fundraising capabilities.

T

THE POWER OF EVENTS (UK) – Showcase, Respect & Value the UK Events Industry

thepowerofevents.org

46

The Power of Events (UK) is a not-for-profit platform dedicated to showcasing and supporting the UK events industry. It provides an overview of the industry, event analysis, data evaluation, and community support services. The platform targets event professionals, new entrants, clients, investors, government entities, and media. The website demonstrates a moderate level of digital maturity, utilizing React, JavaScript, and integrating YouTube and Google Analytics for content delivery and user tracking. While the site is professionally designed with clear navigation and mobile optimization, it lacks explicit privacy and cookie policies, as well as detailed contact information, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal incident response policies. Overall, the platform appears legitimate and trustworthy, though WHOIS data is unavailable due to query failure, likely indicating privacy protection.

A

Agencja Reklamowa ROXart - kompleksowa obsługa firm.

roxart.pl

62

Agencja Reklamowa ROXart is a modern, Poland-based advertising agency specializing in comprehensive marketing services including Google ADS, social media campaigns, website creation, and graphic design. The company positions itself as a full-service agency with an international reach, targeting businesses seeking to enhance their brand presence and digital marketing effectiveness. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with modern plugins and integrations such as Cookiebot for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy and well-structured, supporting the agency's business credibility.

G

Grupa Maspex sp. z o.o sp. K

wloclawki.pl

54

The website wloclawki.pl presents a cultural and urban design project called Włocławka ‘19, supported by Grupa Maspex sp. z o.o sp. K, a known Polish company. The project targets residents of the Kujawy region and visitors to Włocławek, showcasing new urban furniture premiered at the Łódź Design Festival. The site is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses modern tracking and marketing technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel, but lacks explicit CMS or hosting details. Security posture is adequate with HTTPS and secure form handling, though security headers and incident response information are missing. Privacy compliance is supported by a comprehensive privacy policy linked to the parent company’s domain and a cookie consent banner. Overall, the site is trustworthy and legitimate with no signs of blocking or suspicious activity.

V

Вода Велинград

velingradvoda.bg

53

The website velingradvoda.bg represents a small Bulgarian business specializing in the production and sale of natural mineral water sourced from the Velinrad region. The site emphasizes the purity, alkalinity, and deep origin of the water, targeting health-conscious consumers and general mineral water buyers. The company maintains a local/regional market position with a clear focus on product quality and natural origin. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for GDPR-compliant cookie consent, and YouTube embedded videos for rich media content. Hosting is provided by a Bulgarian hosting provider, ensuring regional relevance and performance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through Cookiebot integration, though explicit privacy and security policies on the domain are limited. Overall, the website is professional, trustworthy, and well-optimized for its purpose.

T

Targi Kielce S.A.

targikielce.pl

58

Targi Kielce S.A. is a prominent event organizer and venue provider based in Kielce, Poland, recognized as the second largest in Central and Eastern Europe for trade fairs, exhibitions, conferences, and congresses. The company offers a broad range of services including event organization, venue rental, exhibitor support, advertising, catering, transport, and hotel reservations, targeting exhibitors, visitors, and event organizers. Their market position is strong with a large-scale operation and a well-established brand presence. The website reflects a professional and comprehensive digital presence with excellent content quality, clear navigation, and consistent branding.

A

Alfa-Print Sp. z o.o.

opakowanie.pl

57

Opakowanie.pl is a specialized media portal operated by Alfa-Print Sp. z o.o., focusing on the packaging industry. It offers news, videos, and industry insights targeting packaging manufacturers, suppliers, and professionals primarily in Poland and Europe. The website is well-established with a consistent brand presence and a medium-sized business profile. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap and Yoast SEO, providing a good user experience and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers could be improved. The site is compliant with basic privacy and cookie policies but lacks explicit security and incident response policies. Overall, the website is professional, trustworthy, and serves as a valuable information resource for its niche audience.

G

Group One

groupone.pl

56

Group One is a leading independent marketing communications group in Poland, founded in 2013 and supported by the global Serviceplan Group. The company offers a comprehensive suite of services including creative production, media planning and buying, technology sales and implementation, e-commerce development, analytics, and inclusive marketing. Their market position is strong, supported by multiple industry awards and certifications from major technology partners such as Google and Salesforce. Technically, the website is built on WordPress with modern integrations like Google Tag Manager and YouTube API, optimized for mobile and SEO. Security posture is good with HTTPS enforced and consent mechanisms for cookies, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

G

Grupa Żywiec

trzymajpion.pl

52

Trzymaj Pion is a social campaign website operated by Grupa Żywiec, a prominent beverage company in Poland. The campaign focuses on supporting parents to prevent early alcohol initiation among teenagers and to promote responsible attitudes towards alcohol consumption. The website offers educational content, podcasts, and guides targeted primarily at parents and families. It positions itself as a socially responsible initiative within the non-profit sector, leveraging corporate backing to enhance public awareness. Technically, the website is built on WordPress CMS, utilizing common libraries such as jQuery and Owl Carousel for UI components. It integrates Google Analytics and Google Tag Manager for analytics and tracking, and employs OneTrust for GDPR-compliant cookie consent management. The site demonstrates good SEO practices with comprehensive metadata, Open Graph tags, and JSON-LD structured data. Mobile optimization and navigation clarity are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit published security policies or incident response information. Security headers are partially present or inferred but could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered to Grupa Żywiec, consistent with the website's claims, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from publishing more explicit security and incident response policies and enhancing accessibility. The content is safe for general audiences, focusing on alcohol prevention education without any adult or explicit material.

B

Biogen Management Services Middle East (Branch of Biogen Management Services GmbH, Switzerland)

biogen-gulf.com

70

Biogen Gulf operates as a regional branch of Biogen Management Services GmbH, Switzerland, focusing on neuroscience therapies and patient support in the Middle East. The website presents a professional corporate image with clear branding and content targeting patients, healthcare professionals, and job seekers. The technical infrastructure leverages Adobe Experience Manager CMS and integrates Adobe and Google analytics and marketing tools, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the site is well-structured, compliant with privacy regulations, and trustworthy from a content and technical perspective.

U

UCB, Inc.

ucb-usa.com

66

UCB, Inc. is a global biopharmaceutical company focused on improving the lives of people living with severe diseases through innovative medicines and patient-centered solutions. The website presents a professional and well-structured digital presence targeting patients, healthcare professionals, and investors in the United States. The company emphasizes collaboration, innovation, and equitable access to healthcare. Technically, the site is built on Drupal CMS and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and published security policies are absent. The lack of WHOIS data for the domain is a notable anomaly, suggesting possible privacy protection or registration issues, but the overall trust signals and external domain relationships support legitimacy. Strategic recommendations include enhancing security transparency and verifying domain registration details.

ユ

ユーシービージャパン株式会社

ucbjapan.com

69

UCB Japan Co. Ltd. operates as a pharmaceutical company specializing in neurology, bone, immunology, inflammation, and rare diseases. The website serves multiple audiences including patients, healthcare professionals, and the general public by providing educational resources, corporate information, and sustainability initiatives. It is a localized subsidiary of the global UCB group, maintaining consistent branding and professional content quality. Technically, the website is built on Drupal CMS and incorporates modern web technologies such as JavaScript, YouTube iframe API, OneTrust for cookie consent, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS, implements key security headers, and uses a cookie consent mechanism compliant with GDPR. No exposed sensitive data or vulnerable libraries were found. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The WHOIS data confirms the legitimacy of the domain and its alignment with the business identity. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing transparency on data protection officer contacts.

C

Chiesi Poland Sp. z o.o.

oddychajmy.pl

51

Oddychajmy.pl is a professionally developed healthcare portal operated by Chiesi Poland Sp. z o.o., focusing on providing comprehensive information, education, and support for patients suffering from Chronic Obstructive Pulmonary Disease (POChP) and their families. The website offers a variety of resources including expert articles, video tutorials, diagnostic guidance, and risk assessment tools, positioning itself as a niche but trusted source in the Polish healthcare information market. The content is well-structured, medically oriented, and targeted specifically at patients and caregivers, enhancing its relevance and utility. From a technical perspective, the website is built on the WordPress CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site demonstrates good mobile optimization, accessibility features, and SEO practices, though hosting provider details are not explicitly identified. Performance is moderate, with no critical technical issues detected. Security-wise, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with granular user controls, reflecting a strong privacy posture. However, there is a lack of explicit security headers and no publicly available security or incident response policies, which could be areas for improvement. No vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business information, indicating legitimacy and trustworthiness. Overall, Oddychajmy.pl presents a low-risk profile with a solid foundation in content quality, privacy compliance, and business credibility. Strategic enhancements in security policy transparency and technical security headers would further strengthen its security posture and user trust.

AbbVie is a global bio-pharmaceutical company with a strong presence in Poland, focusing on research, development, and delivery of innovative therapies that improve patients' lives. The website reflects a professional and consistent brand image, targeting patients, healthcare professionals, and researchers. The technical infrastructure leverages Adobe Experience Manager CMS, Brightcove video technology, and multiple analytics and advertising platforms, indicating a mature digital presence. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Honda Motor Europe Ltd Filial Sverige operates the official Honda website for Sweden, providing comprehensive information on a wide range of Honda products including cars, motorcycles, marine engines, power products, lawn and garden equipment, industrial machinery, and snowthrowers. The site targets Swedish consumers and businesses interested in Honda's offerings, reflecting Honda's global brand presence with localized content. Technically, the website employs modern JavaScript ES6 modules, Google Tag Manager for analytics and marketing, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is built on Adobe Experience Manager CMS, supporting a professional and consistent user experience. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers in the HTML source, suggesting room for improvement in security hardening. The absence of WHOIS data for the domain www.honda.se is notable, possibly due to the domain being a subdomain or alias, which slightly impacts trust but does not detract from the site's professional presentation and branding. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, with moderate business credibility due to missing explicit contact details. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clear contact information to strengthen trust and compliance.

Honda Slovakia's official website presents a comprehensive portfolio of Honda products including automobiles, motorcycles, marine equipment, industrial machines, lawn and garden tools, and snow throwers. The site targets general consumers in Slovakia and serves as a regional portal for Honda's global brand. The business model is focused on product showcasing and customer engagement within the transportation and machinery sectors. The website demonstrates a consistent brand presence with professional design and clear navigation, supporting Honda's strong market position as a leading manufacturer and retailer.

S

Stichting Roparun

roparun.nl

67

Stichting Roparun operates a well-established non-profit charity event focused on a 500+ kilometer estafetteloop to raise funds for cancer patients. The website reflects a mature digital presence with clear messaging, strong branding, and active engagement through social media and donation calls. Technically, the site leverages modern JavaScript frameworks and integrates multiple analytics and tracking tools while maintaining good performance and mobile optimization. Security posture is solid with HTTPS enforcement and CSRF protections, though some HTTP security headers could be improved. Privacy compliance is strong with explicit policies and consent mechanisms. Overall, the site is trustworthy, professional, and aligned with its charitable mission.

S

Salland Zorgverzekeringen

salland.nl

67

Salland Zorgverzekeringen is a Dutch health insurance provider focused on delivering sustainable, accessible, and affordable healthcare coverage to residents of the Netherlands. The company positions itself as a reliable insurer with a clear focus on customer service and digital engagement. The website reflects a professional and consistent brand image, targeting Dutch-speaking customers seeking health insurance products. The business model centers on insurance services with an emphasis on digital customer interaction and marketing. Technically, the website employs modern web technologies including Bootstrap 4 for responsive design, Google Fonts for typography, and Cookiebot for GDPR-compliant cookie consent management. Hosting and delivery appear to leverage Cloudflare and AWS infrastructure, ensuring good performance and availability. The site integrates multiple third-party marketing and analytics tools such as Google Analytics, Hotjar, Facebook Pixel, and BlueConic, indicating a mature digital marketing strategy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with privacy regulations. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the provided data, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The absence of a visible security policy or incident response contact information is a gap in transparency. Overall, the website is trustworthy and professionally maintained with good privacy compliance and digital maturity. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and maintaining vigilance on third-party script security to mitigate risks.

S

Stichting kanker.nl

kanker.nl

74

Kanker.nl is a well-established Dutch non-profit foundation providing reliable cancer-related information, treatment options, and patient support services. It serves patients, caregivers, and healthcare professionals primarily in the Netherlands. The website is positioned as a leading cancer information portal with a strong focus on trustworthy content and community support. Technically, the site is built on Drupal CMS, employs modern JavaScript libraries, and integrates analytics and optimization tools such as Piwik/Matomo and Visual Website Optimizer. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities. Privacy compliance is evident through comprehensive privacy and cookie policies with GDPR adherence. Overall, the site demonstrates a mature digital presence with good user experience and professional content.

M

MG YACHTS

mgyachts.gr

47

MG Yachts is a well-established yacht charter company based in Greece, offering a broad range of services including bareboat and crewed yacht charters, yacht management, sales, and luxury villa rentals. The company has a strong market presence with over 40 years of experience and holds certifications such as ISO 9002 and government licensing. Their target audience includes sailing enthusiasts and tourists seeking premium yachting experiences in Greece. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience.

Ö

Österreichischer Agrarverlag

reisen-magazin.at

57

REISEN-Magazin is a well-established Austrian travel media publisher specializing in travel, hiking, and cultural content focused on Austria, Europe, and overseas destinations. The website offers rich editorial content, subscription services, and digital ePapers, targeting German-speaking travelers interested in outdoor and cultural experiences. The parent company is Österreichischer Agrarverlag, a recognized media publisher in Austria. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries, Google Tag Manager, and a consent management platform ensuring GDPR compliance. Security posture is strong with HTTPS, CAPTCHA on forms, and no exposed sensitive data, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for travel information.

B

Besseres Obst

besseres-obst.at

56

Besseres Obst is a specialized German-language media publication focused on fruit growing and processing, primarily serving professionals in the agricultural sector in Austria and German-speaking regions. The website offers news, technical articles, newsletters, and subscription services, positioning itself as a niche media outlet under the Österreichischer Agrarverlag umbrella. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS, jQuery, Ractive.js, Google Tag Manager, and a consent management platform to ensure GDPR compliance. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though some HTTP security headers are not explicitly detected. The site maintains a professional design with good navigation and mobile optimization, supporting a positive user experience.

T

The Shed Shop

theshedshop.co.nz

60

The Shed Shop is a New Zealand-based small business specializing in the custom design, manufacture, delivery, and installation of garden sheds made from timber and pre-painted steel. The company emphasizes fully tailored solutions to meet diverse customer needs across the North Island. Their website reflects a professional and customer-focused approach with clear contact details and testimonials, positioning them as a niche provider in the garden shed market. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, alongside Typekit fonts and Bootstrap framework, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers highlight compliance and security gaps. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and registration status, though the website content itself appears legitimate and professional. Overall, the site is accessible, well-structured, and user-friendly but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

F

Fundplat

fundplat.com

51

Fundplat.com is a Zurich-based multimedia and events platform targeting professional investors, focusing on finance, innovation, and lifestyle. The platform offers multimedia content such as interviews, clips, and videos, alongside exclusive events like Afterworks, Breakfasts, Roundtables, and Summits, bridging markets between Switzerland, Germany, Dubai, and Abu Dhabi. The business model centers on providing high-quality content and networking opportunities for finance professionals. Technically, the website is built on WordPress, hosted on SiteGround, and uses common web technologies including jQuery, YouTube and Vimeo APIs, and Google Analytics. The site is mobile-optimized with good navigation and professional design. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

C

CWB Construction

cwbconstruction.co.nz

52

CWB Construction is a small, award-winning residential construction company based in Auckland, New Zealand, specializing in high-end new homes and renovations. The company emphasizes craftsmanship and personalized service, targeting discerning homeowners in the Auckland region including Rodney, Orewa, Riverhead, Coatesville, Red Beach, and Whangaparaoa. Their market position is strengthened by industry recognition such as Gold and Top 100 awards at the 2023 Registered Master Builders House of the Year Competition. Technically, the website is built on a proprietary CMS platform (GoodWebsiteCompany Editor) and uses common web technologies including jQuery and Google Analytics. The site is hosted by Freeparking Limited, a New Zealand-based registrar and hosting provider, consistent with the business location. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security best practices.

W

Whova

whova.com

73

Whova is a well-established technology company founded in 2012, specializing in providing an all-in-one event management platform that supports in-person, hybrid, and virtual events. Their platform includes award-winning event apps, registration and ticketing software, event management tools, marketing solutions, and exhibitor management. The company targets a broad range of event organizers including corporate, academic, government, association, and trade show sectors. Whova has a strong market position supported by industry awards, customer testimonials, and press coverage. Technically, the website is built on WordPress using the Divi theme and leverages modern web technologies including jQuery, Google Fonts, and YouTube APIs. Hosting is via AWS infrastructure, and the site demonstrates good performance, mobile optimization, and SEO practices. Privacy and cookie compliance are robust, with a clear cookie consent mechanism and comprehensive privacy policies. From a security perspective, the site uses HTTPS with good SSL configuration but lacks DNSSEC and some advanced security headers. No vulnerabilities or exposed sensitive data were detected. However, the absence of a public incident response or vulnerability disclosure policy is noted. Overall, the security posture is solid but could be improved with additional transparency and DNS security. The website is professional, trustworthy, and safe for general audiences. It employs extensive user tracking for analytics and marketing purposes but maintains GDPR compliance. Contact information is clearly provided, including a company email and phone number. Social media presence on Twitter and LinkedIn supports engagement and trust. Strategic recommendations include enabling DNSSEC, adding security headers, publishing incident response and vulnerability disclosure information, and continuing to enhance privacy transparency to maintain and improve trust and security posture.

T

Tātaki Auckland Unlimited

lilyworld.co.nz

60

Lilyworld is a hospitality venue operating as a cafe, garden bar, and function space located at Go Media Stadium in Penrose, Auckland, New Zealand. The business offers a unique combination of food and beverage services, event hosting, and family-friendly entertainment, positioning itself as a key local venue for stadium events and community gatherings. The website reflects a well-structured and content-rich digital presence with event listings, multimedia integration, and social media engagement. Technically, the site is built on a modern React/Next.js framework, leveraging common analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a privacy policy and cookie consent but lacks explicit GDPR compliance statements. Overall, the website is professional, trustworthy, and serves its business purpose effectively with room for technical and security enhancements.

T

Tātaki Auckland Unlimited

aucklandunlimited.com

71

Tātaki Auckland Unlimited is the official cultural, events, and destination agency for Tāmaki Makaurau Auckland, New Zealand. The organization focuses on enriching Auckland's cultural life through events, managing treasured venues and taonga, driving tourism growth, and championing Auckland's global brand and reputation. The website reflects a mature digital presence with a modern React-based infrastructure, integration of multiple analytics and tracking tools, and a comprehensive cookie consent mechanism. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the site is professional, trustworthy, and well-aligned with the organization's government and cultural mission.

A

Auckland Stadiums

aucklandstadiums.co.nz

70

Auckland Stadiums is New Zealand’s largest stadium provider, managing and promoting major venues including Go Media Stadium Mt Smart, North Harbour Stadium, Western Springs Stadium, and Lilyworld. The organization targets sports fans, concert attendees, and the general public in Auckland and surrounding regions. Their market position is strong as a key player in the hospitality and event management sector, supported by a professional and content-rich website that provides comprehensive event information and visitor resources. Technically, the website is built using modern technologies such as React, Google Analytics, Hotjar, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly with structured data enhancing search engine visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA v3 and cookie consent mechanisms, demonstrating good privacy compliance and user protection. However, the absence of explicit security headers and a public security policy or vulnerability disclosure page suggests areas for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and branding appear professional and trustworthy. Overall, Auckland Stadiums presents a credible and professional online presence with strong business insights and technical implementation. Addressing security header implementation and clarifying domain registration status would enhance trust and security posture.

L

Living Creations

livingcreations.com

61

Living Creations is a horticultural business specializing in the breeding and sale of durable, winter-hardy Hydrangea plants. Their website showcases a professional and modern digital presence built on React and Gatsby, featuring rich multimedia content and social media integration. The company targets gardeners and plant enthusiasts seeking easy-to-maintain, frost-resistant Hydrangeas that bloom profusely. While the website demonstrates good technical maturity and user experience, it lacks visible privacy and cookie policies, and no direct contact information is provided. The absence of WHOIS registration data raises some legitimacy concerns, although the active website and social media presence suggest a genuine business. Security posture is generally good with HTTPS and no obvious vulnerabilities, but security headers and incident response contacts are missing. Overall, the site is well-designed and functional but would benefit from improved compliance and transparency.

C

CommonSpirit Health

commonspirit.org

69

CommonSpirit Health is a large, enterprise-level healthcare organization operating across 24 states with over 2,200 care sites and 35,000 physicians and providers. The website reflects a mature healthcare provider network focused on building healthier communities and offering a wide range of medical services including cancer care, heart care, emergency services, and more. The digital infrastructure is built on Adobe Experience Manager with modern integrations such as Adobe Launch and Verint SDKs, indicating a high level of digital maturity. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website presents a trustworthy and professional image consistent with a major healthcare provider.

C

CommonSpirit Health

hellohumankindness.org

69

CommonSpirit Health operates a comprehensive healthcare website focused on delivering compassionate care and patient resources. The site emphasizes the humanity of patients and provides extensive information on services and specialties. Technically, the website is built on Adobe Experience Manager with modern integrations such as Adobe Launch and Verint SDK, ensuring a robust digital presence. Security posture is good with HTTPS and modern best practices, though explicit security headers and incident response policies are not clearly disclosed. Privacy compliance is well addressed with visible privacy and cookie policies. Overall, the site reflects a mature enterprise healthcare organization with strong branding and user experience.

C

CommonSpirit Health

chisaintjosephhealth.org

67

CHI Saint Joseph Health, a member of CommonSpirit Health, operates as a large integrated healthcare system serving central and eastern Kentucky. The organization provides a broad range of medical services including heart care, cancer care, neurology, orthopedics, and primary care. The website reflects a mature digital presence with comprehensive patient resources, multiple awards, and a strong community focus. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and tracking tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. The absence of WHOIS data limits domain registration trust analysis, but the overall branding and content strongly support legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure, and enhancing security contact information to further strengthen trust and compliance.

T

The Avenue Randwick

theavenuerandwick.com.au

60

The Avenue Randwick is a small hospitality venue located in Randwick, Australia, offering food, drinks, bowls, events, and membership services. The website presents a professional and consistent brand image, targeting local families and community members seeking a relaxed social environment. Technically, the site is built on WordPress with modern plugins and libraries, providing good SEO and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security measures.

The website 'Getting Around Illinois' is an official government portal managed by the Illinois Department of Transportation (IDOT). It provides comprehensive transportation-related information including road construction, traveler information, commercial truck routes, and various interactive maps to assist residents and travelers in Illinois. The site is well-branded with official state logos and social media links to IDOT's verified accounts, reinforcing its legitimacy and trustworthiness. The business model is a public service aimed at providing timely and accurate transportation data to the public. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, Font Awesome icons, DataTables for tabular data, and Adobe Dynamic Tag Management alongside Google Analytics for tracking and analytics. The site demonstrates good mobile optimization and a clear navigation structure, although SEO and accessibility features are basic. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers such as Content-Security-Policy or Strict-Transport-Security. There are no forms or inputs on the main page, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR and user consent. No incident response or vulnerability disclosure information is provided. Overall, the website is a credible and professional government resource with a solid business foundation and good technical implementation. However, improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.