Security Directory

M

MikroTik

mikrotik.social

67

mikrotik.social is the official Mastodon server for the MikroTik community, providing a decentralized social media platform for followers and staff. The server is closed for public registrations, indicating a controlled environment primarily for staff and bots. The website content is minimal but clearly communicates its purpose and affiliation with MikroTik. The technical infrastructure is based on Mastodon, leveraging modern JavaScript frameworks and providing a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent or terms of service. Contact information is limited to a company email address. Overall, the site is legitimate and trustworthy but could improve in security and privacy transparency.

M

MikroTik

mt.lv

70

MikroTik is a well-established technology company specializing in networking hardware and software solutions, including routers, switches, and wireless systems. Founded in 1999 and headquartered in Latvia, MikroTik serves a global audience of network engineers, ISPs, and technology integrators. The company offers a comprehensive product catalog, RouterOS operating system, and extensive training and certification programs, positioning itself as a key player in the networking technology industry. Technically, the website employs a modern but stable technology stack including jQuery, Foundation 5, and Modernizr, with good mobile optimization and SEO practices. The site is hosted under a reputable registrar and shows moderate performance. However, some technical improvements could be made, such as enabling DNSSEC and adding security headers to enhance security posture. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. No incident response or vulnerability disclosure information is published, which could be improved to enhance trust and compliance. Overall, MikroTik's website is professional, content-rich, and trustworthy, reflecting the company's strong market position. Strategic improvements in security headers, privacy compliance, and incident response transparency would further strengthen the site’s security posture and regulatory compliance.

S

SIA "MediCloud"

eveselibaspunkts.lv

57

eVeselībasPunkts is a Latvian digital healthcare platform operated by SIA "MediCloud" that offers citizens online access to medical services including appointment booking, bill payments, telemedicine consultations, and management of medical documents. The platform targets Latvian residents seeking convenient e-health services and positions itself as an important national healthcare service provider. The website is professionally designed with consistent branding and provides multilingual support in Latvian, English, and Russian. It includes official company contact information and complies with GDPR through a comprehensive privacy center and cookie consent mechanism. Technically, the website leverages modern frontend technologies such as Vue.js and ES modules, ensuring good mobile optimization and moderate performance. The site uses HTTPS with secure login forms and CSRF tokens, reflecting a solid security posture. However, explicit security headers and incident response contacts are not evident, suggesting areas for improvement. Analytics usage is moderate with Google Analytics employed responsibly alongside user consent. Overall, the security posture is good with no visible vulnerabilities or suspicious content. The lack of WHOIS data limits domain registration trust verification, but the website content and business information appear legitimate and consistent with a Latvian healthcare service provider. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features. This platform represents a medium-sized healthcare technology entity founded in 2015, serving the Latvian market with essential e-health services and maintaining a trustworthy online presence.

The website mobilecause.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page, which blocks access to the actual content. As a result, no direct content, metadata, or contact information could be extracted or analyzed. The domain is registered with MarkMonitor Inc. since 2006, indicating a mature and legitimate business presence. DNS is managed by Cloudflare, a reputable provider, which aligns with the WAF detection. Due to the blocking, technical, security, and privacy compliance assessments are incomplete and limited to domain registration data. The overall risk assessment is constrained by the lack of accessible content, but the domain registration data suggests a trustworthy entity.

The website fundraise.givesmart.com is currently inaccessible due to a Cloudflare Turnstile anti-bot challenge page, which blocks direct access to content. This prevents extraction of meaningful business, compliance, or security information. The domain is a subdomain of givesmart.com, but WHOIS queries for this subdomain return no registration data, indicating it is not separately registered. The site appears to rely on Cloudflare for security and performance, but no further technical or business details are available from the provided content. Due to the lack of accessible content, privacy policies, contact information, and security headers cannot be evaluated, resulting in a low overall trust and security score.

T

The Campbell Center

thecampbell.org

58

The Campbell Center is a US-based non-profit organization dedicated to empowering adults with intellectual disabilities through residential, employment, and community integration programs. The website reflects a mature and active organization with a clear mission, recent content updates, and a merger with New Horizons, indicating growth and collaboration in the sector. Technically, the site is built on WordPress with common plugins and Google services, showing a standard but effective digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The domain registration is privacy protected but consistent with the organization's profile and history, supporting legitimacy. Overall, the site presents a trustworthy and professional online presence for a medium-sized non-profit.

The website mxapis.com presents a minimalistic landing page with only the site title 'MXAPIS' and no additional content or business information. The domain is registered since 2016 with NameCheap, indicating some longevity, but the lack of content and contact details limits the ability to assess the business comprehensively. Technically, the site uses Google Fonts but lacks modern frameworks, CMS, or analytics tools, and no security headers or HTTPS status are evident from the data provided. Security posture is weak due to missing policies and unknown SSL configuration. Overall, the site appears to be in an early or placeholder stage, with significant improvements needed in content, security, and compliance to build trust and credibility.

L

Lauma

lauma.com

51

Lauma is a well-established European manufacturer specializing in textile and medical materials, with a strong market position supported by a long heritage since 1969. The company operates multiple subsidiaries including Lauma Fabrics, Lauma Medical, and Tele Textile Latvia, focusing on quality products and environmental certifications. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting partners and customers in the textile and medical sectors. Technically, the site is built on WordPress with WooCommerce and Elementor, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain registration protections, though improvements are recommended in DNS security and security headers. Privacy compliance is partial, with privacy and terms of service pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy and credible but could enhance security and privacy transparency to align with best practices.

B

Bitly, Inc.

pnbph.net

72

Bitly, Inc. is a well-established technology company specializing in branded link management and URL shortening services. Founded in 2003, Bitly serves enterprise clients and businesses worldwide, offering key services such as branded links, QR codes, and analytics. The company maintains a strong market position as a trusted provider with a comprehensive suite of link management tools. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, ProfitWell, and OneTrust for privacy compliance. Hosting is via Amazon AWS with Cloudfront CDN, ensuring fast performance and good mobile optimization. Security posture is strong, with HTTPS enforced, SOC 2 Type 2 certification, and GDPR/CCPA compliance clearly indicated. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and well implemented. Overall, the website demonstrates professionalism, trustworthiness, and a mature digital presence.

The website at rxb.lv currently presents minimal content, consisting solely of a placeholder page with a centered image and a title indicating no available content. There is no business information, contact details, or any indication of services or products offered. The lack of metadata, structured data, and external links suggests the site is either under construction or abandoned. The WHOIS data could not be retrieved due to query limits, preventing verification of domain registration details. Technically, the site lacks modern web features, security headers, and visible SSL configuration, indicating a low level of digital maturity. Security posture is weak due to absence of HTTPS and security best practices. Overall, the site poses a low trust profile and high risk for users seeking legitimate business information.

R

ROTORWORKS

rotorworks-group.de

51

ROTORWORKS is a German company specializing in wind energy services, including installation, maintenance, and repair of wind turbines. Established since 1995, the company emphasizes safety and innovation as core values. The website is professionally designed using WordPress with multilingual support, offering clear navigation and relevant content targeted at businesses and professionals in the wind energy sector as well as potential employees. Technical infrastructure relies on common WordPress plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is minimal and lacks detailed registrant information, slightly reducing trust but not invalidating legitimacy. Overall, the website presents a credible small business in the energy sector with room for improvement in security and privacy transparency.

K

Klinkmann

klinkmann.kz

50

Klinkmann is a technology solutions provider specializing in industrial automation, IoT, smart machines, and information management primarily serving Kazakhstan and Central Asia. The company leverages global partnerships with AVEVA and Rockwell Automation to deliver certified solutions and support to over 10,000 industrial sites. Their website is built on HubSpot CMS and integrates modern analytics and marketing tools, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. The lack of WHOIS data reduces transparency but does not detract from the overall legitimacy indicated by business content and certifications. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency.

K

Klinkmann

klinkmann.ua

53

Klinkmann is a well-established supplier of industrial automation and electrotechnical products, primarily serving Ukrainian and regional industrial sectors. The company offers machine intelligence consulting, fast logistics, and industrial software solutions, positioning itself as a trusted partner for over 1000 enterprises. The website is professionally designed using HubSpot CMS, integrating modern marketing and analytics tools such as Google Analytics 4 and Hotjar, indicating a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The missing WHOIS data raises concerns about domain registration legitimacy, warranting further investigation. Overall, the site demonstrates good business credibility and technical implementation, with room for improvement in security transparency and WHOIS consistency.

K

Klinkmann Oy

klinkmann.com

55

Klinkmann Oy is a Finnish technology group specializing in industrial automation, IoT, networking, and smart energy solutions. The company operates through subsidiaries such as Klinkmann Automation Oy and Finn Electric Oy, offering a broad portfolio of products and services including software platforms, machine safety, power components, and training. Their market position is that of a trusted regional partner with global vendor relationships, targeting industrial and manufacturing sectors. Technically, the website is built on HubSpot CMS with modern tracking and marketing tools, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The lack of WHOIS registration data is a notable concern, impacting domain trustworthiness. Overall, the website is professional and functional, supporting a medium-sized enterprise with a clear B2B focus.

M

Metsa

metsa.com

44

Metsa is a company specializing in the manufacturing and distribution of propane tanks, skid station tanks, and pressure vessel accessories, primarily targeting the North American market. The website presents a professional and focused business offering high-quality products in the energy sector. The digital infrastructure is built on the Wix platform, leveraging standard Wix technologies and popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. While the website is well-designed and mobile-optimized, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enabled and some hardening scripts, but the absence of explicit security headers and incident response information is a gap. The most significant concern is the lack of WHOIS registration data for the domain www.metsa.com, which raises questions about domain legitimacy and ownership. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency to enhance trust and security.

Helsingin seudun ympäristöpalvelut -kuntayhtymä (HSY) operates as a public sector entity providing essential municipal services in water supply, waste management, and environmental information for the Helsinki metropolitan area. The organization positions itself as a key regional player committed to sustainability and environmental stewardship. The website reflects this mission with comprehensive service descriptions and public information targeting residents, businesses, and governmental bodies in the region. Technically, the site employs modern web technologies including Episerver CMS, Microsoft Azure monitoring, and AI-powered chat agents, indicating a mature digital infrastructure. Security posture is strong with enforced HTTPS, robust security headers, and GDPR-compliant privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with relevant regulations, supporting HSY's public service mandate.

J

JEAN MÜLLER

jeanmueller.de

57

JEAN MÜLLER is a well-established German company specializing in the manufacture and distribution of fuse-based switching devices, enclosure technology, and energy data acquisition solutions primarily for the energy sector. With over 125 years of history and a broad international presence through subsidiaries and partners, the company positions itself as a leader in safety and reliability in low-voltage distribution. The website reflects a mature digital presence with comprehensive product information, news, events, and customer support resources. Technically, the site is built on WordPress with modern plugins and is optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data is a notable anomaly that slightly impacts trust but is mitigated by the professional and consistent business presentation. Overall, the site demonstrates a high level of digital maturity and business credibility.

I

IMEFY S.L.

imefy.com

58

IMEFY S.L. is a medium-sized, family-owned manufacturer specializing in dielectric liquid immersed transformers, cast resin encapsulated transformers, and power transformers, with over 50 years of industry experience. The company targets industrial and commercial clients requiring high-quality distribution and power transformers, positioning itself as an established player in the energy sector. The website reflects a professional digital presence built on WordPress with the Avada theme, incorporating modern SEO and analytics tools such as Yoast SEO and Google Analytics. Hosting is provided by Acens Technologies, a reputable registrar and hosting provider. Security posture is generally good with HTTPS enabled and domain transfer protections in place; however, DNSSEC is not enabled, and security headers are not evident, indicating room for improvement. Privacy compliance is basic, with a cookie policy and consent mechanism present but lacking a clear privacy policy or terms of service. No explicit security or incident response policies are published, which could be enhanced to improve trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, supporting the company's credibility and market position.

D

DEHN SE

dehn-international.com

63

DEHN SE is a well-established, internationally active family-owned electrical engineering company founded in 1910, specializing in lightning protection, surge protection, and safety equipment. The company serves a broad range of clients including industrial, infrastructure, and energy sectors, offering both products and engineering services. Their market position is strong with a comprehensive product portfolio and multiple country-specific partner sites, reflecting a global footprint. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting their business credibility. Technically, the website is built on Drupal 10, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good performance, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and incident response information could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is notably missing or unavailable, which is unusual for a company of this size and history, suggesting possible privacy protection or proxy registration. This discrepancy warrants further verification but does not currently undermine the overall trustworthiness given the strong branding and content quality. Overall, DEHN SE presents a credible and professional online presence with robust technical and security foundations, serving a critical niche in electrical safety and protection solutions.

C

CHINT

chintglobal.com

58

CHINT is a well-established global enterprise specializing in smart energy solutions, with a comprehensive product portfolio spanning low voltage equipment, power transmission and distribution, EV charging, and industry-specific solutions. Founded in 1984 and headquartered in China, CHINT positions itself as a leader in the energy sector, targeting industrial clients, utilities, OEMs, and commercial enterprises worldwide. The website reflects a mature digital presence with structured data, multilingual support, and extensive product and solution information. Technically, the website leverages Adobe Experience Manager as its CMS, integrates modern marketing and analytics tools such as Google Tag Manager, Marketo, and LinkedIn Insight, and employs a consent management platform to ensure privacy compliance. The site is mobile-optimized with good SEO practices, though accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure forms integrated with Marketo. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and comprehensive, indicating good compliance with GDPR and related regulations. Overall, the website is professional, trustworthy, and business-credible, though the lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining rigorous third-party script audits to sustain security and compliance.

M

MatrikonOPC Inc.

matrikonopc.com

63

MatrikonOPC Inc. is a well-established technology company specializing in OPC UA and OPC-based data interoperability products for industrial automation. With a domain age dating back to 2003, the company offers a broad portfolio of products including OPC servers, data brokers, adapters, and training services aimed at industrial clients and system integrators. Their market position is strong within the OPC interoperability niche, supported by a consistent brand presence and multilingual localized sites. Technically, the website is built on legacy ASP.NET WebForms technology enhanced with modern JavaScript libraries such as jQuery and Google Tag Manager. The site is hosted behind Cloudflare DNS and CDN services, ensuring good availability and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and security headers which are recommended for enhanced protection. Privacy compliance is basic, with no explicit privacy policy or terms of service detected in the provided content. Overall, the website is professional, trustworthy, and serves its target audience effectively, though improvements in privacy transparency and security hardening would be beneficial.

S

Schneider Electric Japan Holdings Ltd.

proface.com

80

Pro-face by Schneider Electric is a well-established enterprise specializing in Human Machine Interface (HMI) solutions and industrial automation products. The website showcases a comprehensive portfolio including Industrial PCs, Advanced and Basic HMIs, Edge Box solutions, and related software, targeting industrial automation customers globally. The company positions itself as a trusted partner with decades of experience and strong branding consistency aligned with its parent company, Schneider Electric. Technically, the website employs modern web technologies such as React and Next.js, supported by Akamai CDN for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR standards. From a security perspective, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks explicit published security policies, incident response information, and vulnerability disclosure details, which are recommended for enhanced transparency and trust. Overall, the website is professional, secure, and compliant, though the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Given the strong corporate affiliation and quality content, the risk is moderate. Strategic improvements in security policy publication and contact information transparency would further strengthen trust and compliance.

H

HMS Networks

hms-networks.com

66

HMS Networks is a global industrial ICT company specializing in enabling communication between industrial equipment and software systems, encapsulated in their tagline 'Hardware Meets Software™'. The company offers a broad portfolio of products including industrial network connectivity, remote gateways, network diagnostics, and wireless products, targeting industrial manufacturers and technology integrators worldwide. Their market position is strong with multiple subsidiary brands under their umbrella, serving diverse industrial sectors. Technically, the website demonstrates modern infrastructure with integration of analytics and consent management tools, optimized for mobile and accessibility. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the site reflects a mature digital presence aligned with corporate standards and compliance requirements.

U

Unitronics

unitronics.com

70

Unitronics is a technology company specializing in integrated automation solutions, primarily programmable logic controllers (PLCs) with built-in human-machine interfaces (HMI). The company targets OEMs, machine builders, and industrial automation projects, offering a comprehensive product range including PLC series, motion control, and programming software. Their market position is that of an established provider with global reach and strong technical support and training services. The website reflects a mature digital presence with good content quality and professional design. Technically, the website is built on WordPress with modern plugins and analytics tools integrated, including Google Analytics, Facebook Pixel, and Marketo for marketing automation. The site is mobile optimized and uses HTTPS, indicating a secure infrastructure. However, some security headers are not explicitly detected, and no public vulnerability disclosure or incident response information is available. The security posture is generally good with encrypted connections and form protections, but the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Privacy and cookie policies are present and GDPR compliant, supporting privacy compliance. Overall, the website presents a professional and trustworthy front for Unitronics, but the domain registration opacity suggests a need for further verification to fully trust the domain's legitimacy. Strategic improvements in security headers and public security policies would enhance trust and compliance.

R

ROSE Systemtechnik GmbH

rose-systemtechnik.com

54

ROSE Systemtechnik GmbH is a German-based manufacturer specializing in the development and production of high-quality enclosure systems and system solutions for various industries. The company targets industrial clients requiring robust and customized enclosure solutions. Their website reflects a professional and consistent brand image, supported by comprehensive privacy and cookie policies, and active social media presence. Technically, the site is built on WordPress using the Enfold theme, integrating modern marketing and analytics tools such as HubSpot Forms, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS and implements essential security headers, but lacks a publicly available security policy or incident response information, which could be improved. The absence of WHOIS data for the domain is a notable concern, suggesting the need for further verification of domain registration legitimacy. Overall, the website presents a solid business and technical foundation with room for enhanced transparency in security practices.

S

Stulz

stulz.com

61

STULZ is a well-established company specializing in energy-efficient cooling solutions for mission-critical applications such as data centers and telecom infrastructure. With over 50 years of experience and a global presence in more than 150 countries, STULZ offers a comprehensive portfolio of products including precision air conditioning units, chillers, liquid cooling, and monitoring services. The company emphasizes sustainability and reliability in its offerings, supported by a professional and content-rich website built on TYPO3 CMS. Technically, the website employs modern technologies including Usercentrics for consent management and Google Tag Manager for analytics, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. The WHOIS data for the domain www.stulz.com is missing, which raises some concerns about domain transparency and registration consistency. Despite this, the website's professional presentation and detailed business information support its legitimacy. Overall, STULZ demonstrates a mature digital presence with room for improvement in security transparency and domain registration disclosure. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and verifying domain registration details to improve trustworthiness.

S

SES-STERLING

ses-sterling.com

45

SES-STERLING is a well-established manufacturer and distributor specializing in cable accessories and related products since 1928. The company offers an extensive catalog of over 26,000 references including cable protection, insulation, marking, conduits, fixing accessories, and tools. With multiple subsidiaries across Europe and certifications such as ISO 9001 and EN9100, SES-STERLING positions itself as a trusted expert in the energy and manufacturing sectors. The website supports multiple languages and provides comprehensive product and company information targeting industrial clients and electrical professionals. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and privacy compliance. It uses Google Analytics, Microsoft Clarity, and Piwik for user tracking, combined with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and features a secure HTTPS connection with reCAPTCHA protection on forms. However, some security headers are missing, and no explicit incident response or security policy information is provided. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy compliance but lacks some advanced security headers and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a concern, as it conflicts with the company's claimed long history, suggesting either privacy protection or recent domain registration. Overall, SES-STERLING's website is professional, content-rich, and compliant with privacy regulations, but improvements in security headers and transparency about domain registration would enhance trust. Strategic recommendations include implementing security headers, publishing incident response contacts, and verifying domain registration details to align with business claims.

P

ProSoft Technology, Inc.

prosoft-technology.com

71

ProSoft Technology, Inc. is a specialized provider of industrial connectivity solutions, focusing on linking diverse automation products with major automation controllers such as Rockwell Automation and Schneider Electric. The company targets industrial automation professionals and enterprises requiring robust IIoT and connectivity solutions. Their product portfolio includes gateways, industrial wireless solutions, and software tailored for industrial automation environments. The website reflects a medium-sized technology business with consistent branding and a professional online presence. Technically, the website is built on the eZ Publish CMS platform and employs modern web technologies including Google Analytics, Google Tag Manager, OneTrust for cookie consent, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a visible privacy policy and terms of service reduces privacy compliance maturity. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy despite the active and professional website. Overall, the website presents a trustworthy and professional front for ProSoft Technology, Inc., but improvements in privacy policy transparency, security header implementation, and WHOIS data clarity are recommended to enhance trust and compliance.

S

Sensia

sensiaglobal.com

78

Sensia is a technology and service provider specializing in digital automation and solutions for the oil and gas industry, aiming to optimize performance from reservoir to refinery. The company appears to be medium-sized, founded in 2019, with a focus on reducing risk and driving efficiency for its clients. The website reflects a professional digital presence with a clear business focus on energy sector clients. Technically, the site uses a modern tech stack including ASP.NET WebForms, Google Analytics, LinkedIn Insight, Hotjar, and OneTrust for cookie consent, hosted likely on Microsoft Azure infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Contact information is limited to forms without explicit emails or phone numbers. Overall, the domain WHOIS data is consistent and transparent, supporting the legitimacy of the business.

E

EffectBoost Ltd.

effectboost.com

71

EffectBoost Ltd. is a European online growth consultancy specializing in SEO, PPC, reputation management, conversion optimization, tracking, and web development services for competitive industries such as fintech, crypto, hosting, adult, and SaaS. Founded in 2015 and based in Bulgaria, the company leverages over 15 years of expertise to deliver tailored, data-driven digital marketing solutions. The website presents a professional and consistent brand image with clear service offerings and client references. Technically, the site uses modern front-end frameworks like Bootstrap and jQuery, integrates with Cloudflare for DNS and security, and employs Cookiebot for GDPR-compliant cookie consent management. Analytics are handled via Google Analytics and Cloudflare Insights, supporting moderate user tracking with privacy considerations. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. No privacy policy or terms of service pages were found, which is a compliance gap. Contact is facilitated primarily through Calendly scheduling and LinkedIn social media, with a physical address and VAT number clearly displayed. Overall, the site is well-structured, mobile-optimized, and trustworthy, suitable for its target audience of businesses seeking online growth in competitive sectors.

M

Fly High for Less | Military Discount Flights

militaryfares.com

63

Militaryfares.com is an online travel booking platform specializing in providing discounted flights, hotels, car rentals, and vacation packages targeted primarily at military personnel and their families. The website offers a user-friendly interface with multiple booking options including one-way, round trip, multi-city flights, and vacation packages. The platform positions itself as a niche service provider catering to the military community with competitive pricing and live agent support. Technically, the website employs modern frontend technologies such as Bootstrap, Swiper.js, and tracking tools like Hotjar and Riskified, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, suggesting the need for further verification. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

O

Osta Kingitus

ostakingitus.ee

57

Osta Kingitus is a small Estonian retail business specializing in branded corporate gifts and promotional merchandise. The website is professionally designed using the Wix platform and targets local businesses and individuals seeking customized logo gifts. The company emphasizes quality promotional items suitable for employees and business partners. Technically, the website leverages Wix's Thunderbolt framework and standard web technologies, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some JavaScript hardening, but lacks explicit security headers and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and credible but would benefit from enhanced compliance and security transparency.

The website magneticpro.lv is currently inaccessible beyond a security challenge page that performs a browser integrity check and automatic redirect. The visible content is minimal and primarily serves as a gatekeeper, indicating the presence of a Web Application Firewall or similar security mechanism (BitNinja.IO). The site references outdated CMS versions (Joomla 1.5 and WordPress 2.5) in its metadata, suggesting legacy infrastructure. No business, contact, or privacy-related information is available on the landing page, limiting the ability to assess the company's operations or legitimacy. WHOIS data could not be retrieved due to query limits, further restricting domain trust evaluation. Overall, the site exhibits poor content quality, minimal technical sophistication, and weak security posture.

W

Whalebone, s.r.o.

whalebone.io

58

Whalebone, s.r.o. is a cybersecurity company specializing in user-centric, no-installation security solutions aimed at telcos, ISPs, enterprises, and government institutions. The company positions itself as a global leader in telco cybersecurity deployments and leads the DNS4EU project to secure DNS resolution for EU citizens and institutions. Their key products include Whalebone Aura, Immunity, and Peacemaker, targeting different market segments with multi-layered digital protection services. The website reflects a professional and consistent brand with clear messaging and customer testimonials, indicating strong market presence and trust. Technically, the website is built on HubSpot CMS and integrates modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured data. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is incomplete and malformed, limiting direct verification of domain registration details. Despite this, the website content and business information suggest legitimacy. Contact information includes a company email and a contact form, but no explicit phone numbers or social media links were found. Privacy and cookie policies are not explicitly present, indicating an area for compliance improvement. Overall, Whalebone demonstrates a mature digital presence with a solid security foundation but should enhance transparency around privacy policies, incident response, and domain registration details to improve trust and compliance.

ALDA+ Srl is a Benefit Corporation founded in 2017, specializing in technical assistance, project cycle management, training, and consultancy services primarily for public entities, civil society organizations, and international partners. The company supports the mission of its parent association ALDA, focusing on EU funding programs and governance projects. The website is professionally designed using WordPress and Bootstrap, with good SEO and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and established business.

L

Loxam

loxam.nl

65

Loxam is a leading equipment rental company specializing in construction, infrastructure, and industrial tools and machinery. The company operates extensively in the Netherlands with nearly 50 branches and offers a broad range of rental equipment including aerial work platforms, excavators, generators, and safety equipment. Their business model focuses on rental services complemented by value-added services such as training, safety programs, and loyalty memberships. The website reflects a strong market position with consistent branding and comprehensive service offerings. Technically, the website is built on a modern e-commerce platform (SAP Hybris Commerce) with responsive design and integration of advanced search capabilities via Algolia. The site uses modern web technologies and is optimized for mobile devices, though accessibility features are basic. Performance is moderate with good SEO and structured data implementation. From a security perspective, the site employs HTTPS and cookie consent mechanisms, and includes CSRF tokens in forms, indicating a reasonable security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent. Certifications such as ISO 9001, ISO 14001, ISO 45001, and Ecovadis ratings enhance trust. No critical vulnerabilities or blocking mechanisms were detected. Overall, Loxam's website demonstrates a professional, secure, and privacy-compliant digital presence suitable for its business scale and sector. Strategic improvements in security transparency and accessibility could further strengthen its posture.

L

Loxam

loxam.dk

65

Loxam is a leading equipment rental company operating primarily in Denmark and Europe, specializing in construction and related sectors. The company offers a wide range of machinery and tools for rent, supported by 37 local branches and online booking capabilities. Their market position is strong, being the largest in their sector in Denmark and Europe, with a focus on sustainability through their LoxGreen initiative. Technically, the website is built on a modern SAP Hybris Commerce platform with integrations for search and customer engagement, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie consent and GDPR-aligned privacy policies. Overall, the website and business demonstrate professionalism and trustworthiness, though the lack of WHOIS data introduces some uncertainty about domain registration legitimacy.

L

Loxam

loxam.ch

72

Loxam is a leading European company specializing in the rental and sale of professional equipment for construction and industrial sectors, with a strong presence in Switzerland since 1996. The company offers a wide range of machinery and tools targeting private customers, businesses, and craftsmen. Their market position is reinforced by over 1100 agencies across 30 countries, positioning them as a market leader in equipment rental services. The website reflects this stature with comprehensive service offerings and clear contact channels. Technically, the site is built on SAP Hybris Commerce platform, utilizing modern web technologies such as Algolia for search and responsive design for mobile optimization. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie consent and detailed privacy policies. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

L

Loxam

loxam.be

70

Loxam is a leading European equipment rental company specializing in professional and construction machinery rental services. The website targets professionals, companies, and artisans primarily in Belgium, offering a wide range of equipment including mini excavators, aerial work platforms, and professional tools. The company positions itself as the number one equipment rental provider in Europe with over 750 agencies worldwide and approximately 50 years of expertise. The website content is primarily in French and is professionally presented with clear navigation and a focus on business customers. Technically, the website is built on the SAP Hybris Commerce platform, utilizing modern web technologies such as Google Fonts, Vue.js components, and jQuery UI for enhanced user experience. The site is mobile-optimized and includes SEO best practices such as canonical links and meta tags. Performance is moderate, with room for improvement in accessibility features. The presence of a cookie consent banner and a comprehensive privacy policy PDF indicates good GDPR compliance. From a security perspective, the site uses HTTPS as implied by canonical URLs, but no explicit security headers were detected in the provided data. There is no visible incident response or security policy page, and no email contacts for security or abuse reporting were found. The WHOIS data is unavailable due to registry restrictions, limiting domain trust verification. However, the website branding and content consistency support legitimacy. Overall, Loxam's website demonstrates a mature digital presence suitable for its enterprise scale and market position. Strategic improvements in security headers, explicit security policies, and enhanced accessibility would strengthen its security posture and compliance. The lack of WHOIS transparency is a limitation but not uncommon for European domains under privacy regulations.

F

FEDERATION INTERNATIONALE DE L'AUTOMOBILE

fiawec.tv

55

The FIA WEC TV website serves as the official streaming platform for the Fédération Internationale de l'Automobile's World Endurance Championship. It offers live and on-demand motorsport content targeting endurance racing fans globally. The platform operates on a subscription model, providing access to premium racing content with a professional and consistent brand presence aligned with the FIA. Technically, the site leverages modern web technologies including React, integrates multiple third-party analytics and advertising tools, and uses secure payment processing via Stripe. While the site is mobile optimized and performs moderately well, there is room for improvement in accessibility and SEO. Security posture is generally good with HTTPS enforced and domain protections in place, but lacks visible security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service documents found in the analyzed content. Overall, the domain registration data confirms legitimacy and consistency with the FIA organization.

G

Ginion Group

francorchampsmotors.tv

57

Francorchamps Motors TV is a specialized media platform delivering motorsport-related video content including live streams, replays, and event schedules. The platform targets motorsport enthusiasts and operates under the Belgian-based Ginion Group, reflecting a focused niche media business model. The website demonstrates a modern technical infrastructure leveraging React, Google Tag Manager, Stripe, and advanced video streaming technologies, indicating a mature digital presence. Security posture is solid with HTTPS enforced and consent management implemented, though explicit security policies and incident response contacts are absent. Overall, the platform presents a trustworthy and professional front with room for enhanced security transparency and contact availability.

D

Danmarks Erhvervsfremmebestyrelse

erhvervsfremmebestyrelsen.dk

43

Danmarks Erhvervsfremmebestyrelse is a Danish government agency dedicated to promoting business development and regional economic growth across Denmark. The organization focuses on supporting small and medium-sized enterprises (SMVs) and entrepreneurs by providing funding, strategic investment, and guidance to address local and regional business challenges. Their 2024-2027 strategy emphasizes sustainable growth, green transition, and digital innovation. The website reflects a professional and consistent brand presence, supported by EU co-funding transparency and clear contact information. Technically, the website is built on Drupal CMS with modern web technologies including responsive design, video content, and JavaScript enhancements. The site is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. Analytics are handled via Piwik Pro with explicit cookie consent mechanisms, demonstrating a commitment to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental identity, reinforcing legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include publishing formal security policies, incident response information, and enhancing security headers to further strengthen the security posture.

R

Region Midtjylland

rm.dk

66

Region Midtjylland is a Danish regional public authority focused on healthcare, hospitals, specialized social services, and regional development. The website serves as an official portal for residents and stakeholders in the Central Denmark Region. The technical infrastructure is based on AngularJS with modern CSS and font usage, and includes GDPR-compliant cookie consent via Cookiebot. Security posture is good with HTTPS enforced and cookie consent mechanisms, but lacks advanced security headers and published security policies. WHOIS data is unavailable, which slightly reduces trust but the official domain and content support legitimacy. Overall, the website is professional, accessible, and serves its public sector mission effectively.

S

SkillsDenmark

skillsdenmark.dk

44

SkillsDenmark is a Danish non-profit organization dedicated to promoting vocational education and skills competitions nationally and internationally. Established in 2009, it organizes the annual DM i Skills championship and supports Danish participation in EuroSkills and WorldSkills events. The organization is supported by the Danish Ministry of Education, labor market partners, schools, funds, and companies, positioning it as a key player in vocational education advocacy in Denmark. The website reflects a professional and consistent brand image with clear communication of its mission and activities. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. It employs GDPR-compliant cookie consent mechanisms and integrates Google Analytics for user insights. Security posture is solid with HTTPS enabled and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site is accessible, well-structured, and trustworthy, supporting the organization's credibility and outreach efforts.

S

STABILA Messgeräte Gustav Ullrich GmbH

stabila.com

56

STABILA Messgeräte Gustav Ullrich GmbH operates a professional website focused on precision measuring instruments such as spirit levels, lasers, and tape measures. The company targets professional tradespeople and industries requiring high-quality measuring tools, maintaining a consistent and professional brand presence with multilingual support. The website is built on the Contao CMS platform, utilizing modern JavaScript libraries like jQuery and AOS for enhanced user experience. It features a cookie consent mechanism and uses Matomo for analytics, indicating a commitment to privacy compliance. However, the absence of WHOIS data for the domain www.stabila.com raises questions about domain registration transparency, although the website content and structure suggest legitimacy. Security posture is strong with HTTPS and CSRF protection, but lacks some security headers and explicit incident response information. Overall, the site is well-designed and functional, with room for improvement in contact transparency and security header implementation.

F

Festool

festool.com

74

Festool is a globally recognized manufacturer and retailer of high-quality power tools and accessories, targeting professional tradespeople and serious DIY enthusiasts. The company offers a broad range of products including plunge-cut saws, circular saws, jigsaws, cordless drills, joining machines, and routers. The website reflects a strong brand presence with consistent design and comprehensive product information, supporting its market position as a premium tool provider. Technical infrastructure leverages modern JavaScript frameworks such as Vue.js, along with Google Tag Manager and Analytics for marketing and performance tracking. The site is well-optimized for mobile and SEO, with good accessibility features. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes security headers such as Content Security Policy. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism via Usercentrics. However, the absence of WHOIS registration data and lack of explicit security policies or incident response contacts present gaps in transparency and trustworthiness. No vulnerability disclosure or security.txt files were found, which could be improved to enhance security posture. Overall, the website is professional, secure, and privacy-conscious, but the missing domain registration details and limited security policy disclosures suggest areas for improvement. Strategic recommendations include publishing a security policy, establishing incident response contacts, and implementing vulnerability disclosure mechanisms to strengthen trust and compliance.

Lincoln Electric is a global leader in the manufacturing of arc welding products, automated joining, assembly and cutting systems, and related safety equipment. The company targets industrial manufacturers, welding professionals, and fabrication sectors with a comprehensive product portfolio including welding equipment, filler metals, automation solutions, and personal protective equipment. The website reflects a mature enterprise with a strong market position and extensive product offerings. Technically, the website is built on the Sitecore CMS platform, utilizing modern JavaScript libraries such as jQuery and integrates marketing and analytics tools like Google Tag Manager and OneTrust for cookie consent. The site is mobile optimized with good SEO practices and a well-structured navigation system, providing a positive user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, the absence of visible security headers and lack of explicit security or incident response contact information are areas for improvement. The missing WHOIS data for the domain is unusual for a large enterprise and slightly impacts the trustworthiness assessment. Overall, Lincoln Electric's website demonstrates strong business credibility and technical maturity with minor security and transparency gaps. Strategic enhancements in security headers, incident response visibility, and WHOIS transparency would further strengthen the site's trust and compliance posture.

3

3F – Fagligt Fælles Forbund

3f.dk

70

3F – Fagligt Fælles Forbund is Denmark's largest and strongest trade union and unemployment insurance fund (a-kasse), dedicated to negotiating collective agreements, improving work environments, and advocating for its members. The organization targets Danish workers and union members, providing essential labor-related services and support. The website reflects a mature digital presence with consistent branding and comprehensive content tailored to its audience. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. It is hosted behind Cloudflare, ensuring reliable delivery and security. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS and uses a granular cookie consent mechanism compliant with GDPR. However, it lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong privacy compliance and professional business credibility. The absence of WHOIS data limits domain registration insights but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and publishing explicit terms of service and incident response policies to further strengthen trust and compliance.

V

Villum Fonden

villumfonden.dk

58

Villum Fonden is a well-established Danish charitable foundation focused on supporting technical and natural science research, education, and various social, environmental, and cultural initiatives. Founded in 1971 by Villum Kann Rasmussen, the foundation benefits from investment income and ownership in VKR Group, distributing substantial grants annually. The website reflects a professional and consistent brand presence with clear communication of its mission and activities. Technically, the site is built on Drupal 9, optimized for mobile, and employs modern web standards, though some security headers and cookie consent mechanisms are missing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved with enhanced security policies and DNSSEC. Overall, the domain registration data aligns well with the foundation's identity, supporting legitimacy and trust.

Tietgenfonden is a Danish non-profit foundation established in 2020 that supports charitable projects promoting business vitality and growth, with a special focus on craftsmanship quality and pride. The foundation distributes approximately 40 million DKK annually to projects that align with its mission. The website is professionally designed using Drupal 11, featuring clear navigation, mobile optimization, and privacy-conscious analytics via Matomo. Contact information and organizational governance details are transparently provided, enhancing trustworthiness. Security posture is solid with HTTPS and privacy-respecting analytics, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present and GDPR compliant, but no explicit consent mechanism for cookies is implemented. Overall, the website reflects a mature digital presence suitable for a medium-sized non-profit entity.