Security Directory

T

The Customization Group

thecustomizationgroup.com

60

The Customization Group is a globally recognized leader in mass customization, providing tailored B2B and API solutions to millions of customers. Their website, hosted on the Wix platform, reflects a professional and consistent brand image with clear business descriptions and a focus on sustainable solutions. The company is based in Germany, as indicated by the structured data address, and targets businesses seeking customized product solutions. Technically, the site leverages Wix's Thunderbolt framework and modern JavaScript tooling, ensuring moderate performance and good mobile optimization. However, the site lacks explicit privacy and cookie policies, and no WHOIS data is available for the domain, which raises some concerns about domain legitimacy. Security-wise, the site uses HTTPS and some cookie handling best practices but lacks visible security headers and incident response information. Overall, the site presents a moderate risk profile with room for improvement in compliance and security transparency.

F

Firnas Shuman

firnasshuman.com

59

Firnas Shuman is a consulting and technical services provider specializing in power generation and transmission infrastructure across Africa, the Middle East, and Central Asia. The company has significant experience, having contributed to over 10,000 MW of power generation capacity in more than twenty-five countries. The website reflects a professional consulting business with a focus on renewable energy and turnkey resource measurement campaigns. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted by NameCheap, Inc. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy and compliance policies are absent, and no direct contact information is visible, which may impact user trust and regulatory compliance. Overall, the website is functional and professional but could improve in privacy transparency and security best practices.

L

lab9.pro SIA

lab9.pro

44

lab9.pro SIA is a Latvia-based small technology company specializing in graphic and interactive design, branding, and digital project development for web, mobile, and social media platforms. Established since 1997, the company has a strong portfolio with over 300 clients worldwide, including notable brands such as ŠKODA, Honda, and Kaspersky. The website reflects a professional service provider with a clear focus on creative and technical digital solutions. Technically, the website is built on WordPress 4.6 and uses common libraries such as jQuery and Swipebox. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. Hosting appears to be supported by Amazon AWS DNS infrastructure. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features and modern security headers. From a security perspective, the website uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related privacy regulations. No incident response or security policy information is published, limiting transparency in security governance. Overall, the website is functional and professional but would benefit from improved privacy compliance, updated platform versions, and enhanced security measures to reduce risk and increase trustworthiness.

Dun & Bradstreet Credit AB operates the Soliditet.se website, providing leading Nordic credit and business information services. Their offerings include credit reports, automated credit decision support, fraud detection solutions, and business monitoring tools tailored for companies operating in Sweden and the Nordic region. The website reflects a medium-sized finance sector B2B service provider with a strong market position and a history dating back to 2004. Technically, the website uses a traditional tech stack including jQuery 1.12.4, Bootstrap 4.1.0, and Font Awesome 4.7.0, with external resources loaded from reputable CDNs. The site is mobile optimized and presents a professional design with clear navigation, though it lacks advanced SEO and accessibility features. No CMS or hosting provider details are explicitly identified beyond the registrar CSC Corp Domains. From a security perspective, the site lacks visible security headers and does not enable DNSSEC, which are areas for improvement. There is no evidence of privacy or cookie policies, which impacts GDPR compliance. No forms or analytics scripts are present, reducing data collection risks but also limiting user engagement tracking. The WHOIS data is consistent with a legitimate, long-standing domain registration. Overall, the website is functional and professional but would benefit from enhanced security controls, privacy compliance measures, and updated technology to reduce risk and improve trustworthiness.

The website at humanchat.net is currently minimalistic with almost no visible content or metadata, indicating it may be under development or a placeholder site. The domain is registered with NameCheap, Inc. since September 2022, which aligns with a relatively new business or project. There are no privacy policies, cookie notices, terms of service, or contact information available on the site, which limits user trust and compliance with data protection regulations such as GDPR. Technically, the site uses basic CSS and Tabler Icons but lacks modern frameworks or CMS indications. No security headers or DNSSEC are configured, which reduces the security posture. Overall, the site is accessible without WAF or security challenges but provides very limited information or functionality.

T

Tototheo Global

tototheo.com

61

Tototheo Global is a well-established company specializing in global connectivity and technology solutions, particularly focused on the maritime sector with over 40 years of expertise. Their website reflects a professional presence with a clear emphasis on innovation, security, and sustainability in maritime communications. The company positions itself as a leader in bridging the digital divide and fostering a connected future. Technically, the website employs modern frontend frameworks such as Bootstrap and AOS, integrates marketing and analytics tools like HubSpot and Google Tag Manager, and uses Cloudflare for DNS and likely CDN services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is managed via Cookiebot, but there is a lack of published privacy policies, terms of service, and security headers, which are areas for improvement. The domain WHOIS data is consistent with the business claims, showing a mature domain age and no privacy protection, supporting the legitimacy of the site. Overall, the website is functional and professional but could enhance trust and compliance by adding explicit privacy and security policies.

A

AUER Packaging

auer-packaging.com

51

AUER Packaging is a German-based manufacturer specializing in high-quality plastic storage and transport products, serving a broad range of industries with a focus on business customers. The company emphasizes its 'Made in Germany' quality, ISO 9001:2008 certification, and offers extensive customization options. The website reflects a mature digital presence with a comprehensive product catalog, clear navigation, and professional branding. Technically, the site uses modern JavaScript libraries, consent management tools, and integrates third-party services like Google Tag Manager and Trustpilot for analytics and customer reviews. Security posture is good with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain is a notable gap, slightly reducing trust but not undermining the overall legitimacy given the detailed business information and certifications presented. Strategic recommendations include enhancing security headers, publishing a security.txt file, and verifying domain registration details to improve trust.

K

Kantar Media

kantarmedia.com

70

Kantar Media is a global enterprise specializing in audience measurement, targeting, analytics, and advertising intelligence services. The company provides comprehensive solutions to businesses in the content and advertising ecosystems, enabling powerful decision-making across multiple channels and platforms. Their market position is strong, supported by a professional and consistent brand presence and a broad portfolio of key services including audience measurement, advertising intelligence, and sports market analytics. The website reflects a mature digital presence with modern technologies such as WordPress CMS, React, and integrated analytics tools like Google Tag Manager and Cookiebot for privacy compliance. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS domain registration data is a notable gap, impacting domain legitimacy verification. Overall, the site demonstrates high professionalism, good privacy compliance, and a solid technical foundation, positioning Kantar Media as a credible and trusted player in the media analytics industry.

S

State Treasury

applyforgrants.fi

79

The website www.haeavustuksia.fi is an official Finnish government service portal operated by the State Treasury. It aggregates all government grant calls in one centralized platform, providing a valuable resource for individuals and organizations seeking funding opportunities in Finland. The site features comprehensive information about grant authorities and open calls, with clear navigation and multilingual support. The business model is a public service platform aimed at improving accessibility and transparency of government grants. Technically, the website uses modern web technologies including React for client-side rendering, SVG icons, and CSS modules. It is mobile optimized and accessible, with a cookie consent mechanism in place. Performance is moderate, and SEO best practices are followed with proper meta tags and Open Graph data. No major technical debts or vulnerabilities were detected in the content. From a security perspective, the site enforces HTTPS and implements cookie consent. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not published. Security headers are not visibly configured in the HTML content. No exposed sensitive data or vulnerable libraries were found. Overall, the security posture is good but could be improved by adding formal security documentation and headers. The overall risk assessment is low given the official nature of the site, consistent WHOIS data, and absence of suspicious elements. Strategic recommendations include publishing security and incident response policies, implementing security headers, and enhancing transparency around vulnerability disclosures to further strengthen trust and compliance.

S

Smartifik Oy

smartifik.com

51

Smartifik Oy is a Finnish software company specializing in natural language processing and AI technologies, founded in 2012 and based in Oulu. The company focuses on developing conversational AI systems for customer service automation, providing tools that enable companies to offer 24/7 customer support while reducing operational costs. Their market position is that of a niche technology provider with expertise in Finnish language AI solutions. Technically, the website is built on WordPress with the Divi theme and uses common libraries such as jQuery and MediaElement.js. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website presents a professional image with clear contact information and business details, but could improve in compliance and security transparency.

V

Valtiokonttori

valtioexpo.fi

56

ValtioExpo.fi is a Finnish government-affiliated event website organized by Valtiokonttori, targeting decision-makers and experts within the Finnish state administration. The site provides information about the Valtio Expo 2025 event, including program details, exhibitor information, and news updates. The business model centers on hosting a specialized expo that facilitates networking and knowledge sharing among government stakeholders and their partners. The website content is primarily in Finnish and is professionally presented with consistent branding and relevant event information.

S

State Treasury

treasuryfinland.fi

59

The State Treasury website serves as the official portal for Finland's central government debt management. It provides comprehensive information on government borrowing, debt statistics, auctions, investor relations, and sustainability initiatives. The site targets investors, government officials, and the public interested in Finland's fiscal management. The business model is that of a government agency managing public debt and liquidity, with a strong market position as the authoritative source for this information in Finland. Technically, the website is built on WordPress with modern libraries such as jQuery, Chart.js, and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional design and clear navigation. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, explicit security headers like Content-Security-Policy are not clearly present, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data confirms the legitimacy and consistency of the domain as a Finnish government entity. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with room for improvement in explicit security policy publication and enhanced security headers. The risk level is low, but strategic enhancements in security posture and transparency would further strengthen trust and resilience.

S

State Treasury

exploreadministration.fi

61

Exploreadministration.fi is an official Finnish government website operated by the State Treasury, providing comprehensive data and reports on public administration, including government finances, personnel, and agency performance. The site targets government officials, researchers, and the public interested in transparent government data. Technically, the site is built on WordPress with modern integrations such as embedded Power BI reports and uses standard web technologies ensuring good performance and accessibility. Security-wise, the site enforces HTTPS, uses secure forms, and implements cookie consent mechanisms, reflecting a mature security posture with no visible vulnerabilities. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though it lacks explicit security policies and vulnerability disclosure mechanisms.

V

Valtiokonttori

valtiolla.fi

62

Valtiolla.fi is a Finnish government-affiliated platform managed by Valtiokonttori, focusing on the development of state employment and work culture. It provides a comprehensive collection of articles, events, tools, projects, and services targeted primarily at experts, supervisors, and leadership within the Finnish state administration. The website holds a strong position as an important informational and community resource within the government sector. Technically, the site is built on WordPress with a modern tech stack including jQuery, Gravity Forms, and Google Tag Manager, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and dedicated security policies could be improved. Overall, the site demonstrates high trustworthiness and professionalism with consistent branding and active content updates.

V

Valtiokonttori

valtiokonttori.fi

60

Valtiokonttori is the official Finnish government agency responsible for state borrowing, debt and cash management, state accounting, and compensation services for state employees. The website reflects a mature digital presence with a WordPress CMS, modern web technologies, and comprehensive multilingual content. It serves both government entities and the public with a wide range of financial and administrative services. The site demonstrates strong compliance with privacy regulations, including GDPR, and provides clear contact information and social media engagement. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. Overall, the site is professional, trustworthy, and well-structured, supporting the agency's mission effectively.

S

Swaper

swaper.com

72

Swaper operates as a loan marketplace platform specializing in unsecured consumer loans, offering investors the opportunity to earn up to 16% annually. The platform targets investors interested in peer-to-peer lending and positions itself as a transparent and easy-to-use service within the finance sector. The website content and branding are consistent and professional, supporting a medium-sized business with a mature domain age dating back to 1997. Technically, the website is built on modern web technologies including React and Next.js, hosted likely behind Cloudflare DNS services. It integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, and Zendesk, and employs Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS with strong security headers and does not expose sensitive data in the HTML content. However, DNSSEC is not enabled, and there is no published security policy or incident response contact information, which are areas for improvement. The WHOIS data indicates a legitimate and consistent domain registration with no privacy protection, appropriate for the business type. Overall, Swaper presents a solid digital presence with good security and privacy compliance, though it could enhance transparency around security policies and incident response. The risk profile is low, with recommendations focusing on DNS security enhancements and formalizing security governance documentation.

T

Ziemas riepas, vasaras riepas, TavasRiepas.lv

tavasriepas.lv

42

TavasRiepas.lv is an e-commerce and service platform specializing in the sale and servicing of tires and wheels, primarily targeting vehicle owners in the Baltic region. The website offers a comprehensive catalog of tires and wheels, including detailed search and filtering options, and promotes services such as tire replacement and delivery across the Baltics. The business positions itself as a trusted partner with guarantees and customer-friendly policies like a 14-day return period. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and various UI enhancement libraries. The site is well-structured with good SEO metadata and mobile optimization, providing a positive user experience. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses HTTPS and includes Google-managed analytics with consent set to denied by default, indicating some privacy awareness. However, it lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data due to query limits restricts the ability to fully assess domain legitimacy and registration consistency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparent contact and incident response information to improve trust and regulatory adherence.

L

Loxam

loxam-event.com

66

Loxam Event is a specialized division of Groupe Loxam, providing professional equipment rental and logistics services tailored for event management including sports, cultural, and corporate events. The company positions itself as a unique point of entry offering a broad range of equipment and services with international reach and 24/7 support. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with the parent company. Technically, the site leverages modern frameworks such as SAP Hybris and integrates third-party services like Algolia for search and Insider for marketing analytics. Security posture is adequate with HTTPS implied and cookie consent implemented, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but is mitigated by strong brand association and comprehensive legal documentation. Overall, the site is well-positioned to serve its target audience effectively while maintaining good privacy compliance.

L

Loxam

loxam-access.com

65

Loxam Access is a professional equipment rental subsidiary of Groupe LOXAM, serving sectors such as construction, industry, and services primarily in France. The website offers a comprehensive catalog of rental equipment including aerial platforms, handling machinery, and environmentally friendly options, supported by expert advice and local agency presence. The company holds certifications such as Qualiopi, reinforcing its professional standing. Technically, the website is built on SAP Hybris Commerce platform with modern JavaScript libraries and features like Algolia search and slick carousels. It is mobile optimized and includes accessibility features, though some improvements could be made. Security posture is strong with HTTPS and secure forms, but lacks explicit security headers and incident response information. The WHOIS data is missing or unavailable for the domain www.loxam-access.com, which is unusual for a commercial site and lowers trust slightly. However, the website content, branding, and external references strongly indicate legitimacy and association with Groupe LOXAM. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, functional, and trustworthy with minor technical and transparency improvements recommended.

R

Radio France

radiofrance.fr

71

Radio France is a major French public broadcasting organization offering live radio streaming, podcasts, and replay services across multiple branded stations such as France Inter, franceinfo, France Culture, and others. The website demonstrates a high level of digital maturity with modern technologies like SvelteKit, performance monitoring via Akamai mPulse, and privacy consent management through Didomi. The content is rich, professionally presented, and well-structured for accessibility and SEO. Security posture is strong with HTTPS enforcement and privacy mechanisms, though explicit privacy and terms policies are not found in the provided content. The absence of WHOIS data is a notable gap that affects domain trust but does not detract from the evident legitimacy of the brand and content.

W

WorldSkills France

worldskills-france.org

58

WorldSkills France is a well-established non-profit organization dedicated to promoting vocational training and technical skills among youth in France. The organization hosts national and international competitions to showcase excellence and passion in various trades, emphasizing inclusion and diversity. The website is professionally designed, content-rich, and highly accessible, targeting students, educators, and professionals in technical fields. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, featuring good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are not visibly implemented. The absence of WHOIS data due to privacy protection slightly reduces transparency but is justified for this type of organization. Overall, the site demonstrates a strong digital presence with good trust indicators and partner ecosystem.

M

MASE FRANCE et INTERNATIONAL

mase-asso.fr

53

MASE FRANCE et INTERNATIONAL operates as a certification network specializing in health, safety, and environmental management systems for industrial and service companies. Established in 2013, it has a medium-sized presence primarily in France with international reach. The organization provides pragmatic SSE certification, training through MASE Académie, and facilitates sharing of best practices to reduce workplace accidents. The website is professionally designed using WordPress with modern plugins and offers multilingual downloadable resources. Social media engagement is active across LinkedIn, Twitter, Instagram, and YouTube. Technically, the site uses HTTPS with good SSL configuration and includes a cookie consent mechanism, but lacks explicit privacy and terms of service policies. Security headers are not detected, and no incident response or vulnerability disclosure policies are published, indicating areas for improvement in security posture and compliance. Overall, the website is trustworthy and credible but would benefit from enhanced transparency and security documentation.

É

Élection du Service Client de l'Année

escda.fr

53

Élection du Service Client de l'Année is a French organization that independently evaluates and awards companies and public services for excellence in customer service. Established in 2013, it operates a recognized label and organizes annual events to promote quality in customer relations. The website serves as an information portal for candidates, consumers, and partners, offering news, laureate listings, and international links. Technically, the site uses a modern stack including jQuery, Bootstrap, and Google Analytics, hosted by OVH, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and reCAPTCHA, though lacking advanced security headers and explicit incident response policies. Privacy compliance is basic but includes cookie consent and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

N

NürnbergMesse China Co., Ltd.

ipbexpo.com

43

The IPB Expo website represents a well-established exhibition platform focused on powder, bulk solids, and fluid processing industries in China. Jointly organized by NürnbergMesse China and the Chinese Society of Particuology, it serves as a leading one-stop purchasing and networking platform for exhibitors and trade visitors across multiple industrial sectors including chemicals, energy, pharmaceuticals, and food. The website provides comprehensive information about the event, exhibitors, product ranges, and related conferences, reflecting a mature business model with a strong market position in China. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Swiper.js for UI components and Baidu Analytics for tracking. Hosting is provided by Alibaba Cloud, consistent with the domain registration data. The site is mobile optimized and offers a good user experience, though some SEO and accessibility features could be improved. Performance is moderate, with deferred loading of scripts and optimized images. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC is not enabled. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are gaps in compliance and security posture. The WHOIS data confirms the domain is legitimate, long-standing, and consistent with the business claims, enhancing trustworthiness. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, security hardening, and transparency regarding data protection and incident response to improve trust and regulatory adherence.

N

NuernbergMesse India Pvt Ltd

indexplus.in

58

INDEXPLUS is a leading international trade fair platform in India specializing in furniture, interiors, architecture, and design. It serves as a key marketplace for suppliers and buyers, offering exhibitions, conferences, and networking opportunities. The website is professionally designed with a consistent brand presence and rich content including testimonials and partner logos, targeting industry professionals and exhibitors. Technically, the site uses ASP.NET WebForms with modern front-end libraries and tracking tools, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements like CSP headers and vulnerability disclosure could enhance it further. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and transparent contact information.

M

MedtecLIVE

medteclive.com

70

MedtecLIVE operates as a leading European trade fair and digital content platform focused on the medical technology industry. It provides a comprehensive business directory, news, events, and networking opportunities tailored for medical technology professionals and companies. The platform is well-positioned in the healthcare and manufacturing sectors, targeting industry stakeholders seeking innovation and market insights. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and features a professional design with clear navigation. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although explicit security headers and incident response policies are not published. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and functionality of the site. Overall, the website demonstrates a mature digital presence with moderate to good security and privacy compliance.

Mitsubishi Heavy Industries operates a dedicated career website providing job search and talent acquisition services globally. The company is a large multinational enterprise with over 130 years of history, offering products and services in sectors including commercial aviation, energy, transportation, machinery, defense, and space systems. The website leverages the SAP SuccessFactors platform for career management, ensuring a professional and functional user experience. The site is well-branded, mobile-optimized, and includes cookie consent mechanisms and links to comprehensive privacy and terms policies. Security posture is solid with HTTPS enforced and anti-clickjacking measures, though some security headers and explicit security policies are absent. Overall, the site is trustworthy and professionally maintained, supporting MHI's global recruitment efforts.

UXtweak is a technology company providing a comprehensive UX research and usability testing platform designed to support research teams across enterprises, startups, and agencies. Their platform offers a wide range of tools including participant recruitment, moderated and unmoderated studies, session recording, and live interviews, positioning them as a competitive player in the UX research SaaS market. The website demonstrates strong branding, professional design, and clear navigation, targeting UX professionals and organizations seeking efficient user research solutions. Technically, the site leverages modern JavaScript frameworks (Vue.js and Quasar), is well optimized for performance and mobile devices, and employs robust security measures including HTTPS and multiple security headers. Privacy and compliance are well addressed with comprehensive policies and certifications such as ISO 27001 and SOC2 Type II. However, the WHOIS data is missing or unavailable, which is unusual but not necessarily indicative of illegitimacy given the site's maturity and trust signals. Overall, UXtweak presents a secure, professional, and privacy-conscious digital presence with a strong market position in UX research tools.

M

Mitsubishi Heavy Industries, Ltd.

mhi.com

74

Mitsubishi Heavy Industries, Ltd. is a large multinational manufacturing and engineering conglomerate headquartered in Japan, with a global presence and diversified business sectors including energy, transportation, aerospace, and defense. The company provides a wide range of industrial products and solutions targeting global industrial customers, investors, and partners. The website reflects a mature digital presence built on Drupal 10, featuring comprehensive navigation, social media integration, and consent management mechanisms. Security posture is strong with HTTPS and consent tools, though explicit security policies and vulnerability disclosure programs are not evident. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include enhancing transparency with published privacy and security policies and adding security headers to improve defense-in-depth.

A

Affordable Housing Initiative European Partnership

shape-affordablehousing.eu

47

The Affordable Housing Initiative European Partnership is a medium-sized, EU co-funded accelerator program focused on social and affordable housing renovation and energy transition across Europe. Led by Housing Europe and partnered with key organizations, it provides tailored guidance, financial advice, mentorship, and capacity-building to local authorities and housing actors. The website is professionally designed, content-rich, and well-structured, targeting stakeholders involved in housing and energy efficiency. Technically, the site runs on WordPress with modern plugins and integrates Google services for analytics and maps. Security posture is strong with HTTPS and reCAPTCHA, though cookie consent and explicit security policies are missing. WHOIS data confirms domain legitimacy and consistency with the project's timeline and location. Overall, the site demonstrates a high level of business credibility and technical maturity with minor areas for privacy and security policy improvement.

B

Built4People

built4people.eu

44

Built4People is a European partnership under Horizon Europe focused on accelerating people-centric innovation for a sustainable built environment. It coordinates multiple projects in climate, energy, and mobility sectors with significant EU funding and a broad network of over 250 organizations. The partnership operates with structured governance including a Partnership Board, Stakeholders Forum, and States’ Representatives Group, emphasizing collaboration and innovation acceleration. Technically, the website is built on WordPress with a modern theme and plugins, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and secure forms, though lacking explicit security headers and a cookie consent mechanism. The WHOIS data is transparent and consistent with the business claims, enhancing trust. Overall, the website is professional, informative, and credible, though improvements in privacy compliance and security headers are recommended.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is a local browser-generated page displayed when a requested website cannot be loaded. There is no actual website content, business information, or external resources accessible. Consequently, no meaningful business or security posture can be assessed. The page is a technical placeholder with embedded Chromium scripts for the offline dinosaur game, but it does not represent a legitimate external website or domain.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual accessible website. Consequently, no business-related content, metadata, or contact information is available for review. The page primarily contains embedded scripts and styles related to the Chromium offline dinosaur game, indicating that the browser failed to load the intended website content. Due to this, the technical infrastructure and digital maturity cannot be assessed, and no security policies or compliance information are present. Overall, the site is inaccessible for meaningful analysis, resulting in a low trust and security posture score.

E

EGEC, the European Geothermal Energy Council

gogeothermal.eu

49

EGEC, the European Geothermal Energy Council, is a well-established non-profit organization dedicated to promoting geothermal energy across Europe and globally. Founded in 1998, it serves as a key advocate and resource hub for geothermal heating, cooling, electricity, financing, socio-environmental aspects, and research innovation. The website reflects a professional and consistent brand image, targeting industry stakeholders, researchers, policymakers, and the interested public. It offers comprehensive resources, project information, and event updates to support the geothermal sector's growth. Technically, the website is built on WordPress with modern libraries such as Bootstrap and Owl Carousel, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Mailchimp indicates active marketing and analytics efforts. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. Privacy compliance is partial; while cookie and terms policies exist, no explicit GDPR consent mechanism or privacy policy is clearly presented. Contact information is limited to an email address and a contact form, with no phone or physical address provided. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

E

European Technology and Innovation Platform on Renewable Heating and Cooling

rhc-platform.org

52

The European Technology and Innovation Platform on Renewable Heating and Cooling (RHC) is a specialized platform that unites stakeholders from biomass, geothermal, solar thermal, and heat pump sectors to promote renewable energy technologies for heating and cooling. The platform serves as a collaborative hub for experts, investors, and policymakers, offering strategic guidance, policy support, and project acceleration services. The website reflects a medium-sized, well-branded organization with a clear focus on the energy sector in Europe, founded around 2019. Technically, the website is built on WordPress with modern JavaScript frameworks such as React and uses Yoast SEO for optimization. It integrates Google Analytics for visitor tracking and employs HTTPS with good SSL configuration. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. The technical stack is modern but could benefit from enhanced security headers and more comprehensive privacy compliance. From a security perspective, the site enforces HTTPS and uses nonce tokens for AJAX requests, indicating some security best practices. However, it lacks explicit security headers and does not provide clear privacy or cookie policies, which are critical for GDPR compliance. The absence of WHOIS registrant data reduces domain trustworthiness, though the website content and structured data suggest legitimacy. Overall, the site is functional, professional, and relevant to its sector but should improve privacy disclosures, security headers, and WHOIS transparency to enhance trust and compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response contacts, and regularly auditing third-party scripts.

ETIP-Geothermal is a European stakeholder platform endorsed by the European Commission to accelerate geothermal technology development across Europe. It serves as a collaborative forum for industry, academia, and research centers to reduce costs and promote innovation in geothermal energy. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, and it integrates Google Analytics and Tag Manager for user tracking with appropriate cookie consent mechanisms. The site is well-structured, professionally designed, and provides comprehensive content including events, news, and working group information. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is strong with clear policies and consent banners. Overall, the site reflects a credible and trustworthy organization with active community engagement and EU funding support.

E

European Geothermal Congress

europeangeothermalcongress.eu

50

The European Geothermal Congress 2025 website serves as the official platform for a major event focused on the geothermal energy sector in Europe. It provides comprehensive information about the congress, including programme details, sponsorship and exhibition opportunities, and registration. The site targets industry professionals, researchers, policymakers, and financiers interested in geothermal energy and the energy transition. The business model revolves around event organization, sponsorship, and networking facilitation within the energy sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Contact Form 7, and Mailchimp integration for mailing list management. The site is well-structured, mobile-optimized, and uses HTTPS with a good SSL configuration. However, some security best practices like security headers and explicit security policies are missing. From a security perspective, the site has a solid foundation with HTTPS enabled and no visible vulnerabilities or WAF blocking. However, it lacks published security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and user trust. The absence of direct contact emails and phone numbers limits immediate contact options but the presence of a contact form provides a communication channel. Overall, the website is professional and trustworthy, with good content quality and technical implementation. To enhance security posture and privacy compliance, it is recommended to implement security headers, publish security and incident response policies, and introduce a cookie policy with consent mechanisms. These improvements will strengthen user trust and regulatory compliance.

P

Penrose CDB

penrose-cdb.com

48

Penrose CDB is a specialized digital, design, and communication agency focused on serving cause-driven organizations. Their services include branding, strategy, digital development, and video production, targeting NGOs and socially conscious clients. The website is professionally designed using WordPress and Elementor, showcasing a portfolio of projects and client logos, indicating a credible market presence. Technically, the site uses modern web technologies and is mobile-optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and professional website mitigates some risk. Overall, the site is functional and credible but could improve in privacy compliance and security best practices.

E

Eurelectric

elda.energy

64

The website electricity-data.eurelectric.org is a data platform operated by Eurelectric, providing comprehensive electricity generation data by fuel type across multiple European countries including the EU, Norway, the UK, and Switzerland. It offers real-time and historical data on electricity demand, cross-border flows, prices, and installed capacity, targeting energy sector professionals, policymakers, researchers, and the public. The platform supports data visualization and free downloads, positioning itself as a trusted source within the energy industry. Technically, the site uses modern frontend technologies such as Bootstrap and Google Tag Manager, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. However, the absence of detected security headers and unknown SSL configuration suggest room for improvement in security posture. The WHOIS data is unavailable due to a malformed or restricted WHOIS response, limiting full trust verification of domain registration details. Privacy and cookie policies are not found, which impacts compliance assessment negatively. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

W

Web Bay

webbaysolutions.com

48

Web Bay is a specialized digital agency founded in 2012, focusing on providing web design, branding, digital transformation, and communication support services primarily to associations, non-profit organizations, and EU-funded projects. The company positions itself as a niche expert with a strong portfolio and client testimonials that emphasize reliability, remote collaboration, and continuous support. Their market presence is centered in Brussels and Belgrade, serving international clients with a tailored approach to digital challenges in the EU projects and NGO sectors. Technically, the website is built on TYPO3 CMS with a modern tech stack including jQuery and various UI libraries, delivering a professional and responsive user experience. Security posture is solid with HTTPS and domain protection statuses, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but lacking a formal privacy policy or terms of service. Overall, the website reflects a credible and professional digital agency with room for enhanced security and compliance documentation.

S

Synergy BV

enlit.world

66

Enlit World is a professional media and community platform focused on the energy transition sector, operated by Synergy BV, a company registered in the Netherlands. The platform offers a wide range of services including news, industry reports, directories, podcasts, and events that serve energy professionals and stakeholders globally. The website is well-structured, with consistent branding and a clear focus on energy and transport sectors. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

F

FeedGrabbr

feedgrabbr.com

67

FeedGrabbr is a small technology company founded in 2012 that provides customizable RSS and Instagram feed widgets for websites. Their service targets website owners and developers who want to easily add dynamic content feeds without coding. The website is built on WordPress with Elementor and integrates Google Analytics for visitor tracking. A cookie consent mechanism is implemented, reflecting basic privacy compliance efforts. However, no explicit privacy policy, terms of service, or contact information are found on the homepage, which limits transparency. The domain registration is consistent and stable, supporting legitimacy. Technically, the site uses modern web technologies and is mobile optimized, but lacks some security headers and DNSSEC.

L

Latvijas Bankas Naudas skola

naudasskola.lv

58

Latvijas Bankas Naudas skola is an official educational website operated by Latvijas Banka, aimed at improving financial literacy among Latvian citizens, including students and teachers. The platform offers a wide range of resources such as budgeting tools, savings and investment information, insurance, credit guidance, fraud awareness, games, podcasts, videos, and infographics. The website is well-branded, professionally designed, and provides comprehensive content in the Latvian language. Technically, it is built on Drupal 10 and integrates modern analytics and user experience tools like Google Analytics, Microsoft Clarity, Hotjar, and ReadSpeaker, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs security headers, and uses cookie consent mechanisms, reflecting good security hygiene. However, the absence of explicit contact information and terms of service pages, along with unavailable WHOIS data due to query limits, slightly reduce the overall trust score. Overall, the site presents a low-risk profile with strong educational and governmental backing.

L

Latvijas Banka

e-monetas.lv

69

The website www.e-monetas.lv serves as the official e-commerce platform for Latvijas Banka, offering commemorative and collection coins to collectors and the general public. It positions itself as the authoritative source for Latvian coin collections, providing detailed product information, news updates, and purchasing capabilities. The site targets coin enthusiasts and investors interested in Latvian numismatics, operating under a retail e-commerce business model with a medium-sized organizational footprint. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, Google reCAPTCHA v3, and various UI libraries such as Slick Carousel and Fancybox. The platform appears custom-built or uses a proprietary CMS, with moderate performance and good mobile optimization. SEO and accessibility are basic but functional. Security measures include HTTPS enforcement and bot protection via reCAPTCHA, though HTTP security headers are not explicitly detected. Security posture is solid with no critical vulnerabilities observed, but improvements are recommended in publishing security policies, incident response information, and security.txt files. Privacy compliance is basic with a clear privacy policy and cookie consent mechanism, but lacks detailed GDPR compliance disclosures. Business credibility is high due to official branding, clear contact information, and trust signals. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data limits domain registration verification. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party libraries for vulnerabilities.

L

Latvijas Banka

makroekonomika.lv

72

The website makroekonomika.lv is an official macroeconomic analysis platform maintained by Latvijas Banka, the central bank of Latvia. It provides a comprehensive range of economic articles, expert commentary, research publications, forecasts, and educational resources targeted at economists, researchers, students, and policymakers. The site is well-positioned as a trusted government source for macroeconomic data and analysis in Latvia. Technically, the site is built on Drupal 10 CMS and incorporates modern web technologies including jQuery, Google Tag Manager, Hotjar for analytics, and Highcharts for data visualization. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate with asynchronous loading of scripts and lazy loading of images. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. While explicit security headers are not fully visible in the HTML, the overall posture is good with no exposed sensitive data or vulnerabilities detected. The absence of WHOIS data limits domain trust analysis, but the strong affiliation with Latvijas Banka and professional presentation support legitimacy. Overall, makroekonomika.lv is a high-quality, authoritative resource for macroeconomic information in Latvia with a solid technical foundation and good security and privacy practices. Continued monitoring of security headers and third-party scripts is recommended to maintain security posture.

M

MQL5

mql5.com

70

MQL5.com is a comprehensive platform and community hub for algorithmic trading using the MetaTrader 5 platform. It offers a marketplace for automated trading applications, trading signals, freelance programming services, VPS hosting, and educational content. The platform targets traders and developers interested in automated forex and financial trading solutions. Technically, the website employs modern web technologies with good performance and mobile optimization. Security posture is strong with HTTPS and some security headers, but lacks explicit privacy and cookie policies. WHOIS data is unavailable, which slightly reduces trust but does not detract from the platform's legitimacy given its extensive content and community presence.

D

Dukascopy Bank

dukascoin.com

66

Dukascoin.com is the official website for Dukascoin (DUK+), a cryptocurrency project issued by Dukascopy Bank, a reputable Swiss financial institution. The site promotes the cryptocurrency with features such as free initial coins, staking rewards, and integrated banking services including multi-currency accounts and crypto lending. The business model leverages the trust and regulatory compliance of a Swiss bank to position Dukascoin as a credible crypto asset in the finance sector. Technically, the website uses standard web technologies including jQuery and Google Analytics, hosted on AWS infrastructure, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain locked with multiple prohibitions, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security policies.

D

Domains By Proxy, LLC (registrant proxy)

911p2p.io

44

911 Crypto P2P operates as a peer-to-peer cryptocurrency exchange platform specializing in fiat settlement for crypto transactions. The website targets cryptocurrency traders seeking direct exchange services with fiat currency integration. Positioned as a niche player in the crypto finance sector, it leverages partnerships with related financial and crypto services such as Dukas.io and Dukascoin. The platform was established in 2021 and maintains a modern, mobile-optimized web presence with consistent branding and moderate trust indicators.

D

Dukascopy Bank

dukas.io

64

Dukascopy Bank operates a specialized crypto services platform offering clients the ability to buy, sell, store, and trade cryptocurrencies, including their proprietary Dukascoin. The bank leverages its Swiss regulatory status and FINMA authorization to provide fiduciary custody and blockchain operations, positioning itself as a pioneer in regulated crypto banking. The website reflects a mature digital infrastructure with integration of Google Tag Manager and AWS hosting, delivering a professional and mobile-optimized user experience. Security posture is solid with HTTPS and domain protections, though improvements such as DNSSEC and explicit security policies are recommended. Privacy compliance is currently weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and well-branded but would benefit from enhanced transparency and security disclosures.

D

Dukascopy Bank SA

dukascopy.bank

72

Dukascopy Bank SA is a Swiss financial institution offering a broad range of banking services including multi-currency accounts, private and corporate banking, investment options, and payment card solutions. The bank emphasizes Swiss precision and innovation, providing a mobile app for seamless banking access. The website reflects a mature digital presence with professional design and comprehensive content targeting individuals and businesses seeking Swiss banking services. Technically, the site employs modern JavaScript libraries, analytics tools, and security best practices including HTTPS and security headers. However, public WHOIS data is unavailable due to .bank domain privacy policies, which is typical for regulated banking domains. The security posture is strong with no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.