Security Directory

The website roskildebank.dk currently serves as a placeholder page hosted by Dandomain A/S, a Danish web hosting and e-commerce service provider established in 1996. The site does not contain any content related to Roskilde Bank itself, but rather displays branding and contact information for Dandomain A/S. The business focus of the hosting provider includes web hosting, domain registration, webshop solutions, and related IT services targeted primarily at Danish businesses and individuals. From a technical perspective, the website is minimalistic, built with basic HTML and CSS, and lacks modern web technologies or CMS platforms. The site shows basic mobile responsiveness but lacks advanced SEO, accessibility features, and performance optimizations. No analytics or tracking technologies are detected, indicating minimal data collection. Security posture is weak due to absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present to indicate GDPR compliance. The WHOIS data confirms the domain is registered to Dandomain A/S with a long history, supporting legitimacy. However, the lack of business-specific content and security best practices suggests the domain is not actively used for business operations currently. Overall, the site is low risk but also low value from a security and compliance perspective. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving security headers, and developing actual business content to enhance trust and compliance.

The website logimatic.com currently serves as a minimal redirect page informing visitors that Logimatic has transitioned to initgroup.io. The page contains no detailed business information, contact details, or policies, limiting the ability to assess the company's full scope or market position. The domain is well-established, registered since 1999, indicating a mature presence, but the current site content is basic and primarily functional as a redirect. Technically, the site uses simple HTML and CSS with Google Fonts, hosted by One.com A/S. There are no detected scripts, analytics, or advanced frameworks, reflecting a low digital maturity level. The site is mobile responsive and loads moderately fast but lacks SEO optimization and accessibility features. From a security perspective, the site uses HTTPS (implied by domain and modern standards), but no security headers or DNSSEC are enabled. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy, cookie, and incident response policies indicates compliance gaps. No contact or incident response channels are provided, which reduces trust and user assurance. Overall, the website poses a low risk but also offers limited business and security transparency. Strategic improvements in policy publication, contact availability, and security hardening are recommended to enhance trust and compliance.

M

Mediaxpress

mediaxpress.dk

54

Mediaxpress is a well-established Danish media house specializing in the construction and civil engineering sector. With over 30 years of experience, it publishes several trade magazines and online media targeting professionals such as architects, engineers, contractors, and producers. The company offers marketing and communication services leveraging journalistic content, graphic design, and digital marketing to enhance client visibility within a defined B2B audience. Their market position is strong within their niche, supported by multiple media brands and a loyal readership. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Swiper sliders. It uses Amazon CloudFront for content delivery and integrates Google Tag Manager for analytics and marketing tracking. The site is mobile responsive and well-structured, though no explicit CMS is detected. Performance is moderate with good SEO practices but basic accessibility features. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. There is no visible privacy or cookie policy, which is a compliance gap given GDPR requirements. Contact information is comprehensive and transparent, but no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy with good business credibility. However, improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

F

Fredericia Spildevand og Energi A/S

frse.dk

64

Fredericia Spildevand og Energi A/S is a municipal utility company based in Denmark, specializing in the transport, treatment, and energy production from wastewater within Fredericia Kommune. The company operates as a key player in the local water cycle, providing essential environmental and energy services to residents and businesses in the region. Their website reflects a professional and consistent brand presence, targeting local customers with clear service information and support channels. Technically, the website is built on modern web technologies including Alpine.js and Tiny Slider, with Umbraco CMS likely powering the backend. The site is mobile-optimized, accessible, and incorporates privacy-compliant analytics via Plausible. Cookie consent is actively managed with a detailed banner and declaration, supporting GDPR compliance. Performance is moderate, with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident and could be improved. There is no visible security policy or incident response contact information, which are areas for enhancement. No vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting a trustworthy user experience. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic improvements in security headers and transparency policies would further strengthen the site’s security and compliance standing.

T

TEC Technical Education Copenhagen

tec.dk

63

TEC Technical Education Copenhagen is a well-established educational institution founded in 1997, specializing in vocational and technical education in the Copenhagen region. The website presents a professional and content-rich platform targeting students and companies interested in technical training, including vocational education (EUD), technical gymnasium (HTX), and continuing education courses. The institution emphasizes practical learning and real-world skills development. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies and integrating analytics and marketing tools such as Google Tag Manager, Hotjar, and Klaviyo. The site is mobile-optimized and provides clear navigation and structured content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks DNSSEC and visible security headers, and does not publish explicit security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy and trustworthiness.

N

Nordic Star

nordicstar.dk

52

Nordic Star is a Denmark-based destination management company specializing in group and individual travel services across the Nordic countries and the Baltics. Established in 2011, the company offers personalized travel itineraries and expert destination advice, positioning itself as a specialist DMC in its niche market. The website reflects a professional and consistent brand image, with clear navigation and relevant content targeting travel groups and FIT travelers interested in Nordic and Baltic destinations. Technically, the site is built on the One.com Web Editor platform, utilizing standard web technologies and Google Fonts, hosted by One.com. Performance is moderate with good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled and a contact form employing anti-spam measures, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of privacy and cookie policies, representing a compliance risk. The site uses SiteWit analytics for user tracking at a moderate level. Overall, Nordic Star demonstrates strong business credibility with awards and clear contact information but should improve privacy compliance and security hardening to reduce risk and enhance trust.

F

dynamic-linx.com

fermbiotics.com

57

The website dynamic-linx.com, hosted on the subdomain ww53.dynamic-linx.com, presents minimal content primarily focused on displaying advertisements via Google Ad Services. There is no identifiable business information, contact details, or meaningful content describing any products or services. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or a placeholder subdomain, which raises significant legitimacy concerns. Technically, the site uses basic HTML, CSS, and JavaScript with Google ad scripts but lacks HTTPS and security headers, which are critical for secure web presence. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site exhibits a low security posture and poor business credibility, suggesting it is likely a parked or ad-serving domain rather than a legitimate business website.

A

altiadenmark.com

altiadenmark.com

49

The website altiadenmark.com is a newly registered domain (June 2024) currently serving as a parked domain with advertising content primarily from Google Adsense and Bodis. There is no substantive business content, contact information, or branding present, indicating it is not actively used for commercial or organizational purposes. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. Security posture is minimal with HTTPS enabled but lacking security headers and DNSSEC, and no privacy or cookie consent mechanisms are implemented. Overall, the site presents a low trust profile with limited compliance and no visible business credibility indicators.

The website spasupply.dk is currently a parked domain primarily used for domain resale purposes. It lacks any active business content, contact information, or clear branding. The site is minimalistic, serving mostly advertising and domain sale links, targeting potential domain buyers or investors. The technical infrastructure relies on basic HTML and JavaScript with third-party advertising scripts and Amazon Cloudfront CDN for content delivery. Mobile optimization and accessibility are basic but functional given the limited content. Security posture is weak due to absence of HTTPS information, security headers, and no visible security policies or incident response details. Privacy compliance is minimal with only a basic privacy policy accessible via a popup and no cookie consent mechanism. Overall, the site presents a low trust profile and limited business credibility.

B

BTX Group A/S

btx-group.com

68

BTX Group A/S is a well-established Scandinavian fashion supplier specializing in women's clothing, operating primarily through wholesale, retail, and private label business models. The company leverages over 85 years of experience in design and quality, positioning itself as a leading player in the Scandinavian fashion retail sector. Their website reflects a professional e-commerce presence built on the Shopify platform, targeting fashion-conscious women in the region and beyond. The site offers a clear brand portfolio and retail channels, supporting their market position effectively. Technically, the website is built on a modern Shopify infrastructure using the Dawn theme, with good mobile optimization and moderate performance. The use of Shopify's CDN and analytics tools indicates a mature digital infrastructure. SEO and accessibility are adequately addressed, though accessibility could be improved further. The site employs HTTPS with a good SSL configuration, but lacks DNSSEC and some advanced security headers. From a security perspective, the site demonstrates solid baseline protections including HTTPS enforcement and domain transfer locks. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a GDPR-compliant privacy policy and cookie consent mechanism in place. Overall, BTX Group's website is a credible, professional, and secure platform supporting their retail business. Strategic improvements in security transparency and DNS security would enhance their posture further.

C

Caljan

caljan.com

62

Caljan is a well-established company specializing in logistics automation technology since 1963. They serve parcel carriers, retailers, and manufacturers worldwide by providing custom-built logistics equipment and solutions to optimize supply chains, increase throughput, reduce costs, and improve workplace ergonomics and safety. The company operates globally with multiple production facilities and an international organizational structure. Their website reflects a professional B2B business model focused on transportation and manufacturing sectors. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for privacy compliance. The site is hosted via GoDaddy and uses HTTPS with good SSL configuration. The site is mobile optimized and has good SEO and accessibility features, although no CMS or specific frameworks were detected. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS, uses secure cookies including CSRF tokens, and implements a comprehensive cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. Overall, Caljan's website demonstrates a strong security posture and privacy compliance aligned with industry standards. The business credibility is supported by a long domain age and consistent registration data. Recommendations include enabling DNSSEC, publishing terms of service and security policies, and adding a vulnerability disclosure mechanism to further enhance trust and compliance.

Microsys is a Danish software development company established in 1978, specializing in SEO tools, software applications, and web solutions. Their product suite includes the A1 Webmaster and SEO Tools and the all-in-one TechSEO360 software, targeting webmasters, website owners, and search marketers primarily on Windows and Mac platforms. The company is family owned and emphasizes long-term stability and continuous product development. Technically, the website is built with standard HTML, CSS, and JavaScript, offering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy and cookie policies exist but lack active consent mechanisms. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and business information appear professional and consistent with a long-established company. Overall, the site scores well on business credibility and content quality but should improve security and privacy compliance to enhance trust.

D

Danoffice IT

danoffice.com

77

Danoffice IT is a well-established supplier of IT infrastructure serving both public and private sectors globally, with a strong focus on international governmental and non-governmental organizations. The company positions itself as a leading provider in its niche, offering comprehensive IT solutions and infrastructure services. The website reflects a professional and consistent brand image, targeting a specialized audience with clear business offerings. Technically, the site employs modern web technologies including lazy loading, cookie consent management, and Matomo analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and implements privacy compliance mechanisms, though it lacks a publicly visible security policy or incident response details. The absence of WHOIS data for the domain is a notable concern, impacting the trustworthiness of the domain registration information. Overall, the website is professional and secure, but domain registration transparency should be improved to enhance trust.

DRIVE business is a Danish exclusive business network that connects companies and business leaders around the shared passions of golf and business. The website presents a professional and consistent brand focused on organizing business and golf events, fostering long-term relationships, and providing unique networking opportunities. The target audience is business leaders and decision makers interested in combining business growth with golf activities. The business model is membership-based, emphasizing exclusive experiences and business development through events and partnerships. Technically, the website uses standard HTML, CSS, and JavaScript with a moderate performance profile and good mobile optimization. There is no clear CMS or advanced frameworks detected. SEO and navigation are well implemented, though accessibility features are basic. The site is fully accessible without any WAF or blocking mechanisms. From a security perspective, HTTPS is assumed but no explicit security headers or policies are visible. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies exist but lack an explicit consent mechanism. No incident response or security policy pages are found. Contact information is clearly provided, enhancing trust. Overall, the security posture is moderate but could be improved with better headers and explicit policies. The overall risk is low given the business nature and content, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

E

Elmer Systems

elmersystems.dk

53

Elmer Systems is a Denmark-based software company specializing in CRM and integrated business management solutions tailored for various industries including catering, insurance, retail, and entrepreneurship. Their offerings include a comprehensive CRM system compatible with multiple platforms (Mac, Windows, iPhone, iPad) and modules for accounting integration, forecasting, and specialized business needs. The company positions itself as a niche provider with a strong focus on customization and modularity, supported by detailed product documentation and client-oriented services. Technically, the website is built using One.com Web Editor and hosted on One.com infrastructure. The site demonstrates moderate performance and basic mobile optimization. While the content is well-structured and professionally presented, there is room for improvement in SEO, accessibility, and modern web practices. No advanced frameworks or analytics tools are detected, indicating a relatively simple technical stack. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, which could be a concern for security-conscious clients. The absence of tracking scripts suggests minimal user data collection, but also a lack of marketing analytics. Overall, Elmer Systems presents a credible and professional business with a solid product offering. However, to enhance trust and compliance, the company should implement comprehensive privacy and cookie policies, improve security headers, and provide clear incident response contacts. These steps will strengthen their security posture and align with regulatory requirements.

E

ELCON

frandsen-el.dk

71

ELCON is a large Danish energy sector company specializing in electrical installations, energy optimization, and green technology solutions primarily serving eastern Denmark. The company offers a broad range of services including traditional electrical work, automation, intelligent building solutions, and 24-hour emergency electrician services. Their market position is strong with over 1,100 employees and a focus on sustainable energy solutions. Technically, the website is well-structured, mobile-optimized, and uses modern technologies such as Google Tag Manager for analytics and marketing. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and incident response contacts are not explicitly provided. Privacy compliance is adequate with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the website reflects a professional and trustworthy business with minor areas for improvement in privacy and security transparency.

P

Peab

peabasfalt.dk

66

Peab Asfalt is a regional construction and infrastructure company specializing in asphalt production and laying services for roads, motorways, bridges, and specialized industrial applications. Operating across Nordic countries with a workforce of approximately 16,000, the company emphasizes local resource utilization and sustainability initiatives such as eco-asphalt and certified biogas. The website reflects a mature digital presence with comprehensive service descriptions and a clear focus on sustainability and social responsibility. Technically, the site employs modern web technologies including asynchronous loading of marketing and tracking scripts, cookie consent management via OneTrust, and uses HTTPS with good SSL configuration. Security posture is solid though could be improved with enhanced security headers and explicit incident response policies. The domain registration is consistent with the business profile, showing no suspicious patterns and appropriate domain age. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

M

Meta

baubaushop.com

80

Instagram, owned by Meta, is a leading global social media platform that enables users to share photos, videos, and stories. The platform targets a broad audience including individuals, content creators, and businesses, operating primarily on an advertising-based business model. The login page analyzed is professionally designed, mobile-optimized, and secure, reflecting Instagram's high digital maturity and technical infrastructure built on modern web technologies such as React and JavaScript. Security measures include HTTPS enforcement and comprehensive security headers, contributing to a strong security posture. Privacy policies and terms of service are clearly linked and GDPR compliant, supporting robust privacy compliance. Overall, Instagram demonstrates a high level of trustworthiness and professionalism, with no critical vulnerabilities detected in the analyzed content.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No business-related information, contact details, or policies are present. The page serves as a placeholder or error display within the browser rather than a functional website. Consequently, no meaningful business overview or market positioning can be derived. The technical infrastructure is limited to basic HTML, CSS, and JavaScript related to the Chrome offline error page, with no external hosting or CMS detected. Security posture is minimal, with no HTTPS or security headers evident, and no privacy or cookie policies found. Overall, the site is non-functional for end users and does not provide any business or security assurances.

The website picca.dk currently serves as a minimal placeholder page indicating that the company Picca has transitioned or rebranded to initgroup.io. The domain is longstanding, registered since 1996, and remains active, which supports the legitimacy of the business. However, the website itself contains no substantive business content, contact information, or security and privacy policies, limiting its utility for visitors seeking detailed information. The technical infrastructure is basic, with a simple HTML/CSS design and no detected CMS or advanced frameworks. Mobile optimization is adequate but minimal. Security posture is weak due to lack of security headers, DNSSEC, and privacy compliance indicators. No analytics or tracking technologies are present, indicating minimal data collection and user tracking. Overall, the site functions primarily as a redirect notice rather than a full business website.

N

notox.com

notox.com

51

The website notox.com is a parked domain primarily monetized through advertising networks such as Google Adsense and Bodis. It lacks substantive business content, contact information, or security and privacy policies, indicating it is not an active commercial site. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with domain parking services. Security posture is minimal with HTTPS enabled but no advanced security headers or DNSSEC. Privacy compliance is weak, with no cookie consent mechanisms or GDPR indicators. Overall, the site presents low business credibility and trustworthiness, suitable only as a parked domain generating ad revenue.

S

Sundhedsblog.dk

socialaction.dk

35

Sundhedsblog.dk is a Danish health and wellness website offering a combination of informative articles and e-commerce product sales focused on skincare, wellness, supplements, haircare, and fitness equipment. The site targets individuals seeking practical advice and products to support a healthier lifestyle. Technically, the website employs modern front-end technologies such as Bootstrap and Swiper.js, but uses an outdated jQuery version. The site is mobile optimized and well structured, providing a good user experience. Security posture is adequate with HTTPS enabled and secure form usage, but lacks important security headers and visible privacy or cookie policies, which are compliance gaps. Overall, the domain registration data aligns well with the website's claims, indicating legitimacy. The site would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

V

Viatris SIA

aizcietejums.lv

60

The website aizcietejums.lv serves as an informational and promotional platform for Duphalac, a pharmaceutical laxative product marketed by Viatris SIA in Latvia. It provides comprehensive educational content on constipation causes, symptoms, treatment options, and detailed dosage guidelines. The site targets individuals experiencing constipation, including children, adults, and pregnant women, positioning itself as a trusted source for product and health information. The business model focuses on product awareness and directing users to partner pharmacies for purchase. Technically, the site employs a traditional web stack with HTML5, CSS, JavaScript, and libraries such as jQuery 1.11.1, JWPlayer, and BxSlider for UI components. Google Tag Manager is integrated for analytics and marketing purposes. The site is mobile optimized with good SEO practices and moderate performance. However, some libraries are outdated, and accessibility features are basic. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks visible security headers and explicit security policies. No forms collecting personal data are present, reducing immediate risk exposure. Privacy and cookie policies are provided as PDFs hosted on Viatris assets, indicating GDPR compliance. No incident response or vulnerability disclosure information is found, suggesting room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and well-branded, with consistent content quality and clear navigation. The absence of direct contact information and security policies slightly limits user trust and compliance visibility. The domain registration aligns well with the business entity, supporting legitimacy. Strategic enhancements in security headers, incident response transparency, and updated technical components would strengthen the site's security posture and compliance standing.

G

Google Transparency

transparency.google

61

The Google Transparency Center website serves as a comprehensive resource detailing Google's product policies, enforcement actions, and commitment to user safety and transparency. It targets a broad audience including users, developers, creators, and researchers, providing clear and accessible information about Google's approach to policy development and enforcement. The site reflects Google's position as a global technology leader with a strong emphasis on transparency and trust. Technically, the website is built on a modern, performant infrastructure leveraging Google's internal frameworks, Google Cloud hosting, and best practices in web development including responsive design, accessibility, and SEO optimization. The use of Google Tag Manager and Analytics indicates a mature digital analytics setup. From a security perspective, the site demonstrates excellent security posture with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. However, direct contact information for security or incident response is not prominently provided. Overall, the website is highly professional, trustworthy, and secure, reflecting Google's commitment to transparency and user protection. No critical issues or blocking mechanisms were detected, allowing for a full and detailed analysis.

The analyzed website content is inaccessible and presents a Chrome internal error page, indicating the site is either down, blocked, or not properly configured. No business-related content, contact information, or policies are present, making it impossible to assess the company's operations or market position. The technical infrastructure appears to be limited to Chromium offline game scripts, with no evidence of hosting, CMS, or external integrations. Security posture is minimal with no HTTPS or security headers detected. Overall, the site lacks fundamental elements required for trust, compliance, and user engagement.

G

Groningen Store

groningenstore.nl

66

Groningen Store is a specialized e-commerce retailer offering unique Groningen-themed products including clothing, decor, and regional food items. Established in 2018, it serves local consumers and tourists interested in authentic regional merchandise. The website is built on the Shopify platform, leveraging modern web technologies and integrated marketing tools such as Google Tag Manager and Shopify analytics. The store maintains a consistent brand presence with active social media channels on Facebook and Instagram. Privacy and cookie policies are implemented with user consent mechanisms, reflecting compliance with GDPR requirements. Security posture is strong with HTTPS, DNSSEC, and form protection via hCaptcha, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a good balance of business credibility, technical maturity, and user experience.

E

Europa Cinemas

europa-cinemas.org

61

Europa Cinemas is a well-established European cinema network founded in 1992, supported by the European MEDIA Programme and CNC. It serves as a key platform for the circulation and diversity of European films, uniting over 1,200 cinemas across 39 countries. The website reflects a professional and consistent brand presence, targeting cinema operators and film professionals with services including funding, training, and collaborative projects. Technically, the site employs modern web technologies and includes a GDPR-compliant cookie consent mechanism, though some security headers are missing. The security posture is adequate but could be improved with additional headers and policies. WHOIS data is incomplete, which slightly impacts domain trust but is mitigated by the site's content and partner affiliations. Overall, the site is accessible, well-structured, and trustworthy, with room for technical and security enhancements.

M

Magyar Nemzeti Bank

mnb.hu

67

The Magyar Nemzeti Bank (MNB) is Hungary's central bank, responsible for implementing monetary policy, ensuring financial stability, and supervising banking activities. The website serves as an authoritative source of information for financial institutions, government entities, and the public interested in Hungary's financial system. The site demonstrates a professional design with clear navigation and a focus on compliance with privacy regulations, including a comprehensive cookie consent mechanism and privacy policy. Technically, the website employs modern web technologies such as Vue.js and Google Tag Manager, ensuring a responsive and moderately performant user experience. Security measures are robust, with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not prominently published. Overall, the website reflects a mature digital presence consistent with a national financial authority, with recommendations to enhance transparency around security policies and contact information to further strengthen trust and compliance.

(

(주)디케이테크인

dktechin.com

62

dk techin (디케이테크인) is a South Korean IT services company specializing in AI-driven communication platforms, digital transformation consulting, and enterprise IT solutions. Founded in 2015, the company has established a strong market position through strategic partnerships with Kakao, offering services such as Kakao Work collaboration tools, voice AI platforms, customer communication solutions, and SAP ERP integration. Their target audience includes corporate clients seeking advanced IT and AI services to enhance business operations. Technically, the website is built on modern frameworks like Nuxt.js and integrates Kakao's JavaScript SDKs, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and domain transfer protections but lacks DNSSEC and some security headers, indicating room for improvement. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the website demonstrates professionalism and trustworthiness, supported by certifications and clear business information.

P

Pixelarity

pixelarity.com

57

Pixelarity operates as a niche provider of responsive HTML5 and CSS3 website templates, offering a subscription-based model granting access to over 90 templates. The business targets web developers, designers, and clients seeking professionally coded, customizable website templates. The website is well-structured with clear navigation and mobile optimization, reflecting a moderate level of digital maturity. Technically, the site uses modern web standards and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with no cookie consent mechanism or explicit GDPR compliance statements. Overall, the site is functional and professional but could improve in privacy and security transparency.

G

Gemeente Gooise Meren

gooisemeren.nl

74

Gemeente Gooise Meren is the official municipal government website serving the residents and visitors of Gooise Meren in the Netherlands. The site provides comprehensive information and services related to passports, driving licenses, waste management, parking, moving notifications, and other local government functions. It positions itself as a trusted public service portal with clear contact channels and a focus on accessibility and user experience. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web standards and accessibility features, with moderate performance and good SEO optimization. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in explicit security headers and incident response transparency. Privacy compliance is addressed with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness appropriate for a government entity.

M

Mapillary

mapillary.com

78

Mapillary is a collaborative platform specializing in street-level imagery and mapping data, leveraging computer vision to enhance map accuracy and detail. Owned by Meta, it serves a diverse audience including GIS professionals, developers, and autonomous driving sectors. The platform offers tools for imagery hosting, traffic sign recognition, and integration with major GIS systems like ArcGIS. Technically, the website is built on modern web technologies including React and is hosted on Meta's infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but likely due to privacy or registry issues rather than malicious intent. Overall, Mapillary presents a professional, trustworthy, and technically mature web presence aligned with its business objectives.

C

CHECK24 Comparador S.L.U.

check24.es

64

CHECK24.es is the Spanish branch of CHECK24, Europe's largest price comparison platform founded in 1999 in Germany. The company offers a wide range of comparison services including car insurance, hotel bookings, car rentals, and other insurance products. It serves millions of customers seeking transparent, objective, and expert-assisted price comparisons to save time and money. The website is professionally designed, mobile-optimized, and integrates advanced tracking and analytics tools while maintaining strong privacy compliance with GDPR. Contact options and customer support are clearly presented, enhancing user trust. The absence of publicly accessible WHOIS data is due to registry restrictions for .es domains and does not detract from the site's legitimacy. Overall, CHECK24.es demonstrates a mature digital presence with robust business and technical infrastructure.

S

Sass team

sass-lang.com

51

Sass-lang.com is the official website for Sass, a mature and widely adopted CSS extension language used by web developers globally. The site provides comprehensive information about Sass's features, current releases, and community involvement. It is supported by a consortium of tech companies and a dedicated core team, positioning it as a leading technology project in the web development ecosystem. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, and leverages external services such as Google Fonts, DocSearch, and Google Analytics. Hosting is provided by Netlify, ensuring fast performance and good mobile optimization. Security-wise, the domain is stable with a long registration period and transfer protection, but lacks DNSSEC and explicit security headers. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating areas for compliance improvement. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance to align with best practices.

G

GGD Noord- en Oost-Gelderland

ggdnog.nl

73

GGD Noord- en Oost-Gelderland operates as a regional public health authority in the Netherlands, focusing on promoting health and preventing health problems among residents of the Noord- en Oost-Gelderland region. The website serves as an informational portal offering extensive health-related topics including infectious diseases, vaccinations, youth health, sexual health, and environmental health. It targets residents, healthcare professionals, municipalities, schools, and businesses within the region. The organization positions itself as a trusted public health service provider with a comprehensive range of services aimed at community well-being. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Laravel Livewire components. It integrates third-party services such as Monsido for accessibility and analytics, ReadSpeaker for text-to-speech, and Google Translate for multilingual support. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are protected with CSRF tokens, and cookie consent mechanisms comply with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and well-maintained, with a strong alignment between domain registration and business identity. Strategic recommendations include publishing detailed security and incident response policies, enhancing direct contact information visibility, and implementing a formal vulnerability disclosure process to further strengthen security posture and user trust.

G

GGD Drenthe

ggddrenthe.nl

68

GGD Drenthe is a regional public health organization serving the province of Drenthe in the Netherlands. The website provides comprehensive information about their health services including vaccination programs, child health consultations, infectious disease control, and public health education. The organization targets residents of Drenthe and operates as a government health authority with a medium-sized operational scale since 2017. The website is built on the IPROX CMS platform, tailored for government and public sector use, and demonstrates good digital maturity with responsive design, clear navigation, and relevant content. From a technical perspective, the site uses modern web technologies including JavaScript and CSS, and is hosted on a platform provided by InfoProjects bv. Performance is moderate with good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no exposed sensitive data. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies that align with GDPR requirements. Contact information is prominently displayed including phone numbers and a contact form, enhancing business credibility and user trust. No terms of service or explicit security policy pages were found, and there is no vulnerability disclosure or security.txt file, which could be areas for future enhancement. Overall, the website is professional, trustworthy, and well-suited for its public health mission. The domain registration details align with the organization's identity and location, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security and compliance posture.

B

Balcia.lv

balcia.lv

73

Balcia.lv is an established Latvian online insurance provider offering a variety of insurance products including OCTA, KASKO, accident, and travel insurance. The website targets Latvian customers seeking quick and convenient online insurance solutions. The business model focuses on digital brokerage and sales, positioning Balcia.lv as a competitive player in the Latvian insurance market. The website content is professionally presented with consistent branding and clear service descriptions. Technically, the website employs modern web technologies including JavaScript frameworks, CSS, and HTML5, supported by multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Cookiebot for cookie consent management. The site is mobile optimized and demonstrates good SEO practices. Security headers and HTTPS are properly implemented, contributing to a strong security posture. Security-wise, the site shows good practices with enforced HTTPS, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, the absence of a published privacy policy, terms of service, and explicit incident response contacts are gaps in compliance and security transparency. The extensive use of third-party tracking and advertising scripts indicates a high level of user tracking, which may require enhanced privacy disclosures. Overall, the website presents a moderate to good risk profile with solid technical and security foundations but needs improvements in privacy compliance and transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, adding a security.txt file for vulnerability disclosure, and providing clear contact information for security incidents to enhance trust and compliance.

ASISA is a leading Spanish health insurance provider offering a broad portfolio of insurance products including health, dental, life, accident, hospitalization, pet, travel, and funeral insurance. The company leverages a large network of proprietary hospitals and contracted medical centers to provide comprehensive coverage. The website is professionally designed, mobile-optimized, and built on Adobe Experience Manager, indicating a mature digital infrastructure. Analytics are implemented via Google Tag Manager, supporting moderate user tracking. Security posture is adequate with HTTPS usage but lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. WHOIS data is unavailable due to query restrictions, limiting domain legitimacy verification. Overall, the website presents a trustworthy and professional image suitable for its large customer base.

The website solidi.com is a personal homepage for the Plymouth Buckley Family, operating under the name Solidus Systems. It does not represent a commercial business entity and lacks business-related content or services. The site is built on WordPress with standard themes and plugins, hosted by InMotion Hosting. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is minimal, with HTTPS enabled but no advanced security headers or policies. Privacy compliance is absent, with no privacy or cookie policies found. Overall, the site presents low business credibility and trustworthiness due to its personal nature and lack of professional content or contact information.

R

RENAISSANCE NOW

renaissancenow-cai.org

44

The website 'RENAISSANCE NOW' is a small-scale arts and culture initiative focused on promoting art as a renewable human resource. It offers educational content such as a certificate program for cities on arts and policy, collections on arts in public service, and a public engagement platform. The target audience includes cultural organizations, policymakers, artists, and the general public interested in societal challenges addressed through art. The business model appears to be non-profit or educational, with a niche market position in arts advocacy and cultural policy education. Technically, the website is built using standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Bluehost with WordPress inferred from URL patterns. It uses Google Analytics for visitor tracking and includes video backgrounds for visual engagement. Mobile optimization and accessibility are basic but functional. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There are no forms or input fields to assess for secure handling. Privacy and cookie policies are absent, and no contact or incident response information is provided, indicating gaps in compliance and transparency. Overall, the website is legitimate and consistent with a small arts organization but lacks comprehensive privacy, security, and contact information. Recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response details to improve trust and compliance.

G

GGD AppStore

ggdappstore.nl

61

The GGD AppStore is an official Dutch public health platform operated by GGD GHOR Nederland, providing a curated catalog of health-related mobile applications that have been tested and validated by the GGD organizations. The website targets Dutch-speaking users interested in health and wellness apps, offering categorized search and detailed app information. The platform is positioned as a trusted source for health apps in the Netherlands, supported by official branding and partnerships with health information providers. Technically, the site uses a custom backend with MagicScripts, Bootstrap for responsive design, and standard web technologies including jQuery and Font Awesome. Google Analytics and Google Tag Manager are employed for user tracking, though no explicit cookie consent mechanism is present. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks some security headers and explicit privacy compliance statements. Overall, the site is professional, user-friendly, and trustworthy, but could improve privacy compliance and security best practices.

G

GGD GHOR Kennisnet

ggdghorkennisnet.nl

68

GGD GHOR Kennisnet is a Dutch government-affiliated platform serving employees of GGD and GHOR bureaus, focusing on public health knowledge sharing and employment opportunities. The website provides secure access via OpenID Connect and features a vacancy bank for related organizations. The platform demonstrates a consistent brand and professional design tailored to its target audience. Technically, it employs modern frontend technologies including jQuery, Tailwind CSS, and FontAwesome, with Google Analytics for visitor tracking. Security posture is solid with HTTPS enforced and CSRF tokens present, though it lacks some security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-positioned within its government sector niche.

G

GGD GHOR Nederland

werkenbijggdghor.nl

57

GGD GHOR Nederland is a key governmental organization in the Netherlands focused on public health and safety. The website serves as a recruitment and informational portal highlighting their projects, values, and benefits for employees. The organization is positioned as a large, essential entity in the government and healthcare sectors, delivering impactful public health services and initiatives. Technically, the website uses modern web standards, including HTTPS, Bootstrap grid, Font Awesome, and Google Fonts, with a CMS likely based on Afas Profit. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and login mechanisms, but lacks visible security headers and published security or privacy policies. No direct contact emails or phone numbers are provided, only a contact form. WHOIS data confirms the domain's legitimacy and consistency with the organization's claims. Overall, the website is trustworthy and professional but could improve privacy compliance and security transparency.

V

Vendée Expansion

vendee-expansion.fr

59

Vendée Expansion is a regional economic development agency dedicated to fostering business growth and investment in the Vendée region of France. The agency provides comprehensive support services including land and property offerings, business advisory, and regional promotion to attract and assist companies and investors. Positioned as a key player in regional economic development, Vendée Expansion targets businesses, entrepreneurs, and stakeholders interested in the economic vitality of Vendée. The website is built on a WordPress platform utilizing modern plugins such as FacetWP for faceted search and Contact Form 7 for user interactions. The technical infrastructure demonstrates moderate performance with good mobile optimization and basic accessibility features. Security is well managed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly available. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements, including a consent mechanism. The site integrates Google Analytics and Tag Manager for analytics and marketing purposes, reflecting a moderate level of user tracking. Overall, the website presents a professional and trustworthy digital presence consistent with a government-backed agency. Security posture is strong but could be enhanced by publishing formal security policies and incident response contacts. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website's content and presentation support its authenticity. Strategic recommendations include improving transparency around security practices and enhancing accessibility to further strengthen trust and compliance.

P

PP Pension

pppension.se

57

PP Pension is a Swedish pension service provider focused on the media and information sectors, offering tailored pension solutions for freelancers, small to large companies, and collective agreements. The company emphasizes low fund fees, personal advisory services, and customer-centric pension management. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting professionals such as designers, journalists, and project managers. Technically, the site is built on WordPress with modern SEO practices using Yoast SEO, and it employs HTTPS with cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with encrypted connections and secure forms, though some security headers are missing and no explicit security policy or incident response contacts are published. WHOIS data is unavailable or queried incorrectly, limiting domain registration trust verification. Overall, the site demonstrates a strong business presence with good security and privacy compliance, but would benefit from enhanced transparency in security policies and domain registration details.

The website bulta.lv serves as an event portal for a running and Nordic walking competition held in Latvia, specifically the Sigulda-Nurmiži-Sigulda 21km event. It provides registration forms, event results, photos, and competition rules primarily targeting local sports enthusiasts and participants. The site uses a simple HTML5 UP template with JavaScript and jQuery for interactive form handling, indicating a modest technical infrastructure suitable for small-scale event management. The content is basic but functional, with clear navigation links to event results and documentation. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance given its European audience. Security posture is moderate with no visible advanced security headers or protections, and no WHOIS data could be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site is functional for its purpose but requires improvements in security, privacy compliance, and business transparency to enhance trust and professionalism.

The website universidadesdeinvestigacion.com is a domain parking page currently offering the domain for sale via Sedo. It does not provide any business services, contact information, or content beyond domain sale information. The site is primarily targeted at domain investors or buyers interested in acquiring this domain. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with Google Ads and Sedo's domain parking platform. The site is served over HTTPS but lacks advanced security headers and DNSSEC, indicating a minimal security posture. Privacy compliance is limited to a basic cookie banner and a generic privacy policy hosted by Sedo. Overall, the site has poor content quality and low business credibility due to lack of information and branding.

A

Astrit

astrit.co

55

Astrit.co is a personal portfolio and blog website representing the work and digital presence of an individual named Astrit. The site primarily targets designers, developers, and followers interested in Astrit's creative and technical work. The business model is centered on personal branding and content sharing, with a niche market position. The website is built on WordPress and hosted on Vercel, utilizing standard web technologies such as jQuery and custom JavaScript. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is basic, with no detected security headers or privacy policies, and the domain uses privacy protection services typical for personal sites. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

U

Universia

mycampusdigital.io

69

The website analyzed is a Single Sign-On (SSO) login portal branded as Campusb2b under the Universia network, targeting users in the education sector who require access to campus-related digital services. The platform facilitates secure user authentication for associated services such as mycampusdigital.io. The business model focuses on providing authentication and access management solutions tailored for educational institutions and their communities. The site presents a consistent brand image with Universia logos and uses HTTPS to secure user credentials during login. From a technical perspective, the site employs standard web technologies including HTML5, CSS, and JavaScript, with specific scripts for password policy enforcement and validation. The performance and mobile optimization are basic but functional. However, the site lacks advanced SEO features, accessibility enhancements, and comprehensive metadata. No content management system or hosting provider information is discernible from the data provided. Security posture is moderate; HTTPS is enforced, and password policy scripts are present, but critical security headers such as Content-Security-Policy and HSTS are missing. No privacy or cookie policies are visible, and no contact or incident response information is provided, which limits compliance and user trust. The WHOIS data for the domain sso.universia.net is unavailable, likely because it is a subdomain, which is typical but reduces transparency. No web application firewall or blocking mechanisms were detected, indicating open accessibility. Overall, the site is functional for its purpose but would benefit from enhanced security headers, visible privacy and cookie policies, improved accessibility, and clearer contact information to increase trust and compliance. The domain's legitimacy is supported by branding and HTTPS but lacks WHOIS transparency. Strategic improvements in these areas would strengthen the platform's security posture and user confidence.

H

Helmand.lv

helmand.lv

50

The website helmand.lv appears to be an e-commerce platform using OpenCart CMS with the Journal3 theme. The site presents minimal business information, with a generic description 'My Store' and no visible contact details or policies. Technically, the site uses modern JavaScript libraries such as Swiper.js and Lozad.js, indicating some level of digital maturity, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no visible security headers or policies, and WHOIS data is unavailable due to query limits, limiting trust verification. Overall, the site shows a low level of business credibility and privacy compliance, suggesting it may be a small or new online store with room for improvement in transparency and security.