Security Directory

N

Norsk Tjenestemannslag

ntl.no

51

Norsk Tjenestemannslag (NTL) is a large Norwegian labor union affiliated with LO, representing over 38,000 members primarily in the public sector and state-affiliated enterprises. The website serves as a comprehensive portal for membership information, union services, events, and educational resources. It targets public sector employees, students, and apprentices, with special offerings for younger members under 35 years old. The business model focuses on membership engagement, support, and benefits including insurance, loans, and training. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Microsoft Clarity, with a strong emphasis on privacy and consent management via CookieYes. The site is well-optimized for mobile and accessibility, with good SEO practices and clear navigation.

F

Fellesforbundet

fellesforbundet.no

69

Fellesforbundet is Norway's largest trade union in the private sector, representing approximately 170,000 members and engaging with over 6,000 companies through collective bargaining agreements. The organization focuses on improving working conditions and wages for its members, offering services such as membership benefits, training courses, and advocacy. The website is professionally designed, targeting Norwegian private sector workers and union members, and is presented primarily in Norwegian with multiple language alternatives available. Technically, the site uses modern JavaScript frameworks (Vue.js), integrates multiple analytics platforms including Google Analytics, Plausible, and Microsoft Application Insights, and employs a cookie consent management system to comply with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices.

Y

Yrkesorganisasjonenes Sentralforbund

ys.no

60

Yrkesorganisasjonenes Sentralforbund (YS) is a well-established Norwegian labor organization founded in 1999, representing employees across various sectors. The website serves as an information and service portal for members and the public, offering news, membership benefits, and advocacy information. The organization maintains a strong market position within Norway's labor union landscape, targeting employees and workers nationwide. The site is professionally designed with consistent branding and good content quality, supporting Norwegian and English languages.

A

Akademikerne

akademikerne.no

56

Akademikerne is the main organization representing professionals with higher education in Norway, encompassing 13 member associations with nearly 280,000 members. The website serves as an informational and advocacy platform, providing news, event information, and resources for its members. It targets Norwegian professionals and academics, positioning itself as a leading non-profit entity in the education and professional association sector. The business model revolves around membership services, political advocacy, and professional development offerings. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Piwik PRO for analytics, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies suggests room for improvement. Overall, the website is trustworthy and professionally maintained, but enhancing privacy compliance and security headers would strengthen its posture.

B

Bright Funds

brightfunds.org

56

Bright Funds is a SaaS platform specializing in workplace giving and volunteering software, recently integrated under the parent company Submittable. The website positions itself as a comprehensive solution for corporate grants, employee giving, and volunteering programs, targeting corporate clients and nonprofits. The platform emphasizes maximizing social impact through employee engagement. Technically, the site is built on Webflow and leverages a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and other marketing and tracking tools. Hosting is via Amazon CloudFront CDN, ensuring good performance and availability. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies. The WHOIS data is unavailable, likely due to privacy protection, which is common for SaaS providers. Overall, the site is professional and trustworthy but could improve transparency around privacy and security policies.

W

WizeHive

wizehive.com

61

WizeHive is a software company specializing in flexible full lifecycle grants, scholarships, awards, and corporate social responsibility management software. Recently merged with Submittable, WizeHive positions itself as a trusted and innovative leader in the nonprofit and mission-based program software market. The website reflects a professional SaaS business model targeting foundations, nonprofits, and mission-driven organizations. Technically, the site is built on HubSpot CMS and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and AdRoll, indicating a mature digital marketing infrastructure. The website is mobile-optimized and provides a good user experience with clear branding and navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but the partnership with Submittable and professional presentation mitigate concerns. Overall, the site is well-positioned but could improve transparency and security disclosures.

W

WeHero

wehero.co

65

WeHero is a specialized provider of corporate volunteering and employee engagement solutions, offering customized volunteer experiences, virtual events, and annual programs to help companies achieve social impact goals. The company is positioned as a premium solution trusted by hundreds of leading companies, including Adobe, Citrix, and Visa. Their business model focuses on B2B services that integrate social mission fulfillment with employee engagement. Technically, the website is built on Webflow CMS and leverages a modern technology stack including Google Tag Manager, HubSpot, and Visual Website Optimizer, reflecting a mature digital infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and vulnerability disclosures are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, though improvements in transparency around security policies and incident response are recommended.

Refinery29 is a leading global digital media platform targeting young women, offering content focused on fashion, beauty, news, entertainment, and relationships. The website is professionally designed with consistent branding and a strong social media presence, supporting its market position as a top media outlet in Germany. Technically, the site uses modern frameworks such as React and integrates multiple third-party analytics and advertising tools, including Google Analytics, Facebook Pixel, TikTok Pixel, and Sourcepoint for consent management. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent mechanisms. The WHOIS data for the domain is missing, which is unusual but the website's content and branding strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

A

AFROPUNK

afropunk.com

60

AFROPUNK is a well-established media and cultural organization founded in 2002 that celebrates Black culture and diversity through music, art, activism, and community events. The website serves as a content hub and event platform, targeting audiences interested in Black cultural expression and social justice. The brand maintains a moderate market position within niche cultural media and event spaces, supported by a medium-sized digital presence and active social media engagement. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, JW Player, and multiple analytics and advertising tools, hosted on WP Engine. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and explicit security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which could expose the organization to regulatory risks. Overall, the domain WHOIS data confirms legitimacy and long-term presence, reinforcing business credibility. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

I

Ilmor Engineering Inc.

ilmor.com

55

Ilmor Engineering Inc. is a specialized engineering company focused on racing and marine engine services with a presence in the USA and a partner entity in the UK. Their services include engine design, development, testing, manufacturing, and innovation in high-performance marine and racing engines. The website content is minimal but clearly targets professionals and enthusiasts in the marine and motorsport industries. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and tracking tools like Google Analytics and Hotjar. However, the site lacks visible contact information, privacy policies, and security headers, which are critical for trust and compliance. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises significant legitimacy concerns. Overall, the site demonstrates moderate technical maturity but requires improvements in security, privacy compliance, and business transparency.

P

Penske Truck Leasing

pensketruckleasing.com

72

Penske Truck Leasing operates a professional and comprehensive website focused on providing full-service truck leasing and fleet management solutions. The company targets businesses and fleet operators in the transportation sector, offering services such as preventive maintenance, roadside assistance, collision repair, and fleet tracking. The website reflects an enterprise-level business with consistent branding and a strong market position in the transportation industry. Technically, the website employs modern web technologies including Google Tag Manager, Demandbase, LinkedIn Insight Tag, and OneTrust for cookie consent management. The site is built on the RebelMouse platform and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with service workers implemented for enhanced user experience. From a security perspective, the site enforces HTTPS and uses consent management tools, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a visible privacy policy and terms of service pages reduces privacy compliance confidence. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy. Despite this, the professional website and clear business information mitigate some risk. Overall, the site scores well in content quality, technical implementation, and business credibility but should improve privacy compliance and domain registration transparency.

P

Penske Truck Rental

pensketruckrental.com

76

Penske Truck Rental operates as a large, established transportation company specializing in moving truck rentals across the United States. The company offers services through a network of over 2,500 rental locations, targeting both consumers and businesses requiring truck rental solutions. Their website reflects a professional brand presence with consistent branding and a clear focus on their core services. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, OneTrust for cookie consent, and the RebelMouse CMS platform. The site is mobile optimized, accessible, and uses HTTPS with a good SSL configuration. However, some security best practices such as explicit security headers and published security policies are missing. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent mechanisms. Yet, the absence of a privacy policy, terms of service, incident response contacts, and vulnerability disclosure information indicates gaps in compliance and transparency. The WHOIS data is notably missing, which raises concerns about domain registration legitimacy despite the professional appearance of the site. Overall, the website is functional, trustworthy, and well-branded but would benefit from enhanced transparency in privacy and security policies, as well as verification of domain registration details to strengthen trust and compliance.

P

Penske Automotive Group

penskeautomotive.com

65

Penske Automotive Group operates as a diversified international transportation services company specializing in automotive and commercial truck retailing. The website presents a professional and consistent brand image, targeting consumers and businesses interested in automotive and commercial truck retail services. The company positions itself as a premier retailer in its sector, offering a broad range of transportation-related services. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Font Awesome Pro icons, and Google Fonts, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, but the website content and design suggest a legitimate enterprise. Privacy and cookie policies are not detected in the provided content, indicating potential compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy disclosures.

T

Three.js Journey — Learn WebGL with Three.js

threejs-journey.xyz

10

Three.js Journey is a specialized online educational platform offering comprehensive video courses focused on Three.js and WebGL development. The platform targets developers ranging from beginners to advanced users, providing a structured learning path with 93 hours of video content and community engagement features. The business operates primarily through course sales with lifetime access, positioning itself as a niche leader in 3D web development education. The website demonstrates a high level of professionalism, with consistent branding and strong trust signals such as testimonials and a significant student base.

D

Domeinenbank

ngh.nl

60

Domeinenbank is a specialized domain brokerage company based in the Netherlands, operating since 1999. The company focuses on helping customers buy, rent, and sell premium domain names, enhancing their professional image and online presence. With over two decades of experience and thousands of successful transactions, Domeinenbank holds a reputable position in the domain brokerage market. Their website is professionally designed using WordPress and Elementor, incorporating SEO best practices and modern web technologies. The technical infrastructure includes Google Analytics and Tag Manager for tracking, and DNSSEC is enabled for domain security. The security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website is trustworthy, content-rich, and serves its business purpose effectively.

V

Vesle Skaugum Fondet

vesleskaugum.no

62

Vesle Skaugum Fondet operates a hospitality website focused on accommodation services in the Golsfjellet region of Norway. The website presents a professional and visually appealing interface with clear branding and a focus on guest experience. The business appears to be a small local hospitality provider targeting travelers seeking lodging and memorable stays in the area. Technically, the site uses common web technologies including jQuery, Google Analytics with IP anonymization, Cookiebot for cookie consent, and hCaptcha for bot protection, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and standard security headers present, though the absence of explicit privacy and terms of service pages limits full compliance assessment. Overall, the site is accessible without WAF or blocking mechanisms, and no suspicious content or vulnerabilities were detected. The lack of WHOIS data is consistent with privacy protection practices common for small businesses. Strategic recommendations include adding clear privacy and terms pages, providing explicit contact information, and enhancing accessibility features to improve compliance and user trust.

P

Penske Corporation

penske.com

60

Penske Corporation is a large, closely-held diversified transportation services company operating globally with subsidiaries in retail automotive, truck leasing, transportation logistics, and professional motorsports. The company manages consolidated revenues exceeding $43 billion and operates over 3,300 locations with more than 73,000 employees worldwide. The website reflects a mature digital presence built on WordPress with modern plugins and analytics integrations, providing a professional and accessible user experience. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response information are absent. Privacy compliance is indicated by the presence of a comprehensive privacy policy and terms of use, but a cookie consent mechanism is missing. Overall, the site is trustworthy and well-branded, though the lack of WHOIS data limits domain registration trust analysis.

D

Digitalist d.o.o. & Digitalist consulting d.o.o.

digitalist.si

38

Digitalist d.o.o. & Digitalist consulting d.o.o. is a Slovenian digital agency specializing in web development, digital marketing, and subsidy consulting services. Founded in 2020, the company positions itself as a comprehensive partner for businesses seeking to enhance their online presence and sales performance. The website showcases strong client testimonials and certifications, indicating a reputable market position within the regional digital services sector. Technically, the website is built on WordPress using the Flatsome theme, integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, and employs Cloudflare DNS services. Security posture is solid with HTTPS and reCAPTCHA implemented, though the absence of security headers and explicit privacy and cookie policies represent areas for improvement. Overall, the site is professional, well-branded, and user-friendly, targeting business clients in Slovenia and neighboring regions.

H

Hot Tools

hottools.ie

67

Hot Tools is a professional e-commerce retailer specializing in hair styling electronics targeted primarily at Irish salons. The website presents a well-established brand with over 25 years of market presence, leveraging the Shopify platform for its online store. The site includes modern marketing and analytics integrations such as Klaviyo, Google Analytics, and Facebook Pixel, and implements a robust cookie consent mechanism via Cookiebot to comply with privacy regulations. Technically, the site is built on a reputable CMS with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. The absence of explicit privacy and terms of service pages and direct contact information slightly detracts from compliance and user trust. Overall, the site is professional, trustworthy, and well-positioned in its niche.

N

Nord Pool

nordpoolgroup.com

68

Nord Pool is a leading European power market operator providing day-ahead and intraday trading services across 16 countries. The company offers a comprehensive suite of services including market data, compliance, clearing, and consulting, positioning itself as a critical infrastructure player in the energy sector. Their website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to energy market participants and stakeholders. Technically, the site leverages modern web technologies such as AngularJS, integrates multiple analytics and tracking tools with user consent mechanisms, and employs a reputable CMS platform (Episerver). Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although public security policies and incident response details are not prominently published. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the company's established market position and professional web presence.

K

KERA

kera.org

65

KERA is a public broadcasting organization serving North Texas, affiliated with PBS and NPR, providing television and radio programming focused on news, politics, arts, and culture. The website targets a broad audience in the North Texas region and beyond, delivering trusted public media content. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Google Tag Manager, and various analytics tools. The site enforces HTTPS and uses asynchronous loading for performance optimization. Security posture is generally good with HTTPS and no visible vulnerabilities, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the affiliation with reputable public media organizations supports legitimacy. Overall, the site is professional and trustworthy but could improve transparency on privacy and security policies.

I

Inside Climate News

insideclimatenews.org

63

Inside Climate News is a reputable, Pulitzer Prize-winning non-profit media organization focused on climate and environmental journalism. The website offers comprehensive, nonpartisan reporting on climate issues, targeting a general audience interested in environmental news. The business model centers on investigative journalism, newsletters, and special projects, positioning it as a trusted source in the climate news sector. Technically, the website is built on WordPress with React components, leveraging modern web technologies and hosted with Cloudflare DNS services. Performance and mobile optimization are excellent, with strong SEO and accessibility features. Security posture is good with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and security headers are not explicitly observed. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, with minor recommendations to enhance privacy compliance and DNS security.

ZUMA Press is a photography agency specializing in assignment, editorial, and archive photography services. Founded in 2016 by Scott Mc Kiernan, it serves media professionals and editorial clients with a broad network of photographers. The website presents a basic but functional interface with search capabilities and a large photographer directory, indicating a medium-sized operation in the media industry. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by DreamHost, a reputable provider. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response channels are visible, which may impact user trust and regulatory compliance. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

D

De'Longhi Appliances S.r.l

delonghi.com

59

De'Longhi Appliances S.r.l operates a professional and comprehensive website focused on coffee machines, air treatment, and kitchen appliances, positioning itself as a worldwide leading brand in these sectors. The website targets a general audience interested in premium kitchen and coffee products, supporting a retail and e-commerce business model. The site demonstrates strong branding consistency and high content quality, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as React and Chakra UI, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and deferred script loading, though it lacks explicit security headers and published security policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and contact information support trustworthiness. Privacy and cookie policies are present and GDPR compliant, indicating attention to privacy compliance. Overall, the site is well-positioned but could improve transparency in security and incident response.

S

Schema.org Community Group

schema.org

55

Schema.org is a well-established, community-driven project founded by major technology companies including Google, Microsoft, Yahoo, and Yandex. It provides a comprehensive and extensible vocabulary for structured data markup on the Internet, widely adopted by millions of domains and powering rich experiences across major platforms. The website reflects this authoritative position with excellent content quality, consistent branding, and a clear focus on technical and developer audiences. Technically, the site employs modern web technologies such as HTML5, CSS, JavaScript, and jQuery, and integrates Google services including Custom Search Engine and Analytics. Hosting on Google nameservers and use of HTTPS ensures reliable and secure delivery. The site is mobile optimized and accessible, with good SEO practices evident. However, some security best practices such as enabling DNSSEC and publishing security headers could be improved. From a security perspective, the domain registration is consistent and trustworthy, with domain status protections in place. No WAF or blocking mechanisms interfere with content access. The site lacks explicit privacy and cookie policies, which represents a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is published, which could be enhanced to improve transparency and trust. Overall, Schema.org presents a professional, secure, and authoritative web presence with minor areas for improvement in privacy compliance and security hardening. The risk profile is low, and the site is suitable for its broad technical audience.

S

Sequoia

sequoia.com

72

Sequoia is a strategic partner specializing in helping investor-backed companies optimize their compensation, benefits, and risk management strategies. Positioned as a trusted advisor, Sequoia serves a B2B market focused on financial and operational excellence. The company leverages a professional digital presence with a well-structured website that clearly communicates its value proposition and services. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and marketing tools such as Google Analytics, Marketo, and LinkedIn Insight, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the absence of WHOIS data introduces some uncertainty about domain registration transparency.

A

ALPHA Consult

alphacons.eu

36

ALPHA Consult is a European boutique consultancy specializing in strategic management and technology consulting focused on space applications, GNSS, Earth Observation, Intelligent Transport Systems, and UAVs. The company targets businesses, regulators, and European institutions, positioning itself as a leading independent expert in these sectors. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern web technologies including jQuery and Google Analytics, hosted by Aruba S.p.A., with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response or security policies. Overall, the site is trustworthy and professionally maintained, with moderate user tracking and basic privacy compliance.

1

10dencehispahard, S.L.

threejs.org

10

Three.js is a well-established open-source JavaScript 3D library that enables developers to create interactive 3D graphics in web browsers using WebGL technology. The website serves as a hub for documentation, examples, developer tools, and community engagement, positioning itself as a leading resource in the web 3D graphics space. The business model is primarily community-driven with educational resources and merchandising as supplementary revenue streams. The domain is mature and registered to a Spanish company, consistent with the website's technical and community focus. Technically, the website employs modern web technologies including JavaScript and WebGL, with integration of Google Analytics and Tag Manager for user tracking. The site is performant, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, it lacks some advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain registration protections in place, but could be improved by enabling DNSSEC and adding security headers. From a security and compliance perspective, the site does not provide visible privacy, cookie, or terms of service policies, nor does it have a vulnerability disclosure or security incident response contact. This represents a compliance gap, especially regarding GDPR and user privacy. No contact emails or phone numbers are provided, which may limit direct communication channels. No adult or unsafe content is present, making the site safe for general audiences. Overall, the website is credible, technically sound, and trusted within its niche, but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

UNIS, a.s. operates the VTP TESTLAB, an accredited testing laboratory in the Czech Republic specializing in electromagnetic compatibility (EMC), mechanical resistance, climatic, and combined vibration/climate testing. The company holds ISO/IEC 17025:2018 accreditation, ensuring high standards in testing services. The website targets manufacturers and businesses requiring certified testing services, positioning itself as a reliable and professional service provider in the technology and manufacturing sectors. The business model focuses on providing specialized laboratory testing services with a medium-sized operational scale and a consistent brand presence. Technically, the website employs modern JavaScript libraries such as jQuery, Google Analytics for traffic analysis, and Google reCAPTCHA v3 for bot mitigation. The site is served over HTTPS, ensuring secure communications, and includes a GDPR-compliant privacy policy. However, some technical improvements are recommended, including the addition of security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site demonstrates good practices with secure forms and no visible vulnerabilities, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data limits full domain trust assessment. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing vulnerability disclosure policies to strengthen security and compliance further.

C

crooton

crooton.com

71

crooton is a UK-based recruitment advertising company specializing in location-based advertising solutions to connect employers with the right candidates. Their GeoHire™ platform leverages multiple media channels including geofencing, digital billboards, and digital marketing to enhance recruitment campaigns. The company targets employers and jobseekers, offering a comprehensive suite of services designed to improve hiring outcomes. The website demonstrates strong market positioning with notable clients and awards, reflecting a reputable presence in the recruitment and advertising sectors. Technically, the site is built on Webflow with a modern tech stack incorporating various analytics and marketing tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks explicit security policies and incident response information. WHOIS data is missing, which slightly impacts trustworthiness but the overall digital footprint and branding suggest legitimacy. Strategic recommendations include enhancing security transparency and verifying domain registration details.

M

Meetmaps

meetmaps.com

57

Meetmaps is a technology company specializing in event and congress management software, offering a comprehensive SaaS platform that simplifies event organization and enhances attendee digital experiences. Their product suite includes event registration, event websites, email marketing, event apps with interactive modules, access control, virtual venues, networking tools, and gamification features. The company targets event organizers and conference managers primarily in Spain, with a professional and consistent online presence. Technically, the website is built on WordPress using the Divi theme, integrating multiple marketing and analytics tools such as HubSpot, Google Analytics, Hotjar, and LinkedIn Insight. The site is secured with HTTPS and loads trusted external scripts, indicating a mature digital infrastructure. Security posture is good with no visible vulnerabilities, but lacks some security headers and explicit privacy and cookie policies. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security transparency are recommended.

Erfurt-Crowd is a localized crowdfunding platform operated by fairplaid GmbH, focusing on supporting projects in culture, art, social, education, environment, and sports sectors within the Erfurt community. The platform facilitates project fundraising by providing a digital space for project initiators and supporters to connect. The website demonstrates a clear market position as a regional crowdfunding facilitator with a business model centered on community engagement and project funding. Technically, the website employs modern JavaScript frameworks including React, integrates Google Analytics with IP anonymization, and uses Klaro for cookie consent management. Accessibility is enhanced through Eye-Able tools, and the site is mobile optimized with good SEO practices. The technical infrastructure is solid, leveraging Fairplaid's crowdfunding technology platform. From a security perspective, the site enforces HTTPS with good SSL configuration and includes privacy compliance mechanisms such as cookie consent and a privacy policy. However, explicit security headers and detailed security policies are absent, and no incident response or vulnerability disclosure information is provided. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of direct contact information and terms of service pages are minor gaps. The domain WHOIS data aligns well with the website's claims, supporting legitimacy. The site is safe for general audiences with no adult or questionable content detected.

M

Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG)

m3aawg.org

72

The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) is a recognized industry consortium focused on combating online abuse such as bots, malware, spam, and DoS attacks. The organization provides best practices, training, policy advocacy, and facilitates collaboration among industry stakeholders. Their website reflects a professional and consistent brand presence targeting industry professionals and members. Technically, the site is built on Drupal 7 with common web libraries and includes Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces domain trust but the overall site professionalism and content quality mitigate major concerns. Strategic recommendations include improving security headers, adding cookie consent, publishing vulnerability disclosure policies, and updating the CMS to a supported version.

B

Blue Style a.s.

travelportal.cz

63

Blue Style a.s. operates as a Czech travel agency specializing in vacation packages and holiday planning services. The website is built on modern web technologies including Next.js and integrates multiple marketing and analytics tools such as Google Analytics, Exponea, and Criteo. However, the site is currently inaccessible due to an IP-based rate limiting block (HTTP 429), which restricts content visibility and user experience. The company provides clear contact information for unblocking access, indicating a customer-focused approach. Security measures include reCAPTCHA and cookie consent mechanisms, but lack visible security headers and explicit security policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact details suggest a legitimate business. Overall, the site requires improvements in security posture, accessibility, and transparency to enhance trust and compliance.

I

Infortrend Technology Inc.

infortrend.com

67

Infortrend Technology Inc. is a global enterprise data storage provider specializing in SAN, NAS, unified storage, hybrid cloud, and AI storage solutions. The company targets enterprise IT customers and offers a broad portfolio of storage products and management software. Their market position is supported by a strong partner ecosystem including major technology companies such as Microsoft, Intel, and Amazon Web Services. The website content is professional, comprehensive, and well-structured, reflecting a mature digital presence. The technical infrastructure of the website leverages modern web technologies including Bootstrap, jQuery, Google Tag Manager, Matomo, and Tawk.to chat integration. The site is mobile optimized and includes privacy and cookie consent mechanisms, indicating a good level of digital maturity and compliance with GDPR. Analytics usage is moderate with multiple tracking services employed responsibly. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms. However, the absence of visible HTTP security headers and lack of explicit incident response or vulnerability disclosure information are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and partner ecosystem support legitimacy. Overall, Infortrend's website demonstrates a strong business and technical foundation with good security and privacy practices. Strategic improvements in security headers, incident response transparency, and contact information visibility would enhance trust and compliance further.

PROMISE Technology, Inc operates a professional website focused on high-performance storage solutions tailored for IT, cloud, surveillance, and rich media markets. The company positions itself as a leading developer offering scalable SAN, Thunderbolt, NAS, and cloud storage products. The website demonstrates a mature digital presence with comprehensive product catalogs, success stories, and promotional content targeting IT professionals and media production companies. Technically, the site employs modern web technologies including jQuery, Foundation CSS, and Google Analytics, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not evident. WHOIS data for the domain is unavailable, which introduces some uncertainty about domain registration legitimacy, but the overall branding and content quality support a credible business. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and providing clear contact information for security incidents.

The Florida Sheriffs Association is a well-established statewide organization supporting law enforcement and corrections communities in Florida. Their primary services include training and advocacy for public safety legislation. The website reflects a professional and consistent brand presence with good SEO and structured data, targeting law enforcement professionals and public safety stakeholders. Technically, the site is built on WordPress with common marketing and analytics tools integrated, hosted behind Cloudflare DNS, and secured with HTTPS. Security posture is solid with domain locking and HTTPS, though DNSSEC is not enabled and no explicit security or incident response policies are publicly available. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration is consistent and trustworthy, reflecting a legitimate and mature organization.

GFX-pulse is a Slovak technology company specializing in mobile and TV application development, web design, e-commerce solutions, and enterprise software such as ERP and CRM systems. Established since 2000 with a domain registered in 2003, the company has a solid market presence in Slovakia and serves a diverse client base including businesses and public sector entities. Their portfolio includes notable mobile apps and web projects, demonstrating technical competence and industry experience. Technically, the website uses a broad technology stack including Objective-C, Java, PHP, Python, and modern web standards, supported by Google Analytics for user tracking. However, the site lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. Security posture is moderate with no visible vulnerabilities but room for improvement in SSL configuration and security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to align with modern standards.

The website starbuckscardb2b.com serves as a corporate B2B platform for Starbucks gift cards, targeting business customers who want to reward employees or clients. It is built on Salesforce Experience Cloud, leveraging Salesforce's commerce and community technologies, and integrates multiple payment and analytics services. The site presents a professional and branded experience consistent with Starbucks' global retail presence. Technically, the site uses modern frameworks and security practices including HTTPS and Content Security Policy, but lacks visible privacy and cookie policies, which is a compliance gap. The absence of WHOIS data for the domain raises questions about domain registration transparency, although the site appears legitimate and well-maintained. Overall, the site is functional and secure but could improve privacy compliance and domain transparency.

H

HOMA lakástextil

homahu.hu

50

The website homahu.hu operates as an online retail platform specializing in home textiles such as bedding, towels, and household fabrics, targeting primarily the Hungarian market. It is part of a regional network with sister sites in Slovakia, Czech Republic, and Austria, indicating a focused Central European presence. The business model is e-commerce retail with a clear emphasis on product variety and customer convenience, supported by visible contact information and promotional offers. The site demonstrates consistent branding and a professional online presence.

F

Felicity Divat

felicity.hu

56

Felicity Divat operates as a Hungarian e-commerce retailer specializing in a wide range of clothing and accessories for children, women, men, as well as home textiles and decor. The website presents a comprehensive product catalog segmented by age groups and categories, targeting families and individuals in Hungary. The business model is focused on online retail with a medium-sized market presence and consistent branding. Technically, the site leverages the UNAS e-commerce platform with modern JavaScript libraries such as jQuery, Flickity, and Tippy.js, and integrates Google Tag Manager and Analytics for marketing and tracking purposes. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and consent management for tracking scripts, though explicit security headers and policies are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

DEMY.HU

demy.hu

52

DEMY.hu is a Hungarian e-commerce retailer specializing in electronic products such as electric dog collars, wireless alarms, and GPS navigation and tracking devices. The website targets Hungarian consumers interested in pet electronics and security solutions, positioning itself as a specialist in this niche market. The site is well-branded with consistent design and localized content for neighboring countries through sister sites. Technically, the website employs modern JavaScript libraries and integrates third-party analytics and advertising tools, including Google Analytics, Google Tag Manager, and ClickCease, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, as well as terms of service, suggests gaps in compliance and transparency. Security-wise, the site uses HTTPS and some best practices but lacks comprehensive security headers and incident response information, which could be improved to enhance trust and protection. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security documentation to strengthen its risk posture and user trust.

B

Bluedrop ISM

bluedropism.com

67

Bluedrop ISM is a well-established technology company specializing in workforce training delivery and credential management solutions, primarily serving governments, industry groups, and training providers. Founded in 1992, the company has a strong market presence with a globally recognized platform called SkillsPass. Their business model focuses on providing integrated skills management platforms and custom eLearning solutions, targeting a diverse audience including employers and workers across multiple sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content.

C

COVE

coveocean.com

63

COVE is a well-established marine technology innovation hub based in Canada, founded in 2016. It serves as a collaborative community and physical space for marine technology organizations, offering programs and services that support testing, incubation, research, and commercialization. The website reflects a professional and modern digital presence with clear branding, comprehensive content, and active engagement through social media and newsletters. Technically, the site is built on WordPress with popular plugins and frameworks, hosted with reputable providers, and employs modern SEO and analytics tools. Security posture is solid with HTTPS, domain locking, and no visible vulnerabilities, though DNSSEC is not enabled and some security policies are not publicly disclosed. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and positioned as a key player in the marine technology sector.

T

Tech-Access Canada

tech-access.ca

47

Tech-Access Canada operates as a national network of 70 Technology Access Centres (TACs) across Canada, providing critical support to entrepreneurs and businesses by facilitating access to emerging technologies and applied research. The organization plays a pivotal role in driving innovation and business growth nationwide, positioning itself as a key enabler in the Canadian technology ecosystem. Their services include technology access, industry collaboration, and innovation facilitation, targeting primarily Canadian businesses and industry stakeholders. The website reflects a medium-sized, well-established non-profit entity founded in 2016, with a clear focus on supporting technology-driven economic development. From a technical perspective, the website is built on WordPress CMS with a modern but somewhat dated technology stack including jQuery 1.11.3 and several popular plugins such as RevSlider and Modern Events Calendar Lite. The site is mobile optimized, accessible, and incorporates SEO best practices. Analytics and tracking are implemented via Google Analytics, Google Tag Manager, and Clicky Analytics, with basic privacy compliance mechanisms including cookie consent and privacy policies. Security posture is generally good with HTTPS enforced and domain transfer protections in place. However, there are areas for improvement such as enabling DNSSEC, upgrading outdated JavaScript libraries, and implementing additional security headers like Content Security Policy. No explicit security policy or incident response information is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy digital presence aligned with its mission. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include technical security enhancements, improved transparency on security policies, and continued adherence to privacy regulations to maintain and strengthen stakeholder trust.

Y

YouCan.cz

youcan.cz

28

YouCan.cz is a Czech-based professional web development team specializing in creating websites, e-commerce platforms, and custom web applications tailored to client needs. Their portfolio includes diverse clients such as municipalities, internet providers, schools, and e-commerce businesses, positioning them as a regional technology service provider. The website content is well-structured and professional, targeting businesses seeking reliable web solutions. Technically, the site uses legacy JavaScript libraries like jQuery 1.4.2 and Coin Slider, alongside Google Analytics and Mouseflow for user behavior tracking. While the site is accessible and well-organized, it lacks modern security headers and visible HTTPS confirmation, and the outdated libraries pose potential security risks. Mobile optimization is basic, and no CMS or hosting provider details are evident. From a security perspective, the absence of privacy, cookie, and terms policies, combined with missing WHOIS registration data, reduces trustworthiness. The site does not exhibit signs of WAF or blocking mechanisms, but the lack of updated security practices and policies indicates room for improvement. Tracking scripts are present without visible consent mechanisms, raising privacy compliance concerns. Overall, the website is functional and professional but requires updates in security, privacy compliance, and technical modernization to enhance trust and resilience. The missing WHOIS data is a notable risk factor, and implementing HTTPS and security headers is strongly recommended.

A

ABCedu, a.s.

abcguru.sk

37

ABCguru is an educational platform operated by ABCedu, a.s., focused on providing autokorektívne kartičky (self-correcting cards) for mathematics learning targeted at primary school children in Slovakia. The business model combines physical product sales with an online application, catering to students, parents, and schools. The website is professionally designed with clear navigation and relevant content, including instructional videos and contact information. Technically, the site uses modern web technologies such as Bootstrap and Google Analytics, with responsive design suitable for mobile devices. However, there is a lack of publicly available privacy and cookie policies, and no visible security headers, which are areas for improvement. The security posture is moderate with HTTPS implied but no explicit security policy or incident response information. Overall, the website is safe, trustworthy, and focused on educational content without any adult or questionable material.

C

Campus

campus-cowork.com

42

Campus is a small business focused on providing tailored corporate innovation services such as hackathons, ideathons, and B2B partnerships primarily targeting businesses seeking innovation solutions. The website is built on WordPress using Elementor and integrates common analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager. The technical infrastructure is modern and mobile-optimized, offering a good user experience and professional design. However, the security posture is moderate due to the absence of visible security headers and lack of explicit privacy and cookie policies. The domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is safe for general audiences and presents a professional business front but requires improvements in security and compliance documentation.

D

Darkmay s.r.o.

cestovnysystem.sk

53

Darkmay s.r.o. operates the CeSYS platform, a comprehensive system for travel agencies primarily in Slovakia, offering online tour sales and related services. The company holds a strong market position with over 100 active travel agencies using its data and services. The website is well-structured, professionally designed, and optimized for performance and mobile use. It integrates modern technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform. Overall, the website demonstrates good compliance with privacy regulations and provides clear business and partner information.

O

Obsahová agentura

obsahova-agentura.cz

55

Obsahová agentura was a Czech content marketing agency that has now closed and rebranded as Hook & Tell. The website serves primarily as a closure notice and redirect to the new brand, providing visitors with a video introduction and newsletter subscription. The company targeted businesses and individuals interested in content marketing services. The site is professionally designed, mobile optimized, and uses modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Leady tracking. It is built on the Solidpixels CMS platform and enforces HTTPS for secure communication. However, WHOIS data is unavailable, which reduces transparency and trustworthiness. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the site is safe, professional, and trustworthy, but could improve security posture and transparency.