Security Directory

V

Virgin Hotels Las Vegas

virginhotelslv.com

63

Virgin Hotels Las Vegas is a lifestyle-focused hospitality brand operating an upscale hotel, casino, and entertainment venue in Las Vegas, affiliated with Hilton's Curio Collection. The website provides comprehensive information about accommodations, dining, entertainment, and events, targeting leisure and business travelers seeking a modern Vegas experience. The business model centers on hospitality services combined with casino gaming and live entertainment, positioning itself as a premium player in the Las Vegas market. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Adobe DTM, and various tracking pixels, indicating a mature digital marketing infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and professional design. Security posture is good with HTTPS enforced and secure forms, though DNSSEC is not enabled and Content-Security-Policy headers are missing, representing areas for improvement. Privacy compliance is basic but present with privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and marketing sophistication.

J

Jisc

jisc.ac.uk

75

Jisc is a UK-based organization focused on providing digital technology and data services to the tertiary education, research, and innovation sectors. The website demonstrates a strong market position as a leading provider of training, consultancy, connectivity, cloud, AI, cyber security, and data analytics services tailored for educational institutions. The digital infrastructure is modern, leveraging React, Next.js, and Material-UI, with integration of analytics and tracking tools such as Matomo, Google Analytics, and Hotjar, all managed with user consent mechanisms. Security posture is robust with HTTPS, Content Security Policy, and bot protection via hCaptcha, though explicit security policies and incident response details are not published. Overall, the website is professional, accessible, and trustworthy, supporting a large, established organization in the UK education sector.

S

Sefinance

sefinance.lv

60

Sefinance is a Latvian financial services company specializing in providing various loan products including consumer loans, business loans, refinancing, and secured loans. With over 14 years of experience and more than 260,000 satisfied customers, it holds a strong position in the Latvian lending market. The website is professionally designed using modern web technologies such as Next.js and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and Cloudflare DNS used, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates good business credibility and technical maturity.

N

Narrativa AI

narrativa.com

64

Narrativa AI operates the Narrativa® Navigator Platform, a no-code generative AI content automation solution designed for high-volume, complex content creation in regulated and content-intensive industries such as life sciences, finance, marketing, and media. The platform emphasizes speed, accuracy, and consistency, serving notable clients including Pfizer, Microsoft, and Dow Jones. The website demonstrates a mature digital presence with professional design, SEO optimization, and integration of modern web technologies like WordPress and Yoast SEO. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and client endorsements. Security posture is generally good with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the website is trustworthy and business credible but would benefit from enhanced transparency and security disclosures.

B

Big Time Gaming Pty Ltd

bigtimevegas.com

58

The website play.bigtimevegas.com/login serves as a login portal for Big Time Gaming's Big Time Vegas online gaming platform. It provides user authentication primarily through OAuth integrations with Facebook and Google, targeting online casino players and gamers. The site branding and footer link to Big Time Gaming Pty Ltd, indicating a legitimate business entity in the online gaming sector. However, the lack of WHOIS data for the subdomain is typical but limits direct verification of domain registration details. The privacy policy is present but basic, and no cookie consent mechanism is implemented, which may impact GDPR compliance. Technically, the site uses a modern frontend stack including Bootstrap 4.6, jQuery, and Google Analytics/Tag Manager for tracking. The site is mobile optimized with basic accessibility and SEO features. Security posture is moderate with OAuth login methods but lacks visible security headers and explicit security policies or incident response contacts. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the security posture is adequate but could be improved by implementing security headers, cookie consent, and clearer contact/security policies. The business credibility is supported by consistent branding and official company references. The site content relates to online gambling, which is age-restricted and thus rated as questionable content safety, suitable for mature audiences. Strategic recommendations include enhancing security headers, adding cookie consent for privacy compliance, publishing security and incident response policies, and conducting security audits of OAuth implementations to strengthen trust and compliance.

T

Tanis Aircraft Products

tanisaircraft.com

50

Tanis Aircraft Products is a specialized manufacturer of aircraft engine preheat systems, serving piston, turbine, and rotorcraft markets. Established in 1974, the company holds a leading position in its niche, offering FAA Supplemental Type Certified products. The website reflects a mature business with a clear focus on aviation safety and product quality. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins for SEO and performance, and integrates analytics tools such as Google Analytics and Microsoft Clarity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, though the website content and branding are professional and consistent. Overall, the site is trustworthy and well-maintained but could improve transparency and security practices.

Hartzell Propeller operates a professionally designed website focused on aviation propeller manufacturing and related services. The site targets pilots and aviation enthusiasts, providing rich content including articles, videos, and product information. The business is well positioned in the transportation sector with a strong brand presence and digital marketing efforts. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the website is trustworthy and professional, with clear contact information and social media presence, but should enhance privacy compliance and security transparency.

A

Acorn Welding

acornwelding.com

49

Acorn Welding is a specialized aviation welding company positioned as Canada's largest aircraft exhaust and engine mounts repair company and the world's largest radial and vintage aircraft exhaust repair company. Their website showcases a broad product catalog and manufacturing capabilities, targeting aviation professionals and aircraft owners globally. The business model combines manufacturing, repair services, and e-commerce sales. Technically, the website is built on Magento with modern JavaScript libraries and integrates analytics and customer support tools. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks comprehensive security headers and explicit privacy policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer contact information.

A

Aerospace Welding Minneapolis, Inc.

awi-ami.com

57

Aerospace Welding Minneapolis, Inc. (AWI) is a well-established company founded in 1993 specializing in the manufacturing and repair of general aviation aircraft exhaust systems and engine mounts. The company holds FAA certifications and offers a range of services including certified welding, precision machining, and sheet metal fabrication. Their market position is strong as a world leader in their niche, targeting aviation professionals and aircraft owners. The website reflects a medium-sized business with a professional online presence built on Magento CMS, featuring e-commerce capabilities and clear contact information. Technically, the website employs modern web technologies such as Magento 2, RequireJS, jQuery, and Bootstrap, with Cloudflare DNS and GoDaddy as the registrar. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enforced and CAPTCHA on login, but improvements are recommended in DNSSEC deployment, cookie security flags, and security headers. Privacy compliance is basic with privacy and terms pages present but lacking explicit cookie consent mechanisms. Overall, the security posture is adequate but could be enhanced by implementing additional security headers and improving cookie security. No critical vulnerabilities or WAF blocking were detected, allowing full content accessibility. The business credibility is high, supported by FAA certifications and transparent contact details. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enabling DNSSEC, enforcing secure cookie flags, adding comprehensive security headers, and implementing explicit cookie consent to improve privacy compliance and user trust.

W

World Aquatics Championships - Singapore 2025

worldaquatics-singapore2025.com

67

The website www.worldaquatics-singapore2025.com serves as the official digital presence for the World Aquatics Championships and World Aquatics Masters Championships scheduled in Singapore in 2025. It provides event information, ticketing, volunteer opportunities, and community engagement details. The site targets aquatic sports enthusiasts, athletes, volunteers, and the general public interested in aquatic sports events. The business model revolves around event hosting and promotion, leveraging Singapore's reputation as a host for major international sports events. Technically, the website employs modern web technologies including React and the Ant Design UI framework, integrated with multiple analytics and tracking services such as Google Analytics, TikTok Pixel, and Facebook Pixel. The site is moderately optimized for performance and mobile responsiveness, with a good user experience and clear navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. No WHOIS registration data was found, which raises concerns about domain legitimacy, although the professional presentation and official branding suggest authenticity. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, clearer contact information, and improved security headers to strengthen trust and regulatory adherence.

W

World Aquatics Online

shop-worldaquatics.com

69

World Aquatics operates an e-commerce platform specializing in aquatic-related apparel, accessories, and swim essentials. The website presents itself as an official licensed product store with a clear focus on aquatic sports enthusiasts. The business model is retail-oriented, leveraging the Cafe24 platform for its online presence. Market positioning appears to be niche within aquatic merchandise, targeting consumers interested in water sports and related lifestyle products. The site branding is consistent and professional, though lacking explicit business contact details and comprehensive policy disclosures.

L

Lanes Health

laneshealth.com

64

Lanes Health is a well-established family-owned healthcare company with over 90 years of experience in manufacturing and distributing OTC medicines, food supplements, natural products, and confectionery. The company maintains a strong market presence in the UK and internationally through a portfolio of trusted brands such as Olbas, Jakemans, Kalms, and others. Their website reflects a professional and consistent brand image, targeting consumers, pharmacists, and retailers seeking quality health and wellbeing products. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and enhancing accessibility features. From a security perspective, the website uses HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and business information presented. Overall, the website is functional, secure, and compliant with privacy standards, but the domain registration inconsistency warrants further investigation. Strategic recommendations include improving security headers, publishing explicit security and incident response policies, and verifying domain registration details to enhance trust and credibility.

L

Lister Windows

listerwindows.co.uk

66

Lister Windows is a well-established UK-based manufacturer and supplier specializing in uPVC and aluminium windows, doors, and conservatory roofs. With over 40 years of experience, the company targets professional window and door installers, commercial contractors, and housing developers across the UK. Their business model focuses on B2B trade partnerships, offering scalable solutions, fast lead times, and comprehensive trade support including quoting and marketing portals. The company holds reputable certifications and has a strong market position as an award-winning fabricator.

The website kronaby.cz represents Janeba Time, s.r.o., a small Czech retail business specializing in hybrid smartwatches under the Kronaby brand. The site provides product information and links to partner e-commerce platforms for purchase. The business targets consumers interested in classic design smartwatches with advanced technology. The website is built on the Incomedia WebSite X5 Pro CMS and uses modern web technologies including jQuery, Swiper.js, and Google Analytics. It is hosted likely by Forpsi, a Czech hosting provider, with domain registration consistent with the business age and location. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and visible privacy or terms of service pages. No contact emails or phone numbers are explicitly provided on the main site, which may impact user trust and compliance. Overall, the site is professional and functional with moderate technical maturity.

F

FM Director

fmdirector.com

59

FM Director is a UK-based, high-end printed magazine and digital media platform focused on the facilities management sector. It serves FM professionals and influencers by providing industry-leading content, including monthly magazine issues and features. The business operates under the Business Daily Group umbrella, leveraging a network of related FM services such as FM Recruiter and FM Directory. The website demonstrates a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on WordPress with Elementor, employing modern web technologies and Google Analytics for tracking. While the site is well-structured and mobile-optimized, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The domain registration is consistent with the business age and shows no suspicious patterns, supporting the legitimacy of the website.

FM Recruiter is a UK-based specialist job board focused on the facilities management sector, operated by Business Daily Group. The platform offers job listings, CV upload, job alerts, and career advice tailored to facilities management professionals and recruiters. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience for its target audience. Technically, it is built on ASP.NET WebForms with common web technologies and integrates Google Analytics and Bing UET for tracking. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes phone numbers, email, and a physical address, enhancing business credibility. Overall, FM Recruiter presents as a trustworthy and functional niche recruitment platform with room for security enhancements.

A

Asociace společenské odpovědnosti (A-CSR)

spolecenskaodpovednost.cz

50

Asociace společenské odpovědnosti (A-CSR) is the largest sustainability and ESG initiative in the Czech Republic, operating as a non-profit association. It focuses on promoting the UN Sustainable Development Goals (SDGs), organizing events such as the Global Goals Summit and Giving Tuesday, and providing networking opportunities for its members. The association also publishes newsletters and an online magazine to inform and engage its audience. The target audience includes organizations and individuals interested in sustainability and social responsibility within the Czech market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the website uses HTTPS with a strong SSL configuration and employs best practices such as cookie consent and nonce usage in scripts. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is a concern for domain legitimacy, but the professional content and consistent branding support trustworthiness. Overall, the website presents a low risk profile with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security posture and trust.

R

Rēzeknes novads

rezeknesnovads.lv

60

Rēzeknes novads is the official municipal government website serving the Rēzeknes novads region in Latvia. The site provides comprehensive information about local governance, public services, business support, tourism, and community participation. It targets residents, businesses, and visitors, offering multilingual support in Latvian, English, and Russian. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO and jQuery, and integrates Google Analytics for visitor tracking. The design is professional and mobile-optimized, with clear navigation and consistent branding. From a technical perspective, the site employs modern web technologies and maintains a moderate performance level. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, it lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found. The WHOIS data confirms domain legitimacy and consistency with the website's geographic and organizational claims. Overall, the website demonstrates a solid foundation for public service delivery with good user experience and trust indicators. Key areas for improvement include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contact information to strengthen compliance and security posture.

B

Beretta Defense Technologies

berettadefensetechnologies.com

65

Beretta Defense Technologies is a specialized defense technology company manufacturing advanced equipment for military and law enforcement sectors. The company operates under the Beretta holding umbrella, leveraging established brand recognition and partnerships with related defense brands. Their website presents a professional image with clear focus on defense technology products and solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency. Overall, the company appears credible and professionally positioned in the defense sector, but could improve compliance and security transparency.

B

Beretta Defense

berettadefense.com

62

Beretta Defense is a defense sector company specializing in manufacturing and supplying a range of firearms and defense equipment including pistols, assault rifles, submachine guns, shotguns, and grenade launchers. They also provide armorer training courses and maintain product documentation to support law enforcement and military clients. The website presents a professional and consistent brand image targeting defense professionals and agencies. Technically, the site is built on WordPress with modern SEO and tracking tools, including Google Analytics and Cookiebot for cookie consent. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and published privacy or terms policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.

L

LEN - European Aquatics

europeanaquatics.org

51

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, managing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters. The organization provides comprehensive event calendars, news updates, rules, and development programs to support aquatic sports across Europe. The website serves as a central hub for athletes, federations, and fans, offering structured information and media content. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. It integrates Google Analytics for user tracking and complies with GDPR through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional security headers could be added. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative position in European aquatic sports.

T

Tribal Football

tribalfootball.com

60

Tribal Football operates as a specialized media platform delivering comprehensive football news, transfer rumors, and updates on teams and players worldwide. The website targets football fans and sports enthusiasts, providing timely and relevant content primarily focused on European football leagues and major competitions. The business model appears to be content publishing supported by advertising and possibly affiliate marketing, positioning Tribal Football as a recognized player in the football news media sector. Technically, the website is built using modern web technologies including React, Google Tag Manager, and performance monitoring tools like Lux. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site uses HTTPS exclusively, ensuring secure data transmission, and integrates standard analytics tools for user behavior tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and publicly available security policies or incident response information, which are areas for improvement. The absence of WHOIS data raises questions about domain registration legitimacy, though the website content and structure suggest a professional and trustworthy operation. Overall, Tribal Football presents a solid digital presence with good content quality and technical implementation. The main risks relate to domain registration transparency and the lack of detailed security and incident response disclosures. Addressing these gaps would enhance trust and compliance posture.

F

Florinett AG

florinett-holz.ch

43

Florinett AG is a small Swiss company specializing in forestry services and mountain wood products in the Graubünden region. Their website presents a professional image with clear descriptions of their forestry work, timber trade, specialized woodworking, and instrument wood offerings. The company positions itself as a regional expert with a focus on quality and efficiency through skilled staff and mechanization. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Fancybox, with basic mobile optimization and SEO practices. Security posture is moderate; HTTPS is assumed but no security headers or explicit security policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly provided on the homepage, which may impact user trust and compliance. Overall, the website is safe, professional, and trustworthy but could improve in security and privacy transparency.

A

Allegra Passugger Mineralquellen AG

passugger.ch

63

Allegra Passugger Mineralquellen AG is a well-established Swiss mineral water producer, operating since 1896. The company positions itself as an independent and traditional mineral water brand from Graubünden, emphasizing natural purity, sustainability, and strong partner relationships. Their product portfolio includes private label offerings and special editions such as the Crystal Edition. The website reflects a mature digital presence built on WordPress with modern technologies like Bootstrap and jQuery, enhanced by SEO tools such as Yoast. It features a cookie consent mechanism compliant with GDPR, and clear contact information, supporting transparency and user trust. Security posture is solid with HTTPS and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking via Google Analytics and no suspicious content or blocking mechanisms detected.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

I

Institut für Kulturforschung Graubünden

kulturforschung.ch

62

The Institut für Kulturforschung Graubünden (ikg) is an independent research institution based in Chur, Switzerland, focusing on humanities, social sciences, and cultural studies related to the Alpine region, especially Graubünden. The website serves as a platform for disseminating research projects, publications, events, and membership information, targeting academics, researchers, and culturally interested audiences. The business model revolves around research, publication, and community engagement through events and memberships. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Google Tag Manager, Typekit fonts, and Swiper.js for interactive content sliders. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers. Performance is moderate, with a professional and consistent design. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy with cookie consent mechanisms. However, it lacks explicit security headers and does not provide a public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively supports the institute's mission and audience engagement. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and user trust.

K

Kurhaus Bergün

kurhausberguen.ch

51

Kurhaus Bergün is a small hospitality business located in Switzerland, offering a range of services including hotel rooms, holiday apartments, dining, wellness treatments, and event hosting. The website reflects a well-established regional business with a focus on cultural heritage and sustainable tourism. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and multilingual plugins, indicating a mature and modern online presence. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the website maintains a professional and trustworthy appearance.

G

Gemeinde Surses

surses.ch

54

The website for Gemeinde Surses serves as the official municipal portal providing residents and visitors with comprehensive information about local government services, news, tourism, and public administration. It is well-positioned as a local government authority site in Switzerland, targeting the local community and tourists. The site offers key services such as administrative contacts, news updates, local maps, and tourism information. Technically, the site uses a mix of Google Analytics, Google Maps API, and jQuery 1.12.0, with a custom or proprietary CMS. The site is mobile-optimized and has good SEO practices but could improve accessibility and update some libraries. Security-wise, the site enforces HTTPS and anonymizes IPs in analytics but lacks explicit security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with basic privacy and cookie regulations, suitable for its government function.

G

Gemeinde Lantsch/Lenz Graubünden

lantsch-lenz.ch

50

The website www.lantsch-lenz.ch serves as the official online presence of the Gemeinde Lantsch/Lenz, a political municipality in the Albula region of the canton of Graubünden, Switzerland. It provides comprehensive information and services relevant to local residents and visitors, including municipal news, political governance, administrative services, tourism, and community events. The site is well-branded and structured to serve its target audience effectively. Technically, the website is built on the Joomla CMS platform with the Yootheme theme and utilizes modern web technologies such as jQuery, UIkit, and Font Awesome. It is mobile-optimized and includes accessibility features, providing a good user experience. Google Analytics is used for visitor tracking, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks several important security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The main areas for improvement include adding privacy and cookie policies to enhance GDPR compliance and implementing additional security headers to strengthen the security posture.

C

Cyberday Oy

tietosuojamalli.fi

65

Cyberday Oy operates the Digiturvamalli.fi platform, a Finnish cybersecurity compliance and management SaaS solution designed primarily for IT and security managers. The platform simplifies complex regulatory frameworks such as ISO 27001, GDPR, NIS2, and others into actionable tasks integrated with Microsoft Teams and browser access. Cyberday positions itself as a leading provider in the Finnish market, focusing on compliance automation, risk management, and reporting. Technically, the website is built on Webflow CMS with modern integrations including Google Analytics, Facebook Pixel, LinkedIn Insight, and cookie consent management, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the site could benefit from a public vulnerability disclosure policy and incident response contact details. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

E

Ennio Mattarelli

mattarelliennio.com

50

Ennio Mattarelli is a specialized manufacturer of clay target shooting machines based in Bologna, Italy, with a history dating back to 1988. The company offers a range of products including Olympic and Sporting lines, targeting professional shooters, sporting clubs, and distributors. Their market position is supported by sponsorships and official approvals from shooting sport organizations. The website reflects a professional and consistent brand image with clear product information and contact details. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, though the website content and business information appear authentic. Security posture is moderate with HTTPS usage and reCAPTCHA integration but lacks explicit security headers and published security policies. Overall, the site is well-designed and functional but would benefit from enhanced security documentation and verification of domain registration.

K

Kliping d.o.o.

kliping.ba

53

Kliping d.o.o. is a media monitoring and analysis company operating primarily in Bosnia and Herzegovina and the broader Southeast European region. The company offers a suite of services including media monitoring, analysis, planning, and a proprietary platform called Kliping MAP. Their target audience includes a wide range of organizations from public and private sectors to cultural and sports entities. The company positions itself as a leading media monitoring provider in the region with a strong partnership network. Technically, the website uses older JavaScript libraries and Flash-based media players, indicating some legacy technology usage. The site is built on the Contao CMS and includes Google Analytics for tracking. Security posture is moderate with HTTPS enabled but lacks modern security headers and uses deprecated technologies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and functional but would benefit from modernization and improved compliance.

S

SkalkaStar – Unikátní pěvecká soutěž

skalkastar.cz

45

SkalkaStar.cz is a Czech website dedicated to organizing a unique singing competition for children and youth aged 5 to 21 years. The event culminates in a final scheduled for September 13, 2025, at Skalka Family Park Ostrava. The competition is segmented into age categories, offering prizes such as park passes, annual subscriptions to a children's TV app, single recordings, music video productions, and cash awards. The website is built on WordPress using the Elementor page builder, incorporating modern web technologies including jQuery, Google Analytics, and Meta Pixel for tracking. While the site demonstrates good design quality, mobile optimization, and clear navigation, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security practices include HTTPS and reCAPTCHA integration, but absence of security headers and explicit contact information are notable gaps. Overall, the site appears legitimate and focused on its niche event, but improvements in privacy compliance and security hardening are recommended.

G

Guild of Architectural Ironmongers (GAI)

gai.org.uk

70

The Guild of Architectural Ironmongers (GAI) is a well-established UK-based not-for-profit professional association representing the architectural ironmongery sector. The organization provides education, technical guidance, membership services, and industry advocacy, positioning itself as a leading trade body in its niche. The website reflects a mature digital presence with comprehensive content targeting professionals, manufacturers, and specifiers within the architectural ironmongery industry. The business model focuses on member support, education, and industry standards promotion. Technically, the website is built on a legacy ASP.NET WebForms platform enhanced with Telerik UI components and modern analytics tools such as Google Analytics and Microsoft Application Insights. The site is mobile-optimized with good navigation and content structure, though some modernization opportunities exist. Security posture is solid with HTTPS enforced and telemetry implemented, but could be improved by adding explicit security headers and a public security policy. Overall, the site demonstrates a high level of professionalism and trustworthiness with clear privacy and cookie policies, active social media presence, and no signs of blocking or malicious activity. The domain age and WHOIS data support the legitimacy of the organization. Strategic recommendations include enhancing security headers, updating legacy components, and publishing a vulnerability disclosure policy to further strengthen trust and compliance.

S

SIA NETVISION

netvision.lv

54

SIA NETVISION is a well-established Latvian telecommunications provider offering optical home internet, interactive TV, fixed telephony, and data center services. With over 16 years of market presence, the company targets residential and business customers in Latvia, providing competitive packages and reliable connectivity solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer support channels. Technically, the site employs modern web technologies including Google Analytics and Tag Manager, with responsive design and good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or domains.

C

Cyberday Oy

digiturvamalli.fi

65

Cyberday Oy operates the Digiturvamalli.fi platform, a Finnish SaaS solution designed to simplify cybersecurity compliance and management for organizations, particularly targeting IT and security managers. The platform supports multiple international and national security frameworks such as ISO 27001, GDPR, NIS2, and others, providing a unified, step-by-step approach to achieving and demonstrating compliance. The service integrates with Microsoft Teams to bring security tasks closer to daily workflows, enhancing collaboration and ease of use. Cyberday Oy positions itself as a trusted provider with recognized certifications and a growing international presence under the Cyberday brand.

K

Kliping d.o.o.

kliping.si

53

Kliping d.o.o. is an established international media monitoring and analysis agency founded in 2002, headquartered in Slovenia with subsidiaries across the Adriatic region. The company specializes in tracking classical and digital media, providing clients with timely media analyses, insights, and strategic recommendations. Their services include monitoring, analysis, planning, and mobile applications tailored for business intelligence and media presence evaluation. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting businesses requiring media intelligence services. Technically, the site is built on Contao CMS and leverages modern JavaScript libraries and Google Analytics for tracking, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and anonymized analytics, though some security headers and explicit security policies are absent. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious indicators detected.

S

Swiss Ski School

swiss-ski-school.ch

49

Swiss Ski School is a Swiss-based service provider specializing in ski and snow sports instruction across multiple disciplines and age groups. The website presents a comprehensive offering of winter and summer activities, targeting a broad audience from beginners to experts, including people with disabilities. The business appears to be well-positioned nationally within Switzerland, leveraging a multi-language platform to serve diverse customers. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and Leaflet.js for maps. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is professional and trustworthy, with room for improvement in privacy and security transparency.

B

BusinessDailyGroup Ltd

fmbusinessdaily.com

64

FM Business Daily is a UK-based B2B marketing and news platform specializing in the Facilities Management sector. It offers targeted marketing services, sector intelligence, and a widely distributed newsletter reaching over 250,000 subscribers. The company positions itself as a leading force in raising profiles and driving business growth within the FM industry. The website is professionally designed using WordPress and Elementor, with modern digital marketing tools integrated such as Google Analytics and Tag Manager. The technical infrastructure is solid with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and domain transfer protections, though security headers and incident response information are lacking. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy in place. Overall, the site is trustworthy and professionally maintained, supporting a small but focused business entity within the UK FM market.

A

Alpine Ascents International, LLC

alpineascents.com

58

Alpine Ascents International, LLC is a well-established mountain guiding and trekking company with over 30 years of experience, specializing in guided climbs, mountaineering courses, and trekking expeditions worldwide. The company targets outdoor enthusiasts and climbers seeking professional guidance and equipment. Their market position is strong within the climbing industry, supported by a professional website and active social media presence. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Bootstrap, jQuery, and Google Analytics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and bot protection mechanisms in place, though some security headers and policies are not explicitly confirmed. Privacy compliance is limited due to the absence of visible privacy and cookie policies. The WHOIS data is missing, which raises concerns about domain registration transparency, but the website content and business information appear legitimate and professional. Overall, the site is trustworthy but would benefit from improved privacy disclosures and domain registration clarity.

D

Design Trade

designtrade.cz

40

Design Trade is a Czech Republic-based retailer and exclusive importer specializing in watches and jewelry, representing multiple well-known brands such as Boccia, Certina, Seiko, and others. The website serves as a digital storefront and brand showcase targeting consumers interested in quality timepieces and accessories. The business model focuses on retail distribution within the Czech market, positioning itself as a key supplier of premium watch brands. Technically, the website is built on Topinfo CMS and utilizes legacy JavaScript libraries like jQuery 1.12.4 and Fancybox 2.1.5, with Bootstrap for responsive design elements. While the site is accessible and professionally designed, mobile optimization and accessibility features are basic and could be improved. Security posture is moderate; HTTPS is assumed but no advanced security headers or policies are detected. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

Bergfahrt Festival is a small non-profit cultural festival focused on alpine culture in Switzerland, held in the village of Bergün/Bravuogn. The website provides comprehensive information about the festival's history, team, partners, and practical visitor information. The festival emphasizes intimate cultural experiences and community engagement. Technically, the website uses modern JavaScript libraries and fonts, with Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enabled and secure form submission, but lacks visible security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy PDF but no cookie banner or terms of service. Contact information is clearly provided including email, phone, and social media links. Overall, the site is professional, trustworthy, and well-branded, serving its niche audience effectively.

I

Installer Online

installeronline.co.uk

49

Installer Online is a UK-based digital media platform providing essential news, updates, and resources for professionals in the heating, plumbing, and renewable energy sectors. It serves as a key information hub for installers, offering industry news, event coverage, training information, and product updates. The site is part of the Nineteen Group, a known media company, which enhances its credibility and market position. The website targets heating and plumbing professionals, installers, and related stakeholders in the UK energy sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Facebook Pixel, and Parsely. The site is mobile-optimized and demonstrates good SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and publicly available security policies or incident response information. The WHOIS data is unavailable due to a domain registration error from Nominet UK, which is unusual but the site appears legitimate and professionally maintained. Overall, Installer Online presents a professional and trustworthy digital presence with strong content quality and business credibility. Strategic improvements in security headers, incident response transparency, and WHOIS registration clarity would enhance its security posture and trustworthiness further.

H

Home Credit Slovakia, a.s.

homecredit.sk

64

Home Credit Slovakia, a.s. operates a professional and well-structured website offering a range of financial products including flexible loans, loan consolidation, credit cards, and financing solutions for entrepreneurs. The company targets Slovak consumers and businesses, positioning itself as a significant player in the Slovak financial services market. The website promotes its mobile application and provides clear navigation and relevant content tailored to its audience. Technically, the site uses modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and Analytics for tracking, and employs Sentry for error monitoring, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, although dedicated security and incident response policies are not explicitly found. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website reflects a credible and trustworthy financial services provider with good technical and content quality.

N

Nineteen Group

prointegrationfuture.asia

66

Pro Integration Future Asia (PIFA) is a leading APAC event focused on professional AV, lighting, immersive technology, and systems integration. Organized by Nineteen Group in partnership with AVLIAS, it serves as a premier trade show and conference platform for industry professionals to showcase innovations, network, and gain insights. The website reflects a mature digital presence with modern technologies and comprehensive content tailored to its target audience of industry specialists and businesses in Southeast Asia. The event is positioned as a key market player with strong branding and partnerships.

카

카페24 주식회사

cafe24corp.com

45

Cafe24 Corp. is a South Korean technology company specializing in providing a comprehensive global e-commerce platform. Their services include commerce platform solutions, global market expansion support, store and design services, marketing, hosting, and entrepreneurship education. The company positions itself as a leader in the Korean e-commerce ecosystem with a strong partner network and a focus on enabling global online business success. The website content is professionally presented in Korean with multilingual support, targeting online merchants and businesses seeking e-commerce solutions. Technically, the website uses modern JavaScript libraries such as jQuery 3.6.0 and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some accessibility features are basic, and no CMS or specific frameworks are detected. Hosting appears to be managed internally or through Cafe24's own infrastructure. From a security perspective, the site enforces HTTPS and uses standard tracking scripts without visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security best practices and privacy compliance. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, Cafe24's website is a well-structured, professional platform supporting a large e-commerce business. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, publishing security policies, and clarifying domain registration information to improve trust and compliance.

I

International School Sport Federation (ISF) via Domains By Proxy, LLC

isf-eras.org

53

The ISF ERAS website serves as a registration and login portal for the International School Sport Federation's event management platform. It targets schools, sports organizations, and participants involved in school sports events. The site provides user account creation and login functionalities, with confirmation emails upon approval. The business operates in the education and non-profit sectors, focusing on facilitating school sports event participation internationally. The domain is registered since 2017 and uses privacy protection services, which is typical for organizations of this nature. Technically, the website is built on WordPress using the Divi theme and Gravity Forms plugin for form handling. It integrates Google Analytics and Google Tag Manager for visitor tracking. The site is hosted via GoDaddy, with domain control nameservers. Performance and mobile optimization are moderate to good, but SEO and accessibility features are basic. The site lacks explicit privacy and cookie policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS and has domain registration locks enabled, indicating good domain management. However, DNSSEC is not enabled, and no security headers such as CSP or HSTS are detected. There is no visible vulnerability disclosure or incident response information. Forms are handled via Gravity Forms, which is a secure and widely used plugin. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is moderate with recommendations to implement privacy and cookie policies, enable DNSSEC, add security headers, and provide vulnerability disclosure information. These steps would enhance compliance, user trust, and security maturity, aligning the site with best practices for organizations handling user registrations and personal data.

L

Lindenhofgruppe AG

lindenhofgruppe.ch

62

Lindenhofgruppe AG is a large healthcare provider based in Bern, Switzerland, offering comprehensive and interdisciplinary basic care with approximately 2500 employees across three locations. The website presents detailed information about their medical specialties, patient services, family support, and career opportunities, positioning them as a well-established regional healthcare institution. Technically, the site is built on Weblication® CMS and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, TikTok Pixel, and LinkedIn Insight Tag, reflecting a moderate level of digital maturity. The website uses HTTPS with good security headers and secure forms, but lacks explicit privacy and cookie policies, which impacts privacy compliance. Overall, the security posture is solid with no critical vulnerabilities detected, but improvements in transparency and compliance documentation are recommended. The domain WHOIS data is consistent with the business claims, supporting the legitimacy of the website.

N

Netomi

netomi.com

77

Netomi is a leading enterprise technology company specializing in AI-powered conversational customer experience solutions. Their platform leverages advanced AI, including sanctioned generative AI and large language models, to automate and enhance customer service across multiple channels. The company positions itself as a market leader with a strong focus on brand safety, security, and seamless integration with existing business systems. The website demonstrates a mature digital infrastructure using WordPress CMS, modern marketing and analytics tools, and strong SEO and accessibility practices. Security posture is robust with HTTPS, multiple certifications (SOC2, ISO 27001, GDPR, HIPAA, etc.), and secure form handling. However, the domain WHOIS data is not publicly available, which slightly impacts transparency but does not detract from the overall trustworthiness given the professional site content and strong business signals. Overall, the site is well-designed, content-rich, and targets enterprise clients seeking AI-driven customer service solutions.

T

The Boeing Company

boeing.com

77

The Boeing Company is a globally recognized aerospace and defense corporation, operating as the world's largest manufacturer of commercial jetliners and defense, space, and security systems. The website reflects a mature, enterprise-level digital presence with comprehensive content targeting commercial aerospace customers, defense clients, investors, employees, and the general public. The business model centers on manufacturing and services in aerospace and defense, with a strong emphasis on innovation, safety, and sustainability. The site demonstrates consistent branding and professional design, supporting Boeing's market leadership position. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but explicit security headers and cookie consent mechanisms could be improved. Privacy compliance is partially addressed with a comprehensive privacy and ethics policy, but lacks visible cookie consent and detailed data protection officer contact. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain introduces some uncertainty. The digital infrastructure supports Boeing's business objectives effectively, but enhancements in privacy transparency and security header implementation are recommended to further strengthen compliance and user trust.