Security Directory

M

Mary Kay, Inc.

marykay.com

69

Mary Kay, Inc. operates a globally recognized direct selling business specializing in skin care and color cosmetics. The website serves as the official platform for product sales, brand information, and Independent Beauty Consultant engagement. It holds a leading market position as the #1 direct selling brand in its industry. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and VideoJS, supported by extensive analytics and marketing tools such as Google Analytics, TikTok Pixel, and PowerReviews. The site is mobile optimized and provides a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforced and consent mechanisms for privacy and cookies, though some security headers could be improved. The absence of WHOIS data is noted but does not detract from the overall legitimacy given the brand's stature. Strategic recommendations include enhancing security headers and accessibility features to maintain compliance and trust.

B

BC Hydro

bchydro.com

71

BC Hydro is a large Canadian electric utility serving British Columbia with electricity generation, transmission, and distribution services. The website presents a professional and comprehensive digital presence with extensive customer resources, energy-saving programs, and project information. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, jQuery, Font Awesome, and integrates analytics and marketing tools such as Google Tag Manager and Qualtrics. Security posture is strong with HTTPS enforcement, security headers, and secure login portals, although no explicit incident response or vulnerability disclosure policies were found. The absence of WHOIS registration data is unusual for a public utility domain and warrants further verification, but the website content and branding strongly support legitimacy. Overall, the site is well designed, accessible, and trustworthy, serving a broad audience of residential and business customers in British Columbia.

U

UAB „Teledema“

teledema.lt

43

Teledema is a Lithuanian virtual mobile network operator (MVNO) established in 2003, providing mobile telephony, internet, SIP services, and mobile electronic signature solutions. The company targets both private consumers and business clients within Lithuania, boasting a customer base exceeding 63,500 users. Their website reflects a consistent brand presence and offers a range of telecommunications services with a focus on quality and reliability. Technically, the website is built on Joomla CMS and employs several JavaScript libraries including jQuery and MooTools, alongside marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. While the site is accessible and well-structured, it uses outdated JavaScript libraries which pose security risks. Security posture is moderate with cookie consent implemented but lacks visible security headers and updated libraries. Privacy compliance is basic, with no explicit privacy policy or terms of service pages detected. Overall, the website demonstrates a functional and professional digital presence but requires improvements in security and privacy transparency to enhance trust and compliance.

U

UFO Moviez India Limited

ufomoviez.com

62

UFO Moviez India Limited operates a large digital cinema distribution and advertising platform in India, boasting over 3600 screens across 1200+ towns. The company targets advertisers, exhibitors, producers, and distributors, offering services including film distribution, in-cinema advertising, and cinema technical support. The website reflects a mature digital presence built on Drupal 8 with modern front-end libraries and Google Analytics integration. While the site is well-structured and mobile-optimized, it lacks explicit cookie consent mechanisms and detailed security or incident response policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and social media presence strongly indicate a legitimate and established business. Overall, the site demonstrates good professionalism and trustworthiness but could improve privacy compliance and security disclosures.

U

Unicom Marketing Consultancy

unicommarc.com

46

Unicom Marketing Consultancy is a Singapore-based digital marketing agency specializing in web development, SEO/SEM, social media marketing, and email marketing services. The company targets businesses seeking comprehensive digital marketing solutions within Singapore. The website presents a professional image with clear service offerings and a portfolio showcasing recent projects. Technically, the site uses established JavaScript libraries and Google Analytics for tracking, hosted via GoDaddy registrar. However, the site lacks modern security enhancements such as DNSSEC and security headers, and no privacy or cookie policies are published, indicating gaps in compliance and security posture. The contact form includes CAPTCHA, which is a positive security measure. Overall, the website is functional and credible but would benefit from improved security and privacy compliance.

R

RTTAX

rttax.com

55

RTTAX is a specialized tax refund service provider targeting individuals who have worked abroad in countries such as the UK, USA, Germany, Norway, and others. With over 20 years of experience and a client base exceeding 250,000, RTTAX positions itself as a leader in the international tax refund market. The company offers professional services including document processing, online account management, and a tax refund calculator tool, supported by a widespread network of representatives across 40 countries. The business model focuses on facilitating tax refunds efficiently without upfront fees, charging service fees only upon successful refunds.

A

AB „NAUJOJI RINGUVA“

ringuva.lt

28

AB „NAUJOJI RINGUVA“ operates a Lithuanian e-commerce website specializing in cleaning and hygiene products, offering a variety of branded items such as SMILĖ soaps and RESQ stain removers. The site targets primarily Lithuanian consumers and businesses, providing online shopping, customer support via contact forms, and newsletter subscriptions. The company appears to be a medium-sized retail business with consistent branding and a moderate market presence in Lithuania. Technically, the website is built on the OXID eShop Community Edition platform and uses a range of JavaScript libraries including jQuery 1.8.3, bxSlider, and Google Maps API. The site integrates Google Analytics and Facebook SDK for tracking and social media engagement. While the site has a cookie consent banner and basic form validation, it lacks HTTPS in the provided content, uses outdated libraries, and does not show security headers, indicating moderate technical maturity with room for improvement. From a security perspective, the absence of HTTPS and modern security headers, combined with outdated JavaScript libraries, presents vulnerabilities that could impact user data confidentiality and integrity. The site does implement cookie consent and input validation, but lacks visible privacy policies and incident response information. WHOIS data is unavailable due to query limits, limiting domain trust assessment. Overall, the website is functional and professionally presented but requires urgent security upgrades including HTTPS implementation, library updates, and enhanced privacy disclosures to improve trustworthiness and compliance.

O

Omda

medscinet.com

57

Omda is a healthcare technology company specializing in secure, standardized software solutions for clinical research and medical data analytics. Their offerings include comprehensive platforms for clinical trials, quality registries, biobank management, patient-reported outcome measurements, and healthcare intelligence. The company targets clinical researchers, healthcare professionals, and academic institutions, positioning itself as a key player in health analytics software with a medium-sized presence and a foundation dating back to 1999. Technically, the website is built on WordPress with a modern tech stack including jQuery, SEO plugins, and cookie consent management. The site is well-structured, mobile-optimized, and uses HTTPS with moderate performance. However, some security best practices such as security headers and explicit security policies are missing. From a security perspective, the site benefits from HTTPS and cookie consent but lacks published security policies, incident response contacts, and advanced security headers. The domain is long-established and registered through a reputable registrar, indicating legitimacy. No WAF or blocking mechanisms were detected. Overall, Omda's website demonstrates good professionalism and technical maturity but would benefit from enhanced privacy and security disclosures to improve compliance and trust. Strategic recommendations include publishing privacy and security policies, adding security headers, and providing clear contact information for incident response.

N

NAOS

naos.com

62

NAOS is a French skincare company specializing in ecobiology-based dermatology, aesthetics, and personalized skincare products. The company operates multiple brands including Bioderma, Institut Esthederm, and Etat Pur, targeting consumers seeking tailored skincare solutions. The website supports a global audience with country-specific subdomains and is built on a WordPress CMS with modern front-end libraries and SEO optimization tools. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit privacy policies. The domain is well-established since 1996, reinforcing business credibility. Overall, the website is professional and trustworthy but could improve transparency and security practices.

Gaudrė, UAB is a Lithuanian company specializing in lighting solutions for both residential and commercial clients, boasting over 20 years of industry experience. Their offerings include custom lighting projects, manufacturing of lighting fixtures, lighting control systems, and electrical installation services. The company maintains a strong market position in Lithuania with a professional portfolio of projects and partnerships with recognized brands. Technically, the website employs modern JavaScript libraries and cookie consent management tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. The absence of explicit contact emails and phone numbers on the website is a minor gap in business credibility. WHOIS data is unavailable due to query limits, but the domain appears privacy-protected, which is reasonable for this business type. Overall, the website is professional, secure, and compliant, supporting the company's reputable market presence.

L

LW Group

lwgroup.eu

27

LW Group is a medium-sized international company specializing in the global raw materials supply chain market. They connect raw material producers with buyers worldwide, offering services such as market analysis, supply chain management, trading solutions, and logistics. The company maintains a global footprint with representative offices in multiple countries, supporting a broad client base. Technically, the website is built on WordPress with modern web technologies and SEO best practices, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though some security headers and policies could be improved. Overall, the website reflects a professional and trustworthy business with a strong market presence.

A

Apvalaus Stalo Klubas

asklubas.lt

32

Apvalaus Stalo Klubas is a hospitality business located in Trakai, Lithuania, offering a Michelin Guide recommended restaurant, a four-star hotel and spa, a pizzeria, and a terrace with panoramic views of Trakai castle. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeting tourists and business event organizers. The business model focuses on providing comprehensive hospitality services including dining, accommodation, and event hosting. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Owl Carousel, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and incident response information are missing. Privacy compliance is basic but present, with a privacy policy and cookie banner in place. WHOIS data is unavailable due to query limits, which limits domain trust verification. Overall, the website is trustworthy and professional but could improve transparency and security practices.

A

AGMI Traffic & Lighting

agmi.nl

57

AGMI Traffic & Lighting is a well-established Dutch company specializing in traffic signage, support structures, and tunnel safety equipment, with a strong focus on sustainability and quality. Founded in 1997, it holds multiple certifications including ISO 9001 and Cradle to Cradle, positioning itself as a leading authority in its sector. The website reflects a professional and consistent brand image targeting municipalities and infrastructure sectors. Technically, the site employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the website is trustworthy and credible with no blocking or WAF interference detected.

U

Uždaroji akcinė bendrovė „LITESKO“

litesko.lt

64

Litesko is a Lithuanian energy company specializing in district heating and hot water supply services. The company operates multiple local branches serving various cities, providing residential and business customers with heating solutions. Their website offers comprehensive information on energy consumption, billing, energy saving tips, and customer electronic service access. The business model is that of a regional utility provider with a medium-sized market presence in Lithuania's energy sector. Technically, the website is built on Drupal 7 CMS with jQuery libraries and includes modules for cookie compliance and user interaction features like Fancybox. The site is served over HTTPS with a cookie consent mechanism, indicating a moderate level of digital maturity. Performance and mobile optimization are basic but functional. Accessibility features are present but could be improved. From a security perspective, the site uses HTTPS and has secure login forms, but lacks visible HTTP security headers such as CSP or HSTS in the provided content. No explicit security or incident response policies are published. The WHOIS data is unavailable due to query limits, limiting domain trust analysis. However, the website content and company information appear consistent and legitimate. Overall, the website is professional and trustworthy with good content quality and business credibility. Security posture is moderate with room for improvement in headers and policy transparency. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy. The main risk is the lack of WHOIS data and some missing security headers, which should be addressed to enhance trust and security.

I

Inlusion Netforms

inlu.net

47

Inlusion Netforms is a specialized provider of virtual reality solutions targeting multiple industries such as education, manufacturing, healthcare, and media. Their offerings include VR simulators, 360 VR videos, 3D scanning, and custom VR machines, positioning them as a niche player in the VR technology market. The website demonstrates a professional design with clear navigation and multilingual support, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with common libraries and plugins, delivering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC, and no published security or incident response policies. Privacy compliance is addressed with a privacy policy and cookie consent banner, though GDPR compliance is not explicitly confirmed. Overall, the website reflects a legitimate small business with room for improvement in security and privacy transparency.

M

MB INK MEDIA

ink.lt

39

INK (MB INK MEDIA) is a small media and creative agency based in Lithuania, specializing in visual content production such as showreels, commercials, and visual effects. Their website serves primarily as a portfolio showcasing a wide range of projects for various clients. The technical infrastructure relies on jQuery libraries and the ECTO Framework, with a moderate level of performance and mobile optimization. However, the site lacks modern CMS indicators and advanced SEO or accessibility features. Security posture is limited due to absence of HTTPS confirmation, security headers, and privacy compliance documentation. The WHOIS data is unavailable due to query limits, which restricts domain legitimacy verification. Overall, the site is functional and visually appealing but requires improvements in security, privacy, and business transparency to enhance trust and compliance.

U

UAB SALDA

salda.lt

55

UAB SALDA is a well-established Lithuanian manufacturer specializing in ventilation systems with over 30 years of experience. The company serves a broad international market, offering products for residential, commercial, industrial, and public buildings. Their website demonstrates a professional digital presence with clear product offerings, multilingual support, and active social media engagement. Technically, the site uses modern JavaScript libraries and responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website reflects a credible and mature business with room for enhanced security and compliance transparency.

U

UAB Medicine

uabmedicine.org

60

UAB Medicine is a prominent academic medical center in the United States, affiliated with the University of Alabama Birmingham Health System. The organization provides a wide range of healthcare services including cancer care, cardiovascular treatment, neurology, orthopaedics, transplant services, and women and infants care. The website reflects a well-established healthcare provider with a strong market position and a focus on quality patient care and research. The target audience includes patients, medical professionals, and researchers. The business model centers on healthcare delivery and academic medical research, supported by clinical trials and specialty services. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and LivePerson chat. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The technical infrastructure supports a professional and user-friendly experience. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, some security headers are not explicitly detected, and there is no visible dedicated security policy or incident response contact information. The WHOIS data is unavailable or protected, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy indicated by the website content and branding. Overall, the website is professional, secure, and compliant with privacy regulations, including GDPR. Strategic recommendations include enhancing security header implementation, publishing a security policy, adding vulnerability disclosure information, and maintaining regular security audits to ensure ongoing protection and trust.

U

UAB Optikona

optikona.lt

46

Optikona is a Lithuanian medium-sized company specializing in optical healthcare products and services. The website serves primarily as a corporate and customer portal with product information, login capabilities, and company details. The business targets Lithuanian customers and operates in the healthcare retail sector, partnering with known optical brands such as Alcon and Hoya. The website's technical infrastructure is based on older JavaScript libraries including jQuery 1.11.1 and uses standard web technologies like Lightbox and Font Awesome. While the site is accessible and functional, it lacks modern security headers and updated libraries, which could expose it to vulnerabilities. No privacy or cookie policies are present, indicating a gap in compliance with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility.

U

UAB SKUBA LIETUVA

skuba.lt

55

UAB SKUBA LIETUVA is a well-established European commercial transport expert group with over 30 years of experience. The company specializes in providing comprehensive solutions including spare parts sales, commercial vehicle repairs, and sales of new and used trucks and trailers. Their market position is strong with a broad European presence supported by multiple country-specific domains. The website is professionally designed, mobile optimized, and provides clear navigation and relevant content targeted at commercial transport businesses. Technically, the site uses modern JavaScript libraries and frameworks, integrates Google reCAPTCHA for form security, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and spam protection, though some security headers and explicit policies could be improved. The lack of WHOIS data limits full domain legitimacy verification but the business information and contact details are transparent and professional. Overall, the site represents a credible and trustworthy business with room for minor security and compliance enhancements.

TMD Partners is a leading consulting and training company based in Lithuania, serving clients primarily in Lithuania, Latvia, and Estonia. The company offers a broad range of integrated services including leadership development, organizational growth, employee engagement surveys, and innovative hybrid learning solutions. Their market position is strong within the Baltic region, supported by partnerships with international providers of training and assessment tools. Technically, the website employs modern JavaScript libraries and tracking technologies, with a good level of mobile optimization and user experience. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting forms, although the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy. The lack of WHOIS data for the domain is a notable concern, impacting trustworthiness and legitimacy assessments. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

People's History Museum is a well-established UK national museum dedicated to the history and development of democracy. The museum operates as a non-profit organization offering free entry with suggested donations, educational programs, exhibitions, events, and venue hire services. The website reflects a strong market position within the cultural and educational sector, targeting a broad audience including families, community groups, and individuals interested in social justice and history. The museum's digital presence is supported by a professionally designed WordPress website with consistent branding and good content quality. The site is mobile-optimized and accessible, with clear navigation and relevant content.

Staffordshire Hydraulic Services Ltd is a UK-based manufacturer and distributor specializing in high pressure hydraulic equipment with over 40 years of industry experience. The company offers a broad range of products including high pressure valves, pumps, hoses, and bespoke pressure equipment, serving sectors such as oil & gas, waterjet cutting, chemical, and petrochemical industries. They hold exclusive UK distribution rights for several international brands and provide engineering support, repair, and rental services. The website is professionally designed with clear navigation and detailed business information, targeting industrial clients requiring high pressure solutions. Technically, the website employs a traditional tech stack including jQuery and Google Analytics, with asynchronous loading of tracking scripts and a megamenu navigation system. While the site performs moderately well, mobile optimization and accessibility are basic, and SEO practices are minimal. No CMS or hosting provider details are evident. Security-wise, the site lacks visible security headers and cookie consent mechanisms, and the WHOIS data for the domain is unavailable due to domain naming issues, which raises concerns about domain legitimacy. However, the website content is comprehensive and consistent with a legitimate business. Overall, the security posture is moderate with room for improvement in HTTPS enforcement, security headers, and privacy compliance. The absence of WHOIS data and domain registration irregularities warrant further investigation to confirm domain ownership and legitimacy. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, and verifying domain registration details to strengthen trust and compliance.

N

NetNordic Norway AS

netnordic-community.no

49

NetNordic Community is a newly launched resource platform by NetNordic Norway AS, designed to support users of their technology solutions with a centralized, user-friendly interface. The platform targets existing customers and users, providing login access to personalized resources and support. The website is professionally designed with a clear structure and Norwegian language content, reflecting a medium-sized technology company operating primarily in Norway. Technically, the site uses standard web technologies including HTML5, CSS3, and jQuery libraries, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by implementing additional HTTP security headers and multi-factor authentication. Privacy compliance is supported by links to comprehensive privacy and cookie policies on the corporate site, though no explicit consent mechanism is present on this platform. Overall, the domain registration data aligns well with the business launch timeline, indicating legitimacy and consistency.

C

Coldwell Banker

coldwellbankerinternational.com

66

Coldwell Banker International operates as a globally recognized real estate brand with a strong presence in 40 countries through a master franchise network. The company offers a comprehensive platform for property searches, agent and office locators, and franchising opportunities, targeting international buyers, sellers, and real estate professionals. The website reflects a mature business with a long history dating back to 1906 and is supported by a parent company, Anywhere Advisors LLC. The brand emphasizes trust, integrity, and service, with a consistent and professional digital presence. Technically, the website employs modern web technologies including Google Tag Manager, Google Maps API, jQuery UI, and Owl Carousel, hosted on a CDN infrastructure ensuring moderate performance and good mobile optimization. The site includes GDPR-compliant privacy and cookie policies managed via TrustArc, indicating a commitment to privacy compliance. Navigation and content structure are clear and user-friendly, supporting a positive user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and secure form handling, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces transparency and trust slightly, though the overall brand legitimacy and external link ecosystem support a moderate to high trust level. Overall, Coldwell Banker International presents a professional, secure, and privacy-conscious online presence suitable for its global real estate business. Strategic improvements in security policy transparency and WHOIS data visibility would enhance trust and compliance further.

C

Coldwell Banker Global Luxury

coldwellbankerluxury.com

66

Coldwell Banker Global Luxury operates as a premier luxury real estate platform, providing affluent clients worldwide with access to high-end property listings, expert specialist agents, and curated editorial content. The brand is well-established with a global footprint spanning 40 countries and daily luxury sales exceeding $200 million, positioning it as a leader in the luxury real estate market. The website reflects a mature digital presence with modern technologies such as Google Maps integration, Google Tag Manager, and TrustArc consent management, ensuring a user-friendly and compliant experience. Technically, the site leverages a robust tech stack including jQuery, Owl Carousel, and likely Ruby on Rails backend, hosted on a CDN for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, though explicit security headers are not visible in the provided data. From a security perspective, the site demonstrates good practices but lacks visible security policy or incident response information. The absence of WHOIS data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts domain trustworthiness. Overall, the site is professional, secure, and compliant, serving its business purpose effectively.

V

Veiligheidsregio Brabant-Noord

vrbn.nl

75

Veiligheidsregio Brabant-Noord is a Dutch governmental regional safety authority responsible for coordinating emergency services including fire brigade, medical assistance, police, and crisis management across 11 municipalities serving over 670,000 residents. The organization emphasizes collaboration among various public safety entities to ensure preparedness and effective response to incidents and disasters. The website reflects this mission with comprehensive information, news updates, and resources for residents and partners. Technically, the website is built on the IPROX.NET 4 CMS platform, utilizing modern JavaScript libraries such as jQuery and Flexslider, and integrates Google Analytics with privacy-conscious settings like IP anonymization. The site is mobile-optimized, accessible, and SEO-friendly, with a clear navigation structure and professional design. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policy documentation, vulnerability disclosure mechanisms, and some recommended security headers. The WHOIS data confirms the domain's legitimacy and consistency with the organization's governmental nature. Overall, the website presents a trustworthy and professional digital presence for a regional government safety authority, with minor areas for improvement in security transparency and policy disclosures.

G

GGD Drenthe

gezondheidsatlasdrenthe.nl

73

Gezondheidsatlas Drenthe is a regional public health data platform operated by GGD Drenthe, providing comprehensive health statistics and insights for the Drenthe province in the Netherlands. The website aggregates data from multiple authoritative sources such as the GGD Health Monitor, RIVM, and CBS, targeting policymakers, health professionals, and the general public. The platform offers thematic health data, area profiles, and news updates, supporting informed decision-making in public health. Technically, the website is built on a custom ASP.NET Web Forms CMS with a modern frontend stack including jQuery, jQuery UI, and FontAwesome Pro. It employs Matomo analytics with secure cookie settings, indicating a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site enforces HTTPS and uses secure cookies but lacks published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie information, though no explicit cookie consent mechanism is implemented. Overall, the website demonstrates a solid security posture and professional business credibility, with room for improvement in formal security documentation and user privacy controls.

T

TRAG-Plan & Engineering Services Kft

tragplan.hu

47

TRAG-Plan & Engineering Services Kft is a Hungarian engineering and construction company founded in 2023. The website serves as a corporate portal showcasing company information, organizational structure, completed projects, and career opportunities. It also highlights a network of subsidiaries, indicating a medium-sized enterprise with a diversified business model in the real estate and construction sectors. The site targets industry clients, partners, and potential employees within Hungary. Technically, the website uses a custom CMS with modern JavaScript libraries including jQuery, Google Maps API, and Google Analytics for tracking. The design is professional with good navigation and moderate mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit privacy or security policies. No social media presence is linked directly on the site. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

M

MCM beton

mcmbeton.hu

47

MCM beton is a Hungarian construction-related company specializing in concrete and related services, operating as part of the larger Market corporate group. The website presents company information, contact details, and links to sister companies, targeting construction industry clients primarily in Hungary. The digital infrastructure uses modern JavaScript libraries and Google services, indicating moderate digital maturity. However, some security best practices such as security headers and cookie consent mechanisms are missing or minimal. The website is professionally designed with good navigation and mobile optimization, but lacks explicit privacy and security policies on-site. Overall, the domain registration and website content align well, supporting legitimacy and trustworthiness.

P

Prebeton Zrt.

prebeton.hu

47

Prebeton Zrt. is a Hungarian manufacturing company specializing in precast concrete products and related construction services. It operates as part of a larger corporate group with multiple subsidiaries, serving primarily B2B clients in the construction and real estate sectors. The website reflects a medium-sized enterprise with a clear business model focused on manufacturing, design, transportation, and assembly services. Technically, the website uses a modern JavaScript stack with common libraries and integrates Google Analytics and Tag Manager for tracking. The site is accessible, mobile responsive to a basic degree, and has a consistent branding approach. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Vilati Szerelő Zrt.

vilati.hu

48

Vilati Szerelő Zrt. is a well-established Hungarian construction and real estate development company, founded in 1998 and operating as part of a larger corporate group with multiple subsidiaries and partners. The company focuses on construction projects and real estate development, targeting the Hungarian market and related stakeholders. The website presents a professional image with clear navigation, project information, and corporate group affiliations. Technically, the site uses a custom CMS with common JavaScript libraries and Google services for analytics and mapping. While the site is functional and moderately optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The domain is longstanding and consistent with the business claims, indicating high legitimacy.

M

Moratus Kft.

moratus.hu

48

Moratus Kft. is a well-established Hungarian construction and real estate company founded in 2005, operating as part of a larger corporate group with multiple subsidiaries. The company focuses on construction projects, real estate development, and related services, targeting clients and partners in the construction and real estate sectors. The website presents a professional image with clear navigation, project showcases, awards, and career opportunities, reflecting a mature business presence. Technically, the website uses modern JavaScript libraries such as jQuery, Google Tag Manager, Google Analytics, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, although accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected, but improvements in security headers and privacy policy publication are recommended. Overall, the website is credible and trustworthy, with a solid business foundation and digital presence. Strategic improvements in privacy compliance and security posture would enhance its risk profile and user trust.

O

OKM Építőipari és Szolgáltató Kft.

okmkft.hu

47

OKM Építőipari és Szolgáltató Kft. is a Hungarian construction and service company founded in 2020, operating as part of the larger Market corporate group. The company specializes in construction, road and utility planning, and project management services targeting B2B clients in the Hungarian construction sector. The website reflects a medium-sized enterprise with consistent branding and a clear market position within its group. Technically, the site uses common JavaScript libraries and Google services, with moderate performance and good mobile optimization. Security posture is moderate with cookie consent implemented but lacks advanced security headers and explicit privacy or terms of service pages. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is professional but could improve in privacy compliance and security best practices.

R

Rebild Kommune

rebild.dk

67

Rebild Kommune operates an official municipal website providing citizens and stakeholders with comprehensive information about local government services, political agendas, and community offerings. The website is well-structured, targeting residents of Rebild Kommune and related business entities. It leverages Drupal 9 CMS and integrates modern frontend technologies and cookie compliance tools to ensure a user-friendly and privacy-conscious experience. The presence of a detailed cookie consent mechanism and a referenced Data Protection Officer indicates a strong commitment to GDPR compliance. Security posture is adequate with HTTPS enabled and cookie consent implemented, though improvements in security headers and explicit security policies are recommended. Overall, the website is legitimate, professionally maintained, and trustworthy, reflecting the municipality's public service role.

P

Pareto Securities

paretosec.com

53

Pareto Securities is an established independent full-service investment bank with a strong foothold in the Nordic capital markets, founded in 2000. The company offers investment banking and capital markets services with a global placing power, targeting investors and financial institutions primarily in the Nordic region. The website reflects a professional business presence with consistent branding and relevant content tailored to its financial services audience. Technically, the website employs a moderately modern tech stack including jQuery, Google Tag Manager, and Cloudflare for hosting and security. The use of ExpressionEngine CMS is noted, and performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and Cloudflare protection, though some improvements are recommended such as upgrading outdated libraries and enabling DNSSEC. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear privacy policies, supporting GDPR compliance. However, no explicit terms of service or security policies were found, and no direct contact information is visible on the homepage. Overall, the website is trustworthy and professionally maintained, with room for technical and security enhancements.

D

Danhostel

danhostel.dk

69

Danhostel is a well-established hospitality business operating a network of 64 hostels across Denmark, targeting budget travelers, groups, schools, and conference attendees. The website reflects a professional and consistent brand presence with clear service offerings focused on affordable accommodation and group facilities. The technical infrastructure is based on Drupal CMS, enhanced with modern JavaScript libraries and integrated with major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating good accessibility and operational stability. Overall, the website demonstrates a mature digital presence aligned with its business objectives.

ETEVERS E&L is a South Korean technology and logistics company specializing in integrated device and service management solutions, fulfillment services, and E-Commerce logistics. The company has a stable financial structure, a specialized workforce, and a broad portfolio of related subsidiaries and partner sites, indicating a well-established market presence. The website is professionally designed with good content quality and clear navigation, targeting IT service users and logistics clients. Technically, the site uses a mix of legacy and modern JavaScript libraries hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate but could be improved by updating outdated libraries and implementing security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy with a legitimacy score of 85 based on WHOIS and content consistency.

ETEVERSePA is a South Korean IT solutions company specializing in digital transformation services including infrastructure integration, cloud migration, and big data solutions. Founded in 2007, the company presents itself as a stable and experienced player in the technology sector with a medium-sized workforce and multiple partnerships. The website reflects a professional business model targeting IT industry clients seeking comprehensive IT infrastructure and cloud services. Technically, the site uses a mix of legacy and modern JavaScript libraries and frameworks, hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is moderate with some concerns due to outdated libraries and lack of visible security headers or cookie consent mechanisms. The domain registration is consistent with the business location and claims, enhancing trustworthiness. Overall, the website is functional and professional but would benefit from security and privacy improvements.

ETEVERSeBT is a South Korean IT solutions company founded in 2022, specializing in providing optimized business IT solutions through partnerships with leading software, hardware, and network manufacturers. The company positions itself as a customer-centric business IT solutions provider with a medium-sized operation and a growing partnership ecosystem. The website is professionally designed, primarily in Korean, and targets IT industry clients and partners. Technically, the website uses a legacy jQuery version alongside modern libraries like Swiper.js and fullpage.js, hosted on AWS infrastructure. While the site is mobile-optimized and SEO-friendly, it lacks some modern security best practices such as security headers and cookie consent mechanisms. The security posture is moderate but could be improved by updating outdated libraries and enhancing domain security features. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and privacy compliance would enhance trust and reduce risk.

ETECH SYSTEM, operated by Young Woo Digital, is a Korean IT company specializing in digital transformation solutions and IT services. Established in 2010, the company has a medium-sized presence with overseas offices in China, Japan, India, and the USA. Their offerings include IT consulting, infrastructure system integration, cloud and big data services, and maintenance. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting corporate clients seeking IT innovation. Technically, the website uses a modern but somewhat dated technology stack including jQuery 1.7.1, Bootstrap, and fullpage.js, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features and some modern security headers. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed from domain and AWS hosting), but no explicit security headers were found in the HTML. The use of an outdated jQuery version poses a minor risk. There is no visible cookie consent mechanism or published security policy, which may impact privacy compliance. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is functional and professional with moderate security and privacy compliance. Strategic improvements in security headers, updated libraries, and privacy mechanisms would enhance trust and compliance.

M

Market Építő Zrt.

market.hu

48

Market Építő Zrt. is a well-established Hungarian construction company founded in 1999, with a strong presence in the real estate and construction sectors. The company operates multiple subsidiaries and offers a range of construction and building services, emphasizing sustainability and corporate social responsibility. Their website reflects a professional and consistent brand image targeting industry stakeholders and potential clients in Hungary. Technically, the website uses modern JavaScript libraries and tracking tools, with a custom CMS backend. The site is mobile-optimized and includes standard SEO and accessibility features, though accessibility could be improved. Security posture is good with HTTPS enforced and security headers present, but lacks explicit published security policies or incident response information. Privacy compliance is basic with cookie consent implemented and a privacy policy available, though GDPR compliance indicators could be stronger. Overall, the website is professional, trustworthy, and credible, with room for enhancements in security transparency and privacy compliance.

S

SPARKPLUS

sparkplus.co

36

SPARKPLUS is a South Korean company specializing in providing tailored office spaces and coworking environments primarily in Seoul and the greater metropolitan area. Their business model focuses on flexible office rentals, subscription-based personal workspaces, event space rentals, and promotional offerings such as pre-booking and free trial periods. The company positions itself as a modern, customer-centric real estate service provider with a strong emphasis on convenience and practical workspace solutions. Technically, the website is built on a modern JavaScript stack including jQuery, Swiper, and Axios, hosted on Cafe24, a popular Korean hosting platform. The site is mobile-optimized and features rich multimedia content, including embedded Vimeo videos and interactive UI components. Security-wise, the site enforces HTTPS and uses some security best practices but lacks certain headers like Content-Security-Policy and cookie consent mechanisms, which are recommended for enhanced protection and compliance. The WHOIS data is transparent and consistent with the business information presented on the site, indicating a legitimate and trustworthy operation. Overall, the website demonstrates good digital maturity and business credibility, though there is room for improvement in privacy compliance and security hardening.

Xyphos Biosciences, Inc. is a small biotechnology company specializing in the development of flexible and adaptable immune cell therapies aimed at revolutionizing cancer care. The company operates as a subsidiary of Astellas Pharma Inc., leveraging its parent company's resources and market presence. The website clearly targets cancer patients, healthcare professionals, investors, and potential employees, showcasing innovation in next-generation cancer immunotherapy. The business model focuses on research and development of controllable immune therapies with a strong emphasis on safety and efficacy. Technically, the website is built on WordPress and employs modern JavaScript libraries such as jQuery, Slick Carousel, and FancyApps UI. Hosting is provided by GoDaddy, and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site benefits from HTTPS and lacks exposed sensitive data. However, it does not implement DNSSEC, nor does it use common security headers like Content-Security-Policy or HSTS. There are no published security policies or incident response contacts, and privacy compliance is weak due to the absence of privacy and cookie policies. Google Analytics is used for tracking, indicating moderate user tracking without clear privacy disclosures. Overall, the website presents a professional and credible business front with strong ties to a reputable parent company. The main risks lie in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing security and incident response policies to enhance trust and compliance.

M

Mijn Kinddossier

mijnkinddossier.nl

48

Mijn Kinddossier is a Dutch healthcare digital portal focused on providing parents access to their children's health data and youth healthcare services. The platform offers functionalities such as questionnaire completion, personalized advice, growth tracking, appointment scheduling, and vaccination record viewing. It integrates DigiD authentication, a trusted Dutch government identity system, enhancing user trust and security. The website is well-branded and targets Dutch parents and youth healthcare organizations, positioning itself as a specialized service in the healthcare sector. Technically, the website uses a modern JavaScript stack including jQuery, jQuery UI, Pickadate, Slick Carousel, Popper.js, Tippy.js, Cropper.js, and Modernizr, built on the Wicket Java web framework. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. However, no CMS or hosting provider information is evident, and SEO and accessibility features are basic. From a security perspective, the site uses HTTPS and DigiD authentication, which are positive indicators. A responsible disclosure link is present, showing some security awareness. However, no privacy or cookie policies are found, no contact information is provided, and no security headers are detected, which are gaps in compliance and security best practices. The use of Sentry indicates error tracking but no extensive analytics or tracking is observed. Overall, the website is functional and professional but would benefit from improved privacy compliance, explicit security policies, and enhanced transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing clear contact and incident response information to strengthen trust and compliance.

S

SK Telecom Co., Ltd.

sktelecom.com

61

SK Telecom Co., Ltd. is a leading South Korean telecommunications company with a strong focus on AI infrastructure and services. The company positions itself as a global AI company, leveraging AI data centers, GPU cloud services, and edge AI technologies. The website reflects a mature enterprise with comprehensive investor relations, ESG management, and corporate information. Technically, the site uses a mix of legacy and modern JavaScript libraries, Google Tag Manager for analytics, and is well-optimized for mobile and accessibility. Security posture is good with HTTPS enforced, but lacks explicit security headers and visible incident response contacts. Privacy compliance is moderate with a clear privacy policy but no visible cookie consent mechanism. The domain WHOIS data is missing, which reduces transparency but the website content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

G

Gemeente Hilversum

hilversum.nl

69

Gemeente Hilversum operates as the official municipal government website for the city of Hilversum in the Netherlands, providing a broad range of citizen services including passport applications, social benefits, parking permits, and governance information. The website targets residents and visitors, offering multilingual support and clear navigation to facilitate access to municipal resources. The business model is that of a government service provider, with a medium-sized organizational footprint and a well-established domain since 1997. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries such as jQuery and jQuery UI, and integrates third-party services like Siteimprove Analytics and GTranslate for analytics and multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could be improved. From a security perspective, the website enforces HTTPS with DNSSEC enabled, uses asynchronous script loading to minimize performance impact, and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and does not provide explicit security or incident response policies publicly. Privacy compliance is strong with a clear privacy policy and cookie policy, though no explicit cookie consent mechanism is present. Overall, the website presents a high level of trustworthiness and professionalism consistent with a government entity. Recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing security and incident response information to further improve transparency and compliance.

F

Forum Groningen

forum.nl

65

Forum Groningen is a well-established cultural and educational institution based in the Netherlands, offering a wide range of services including film screenings, exhibitions, library access, workshops, and events. The website reflects a professional and consistent brand presence targeting a broad audience interested in culture and education. Technically, the site uses a modern tech stack with popular JavaScript libraries and APIs, and it is optimized for mobile and accessibility. Security posture is strong with HTTPS and DNSSEC enabled, though improvements could be made by adding security headers and publishing explicit security and privacy policies. The domain is longstanding and registered with a reputable Dutch registrar, supporting the legitimacy of the organization. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance documentation and security transparency.

P

Provincie Groningen

provinciegroningen.nl

75

Provincie Groningen operates as the official governmental body for the Groningen province in the Netherlands, providing a comprehensive digital platform for residents and stakeholders to access information on subsidies, permits, projects, policies, and news. The website serves as an authoritative source for regional governance and public services, targeting local citizens, businesses, and governmental partners. The business model is public service-oriented, focusing on transparency and accessibility of governmental functions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery UI, Google reCAPTCHA for form security, and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Integration of a custom site search and social media links enhances user engagement and content discoverability. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms from abuse. Cookie consent mechanisms and a comprehensive privacy policy indicate strong GDPR compliance. However, the absence of explicit security policies, incident response information, and security headers suggests room for improvement in formal security posture documentation and technical hardening. Overall, Provincie Groningen's website is a well-maintained, trustworthy digital presence for a governmental entity, with solid content quality and compliance. Strategic enhancements in security transparency and header implementation would further strengthen its security posture and user trust.