Security Directory

M

Michael Heilemann

binarybonsai.com

58

The website binarybonsai.com serves as a personal portfolio and blog for Michael Heilemann, a design professional affiliated with Squarespace. The site showcases blog content focused on design, architecture, and personal insights, targeting a general audience interested in these topics. The business model is primarily personal branding and content sharing, with no commercial transactions or services offered directly through the site. The market position is that of an individual professional with a strong online presence supported by social media profiles and a well-maintained blog. Technically, the site is built on the Squarespace platform, leveraging its CMS capabilities, integrated Google Analytics and Tag Manager for visitor tracking, and Typekit for fonts. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO is adequately addressed through meta tags and structured data. The hosting and infrastructure are managed by Squarespace, ensuring reliable uptime and standard security measures. From a security perspective, the site enforces HTTPS and has domain transfer and update locks enabled, indicating a basic but effective security posture. However, it lacks DNSSEC and HSTS headers, which are recommended to enhance DNS and transport security. No formal security policies, incident response plans, or vulnerability disclosure mechanisms are published, which is typical for a personal portfolio site but represents an area for improvement. Privacy compliance is minimal, with no privacy or cookie policies present, which could be a concern depending on visitor jurisdiction. Overall, the site is low risk, professionally maintained, and trustworthy as a personal portfolio. Strategic recommendations include implementing DNSSEC, enabling HSTS, publishing privacy and cookie policies to improve compliance, and considering a vulnerability disclosure statement to enhance transparency and trust.

N

N+P Informationssysteme GmbH

spartacus-fm.de

60

N+P Informationssysteme GmbH operates the SPARTACUS Facility Management software platform, a comprehensive CAFM solution designed to optimize facility management processes such as maintenance, space management, energy controlling, and cost tracking. Established in 1996, the company holds a solid market position with over 200 customers and a strong presence in Germany. The website reflects a professional and consistent brand image, targeting facility management professionals and organizations seeking integrated software solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot, Google Analytics, and Usercentrics for consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence aligned with business goals and compliance requirements.

N

N+P Informationssysteme GmbH

nuptools.de

58

N+P Informationssysteme GmbH operates the NuPTools website offering proprietary productivity software components designed to enhance IT core systems in manufacturing and construction industries. With over 30 years of experience, the company provides tailored IT solutions including automation tools for Autodesk Inventor, Vault, APplus, and PRO.FILE, supporting digital transformation initiatives such as Industry 4.0 and BIM. The website is built on TYPO3 CMS and integrates modern marketing and analytics technologies including HubSpot, Google Analytics, and Usercentrics for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site presents a professional, trustworthy digital presence aligned with the company's business focus and market position.

M

MLP SE

mlp-se.de

66

MLP SE operates as a financial services group in Germany, providing consulting and financial solutions to private customers, companies, and institutional investors. The website serves multiple audiences including press, investors, and career applicants, reflecting a mature and established market position. The company emphasizes transparency through detailed investor relations, corporate governance disclosures, and a corporate university for training and certification. Technically, the website uses modern tools such as Google Tag Manager and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

M

MLP Finanzberatung SE

mlp-financify.de

67

MLP financify is a specialized financial advisory platform targeting students, medical students, and private customers in Germany. It offers a broad range of financial services including retirement planning, insurance, financing, asset management, and digital banking solutions. The company leverages a large network of over 2,000 advisors across 90 locations, positioning itself as a trusted partner in personal finance. The website is professionally designed with comprehensive content and clear navigation, supporting an excellent user experience. Technically, the site uses modern web technologies including Google Tag Manager and Usercentrics for consent management, and likely runs on the FirstSpirit CMS platform. Security posture is strong with HTTPS enforced and privacy compliance well implemented, though some security headers could be explicitly confirmed. No critical vulnerabilities or blocking mechanisms were detected. Overall, the domain and WHOIS data align well with the MLP brand, supporting legitimacy and trustworthiness.

P

Peterson Projects & Solutions

petersonindonesia.com

59

Peterson Indonesia operates as a sustainability and environmental consulting firm, providing direct solutions to environmental challenges primarily within Indonesia. The company positions itself as a trusted consultant in sustainability services, targeting businesses and organizations seeking environmental expertise. The website is professionally designed using the Wix platform, featuring structured data that enhances search engine visibility and provides clear business contact information, notably a phone number. However, the absence of privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Technically, the site leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. The WHOIS data is notably absent, raising concerns about domain registration legitimacy and reducing overall trust. No adult or questionable content is present, making the site safe for general audiences.

The website onepeterson.co.kr is currently inaccessible, returning an HTTP 403 Forbidden error page which blocks any content access. The domain is newly registered in August 2023 with Gabia, Inc. as the registrar and uses nameservers associated with hostcocoa.com. The registrant is identified as Kim Jihyoung with a matching email address [email protected], indicating some consistency in domain ownership. However, the lack of accessible website content, absence of metadata, scripts, or business information severely limits any meaningful analysis of the company's operations or services. Technically, no CMS, frameworks, or analytics tools are detectable, and no security headers or HTTPS information is available from the provided data. This suggests a very early stage or inactive website deployment. The security posture is weak due to the lack of accessible content and security controls, and no privacy or cookie policies are present. Overall, the site appears to be either under development or intentionally restricted, resulting in a low trust and credibility score.

P

Peterson Solutions (Malaysia)

petersonmalaysia.com

62

Peterson Solutions (Malaysia) is a well-established sustainability consulting firm offering ESG, sustainability strategy, reporting, GHG management, and sustainable finance advisory services primarily in Malaysia. The company leverages a professional website built on WordPress with modern plugins and SEO optimizations to present its services and engage clients. The technical infrastructure includes Cloudflare DNS and standard WordPress technologies, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with policies present but lacking explicit consent mechanisms. Overall, the website reflects a credible business with strong branding and trust signals, suitable for its target audience of businesses seeking sustainability solutions.

M

MacAlister Elliott & Partners Ltd

macalister-elliott.com

56

MacAlister Elliott & Partners Ltd is a specialized consultancy focused on sustainable fisheries and aquaculture, providing expert services to governments, communities, and businesses worldwide. The company positions itself as a leader in environmental sustainability within the blue economy sector, offering a broad range of services including business planning, impact assessments, seafood supply chain improvements, and community support. The website reflects a professional and consistent brand image with clear service offerings and a target audience of stakeholders in fisheries and aquaculture. Technically, the website is built on WordPress with modern web technologies including Google Analytics and Tag Manager for tracking, Typekit fonts for typography, and various plugins for enhanced functionality such as maps and menus. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and anti-spam measures but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern for domain legitimacy and trustworthiness, warranting further investigation. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced privacy compliance, security policy publication, and domain registration transparency to improve its security posture and user trust.

P

Peterson Technologies

petersontechnologies.com

74

Peterson Technologies is a medium-sized technology company specializing in sustainability and agritech digital solutions. Operating globally across multiple industries, it offers services including geoservices, data analytics, software development, and ESG compliance solutions. The company is the technology arm of Peterson Solutions, supporting a large global workforce. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, HubSpot, and Google Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms policies. Overall, the domain registration and website content indicate a legitimate and credible business presence.

C

Core29

core29.co.uk

58

Core29 is a UK-based business intelligence and digital transformation consultancy specializing in energy and industrial sectors. Founded in 2012, it offers services including consulting, business process mapping, technology implementation, data analytics, ESG, and digital HR solutions. The company positions itself as a niche provider delivering customisable applications and rapid implementation with competitive pricing. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress with Elementor and performance optimizations via WP Rocket. Hosting and domain registration are managed through Cloudflare with DNSSEC enabled, indicating a secure and stable infrastructure. However, the site lacks publicly accessible privacy and cookie policies, which is a compliance gap. Security posture is good with HTTPS and DNSSEC but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, content-rich, and well-targeted to business clients seeking digital transformation services.

C

Control Union Global

petersoncontrolunion.com

75

Control Union Global is a large international service provider specializing in testing, inspection, certification, laboratory services, collateral management, and pest control. Operating in over 80 countries, the company targets businesses requiring trustworthy trade and compliance services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating a mature approach to privacy compliance. Technically, the site is built on WordPress with modern technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Hotjar, and Sentry. The security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not detected and no explicit security or incident response policies are published. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for global enterprises. Overall, the website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

8

80:20 Procurement

lscustoms.com

65

LS Customs is a UK-based customs consultancy specializing in bespoke customs compliance solutions primarily for the energy sector. The company positions itself as a trusted partner to businesses needing to comply with HMRC regulations, offering expert advice and implementation of customs processes. The website reflects a professional and well-branded business with ISO certifications and client testimonials that reinforce its credibility. Technically, the site is built on WordPress using Elementor and JetEngine plugins, with modern SEO and analytics tools integrated, including Google Analytics and Google Tag Manager. Security is well managed with HTTPS and appropriate security headers, although privacy and cookie policies are notably absent, representing a compliance gap. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy despite the professional web presence. Overall, the website is accessible, well-designed, and business-focused, but the lack of WHOIS data and privacy documentation should be addressed to improve trust and compliance.

I

Interrijn

interrijn.com

65

Interrijn is a well-established European water logistics and transportation company with over 50 years of experience, specializing in port logistics, floating storage, inland shipping, and project cargo including RoRo services. The company positions itself as a smart, green, and reliable partner for European supply chains, focusing on sustainable water-based transportation solutions. Their website reflects a professional and consistent brand image, targeting businesses requiring efficient cargo transport and storage solutions across European inland and seaports. Technically, the website is built on WordPress using the Enfold theme and integrates modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides clear navigation and comprehensive content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers, which could be improved. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not overshadow the professional presentation and active business presence. Overall, Interrijn demonstrates a mature digital presence aligned with its business operations.

B

Binnenlloyd Maastricht B.V.

binnenlloyd.nl

60

Binnenlloyd Maastricht B.V. is a Dutch logistics company specializing in the total logistics of powder substances. They operate a modern and flexible fleet of specialized self-discharging silo ships and provide multi-modal transport solutions including silo bulk trucks. The company serves various sectors and offers consulting on logistics solutions. The website is professionally designed, multilingual, and provides clear contact information, reflecting a medium-sized established business with a domain age dating back to 1998. Technically, the site is built on WordPress with Elementor and Astra theme, showing good mobile optimization and SEO practices. Security posture is good with HTTPS and DNSSEC enabled, but lacks explicit security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service pages found, though a cookie consent mechanism is present. Overall, the website is trustworthy and business credible but could improve in privacy and security transparency.

A

AHLMANN-ZERSSEN GMBH

ahlmann-zerssen.com

67

AHLMANN-ZERSSEN GMBH is a well-established maritime shipping and logistics service provider based in Germany, with a domain age dating back to 2008 supporting its claim of decades of experience. The company offers a comprehensive range of services including chartering, shipowners services, port agency, transshipment and warehousing, customs services, and heavy load/project logistics. Their market position is that of a trusted maritime service provider with multiple certifications such as ISO 9001, GMP+, and AEO, which enhance their credibility and trustworthiness in the transportation sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing common web technologies such as jQuery and Font Awesome. It is hosted via Cloudflare, ensuring good SSL configuration and domain security, although DNSSEC is not enabled. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Privacy compliance is well addressed with a cookie consent mechanism and a GDPR-compliant privacy policy. From a security perspective, the site benefits from HTTPS and Cloudflare protection but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file suggests room for improvement in transparency and security maturity. Overall, the website presents a professional and trustworthy digital presence with solid business credibility and compliance. The main risks relate to enhancing security best practices and publishing more comprehensive security and incident response information to align with industry standards and regulatory expectations.

P

Peterson Global

peterson.nl

65

Peterson Global is a consultancy and logistics company specializing in sustainability, technology, and innovative supply chain solutions. The company positions itself as an expert in helping clients achieve sustainable sourcing commitments and creating sustainable logistics solutions. The website reflects a professional and modern digital presence built on WordPress with a focus on user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and active external domains. Security posture is solid with HTTPS and error monitoring via WP Sentry, but lacks published security policies and incident response information. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is trustworthy and well-designed but would benefit from improved transparency and compliance documentation.

Aberdeen Marine Logistics Alliance (AMLA) operates as a collaborative vessel sharing initiative focused on optimizing marine logistics and reducing costs for energy sector operators in the UK. The platform facilitates vessel sharing among members through a structured sharing policy and charge-back mechanism, supported by a facilitator company, Peterson. The website presents a professional and clear description of its services and member companies, targeting marine logistics operators and energy companies. Technically, the site is a static Adobe Muse-generated site hosted via Cloudflare, using legacy JavaScript libraries and basic mobile optimization. Security posture is moderate with HTTPS and DNSSEC enabled but lacks modern security headers and uses outdated jQuery. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

P

Peterson

petersonlighthouse.com

57

Peterson Lighthouse is a B2B software ecosystem focused on digitalizing the end-to-end logistics supply chain, particularly for the energy and transportation sectors. The platform offers a suite of specialized applications that enhance visibility, planning, and management of logistics operations, including port activity, transport management, and vessel activity capturing. The company positions itself as an expert-driven provider leveraging decades of logistics experience to deliver operational efficiencies and advanced analytics. Technically, the website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Microsoft Clarity, and LinkedIn Insight, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security (DNSSEC) and security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is professional and trustworthy, with room for improvement in security and compliance documentation.

I

Internetseelsorge

internetseelsorge.de

42

Internetseelsorge.de is a German non-profit organization providing free Christian pastoral care and spiritual guidance through mail and chat services. The website targets individuals facing life crises, spiritual questions, or feelings of loneliness, offering confidential and anonymous support. The organization collaborates with recognized Catholic partners, enhancing its credibility and reach within the German-speaking community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo analytics to respect user privacy. Hosting is provided by kasserver.com, a known hosting provider. Security posture is solid with HTTPS enforced, though improvements in security headers and cookie consent mechanisms are recommended. The website is well-structured, mobile-optimized, and provides clear navigation and service descriptions, supporting a positive user experience. No adult or explicit content is present, making it safe for general audiences.

Z

Zentrum für Berufungspastoral

berufung.org

46

Zentrum für Berufungspastoral is a German non-profit organization dedicated to vocation pastoral care within the Catholic Church. The website provides resources, events, and contact information for diocesan vocation pastoral offices primarily targeting young people and church members in Germany and neighboring countries. The organization has an established presence since 2000, reflected by the domain age and consistent content. Technically, the site runs on TYPO3 CMS version 4.7 with common JavaScript libraries and Google Analytics for tracking, though the CMS version is outdated and may pose security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and DNSSEC. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Vatican News

vaticannews.va

69

Vatican News is the official news portal of the Holy See, providing authoritative and up-to-date information about the Pope, the Vatican, and the global Catholic Church. The site targets a global audience interested in religious news and Vatican affairs, offering multilingual content and live media such as radio and podcasts. The business model is non-profit and government-affiliated, emphasizing information dissemination and community engagement rather than commercial activities. Technically, the website employs modern web technologies, including Google Tag Manager for analytics, and appears to be built on Adobe Experience Manager, ensuring a professional and responsive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration is consistent with the Vatican's official presence, enhancing trust and legitimacy. Overall, the site demonstrates high content quality, professional design, and solid technical implementation, making it a reliable source for Vatican-related news.

T

The Holy See

vatican.va

67

The website www.vatican.va is the official online presence of the Holy See, serving as an authoritative source for Catholic teachings, papal documents, and information about the Roman Curia and liturgical celebrations. It targets a global audience including the Catholic faithful, scholars, and pilgrims. The site offers multilingual content and event calendars, reinforcing its role as a key informational hub for the Vatican. Technically, the site employs modern web technologies such as jQuery, Bootstrap 5, Swiper.js, and Google Tag Manager, and appears to be built on Adobe Experience Manager (AEM). The site is mobile-optimized and has good SEO practices, though performance is moderate. Accessibility is basic but functional. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks visible security headers and does not provide a privacy or cookie policy on the analyzed page. No incident response or vulnerability disclosure information is present. No WAF or blocking mechanisms were detected, and no suspicious content or vulnerabilities were found. Overall, the site is highly credible and trustworthy given its official status and domain registration. However, it would benefit from improved privacy compliance, explicit security policies, and enhanced security headers to align with best practices.

U

Unabhängiger Beauftragter der Bundesregierung für Fragen des sexuellen Kindesmissbrauchs

kein-raum-fuer-missbrauch.de

62

The website 'Kein Raum für Missbrauch' is an official German governmental initiative dedicated to preventing sexual abuse of children and youth. It provides educational resources, support for institutions to develop protection concepts, and links to specialized help portals. The initiative targets educators, caregivers, and organizations working with children. The site is well-branded, consistent, and professionally presented, reflecting its authoritative position in the child protection sector. Technically, the website is built on TYPO3 CMS, uses JavaScript, and integrates Matomo analytics hosted locally in Germany with strong privacy controls including IP anonymization and user consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting appears to be managed by a reputable German provider. From a security perspective, the site enforces HTTPS, uses a cookie consent banner, and respects privacy regulations. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with GDPR-aligned policies and transparent data collection. Overall, the website presents a low-risk profile with a strong focus on privacy and user trust. Strategic improvements could include adding security headers, publishing a security policy, and providing direct contact information for incident response to enhance transparency and resilience.

W

Web Commerce GmbH

digitalpastoral.de

45

Digitalpastoral.de is a German-language digital platform focused on providing resources, networking, and content for Catholic church communities and pastoral workers. The platform serves as a marketplace and knowledge hub for digital church practice, offering articles, event listings, and community engagement tools. It is developed and maintained by Web Commerce GmbH, with affiliations to multiple (Erz-)Bistümer, indicating a trusted position within the church digital ecosystem. The website targets church professionals and digital faith communities, positioning itself as a niche but important resource in the religious digital media space. Technically, the site is built on Edith CMS and leverages modern web technologies including jQuery, Bootstrap, and FontAwesome. It integrates Matomo analytics with privacy-conscious tracking controls and uses HTTPS to secure communications. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and professional design. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. The lack of a published security policy or incident response contacts is a gap in transparency and readiness. Privacy compliance is partial, with a privacy policy present but no cookie consent banner detected. Overall, the domain and hosting infrastructure appear legitimate and consistent with the business claims, with no signs of suspicious WHOIS data or blocking by WAFs. The overall risk assessment is moderate with recommendations to implement explicit cookie consent, add security headers, and publish security and incident response policies to strengthen trust and compliance. The platform is well-positioned as a specialized digital resource for church communities but should address these gaps to maintain and improve its credibility and security posture.

B

Bonifatius GmbH

bonifatius.de

56

Bonifatius GmbH is a well-established media and printing company based in Paderborn, Germany, with a history dating back to 1869. The company operates multiple business fields including printing services, publishing, and retail bookstores, serving a broad audience from individual book buyers to business clients seeking sustainable and high-quality media solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive content about the company's offerings and values, particularly emphasizing sustainability and innovation. Technically, the website is built on WordPress with modern frontend technologies such as Tailwind CSS and Tiny Slider, ensuring good mobile optimization and accessibility. The site uses HTTPS with no visible security vulnerabilities or exposed sensitive data. However, there is room for improvement in security headers and explicit incident response policies. Privacy compliance is addressed with a comprehensive privacy policy, though a cookie consent mechanism is absent. The security posture is solid with HTTPS and secure form handling, but lacks advanced security headers and vulnerability disclosure mechanisms. The domain WHOIS data is partially consistent with the business claims, showing no suspicious patterns. Overall, the website presents a trustworthy and professional digital presence for Bonifatius GmbH. Strategic recommendations include enhancing security headers, implementing cookie consent, adding a vulnerability disclosure policy, and improving incident response transparency to strengthen compliance and trust.

B

Bistum Mainz

bistum-mainz.de

62

Bistum Mainz is a large, established Catholic diocese in Germany providing religious, social, educational, and community services. The website serves as a comprehensive portal for information, news, and engagement with the Catholic community and the general public. It maintains a consistent brand presence and offers rich content tailored to its audience. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for privacy-conscious analytics, and incorporates accessibility features, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its users.

B

Biopol GN s.r.o.

alavis-plus.cz

54

The website alavis-plus.cz is an official e-commerce platform operated by Biopol GN s.r.o., offering health and veterinary products under multiple well-known brands such as Alavis, Barnys, Alavis Maxima, and Max Genetics. It targets consumers and pet owners primarily in the Czech Republic, providing a consolidated shopping experience for health supplements and veterinary care products. The site is professionally designed with consistent branding and clear navigation, supporting a good user experience and trustworthiness. Technically, the site leverages a modern e-commerce platform (Upgates) and integrates multiple analytics and marketing tools including Google Analytics 4, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a privacy policy page are missing, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and branding strongly suggest a legitimate business. Overall, the site is well-positioned in its niche with good technical and business maturity but should enhance privacy and security transparency to further strengthen trust.

T

ThePay, a.s.

thepay.cz

64

ThePay, a.s. operates a payment gateway service primarily targeting e-commerce businesses in the Czech Republic and Slovakia. The company offers a variety of modern payment methods including card payments, PSD2-compliant payments, QR code payments, and supports multiple currencies. With over 3,000 clients, ThePay is positioned as a reliable and flexible payment solution provider in its market segment. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Leady.cz, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and PCI DSS certification displayed, although some security headers are missing and no explicit privacy policy or terms of service pages were found in the provided content. Overall, the site is well-structured and trustworthy, but could improve transparency and compliance documentation.

S

Satakunnan hyvinvointialue

satadiag.fi

68

Satakunnan hyvinvointialue is a Finnish regional welfare area organization established in 2021, dedicated to promoting the wellbeing, safety, and health of residents in the Satakunta region. The website serves as an official portal providing comprehensive information about social and health services, digital service access, customer support, and current news relevant to the community. The organization operates as a public sector entity with a clear focus on healthcare and social welfare services. Technically, the website is built on WordPress with modern integrations such as React Aria for accessibility, Matomo for analytics, and chat widgets for user engagement. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. WHOIS data is transparent and consistent with the organization's identity, enhancing trustworthiness. Overall, the site is professional, secure, and compliant with GDPR regulations, serving its public sector mission effectively.

F

Fimlab Laboratoriot Oy

fimlab.fi

74

Fimlab Laboratoriot Oy operates as a leading healthcare laboratory service provider in Finland, specializing in medical testing and diagnostics. The company targets healthcare professionals and patients, offering comprehensive laboratory services. The website reflects a mature digital presence with a WordPress CMS, WooCommerce integration for service offerings, and modern JavaScript libraries enhancing user experience. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of a public security policy and incident response information suggests room for improvement in transparency. WHOIS data confirms the domain's legitimacy and consistency with the business identity, supporting trustworthiness. Overall, the website demonstrates a solid balance of business credibility, technical implementation, and privacy compliance, suitable for a healthcare service provider.

N

NordLab

nordlab.fi

53

NordLab is a publicly owned clinical laboratory service provider operating in northern Finland, serving healthcare professionals and patients with reliable and high-quality laboratory and sample collection services. The organization is owned by four northern welfare areas and focuses on ensuring the availability of advanced and trustworthy laboratory services to support regional healthcare. The website reflects a professional and regionally focused healthcare entity with clear service offerings and patient guidance. Technically, the site is built on WordPress with modern web technologies including jQuery, FontAwesome, and integrates Google Analytics and a chatbot service for enhanced user interaction. The site is mobile optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and GDPR compliance evident through cookie consent mechanisms and a detailed privacy policy. However, the site lacks explicit security headers and published security or incident response policies, representing areas for enhancement. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the entity. The website is safe, professional, and well-suited for its healthcare audience.

Mikroregion Chrudimsko is a regional government association website serving 29 municipalities in the Pardubice region of the Czech Republic. The site provides information about member municipalities, official notices, financial management, realized projects, and tourism opportunities. It targets local residents, government officials, and tourists interested in the region. The business model is informational and supportive of regional development, with a small organizational size and a founding date consistent with the domain registration. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The site is hosted likely by WEDOS, a Czech hosting provider, and shows moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No forms collect sensitive data, reducing risk, but the absence of privacy and cookie policies indicates compliance gaps with GDPR. No vulnerability disclosures or incident response contacts are provided. The WHOIS data is consistent and trustworthy, with no privacy protection or suspicious patterns. Overall, the website is professional, trustworthy, and well-aligned with its regional government purpose. However, it would benefit from improved privacy compliance, enhanced security headers, and formalized security policies to strengthen its security posture and regulatory adherence.

N

National Heritage Institute (Národní památkový ústav)

zamek-slatinany.cz

43

The website represents the official online presence of the Slatiňany State Chateau, managed by the National Heritage Institute of the Czech Republic. It serves as a cultural heritage and tourism portal providing detailed visitor information, historical context, event announcements, and online ticketing options. The site targets tourists and cultural enthusiasts interested in historic sites and government-managed heritage locations. The business model is governmental and non-profit, focusing on preservation and public engagement. Technically, the website employs a modern tech stack including jQuery, Leaflet.js for maps, Google Analytics and Tag Manager for analytics, and uses Typekit and Google Fonts for typography. The site is hosted by REG-WEBGLOBE and uses HTTPS with cookie consent mechanisms that allow granular user control, indicating a mature digital infrastructure. Mobile optimization and accessibility are well addressed. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the institution. Overall, the site demonstrates a good security posture but could improve transparency on security policies. The overall risk is low given the official nature and absence of suspicious elements. Strategic recommendations include publishing a dedicated privacy policy on the main domain, adding security headers, and providing incident response contact details to enhance trust and compliance.

N

Nadace sester Boromejek

nadacesesterboromejek.cz

47

Nadace sester Boromejek is a Czech non-profit foundation dedicated to supporting individuals and organizations committed to helping others, particularly through the activities of the Boromejka sisters. The foundation facilitates financial and material donations, supports social and ecological projects such as the Hangáry Goretti initiative, and provides assistance to various charitable organizations. The website is professionally designed using WordPress with Elementor and Astra theme, featuring clear navigation and calls to action for donations. Social media presence on Facebook, Instagram, and YouTube enhances outreach and trust. Technically, the website employs modern web technologies and includes Google Analytics and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, explicit security headers are not fully implemented, and no detailed security or incident response policies are publicly available. The absence of WHOIS data for the domain reduces trustworthiness from a registration perspective, though the website content and social media presence suggest legitimate operations. Overall, the security posture is moderate with room for improvement in security headers and transparency. Privacy compliance is good with cookie consent mechanisms in place. The lack of explicit contact information and WHOIS data are notable gaps. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and verifying domain registration details to improve trust and compliance.

M

Medicross s.r.o.

medicross.cz

65

Medicross s.r.o. operates a professional e-commerce platform specializing in medical supplies and healthcare products primarily serving the Czech market. Established since 2004, the company offers a broad product range including syringes, surgical sutures, disinfectants, gloves, and other medical consumables. Their business model targets both healthcare professionals and individual customers, providing fast delivery and personalized customer service. The website reflects a mature digital presence with a consistent brand identity and clear navigation. Technically, the website leverages modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and Facebook Pixel for marketing. The platform is built on a proprietary CMS by Binargon, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs consent mechanisms for GDPR compliance. While no explicit security policy or incident response information is published, the site follows best practices such as secure forms and no exposed sensitive data. The absence of WHOIS data limits domain registration insights, but the overall trust signals and business information support legitimacy. Overall, Medicross.cz presents a trustworthy and professional online presence with solid technical and security foundations. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

K

Křižovnické lesy, s.r.o.

krizovnickelesy.eu

49

Křižovnické lesy, s.r.o. is a Czech forestry management company founded in 2015, managing forest assets owned by the Rytířský řád Křižovníků s červenou hvězdou. The company operates across multiple regions in the Czech Republic, focusing on sustainable forest management and timber supply, with certifications such as PEFC and participation in FSC. The website is built on WordPress using a standard theme, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Contact is primarily via a contact form on a dedicated page. Overall, the site presents a professional and trustworthy image consistent with a small regional forestry business.

F

Fórum mobilních hospiců

mobilnihospice.cz

58

Fórum mobilních hospiců is a Czech non-profit organization dedicated to supporting mobile hospices, improving the quality and accessibility of hospice care, and providing education and networking opportunities within the hospice community. The organization represents a significant portion of mobile hospices in the Czech Republic and actively engages in campaigns, job offerings, and advocacy to enhance end-of-life care at home. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Google Tag Manager. The site is mobile-optimized, well-structured, and includes essential privacy and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in capabilities. However, it lacks explicit security headers and incident response contact information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for the organization, with clear business information, active content updates, and social media engagement. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic improvements in security headers and privacy compliance could further strengthen the site's security and trustworthiness.

Z

Zdravotní ústav Most k domovu z.ú.

mostkdomovu.cz

55

Most k domovu is a Czech non-profit healthcare organization specializing in comprehensive home-based palliative and health care services. Founded in 2007, it serves patients and families primarily in Prague and surrounding areas, offering a range of services including home hospice care, home health care, social counseling, and spiritual care. The organization emphasizes compassionate, professional care enabling patients to remain in their homes during critical health phases. The website reflects a mature digital presence with clear service descriptions, testimonials, and partnership affiliations, positioning it as a leading provider in its sector.

Fakultní nemocnice Královské Vinohrady is a prominent university hospital in the Czech Republic focused on delivering high-quality patient care and medical education. The website provides comprehensive information for patients, visitors, and healthcare professionals, including services such as COVID-19 vaccination, palliative care, and ethical counseling. The hospital is accredited and demonstrates compliance with GDPR regulations, including a cookie consent mechanism. Technically, the website uses legacy jQuery and Google Analytics for tracking, with basic mobile optimization and accessibility features. Security posture is moderate with room for improvement in security headers and updated libraries. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding strongly indicate a legitimate healthcare institution. Overall, the site is professional and user-friendly, serving a large healthcare audience effectively.

K

Křižovnická pečovatelská služba

pecovatelska-sluzba.com

50

Křižovnická pečovatelská služba is a small non-profit organization based in Prague, Czech Republic, providing registered social care services primarily to citizens over 40 years old who require assistance due to age or disability. The organization is affiliated with the religious order Křižovníků s červenou hvězdou and operates in cooperation with a Catholic girls' school, offering practical training opportunities for future caregivers. Their key services include personal care assistance, household help, accompaniment to medical and administrative appointments, and pastoral care. They also provide a compensatory aids rental service through a partner domain. Technically, the website is built using a custom CMS by Webmium, hosted partially on Microsoft Azure Blob Storage, and incorporates modern tracking and security tools such as Google Analytics, Google Tag Manager, and invisible Google reCAPTCHA v3. The site is mobile-optimized with a clear navigation structure and professional design. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and explicit privacy or cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the website is functional and professional but would benefit from improved transparency and security practices.

P

Partos

partos.nl

62

Partos is a Dutch non-profit branch association representing over 100 organizations involved in international cooperation. The website serves as an informational and membership platform, providing resources and advocacy for its members. The organization targets Dutch development organizations and stakeholders interested in international collaboration. Technically, the website is built on WordPress using a child theme of FoundationPress, with integrations such as Gravity Forms for data collection and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking, with appropriate consent mechanisms in place. Security posture is good with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing security headers and publishing security policies. The site is professional, well-branded, and trustworthy, with no signs of malicious or suspicious activity. However, explicit privacy and terms of service pages were not found in the provided content, which could be improved for compliance and transparency.

E

EIK Certificering

eikcertificering.nl

51

EIK Certificering is a Dutch certification body specializing in audits and certifications based on ISO 9001, ISO 27001, and various sector-specific standards. The company offers tailored audits, training, and development of industry norms to help organizations improve quality and compliance. The website reflects a professional and well-established business with accreditation from the Raad voor Accreditatie, client testimonials, and a clear focus on quality and growth. Technically, the site is built on WordPress with Elementor and Yoast SEO, showing good digital maturity with modern technologies and solid SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the site lacks a dedicated security policy or incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, though it could improve cookie consent mechanisms and publish vulnerability disclosure details.

V

VEJ-EU

vej-eu.dk

64

VEJ-EU is a Danish organization focused on developing and transforming the road sector through educational courses, conferences, and workplace initiatives. The website positions itself as a key resource for professionals in the transportation sector in Denmark, offering sector-specific knowledge and networking opportunities. The domain has been active since 1999, indicating a well-established presence in the market. Technically, the website is built on a modern Next.js framework with React, ensuring a responsive and user-friendly experience. The use of Cookiebot for consent management and integration of analytics tools like Google Analytics and Hotjar demonstrate a mature digital infrastructure with attention to privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks explicit contact information and detailed security policies.

Hermes Traffic Intelligence ApS is a Denmark-based company specializing in traffic data analytics and bicycle movement data ecosystems. They provide advanced algorithms and tools to assist road administrators in making informed decisions to improve traffic infrastructure. Their BIKE™ ecosystem aggregates anonymized bicycle data from multiple suppliers to enhance bicycle infrastructure planning. The company operates a professional website with clear contact information and a newsletter subscription service, targeting government and regional traffic planners. Technically, the website is built on the One.com Web Editor platform, uses modern JavaScript libraries like Swiper.js and jQuery, and integrates Mailchimp for marketing. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism, reflecting basic GDPR compliance. Security posture is adequate but could be improved by adding security headers and publishing a security policy. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

N

NaboGO

nabogo.com

57

NaboGO operates the Nabogo platform, facilitating local carpooling primarily in Denmark and three other countries. The company partners with provinces and public transport authorities to promote sustainable shared transportation solutions. Their business model centers on enabling daily shared rides for commuting, schooling, and leisure, leveraging a mobile app and local partnerships. The website reflects a medium-sized, professional organization with a clear focus on transportation and mobility services. Technically, the site is built on WordPress with Elementor and Yoast SEO, supported by Cloudflare for CDN and security. The site is mobile-optimized and includes modern tracking and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and Cloudflare protections, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is present. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency around security policies and incident response.

SFMCON.dk is a professional consultancy specializing in smart ticketing and Mobility as a Service (MaaS) solutions primarily targeting public transport stakeholders. Founded by Søren H. Sørensen in 1998 and based in Copenhagen, Denmark, the company offers expert consulting and program management services to facilitate integrated mobility solutions combining public and private shared vehicles. The website reflects a niche market position with clear service offerings and a professional presentation. Technically, the website is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No analytics or tracking services are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which lowers its security posture. There are no visible privacy, cookie, or incident response policies, which impacts compliance and user trust. The domain WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance measures, and improved technical optimization to strengthen trust and user experience.

I

Industry 5.0 konverents - Industry 5.0

industry40.ee

45

Industry 5.0 is a specialized conference website focused on enhancing the competitiveness of Estonian industrial enterprises through innovation, AI, sustainability, and export strategies. The event is scheduled for May 14, 2025, in Tartu, Estonia, targeting manufacturing professionals, government, and educational sectors. The website is built on WordPress with modern plugins such as Yoast SEO, Elementor, and Google Analytics integration, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.