Security Directory

P

Purdicom WiFi & Cloud Distributor

purdi.com

67

Purdicom is a UK-based value-added IT distributor specializing in wireless, cloud, WiFi, and IT security technologies. The company positions itself as a leading distributor in the UK market, targeting IT resellers, integrators, and businesses seeking advanced wireless and security solutions. Their website showcases a broad portfolio of vendors and technologies, emphasizing professional services and comprehensive product offerings. The digital presence is supported by a WordPress-based platform with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS domain registration data introduces some uncertainty about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance documentation.

C

Chris Leishman Design

leishmandesign.co.uk

50

Chris Leishman Design is a small creative design studio based in Torquay, Devon, UK, established in 2009. The company offers a broad range of services including graphic design, branding, photography, illustration, packaging, and online services targeting local, national, and international companies. The website showcases a professional portfolio demonstrating diverse projects and clients, positioning the company as an established player in the creative media sector. Technically, the website is built on WordPress 7.0 with a modern tech stack including Bootstrap, jQuery, and various UI libraries, providing a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and published privacy or cookie policies, representing compliance and security gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Computer Business Forms Ltd is a UK-based small business specializing in supplying printing services, labelling supplies, office supplies, and betting supplies primarily targeting professional and business customers. Established in 2000, the company positions itself as a total office solution provider with a focus on cost-effective and comprehensive product offerings. The website reflects a consistent brand image and provides clear contact information, supporting its credibility in the regional market. Technically, the website is built on the ASP.NET WebForms framework using the DNN CMS platform, incorporating common web technologies such as jQuery and FontAwesome. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. The presence of Google Analytics and DoubleClick scripts indicates moderate user tracking without a visible cookie consent mechanism. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS, which are recommended to enhance protection. No incident response or security policy information is publicly available, and GDPR compliance indicators are minimal. The WHOIS data shows a long-established domain with consistent registration details, supporting the legitimacy of the business. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance improvements, and better mobile and accessibility optimization to strengthen its digital maturity and user trust.

H

Hellens Group

hellens.co.uk

44

Hellens Group is a well-established UK-based real estate development company specializing in residential, commercial, and retail environmental regeneration primarily in the North East, Tees Valley, and Yorkshire regions. Founded in 1973, the company has a strong market position with recognized projects such as Burtree Garden Village and a portfolio that includes affordable housing, land, and property management. Their business model integrates land acquisition, planning, construction, and property management, targeting regional developers, investors, and community stakeholders. Technically, the website is built on WordPress with a moderate tech stack including jQuery, Google reCAPTCHA, and Yoast SEO. The site is mobile-optimized with good SEO practices and moderate performance. However, the use of an outdated jQuery version presents a security risk. The site employs HTTPS and integrates Google Analytics and Tag Manager for tracking, though cookie consent mechanisms are absent. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA but lacks advanced security headers and explicit security or incident response policies. No critical vulnerabilities were detected, but updating libraries and enhancing security policies would improve posture. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals. Strategic improvements in security and privacy compliance would further strengthen the site’s risk profile and user trust.

Custom Profiles Ltd is a UK-based leading independent supplier and stockholder of aluminium extrusions, serving manufacturing industries since 2005. They offer a comprehensive range of services including supply, fabrication, finishing, and stockholding of aluminium profiles, targeting customers across the UK, Europe, and worldwide. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and Contact Form 7, and integrates Google Analytics and Google reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforced and use of CAPTCHA, but lacks some security headers and explicit incident response or security policy disclosures. WHOIS data is missing, raising concerns about domain registration legitimacy, which impacts overall trust. Contact information and social media presence are comprehensive, supporting business credibility. Overall, the website is functional, secure, and business-focused but would benefit from improved privacy compliance and domain registration transparency.

C

Compressortech

compressortech.co.uk

50

Compressortech is a UK-based specialist company focused on compressor technology, offering a wide range of compressors with 99% coverage and OE approval. Their business model centers on supplying OEM quality compressors and remanufacturing services, positioning themselves as a leading provider in the UK market. The website content emphasizes quality, service, and trust, supported by ISO 9001 certification and over 25 years of experience. However, the domain WHOIS data indicates registration issues, which may affect trustworthiness despite the legitimate business content. Technically, the website uses an older CMS (Monstra 3.0.1) and relies on legacy technologies such as jQuery and Bootstrap. The site shows moderate performance and basic mobile optimization but lacks modern security practices such as HTTPS enforcement and security headers. Google Analytics is used for tracking, but no cookie consent mechanism is present, indicating partial privacy compliance. From a security perspective, the absence of HTTPS and security headers lowers the security posture score. No forms or sensitive data collection points were detected, reducing immediate risk exposure. The lack of WHOIS data and domain registration inconsistencies raise concerns about domain legitimacy, which should be addressed to improve trust. Overall, the website is functional with basic business information and moderate technical implementation but requires significant improvements in security, privacy compliance, and domain legitimacy to enhance trust and reduce risk.

Crown Green Bowler operates as a specialized retail e-commerce business focused on crown green bowls, lawn bowls, indoor bowls, and related accessories. The company, part of DGS (Grinding Wheels and Machines) Ltd., has over 25 years of experience serving bowling enthusiasts primarily in the UK. Their offerings include a wide range of products such as bowls, bags, clothing, jacks, and engraving services, supported by a showroom and trade-in options. The website is professionally designed with clear navigation and a mobile-optimized interface, supporting a positive user experience. Technically, the website is built on ASP.NET Web Forms with modern JavaScript libraries including jQuery and Tiny Slider. It integrates Google Analytics and Google Maps API for analytics and location services, respectively. Payment integration with Barclays and Stripe is indicated, although Stripe's public key is empty. The site uses HTTPS, but lacks explicit security headers, which could be improved. Privacy and cookie policies are present and GDPR compliant, with a cookie consent mechanism implemented. Security posture is moderate; the site uses secure forms and does not expose sensitive data in the HTML. However, the absence of security headers and vulnerability disclosure mechanisms suggests room for enhancement. WHOIS data for the domain queried is unavailable due to an invalid domain name error, likely caused by querying the 'www' subdomain as a domain. Despite this, the website content and business information are consistent and trustworthy. Overall, Crown Green Bowler presents a credible and professional online presence with a solid business foundation. Strategic improvements in security headers, WHOIS transparency, and accessibility could further strengthen their digital maturity and trustworthiness.

I

Irr Supply Centers, Inc.

irrsupply.com

52

Irr Supply Centers, Inc. is a well-established wholesale distributor specializing in plumbing, heating, cooling, refrigeration, and electrical equipment and supplies. With a strong market presence in Western New York and Pennsylvania, the company serves contractors and businesses with multiple physical locations and a comprehensive product offering. The website reflects a professional business model focused on B2B distribution, supported by online ordering and customer loyalty programs. The company emphasizes service guarantees and customer satisfaction, reinforcing its market position as a leading distributor in its sectors. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Maps API for location services, and Google reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The infrastructure is supported by Network Solutions as the registrar, with HTTPS enabled but lacking advanced DNS security features like DNSSEC. From a security perspective, the site demonstrates basic security hygiene with HTTPS and reCAPTCHA on forms but lacks published privacy, cookie, or security policies. No security headers were detected, and DNSSEC is not enabled, which presents opportunities for improvement. The absence of vulnerability disclosure or incident response information indicates a gap in transparency and readiness. Overall, the security posture is moderate but could be enhanced to meet higher compliance and trust standards. The overall risk assessment suggests a legitimate and trustworthy business with a solid online presence but with room to improve privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response contacts to enhance trust and compliance.

Jungle Bar is a small hospitality business based in Hertford, UK, specializing in nightlife entertainment including nightly events, karaoke, live jazz, and DJ sets. The website is professionally designed using Squarespace, featuring good mobile optimization and moderate performance. The business targets adults interested in vibrant nightlife experiences. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating a strong SSL configuration. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS registration data reduce overall trust and compliance posture. No security vulnerabilities or exposed sensitive data were detected, but security headers could be improved. Overall, the site presents a professional front for a local nightlife venue but would benefit from enhanced privacy compliance and transparency.

H

Hingley Pharmacy

hingleypharmacy.co.uk

61

Hingley Pharmacy is a UK-based healthcare provider specializing in pharmacy services including prescription ordering, travel vaccinations, and online shopping. The website reflects a local community pharmacy with a digital presence aimed at enhancing customer convenience through online services. The domain is well-established since 2007, supporting the legitimacy and trustworthiness of the business. Technically, the website uses a custom CMS with JavaScript and Google Maps integration, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is strong with visible privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.

Cambridge Insitu Pressuremeter Testing is a specialized service provider offering insitu pressuremeter testing with over 50 years of experience across mining, tunnelling, offshore, and civil engineering sectors. The company positions itself as a world-leading international full-service provider, targeting engineering and construction professionals. The website is built on the Squarespace platform, leveraging modern web technologies including Google Analytics and Google Maps API, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit privacy and terms of service documentation. Security posture is strong with HTTPS and HSTS enabled, but the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the website is professional and business-focused but would benefit from enhanced transparency and compliance documentation.

Skyline Taxis is a well-established local taxi and private hire company based in Stourbridge, UK, providing a range of transport services including airport transfers, business travel, and community transport. The company leverages technology such as online booking, mobile apps, and Google Places autocomplete to enhance customer experience. Their market position is strong locally, supported by positive customer testimonials and a solid online reputation. Technically, the website is built on WordPress with a modern tech stack, though some components like jQuery are outdated. Security measures include HTTPS and Google reCAPTCHA, but lack visible security headers and cookie consent mechanisms. Overall, the site is professional and trustworthy, with room for improvement in privacy compliance and security hardening.

M

Momentum Training

momentum-training.com

49

Momentum Training is a small fitness training business based in the United Kingdom, specializing in gym and spin classes. Established in 2012, it offers memberships and trial packages targeting fitness enthusiasts seeking quality coaching and a supportive community. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on health and fitness. Technically, the site is built on WordPress, leveraging Google Analytics, Google Tag Manager, and Mailchimp for marketing and analytics. It uses Google Maps API to display physical gym locations. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences.

B

Bajotecho

bajotecho.com.mx

63

Bajotecho is a professional real estate agency based in Mexico, specializing in the buying and selling of properties with a focus on personalized service and certified expertise through AMPI. The company offers comprehensive services including professional photography, social media marketing, legal and fiscal advisory, and client support to maximize property value. Their market position is that of a trusted, small-sized agency with a clear emphasis on quality and client trust. Technically, the website is built on a modern Next.js framework with React, ensuring fast performance, mobile optimization, and good accessibility. The site uses HTTPS with strong security headers, indicating a solid security posture. However, there is no visible cookie consent mechanism or published security/incident response policies, which are areas for improvement. Security-wise, the site demonstrates good practices such as secure forms and no exposed sensitive data, but the absence of WHOIS data limits full trust verification of the domain. The privacy policy is comprehensive and GDPR compliant, supporting privacy compliance. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in security and privacy mechanisms. Strategically, Bajotecho should focus on publishing terms of service, cookie consent, and security policies to improve compliance and trust. Verifying and publishing domain registration details would also enhance legitimacy. These steps will strengthen their security posture and business credibility in the competitive real estate market.

A

Altacom

altacom.eu

61

Altacom is a well-established distributor specializing in cybersecurity and IT infrastructure solutions, serving Baltic countries and Finland. The company partners with globally recognized vendors such as Bitdefender, N-able, and Utimaco, offering a broad portfolio including cybersecurity, data protection, HSM, PKI, and MSP tools. Their market position is solid with over 14 years of experience, targeting businesses seeking reliable IT security solutions. Technically, the website is built using modern technologies including Astro framework and employs Google Tag Manager and Google Maps APIs for analytics and location services. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements are possible. Performance is moderate with optimizations like Partytown for third-party script offloading. From a security perspective, the site uses HTTPS and shows good practices such as no exposed sensitive data and script offloading to improve security. However, it lacks explicit security headers, cookie consent mechanisms, and published security or incident response policies, which are areas for improvement. No critical vulnerabilities or suspicious indicators were found. Overall, the website is professional, trustworthy, and business-focused with a strong regional presence. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture and user trust.

S

SIA Madara

madara.lv

48

SIA Madara operates a website focused on providing office and industrial space rental services in Jelgava, Latvia, alongside metal container sales and machine building services. The company targets local businesses and industrial clients seeking large rental spaces and related manufacturing products. The website is professionally designed with clear navigation and multilingual support, primarily in Latvian with English and Russian options. The technical infrastructure employs a variety of JavaScript libraries and frameworks, including jQuery, Bootstrap, and Google Maps API, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate; while HTTPS is presumed, no explicit security headers or incident response policies are evident. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism implemented. Business credibility is supported by clear contact information and a certification page, though the absence of terms of service and incident response contacts are noted. Overall, the website presents a trustworthy and professional front for a small local business with room for security and compliance improvements.

L

Litigato | Kancelaria Prawno-Podatkowa

litigato.pl

66

Litigato is a small Polish legal and tax advisory firm specializing in supporting taxpayers during tax audits, proceedings, and criminal tax defense. The website targets Polish taxpayers and businesses seeking expert legal and tax advice, positioning itself as a niche service provider in Warsaw. The digital infrastructure is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google services, indicating a moderate to good level of digital maturity. The site is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting awareness of privacy compliance requirements. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Overall, the website is professional and trustworthy but lacks explicit privacy and terms of service pages, as well as direct contact details, which slightly impacts privacy compliance and business credibility scores.

S

SIA "Cargomax"

cargomax.lv

48

Cargomax is a Latvian transportation company specializing in international cargo shipments via road, air, and sea. Established in 2006, it has grown to become a recognized player in the logistics sector, offering comprehensive services including customized logistics solutions, cargo insurance, and customs brokerage. The website reflects a mature digital presence built on WordPress with multilingual support and SEO optimization. Security posture is adequate with HTTPS enforced, though lacking advanced security headers and formal privacy policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy, serving business clients seeking reliable international cargo transport.

Alfred Emken Lackierfachbetrieb GmbH is a well-established small manufacturing business specializing in automotive and industrial painting services based in Aurich, Germany. Founded in 1984, the company offers a broad range of services including vehicle accident repairs, industrial coatings for construction materials, powder coating with a unique facility in the region, and special coatings using premium products. The website reflects a professional and consistent brand image targeting local customers and businesses. Technically, the site uses a modern but basic tech stack including Bootstrap and jQuery, with Google Maps integration for location display. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and advanced security policies. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the site is functional, trustworthy, and well-suited for its business purpose.

D

Danny's

dannysnyc.com

62

Danny's is a small American wine bistro located in New York City, offering dining and private event services. The website is professionally designed using the Squarespace platform, featuring integration with the Resy reservation system and Google Maps for location. The site is mobile optimized and provides clear navigation to menus, hours, and contact information, although contact details are limited to a physical address. Security is well implemented with HTTPS and HSTS, and Google reCAPTCHA is used for form protection. However, the absence of privacy and cookie policies, as well as missing WHOIS data, reduce overall trust and compliance scores.

B

Baptist Health South Florida

baptisthealth.net

73

Baptist Health South Florida is a well-established healthcare provider network serving the South Florida region with a comprehensive range of medical services including hospitals, doctors, urgent care, and outpatient centers. The website reflects a professional and consistent brand presence, targeting patients and healthcare consumers in the region. The business model focuses on delivering healthcare services through multiple facilities and expert medical staff, positioning Baptist Health as a leading healthcare provider in its market. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Maps API, and analytics tools such as New Relic and Yext Answers. The site is built on a CMS likely to be Sitecore, optimized for mobile use, and incorporates SEO best practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS, uses security headers for cache control, and has domain registration protections such as clientTransferProhibited status. However, DNSSEC is not enabled, and explicit security or incident response policies are not publicly available. The extensive use of tracking and analytics indicates a high level of user monitoring, balanced by the presence of privacy and cookie policies with consent mechanisms. Overall, the website demonstrates a high level of business credibility and trustworthiness with no signs of blocking or WAF interference. Recommendations include enabling DNSSEC, publishing detailed security policies, and enhancing security headers to further strengthen the security posture.

G

Gemeinde Dottikon

dottikon.ch

47

Gemeinde Dottikon operates as the official municipal government website for the community of Dottikon in Switzerland. It provides residents and visitors with information about local administration, public services, cultural activities, education, and events. The website is positioned as a local government authority portal, offering key services such as online administrative services, waste disposal information, and event calendars. The target audience primarily includes local citizens and stakeholders interested in municipal affairs. Technically, the website is built on the WordPress CMS platform using the Divi theme and incorporates WooCommerce for transactional or booking functionalities. It leverages common web technologies such as jQuery and Google Maps API for enhanced user experience. The site demonstrates good mobile optimization and SEO practices, with structured data and meta tags properly implemented. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious elements were detected in the provided content. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is a trustworthy and professional municipal portal with solid business credibility. Strategic improvements in privacy compliance, security policy transparency, and contact information publication would enhance its security posture and user trust.

D

Die Schweizer Schlösser

dieschweizerschloesser.ch

53

The website 'Die Schweizer Schlösser' serves as a tourism portal showcasing 30 castles and fortresses across Switzerland. It offers visitors information about historical sites, events, exhibitions, and guided tours, targeting a general audience interested in cultural heritage and travel within Switzerland. The site is multilingual, primarily in German, with options for French, Italian, and English, enhancing accessibility for diverse visitors. Technically, the site is built on Concrete CMS, uses Google Fonts, jQuery, and integrates Google Maps API for location services. Google Tag Manager is implemented with IP anonymization to track analytics. The website demonstrates good design quality, mobile optimization, and user experience, though accessibility features are basic. Security posture is moderate with HTTPS enabled and some best practices observed, but lacks security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is moderate but limited by lack of visible contact information and trust indicators. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

M

MEDIA BUS d.o.o

mediabus.si

41

Media Bus d.o.o is a Slovenian company established in 2004, specializing in outdoor advertising with a focus on bus advertising, vehicle wrapping, digital printing, and digital messaging services. It holds a leading market position in Slovenia as the largest provider of bus advertising. The website is built on WordPress with common plugins such as Revolution Slider and Mailchimp integration for newsletter subscriptions. The technical infrastructure is moderate in performance and mobile optimized, though it uses an outdated jQuery version which poses security risks. The security posture is basic with HTTPS enabled but lacks important security headers and uses outdated libraries. Privacy compliance is limited, with no visible cookie consent or GDPR-specific policies, although a terms of service document is available. Business credibility is strong with clear contact information, customer testimonials, and an ISO certification displayed. Overall, the website is professional and trustworthy but would benefit from security and privacy improvements.

Media In is a Slovak PR and marketing agency with over 23 years of experience, offering a wide range of services including media relations, media lobbying, event marketing, and digital communication. The company is positioned as a trusted partner in the media sector, with a strong local presence and membership in the international Cohn & Wolfe PR network. Their website reflects a professional business model targeting organizations seeking integrated PR and marketing consultancy. Technically, the site is built on WordPress with Bootstrap and uses common analytics and marketing tools such as Google Analytics and Facebook Pixel. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, and some security best practices like security headers are missing. The SSL configuration is good, but some external resources are loaded over HTTP, which could pose mixed content risks. Overall, the security posture is moderate, with room for improvement in compliance and security hardening. Contact information is clearly provided, enhancing business credibility. The site content is safe for general audiences and professionally presented.

L

Living Lab Koprivnica

living-lab.hr

46

Living Lab Koprivnica is a collaborative innovation platform focused on testing and developing smart outdoor lighting and smart city solutions in Koprivnica, Croatia. The project connects technology providers, research institutions, public bodies, and citizens to foster sustainable energy development and smart urban infrastructure. The website presents detailed information about partners, technologies, and test fields, reflecting a mature and professional digital presence. Technically, the website uses modern web technologies including Google Maps API for interactive maps, Google Analytics for tracking, and jQuery for scripting. The site is hosted by Hrvatski Telekom d.d., a reputable Croatian provider, and employs HTTPS for secure communication. While the site is well-structured and mobile-optimized, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates good practices such as encrypted connections and no visible sensitive data exposure. However, the absence of explicit security policies and incident response contacts indicates room for improvement in security governance. The WHOIS data aligns well with the website's claims, supporting the legitimacy of the domain and business. Overall, Living Lab Koprivnica's website is a trustworthy and informative resource for stakeholders interested in smart city innovations, with recommendations to strengthen privacy compliance and security posture for future resilience.

T

The International Sava River Basin Commission

savagis.org

47

The International Sava River Basin Commission operates the Sava GIS Geoportal, a specialized platform providing geospatial data and tools for river basin management and navigation safety in the Sava River Basin region. The portal offers access to real-time and historical hydrological data, waterway marking, navigation safety inspection information, and a metadata catalogue, targeting government agencies, environmental professionals, and stakeholders. Technically, the site employs established JavaScript frameworks such as Ext JS and OpenLayers, integrates Google Maps API, and uses Google Analytics for user tracking. The domain is registered since 2015 with transparent WHOIS data, consistent with the organization's profile. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and privacy compliance documentation. Overall, the site is professional, trustworthy, and serves a niche governmental/non-profit audience effectively.

SOMA is a manufacturing company specializing in the production of flexo presses, with a history spanning approximately 25 years. The company positions itself as a top global manufacturer in its niche, emphasizing unique technology development. The website reflects a professional and consistent brand image targeted at businesses requiring specialized industrial equipment. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Google Tag Manager, and Smartlook, and integrates Google Maps API for location services. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the website uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. Privacy compliance is basic, with a cookie consent banner present but no visible privacy policy or terms of service pages. Overall, the website is legitimate and professional but would benefit from enhanced security and privacy disclosures.

E

EKOME, spol. s.r.o.

ekome.cz

40

EKOME, spol. s.r.o. is a Czech company specializing in environmental emission measurements and ecological consulting, with a focus on stationary pollution sources and workplace risk factors. The company holds multiple accreditations and authorizations from the Ministry of the Environment, indicating a reputable position in its sector. Their website reflects a professional service provider targeting businesses and organizations requiring environmental compliance and consulting services. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and privacy compliance, including GDPR and cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the visible business information and certifications support legitimacy.

W

World Kidney Day 2026

worldkidneyday.org

64

World Kidney Day 2026 is a global health awareness campaign focused on educating the public, health professionals, patients, and researchers about the importance of kidney health. The website serves as a central hub for campaign information, educational resources, interactive quizzes, and global event coordination. It positions itself as a reputable non-profit initiative with a consistent brand and strong social media presence across major platforms. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a clearly visible privacy policy page, which are areas for improvement. The WHOIS data is privacy protected or unavailable, which is common for non-profit organizations, but the overall legitimacy is supported by professional site design and external social media links. The site does not contain any adult or questionable content and is safe for general audiences.

Z

Zone Media OÜ

kuhuviia.ee

42

Kuhuviia.ee is a localized Estonian platform focused on facilitating waste sorting and repair services by providing an interactive map and search functionality for users to find waste disposal points and repair locations. The service is supported by Zone Media OÜ, a local Estonian company, and has been operational since 2014. The platform integrates Google Maps API for geolocation and mapping, and offers user engagement features such as adding new repair points and saving favorites. The website targets general users interested in environmental sustainability and waste management within Estonia. Technically, the website employs a modern JavaScript stack including jQuery, jQuery UI, and Google Maps API, with asynchronous loading of data from a dedicated API. The site is mobile-optimized and provides a good user experience with clear navigation and search autocomplete. However, some minor server-side errors are exposed in the HTML source, and no advanced security headers are implemented, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, and exposes a PHP warning which could leak information. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism detected. No direct contact information or incident response contacts are found, which may impact trust and compliance. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment suggests the site is legitimate and functional but would benefit from improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence. Strategic recommendations include fixing server-side errors, enabling DNSSEC, implementing security headers, and adding cookie consent mechanisms to align with GDPR requirements.

Č

Česká nefrologická společnost, o.s.

nefrol.cz

48

The Česká nefrologická společnost (Czech Society of Nephrology) is a non-profit professional organization dedicated to nephrology, encompassing medical professionals and researchers focused on kidney diseases. The website serves as an information hub for both professionals and patients, providing news, event calendars, and partner collaborations. The organization holds a reputable position within the Czech healthcare sector, supported by partnerships with recognized international nephrology bodies. Technically, the website employs modern analytics tools such as Google Analytics and Fathom, integrates Google Maps API, and demonstrates good mobile responsiveness and accessibility features. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is generally good with HTTPS enforced, but the absence of security headers and vulnerability disclosures suggests room for improvement. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and partner affiliations support its legitimacy. Overall, the site is well-maintained and trustworthy but should enhance privacy compliance and security transparency.

BigMedia, spol. s r.o. is a well-established leader in the Central European outdoor advertising market, specializing in a broad range of advertising formats including billboards, digital displays, and transport advertising. The company offers comprehensive services from rental to production and installation, targeting businesses and advertisers seeking out-of-home advertising solutions. Their market position is strong, supported by a domain registered since 2008 and active social media presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Quantcast Choice for consent management, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent present but no dedicated privacy policy page found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

Rolf Kind GmbH is a medium-sized German manufacturing company specializing in the production of high-quality forged steel components, including rings, shafts, and custom shapes made from high-alloy stainless steels and special materials such as nickel and titanium alloys. Founded in 1969, the company has a strong market position as a family-owned business with over 50 years of experience, serving industrial clients requiring precision and customized forging solutions. Their website reflects a professional digital presence built on TYPO3 CMS, featuring multimedia content, a cookie consent mechanism, and multilingual support (German and English). Technically, the website employs modern web technologies including HTML5 video, jQuery, and Google Maps API integration. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, but security headers are not explicitly detected and no dedicated security or incident response policies are published. Overall, the website demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR. Contact information is clearly presented, and social media channels are active, enhancing business credibility. No critical security or content safety issues were found, and the domain registration appears legitimate and consistent with the business profile. Strategic improvements could focus on enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance.

H

Hrvatski audiovizualni centar

havc.hr

45

The Hrvatski audiovizualni centar (HAVC) is a Croatian public institution dedicated to supporting and promoting the audiovisual sector, including film production and cultural initiatives. The website serves as an authoritative portal providing news, event calendars, film catalogs, and official publications relevant to the Croatian and international film community. It targets industry professionals, cultural stakeholders, and the general public interested in audiovisual culture. The business model is primarily public funding and cultural promotion, positioning HAVC as a key national player in the media sector. Technically, the website employs a modern JavaScript-based frontend with libraries such as jQuery, Nivo Slider, and Google Fonts, alongside integrations with Google Maps API, Facebook Pixel, and Google Analytics for tracking and user engagement. The site is mobile-optimized and accessible, with features to adjust contrast and font size, enhancing usability. Hosting and domain registration are consistent with a Croatian academic network registrar, indicating a stable and legitimate infrastructure. From a security perspective, the site uses HTTPS and includes tracking scripts responsibly. However, it lacks visible security headers and does not publish a security policy or incident response contacts, which are areas for improvement. Privacy compliance is partial; while a cookie banner is present, it lacks explicit consent mechanisms, and no privacy policy or terms of service are directly linked or found on the homepage. The absence of vulnerability disclosure mechanisms also suggests room for maturity in security practices. Overall, HAVC's website is professional, content-rich, and trustworthy, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance user trust and regulatory adherence. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and improving cookie consent mechanisms.

D

Dineplan

dineplan.com

10

Dineplan is a South African-focused online restaurant reservation platform offering consumers the ability to book tables, browse menus, and read reviews for over 2,000 restaurants. It also provides reservation software solutions for restaurateurs, positioning itself as a key player in the hospitality sector within South Africa. The website promotes mobile app usage for enhanced user experience and convenience. Technically, the site employs a modern technology stack including Google Maps API, reCAPTCHA, and multiple analytics and marketing tools such as Google Analytics, HubSpot, Hotjar, and TikTok Pixel. Security measures include HTTPS enforcement and CAPTCHA protections on user authentication forms, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain is a notable gap, reducing trustworthiness from a domain registration perspective. Overall, the site is professionally designed, mobile-optimized, and provides comprehensive privacy and terms documentation, supporting a good security and privacy posture.

S

SteelMed

steelmed.com

58

SteelMed is a medium-sized Spanish company specializing in the sale and distribution of industrial steel sheeting and coils, offering custom cutting services for various industrial sectors including automotive, construction, and renewable energies. It operates as part of the Hiemesa Group, a well-established steel sector conglomerate. The website demonstrates a professional digital presence with comprehensive product information, certifications, and contact details. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with responsive design and integration of Google services like Maps and reCAPTCHA. Security posture is moderate, with some best practices observed but lacking visible security headers and explicit incident response contacts. Privacy compliance is strong, with clear policies and cookie consent mechanisms. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the overall business credibility and trust indicators are high. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving incident response transparency.

Grupo Hiemesa is a leading Spanish group specializing in the manufacturing, transformation, commercialization, and distribution of steel products. Established in 1962, it has grown to become a major player in the steel sector in Spain, serving various industrial markets with a comprehensive range of services including distribution, steel profiling, sandwich panel manufacturing, and export. The company operates multiple subsidiaries and maintains a strong presence in Iberia and neighboring regions. Technically, the website employs modern web technologies such as Bootstrap 3.0, jQuery, and Google Maps API, offering a responsive and content-rich user experience. Security posture is adequate with HTTPS enabled and secure forms, though improvements in security headers and incident response documentation are recommended. Privacy compliance is supported by clear privacy and cookie policies, though an active cookie consent mechanism is absent. Overall, the site reflects a professional and trustworthy business with room for enhanced security and compliance maturity.

G

Generon

generon.sk

43

Generon is a Slovakian company specializing in integrated solar roofing solutions, developed under the parent company Terran Slovakia s.r.o., a leading roofing tile manufacturer in Central and Eastern Europe. Their product uniquely integrates solar cells into traditional roofing tiles, offering an aesthetic and ecological alternative for energy-conscious customers. The website is well-structured, professionally designed, and optimized for SEO and mobile devices. Technically, it leverages WordPress with Elementor, includes modern JavaScript libraries, and integrates Google Analytics and MailerLite for marketing and analytics. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and policies could enhance protection. No critical vulnerabilities or suspicious content were detected, and privacy compliance is well addressed with comprehensive policies and consent management. Overall, the site reflects a mature digital presence aligned with the company's market position and business goals.

T

TVN MEDIA SP. Z O.O.

tvnmedia.pl

62

TVN Media Sp. z o.o. operates as the advertising sales office for TVN and associated media platforms in Poland, offering a comprehensive portfolio of advertising services including TV spots, sponsoring, addressable TV, and online advertising. The company is positioned as a leading media advertising entity within the Polish market, affiliated with Warner Bros. Discovery. The website reflects a professional and business-focused approach targeting advertisers and marketing agencies. Technically, the site employs modern analytics and marketing technologies such as Google Tag Manager and Gemius, and integrates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and legitimacy of the business. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

M

Mechanical & Electrical Fixings Ltd

mef.co.uk

69

Mechanical & Electrical Fixings Ltd (MEF) is a UK-based company specializing in the supply of mechanical and electrical fixings with over 20 years of market presence. Their website serves as a Shopify-powered e-commerce platform offering a wide range of products tailored to trades professionals and contractors. The company emphasizes sourcing specialized and elusive products, supported by detailed datasheets and technical documentation. The business targets the manufacturing sector and operates primarily within the UK market. The website reflects a consistent brand identity and professional presentation, supporting its position as a trusted supplier in its niche.

O

Obeta

obeta.de

70

The website obeta.de appears to be a German-language e-commerce or product catalog platform, leveraging modern web technologies such as Next.js and custom JavaScript frameworks like Sirius and Oxomi. It integrates third-party services including Cookiebot for cookie consent management and Google Maps API for location services. The site is accessible without any blocking or WAF challenges, indicating good availability. However, the absence of explicit privacy policies, terms of service, and contact information on the main page limits transparency and user trust. The WHOIS data is minimal and shows an unusual domain status 'connect', which may indicate incomplete registration or a parked domain, raising concerns about domain legitimacy. Overall, the technical infrastructure is modern and moderately optimized for performance and mobile use, but security posture could be improved by implementing security headers and explicit policies.

Pykonik is a well-established community organization focused on Python programming enthusiasts in Kraków, Poland. The website serves as a hub for event announcements, speaker presentations, and community engagement. It has a strong local presence with a history dating back to 2008, supported by active social media channels and meetup events. The business model revolves around organizing and promoting Python user group meetings and related social gatherings. Technically, the site is built on a modern stack including Python, Django, Bootstrap, and uses Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enabled but lacks advanced security headers and DNSSEC is not configured. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy but could improve in security and compliance areas.

benevol-jobs.ch is a well-established Swiss non-profit volunteering platform owned by benevol Switzerland. It serves as the largest Swiss platform connecting volunteers with nonprofit organizations, offering a wide range of volunteer opportunities across various sectors and regions in Switzerland. The platform is self-financed through service sales and partnerships, maintaining a strong market position in the non-profit volunteering domain. Technically, the website is built on Drupal CMS with integrations such as Google Tag Manager, Google Maps API, and LiveChat, reflecting a modern and functional digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and secure forms but lacks some advanced security headers and explicit incident response policies, indicating room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and a solid business credibility profile.

Skupina GEN is a major Slovenian energy group focused on sustainable and low-carbon electricity production, primarily through nuclear and hydroelectric power. The company also engages in electricity trading and strategic investments, including the development of the second block of the Krško nuclear power plant (JEK2). Their website reflects a professional corporate presence with clear navigation and relevant content for stakeholders and the general public. Technically, the site uses established JavaScript libraries and Google services, hosted on Microsoft Azure DNS infrastructure, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements are recommended such as updating libraries and publishing formal security policies. Overall, the domain and WHOIS data confirm a legitimate and established business entity with consistent registration details.

P

PIKA SERVIS d.o.o.

mojsvet.com

46

PIKA SERVIS d.o.o. is a small Slovenian technology company specializing in computer hardware sales, repair services, web hosting, domain registration, and website development. Established in 2002, it serves local businesses, individual consumers, and educational institutions primarily in Murska Sobota. The company emphasizes customer satisfaction and offers integrated web solutions including AI-assisted site building. Technically, the website uses modern web technologies and is mobile optimized, though it lacks some advanced security headers. The site is served over HTTPS with a valid SSL certificate and includes a cookie consent mechanism, indicating basic privacy compliance. However, the domain is a subdomain without public WHOIS registration, which introduces some legitimacy concerns. Overall, the business appears credible with moderate trustworthiness but would benefit from improved security practices and clearer domain registration transparency.

M

Ministrstvo za kohezijo in regionalni razvoj

evropskasredstva.si

53

The website evropskasredstva.si serves as the official Slovenian government portal dedicated to European structural and investment funds. It provides comprehensive information on EU programs, projects, calls for proposals, and advisory support to stakeholders and the general public. The portal is managed by the Ministry of Cohesion and Regional Development of Slovenia, reflecting its authoritative position in the government sector. The site targets Slovenian citizens, government entities, and project participants interested in EU funding opportunities and related news. Technically, the website is built on WordPress CMS, leveraging a modern technology stack including jQuery, Google Maps API, and various plugins for SEO, analytics, social media integration, and GDPR compliance. Hosting is facilitated through Cloudflare, ensuring reliable DNS and security services. The site demonstrates good performance and mobile optimization, with structured data enhancing SEO and discoverability. From a security perspective, the site employs HTTPS with good SSL configuration and some security headers. It uses content security policy monitoring and security-focused plugins, though it lacks a publicly available security policy or incident response information. No vulnerabilities or security issues were detected in the analyzed content. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Overall, the website presents a professional, trustworthy, and well-maintained government portal with strong business credibility. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing incident response transparency, and improving accessibility compliance to further strengthen trust and security posture.

M

migrolino

migrolino.ch

70

Migrolino operates as a well-established retail convenience store chain in Switzerland, providing quick and convenient shopping options for daily needs. The website serves primarily as a shop finder and promotional platform, targeting the general Swiss public with localized language options in German, French, and Italian. The business model focuses on retail convenience with a strong physical presence across Switzerland, supported by an interactive map of store locations. Technically, the website leverages modern web technologies including Google Maps API, Google Fonts, and Google Analytics, ensuring a functional and user-friendly experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic privacy controls such as cookie consent, though explicit privacy policies and security headers could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business entity. Strategic recommendations include enhancing privacy compliance, publishing clear policies, and strengthening security headers to improve trust and compliance.

Invest Pomurje is a regional development agency focused on promoting foreign direct investment in the Pomurje region of Slovenia. The website highlights the region's strategic location in Central Europe and offers detailed information on business opportunities in sectors such as tourism, sport, renewable energy, advanced agriculture, and metal processing. The agency provides support services to investors and showcases success stories to build credibility. The target audience includes foreign investors and businesses seeking expansion in Central and South-Eastern Europe. Technically, the website is built on WordPress using the Uncode theme and integrates common tools like Yoast SEO, Google Analytics, and Google Maps API. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security policies or incident response information. No vulnerabilities or suspicious content were detected, and the domain registration is consistent with a legitimate business entity. Overall, the website presents a professional and trustworthy front for regional investment promotion.

R

RVK

rvk.ch

52

RVK is an independent and leading service provider in the Swiss healthcare market, offering specialized services including risk and performance management, insurance medicine consulting, and education through its RVK Academy. The company targets insurers, pension funds, and enterprises, providing tailored insurance and educational solutions. The website is professionally designed, consistent in branding, and provides clear contact information and trust signals such as client testimonials and SQS-Audit certification. Technically, the site uses modern web technologies like Swiper.js and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.