Security Directory

P

Peluuri

peluuri.fi

61

Peluuri is a Finnish non-profit organization dedicated to supporting individuals and their families affected by gambling addiction. The website provides comprehensive resources including a helpline, chat services, self-help tools, group programs, and educational materials for both affected individuals and professionals. It holds a strong market position as a trusted national resource in Finland, with a clear mission and consistent branding. The site is multilingual, accessible, and professionally designed, reflecting a mature digital presence. Technically, the site is built on Drupal 10, integrates modern analytics and chat tools, and follows good security practices including HTTPS and security headers. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a high level of professionalism, security, and compliance with privacy regulations, making it a reliable resource for its target audience.

B

Bonanza88

bonanza88asli25.org

61

Bonanza88 is an Indonesian online gambling platform established since 2011, offering a variety of gambling services including bola tangkas, slot online, live casino, judi bola, poker, and togel. The website targets Indonesian players and provides localized content in Bahasa Indonesia. The platform integrates multiple modern web technologies such as jQuery, Google Analytics, Google Tag Manager, OneSignal push notifications, and LiveChat for customer support, indicating a moderate level of digital maturity. The site is mobile optimized and features a custom CMS backend. Security measures include HTTPS usage and CAPTCHA on login forms, but lack visible advanced security headers or explicit cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection common in gambling domains, which slightly reduces trust. Overall, the platform appears functional and moderately professional but would benefit from enhanced security and privacy compliance.

Salus is an NHS-based provider specializing in Occupational Health, Safety, and Return to Work services for both public and private sectors. Operating as a social enterprise within the NHS framework, it is positioned as the largest multidisciplinary occupational health service in the UK. The website reflects this positioning with clear service offerings and NHS affiliations, supported by certifications such as BSI and SEQOHS. The target audience includes employers and employees seeking occupational health and safety solutions. Technically, the website is built on Microsoft SharePoint with jQuery and Google Analytics integration, indicating a moderately mature digital infrastructure but with legacy elements and basic mobile optimization. Security posture is moderate, with HTTPS usage but lacking advanced security headers and containing a suspicious third-party script. Privacy compliance is weak due to the absence of a clear privacy policy and consent mechanisms. Overall, the site is professional and functional but would benefit from enhanced security and privacy practices to improve trust and compliance.

M

Messe Duesseldorf Asia

prowine-singapore.com

57

ProWine Singapore is a prominent trade fair event focused on wines and spirits, targeting international producers and Southeast Asian market professionals. It operates under Messe Duesseldorf Asia and is part of the global ProWein World Series. The website presents a professional and content-rich platform with detailed event information, exhibitor services, masterclasses, and networking opportunities. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and marketing tools like Feathr and IIRIS Tracker. The site is mobile-optimized and well-structured, offering a good user experience. Security posture is solid with HTTPS enabled and secure forms, but lacks some security headers and explicit cookie consent mechanisms, which are recommended for compliance and enhanced security. The absence of WHOIS registration data is a notable anomaly that reduces domain trustworthiness, though the website content and branding strongly indicate legitimacy. Overall, the site scores well in business credibility and technical implementation but should address privacy compliance gaps and WHOIS transparency for improved trust.

C

Coldwell Banker Commercial

cbcworldwide.com

71

Coldwell Banker Commercial Worldwide operates as a leading commercial real estate brokerage and franchise network in the United States, offering extensive property listings and professional services. The website reflects a mature, well-established brand with a history dating back to 1906 and a parent company affiliation with Anywhere Advisors LLC. The digital presence is robust, featuring advanced search capabilities, user engagement forms, and integration with modern web technologies such as Google Tag Manager, reCAPTCHA, and TrustArc consent management. Security posture is strong with HTTPS enforcement and secure form handling, though there is room for improvement in implementing security headers and publishing explicit security policies. The absence of WHOIS registration data for the domain is a notable anomaly that warrants monitoring but does not detract from the overall legitimacy of the business as presented on the site.

N

Network of Sacred Heart Schools

sacredheartusc.education

55

The Network of Sacred Heart Schools website serves as the online hub for a collaborative association of Catholic independent schools in the United States and Canada. It provides comprehensive information about the network's mission, member schools, educational philosophy, and community engagement. The site targets students, educators, trustees, and families interested in Sacred Heart education, emphasizing social justice and faith-based learning. The network is well-established with a significant presence in North America and global connections through the Religious of the Sacred Heart. Technically, the website is built on a modern JavaScript stack including jQuery, Backbone.js, and video playback libraries, hosted on a specialized education platform (MySchoolApp). The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made. Performance is moderate, and the site uses HTTPS with no detected WAF or blocking mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and explicit privacy/cookie policies indicates room for improvement in compliance and defense-in-depth. The WHOIS data is unavailable due to a malformed query response, limiting domain trust analysis but the website content and structure suggest legitimacy. Overall, the site is professional and trustworthy with a clear educational mission. Strategic recommendations include adding privacy and cookie policies with consent mechanisms, implementing security headers, and providing incident response contacts to enhance security and compliance posture.

F

Fachgebiet EPK, Fakultaet RP, TU-Dortmund

eura.org

47

The European Urban Research Association (EURA) is a well-established academic network focused on urban research across Europe, with a history dating back to 1998. The organization facilitates scholarly exchange through conferences, a dedicated journal, working groups, and educational events such as summer and winter schools. The website reflects a professional and consistent brand identity targeting urban scholars and researchers interested in sustainable and equitable city development. Technically, the site is built on WordPress with modern plugins and integrates analytics and social media SDKs, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and explicit security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy, which is a notable gap. Overall, the site is trustworthy and credible, supported by consistent WHOIS data linking it to a German academic institution.

Contact Collection LLC operates a specialized SaaS solution focused on integrating Wix websites with Mailchimp to facilitate email marketing and lead collection. The company targets Wix website owners seeking an easy-to-use, customizable form solution to grow their mailing lists. Their market position is niche but well-defined, leveraging the Wix App Market for distribution and providing value through deep Mailchimp integration and user-friendly design. Technically, the website employs modern web technologies including Font Awesome, Google Fonts, jQuery Easing, and Google Analytics for tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. The platform integration with Wix is a key technical asset, enabling seamless user adoption. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and published security or incident response policies. No vulnerabilities or malicious content were detected, but the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a professional and trustworthy front with good content quality and business credibility. The main risks relate to domain registration opacity and limited published security governance. Strategic improvements in security policy transparency and domain registration clarity would enhance trust and compliance.

C

Choices Rehabs

choicesrehabs.com

39

Choices Rehabs is a UK-based organization representing independent addiction treatment centers, focusing on rehab, support housing, and careers in recovery. The website targets individuals seeking addiction treatment services within the UK and operates as a service provider network. The business is relatively young, founded around 2019, and maintains a professional online presence with consistent branding and relevant content. Technically, the site is built on WordPress using Elementor and Astra theme, integrating Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks DNSSEC and security headers, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration aligns with the business claims, supporting legitimacy.

J

JobBox

jobbox.app

65

JobBox is a Norwegian technology company offering an integrated SaaS platform that serves as a comprehensive digital toolbox for businesses. Their services include quality management systems, electronic vehicle logs, health and safety internal controls, equipment management, and time registration. Positioned as a modern and user-friendly solution, JobBox targets Norwegian businesses seeking to consolidate multiple operational tools into a single system. The website reflects a professional and consistent brand image with good content quality and clear navigation.

S

Sharphawk

sharphawk.com

64

Sharphawk is a strategy and creative marketing agency focused on partnering with brands to drive revenue and business growth through strategic brand building, performance marketing, and technology solutions. The company appears to be a small-sized agency founded in 2017, with a clear market positioning as a strategic marketing partner. The website is built using modern technologies such as Framer and integrates multiple analytics and tracking tools including Google Analytics, Microsoft Clarity, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms, which poses a compliance risk. Overall, the website is professional and functional but would benefit from improved privacy and security practices to enhance trust and compliance.

K

Kareco Holdings Limited

odibets.com

60

Odibets is a Kenyan online sports betting and casino platform operated by Kareco Holdings Limited. Established in 2018, it offers a variety of betting services including sports betting, live betting, casino games, jackpots, and fantasy sports under the OdiLeague brand. The platform targets sports bettors primarily in Kenya but also covers international soccer and other sports. The website promotes a lightweight 2MB mobile app and provides multiple betting options with a focus on soccer and basketball. The business is licensed and regulated by the Betting Control and Licensing Board of Kenya, indicating compliance with local gambling regulations. Technically, the website uses modern JavaScript frameworks such as Vue.js and integrates multiple third-party services including Google Analytics, Microsoft Clarity, Sportradar widgets, and OneSignal for push notifications. The site is mobile optimized and has good SEO practices with comprehensive meta tags and Open Graph data. Hosting details are not explicit but DNS is managed via Cloudflare, and the domain is registered with GoDaddy with a long-term expiry. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC, explicit security headers, and published security or incident response policies. There is no visible cookie consent mechanism, which may impact privacy compliance. The site uses extensive tracking and advertising scripts, indicating a moderate to extensive user tracking level. Overall, Odibets presents as a legitimate, professional online betting platform with a solid business foundation and good technical implementation. Security posture is adequate but could be improved by adding DNSSEC, security headers, and formal security policies. Privacy compliance should be enhanced by implementing cookie consent and clearer data protection disclosures.

Pluto TV is a leading free streaming television service offering over 250 live channels and thousands of on-demand movies and TV shows. Owned by Pluto Inc., a subsidiary of Paramount Global, it targets a broad consumer base seeking free, ad-supported streaming content across multiple platforms including smart TVs, mobile devices, and web browsers. The website demonstrates a mature digital presence with comprehensive content, consistent branding, and extensive platform support. Technically, the site uses modern frameworks such as React and integrates industry-standard analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

Z

Zipify

zipify.com

46

Zipify is a medium-sized technology company specializing in Shopify apps designed to increase ecommerce revenue through innovative landing page builders and post-purchase upsell solutions. The company is well-positioned in the ecommerce sector, trusted by over 50,000 brands, and leverages a SaaS business model focused on Shopify merchants. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting ecommerce store owners. Technically, the site is built on WordPress with integrations of modern marketing and analytics tools such as Google Analytics, Hotjar, HubSpot, and Facebook Pixel, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs standard security headers, and avoids exposing sensitive data, demonstrating a solid security posture. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though direct contact details like emails or phone numbers are not prominently provided, relying instead on contact forms.

S

Scientiffic Nutrition

scientifficnutrition.com

49

Scientiffic Nutrition is a Spanish-based e-commerce business specializing in sports nutrition supplements and related products. Established in 2018, the company has positioned itself as a reputable provider within the sports nutrition retail sector, leveraging official partnerships with prominent sports teams to enhance brand credibility. Their website offers a comprehensive product catalog, targeting both professional athletes and fitness enthusiasts. Technically, the site is built on WordPress with WooCommerce, integrating modern plugins and tracking tools such as Google Analytics and Probance, while maintaining GDPR-compliant privacy and cookie policies with active consent mechanisms. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security headers could be improved. Overall, the website demonstrates good design, usability, and trustworthiness, supporting a medium-sized retail operation with a clear market focus.

U

UniversiDATA

universidata.es

57

UniversiDATA is a specialized open data portal focused on the higher education sector in Spain, aggregating datasets from multiple universities to promote transparency and data reuse. The platform offers a catalog of datasets, analytical applications, and news updates, targeting universities, researchers, and data reusers. The website is built on Drupal 7 with modern front-end technologies and integrates Google Analytics with privacy-conscious configurations. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is professional, trustworthy, and well-positioned within its niche.

C

CRUE

crue.org

61

CRUE (Conferencia de Rectores de las Universidades Españolas) is a prominent non-profit organization representing Spanish universities. The website serves as a central hub for information about the organization’s governance, activities, policies, and events, targeting academic institutions, students, researchers, and education stakeholders in Spain. It offers comprehensive resources including agendas, publications, and institutional representation. The organization holds a leading market position within the Spanish higher education sector. Technically, the website is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, event management, and multimedia integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data and social media integration. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, reflecting compliance with GDPR. While explicit security headers are not fully visible in the HTML, the use of security/privacy plugins and absence of exposed sensitive data indicate a solid security posture. No critical vulnerabilities or suspicious WHOIS patterns were detected, though WHOIS data is privacy protected, which is typical for such organizations. Overall, CRUE’s website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include enhancing security headers, publishing explicit security policies, and enabling DNSSEC to further strengthen domain security.

E

ePayco: Pagos en Línea, Presenciales y Comercio Electrónico en Colombia

epayco.com

57

ePayco is a Colombian payment gateway platform offering a variety of payment solutions including online payments, point-of-sale transactions, subscription management, fraud mitigation, and e-commerce shops. The company targets businesses and merchants in Colombia, providing secure and agile technology to facilitate payments and collections. The website is built on WordPress with Elementor and integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and domain registration locked with multiple EPP status flags, although DNSSEC is not enabled and no explicit security or privacy policies are published. The domain is well-established since 2009, consistent with the company's market presence. Overall, the website is professional, well-branded, and technically sound but lacks some compliance documentation and explicit security disclosures.

S

SIA Transact Pro

transactpro.eu

63

SIA Transact Pro is a licensed electronic money institution based in Latvia, operating since 2004. It provides comprehensive payment services including card issuing, payment processing, and gateway services primarily targeting corporate clients and merchants. The company is a principal member of major payment networks such as Visa and Mastercard and is affiliated with Transact Bank N.A. The website reflects a mature business with clear service offerings and regulatory compliance. Technically, the site uses modern analytics and security tools, including Google Tag Manager, Google Analytics, and reCAPTCHA, and enforces HTTPS with PCI DSS Level 1 compliance. However, it lacks publicly available privacy and security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust in the financial sector. Overall, the website is professional, secure, and trustworthy, with room for improvement in privacy compliance and security communication.

S

SIA Transact Pro

transactpro.lv

63

SIA Transact Pro is a Latvia-based licensed electronic money institution established in 2004, providing comprehensive payment services including card issuing, payment processing, and gateway services. It holds principal memberships with Visa and Mastercard and operates under the supervision of the Bank of Latvia. The company targets corporate clients, e-commerce businesses, and financial institutions, offering tailored payment solutions and card products such as debit, credit, prepaid, gift, loyalty, and virtual cards. The business is affiliated with Transact Bank N.A., enhancing its banking and financial service capabilities. Technically, the website employs modern JavaScript libraries and integrates Google Tag Manager, Google Analytics, and Yandex Metrica for analytics and user tracking. The site is mobile-optimized with good navigation and professional design. Security measures include HTTPS enforcement, PCI level 1 compliance claims, and use of Google reCAPTCHA for form protection. However, explicit security policies and incident response information are not published, representing an area for improvement. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is moderate due to the presence of a cookie policy and consent mechanism but lacks a dedicated privacy policy page. Contact information is clearly provided with multiple channels including phone, email, and physical address. Overall, the website and business demonstrate high trustworthiness and professionalism. Strategically, the company should focus on publishing comprehensive privacy and security policies, enhancing accessibility, and formalizing incident response and vulnerability disclosure processes to strengthen compliance and customer trust.

U

Universidad Autónoma de Madrid

uam.es

59

The Universidad Autónoma de Madrid (UAM) is a prominent public university in Spain, offering a wide range of undergraduate, postgraduate, and research programs. It holds a strong market position as one of Spain's leading universities, ranked 206 worldwide in the QS World University Rankings 2026. The institution targets students, researchers, academic staff, and prospective students, providing education, research, innovation, and cultural services. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, with good mobile optimization and accessibility features. The site uses HTTPS with strong SSL configuration, though it lacks some advanced security headers. No CMS or hosting provider details were explicitly detected. Performance is moderate, with room for optimization. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's reputation. The WHOIS data is restricted by the Spanish registry policy, which is typical and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure practices to further strengthen trust and security.

R

RAV Flevoland RAV Gooi en Vechtstreek

ravflgv.nl

55

RAV Flevoland RAV Gooi en Vechtstreek operates as a regional ambulance service provider in the Netherlands, focusing on emergency medical care and patient transport within the Flevoland and Gooi en Vechtstreek regions. The website serves as an information portal for residents and healthcare professionals, offering details about ambulance services, locations, news, and contact options. The organization positions itself as a key regional healthcare service with a public service business model. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google services including Analytics, Tag Manager, and reCAPTCHA for security and tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Hosting appears to leverage Cloudflare for CDN and performance improvements. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks several important security headers that could improve defense against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy present, but no explicit cookie consent mechanism was found, which is a gap for GDPR compliance. Overall, the website is professional, trustworthy, and well-maintained, with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and publishing explicit security and incident response policies to strengthen compliance and security posture.

V

Veiligheidsregio Brabant-Noord

vrbn.nl

75

Veiligheidsregio Brabant-Noord is a Dutch governmental regional safety authority responsible for coordinating emergency services including fire brigade, medical assistance, police, and crisis management across 11 municipalities serving over 670,000 residents. The organization emphasizes collaboration among various public safety entities to ensure preparedness and effective response to incidents and disasters. The website reflects this mission with comprehensive information, news updates, and resources for residents and partners. Technically, the website is built on the IPROX.NET 4 CMS platform, utilizing modern JavaScript libraries such as jQuery and Flexslider, and integrates Google Analytics with privacy-conscious settings like IP anonymization. The site is mobile-optimized, accessible, and SEO-friendly, with a clear navigation structure and professional design. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policy documentation, vulnerability disclosure mechanisms, and some recommended security headers. The WHOIS data confirms the domain's legitimacy and consistency with the organization's governmental nature. Overall, the website presents a trustworthy and professional digital presence for a regional government safety authority, with minor areas for improvement in security transparency and policy disclosures.

S

ShanghaiRanking

shanghairanking.com

54

ShanghaiRanking is a website dedicated to providing university rankings and academic evaluation services. It targets academic institutions, researchers, students, and education policymakers. The site uses modern web technologies such as Vue.js and Nuxt.js, and integrates analytics tools like Google Analytics and Google Tag Manager to monitor user interactions. The website design is professional with good navigation and content relevance, although mobile optimization and accessibility are basic. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, impacting overall business credibility. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and security.

F

Fundación ICO

fundacionico.es

62

Fundación ICO is a Spanish non-profit foundation affiliated with the Instituto de Crédito Oficial (ICO), focusing on promoting cultural activities, financial education, and sustainable economic development. The website serves as a portal for information on their educational programs, art exhibitions, publications, and institutional collaborations. It targets a broad audience including educators, students, professionals in finance, and the general public interested in sustainability and culture. The foundation holds a recognized position in Spain's public and cultural sectors, leveraging its connection to ICO to deliver impactful programs and resources. Technically, the website is built on the Liferay CMS platform with custom theming and uses a mix of legacy and modern JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing. The site is mobile optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with room for improvement in modernizing the tech stack and enhancing accessibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR and Spanish regulations. However, it lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Analytics usage is moderate, primarily through Google services, with a reasonable privacy compliance posture. Overall, Fundación ICO's website is professional, trustworthy, and aligned with its public foundation status. Strategic improvements in security headers, updated libraries, and enhanced transparency on security policies would further strengthen its posture and user trust.

M

MCM beton

mcmbeton.hu

47

MCM beton is a Hungarian construction-related company specializing in concrete and related services, operating as part of the larger Market corporate group. The website presents company information, contact details, and links to sister companies, targeting construction industry clients primarily in Hungary. The digital infrastructure uses modern JavaScript libraries and Google services, indicating moderate digital maturity. However, some security best practices such as security headers and cookie consent mechanisms are missing or minimal. The website is professionally designed with good navigation and mobile optimization, but lacks explicit privacy and security policies on-site. Overall, the domain registration and website content align well, supporting legitimacy and trustworthiness.

P

Prebeton Zrt.

prebeton.hu

47

Prebeton Zrt. is a Hungarian manufacturing company specializing in precast concrete products and related construction services. It operates as part of a larger corporate group with multiple subsidiaries, serving primarily B2B clients in the construction and real estate sectors. The website reflects a medium-sized enterprise with a clear business model focused on manufacturing, design, transportation, and assembly services. Technically, the website uses a modern JavaScript stack with common libraries and integrates Google Analytics and Tag Manager for tracking. The site is accessible, mobile responsive to a basic degree, and has a consistent branding approach. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Vilati Szerelő Zrt.

vilati.hu

48

Vilati Szerelő Zrt. is a well-established Hungarian construction and real estate development company, founded in 1998 and operating as part of a larger corporate group with multiple subsidiaries and partners. The company focuses on construction projects and real estate development, targeting the Hungarian market and related stakeholders. The website presents a professional image with clear navigation, project information, and corporate group affiliations. Technically, the site uses a custom CMS with common JavaScript libraries and Google services for analytics and mapping. While the site is functional and moderately optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The domain is longstanding and consistent with the business claims, indicating high legitimacy.

M

Moratus Kft.

moratus.hu

48

Moratus Kft. is a well-established Hungarian construction and real estate company founded in 2005, operating as part of a larger corporate group with multiple subsidiaries. The company focuses on construction projects, real estate development, and related services, targeting clients and partners in the construction and real estate sectors. The website presents a professional image with clear navigation, project showcases, awards, and career opportunities, reflecting a mature business presence. Technically, the website uses modern JavaScript libraries such as jQuery, Google Tag Manager, Google Analytics, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, although accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected, but improvements in security headers and privacy policy publication are recommended. Overall, the website is credible and trustworthy, with a solid business foundation and digital presence. Strategic improvements in privacy compliance and security posture would enhance its risk profile and user trust.

I

Init Eldor AS

eldor.no

66

Init Eldor AS is a specialized engineering consultancy focused on optimizing offshore and land-based production facilities primarily in the energy sector. Their services include alarm system improvement, control and safety systems, control room and remote operation, human factors, and process optimization. The company targets offshore and land-based production operators and engineering professionals, positioning itself as a niche expert with notable clients such as Equinor and Aker BP. The website is professionally designed, content-rich, and demonstrates strong trust signals including client testimonials and GDPR-compliant privacy practices. Technically, the site is built on HubSpot CMS with integration of modern analytics and marketing tools, though some legacy libraries like jQuery 1.7.1 are used. Security posture is good with HTTPS and cookie consent mechanisms, but could be improved by adding explicit security headers and incident response information. WHOIS data is unavailable, likely due to privacy protection, but the overall legitimacy and professionalism of the site support a high trust level.

드

드림어스컴퍼니

blog-dreamus.com

55

드림어스컴퍼니 operates a corporate blog primarily focused on sharing news and updates about its services such as FLO music streaming, Astell&Kern audio products, and IRIVER services. The website targets Korean-speaking audiences interested in the company's offerings and industry news. The site is built on the Wix platform, leveraging Wix's hosting and content management capabilities, and integrates Google Analytics and Tag Manager for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain registration transparency, although the site content and structured data suggest legitimate business use. Overall, the website is professional but could improve in privacy compliance and contact transparency.

B

boost.ai

boost.ai

64

boost.ai is a Norway-based enterprise specializing in AI-powered conversational platforms tailored for regulated industries such as finance, insurance, telecommunications, and the public sector. The company positions itself as a leader in delivering secure, compliant, and scalable AI customer experience solutions, emphasizing trust and control in AI implementations. Their offerings include chat automation, voice call automation, and generative AI capabilities, supported by a robust platform and integrations. Technically, the website is built on modern frameworks including HubSpot CMS and UIkit, with extensive use of marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, with fast performance and a professional design. Hosting is via Amazon AWS, and domain registration details align well with the company's Norwegian origin and business claims. From a security perspective, the site enforces HTTPS, employs clientTransferProhibited domain status, and provides comprehensive privacy and cookie policies with user consent mechanisms. However, DNSSEC is not enabled, and there is no published security.txt or explicit incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. Overall, boost.ai presents a high level of business credibility, technical maturity, and privacy compliance, making it a trustworthy and professional enterprise AI solution provider. Minor improvements in DNS security and incident response transparency could further enhance their security posture.

O

Omniconvert SRL

omniconvert.com

56

Omniconvert SRL is a Romanian-based technology company specializing in customer intelligence and conversion optimization solutions for eCommerce and retail businesses. Their platform suite includes Omniconvert Explore, Reveal, and Pulse, targeting customer acquisition, retention, and experience enhancement. The company positions itself as a leader in Customer Value Optimization (CVO), supported by certifications such as ISO 27001 and GDPR compliance, and recognized by industry awards like G2 Summer 2024. Their clientele includes prominent retailers and brands, reflecting a strong market presence. Technically, the website leverages modern frameworks like Astro, integrates with HubSpot, Google Analytics, and uses advanced JavaScript libraries for UI and tracking. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive metadata and structured data enhancing SEO and user experience. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be more visible. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain transparency, which slightly impacts trustworthiness. Privacy compliance is well addressed with clear policies and consent management. Overall, Omniconvert demonstrates a mature digital presence with strong business credibility and technical sophistication.

W

Won Won

wonwon.dk

51

Won Won is a Danish brand and design agency established in 2010, specializing in helping ambitious companies and organizations translate their business strategies into strong brand identities and effective communication. The company positions itself as a trusted partner in branding, with a focus on sustainability and market differentiation. The website reflects a professional and consistent brand image, supported by client testimonials and case studies. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and error tracking, though some security headers and explicit policies could be improved. Overall, the website is well-structured, user-friendly, and trustworthy, supporting the company's business credibility.

A

Afinitas

hawkeyepedershaab.com

52

Afinitas is a manufacturing company specializing in equipment and services for producing concrete pipe and precast products. Established in 2014, the company targets B2B customers in the infrastructure and construction sectors. The website reflects a medium-sized enterprise with a consistent brand presence and a professional digital footprint. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern SEO and marketing tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and domain transfer protections in place, although DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stability.

Bacthera AG in Liquidation is a biotech joint venture between Novonesis and Lonza with offices in Switzerland, Denmark, and Spain. The company appears to be in the process of liquidation, as indicated by the website content. The business focuses on biotechnological manufacturing services, targeting industry stakeholders and partners. The website is built on WordPress and uses Google Analytics and Tag Manager for tracking visitor data. The technical infrastructure is moderate with basic mobile optimization and SEO features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies exist but lack a consent mechanism, impacting GDPR compliance. Overall, the website provides minimal content and basic business information with moderate trust indicators.

N

Nologik

nologik.com

58

Nologik is a Danish design and engineering company specializing in innovative and patent-based development of products and production equipment. Established in 1999, it operates as a small specialized consultancy with a focus on transforming client ideas into cost-effective manufacturing solutions. The company maintains a partnership with Me-Mover, indicating a niche market position in innovative transportation solutions. The website reflects a professional business model with clear service offerings including idea generation, design, prototyping, and production management. Technically, the website uses standard web technologies including Google Analytics and Tag Manager, hosted on One.com with a CMS provided by the same. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and no published security or incident response policies. Privacy compliance is basic with presence of privacy and cookie policies but no explicit GDPR compliance statements. Overall, the website is functional and professional but could improve in security and privacy transparency to enhance trust and compliance.

B

Bygherreforeningen

bygherreforeningen.dk

62

Bygherreforeningen is a Danish organization established in 2000 that provides a professional forum for builders, users, and societal stakeholders to share experiences and strengthen competencies. The website positions itself as a knowledge-sharing platform with a focus on value creation for builders and society. Technically, the site is built on WordPress using the Enfold theme and WooCommerce, integrating multiple analytics tools including Google Analytics, Matomo, and Piwik Pro, with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enabled and no visible critical vulnerabilities, though security headers and explicit security policies are absent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting its credibility and trustworthiness in its sector.

D

Dagens Medicin

dagensmedicin.dk

63

Dagens Medicin is a well-established Danish news media company specializing in the healthcare sector, targeting medical professionals and decision-makers. Founded in 1997, it holds a leading market position in health sector news in Denmark, offering subscription-based access to news, background stories, conferences, and job listings. The website is built on a mature WordPress infrastructure with e-commerce and event management capabilities, reflecting a moderate to good level of digital maturity. The technical stack includes modern analytics and marketing tools, supported by Cloudflare for hosting and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. Overall, the website demonstrates a high level of professionalism, GDPR compliance, and trustworthiness, with room for improvement in publishing security and incident response information.

I

Intellishore

intellishore.dk

52

Intellishore is a Danish technology consultancy specializing in leveraging data to drive insightful business decisions and foster a strong data-driven culture. Founded in 2019, the company offers services including data platform management, decision-making tools, AI operationalization, and embedding data culture within organizations. Their market position is that of a specialized boutique consultancy focused on actionable insights and culture change. The website reflects a professional and modern digital presence built on WordPress, enhanced with SEO and analytics tools such as Yoast SEO, Google Analytics, and Facebook Pixel. The technical infrastructure is solid with HTTPS enforced and multiple marketing and tracking integrations, indicating a mature digital marketing strategy. Security posture is good with no visible vulnerabilities or exposed sensitive data; however, formal security policies and incident response contacts are absent. Privacy compliance is strong, with comprehensive privacy and cookie policies and active consent management. Overall, the website is trustworthy, well-branded, and professionally maintained, supporting the company's credibility in the technology consulting sector.

C

CDI Global

cdiglobal.com

50

CDI Global is an established international middle-market advisory firm specializing in strategic mergers and acquisitions, cross-border transactions, divestitures, and capital raising. Founded in 1973, the company operates from over 46 offices in more than 30 countries, serving a diverse range of industries including aerospace, automotive, chemicals, energy, financial services, healthcare, and technology. Their business model focuses on providing expert advisory services to middle-market companies seeking growth and transactional success globally. Technically, the website demonstrates a mature digital infrastructure using modern technologies such as Laravel Livewire, Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is well-optimized for SEO, mobile responsive, and provides a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements cookie consent mechanisms aligned with GDPR. However, there is a lack of explicit security policies or incident response contacts, and some common security headers are not visibly present. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trustworthiness but does not negate the professional appearance and operational maturity of the business. Overall, CDI Global presents a strong business and digital presence with minor areas for improvement in transparency and security policy disclosures. The risk profile is moderate with recommendations to enhance security headers and publish incident response information to further build trust.

Dines Jørgensen & Co. A/S is a Danish consulting engineering firm specializing in innovative solutions within construction, civil engineering, and water supply. Established in 1999, the company appears to have a solid market presence in Denmark, targeting clients in the construction and infrastructure sectors. The website reflects a professional business model focused on engineering consultancy services. Technically, the site is built on WordPress with a modern theme and integrates key marketing and analytics tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and Cookiebot for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but lacks DNSSEC and some security headers, which are recommended for enhanced protection. No explicit privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is professional and trustworthy but could improve transparency and security posture.

Keyselector® is a Danish recruitment consultancy specializing in professional recruitment services for board members, directors, leaders, and specialists across Denmark and nearby regions. Established in 2011, the company positions itself as a business-oriented recruitment partner delivering quality and speed. The website reflects a mature digital presence built on WordPress with standard plugins and tracking tools such as Google Analytics and Adform. The site is well-designed, mobile responsive, and provides clear navigation and contact information. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy of the business with consistent registration details and no privacy protection masking.

R

ReklameTryk

reklametryk-webshop.dk

57

ReklameTryk is a Danish e-commerce business specializing in printing and advertising materials such as beach flags, banners, car foil, brochures, and packaging products. The website serves primarily business customers seeking customized print solutions. The company has an established online presence since 2014, with a domain registration consistent with its business age and activity. The technical infrastructure is based on ASP.NET WebForms with Telerik UI components, supported by common analytics tools like Google Analytics and Google Tag Manager. The website demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture shows some basic protections such as session timeout and login forms; however, no DNSSEC or security headers are implemented, and SSL configuration details are not provided. Privacy compliance is weak, with no visible privacy or cookie policies. Overall, the website is functional but would benefit from enhanced security and privacy measures to improve trust and compliance.

HugeDomains.com operates as a reputable domain marketplace specializing in the sale of premium domain names such as ArcticLeasing.com. The website offers flexible purchasing options including outright buy and payment plans with zero percent interest, targeting individuals and businesses seeking valuable web addresses. The platform emphasizes secure and trustworthy transactions, supported by SSL encryption, customer testimonials, and a 30-day money back guarantee. The business has been established since 2005, positioning itself as a trusted player in the domain resale market. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. Cookie consent mechanisms and comprehensive privacy policies indicate compliance with GDPR and other privacy regulations. Security posture is strong with HTTPS enforced and secure forms, though some security headers could be improved. WHOIS data for the domain ArcticLeasing.com is unavailable, likely due to privacy protection or the domain being for sale, which is consistent with the marketplace business model. Overall, the site presents a professional, secure, and credible platform for domain acquisition.

G

Groupe GUILLIN

guillin-emballages.com

53

Groupe GUILLIN is a leading European manufacturer specializing in food packaging solutions including plastic, paper, and carton materials. The company positions itself as a key player in the European market, targeting businesses requiring high-quality food packaging. The website reflects a professional digital presence built on WordPress with modern themes and plugins, supporting multilingual content and optimized for performance and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security headers are lacking. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy. Overall, the site demonstrates a mature business with room for improvement in transparency and security best practices.

Geo is a Danish consulting engineering company specializing in geotechnical and subsurface expertise, primarily serving clients in the energy sector and infrastructure projects. The company offers a range of services including offshore and onshore geotechnical consulting, environmental advisory, groundwater technology, and geodata modeling. The website presents a professional image with clear contact information and a focus on their specialized expertise. Technically, the website uses AngularJS 1.2.29, Google Analytics, and Google Maps API, indicating a moderately modern but somewhat dated technology stack. The site is accessible, with a cookie consent mechanism in place, but lacks some modern security headers and explicit privacy and terms of service pages. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of security headers and incident response contacts suggests room for improvement. The lack of WHOIS data limits domain trust analysis, but the website content and contact details support legitimacy. Overall, the website scores well in business credibility and content quality but should enhance privacy compliance and security best practices to strengthen trust and compliance posture.

S

Spitze & Co.

spitzeco.dk

59

Responza Knowledge, operated by Spitze & Co., is a leading Scandinavian knowledge management platform designed to centralize and optimize organizational knowledge workflows, customer service, and case processing. The company targets enterprises and public sector organizations, offering tailored SaaS solutions with consulting and implementation support. The website demonstrates a strong market position with over 200,000 users and notable client references. Technically, the site is built on Webflow CMS, leveraging modern JavaScript libraries, Google Analytics, and Cookiebot for privacy compliance. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie and privacy policy and consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, though WHOIS data is privacy protected, limiting domain registration transparency.

R

REInvest Robotics

reinvestrobotics.com

56

REInvest Robotics is a specialized consultancy and investment company focused on robotics, founded by pioneers in collaborative robotics. The company targets commercial and federal sectors, aiming to accelerate the positive impact of robotics aligned with UN Sustainable Development Goals. Their website is professionally designed, content-rich, and well-structured, reflecting a credible business presence. Technically, the site is built on WordPress with integration of Google Analytics and Tag Manager, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and anonymized analytics, but lacks published security policies and cookie consent mechanisms, which are recommended for compliance and trust. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy and trustworthiness. Overall, the website presents a good business and technical profile but would benefit from enhanced transparency and compliance documentation.

SP Medical A/S is a Danish company specializing in the development and manufacturing of plastic and surface solutions for the global pharmaceutical and medical device industries. Established in 2004, the company offers products such as medical devices, guidewires, and coatings, positioning itself as a trusted player in the healthcare manufacturing sector. The website reflects a professional and consistent brand presence with clear business and contact information, supported by ISO and CE certifications that enhance trustworthiness. Technically, the website employs common web technologies including jQuery and Google Analytics for tracking, with a moderate performance and good mobile optimization. However, there is room for improvement in security practices, notably the absence of security headers and DNSSEC, which could enhance the site's resilience against common web threats. The cookie consent banner indicates some level of privacy compliance, though the lack of a dedicated privacy policy page and incident response information suggests gaps in full GDPR adherence. From a security perspective, the site is accessible without WAF or blocking mechanisms, and no critical vulnerabilities or exposed sensitive data were detected. The domain's WHOIS data is consistent with the business claims, showing a long-standing registration without privacy protection, which supports legitimacy. Overall, the security posture is moderate but could be strengthened by implementing recommended best practices. The overall risk assessment is moderate with a score of 75 out of 100, reflecting a solid business presence with some technical and compliance areas to address. Strategic recommendations include adding a comprehensive privacy policy, enhancing security headers, enabling DNSSEC, and publishing incident response and vulnerability disclosure information to improve trust and compliance.