Security Directory

O

OKNOSTYL group s.r.o. Tišnovská 305, 664 34 Kuřim

oknostyl.cz

47

OKNOSTYL group s.r.o. is a Czech Republic based company specializing in manufacturing and installation of high-quality windows, doors, and portals. With over 25 years of market experience and more than 55,000 completed orders, the company holds a strong position in the regional construction and home improvement sector. Their business model includes direct sales, installation services, and an e-commerce platform for accessories and products. The website is professionally designed, mobile-optimized, and provides comprehensive product and service information, including free price calculations and customer testimonials. Technically, the website uses modern web technologies such as jQuery, Google Tag Manager, and CookieConsent scripts. It is served over HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, some security headers are not explicitly detected and could be improved. The site does not show signs of WAF or content blocking, allowing full content access and analysis. Security posture is solid with encrypted connections and secure login forms, but lacks publicly visible security policies or incident response contacts. The absence of WHOIS data is a notable anomaly, reducing domain trust slightly, but the overall business presence and content quality strongly indicate legitimacy. Privacy and cookie policies are present and comprehensive, supporting compliance with data protection regulations. Overall, the website and business demonstrate a mature digital presence with good security and privacy practices, though improvements in security headers and transparency on security policies would enhance trust further.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.cz

42

Ahifi.cz is a Czech-based e-commerce business specializing in car audio equipment and accessories, including autoradios, speakers, amplifiers, subwoofers, and soundproofing materials. The company operates a multilingual website targeting Central European markets and offers additional services such as installation and wholesale distribution. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product information. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data reduces domain trustworthiness, warranting further verification. Overall, Ahifi.cz presents as a credible and professional business with a good balance of content quality, technical implementation, and security awareness.

H

Hobbytec

hobbytec.cz

49

Hobbytec CZ s.r.o. is a leading Czech manufacturer specializing in high-quality aluminum winter gardens, pergolas, car shelters, and solar photovoltaic solutions. The company emphasizes custom, made-to-measure outdoor constructions supported by a professional team and a strong showroom presence in the Czech Republic and Slovakia. Their business model integrates manufacturing, direct sales, and installation services, targeting residential and commercial customers seeking durable and elegant outdoor solutions. The website reflects a mature digital presence with multilingual support and comprehensive product offerings. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO practices and a clear navigation structure. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though some security headers could be improved. Privacy compliance is robust, featuring detailed cookie consent mechanisms and GDPR-aligned privacy policies. Security-wise, the site shows good practices but lacks explicit incident response contacts or published security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the business's transparent contact information and professional content support legitimacy. Overall, the site is secure, compliant, and professionally maintained. Strategically, Hobbytec should enhance security headers, publish a security policy, and consider a security.txt file to improve transparency and incident handling. Continued updates to third-party libraries and accessibility improvements will further strengthen their digital maturity and trustworthiness.

D

Dekolamp s.r.o.

dekolamp.cz

51

Dekolamp s.r.o. operates a professional e-commerce website specializing in decorative lighting products for both interior and exterior use. The company positions itself as a direct importer and retailer of renowned lighting brands, offering a wide range of products including chandeliers, LED lighting, outdoor lights, and smart lighting solutions. The website targets consumers and businesses in the Czech Republic and surrounding regions, providing a comprehensive catalog with detailed product information and customer support features. The business model is retail-focused with an emphasis on quality and variety.

E

Eastman

treva.com

71

Eastman is a global specialty materials company with a history of over 100 years of innovation. The website presents a professional corporate presence with detailed navigation about the company, leadership, products, and supplier information. The technical infrastructure is modern, leveraging Adobe Experience Manager as the CMS, integrated with multiple analytics and marketing tools such as Google Analytics, Marketo, and Microsoft Clarity. The site is mobile optimized and SEO friendly, with a cookie consent mechanism implemented via OneTrust, indicating good privacy compliance practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and incident response policies are not evident in the provided data. WHOIS data is unavailable or protected, which is unusual for a large enterprise but the website content and branding strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy norms, suitable for an enterprise manufacturing business.

N

National Information Standards Organization (NISO)

niso.org

62

The National Information Standards Organization (NISO) is a well-established non-profit organization founded in 1995, focused on developing and promoting standards related to information distribution and management. The organization targets information professionals, libraries, publishers, and standards developers, providing educational content, events, and standards development services. The website reflects a professional and consistent brand presence with a clear focus on its mission and community engagement. Technically, the site is built on Drupal 10, hosted likely on AWS infrastructure, and uses modern web technologies including Google Analytics and Tag Manager for user tracking with privacy considerations such as IP anonymization. The site is mobile-optimized and accessible, with good SEO practices.

F

FIREANT STUDIO

fireantstudio.com

53

FIREANT STUDIO is a well-established full-service brand and digital marketing agency specializing in accessible WordPress website design and development. Founded in 2003 and based in Denver, CO, the company serves a diverse clientele including businesses, higher education institutions, non-profits, and government entities. Their comprehensive service offerings include digital marketing solutions, branding, UI/UX design, custom WordPress and Drupal development, and ongoing marketing support. The website reflects a professional and consistent brand image with strong client trust signals and detailed case studies showcasing their expertise. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium and Google Tag Manager. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be managed via GoDaddy, with standard domain security locks in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement in security hardening. From a security and compliance perspective, the site uses HTTPS with a valid SSL configuration, but lacks visible privacy and cookie policies or consent mechanisms, which impacts GDPR compliance. No incident response or security policy information is published. The WHOIS data shows a consistent and legitimate domain registration dating back to 2003, reinforcing business credibility. Overall, FIREANT STUDIO's website demonstrates strong business credibility and technical maturity but should enhance privacy compliance and security transparency to improve trust and regulatory adherence.

I

InCommon

incommon.org

49

InCommon is a well-established organization founded in 2000, providing integrated identity and access management (IAM) services primarily for the education and research sectors. Their offerings include single sign-on, cloud access, federation services, eduroam wireless access, certificate services, and trusted access software solutions. The website reflects a strong community-driven approach, targeting students, faculty, staff, and researchers globally. The organization maintains a reputable market position as a leader in IAM for research and education communities. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and Cloudflare DNS/CDN services. The site is well-optimized for SEO, mobile-friendly, and accessible, with excellent design quality and user experience. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and employs Google reCAPTCHA v3 for form protection. DNSSEC is not enabled, and no explicit security headers were detected, which are areas for enhancement. The WHOIS data shows privacy protection typical for this sector, with a domain age consistent with the organization's history, supporting legitimacy. Overall, InCommon demonstrates a strong digital presence with professional content and solid security posture, though improvements in privacy compliance and DNS security would further strengthen their risk profile and trustworthiness.

I

Internet2

internet2.edu

54

Internet2 is a prominent organization providing advanced networking, cloud solutions, and security services tailored for the research and education community in the United States. The website clearly targets higher education institutions, research organizations, and technology communities, offering a comprehensive suite of services including secure high-speed networks, identity and access management through InCommon, and community collaboration events. The organization positions itself as a leader in the research and education networking sector with a large membership base and extensive service offerings. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and Pardot for marketing automation. The site demonstrates good SEO practices, mobile optimization, and accessibility features, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended for enhanced security posture. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a gap in GDPR compliance. Overall, Internet2's website reflects a mature, professional, and trustworthy organization with strong business credibility and technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance posture.

S

SGS-TÜV Saar GmbH

sgs-tuev-saar.com

54

SGS-TÜV Saar GmbH is a reputable joint venture between SGS Group Germany and TÜV Saarland e.V., providing a broad range of technical services including inspections, certifications, testing, and training primarily focused on safety, innovation, and compliance. The company holds multiple internationally recognized certifications and accreditations, positioning itself as a trusted partner in sectors such as automotive, energy, transport, and environmental technology. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies, offering a professional user experience with clear navigation and comprehensive content. Security posture is solid with HTTPS and domain transfer protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site demonstrates high business credibility and trustworthiness.

T

TÜV Saarland Bildung + Consulting GmbH

tuev-seminare.de

56

TÜV Saarland Bildung + Consulting GmbH operates a professional website offering a wide range of technical seminars, certification courses, webinars, and consulting services primarily targeting professionals and companies in Germany. The company leverages the reputable TÜV brand to position itself as a trusted provider of education in areas such as plant technology, occupational safety, environmental protection, and quality management. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on the Shopware CMS platform, utilizing modern JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing. Cookie consent is managed through CookieFirst, indicating attention to privacy compliance. Hosting is managed via EuroDNS nameservers, consistent with a professional hosting environment. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs consent-based analytics tracking. However, no explicit security headers or published security policies were detected, and there is no visible vulnerability disclosure or incident response information. The absence of direct contact emails or phone numbers in the provided content limits immediate user support channels. Overall, the security posture is solid but could be enhanced with additional transparency and technical controls. The website content is safe for general audiences, focusing on educational and professional services without any adult or questionable content. The domain WHOIS data aligns with the business profile, showing consistency and legitimacy. Strategic recommendations include publishing privacy and security policies, implementing security headers, and providing clear contact information to improve trust and compliance.

S

Sportclinic

sportclinic.sk

38

Sportclinic is a specialized private orthopedic clinic based in Bratislava, Slovakia, offering advanced sports medicine and orthopedic surgical services including arthroscopic procedures and one-day surgeries. The clinic targets both professional athletes and the general population recovering from musculoskeletal injuries, leveraging modern diagnostic technologies such as MRI and CT scans. It operates as part of the Nemocnica Medissimo hospital group, enhancing its market position and service capabilities. Technically, the website employs modern web technologies including Bootstrap 5, Google Tag Manager, and Facebook SDK, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, though improvements in privacy documentation and security transparency are recommended.

E

Edinburgh Napier University

napier.ac.uk

67

Edinburgh Napier University is a leading modern university in Scotland, recognized for its high student satisfaction and impactful research. The institution offers a wide range of undergraduate and postgraduate courses to a diverse international student body, supported by comprehensive academic and student services. The website reflects a professional and well-branded digital presence, emphasizing accessibility, user experience, and clear navigation. Technically, the site employs established JavaScript libraries, Google Tag Manager for analytics, and TrustArc for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though improvements in security headers and incident response disclosures could enhance protection. Overall, the domain and website present a trustworthy and credible educational entity with strong compliance to privacy regulations. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of institution.

H

HOGENT

hogent.be

67

HOGENT is a well-established higher education institution based in Belgium, with a domain age dating back to 1995, reflecting its long-standing presence in the education sector. The website serves to inspire and stimulate individuals to make a difference in society, targeting students, educators, and the broader community. It offers educational services, research, and community engagement, positioning itself as a key regional player in higher education. Technically, the website employs a modern technology stack including Mura CMS, jQuery, Bootstrap, and various third-party libraries for UI and analytics. It integrates Google Tag Manager, Google Analytics, and Cookiebot for consent management, demonstrating a reasonable level of digital maturity. The site is mobile-optimized and shows good SEO and accessibility practices, although accessibility could be further improved. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, and a comprehensive cookie consent mechanism. However, explicit privacy policies, terms of service, and incident response information are not clearly found, indicating areas for compliance enhancement. No critical vulnerabilities or suspicious activities were detected, and the WHOIS data aligns well with the institution's profile, reinforcing legitimacy. Overall, the website is professional, secure, and trustworthy, with moderate to good privacy compliance. Strategic recommendations include publishing detailed privacy and security policies, implementing incident response disclosures, and enhancing accessibility and security transparency to further strengthen trust and compliance.

P

Politécnico de Lisboa

ipl.pt

56

Politécnico de Lisboa is a reputable public higher education institution in Portugal, offering a wide range of academic programs including undergraduate, graduate, and doctoral studies, as well as research and innovation services. The website reflects a well-structured academic portal targeting students, researchers, and the international academic community. Technically, the site is built on Drupal 10, leveraging modern web technologies and standard analytics tools such as Google Analytics and Facebook Pixel. The site demonstrates good mobile optimization and accessibility features, though some improvements could be made in accessibility and security headers. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns with the institution's identity, confirming legitimacy and trustworthiness.

B

Bidding Fox technologies, s.r.o.

pricing-fox.cz

66

Pricing Fox, operated by Bidding Fox technologies, s.r.o., is a specialized SaaS provider focused on automatic pricing optimization for e-commerce businesses primarily in the Czech Republic and Slovakia. The platform integrates with major price comparison services and e-shop systems to dynamically adjust product prices, monitor competitors, and protect profit margins. The website reflects a mature digital presence with professional design, comprehensive content, and strong customer testimonials, positioning Pricing Fox as a trusted player in the e-commerce pricing automation niche. Technically, the website is built on Drupal 11 and leverages modern analytics and marketing tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, Plausible Analytics, and CookieHub for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and error monitoring via Sentry, but lack explicit security headers and published security policies. From a security and compliance perspective, the site implements cookie consent with granular controls and GDPR-related mechanisms but lacks a visible privacy policy and terms of service pages. No incident response or vulnerability disclosure information is published. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the security posture is good but could be improved with additional transparency and security headers. The overall risk is low with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing privacy and security policies, implementing security headers, and enhancing incident response transparency to further strengthen trust and compliance.

B

Bidding Fox technologies, s.r.o.

bidding-audit.cz

65

Bidding Audit is a Czech-based technology company specializing in providing free bidding audit services to e-commerce businesses using price comparison platforms such as Heureka and Zboží. The company operates under Bidding Fox technologies, s.r.o., a small-sized entity founded in 2021 and part of the Profitak group. Their key offerings include detailed bidding audit reports and automated bidding tools aimed at improving product offer competitiveness and advertising efficiency. The website is professionally designed with good content relevance and clear navigation, targeting Czech and Slovak markets. Technically, the site uses modern React-based SPA architecture with integrated analytics and cookie consent mechanisms, ensuring GDPR compliance. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies or incident response disclosures.

O

Orthobullets

orthobullets.com

66

Orthobullets is a well-established online educational platform focused on orthopaedic surgery and related medical education. It serves a large community of over 200,000 physicians and medical students, offering a wide range of educational content including topics, cases, evidence, videos, podcasts, flashcards, and study plans. The platform supports free CME and fosters collaboration among professionals. Technically, the website uses ASP.NET WebForms with modern frontend libraries such as jQuery and Google Tag Manager for analytics. The site is mobile-optimized and well-structured, providing an excellent user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and secure form handling, but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. The absence of WHOIS data is a notable anomaly, though the website's content and professional presence strongly suggest legitimacy. Overall, Orthobullets is a credible and valuable resource in the healthcare education sector, but should enhance privacy and security transparency to align with best practices.

R

Rload

rload.es

43

Rload is a small digital creative agency based in Madrid, Spain, specializing in web design, ecommerce stores, app development, and user experience (UX) design. The company targets businesses and individuals seeking professional digital creative services locally. The website presents a professional image with good content quality and consistent branding, supported by structured data confirming business contact details and operating hours. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for visitor tracking. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate but lacks visible security headers and explicit policies. WHOIS data is inaccessible due to Red.es restrictions, limiting domain trust assessment. No privacy or cookie policies were found, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

G

GEL Studios Ltd

gelstudios.co.uk

54

GEL Studios Ltd is a purpose-led, B Corp certified creative agency based in Swindon, Wiltshire, founded in 2013. The company specializes in marketing, branding, graphic design, and website design services, targeting businesses seeking impactful creative solutions to drive ROI. Their market position is strengthened by multiple certifications including Cyber Essentials and Living Wage Employer, reflecting a commitment to quality and ethical business practices. The website presents a professional and consistent brand image with clear navigation and comprehensive content that effectively communicates their value proposition. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Hotjar, and LinkedIn Insight Tag, alongside cookie consent management via Tarteaucitron, indicating a mature digital infrastructure. The site is mobile-optimized with good accessibility and SEO practices, although there is room for improvement in security headers implementation. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site demonstrates good practices with HTTPS enforcement and secure form handling, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data could not be retrieved due to querying the 'www' subdomain instead of the base domain, but the website's trust indicators and certifications support its legitimacy. Overall, GEL Studios presents a low-risk profile with strong business credibility and a well-implemented digital presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

A

Absorb LMS

absorblms.com

82

Absorb LMS is a leading AI-powered learning management system platform designed to serve global enterprises with innovative and reliable training solutions. The company positions itself as a market leader with a strong focus on customer success, offering a comprehensive suite of LMS features including course authoring, analytics, personalized upskilling, and seamless integrations. The website reflects a mature digital presence with excellent design, clear navigation, and extensive resources such as case studies and whitepapers. Technically, the site employs modern web technologies, including Google Tag Manager, Hotjar, and personalization tools, hosted likely behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS registration data is a notable gap, reducing transparency and slightly impacting trustworthiness. Overall, the site demonstrates a high level of professionalism and technical maturity suitable for enterprise clients.

D

Dash-Board Portable Workshop

dashboardpws.com

69

Dash-Board Portable Workshop operates a professional e-commerce website specializing in portable workbenches designed for strength, durability, and ease of use. The company targets both DIY enthusiasts and professionals who require a versatile and lightweight workstation solution. Their market position is that of a niche leader in manufacturing portable workbenches, supported by positive customer reviews and active social media presence. The business model focuses on direct-to-consumer sales through their website. Technically, the website is built on the Webflow platform and integrates modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Cookiebot for consent management, and Monto.io for marketing. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. Performance is moderate, with a clean and professional design. From a security perspective, the site enforces HTTPS and implements key security headers, indicating a solid security posture. No vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy policy and terms of service pages, as well as missing incident response contacts, suggests room for improvement in compliance and transparency. Overall, the website presents a trustworthy and professional front, but the lack of WHOIS registration data for the domain raises concerns about domain legitimacy. This discrepancy should be investigated further to ensure full trustworthiness. Strategic recommendations include adding comprehensive privacy and terms pages, improving accessibility, and establishing clear incident response contacts.

B

Berklee

berklee.edu

67

Berklee is a premier educational institution specializing in music and performing arts, with campuses in Boston, New York City, Valencia, Spain, and an online presence. The website reflects a professional and well-branded digital platform targeting prospective and current students interested in music education. The institution holds a strong market position as a leader in its field, offering degree programs and online courses. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Fonts, Video.js, and Font Awesome, with tracking integrations such as Google Tag Manager and Facebook Pixel. The site demonstrates good mobile optimization and SEO practices, although accessibility features appear basic. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. Privacy compliance is limited with no explicit privacy or terms of service pages found, though a cookie consent mechanism is present. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

U

University of California Press

ucpress.edu

63

University of California Press is a well-established academic publisher affiliated with the University of California. The website serves as a platform for promoting scholarly books, journals, and publishing services targeting academics, researchers, students, librarians, and authors. The site demonstrates a strong market position within the academic publishing sector, offering a wide range of disciplines and resources. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Google Analytics and Tag Manager for tracking. The design is professional, mobile-optimized, and accessible, providing a positive user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though privacy compliance could be improved by adding cookie consent mechanisms and explicit terms of service. Overall, the website is trustworthy and credible, reflecting the reputation of its parent institution.

Tifon.hr is the official website of Tifon, a Croatian fuel retail company and member of the MOL Group, a leading integrated gas and oil group in Central Europe. The company offers high-quality fuels, business and prepaid fuel cards, convenience store services under the Fresh Corner brand, and other related services. The website targets both business customers and individual consumers in Croatia, providing detailed information about products, services, and corporate information. The site is professionally designed, mobile-optimized, and includes modern web technologies such as jQuery, Bootstrap, and Google Analytics for tracking and performance. From a technical perspective, the website uses Joomla CMS and integrates multiple JavaScript libraries and Google services for analytics and tag management. The site is served over HTTPS with a valid SSL configuration, ensuring secure communication. Accessibility features and cookie consent mechanisms are implemented, reflecting compliance with GDPR and user privacy standards. However, explicit security headers and a dedicated security policy page are not found, which could be improved to enhance security posture. Security-wise, the site demonstrates good practices such as HTTPS enforcement and cookie consent with detailed categories including necessary, functional, and targeting cookies. Google reCAPTCHA is used to protect forms from abuse. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is longstanding and consistent with the business claims, registered under a Croatian registrar appropriate for the domain. Overall, Tifon.hr presents a trustworthy and professional online presence for a regional energy company. The site is secure, privacy-conscious, and well-structured, though it could benefit from enhanced security documentation and incident response transparency. The business is well-positioned in the Croatian energy market as part of the MOL Group, with clear branding and service offerings.

M

Marketingová agentúra UNIQINO

stavmag.sk

57

Stavmag.sk is a Slovak online magazine focused on construction, sustainability, and DIY projects. Founded in 2023 and operated by Marketingová agentúra UNIQINO, it serves a niche audience interested in the latest trends and news in the building sector. The website uses WordPress CMS with a modern tech stack including SEO and GDPR compliance plugins, ensuring a professional digital presence. The content is well-structured and relevant, targeting Slovak-speaking users with interests in construction and energy-efficient solutions. Technically, the site is hosted on a reputable provider with DNSSEC and HTTPS enabled, reflecting good security practices. However, explicit contact information and detailed security policies are not publicly available, which could be improved to enhance trust and compliance. Overall, the site demonstrates a solid foundation with room for enhancements in security transparency and business contact accessibility.

C

CondorNet, s.r.o.

condornet.sk

46

CondorNet, s.r.o. is a Slovak telecommunications company specializing in high-speed optical and radio internet connections and television services primarily serving the Prešov region. The company positions itself as a reliable and longstanding local ISP with a focus on both residential and business customers. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, with a responsive design and good SEO practices. Security-wise, the site uses HTTPS and implements cookie consent with IP anonymization for analytics, but lacks explicit security policies or incident response information. Overall, the site is trustworthy and compliant with GDPR, though improvements in security transparency and headers could enhance their posture.

E

EMAP Publishing Limited

ajbuildingslibrary.co.uk

64

The AJ Buildings Library, operated by EMAP Publishing Limited, is a specialized digital platform offering a comprehensive database of architectural projects, architects, and related content. It targets architects, researchers, and industry professionals with a subscription-based model complemented by free-to-view projects. The website is well-branded and professionally designed, reflecting its established position in the architectural media sector in the UK. Technically, the site employs a mix of legacy and modern web technologies including jQuery, Foundation CSS, and OpenSeadragon for image viewing, supported by multiple analytics and advertising tools. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and some outdated libraries. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the site is functional, content-rich, and credible, though improvements in security headers and technology updates are recommended.

D

Dezeen Jobs

dezeenjobs.com

69

Dezeen Jobs operates as a specialized online job board focusing on architecture, interiors, and design recruitment. It holds a strong market position as a vibrant and popular platform within its niche, offering job listings, company profiles, career guides, and newsletters to professionals and recruiters in the design and architecture sectors. The website demonstrates a mature digital presence with integrations of modern technologies such as WordPress CMS, WooCommerce for e-commerce capabilities, Algolia for search, and analytics tools including Google Analytics, Hotjar, and New Relic Browser for performance monitoring and user behavior insights. Security measures include HTTPS enforcement and use of Google reCAPTCHA, although explicit security headers are not confirmed. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and operational maturity suggest a legitimate business. Strategic recommendations include enhancing security header implementation and verifying domain registration details to improve trustworthiness.

M

MDR One

mdr-one.com

62

MDR One is a specialized legal services provider offering centralized global employment and privacy law support primarily targeting in-house counsel, HR teams, and risk and compliance teams within multinational corporations. The company emphasizes a single point of contact and a trusted partner model, supported by a bespoke self-service portal to deliver consistent legal advice worldwide. The website reflects a professional and modern digital presence built on WordPress with integration of advanced tools such as Google Tag Manager and reCAPTCHA Enterprise to secure user interactions. Security posture is solid with HTTPS and anti-bot protections, though there is room for improvement in publishing comprehensive privacy and cookie policies and enhancing security headers. The domain registration is consistent with the business profile, showing legitimacy and transparency. Overall, MDR One presents a credible and professional front with a focus on legal and compliance services in the global employment and privacy law sector.

M

MDR Mayfair

mdrmayfair.com

52

MDR Mayfair is a specialized family office consultancy affiliated with Mishcon de Reya LLP, offering bespoke services in family governance, wealth ownership structures, and full family office management. The company targets high net worth individuals and families, focusing on safeguarding legacies and simplifying complex family affairs. The website reflects a professional and consistent brand image with clear service offerings and team profiles. Technically, the site is built on WordPress with modern tools like WPBakery and LiteSpeed Cache, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protection, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is addressed with a GDPR cookie consent mechanism and a basic cookie/privacy policy. Overall, the site demonstrates a mature digital presence suitable for its niche market, with room for improvement in security transparency and technical hardening.

MDRi is a strategic business insights company specializing in market research, consumer behavior analysis, and data-driven strategies to help businesses grow in high-value sectors such as energy, transport, luxury, financial services, and real estate. The company operates globally with offices in Hong Kong, Singapore, and London, targeting private sector clients in Asia. Their service offerings include thought leadership, customer experience, market insights, trend forecasting, competitive analysis, market research solutions, and call centre services. The website is professionally designed using WordPress and modern web technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled, but lacks some security headers and formal security policies. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy or terms of service found. Overall, the website reflects a credible and professional business presence with room for improvement in privacy and security transparency.

Johnson & Johnson France operates as a major healthcare company focused on innovation in MedTech and Innovative Medicine sectors. The website presents a professional and comprehensive digital presence with clear corporate branding and structured content targeting healthcare professionals, partners, and the general public. The technical infrastructure leverages modern web technologies including Brightspot CMS, Google Tag Manager, and OneTrust for privacy compliance, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable which slightly impacts domain trust assessment.

T

The Joint Commission

jointcommission.org

68

The Joint Commission is a leading non-profit organization dedicated to healthcare accreditation, certification, and quality improvement. It serves a broad audience including healthcare providers, professionals, and consumers, with a strong market position supported by over 22,000 accredited organizations globally. The website reflects a mature digital presence with comprehensive resources, professional design, and clear navigation. Technically, the site uses modern technologies such as Sitecore CMS, Coveo search, Google Tag Manager, and Microsoft Application Insights, ensuring good performance and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although incident response contact details and vulnerability disclosure policies could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy, professional, and aligned with the organization's mission to improve patient safety and healthcare quality.

P

P3C Media

hcpdconference.com

70

The 2026 Healthcare Project Delivery Conference website is a professionally designed platform focused on delivering information about an upcoming healthcare infrastructure event organized by P3C Media, a division likely under Access Intelligence LLC. The site targets healthcare facility managers, administrators, and industry professionals, offering detailed event information, registration options, and networking opportunities. Technically, the site is built on WordPress with integrations for event registration (Swoogo), consent management (Osano), and analytics (Google Analytics, New Relic). Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a concern but does not detract significantly from the site's legitimacy given the professional content and external references. Overall, the site presents a trustworthy and functional digital presence for the conference.

P

P3C Media

thep3conference.com

68

Thep3conference.com is a professionally maintained website representing the 2026 P3 Conference organized by P3C Media, a division of Access Intelligence LLC. The conference focuses on public-private partnerships in infrastructure, targeting public officials and private industry professionals. The site offers detailed event information, sponsorship opportunities, and registration links, positioning itself as a leading industry event in the transportation and government sectors. Technically, the website is built on WordPress with modern analytics and consent management tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a notable concern, suggesting either a lookup failure or domain privacy issues, which slightly impacts trustworthiness. Overall, the site is credible, content-rich, and well-positioned in its niche, but domain registration verification is recommended.

E

Ecología Política

ecologiapolitica.info

45

Ecología Política is a Spanish-language academic journal specializing in international environmental political debates, publishing semestrally. The website presents a professional and consistent brand image with good content quality and SEO optimization, targeting readers interested in environmental conflicts and political discourse. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Google Analytics and Tag Manager for tracking. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data due to privacy protection limits domain trust assessment but the site content and social media presence support legitimacy. Overall, the site is functional and credible for its niche audience but would benefit from enhanced privacy compliance and security practices.

C

Cofidis S.A.

pagodil.it

54

PagoDIL by Cofidis is a well-established financial service platform in Italy that enables consumers to pay for purchases in installments without additional costs or interest. The website reflects a mature digital presence with a clear focus on consumer and merchant audiences, supported by a large partner network and strong brand consistency with Cofidis S.A. The technical infrastructure leverages WordPress CMS with modern libraries and tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers are recommended. Privacy compliance is robust, with clear policies linked to the parent company's domain. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

D

Dopravní podnik města Olomouce, a.s.

dpmo.cz

48

Dopravní podnik města Olomouce, a.s. (DPMO) is a well-established public transportation company operating in Olomouc, Czech Republic, providing urban bus and tram services including electronic ticketing and vehicle rental. The company is a medium-sized entity, part of the statutory city of Olomouc's group, with a domain registered since 1999, reflecting its long-standing presence in the market. The website offers comprehensive information for passengers, including schedules, ticketing options, and service updates, targeting local commuters and residents. Technically, the site uses a modern JavaScript stack with jQuery and related plugins, Google Tag Manager, and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. Privacy compliance is strong with a detailed privacy policy and cookie banner. Overall, the site is professional, trustworthy, and aligned with the company's business model and market position.

D

Dopravní podnik Karlovy Vary, a. s.

dpkv.cz

49

Dopravní podnik Karlovy Vary, a. s. is a traditional and established public transportation operator in Karlovy Vary, Czech Republic. The company provides a wide range of services including city and regional bus lines, cable cars, and additional transport-related services such as advertising, vehicle repair, fuel sales, and towing. The website reflects a medium-sized enterprise with a clear focus on serving both residents and tourists in the region. The company maintains a professional online presence with comprehensive service information and user-friendly navigation.

D

Dopravní společnost Zlín-Otrokovice, s.r.o.

dszo.cz

46

Dopravní společnost Zlín-Otrokovice, s.r.o. operates as a regional public transportation provider in the Zlín and Otrokovice areas of the Czech Republic, offering trolleybus and bus services along with ticketing options including electronic and SMS tickets. The company maintains a professional online presence with a well-structured website built on WordPress, featuring modern plugins for enhanced user experience such as sliders and responsive design. The website is accessible, mobile-optimized, and provides relevant information for commuters and travelers in the region. From a technical perspective, the site employs standard web technologies including PHP, jQuery, and WordPress CMS with popular page builders and slider plugins. Security measures include HTTPS with good SSL configuration and security headers, although explicit security policies and incident response information are not publicly available. Privacy and cookie policies are present and include consent mechanisms, indicating a basic level of GDPR compliance. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but there is room for improvement by publishing formal security policies and vulnerability disclosure channels. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the website content and structure suggest a legitimate and established business. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture. Strategic recommendations include enhancing transparency around security policies, improving accessibility features, and maintaining up-to-date software to mitigate risks.

P

Plzeňské městské dopravní podniky, a.s.

pmdp.cz

48

Plzeňské městské dopravní podniky, a.s. (PMDP) operates as the primary public transportation provider in Plzeň, Czech Republic, offering a wide range of services including tram, trolleybus, and bus transport, ticketing solutions, vehicle rentals, and advertising services. The company has a long-standing history dating back to 1899 and maintains a strong market position as a trusted municipal transport operator. The website reflects a professional and user-friendly digital presence with clear navigation and relevant content targeted at the general public and transport users. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and niCMS, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes essential privacy and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security best practices like security headers and vulnerability disclosure mechanisms are not evident, suggesting room for improvement in security posture. From a security perspective, the site uses HTTPS and enforces cookie consent with granular controls, but lacks visible security headers and published incident response or security policies. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and business information appear legitimate and consistent. Overall, the site presents a moderate to good security posture with recommendations to enhance domain transparency and security controls. Strategically, PMDP should focus on improving domain registration transparency, implementing comprehensive security headers, and publishing formal security and incident response policies to strengthen trust and compliance. Enhancing these areas will support the company’s reputation as a reliable public transport provider and ensure continued regulatory compliance and user confidence.

M

MOL Group

molplusklub.rs

65

MOL Move is a digital loyalty platform operated under the MOL Group umbrella, targeting customers primarily in Serbia and neighboring countries. The website serves as a portal for loyalty program information, app downloads, and customer support. The business is positioned as a large energy and transportation sector player with a focus on customer engagement through digital means. The platform leverages Salesforce Experience Cloud technology, integrating multiple payment and analytics services to provide a seamless user experience. The website is professionally designed with good mobile optimization and consistent branding aligned with MOL Group standards. Security posture is solid with HTTPS and Content Security Policy in place, though DNSSEC is not enabled and privacy policies are not explicitly presented. The site does not exhibit any adult or questionable content and is fully accessible without WAF or blocking mechanisms. Overall, the website reflects a mature digital presence for a large energy company’s loyalty program, with room for improvement in privacy compliance and security hardening.

M

MOL Serbia d.o.o.

freshcorner.rs

63

Fresh Corner is a retail food and beverage brand operating primarily at Slovnaft gas stations in Serbia, offering coffee, hot dogs, sandwiches, pastries, and hot meals. The company is part of MOL Serbia d.o.o., indicating a connection to the MOL Group, a significant energy sector player. The website is professionally designed with good mobile optimization and clear navigation, targeting general consumers and travelers seeking quick food options at fuel stations. The business model focuses on convenience retail integrated with energy services, positioning Fresh Corner as a recognized local brand with a medium-sized market presence. Technically, the website employs modern web technologies including Google Maps API for location services, Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics. The site uses HTTPS with a valid SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data, indicating room for security enhancements. The site lacks a published security policy or incident response contact, which could improve trust and compliance. From a security perspective, the site demonstrates good practices such as CSRF token usage and cookie consent with detailed categories. Tracking technologies are used responsibly with user consent. No critical vulnerabilities or suspicious domains were found. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the site maintains a good security posture but could benefit from additional security headers and formal security documentation. The overall risk assessment is low, with the site presenting a trustworthy and professional front for its business operations. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security policy, and considering a vulnerability disclosure program to further enhance security and compliance posture.

M

MOL Nyrt.

molplugee.si

63

MOL Plugee operates as a regional provider of electric vehicle charging infrastructure, primarily targeting Slovenia and neighboring countries. The company offers DC and AC charging stations, supported by user account management and mobile applications, positioning itself as a key player in the emerging electric mobility sector. The website reflects a professional and consistent brand presence, supported by EU co-financing under the NEXT-E project, enhancing its market credibility. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Hosting appears to be supported by Microsoft Azure DNS infrastructure, indicating a reliable hosting environment. The site is mobile-optimized and SEO-friendly, with clear navigation and structured content. From a security perspective, the site enforces HTTPS, uses CSRF protection tokens, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, security headers are not explicitly detected and no incident response contacts or vulnerability disclosure policies are published, representing areas for improvement. No critical vulnerabilities or suspicious patterns were identified. Overall, the website demonstrates a solid security posture, good privacy compliance, and strong business credibility. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security and trust.

A

AOI d.o.o.

freshcorner.si

59

Fresh Corner is a Slovenian retail food and beverage brand operating primarily at MOL fuel stations, offering a variety of fresh products such as coffee, hot dogs, sandwiches, bakery items, and warm meals. The website reflects a well-established regional presence with a medium-sized business footprint, supported by a consistent brand identity and clear customer engagement channels including social media and customer support contacts. The domain is registered to AOI d.o.o. since 2016, aligning with the business timeline and regional operations. Technically, the website employs modern web technologies including Google Maps API for location services, Facebook Pixel and Google Analytics for marketing and analytics, and uses Azure DNS for hosting infrastructure. The site is mobile-optimized with good performance and SEO practices, though accessibility features are basic. Security measures include HTTPS enforcement, CSRF tokens, and reCAPTCHA integration, with room for improvement in security headers and formal security policies. From a security and compliance perspective, the site demonstrates good privacy compliance with comprehensive privacy and cookie policies, including a consent mechanism aligned with GDPR requirements. However, no explicit security policy or incident response contact is published, and no vulnerability disclosure mechanism is evident. The WHOIS data supports the legitimacy of the domain and business, with no suspicious patterns detected. Overall, Fresh Corner's website is professional, secure, and compliant, serving its target audience effectively. Strategic enhancements in security policy transparency and security header implementation could further strengthen its posture.

M

MOL Group

molcampus.hu

65

MOL Campus is the corporate headquarters of MOL Group, Hungary's leading energy company. The website showcases the building as a symbol of sustainability and innovation, offering visitor experiences such as the SkyDeck and various employee services. The site is well-designed, mobile-optimized, and uses modern web technologies including Next.js and React. It integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel with appropriate cookie consent mechanisms. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website reflects a mature digital presence aligned with MOL Group's corporate identity and sustainability commitments.

M

MOL Limo

mollimo.hu

72

MOL Limo is a Hungarian car sharing and rental service operating since at least 2017, offering app-based vehicle booking and usage primarily in Budapest and surrounding areas. The website presents a professional and well-structured platform with detailed pricing, fleet information, and user guides. Technically, the site uses modern JavaScript libraries and integrates multiple analytics and marketing tools, including Google Tag Manager, Segment, Facebook Pixel, and LinkedIn Insight Tag, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and incident response information are missing. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. Overall, the site is trustworthy and well-positioned in the Hungarian transportation and energy sectors, with room for improvement in explicit security disclosures and contact transparency.

M

MOL Nyrt.

molplugee.hu

67

MOL Plugee is a Hungarian electric vehicle charging service operated by MOL Nyrt., a major energy company. The website offers comprehensive information about their diversified portfolio of fast DC and AC chargers primarily located in Budapest, targeting both individual EV owners and corporate clients. The platform supports user registration and account management through a dedicated subdomain, enhancing customer engagement and service delivery. The site is well-branded, consistent with MOL's corporate identity, and supported by EU co-financing, indicating strong market positioning and credibility. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA to secure forms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

F

Fresh Corner

freshcorner.hu

65

Fresh Corner is a Hungarian retail and hospitality brand operating primarily at MOL fuel stations, offering fresh coffee, hot-dogs, sandwiches, bakery items, and hot meals. The website reflects a well-established business with a clear market position serving general consumers and travelers in Hungary. The digital presence is supported by modern tracking and advertising technologies, including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature marketing strategy. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with CSRF protections, though it lacks explicit security policy documentation. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. Contact information is transparent and professional, enhancing business credibility.