Security Directory

M

Machteam Soft

machteamsoft.ro

54

Machteam Soft is a Romanian technology company established in 2006, offering a range of digital services including mobile app development, eCommerce platforms, AI solutions, and digital marketing services such as Google and Facebook Ads. The company holds a significant market position in Romania, attracting millions of unique visitors monthly through its portfolio of projects. The website is built on WordPress with modern plugins and integrates Google Analytics and Facebook Pixel for marketing and tracking purposes. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and DNSSEC. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website presents a professional image with good business credibility but could improve in privacy and security transparency.

N

New Zealand Rugby

nzrugby.co.nz

60

New Zealand Rugby is the principal governing body for rugby union in New Zealand, managing the sport at all levels nationwide. The organization operates a comprehensive website that provides information on teams, competitions, player safety initiatives, and community engagement programs. It holds a strong market position as the leading rugby authority in New Zealand, supported by partnerships with the New Zealand Rugby Foundation and Rugby Museum. The website is professionally designed, mobile-optimized, and rich in relevant content targeting players, coaches, referees, and fans.

R

Ratchet

ratchet.com.au

55

Ratchet.com.au is an Australian business website currently under construction, offering minimal content and no detailed business description. The site uses Webflow CMS with standard web fonts and basic JavaScript libraries such as jQuery. The technical infrastructure appears standard for a small business site but lacks advanced security measures and privacy compliance features. Security posture is weak due to absence of security headers and policies. Contact information is limited to a single email address with no phone or physical address provided. Overall, the website is in an early development stage with limited digital maturity and low trust indicators.

O

Orange360

orange360.com.au

57

Orange360 is a professionally maintained regional tourism website dedicated to promoting the Orange Region in New South Wales, Australia. It offers comprehensive information on local events, accommodation, dining, and attractions, targeting tourists and visitors seeking to explore the region. The website features rich multimedia content, including videos and image galleries, and maintains an active presence on major social media platforms. Technically, the site is built on the DNN CMS platform, leveraging modern libraries such as jQuery, Bootstrap, and various marketing and analytics tools including HubSpot and Microsoft Clarity. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS and uses secure script loading attributes but lacks some recommended security headers and explicit incident response policies. Privacy and cookie policies are present, though GDPR compliance is basic. WHOIS data is unavailable due to query failure or privacy protection, but the website's professional appearance and official regional branding support its legitimacy. Overall, Orange360 presents a trustworthy and user-friendly portal for regional tourism promotion.

Cosmin Marinescu's website serves as a professional and academic platform showcasing his work in economics, institutional economics, and public policy. The site targets academics, students, and professionals interested in Romanian economic affairs and features articles, media appearances, and educational resources. Technically, the site is built on WordPress with a moderate tech stack including jQuery and various plugins for video embedding and search functionality. The site is hosted by CYBER_FOLKS S.R.L., a Romanian registrar, and uses HTTPS with a cookie consent mechanism, indicating a baseline of security and privacy awareness. However, the absence of a privacy policy and security headers represents compliance and security gaps. Overall, the site is well-branded, consistent, and trustworthy, with good content quality and user experience.

L

Lucian Croitoru

luciancroitoru.ro

45

Lucian Croitoru Blog is a personal blog focused on economic topics, particularly monetary policy and fiscal issues, primarily targeting Romanian-speaking audiences interested in economics. The website is hosted by BLASTWAVE HOSTING SRL and built on WordPress with a professional design and regular content updates. The technical infrastructure includes common web technologies such as jQuery, Google Fonts, and Google Analytics, indicating a moderate level of digital maturity. Security posture is basic with HTTPS enabled but lacking important security headers and no DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is available via email and social media links, enhancing business credibility. Overall, the site is functional and trustworthy but could improve in security and compliance areas.

T

The Offspring

offspring.com

61

The Offspring website serves as the official online presence for the band, providing fans with access to news, tour dates, music, videos, and merchandise. The site is well-branded and targets music enthusiasts and fans of the band. It leverages modern web technologies and integrates multiple marketing and tracking tools to optimize user engagement and sales. The technical infrastructure is solid with use of popular JavaScript libraries and frameworks, though some opportunities exist for enhanced security headers and incident response transparency. The security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but the absence of WHOIS data and vulnerability disclosure reduces overall trust. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, the site is professional and trustworthy but could improve in transparency and contact availability.

V

Vendormax

cloudchain.io

60

Cloud Chain, operated by Vendormax, is a specialized software development team focused on delivering modern, cloud-based, mission-critical web applications primarily for business clients in Australia. Their expertise includes full-stack development using modern open source technologies and AWS infrastructure. The company emphasizes risk reduction, scalability, and ethical business practices, supported by fractional experts in security and AI. Their client portfolio includes reputable organizations such as Telstra, Bega Dairy Foods, and others, demonstrating a solid market presence. Technically, the website employs contemporary front-end technologies and cloud hosting but lacks some advanced SEO and accessibility features. Security posture is moderate with secure form handling and HTTPS usage but missing explicit security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security disclosures and privacy compliance.

P

Phykon

phykon.com

54

Phykon is a technology-driven outsourcing company specializing in AI and RPA-powered customer service, technical support, back office, and order management solutions. Established in 2006, it serves clients primarily in the US and Australia, offering scalable and cost-effective services to improve business efficiency and profitability. The company leverages modern technologies and automation to deliver tailored B2B solutions. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Google Analytics, and various JavaScript libraries, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the domain is legitimate, well-established, and consistent with the business claims, supporting a medium-sized enterprise profile.

P

Port Oostende / Haven Oostende

portoostendecharityrun.be

68

Port Oostende Charity Run is a professionally presented website promoting a charity sporting event scheduled for May 3, 2025, supporting 4Brain vzw, a non-profit focused on brain health. The event targets individual runners and corporate teams, emphasizing health, community engagement, and fundraising. The website is well structured with clear navigation, calls to action, and sponsor visibility, reflecting a medium-sized regional initiative backed by the Port of Oostende authority. Technically, the site uses modern JavaScript libraries and the Fork CMS platform, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and privacy consent mechanisms, though security headers and incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and safe for general audiences.

G

GumGum

gumgum.com

73

GumGum is an established enterprise-level advertising technology company founded in 2004, specializing in AI-powered contextual intelligence and high-impact advertising solutions across display, video, and connected TV formats. The company positions itself as a leader in brand-safe advertising with a strong focus on delivering relevant and personalized ad experiences. Their platform integrates advanced AI to analyze audience mindset and attention metrics, serving a diverse clientele including major global brands and agencies. Technically, the website is built on Webflow CMS, hosted on AWS infrastructure, and employs modern web technologies such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, with multilingual support via Weglot. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, GumGum demonstrates a mature digital presence with strong business credibility and good security posture, though improvements in privacy policy transparency and security header implementation are recommended.

E

Ekos

ekos.co.nz

61

Ekos is a New Zealand-based company specializing in environmental sustainability services, including carbon management, biodiversity credits, and nature-based investments. The company targets organizations, landowners, policy makers, communities, and individuals interested in reducing their environmental impact. Their market position is that of a specialized consulting and service provider within the New Zealand sustainability sector. The website is professionally designed using the Squarespace platform, featuring modern technologies such as Google Analytics, Microsoft Clarity, and Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data is typical for .nz domains and does not detract from the legitimacy of the business. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security hardening.

B

Banca Națională a României (BNR)

opiniibnr.ro

62

OpiniiBNR.ro is a specialized online platform affiliated with the Banca Națională a României (BNR), providing a forum and blog for experts to discuss macroeconomic and financial developments relevant to Romania and internationally. The website leverages WordPress CMS with a modern tech stack including GDPR compliance tools and Google Analytics for traffic monitoring. The content is authored by recognized professionals, enhancing the platform's credibility and trustworthiness. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, though it lacks some advanced security headers and DNSSEC. Privacy policies and cookie consent mechanisms are properly implemented, reflecting good compliance with GDPR requirements. However, the absence of explicit security policies, incident response contacts, and terms of service pages indicates areas for improvement in governance and transparency. Overall, the website presents a professional and authoritative resource for economic discourse in Romania, with a solid but improvable security posture.

F

Frank LTD

frankltd.co.uk

69

Frank LTD is a specialized digital healthcare agency based in the UK, focusing on delivering digital solutions primarily for NHS and health and care organizations. Their services encompass design, branding, website development, extranets, client support, and accessibility, positioning them as a trusted partner in the healthcare sector. The company emphasizes transparency, security, and compliance, holding certifications such as ISO 27001 and Cyber Essentials, and aligns with NHS data protection standards. Their client testimonials and sector expertise reinforce their market credibility. Technically, the website is built on Concrete CMS and leverages modern JavaScript libraries like jQuery, GSAP, and Owl Carousel to provide a responsive and accessible user experience. Hosting is provided by a reputable UK-based provider (ANS Group Ltd), ensuring data residency and security compliance. The site includes a cookie consent mechanism and privacy policy that align with GDPR requirements. From a security perspective, the site enforces HTTPS and demonstrates adherence to recognized security frameworks. However, there is room for improvement in implementing security headers and publishing a vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected, and the domain registration details are consistent with the business profile. Overall, Frank LTD presents a professional, secure, and compliant digital presence suitable for its healthcare clientele, with strong trust indicators and a solid technical foundation.

F

Foursixty Inc.

foursixty.com

49

Foursixty Inc. operates a mature SaaS platform specializing in transforming user-generated content and Instagram posts into shoppable galleries for e-commerce businesses. The company targets brands, bloggers, and agencies, offering a comprehensive suite of features including Instagram auto-publishing, influencer tracking, and integration with multiple e-commerce platforms. The website demonstrates a strong market position with over 3,000 trusted clients and partnerships with major platforms like Shopify and Meta. Technically, the site employs modern JavaScript libraries, tracking tools, and marketing integrations, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and domain locks, but lacks advanced security headers and DNSSEC. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

W

Wallabies Travel

wallabiestravel.com.au

71

Wallabies Travel is a specialized travel agency focused on providing rugby fans with tailored travel packages to major rugby events, including the British & Irish Lions Tour 2025 and other Wallabies fixtures. As the official travel partner for Rugby Australia, the company holds a strong market position within the sports travel niche in Australia. Their offerings include premium seating and comprehensive tour packages, targeting rugby enthusiasts seeking immersive event experiences. Technically, the website employs a modern tech stack including AngularJS, jQuery, Google Maps API, and Vimeo integration, supported by Cookiebot for consent management and Raygun for error monitoring. The site is mobile-optimized with good SEO practices and moderate performance. However, some improvements in accessibility and security headers could enhance the technical maturity. From a security perspective, the site enforces HTTPS, uses secure forms with anti-forgery tokens, and manages cookie consent effectively. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and user trust.

F

Funraisin

funraisin.co

71

Funraisin is a specialized SaaS platform providing advanced online fundraising solutions tailored for nonprofits and charities. The company offers a comprehensive suite of fundraising tools including peer-to-peer fundraising, DIY fundraising, donation management, event ticketing, and marketing integrations. Positioned as a trusted provider powering thousands of charities worldwide, Funraisin targets nonprofit organizations seeking to enhance their fundraising capabilities through technology. The website reflects a mature digital presence with professional design, clear navigation, and extensive content describing their services and features. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, HubSpot, and Hotjar. Hosting is supported by Amazon CloudFront CDN, ensuring content delivery performance. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding explicit security headers and publishing security policies. The security evaluation shows good practices with encrypted communications and cookie consent mechanisms, but lacks published incident response or vulnerability disclosure information. WHOIS data is privacy protected, which is common for SaaS businesses, and no suspicious patterns were detected. Contact information includes multiple regional phone numbers, but no public contact emails were found. Privacy and cookie policies are present and appear GDPR compliant. Overall, Funraisin presents a professional, trustworthy, and technically competent online presence suitable for its nonprofit fundraising market. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving accessibility compliance to further strengthen trust and compliance.

W

Wahu Australia

wahu.com.au

70

Wahu Australia operates an e-commerce platform specializing in kids outdoor toys and beach essentials, targeting families and children primarily in Australia. The website is built on the Shopify platform, leveraging modern e-commerce technologies and marketing tools such as Klaviyo, Facebook Pixel, and TikTok Pixel to engage customers and optimize sales. The site demonstrates good design quality, mobile optimization, and user experience, positioning itself as a specialized retailer in the outdoor toy market. Technically, the site uses a robust infrastructure with Shopify hosting and Australian cloud services, ensuring reliable performance and scalability. Security posture is solid with HTTPS and secure payment options, though there is room for improvement in implementing security headers and publishing explicit security and privacy policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and clearer contact information.

T

The Rugby Club Foundation Limited

rugbyclub.com.au

57

The Rugby Club Foundation Limited is a well-established Australian non-profit organization dedicated to supporting grassroots rugby, primarily in New South Wales. With a history dating back to 1945, the foundation promotes rugby through memberships, events, and grants programs, fostering community and fellowship among rugby enthusiasts. The website reflects a professional and consistent brand image, targeting rugby players, fans, and community supporters. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including jQuery and Google reCAPTCHA Enterprise for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is strong with HTTPS and HSTS enabled, though some improvements in privacy compliance and published security policies are recommended. Overall, the security posture is solid with no visible vulnerabilities or malicious content. The WHOIS data is limited due to .au domain policies, but the website's content and external partnerships support its legitimacy. Strategic recommendations include implementing cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility features to improve compliance and trust.

S

Santos

santos.com

61

Santos is a large, global energy company primarily operating in Australia and nearby regions such as Papua New Guinea, Timor-Leste, and the United States. The company focuses on providing reliable and affordable energy with a strategic emphasis on sustainability and lower carbon energy solutions. Their business model includes upstream projects, producing assets, and midstream energy solutions, targeting investors, communities, and partners. The website reflects a professional and consistent brand with comprehensive investor and sustainability information. Technically, the website is built on WordPress with modern technologies including jQuery, Google Analytics, Google Tag Manager, and Vimeo for multimedia content. The site is mobile optimized, accessible, and SEO friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and explicit incident response information. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is not uncommon for large corporations. No direct contact emails or phone numbers were found on the homepage, but social media presence is strong. Privacy policy and terms of service are present and comprehensive, though no cookie consent mechanism was detected. Overall, the site is professional and trustworthy with minor improvements recommended in security headers, cookie consent, and transparency of registrant data to enhance compliance and trust.

R

RaffleTix Holdings Pty Ltd

raffletix.com.au

69

RaffleTix Holdings Pty Ltd operates Australia's largest and most trusted online raffle platform, serving charities, schools, community groups, sporting clubs, and other not-for-profit organizations. Founded in 2017, the company provides a comprehensive digital solution for raffle fundraising, including branded websites, online and in-person ticket sales, real-time analytics, and compliance support. The platform is well-positioned as a market leader in the Australian non-profit sector, with a strong focus on regulatory adherence and customer success. Technically, the website leverages a mature technology stack including ASP.NET WebForms, jQuery, Bootstrap, Google reCAPTCHA Enterprise, Facebook Pixel, Klaviyo, and Zendesk for support. The site is mobile-optimized and employs modern security practices such as HTTPS enforcement and Content Security Policy headers. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the platform demonstrates solid practices including secure forms with anti-forgery tokens, integration of enterprise-grade CAPTCHA, and asynchronous loading of third-party scripts. However, there is room for improvement in privacy compliance, notably the absence of a visible cookie consent mechanism and lack of explicit security or incident response policies. No critical vulnerabilities or suspicious indicators were found. Overall, RaffleTix presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy transparency and accessibility would further strengthen its security posture and compliance standing.

Central West Rugby is a regional rugby union organization serving the Central West region of New South Wales, Australia. The website provides information about the rugby competition structure, partners, clubs, and representative teams. The organization targets rugby players, clubs, partners, and fans within the region, positioning itself as a key regional sports body. The site uses WordPress with the Enfold theme and several plugins, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. No privacy or cookie policies are present, which is a compliance gap. Contact information is limited but includes a named contact and phone number. Social media presence is established on Facebook and Instagram. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

C

Central North Rugby Union

cnru.com.au

52

Central North Rugby Union is a regional sports organization dedicated to promoting and managing rugby union activities across Central Northern New South Wales, Australia. The website serves as an information hub for players, clubs, and rugby enthusiasts, offering competition details, registration guides, and organizational contacts. The business operates as a small non-profit entity focused on community sports development. Technically, the website employs a traditional web stack including HTML5, Bootstrap CSS framework, jQuery, and Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and provides a clear navigation structure. However, it lacks advanced SEO and accessibility features, and no CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers such as Content-Security-Policy or HSTS. There is no privacy or cookie policy present, and no consent mechanism for tracking is implemented, which may expose the organization to compliance risks. No forms or sensitive data exposure were detected on the main page, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional for its purpose but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and reduce risk. Strategic recommendations include implementing privacy and cookie policies, adding security headers, enforcing HTTPS, and providing clear contact information including emails and phone numbers.

F

Focosme Pty Ltd

sydneywomens.rugby

55

Sydney Women’s Rugby Union is a well-established sports governing body organizing premier women’s rugby union competitions in Sydney, Australia. Founded in 1995, it offers structured competitions across multiple rugby formats and seasons, targeting female rugby players from beginners to elite levels. The website serves as an information hub for fixtures, ladders, competitions, clubs, and news, supported by a modern WordPress infrastructure with Divi theme and Google services integration. Social media presence is strong, enhancing community engagement. However, the domain is newly registered in 2025, indicating a recent web presence update. Security posture is adequate with HTTPS and reCAPTCHA, but lacks comprehensive security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

N

NSW Country Rugby Union

nswcountryrugby.com.au

60

NSW Country Rugby Union is a community-oriented non-profit organization dedicated to promoting and supporting rugby across regional New South Wales, Australia. The website serves as a hub for players, volunteers, and fans, offering information on playing opportunities, volunteer roles, community programs, and media content. The organization maintains partnerships with various corporate and regional entities, enhancing its community engagement and resource base. Technically, the website is built on WordPress with Elementor and several plugins, providing a modern and responsive user experience. While the site uses HTTPS and has a valid SSL configuration, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy and cookie policies are not explicitly found, indicating a gap in compliance with privacy regulations. Overall, the website is professional, trustworthy, and well-branded, but could improve in privacy compliance and security best practices.

N

NSW Rugby TV

nswrugbytv.com.au

56

NSW Rugby TV operates as a specialized media streaming platform delivering rugby union content primarily focused on New South Wales, Australia. The platform offers live and on-demand video content covering various rugby competitions including junior, women's, regional, and academy levels. The business targets rugby enthusiasts and supporters within the region, leveraging a subscription-based model to monetize its services. Technically, the website is built on WordPress with Elementor as the page builder and uses Video.js for video playback, hosting media assets on AWS S3 and CloudFront, indicating a modern and scalable infrastructure. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No contact or incident response information is provided, limiting transparency. Overall, the site is functional and professionally designed but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

F

Football NSW

footballnsw.com.au

56

Football NSW is a regional sports governing body dedicated to growing, developing, promoting, and servicing football (soccer) activities in New South Wales, Australia. The organization provides key services including coaching and referee programs and hosts events at Valentine Sports Park. The website reflects a professional and consistent brand presence targeting football players, coaches, referees, and the broader football community in NSW. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Yoast SEO and Google Analytics via MonsterInsights. The infrastructure uses Cloudflare DNS and is registered via GoDaddy, indicating solid domain management practices. Security posture is good with HTTPS enabled and domain protections in place, though the absence of security headers and published privacy or cookie policies indicates room for improvement. Overall, the site is safe, trustworthy, and well-positioned within its niche, but would benefit from enhanced privacy compliance and security disclosures.

O

Oy Apotti Ab

maisa.fi

70

Oy Apotti Ab operates the Maisa platform, a secure online health and social care portal serving Helsinki University Hospital, the city of Helsinki, and wellbeing services counties of Vantaa and Kerava. The platform enables patients to manage health information, communicate with professionals, book appointments, view test results, and submit social care notifications. It is integrated with the Apotti system and licensed MyChart software from Epic Systems Corporation, positioning it as a critical regional healthcare digital service. The website is professionally designed, mobile-optimized, and provides multilingual support, reflecting a mature digital infrastructure. The technical stack includes modern JavaScript libraries and Epic Px UI frameworks, hosted likely by Telia Finland Oyj or related providers. Security posture is strong with HTTPS enforcement, anti click-jacking measures, CSRF protection, and nonce usage in scripts. However, the absence of a cookie consent mechanism and visible security or incident response policies are areas for improvement. WHOIS data confirms legitimacy with consistent registrant information and domain age appropriate for the business history. Overall, Maisa.fi is a trustworthy and well-maintained healthcare portal with room to enhance privacy compliance and transparency.

F

Fondation de l'AP-HP

fondationaphp.fr

38

Fondation de l'AP-HP is a French non-profit healthcare foundation closely linked to the Assistance Publique - Hôpitaux de Paris (AP-HP) network of 39 hospitals. The foundation supports hospital care, medical staff, and research through innovative funding and partnerships. The website presents a professional and well-structured digital presence, leveraging WordPress CMS with modern plugins and SEO optimizations. It targets healthcare professionals, donors, and the research community, emphasizing medical innovation and patient care. Technically, the site uses standard web technologies and is hosted by OVH, a reputable provider. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. No privacy policy or terms of service were detected, which is a compliance gap. Overall, the site is trustworthy and safe for general audiences, with a strong business credibility score but room for improvement in privacy and security transparency.

W

Wiener Gesundheitsverbund

gesundheitsverbund.at

68

Wiener Gesundheitsverbund is Austria's largest healthcare provider, operating 7 clinics, 9 nursing homes, and a therapy center, serving the public around the clock. The organization is positioned as a major public healthcare entity in Vienna and Europe, offering comprehensive medical and nursing services as well as education and training in health professions. The website is built on WordPress with a professional design, good SEO, and mobile optimization, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are needed in security headers and explicit privacy policies. Overall, the domain registration and website content are consistent and trustworthy, supporting the legitimacy of the organization.

M

Maritime Campus Antwerp

mca.be

58

Maritime Campus Antwerp (MCA) operates as a vibrant maritime industry hub and coworking space located in Antwerp, Belgium. The organization focuses on connecting maritime professionals and enthusiasts through networking, knowledge exchange, and collaborative work environments such as MCA LABS. The website reflects a medium-sized entity founded in 2015, with a clear business model centered on fostering maritime sector collaboration and innovation. MCA's market position is important regionally, supported by a professional online presence and active social media engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and several JavaScript libraries to enhance user experience and performance. The site is built on Craft CMS and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 for form protection. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. Privacy compliance is strong, with clear privacy and cookie policies and an active consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. Strategic recommendations include implementing additional security headers, publishing a security policy, and continuous monitoring of third-party libraries to maintain security and compliance.

E

eRoam Travel Technology

eroam.com

65

eRoam Travel Technology is a mature company founded in 2004, specializing in travel agency software solutions that streamline booking and trip planning processes. Their flagship product is a trip builder app designed for travel agents and businesses, complemented by an e-commerce plugin enabling 24/7 online sales. The company positions itself as a leading provider in the travel technology sector, targeting travel agents and agencies globally. Technically, the website is built on WordPress with the Divi theme and leverages modern web technologies and performance optimizations such as WP Rocket and Google Tag Manager. Hosting is via AWS DNS services, indicating a reliable infrastructure. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, well-branded, and trustworthy, with good SEO and user experience.

S

Stad Gent

klimaatstad.gent

65

Stad Gent operates an official municipal website focused on climate action, sustainability, and environmental initiatives targeting residents and local businesses. The site provides comprehensive information on climate ambitions, energy saving, green neighborhood projects, and sustainable business support. The technical infrastructure is modern, leveraging Drupal 10 CMS, with integrations for analytics, cookie consent, and live chat, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its government mandate.

O

Oficjalny sklep internetowy InPost - Out Of The Box

outofthebox.pl

76

Outofthebox.pl is the official online store for InPost branded products, specializing in retailing toys, gadgets, accessories, and clothing primarily targeting the Polish market. The business operates an e-commerce platform built on WordPress and WooCommerce, leveraging modern web technologies and marketing tools such as Google Tag Manager and Synerise for analytics and retargeting. The website demonstrates good design quality, mobile optimization, and SEO practices, providing a professional user experience. However, it lacks publicly accessible privacy and terms of service policies, which are critical for compliance and user trust. Security posture is solid with HTTPS enforced and cookie consent implemented via OneTrust, but additional security headers and policies could enhance protection. The domain is well aged and registered with a reputable Polish registrar, consistent with the business claims.

P

PMA Global

pmaglobal.co

60

PMA Global Limited is a managed services provider specializing in sourcing print and promotional goods, alongside logistics and warehousing for marketing collaterals. Established in 1988, the company has grown to operate in three countries with over 200 employees, servicing a large market. Their key services include third-party logistics, ecommerce fulfillment, bulk storage, marketing and promotional product sourcing, event management, and technology solutions such as IT systems development and software sourcing. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and analytics tools like Google Tag Manager and Hotjar. Security posture is good with HTTPS and reCAPTCHA, though additional security headers and policies could enhance protection. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is redacted, which is common but limits domain trust signals. Overall, the site is safe, business-focused, and trustworthy with room for improvement in privacy and security transparency.

MoneyMe Financial Group Pty Ltd operates a professional and comprehensive online lending platform in Australia, offering personal loans, car loans, debt consolidation, credit cards, and credit score services. The company positions itself as a customer-centric lender with fast approvals, competitive rates, and a commitment to social and environmental responsibility, evidenced by its B Corp certification and sustainability initiatives. The website is well-designed, mobile-optimized, and rich in content, providing clear navigation and multiple trust signals including customer reviews and awards. Technically, the site employs modern frameworks and analytics tools, ensuring good performance and SEO. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not publicly found. WHOIS data is unavailable due to privacy or query failure, but the overall legitimacy is supported by the professional web presence and business information. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection roles.

D

Dry July Foundation

dryjuly.com

67

Dry July Foundation operates a well-established non-profit fundraising campaign encouraging participants to abstain from alcohol in July to raise funds for cancer support services. The website is professionally designed, mobile-optimized, and rich in content, providing clear calls to action, participant leaderboards, and fundraising resources. The technical infrastructure leverages modern analytics, marketing, and payment technologies including Google Tag Manager, Facebook Pixel, Braintree, and Apple Pay, hosted via Amazon CloudFront CDN. Security posture is strong with HTTPS, secure form validations, and CSRF protections, though explicit cookie consent mechanisms and vulnerability disclosure policies are absent. WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness but does not detract from the legitimacy of the campaign as evidenced by the website content and external references.

C

Canteen Australia

raiseit.org.au

68

The website www.raiseit.org.au/raise-it serves as a dedicated fundraising platform for Canteen Australia, a non-profit organization supporting young people impacted by cancer. The site provides multiple fundraising options including hosting events, virtual marathons, streaming, and merchandise sales. It targets donors and fundraisers primarily within Australia and positions itself as a trusted and established charity with tax-deductible status. The platform leverages modern web technologies and integrates with third-party services to enhance fundraising capabilities. Technically, the site is well-structured, mobile-optimized, and uses reputable CDNs and analytics tools. Security posture is generally strong with HTTPS enforced, though it lacks some security headers and cookie consent mechanisms. WHOIS data is limited due to privacy policies but aligns with legitimate Australian domain management practices. Overall, the site is professional, trustworthy, and effective in its mission, with room for improvement in privacy compliance and security best practices.

C

CYBER_FOLKS S.R.L.

acasa.ro

55

Acasa.ro is a well-established Romanian lifestyle media portal founded in 2005, offering diverse content including home decoration, gardening, recipes, health, horoscopes, and family advice. The website targets a general audience interested in lifestyle and home-related topics and maintains a consistent brand presence with multiple specialized subdomains. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook SDK, hosted by CYBER_FOLKS S.R.L., a reputable Romanian hosting provider. Performance and mobile optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks some important HTTP security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Overall, the site is professional and trustworthy but could improve security and privacy transparency.

Z

Zanda Health

zandahealth.com

67

Zanda Health is a healthcare technology company specializing in practice management software tailored for allied health practitioners. The company offers a comprehensive SaaS platform that automates and simplifies clinic operations, including calendar management, client communication, billing, telehealth, and AI-assisted note-taking. Positioned as a secure and privacy-focused solution, Zanda Health holds ISO 27001 certification, underscoring its commitment to data security and compliance. The website reflects a professional and modern digital presence with strong SEO and user experience design, targeting health clinics primarily in Australia but with international reach through localized site versions. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and integrates Google Tag Manager and Google Custom Search for analytics and search functionality. Hosting and DNS services leverage Cloudflare, enhancing performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with structured data and Open Graph tags supporting rich search results and social media sharing. From a security perspective, the site enforces HTTPS, uses ISO 27001 certified backend systems, and avoids exposing sensitive data in its HTML. However, DNSSEC is not enabled, and some security headers are not explicitly visible, suggesting room for improvement. No explicit incident response or vulnerability disclosure policies are published, which could be enhanced to improve trust and compliance. Overall, Zanda Health presents a low-risk profile with a strong security posture and professional business credibility. Strategic recommendations include enabling DNSSEC, publishing vulnerability disclosure policies, and enhancing security header implementation to further strengthen the security framework and customer trust.

V

VISITWallonia

walloniebelgiquetourisme.be

56

VISITWallonia.be is the official tourism website for the Wallonia region in Belgium, providing travel information, destination guides, and event listings to tourists and visitors. The site targets a broad audience interested in exploring Wallonia's cultural and natural attractions. The business operates as a regional tourism promotion entity, leveraging multilingual support to cater to diverse visitors. Technically, the website is built on Drupal 7 CMS with integration of modern JavaScript libraries and embedded social media content via Flockler. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and formal security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance trust and security.

C

Circular Flanders

circularports.eu

63

Circular Ports, operated by Circular Flanders, is a professional platform dedicated to supporting port professionals, businesses, and communities in transitioning towards a circular and low carbon economy. The website serves as a hub for information, case studies, thematic tracks, and monitoring tools related to circular economy practices in ports, primarily targeting stakeholders in the transportation and energy sectors within Belgium. The platform is well-positioned as a regional leader in circular economy initiatives for ports, leveraging partnerships with academic institutions and port authorities to enhance its credibility and reach. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WP Rocket to optimize performance and search engine visibility. The site demonstrates good mobile optimization and user experience, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the security posture is moderate, with no critical vulnerabilities detected but room for improvement in headers and incident response documentation. The lack of WHOIS transparency slightly reduces trust, but the professional content and partnerships mitigate concerns. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving WHOIS transparency to strengthen trust and compliance.

K

King's Health Partners

kingshealthpartners.org

65

King's Health Partners is a prominent academic health science centre in the UK, integrating research, education, and clinical practice across three NHS Foundation Trusts and King's College London. The organization focuses on pioneering healthcare improvements through collaboration and innovation, targeting healthcare professionals, researchers, students, patients, and the wider public. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site is built on Concrete CMS and leverages modern web technologies such as jQuery, FontAwesome, and Owl Carousel. It includes accessibility tools and multilingual support via Google Translate, indicating a commitment to inclusivity. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or vulnerability disclosure program. WHOIS data is privacy protected, which is reasonable for this healthcare partnership. No critical vulnerabilities or suspicious indicators were found. Overall, the website demonstrates a strong security posture and business credibility, with recommendations to enhance transparency around security policies and incident response. The risk level is low, supporting trust in the organization's digital presence.

F

Fédération Wallonie-Bruxelles

cfwb.be

57

The Fédération Wallonie-Bruxelles official website serves as a comprehensive portal for government services, cultural information, education, sports, youth aid, research, and justice within the Wallonia-Brussels Federation in Belgium. It targets residents and stakeholders by providing news, documentation, contact information, and access to various public services. The site is well-branded and consistent with government standards, featuring official social media links and a professional design. Technically, the website is built on TYPO3 CMS version 4.5, an older but stable content management system, supplemented by jQuery, Owl Carousel, and analytics tools such as Matomo and Google Analytics. The site is mobile-optimized and accessible, with a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the CMS version is outdated, which may pose security risks. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. No explicit security headers were detected in the provided data, and no vulnerability disclosures or incident response contacts are publicly available. The WHOIS data is restricted due to DNS Belgium policies, but the domain is consistent with an official government entity. Overall, the security posture is moderate but could be improved by updating software and adding security headers. The overall risk assessment is low, with recommendations focusing on modernizing the CMS, enhancing security headers, and publishing clear security policies. The website is trustworthy, professional, and safe for general audiences.

C

Commission communautaire française

cocof.be

51

The Commission communautaire française (COCOF) website serves as the official public service portal for the French-speaking community in the Brussels-Capital Region. It provides regulatory and approval services related to various daily life matters affecting approximately 900,000 francophone residents. The site is positioned as a governmental entity with a clear target audience of francophone Brussels inhabitants. The business model is public service-oriented, focusing on community regulation and support. The website demonstrates consistent branding and good content quality, with professional design and clear navigation.

V

VISITWallonia

visitwallonia.be

55

VISITWallonia.be is the official tourism website for the Wallonia region in Belgium, providing travel information, destination guides, and event listings to tourists and visitors. The site is built on Drupal 7 and incorporates modern web technologies such as jQuery and embedded social media content via Flockler. The website demonstrates good content quality and user experience with multilingual support, targeting a broad audience interested in tourism in southern Belgium. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain registration is consistent with the business purpose and age, registered with a reputable registrar since 2019. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

R

Rehab Physio Centre

rehabphysiocentre.co.nz

51

Rehab Physio Centre is a small healthcare provider based in Palmerston North, New Zealand, specializing in physiotherapy and rehabilitation services. Established in 2009, the center offers professional treatment for musculoskeletal conditions, ACC treatments without requiring a doctor's referral, and sports assessment clinics. The business targets local patients seeking physiotherapy and rehabilitation, leveraging partnerships such as the ACC Allied Health Services Contract and Southern Cross Health Society for easy claims. The website reflects a professional healthcare service with clear contact information and social media presence. Technically, the website is built on Joomla CMS using the Warp framework and Widgetkit extensions, with jQuery libraries for interactivity. Hosting and DNS are managed via Cloudflare and Freeparking Limited respectively, with HTTPS enabled ensuring secure connections. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO is adequately addressed with meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes CSRF tokens in scripts, but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Google Analytics is used for user tracking without visible consent mechanisms, which may pose privacy concerns. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, published privacy and cookie policies, and improved compliance with data protection regulations. These improvements would strengthen user trust and reduce potential legal risks.

A

Access Granted NZ

accessgranted.nz

57

Access Granted NZ is a New Zealand-based podcast platform launched in 2023, focusing on sharing unique and valuable narratives through interviews and storytelling. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress, uses HTTPS, and Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or detailed GDPR indicators. Contact information is limited to a contact form with no direct emails or phone numbers published. Overall, the site is safe, trustworthy, and suitable for general audiences.

N

New Zealand Rugby League

nzrl.co.nz

50

New Zealand Rugby League operates as the national governing body for rugby league in New Zealand, providing comprehensive information on national teams, tournaments, player resources, and community engagement. The website serves a broad audience including players, coaches, referees, fans, and community members, positioning itself as an authoritative source for rugby league in the country. The business model focuses on sports promotion, community involvement, and membership services, supported by a medium-sized organizational structure founded in 2001. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for analytics and user engagement such as Google Analytics, Hotjar, and YouTube Embed Plus. Hosting and DNS services are provided by Freeparking Limited and Cloudflare respectively, ensuring reliable performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were detected, indicating potential compliance gaps with GDPR and other privacy regulations. The site employs tracking and marketing tools, including Facebook Pixel and HubSpot, with moderate user tracking levels. Overall, the website is professional, content-rich, and trustworthy, with a strong brand presence and social media integration. However, improvements in privacy compliance and security hardening are advised to mitigate risks and enhance user trust.

O

Oud Papier Jozef Michel NV

oudpapiermichel.be

57

Oud Papier Jozef Michel NV is a well-established family-owned business specializing in the collection, transport, sorting, and recycling of old paper in Belgium. With over 50 years of operational history and a domain registered since 2000, the company holds a strong market position as one of the oldest paper collectors in the region. Their services target a diverse audience including logistics, graphic, port, industrial sectors, and various associations and SMEs. The website reflects a professional and consistent brand image with multilingual support and clear contact information. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPML, ensuring good SEO and user experience across devices. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, although some security headers and explicit policies are missing. Overall, the site demonstrates a solid security posture with room for improvement in formal security policies and incident response readiness. The website is free from suspicious content or blocking mechanisms, making it accessible and trustworthy for users.