Security Directory

S

Strukton Rail NV

struktonrail.be

46

Strukton Rail NV is a well-established Belgian company specializing in the construction, maintenance, and renewal of railway infrastructure including tracks, signalling, catenary systems, crane rails, fiber optics, and surveying services. The company operates primarily in the transportation sector with a strong market presence in Belgium and international connections through its parent company, Strukton Group. The website reflects a professional and consistent brand image, targeting B2B clients in the rail infrastructure domain. Technically, the website is built on WordPress with modern SEO and performance optimizations, including the use of Yoast SEO, WP Rocket, and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is accessible, well-structured, and trustworthy, with moderate user tracking via Google Tag Manager and Cookiebot. No critical vulnerabilities or suspicious indicators were found.

S

Strukton Rail A/S

strukton.dk

72

Strukton Rail A/S is a well-established railway construction and maintenance company operating primarily in Denmark with a European footprint. The company offers comprehensive railway infrastructure solutions and is recognized for its reliability and local presence. The website reflects a professional corporate identity with clear business focus and multilingual support for various European markets. Technically, the site is built on WordPress with modern SEO and performance optimizations, including the use of Yoast SEO, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is solid with HTTPS and consent management, though improvements can be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates good digital maturity and business credibility.

S

SiteMinder

thebookingbutton.com

74

SiteMinder is a leading SaaS provider in the hospitality sector, offering a comprehensive hotel commerce platform that includes channel management, booking engines, PMS integrations, and other hotel technology services. The company targets independent hotels and multi-property groups globally, positioning itself as the world's largest open hotel commerce platform. The website reflects a mature digital presence with professional design, strong SEO, and multi-language support. Technically, the site is built on WordPress with modern marketing and analytics integrations such as Google Tag Manager, Cookiebot, and UserWay accessibility tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data raises some legitimacy concerns, but the professional branding, social media presence, and business ecosystem partnerships mitigate risk. Overall, the site demonstrates a high level of digital maturity and business credibility.

I

ISRINGHAUSEN Australia

isri.com.au

62

ISRI Australia operates as a specialist in the manufacturing and distribution of seating systems for commercial vehicles including trucks, buses, and construction equipment. The company is part of the AUNDE Group SE and has a long-standing history dating back to 1919. Their market position is strong as a global leader in their niche, supported by a national dealer network and comprehensive service offerings. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built on TYPO3 CMS with Bootstrap framework, featuring modern web standards and mobile responsiveness. Cookie consent is implemented via Cookiebot, and Google Analytics is included but disabled by default, indicating a privacy-conscious approach. However, some security best practices such as explicit security headers are missing, which could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. The lack of a dedicated security policy or incident response contact on the site is a minor gap. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits direct verification of registrant details. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security headers and transparency around security policies would enhance the security posture and trust further.

W

Watermelon

watermelon.lv

49

Watermelon is a Latvian-based e-commerce business specializing in promotional advertising products such as printed mugs, pens, and textiles. Positioned as the largest promotional advertising company in Latvia, it targets businesses and organizations seeking bulk promotional materials. The website is built on a modern WordPress platform with WooCommerce and Elementor, incorporating SEO and marketing tools like Rank Math and Google Tag Manager. Security posture is solid with HTTPS and security headers, though privacy and terms policies are missing. Contact information includes a Latvian phone number and active social media profiles. Overall, the site is professional and trustworthy but could improve compliance documentation and incident response transparency.

I

Intermundial

intermundial.com

62

Intermundial is a Spanish insurance company specializing in travel and sports insurance, boasting 30 years of market experience. The company offers a range of insurance products including travel, sports, and accident insurance with 24/7 assistance. Their business model focuses on online sales and customer self-service, supported by a modern digital presence and integration with multiple social media platforms. The company targets travelers and sports enthusiasts primarily in Spain but with global coverage options. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and Visual Website Optimizer for A/B testing and analytics. The site is mobile-optimized and SEO-friendly, although some accessibility features could be improved. Performance is moderate with room for optimization. The use of multiple third-party scripts indicates a mature digital marketing strategy. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is not publicly accessible due to registry restrictions, which is typical for .es domains, but the website content and structured data indicate a legitimate and trustworthy business. Overall, Intermundial presents a solid online presence with good business credibility and moderate technical and security maturity. Strategic improvements in privacy policy visibility, security headers, and incident response transparency would enhance trust and compliance.

Strukton Rail is a well-established Dutch company specializing in rail infrastructure services, including maintenance, innovations, and project execution. The company positions itself as a reliable and sustainable partner in the transportation sector, focusing on future-ready rail solutions. Their website reflects a professional and consistent brand image, targeting businesses and stakeholders involved in rail infrastructure. Technically, the site is built on WordPress with modern plugins and technologies, optimized for performance, SEO, and mobile use. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site is trustworthy and well-maintained, with room for improvement in transparency around security and incident handling.

S

Strukton

werkenbijstrukton.nl

71

Werken bij Strukton is a professional recruitment and employer branding website for the Strukton group, a leading infrastructure and rail systems company operating primarily in the Netherlands and Belgium. The site targets job seekers in civil engineering, rail infrastructure, and related technical fields, offering job vacancies, internships, and career development opportunities. The business model focuses on attracting talent and promoting Strukton as an employer of choice with a strong emphasis on sustainable infrastructure and employee development. Technically, the website is built on WordPress 6.8.1 with modern JavaScript libraries such as jQuery and Slick Slider, integrated with Google Tag Manager and Cookiebot for analytics and cookie consent management. Hosting is provided by LeaseWeb Netherlands B.V., a reputable provider with DNSSEC enabled, ensuring domain security. The site demonstrates good SEO, accessibility, and mobile optimization, providing a positive user experience. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses DNSSEC. Cookie consent is actively managed, indicating GDPR compliance. However, there is no publicly available security policy, incident response plan, or vulnerability disclosure mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and technical implementation. Strategic recommendations include publishing formal security and incident response policies, adding security headers, and providing explicit security contact channels to enhance trust and compliance.

S

Strukton Wegen & Beton

struktonwegenenbeton.nl

71

Strukton Wegen & Beton is a Dutch infrastructure and civil engineering company focused on sustainable and future-proof infrastructure solutions. The company offers a broad range of services including road construction, concrete construction, energy networks, and specialized civil works. The website positions the company as an established player in the Dutch transportation and energy sectors, targeting business and public sector clients. The digital presence is built on a modern WordPress platform with good SEO and accessibility practices, supported by reputable hosting from LeaseWeb Netherlands B.V. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the website reflects a professional and trustworthy business with a clear market focus.

S

Strukton Infraspecials

struktoninfraspecials.nl

66

Strukton Infraspecials is a Dutch infrastructure company specializing in sustainable and innovative civil engineering projects including tunnels, water construction, and rail-civil works. The company positions itself as a reliable partner focused on safety, sustainability, and collaboration, targeting business and government clients in the transportation and energy sectors. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence despite the domain's recent registration in early 2024. Technically, the site uses WordPress with modern plugins and scripts, hosted by LeaseWeb Netherlands with DNSSEC enabled and HTTPS enforced, indicating a strong security baseline. However, explicit security policies and incident response information are not published, representing an area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the site demonstrates a solid business credibility and trustworthy online presence.

H

HR-Technologies

hr-technologies.com

66

HR-Technologies operates a Dutch-language SaaS platform called EasyToRecruit, providing web-based software solutions for supporting the entire recruitment and selection process. The company appears to be a small, specialized provider in the HR technology sector, founded in 2002, with a consistent market presence in the Netherlands. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern tracking and consent tools such as Google Tag Manager and Cookiebot, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible privacy policy or terms of service pages, which should be addressed to improve trust and regulatory adherence. Overall, the website is functional and professional but could benefit from enhanced transparency and security documentation.

S

Strukton

strukton.com

72

Strukton is a well-established infrastructure company focused on sustainable transportation and infrastructure solutions, including rail networks, roads, and specialized infrastructure projects. The company operates multiple divisions with dedicated websites, indicating a diversified business model within the transportation sector. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and Cookiebot for privacy compliance. Hosting is provided by Leaseweb, a reputable provider, though DNSSEC is not enabled, which is a recommended security enhancement. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks published security policies or incident response information. Overall, the domain registration data aligns well with the business claims, showing a long-standing and legitimate presence. No critical vulnerabilities or blocking mechanisms were detected, and the site is safe for general audiences.

V

VISITWallonia

valloniabelgioturismo.it

57

VISITWallonia is the official Belgian Tourism Office website dedicated to promoting tourism in the Wallonia region. It provides visitors with holiday ideas, travel information, and free brochures to enhance their travel experience. The website targets tourists and travelers interested in exploring Wallonia, positioning itself as a trusted government tourism authority. The business model is focused on regional tourism promotion and visitor engagement. Technically, the website is built on Drupal 7 CMS, leveraging modern web technologies including jQuery, Matomo Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is hosted likely via the wbtourisme.be CDN infrastructure, delivering moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent with blocking mode to comply with privacy regulations. However, some security best practices such as enabling DNSSEC, publishing privacy policies, terms of service, and security.txt files are missing. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent with the official nature of the site, enhancing trustworthiness. Overall, VISITWallonia presents a professional, secure, and privacy-conscious tourism website with room for improvement in transparency and security documentation. Strategic recommendations include publishing comprehensive privacy and terms policies, enabling DNSSEC, and enhancing security headers to further strengthen the security posture.

H

Hubwayz

hubwayz.com

46

Hubwayz is a recently established technology company (founded in 2024) specializing in providing advanced travel industry solutions. Their platform offers a comprehensive suite of services including hotel API aggregation, marketplace connectivity, payment processing, and profit growth tools, targeting travel agencies, wholesalers, and other travel professionals globally. The company positions itself as a technology partner empowering travel businesses with scalable and cloud-native solutions. Technically, the website is built on WordPress with modern frontend technologies such as Tailwind CSS and jQuery, hosted on Amazon AWS infrastructure. The site is mobile optimized and includes integrations with marketing and analytics tools like HubSpot and Cookiebot for GDPR-compliant cookie consent. Security posture is generally good with HTTPS enforced, but lacks DNSSEC and some security headers. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the domain registration is consistent with the business profile, and the website content is professional and trustworthy.

H

HBX Group

hbxgroup.com

74

HBX Group is a leading independent B2B travel technology marketplace operating globally with a portfolio of brands including Hotelbeds, Bedsonline, The Luxurist, Roiback, and Civitfun. The company provides cloud-based platforms and data-driven solutions to wholesalers, travel agents, hotels, and luxury travel providers, aiming to simplify and connect the fragmented travel industry. Their market position is strong with presence in over 170 countries and a workforce exceeding 3,600 employees. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates advanced analytics and consent management tools. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows good security practices, though it lacks explicit published security policies and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with privacy regulations. The domain registration is consistent with the business history and legitimacy. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture.

W

Webropol

webropol.com

73

Webropol is a well-established technology company founded in 2000, specializing in survey and reporting platforms with advanced AI capabilities. It offers comprehensive solutions for Employee Experience and Customer Experience management, serving a global audience with localized websites in multiple European countries. The company emphasizes GDPR compliance, accessibility standards, and security certifications such as Cyber Essentials. Technically, the website is built on WordPress with modern SEO and accessibility practices, integrating third-party services like Cookiebot for consent management and Klaviyo for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. Overall, Webropol presents a professional, trustworthy, and business-focused online presence.

R

re.alto-energy SRL

realto.io

69

Realto.io is a website associated with re.alto-energy SRL, a Belgian company operating in the energy sector since 2019. The website appears to serve as a business platform likely targeting professionals and businesses within the energy industry. The digital infrastructure is based on WordPress CMS with performance optimization via WPRocket and cookie consent management through Cookiebot, indicating a moderate level of digital maturity and GDPR awareness. However, the site lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is basic with HTTPS enabled but missing advanced security headers and DNSSEC, suggesting room for improvement in security hardening. Overall, the website is functional but could benefit from enhanced transparency and security measures to improve trust and compliance.

E

Elia Grid International

eliagrid-int.com

64

Elia Grid International is a specialized company operating in the energy sector, focusing on power transmission solutions and infrastructure consulting. Founded in 2014, the company positions itself as a trusted international partner in the energy transmission market. The website reflects a professional B2B business model targeting energy sector professionals and clients. Technically, the website is built on WordPress with a modern tech stack including Elementor, Yoast SEO, and Cookiebot for consent management. The site is hosted with DNS services on Azure DNS and registered via Combell NV, indicating a stable infrastructure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.

Febelfin Academy is a recognized Belgian financial education provider specializing in accredited training courses, exams, and continuing professional development for financial sector professionals. The website presents a professional and well-structured platform targeting individuals seeking to enhance their financial expertise and career prospects. The business model focuses on educational services with tailored learning solutions and subscription packages. Technically, the site employs modern JavaScript libraries, cookie consent management, and Google Tag Manager for analytics, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration aligns with the business claims, supporting legitimacy and trustworthiness.

V

Vlaams Energiebedrijf (VEB)

veb.be

56

The Vlaams Energiebedrijf (VEB) is a Flemish public sector entity focused on exceeding climate goals through efficient energy management. The website presents a professional and consistent brand image, targeting public sector organizations in Flanders. The business model centers on providing energy efficiency services and climate goal support to governmental bodies. Technically, the site is built on Drupal 10, employs modern web technologies including Google Tag Manager and Cookiebot for analytics and consent management, and is well-optimized for mobile and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is restricted due to DNS Belgium policies, but the domain and website content align with a legitimate public sector organization. Overall, the site is trustworthy, professional, and compliant with privacy norms, though improvements in security policy transparency and vulnerability disclosure are recommended.

D

District09

district09.be

76

District09 is a digital partner organization dedicated to supporting the city of Ghent and its partner organizations in digital and AI transformation initiatives. Established in 2020, it plays a pivotal role in enabling smart city services and ensuring digital availability for the city. The website reflects a professional and consistent brand presence, targeting government entities and local stakeholders. Technically, the site is built on Drupal 11, leveraging modern web technologies and analytics tools such as Google Tag Manager and Cookiebot for privacy compliance. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Contact information is transparent and easily accessible, enhancing business credibility.

H

Hubwayz

innstantconnect.com

44

Hubwayz is a newly founded (2024) technology company specializing in providing a comprehensive travel technology platform for travel companies such as wholesalers, bed banks, OTAs, and DMCs. Their platform offers a wide range of services including hotel API aggregation, marketplace, payment solutions, and profit growth tools, positioning them as a competitive player in the travel technology sector. The website is professionally designed using WordPress and hosted on AWS infrastructure, leveraging modern JavaScript libraries and marketing tools such as HubSpot and Cookiebot for analytics and compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and security headers are not explicitly observed. The domain registration is consistent with the business claims, registered transparently via Amazon Registrar in 2024. Overall, the website demonstrates a solid technical foundation and business credibility but lacks visible privacy and terms of service policies, which are recommended for compliance and trust.

O

Oy Apotti Ab

apotti.fi

76

Oy Apotti Ab operates a specialized social and healthcare information system platform in Finland, integrating social and healthcare data into a unified system. The company targets healthcare professionals and organizations, positioning itself as an important regional player in Finnish healthcare IT. The website reflects a professional and consistent brand image with good content quality and clear focus on its healthcare sector services. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, Hotjar, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Overall, the site is trustworthy and well-maintained, with moderate user tracking balanced by GDPR-compliant consent management. However, the absence of explicit privacy policy, terms of service, and incident response information suggests areas for improvement in transparency and compliance documentation.

I

International Society of Ultrasound in Obstetrics & Gynecology

isuog.org

65

The International Society of Ultrasound in Obstetrics & Gynecology (ISUOG) operates as a professional membership association and charity dedicated to advancing research, education, and standards in ultrasound within the fields of obstetrics and gynecology. The organization targets medical professionals, researchers, and educators globally, providing educational resources, research promotion, and hosting events to improve women's health outcomes. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website employs modern frontend technologies including Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO and accessibility features, though some accessibility aspects could be enhanced. Performance is moderate, and the site uses HTTPS with a solid SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. However, explicit security headers are not detected, and no public security policy or incident response contacts are available, which could be improved to enhance trust and compliance. The WHOIS data is unavailable or privacy protected, which is typical for professional organizations, and no suspicious indicators are present. Overall, ISUOG's website is a credible and professional platform with a strong focus on privacy compliance and user consent. Strategic recommendations include adding explicit security headers, publishing a security policy, and providing clear contact information for incident response to further strengthen the security posture and user trust.

V

VISITWallonia

visitwallonia.es

59

VISITWallonia is a regional tourism promotion website targeting Spanish-speaking tourists interested in the Wallonia region of Belgium. The site provides comprehensive travel information, guides, and event details to facilitate tourism in the area. It is positioned as an official tourism portal with a consistent brand and good content quality. Technically, the site is built on Drupal 7 and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Matomo for analytics, indicating a moderate level of digital maturity. The website is accessible, mobile-optimized, and SEO-friendly, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a professional and trustworthy front for tourism promotion, but the absence of WHOIS data limits full domain legitimacy verification.

V

VISITWallonia

visitwallonia.it

59

VISITWallonia.it is the official Italian-language website of the Belgian Wallonia Tourism Office, providing travel ideas, brochures, and regional tourism information. The site targets Italian-speaking tourists interested in visiting Wallonia, Belgium, and serves as a government-backed tourism promotion platform. The website is built on Drupal 7 and integrates modern tools such as Cookiebot for cookie consent management, Google Tag Manager, and Matomo Analytics for tracking and marketing purposes. The technical infrastructure is solid with good mobile optimization and SEO practices, although some security headers could be improved. Security posture is good with HTTPS enforced and no visible vulnerabilities, but the absence of DNSSEC and security.txt indicates room for enhancement. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements, though explicit privacy and terms of service policies are not clearly found in the provided content.

V

VISITWallonia

visitwallonia.fr

61

VISITWallonia is the official tourism office website for the Wallonia region in Belgium, providing comprehensive travel information, itineraries, and cultural highlights to tourists and travelers. The website targets a broad audience including families, couples, and European weekend travelers. It operates on a Drupal 7 CMS platform with integrations for Google Tag Manager, Cookiebot for cookie consent, and Matomo for analytics, reflecting a mature digital infrastructure. The site employs modern consent mechanisms and respects GDPR compliance through Cookiebot, although explicit privacy and terms of service pages were not found in the provided content. Security posture is strong with HTTPS enforced and domain registration status indicating legitimacy and stability. Overall, the website presents a professional and trustworthy front for tourism promotion, with good content quality and user experience.

F

Flywire

flywire.com

69

Flywire is a global payments and software company specializing in providing a comprehensive payments platform, a global payment network, and vertical-specific software solutions. The company targets businesses and organizations that require efficient and secure global payment processing. Flywire positions itself as a leader in the finance and technology sectors, offering tailored payment solutions that address complex payment challenges worldwide. The website reflects a mature enterprise-level digital presence with professional design, clear navigation, and strong branding consistency. Technically, Flywire employs modern web technologies including Google Tag Manager, Marketo, Optimizely, and Cookiebot, ensuring robust marketing, analytics, and privacy compliance capabilities. The site is hosted likely behind Cloudflare infrastructure, leveraging security and performance optimizations. Security posture is strong with HTTPS enforcement, comprehensive security headers, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. The absence of WHOIS data reduces transparency but is common for enterprise domains using privacy protection. Overall, Flywire’s website demonstrates a high level of professionalism, security, and compliance, suitable for its enterprise clientele.

W

Wallabies Travel

wallabiestravel.com.au

71

Wallabies Travel is a specialized travel agency focused on providing rugby fans with tailored travel packages to major rugby events, including the British & Irish Lions Tour 2025 and other Wallabies fixtures. As the official travel partner for Rugby Australia, the company holds a strong market position within the sports travel niche in Australia. Their offerings include premium seating and comprehensive tour packages, targeting rugby enthusiasts seeking immersive event experiences. Technically, the website employs a modern tech stack including AngularJS, jQuery, Google Maps API, and Vimeo integration, supported by Cookiebot for consent management and Raygun for error monitoring. The site is mobile-optimized with good SEO practices and moderate performance. However, some improvements in accessibility and security headers could enhance the technical maturity. From a security perspective, the site enforces HTTPS, uses secure forms with anti-forgery tokens, and manages cookie consent effectively. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and user trust.

D

District09

gent.be

75

The website stad.gent is the official digital portal for the city of Ghent, Belgium, managed by the organization District09. It serves as a comprehensive platform offering a wide range of municipal services and information to residents and visitors, including citizen services, cultural activities, sports, mobility, education, business support, environmental initiatives, and local governance. The site is multilingual and designed to be accessible and user-friendly, reflecting a mature digital presence for a government entity. Technically, the site is built on Drupal 10, integrates Google Tag Manager, Google Optimize, and Cookiebot for analytics and consent management, and is hosted by Combell NV. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled, representing a minor security gap. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. Overall, the site demonstrates high professionalism and trustworthiness appropriate for a government service portal.

S

Stad Gent

klimaatstad.gent

65

Stad Gent operates an official municipal website focused on climate action, sustainability, and environmental initiatives targeting residents and local businesses. The site provides comprehensive information on climate ambitions, energy saving, green neighborhood projects, and sustainable business support. The technical infrastructure is modern, leveraging Drupal 10 CMS, with integrations for analytics, cookie consent, and live chat, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its government mandate.

S

Stad Gent

stad.gent

76

Stad Gent operates as the official municipal government portal for the city of Ghent, Belgium, providing a wide range of public services and information to residents and visitors. The website is well-structured, multilingual, and offers comprehensive access to civil affairs, cultural activities, mobility, education, business support, and social welfare services. The site leverages modern web technologies including Drupal 10, Google Tag Manager, and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the website demonstrates a mature digital presence suitable for a large government entity, with good privacy compliance and user experience.

S

Select

selecthr.be

63

Select is a Belgian human resources and recruitment consultancy firm specializing in providing HR services and recruitment solutions to businesses. The website positions itself as a specialist in human resources and recruitment, targeting companies and professionals seeking expert consultancy and staffing services. The digital presence is supported by modern web technologies including Google Analytics, Cookiebot for cookie consent management, and Herefish for marketing automation, indicating a moderate level of digital maturity. The website is well-structured with good content quality and mobile optimization, providing a professional user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit privacy policy pages suggests room for improvement in compliance and security best practices. The domain WHOIS data is restricted, which is common for small businesses to protect privacy, but limits transparency. Overall, the website represents a legitimate and professional business with moderate risk and good operational security practices.

S

Starfisk

starfisk.com

60

Starfisk is a technology company specializing in digital transformation solutions including software development, DevOps, cloud infrastructure, IT consulting, AI, and data services. Positioned as a trusted digitalisation partner, Starfisk serves businesses aiming to innovate and grow through tailored IT solutions. The website demonstrates a professional and modern digital presence with multilingual support and strong client case studies. Technically, the site is built on WordPress with modern plugins and scripts, optimized for performance and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA on contact forms, and cookie consent management, though explicit security headers and published security policies are absent. WHOIS data is unavailable, suggesting recent domain registration or privacy concerns, which slightly impacts trust. Overall, Starfisk presents a credible and professional business with room for enhanced security transparency.

E

EUHA Alliance

euhalliance.eu

58

The European University Hospital Alliance (EUHA) is a collaborative network of eleven leading university hospitals across Europe, focused on promoting excellence and innovation in healthcare, research, and education. The alliance aims to improve health outcomes and support sustainable healthcare systems in Europe by sharing best practices, facilitating professional exchanges, and collaborating on research and policy advice. The website reflects a mature and professional organization with a clear mission and strong partnerships with major European hospitals. Technically, the website is built on WordPress using the Elementor page builder, integrating modern web technologies such as Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-structured with good SEO practices, mobile optimization, and accessibility considerations, although some accessibility features could be enhanced. Performance is moderate, with a clean design and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to EURid privacy policies, but the website's professional presentation and reputable partner links indicate high legitimacy. Overall, EUHA's website demonstrates a strong digital presence aligned with its healthcare collaboration mission, with room for improvement in security policy transparency and technical security hardening.

The website 'Proiect: Start în Antreprenoriatul Social' represents a newly launched social entrepreneurship project funded by the European Social Fund, targeting vulnerable rural populations in Romania. The project aims to improve labor market access and promote independent social economy activities through integrated services including training, business plan contests, and non-reimbursable funding for selected social enterprises. The website serves as an informational and engagement platform for potential beneficiaries and partners, with a clear focus on social impact and rural development. Technically, the website is built on WordPress with modern technologies such as React, jQuery, and Google Tag Manager. It employs accessibility features and SEO optimizations, ensuring good user experience and mobile responsiveness. Hosting is provided by Space Ro SRL, a legitimate Romanian hosting provider. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the project timeline and business claims, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, suitable for its social project purpose. Strategic improvements could include enhanced security headers, explicit security policies, and more direct contact information to strengthen trust and incident readiness.

N

Netwerk Architecten Vlaanderen

nav.be

70

Netwerk Architecten Vlaanderen (NAV) is a Flemish professional community focused on connecting and strengthening professionals within the architecture sector. The website serves as a platform for news, opinions, publications, and dossiers relevant to architecture in Flanders. NAV positions itself as a leading growth community for architecture professionals in the region, offering networking and informational services. The website is primarily in Dutch and targets professionals in the Flemish architecture community. Technically, the website employs modern web technologies including Alpine.js for interactivity, Cookiebot for cookie consent management, Google Analytics for visitor tracking, and reCAPTCHA for bot protection. The presence of Craft CMS cookies suggests the use of Craft CMS as the content management system. The site is mobile optimized and uses HTTPS with appropriate security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, implementing CSRF protection cookies, and managing user consent for cookies. However, there is no publicly visible security policy or incident response information, which could be improved to enhance transparency and trust. The WHOIS data is restricted and not publicly available, but the website content and security posture suggest legitimacy. Overall, NAV presents a professional and trustworthy online presence for its community. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and providing clearer contact information for privacy and security inquiries to further strengthen trust and compliance.

mediarte is a specialized information platform focused on the Belgian audiovisual, film, and digital industry. It provides industry news, resources, and event information targeted at professionals and enthusiasts within this niche sector. The website positions itself as a key resource for Belgian audiovisual industry stakeholders, offering curated content relevant to this market segment. Technically, the site is built on Drupal CMS and leverages modern web technologies including Google Tag Manager, Cookiebot for consent management, and Typekit fonts. The site is mobile optimized and uses HTTPS, indicating a baseline of digital maturity. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks visible security headers in the provided data, suggesting room for improvement in security hardening. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and technical setup appear professional and trustworthy. Overall, mediarte presents a moderate risk profile with good compliance and security practices, though improvements in transparency and security headers are recommended.

V

VLAIO

vlaio.be

72

VLAIO is the official Flemish government agency dedicated to supporting entrepreneurs and fostering innovation within the Flanders region of Belgium. The website serves as a comprehensive portal for business support services, funding opportunities, and entrepreneurial guidance. It targets business owners and startups seeking assistance in innovation and growth. The site is well-branded and consistent with government standards, reinforcing its authoritative position in the market. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery UI and Cookiebot for cookie consent management. Analytics are handled via Piwik PRO, indicating a focus on privacy-compliant data collection. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. From a security perspective, the site enforces HTTPS and implements a robust cookie consent mechanism. However, there is room for improvement in security headers and explicit incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer contact information for security incidents to further strengthen trust and resilience.

H

Hendi

hendi.com

74

Hendi.com is the online presence of Hendi, a well-established manufacturer and distributor of professional catering equipment, primarily serving the hospitality industry. The company has a long-standing domain registration dating back to 1997, indicating a mature business. The website is professionally designed with good navigation and mobile optimization, leveraging modern JavaScript technologies and performance monitoring tools such as New Relic and Google Analytics. Cookie consent is implemented via Cookiebot, reflecting attention to privacy compliance, although no explicit privacy policy or terms of service were found in the provided content. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and publishing security policies. No contact information or incident response details were detected, which could be enhanced to improve trust and compliance. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

P

Pinti Inox S.p.A.

pintinox.com

54

Pinti Inox S.p.A. is a well-established Italian manufacturer and retailer of stainless steel kitchenware products, including cutlery, pots, and knives, serving both professional and domestic markets. The company emphasizes quality, innovation, and the Made in Italy brand, with a history dating back to 1929. Their website is multilingual and professionally designed, targeting professional chefs, the Ho.Re.Ca. sector, and home consumers. Technically, the site is built on WordPress with the Divi theme, uses modern JavaScript libraries, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS and privacy policies in place, though some security headers could be improved. The WHOIS data for the domain is missing, which is unusual and slightly reduces trust, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility.

A

Association of Colleges

aoc.co.uk

68

The Association of Colleges (AoC) is a prominent UK-based membership organization representing a wide range of colleges across the country. The website serves as a comprehensive portal offering information about the organization's services, policy advocacy, training, recruitment consultancy, and research activities. It targets educational institutions, policymakers, and professionals within the further education sector. The site is well-structured with clear navigation and a professional design, reflecting its position as a leading voice in the education sector. Technically, the website employs modern web technologies including Craft CMS, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. The presence of CSRF tokens and HTTPS indicates a focus on security best practices. The site is mobile-optimized and accessible, with good SEO and performance characteristics. Analytics and tracking are implemented responsibly with user consent mechanisms. From a security perspective, the site uses HTTPS and includes some security headers and CSRF protections. However, explicit HTTP security headers like Content-Security-Policy and X-Frame-Options are not evident in the provided data. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is found. The WHOIS data query failed due to querying the subdomain rather than the domain, so no registrar or registration details are available. Despite this, the website's professional appearance and consistent branding suggest legitimacy. Overall, the site presents a low risk profile with good business credibility and technical implementation. Recommendations include enhancing HTTP security headers, publishing security and incident response policies, and adding vulnerability disclosure information to improve transparency and trust.

P

PlayHQ

playhq.com

75

PlayHQ is a technology platform specializing in community sports league management, registration, and scheduling, primarily serving Australia and New Zealand. The platform offers a seamless, mobile-first digital experience designed to replace legacy systems and spreadsheets, targeting sports organizations, clubs, and players. It supports multiple sports including AFL, basketball, cricket, hockey, netball, and football, positioning itself as a leading solution in the community sports sector. Technically, PlayHQ employs modern web technologies such as React, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The website is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and comprehensive content. The platform integrates analytics and marketing tools while maintaining good privacy compliance with visible privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses secure login and signup forms. While explicit security headers are not fully confirmed, the overall SSL configuration is good. No critical vulnerabilities or exposed sensitive data were detected. However, recommendations include enhancing security headers, improving accessibility, and establishing a public vulnerability disclosure policy. Overall, the website demonstrates a mature digital presence with strong business credibility and technical implementation. The lack of WHOIS data transparency slightly reduces trust but does not significantly impact the legitimacy of the platform. Strategic improvements in security posture and compliance documentation would further strengthen the platform's trustworthiness and resilience.

D

De Ambrassade

ambrassade.be

66

De Ambrassade is a Belgian non-profit organization focused on youth work, youth information, and youth policy. The website serves as an information hub and event registration platform for youth workers, policy makers, and related stakeholders. It positions itself as a key resource in the youth sector in Belgium, offering training, information, and policy support. The digital infrastructure is built on modern web technologies such as Next.js and React, indicating a contemporary and maintainable platform. The site includes a comprehensive cookie consent mechanism, reflecting awareness of privacy regulations. However, explicit privacy policy and terms of service documents were not detected in the provided content, which is a gap in compliance and transparency. Security posture is generally good with HTTPS enforced, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. WHOIS data is restricted, which is common for privacy protection but limits domain ownership transparency. Overall, the website is professional, safe, and well-targeted to its audience, with moderate technical and security maturity.

S

Sport Ireland

sportireland.ie

58

Sport Ireland is the national authority responsible for the development and promotion of sport in Ireland. It operates as a government agency under the Department of Tourism, Culture, Arts, Gaeltacht, Sport and Media, providing support to athletes, sports organizations, and the wider community to foster participation and excellence in sports. The organization holds a strong market position as the primary governmental body for sport in Ireland, offering funding, policy development, and research services. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices implemented. Performance is moderate, with no significant technical debt or outdated components detected. From a security perspective, the website enforces HTTPS with strong security headers and a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were found. However, the absence of a dedicated security policy or incident response contact information suggests room for improvement in transparency and readiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing explicit security and incident response policies, enhancing transparency with a vulnerability disclosure program, and maintaining continuous monitoring to uphold security standards.

ROMSlot operates as the authoritative voice of the gambling industry in Romania, providing transparency, regulatory information, and industry statistics. The website serves as an informational platform targeting industry stakeholders and the general public interested in gambling facts and legislation. The site is built on WordPress and integrates modern web technologies including Cookiebot for privacy compliance and Google Analytics for traffic analysis. Social media presence on LinkedIn, Facebook, and YouTube supports its outreach and credibility. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though the absence of explicit security headers and visible contact information suggests areas for improvement. The domain WHOIS data is privacy protected by ROTLD, which is typical for Romanian domains and does not raise immediate concerns. Overall, the website demonstrates good professionalism, compliance with GDPR, and a clear business focus on gambling industry advocacy and information dissemination.

B

▷Baumbet.ro – Casa de pariuri si Cazino online

baumbet.ro

71

Baumbet.ro is an online Romanian gambling platform specializing in sports betting and casino games, offering over 130 casino games and competitive betting odds. The website targets Romanian-speaking adult users interested in online gambling. The platform uses modern web technologies including jQuery, SignalR, Google Tag Manager, Hotjar, and Cookiebot for analytics and consent management. The site is mobile optimized and employs HTTPS for secure communications. However, explicit privacy policies and terms of service were not found in the provided content, and no direct contact information is visible, which may impact user trust and compliance. WHOIS data is privacy protected under ROTLD policies, which is common but reduces transparency. Overall, the site presents a professional gambling service with moderate security posture and good technical implementation.

B

BAUM Games

ofertabaum.ro

52

BAUM Games operates a regional gambling and gaming service platform in Romania, offering jackpot games, sports betting, and gaming halls. The website is professionally designed with good navigation and mobile optimization, targeting adults over 18 with appropriate age verification and licensing information. Technically, the site uses AngularJS, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS and consent mechanisms, but lacks advanced security headers and published security policies. Privacy compliance is moderate with cookie consent but no visible privacy or terms of service pages. Overall, the site is legitimate and trustworthy for its business domain but could improve transparency and security documentation.

S

Stanleybet

stanleybet.ro

62

Stanleybet.ro is a Romanian online gambling platform offering sports betting, online casino games, and lottery services. The website targets Romanian-speaking users interested in regulated gambling entertainment. The platform demonstrates a mature digital presence with modern web technologies such as Angular, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-structured with good content quality and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies could enhance trust. WHOIS data is privacy protected as per ROTLD regulations, which is typical for gambling businesses in Romania. Overall, the website presents a professional and trustworthy front for its business operations.

Game World operates as the largest network of gaming halls and casinos in Romania, offering a premium gambling experience with various promotions and events primarily targeting adult customers. The website is professionally designed using WordPress CMS and integrates modern technologies such as jQuery, Slick Slider, and Cookiebot for cookie consent management. The presence of age verification mechanisms and GDPR-compliant privacy policies reflects a mature approach to regulatory compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Overall, the site demonstrates a solid digital presence with good user experience and trust indicators.