Security Directory

T

The University of Oxford

instruct-eric.eu

60

Instruct-ERIC is a pan-European research infrastructure hosted by The University of Oxford, specializing in structural biology. It provides high-end technologies, services, and training to researchers across Europe and globally. The organization holds a strong market position as a leading scientific infrastructure with a comprehensive catalogue of services, training programs, and collaborative projects. The website reflects a professional and well-maintained digital presence, supporting its mission to facilitate scientific research and collaboration. Technically, the website employs a modern technology stack including JavaScript frameworks, Bootstrap, and analytics tools like Matomo. It uses HTTPS with good SSL configuration and integrates security features such as Google reCAPTCHA. However, there is room for improvement in DNS security and security headers. The site is mobile-optimized and offers good accessibility and SEO practices. From a security perspective, the site demonstrates solid practices with encrypted connections and domain transfer protections. The absence of DNSSEC and explicit security policies are noted gaps. Privacy compliance is mostly addressed with a comprehensive privacy policy, though cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, Instruct-ERIC's website is a trustworthy, professional platform supporting a reputable research infrastructure. Strategic improvements in security policies and privacy mechanisms would further strengthen its posture and compliance.

C

Conselho Nacional de Desenvolvimento Científico e Tecnológico

cnpq.br

69

The Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq) is a Brazilian government agency dedicated to promoting scientific and technological development. The website serves as an official portal providing information on research funding, scholarships, scientific dissemination, and public access to government programs. It targets researchers, students, and the general public interested in science and technology within Brazil. The site is part of the gov.br ecosystem and is hosted on government infrastructure, ensuring authenticity and trustworthiness. Technically, the website employs modern web technologies including Plone CMS, jQuery, Swiper.js for carousels, and Font Awesome for icons. It integrates Google Tag Manager for analytics and uses security best practices such as HTTPS enforcement and security headers. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. From a security perspective, the site demonstrates a strong posture with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not prominently available, which could be improved to enhance transparency and trust. Overall, the website is a professional, secure, and reliable government portal with comprehensive content relevant to its audience. It maintains high legitimacy and aligns well with Brazilian government digital standards.

S

Sociedade Portuguesa de Inovação

spieurope.eu

52

Sociedade Portuguesa de Inovação (SPI) is a Portuguese consulting company established in 1996, specializing in innovation, science, technology, and territorial development consulting services. The company has a global presence and targets both private and public sector clients seeking to foster innovation and growth. Their website reflects a professional and consistent brand image with a focus on their key service areas. Technically, the site is built on WordPress with modern plugins such as Elementor and Smart Slider 3, and includes Google Tag Manager for analytics. Security posture is adequate with HTTPS and reCAPTCHA usage, but could benefit from enhanced security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is trustworthy and well-positioned but could improve in privacy and security transparency.

A

ANID

anid.cl

66

ANID is a Chilean government agency dedicated to providing funding to students, researchers, institutions, and entrepreneurial ventures focused on science, technology, and innovation. The website reflects its official status with consistent branding and a professional design. The technical infrastructure is based on WordPress with modern plugins such as Elementor and Yoast SEO, hosted on AWS infrastructure, ensuring reliable performance and good mobile optimization. Security posture is adequate with HTTPS enforced and safe external link handling, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is minimal, with no visible privacy or cookie policies, which is an area for improvement. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy government entity.

V

VTT Technical Research Centre of Finland Ltd.

vttresearch.com

75

VTT Technical Research Centre of Finland Ltd. is a leading European research and innovation organization focused on sustainable growth and applied science. The company offers a wide range of R&D services across multiple industries including energy, healthcare, manufacturing, and ICT. Their website demonstrates a high level of professionalism, with comprehensive service descriptions, structured data, and a strong brand presence. Technically, the site is built on Drupal CMS with modern analytics and cookie consent tools, optimized for accessibility and mobile use. Security posture is good with HTTPS and consent mechanisms, though lacking explicit security headers and published security policies. WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall business credibility and content quality remain strong.

C

Consiglio Nazionale delle Ricerche

cnr.it

66

The Consiglio Nazionale delle Ricerche (CNR) is Italy's national public research council, operating across multiple scientific and technological domains including biomedicine, chemistry, environment, ICT, physics, and humanities. The website serves as a comprehensive portal for research activities, organizational information, news, events, and services targeting researchers, businesses, citizens, schools, journalists, and administrative personnel. It holds a strong market position as a key national research institution with international relevance. Technically, the website is built on Drupal 7 CMS with jQuery 1.9 and Bootstrap frameworks, supplemented by Font Awesome icons and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and well-structured, though the use of outdated CMS and libraries poses potential security risks. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, HTTPS is enforced, and some security best practices are observed, including disabling cookies in analytics. However, the outdated Drupal version and jQuery library represent vulnerabilities. The site lacks advanced security headers and publicly available incident response or vulnerability disclosure policies. Privacy compliance is strong with comprehensive privacy and cookie policies, though no explicit cookie consent mechanism is detected. Overall, the website is professional, trustworthy, and content-rich, reflecting the stature of a national research institution. Strategic improvements in CMS modernization, security header implementation, and enhanced privacy consent mechanisms would further strengthen its security posture and compliance.

D

Deutsches Zentrum für Luft- und Raumfahrt (DLR)

dlr.de

68

The Deutsches Zentrum für Luft- und Raumfahrt (DLR) is Germany's national research center for aerospace, energy, transportation, and security. It operates as a large, government-affiliated research institution with a strong market position in engineering sciences. The website reflects a mature digital presence with comprehensive content, modern technology stack including React and Plone CMS, and good mobile and accessibility features. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, serving a broad audience including researchers, industry partners, and the public.

I

inwink

foodhoteltech.com

78

Food Hotel Tech is a specialized event platform focused on showcasing technological and sustainable innovations for the hospitality and restaurant sectors. The event is well-established with a strong market presence in France, targeting professionals seeking digital transformation and eco-responsible solutions. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and rich content including videos, speaker profiles, and partner endorsements. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with no visible security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the platform is professional and trustworthy from a business perspective but should enhance its security and privacy disclosures to strengthen user trust and regulatory compliance.

E

EquipHotel - Home of Hospitality

equiphotel.com

66

EquipHotel is an international trade show and event organizer specializing in the hospitality sector, targeting professionals in hotel, restaurant, and collective services. The website positions itself as a key reference event in Paris, France, with a strong brand presence and professional content tailored to industry stakeholders. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, React frameworks, and integrates Google Tag Manager and Adobe Helix for analytics and performance monitoring. Privacy compliance is partially addressed through a cookie consent mechanism, although explicit privacy and terms of service pages were not detected. Security posture is moderate with HTTPS usage and OAuth2 PKCE authentication, but lacks visible security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and security documentation.

Zátiší Catering Group a.s. operates a professionally designed blog focused on healthy lifestyle, recipes, nutrition advice, and gastronomy trends under the brand 'Blog ze Zátiší'. The website serves as a content marketing platform supporting the hospitality group’s brands and services. The technical infrastructure leverages Kentico CMS, Google Tag Manager, and CookieYes for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO and accessibility basics. Security posture is adequate with HTTPS and CSRF protection cookies, but lacks advanced security headers and explicit privacy policy documentation. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding strongly suggest legitimacy. Overall, the site is a trustworthy and professional digital asset for the hospitality group but would benefit from enhanced security and compliance documentation.

B

Bluesoft

bluesoft.cz

81

Bluesoft is a Czech technology service provider specializing in web development, ecommerce, and web applications built on the Kentico platform. The company targets businesses seeking professional digital solutions and positions itself as a niche player in the Czech Republic's technology sector. The website content is professionally presented, with a clear focus on their core services and expertise in Kentico-based projects. Technically, the website employs modern web technologies including Kentico CMS, JavaScript, CSS, and integrates multiple third-party services such as Google Tag Manager, Cookiebot for cookie consent management, LinkedIn Insight Tag, and Google reCAPTCHA for security. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs reCAPTCHA to mitigate bot activity. Security headers appear to be in place, though explicit Content-Security-Policy headers were not confirmed. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure page suggests room for improvement in transparency and security maturity. Overall, the website is safe, professional, and compliant with privacy regulations. The lack of publicly available WHOIS data indicates privacy protection, which is typical for small technology firms. The site does not exhibit any adult or questionable content and maintains a high trustworthiness rating. Strategic recommendations include enhancing security transparency, publishing incident response information, and auditing third-party scripts regularly to maintain security posture.

M

Mobil

mobil.eg

71

Mobil is a globally recognized brand specializing in fuels, lubricants, and advanced technology services primarily serving business and consumer markets. As a subsidiary of ExxonMobil, it holds a strong market position in the energy sector, offering products that enhance equipment performance and efficiency. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for a broad audience including industrial clients and end consumers. Technically, the site leverages modern frameworks, cloud hosting, and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is robust with HTTPS enforcement, content security policies, and cookie consent mechanisms, although some security-related pages like incident response or vulnerability disclosure are not publicly visible. Overall, the site is trustworthy and professionally maintained, though WHOIS data is redacted, which is common for large corporate domains but reduces transparency. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance trust and compliance.

M

Mobil Canada

mobilfuel.ca

70

Mobil Canada operates a professional and well-branded website focused on providing fuel and convenience store services integrated with the PC Optimum loyalty program. The site reflects a large energy sector business with strong ties to ExxonMobil, leveraging modern web technologies and cloud hosting. The technical infrastructure is mature, utilizing Sitecore CMS, AWS hosting, and multiple third-party marketing and analytics tools. Security posture is strong with HTTPS, CSP headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data suggests privacy protection, which is justified for a corporate brand. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

E

Esso

esso.no

73

Esso Norway operates a network of energy stations offering fuel, electric vehicle charging, car wash, coffee subscriptions, and convenience food/snacks. The website is professionally designed, targeting general consumers in Norway, and is part of the ExxonMobil corporate family. The technical infrastructure leverages modern technologies including AWS hosting, Sitecore CMS, and integrates multiple third-party marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent. Security posture is strong with HTTPS enforced and comprehensive security headers implemented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No critical vulnerabilities or suspicious indicators were found. Overall, the website reflects a mature digital presence consistent with a large multinational energy retailer.

E

Esso

esso.nl

71

Esso Netherlands operates as a major fuel retail brand under the ExxonMobil umbrella, providing fuel stations, motor oils, payment cards, and loyalty programs targeted at consumers and businesses in the Netherlands. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. The technical infrastructure leverages Sitecore CMS, AWS hosting, and integrates multiple third-party services including OneTrust for cookie consent, Google Analytics, and various mapping and video platforms. Security posture is strong with HTTPS enforcement, comprehensive Content Security Policy, and cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in the energy retail market.

E

Esso

esso.be

71

Esso Belgium operates a professional and well-branded website focused on fuel retail services, motor oils, payment cards, and loyalty programs. The site is part of the global ExxonMobil network, targeting Belgian consumers and businesses. The digital infrastructure leverages modern marketing and analytics technologies including OneTrust for privacy compliance and Google Tag Manager for analytics. The website demonstrates good technical implementation with a strong security posture, including HTTPS enforcement and a strict Content Security Policy. Privacy compliance is robust with cookie consent mechanisms and GDPR considerations. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly evident. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or content blocking.

R

RIDGID

ridgid.com

67

RIDGID is a well-established brand specializing in manufacturing rugged, professional-grade tools primarily for trades such as plumbing, electrical, and welding. The website reflects a mature digital presence with comprehensive product catalogs, support services, and a strong connection to its parent company, Emerson Electric Co. The technical infrastructure leverages modern JavaScript frameworks, analytics, and marketing tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and standard security practices, though some enhancements in security headers and incident response visibility could improve resilience. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

G

Gustav Klauke GmbH

klauke.com

68

Gustav Klauke GmbH is a well-established German manufacturer specializing in electrical connection technology and professional tools such as pressing, cutting, and hydraulic safety tools. The company operates globally and is part of the Emerson Electric Co. portfolio, which includes subsidiaries like Greenlee and RIDGID. Their product range exceeds 10,000 items, targeting industrial, commercial, and renewable energy sectors. The website is professionally designed, mobile-optimized, and rich in content, supporting a strong brand presence and customer engagement through multiple channels including social media and detailed product catalogs. Technically, the website employs modern JavaScript frameworks including AngularJS and Vue.js, uses Google Analytics and Tag Manager for tracking, and is built on Orchard CMS. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not found. Privacy compliance is robust, with clear links to privacy and cookie policies hosted on the parent company's domain. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS lookup failed to retrieve domain registration details, which is unusual and lowers the domain legitimacy score. Despite this, the association with Emerson and the professional website content strongly support the site's authenticity. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional online presence for Klauke.

G

Greenlee

greenlee.com

67

Greenlee is a well-established manufacturer and distributor of professional tools, primarily serving electricians, utility workers, and contractors. With over 150 years of history and as a subsidiary of Emerson Electric Co., Greenlee holds a strong market position in the manufacturing sector, offering a broad portfolio of products and services including tool manufacturing, product support, and training. The website reflects a mature digital presence with professional branding, comprehensive product information, and integration with parent and partner brands. Technically, the site uses modern web technologies such as jQuery, Materialize CSS, and AngularJS, and is built on Orchard CMS. It is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the strong corporate affiliation and professional presentation.

N

National Instruments

ni.com

74

National Instruments (NI) is a leading enterprise in the technology sector specializing in software-connected automated test and measurement systems. As part of Emerson, NI holds a strong market position providing hardware and software solutions primarily targeting engineers and industrial automation professionals. The website reflects a mature digital presence with comprehensive content, professional design, and clear branding consistent with a large enterprise. The business model focuses on B2B sales of test systems and measurement instruments, supporting sectors such as manufacturing and transportation. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, JavaScript frameworks, and advanced analytics and consent management tools like Dynatrace and OneTrust. The site is mobile optimized, accessible, and SEO friendly, indicating a high level of digital maturity. Performance is moderate with good security configurations including HTTPS and security headers. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly disclosed, which could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website and business demonstrate high credibility and trustworthiness. The lack of public WHOIS data is due to privacy protection, which is justified for an enterprise of this scale. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.

M

MOTOR Information Systems

motor.com

68

MOTOR Information Systems, a division of Hearst Business Publishing, operates as a global leader in automotive data solutions, offering a comprehensive suite of software applications, data products, data services, manuals, and insights tailored for various automotive industry segments including service providers, OEMs, parts suppliers, fleets, and technology providers. The company has a long-standing history dating back to 1903 and serves a large client base with a strong market position. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Google Analytics, HubSpot, and CookieYes for privacy compliance. The site demonstrates excellent design, mobile optimization, and accessibility, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and employs standard security headers, but lacks a publicly available security policy or incident response information, which could be improved. The absence of WHOIS registration data is a notable anomaly but does not significantly detract from the overall legitimacy given the strong branding and association with Hearst. Overall, the website is professional, secure, and privacy-conscious, with room for enhanced transparency in security governance.

G

Government Technology Agency

gov.sg

76

gov.sg is the official Singapore government portal managed by the Government Technology Agency, providing authoritative information on government policies, initiatives, and public services. The website serves as a central hub for Singapore residents and the general public to access timely updates on national campaigns such as the QuitVape Programme and economic resilience efforts. It holds a strong market position as the primary government communication channel online. Technically, the site leverages modern web technologies including React and Next.js frameworks, hosted on Akamai infrastructure, ensuring fast performance and excellent mobile optimization. The use of multiple analytics and tracking tools like Google Analytics, Microsoft Clarity, and TikTok Pixel indicates a mature digital analytics strategy, balanced with good privacy practices though lacking explicit cookie consent mechanisms. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers, reflecting a robust security posture. The domain registration data aligns perfectly with the official government ownership, enhancing trustworthiness. However, the absence of a published security policy and incident response contact details suggests room for improvement in transparency and incident readiness. Overall, gov.sg demonstrates a high level of professionalism, trust, and technical maturity, making it a reliable source of government information. Strategic enhancements in privacy compliance and security transparency would further strengthen its position and user trust.

S

Singapore Land Authority

onemap.sg

69

OneMap is a comprehensive government mapping platform operated by the Singapore Land Authority, providing authoritative geographic and property data for Singapore. The website offers a wide range of interactive tools including property queries, land ownership information, transportation routes, drone no-fly zones, and nearby essential services. It serves both the general public and professionals requiring detailed spatial data. The platform is positioned as the official national mapping service, reflecting Singapore's commitment to accessible and accurate geospatial information. Technically, the website employs modern web technologies such as React 18, CesiumJS for 3D mapping, and various JavaScript libraries to deliver an interactive user experience. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Performance is moderate due to the complexity of mapping features. Security is well-considered with HTTPS enforced and several security headers present, but could benefit from enhanced Content Security Policy and explicit cookie consent mechanisms. From a security perspective, the site shows a mature posture with no obvious vulnerabilities or exposed sensitive data. The lack of publicly available WHOIS data is typical for government domains and does not detract from the site's legitimacy. Privacy compliance is basic, with a privacy policy and terms of use available, but no cookie consent banner detected. Overall, the site is trustworthy and professional, reflecting its government ownership and public service mission. Strategically, OneMap is a critical infrastructure component for Singapore's digital government ecosystem, supporting various stakeholders with essential geospatial data. Continued enhancements in privacy compliance and security best practices will further strengthen user trust and regulatory alignment.

Sitecore is a well-established enterprise technology company specializing in cloud-native digital experience platforms and content management systems. Their website reflects a mature digital presence with comprehensive product offerings such as Sitecore XM Cloud, Personalize, and OrderCloud, targeting brands and enterprises seeking advanced digital marketing and content solutions. The company demonstrates strong market positioning as an industry leader with a focus on composable architecture and AI-driven personalization. Technically, the website leverages modern frameworks like Next.js and integrates multiple analytics and marketing tools including Google Tag Manager and Bing Ads. The site is well-optimized for performance, mobile responsiveness, and SEO, indicating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not prominently published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by detailed contact information, customer stories, and consistent branding. WHOIS data is unavailable due to privacy protection, which is typical for enterprise domains and justified in this context. Overall, Sitecore's website presents a professional, secure, and trustworthy digital front that aligns with its enterprise stature. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance transparency and trust further.

E

ExxonMobil Corporation

exxonmobil.com

74

ExxonMobil Corporation is a leading global energy company focused on responsibly meeting the world's energy needs through pioneering research, technology, and sustainable solutions. The company operates across multiple sectors including energy supply, transportation fuels, industrial solutions, and materials for modern living. The website reflects a mature, enterprise-level business with a strong global presence and diversified brand portfolio including Mobil, Esso, and ExxonMobil Chemical. Technically, the website employs modern web technologies, is mobile optimized, and integrates privacy and cookie consent mechanisms effectively. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting ExxonMobil's market position as a reputable energy sector leader.

The website at dotdigital-pages.com currently serves only a 404 error page indicating that the intended content is missing or the page never existed. There is no visible business information, contact details, or policies available on the site. The domain is registered with 1API GmbH since 2018 and is valid until 2028, showing a consistent registration history. However, the lack of active content and absence of security or privacy policies significantly limit the ability to assess the business or security posture. Technically, the site does not show signs of a WAF or security challenge but lacks modern web features and optimization. Security posture is weak due to missing HTTPS and security headers information. Overall, the site is non-functional in its current state and requires restoration of content and implementation of standard security and compliance measures.

M

Mobil

mobil.com

71

Mobil is a globally recognized brand specializing in fuels, lubricants, and related services, operating under the ExxonMobil corporate umbrella. The website reflects a mature digital presence with a focus on business and consumer audiences interested in energy products. The site is well-structured, professionally designed, and optimized for multiple devices, indicating a high level of digital maturity. Technically, the site leverages modern frameworks, cloud hosting on AWS, and integrates various marketing and analytics tools such as Google Tag Manager and OneTrust for privacy compliance. Security posture is strong with HTTPS enforced, comprehensive security headers, and a robust content security policy. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, WHOIS data is unavailable, likely due to corporate privacy measures, which slightly impacts domain transparency but does not detract from overall trustworthiness. Strategic recommendations include publishing explicit security policies and vulnerability disclosure information to enhance transparency and trust.

M

Mobil™ India

mobil.co.in

62

Mobil™ India, a subsidiary of ExxonMobil, operates a comprehensive website offering synthetic and mineral engine oils, lubricants for various vehicles, and industrial applications. The site targets both individual motorists and businesses, positioning itself as a leading lubricant brand in India with strong global backing. The website demonstrates a mature digital infrastructure with modern technologies, including Sitecore CMS, AWS hosting, and advanced analytics and marketing tools. Security posture is robust with HTTPS, strong security headers, and a comprehensive cookie consent mechanism via OneTrust. Privacy policies are detailed and GDPR compliant, reflecting a strong commitment to data protection. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

O

Ontraport

ontraport.com

62

Ontraport is a mature SaaS company founded in 2010, providing an enterprise-level CRM and marketing automation platform tailored for mid-sized businesses. The platform integrates marketing, sales, payments, and customer support into a unified system, enabling businesses to scale efficiently without the complexity and cost of larger enterprise solutions. The website reflects a professional and consistent brand with clear messaging targeting marketing, sales, operations, and support teams. Technically, the site uses a proprietary CMS (Ontraport Pages v3) hosted on AWS infrastructure, integrating multiple modern analytics and marketing tools such as Google Analytics, TikTok Pixel, and LinkedIn Insight. The site is mobile-optimized and designed for good user experience and SEO. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the site is trustworthy and professionally maintained, suitable for its target audience.

K

Klinika Cellthera

celltheraclinic.cz

48

Klinika Cellthera is a specialized healthcare provider focused on regenerative medicine, offering advanced diagnostic and therapeutic services such as stem cell therapies, immunology support, oncology adjunct treatments, and lifestyle counseling. The clinic positions itself as a leading provider in the Moravia region with over 25 years of experience, targeting patients seeking innovative and holistic medical solutions. The website is professionally designed, content-rich, and compliant with GDPR and cookie regulations, providing clear contact information and patient testimonials that enhance trust. Technically, the site runs on WordPress with modern plugins and integrates Google Analytics and retargeting services, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the site is trustworthy, well-maintained, and aligned with its business goals.

T

TIC BRNO, příspěvková organizace

gotobrno.cz

65

Go To Brno is the official tourism portal for the city of Brno, operated by TIC BRNO, a public organization. The website serves as a comprehensive guide offering information on cultural events, gastronomy, sightseeing, and practical visitor information. It targets tourists, residents, and visitors interested in exploring Brno's authentic atmosphere and attractions. The portal is well-positioned as the authoritative source for Brno tourism, providing key services such as event calendars, interactive maps, and tourist cards. Technically, the website is built on WordPress and leverages modern JavaScript libraries including jQuery, Leaflet for maps, and Algolia for search functionality. It integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, all managed with user consent via the Complianz GDPR plugin. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration insights, but the official nature of the site and consistent branding support its legitimacy. Overall, Go To Brno presents a professional, secure, and privacy-compliant tourism portal with strong business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

D

Destinace Brněnsko

destinace-brnensko.cz

53

Destinace Brněnsko is a destination management organization focused on promoting tourism and managing the Brno region and its surroundings. The website presents a professional image consistent with a small hospitality sector business, offering services related to regional tourism development and promotion. The technical infrastructure is based on the Wix platform, leveraging standard web technologies such as JavaScript, CSS, and HTML5, providing a moderate level of performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data and contact information reduces overall trust and business credibility. Strategic improvements in privacy compliance, security best practices, and transparency are recommended to enhance trust and compliance.

S

Sectigo Limited

positivessl.com

72

PositiveSSL.com is the official website for PositiveSSL certificates, a product line of Sectigo Limited, one of the world's largest commercial certificate authorities. The site offers a range of SSL certificates including domain validated, organization validated, extended validation, and code signing certificates. It targets businesses and website owners seeking cost-effective and trusted digital security solutions. The website is professionally designed with clear navigation, comprehensive product information, and multiple purchase options, reflecting a mature e-commerce business model with a strong market position in the digital security industry. Technically, the website employs modern JavaScript libraries such as RequireJS, jQuery, and Slick Carousel, alongside marketing and analytics tools including Google Tag Manager, Visual Website Optimizer, HubSpot, and Cookiebot. The site is mobile optimized and uses HTTPS with strong security headers, indicating a good digital maturity level. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site demonstrates strong SSL configurations and uses WebTrust certified certificates, enhancing trustworthiness. Security best practices such as HTTPS enforcement and security headers are in place. However, there is no explicit security policy or vulnerability disclosure page, and no data protection officer contact information is found, suggesting areas for compliance enhancement. Overall, the website presents a low-risk profile with high professionalism and trust indicators. The missing WHOIS data slightly reduces trust but is mitigated by the strong brand presence and security certifications. Strategic recommendations include publishing a security policy, vulnerability disclosure, and improving accessibility to further strengthen the security posture and compliance.

A

Avisos de Ocasión EL NORTE

avisosdeocasion.com

57

Avisos de Ocasión EL NORTE operates a regional online classifieds platform focused on real estate listings including sales, rentals, and transfers of houses, apartments, land, and commercial properties primarily in Monterrey, Mexico. The website offers a broad range of classified categories and integrates advertising services. The platform targets general consumers and real estate investors in the Monterrey metropolitan area. Technically, the site uses modern JavaScript libraries such as Slick Carousel and Google Tag Manager for analytics and marketing, with a responsive design optimized for mobile devices. However, the site lacks visible privacy and cookie policies and does not show security headers in the provided data, which are areas for improvement. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the professional content and clear contact information. Overall, the site is functional and trustworthy from a user perspective but requires enhancements in security and compliance documentation.

C

Church & Dwight Co., Inc.

naircare.com

60

Nair™ is a well-established brand specializing in hair removal products including creams, waxes, and depilatories, targeting a broad consumer audience. The website positions itself as a leading brand with over 80 years of expertise, offering a variety of products and educational content to support consumer needs. The parent company is Church & Dwight Co., Inc., a large retail entity. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Bazaarvoice. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. The absence of WHOIS data reduces transparency but the overall brand trust and content quality remain strong. Strategic improvements in security posture and transparency would enhance trust further.

XTRA™ Laundry is a consumer brand focused on laundry products, likely detergents, marketed through an e-commerce style website featuring product information and customer testimonials. The website uses common marketing and analytics technologies such as Google Tag Manager, Bazaarvoice for reviews, and OneTrust for cookie consent. The technical infrastructure is moderate with Bootstrap and Owl Carousel frameworks, but lacks advanced CMS or hosting details. Security posture is basic with HTTPS implied but no visible security headers or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. Privacy compliance is minimal with no privacy policy found, though cookie consent is implemented. Overall, the website is functional but lacks critical trust and compliance elements.

C

Church & Dwight Co., Inc.

vitafusion.com

64

Vitafusion is a well-established brand specializing in gummy vitamins and supplements for adults and children, operating under the parent company Church & Dwight Co., Inc. The website offers a comprehensive product catalog, educational content, and a user-friendly e-commerce experience. The brand positions itself strongly in the health and wellness market with a focus on delicious, convenient nutrition solutions. Technically, the site employs modern JavaScript libraries, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies linked to the parent company domain. The absence of WHOIS data transparency is a minor concern but offset by the professional presentation and trust signals on the site. Overall, the site is secure, compliant, and professionally maintained, serving a broad adult and family audience seeking nutritional supplements.

C

Church & Dwight Co., Inc.

orajel.com

66

Orajel.com is the official website for Orajel™, a well-established oral care brand owned by Church & Dwight Co., Inc. The site provides comprehensive product information, educational resources, customer testimonials, and support channels including a contact form and embedded chat service. The website targets a general audience including adults and children, emphasizing trusted oral care solutions. Technically, the site employs modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly with clear navigation and professional design. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies linked to the parent company. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for corporate brands. Overall, the website is professional, secure, and trustworthy, supporting the brand's market position.

C

Church & Dwight Co., Inc.

batistehair.com

59

Batistehair.com is the official website for Batiste Dry Shampoo, a consumer retail brand specializing in hair care products. The site is owned by Church & Dwight Co., Inc., a large and established corporation in the consumer goods sector. The website offers a range of dry shampoo products, leave-in hair masks, and hair care tips, targeting consumers seeking quick and effective hair refresh solutions. The brand is well positioned in the retail market with award recognition and a strong social media presence. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager, YouTube APIs, and uses OneTrust for cookie consent management. The site is mobile optimized with good SEO practices and moderate performance. Embedded third-party services include Salesforce chat and MikMak for e-commerce affiliate links. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is good with a comprehensive privacy policy hosted on the parent company’s domain. Overall, the website presents a professional and trustworthy front for the Batiste brand. The main risk is the absence of WHOIS registration data, which limits domain transparency. However, the strong brand association and external references mitigate this concern. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining vigilance on third-party scripts.

C

Church & Dwight Co., Inc.

oxiclean.com

58

OxiClean.com is the official website for the OxiClean brand, a leading stain remover and home cleaning product line owned by Church & Dwight Co., Inc. The site offers comprehensive product information, multimedia content including instructional videos, and customer testimonials, targeting consumers seeking effective stain and odor removal solutions. The website is professionally designed with consistent branding and good mobile optimization, reflecting a mature digital presence. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Analytics, and Salesforce chat integration. Privacy compliance is well addressed with a OneTrust cookie consent mechanism and links to comprehensive privacy and terms policies hosted on the parent company’s domain. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved and explicit security policies are absent. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but does not detract from the overall legitimacy given the brand and corporate association. Overall, the website demonstrates a solid business and technical foundation with room for enhanced security disclosures and direct contact information.

C

Church & Dwight Co., Inc.

trojanbrands.com

61

Trojanbrands.com is the official website for Trojan™, a leading and trusted sexual health brand in the United States with a history spanning 100 years. The site offers a range of adult sexual health products including condoms, lubricants, sex toys, and supplements, targeting an adult audience seeking quality and trusted products. The website is professionally designed with consistent branding and clear navigation, supporting a strong market position under the parent company Church & Dwight Co., Inc. The site integrates modern technologies such as Google Analytics, Google Tag Manager, Salesforce chat support, and OneTrust for cookie compliance, reflecting a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and privacy policies linked to the parent company domain, although explicit security headers are not detected in the provided data. The absence of WHOIS data for the domain is unusual and warrants further investigation, but the overall trustworthiness is supported by the brand's established reputation and external references. The site is not blocked by WAF or security mechanisms and is fully accessible.

F

Finishing Touch Flawless™

flawlessbeauty.com

69

Flawlessbeauty.com is an established e-commerce retail website specializing in beauty and personal care products targeted primarily at women. The brand, Finishing Touch Flawless™, has been in operation since 2000, indicating a mature market presence. The website employs modern technologies such as Google Tag Manager, OneTrust for cookie consent, and Bazaarvoice for customer reviews, reflecting a moderate level of digital maturity. The technical infrastructure is hosted via MarkMonitor Inc., a reputable domain registrar and brand protection service, which adds to the business credibility. However, the website lacks visible privacy and terms of service policies in the provided content, which is a compliance gap.

W

Waterpik

waterpik.com

67

Waterpik is a leading brand in the oral health industry, specializing in water flossers, electric toothbrushes, and whitening products. The website presents a professional and consumer-focused platform, targeting individuals seeking dental care products. The brand is positioned as the #1 recommended by dental professionals, indicating strong market presence and trust. Technically, the website employs modern technologies such as Google Tag Manager for analytics and OneTrust for cookie consent, demonstrating a commitment to compliance and user experience. However, the absence of WHOIS data and registrant information raises questions about domain registration transparency. Security posture is moderate, with HTTPS implied but lacking explicit security headers in the provided data. Privacy compliance is basic, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

C

Church & Dwight Co., Inc.

zicam.com

59

Zicam.com is the official website for Zicam, a brand specializing in homeopathic cold remedies and allergy relief products. The site is owned by Church & Dwight Co., Inc., a large healthcare company. The website offers a range of products targeting consumers seeking relief from cold symptoms, nasal congestion, sinus issues, allergies, and immune support. It positions itself as a trusted brand with a focus on homeopathic solutions and transparent communication, including a voluntary product recall notice. Technically, the site is built on WordPress with a legacy jQuery version and uses Google Tag Manager and OneTrust for analytics and cookie consent, respectively. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response policies. WHOIS data for the domain is missing, which reduces trust slightly but is mitigated by the strong brand association and professional site content. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though updating technical components and improving security headers is recommended.

T

TheraBreath

therabreath.com

70

TheraBreath operates a professional e-commerce website specializing in oral health products such as bad breath treatments, teeth whitening, gum health, dry mouth relief, and anticavity solutions. The company targets consumers seeking effective oral hygiene products and maintains a consistent brand presence with a well-structured Shopify-based online store. The website leverages modern technologies and integrates multiple marketing and analytics tools to optimize user engagement and sales. From a technical perspective, the site is built on the Shopify platform using the Dawn theme, incorporating JavaScript libraries like jQuery and Slick Carousel. It employs Google Tag Manager, Facebook Pixel, Klaviyo, and OneTrust for marketing, analytics, and consent management, ensuring GDPR compliance. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and security communication. Overall, the website is trustworthy and professionally maintained, but the lack of WHOIS domain registration data reduces transparency. Strategic recommendations include publishing security and incident response policies, enhancing contact information visibility, and considering a vulnerability disclosure program to strengthen trust and compliance.

H

Hero Cosmetics

herocosmetics.us

67

Hero Cosmetics operates a professional e-commerce platform specializing in acne-prone skincare products, offering customizable acne toolkits and targeted solutions. The company has established a strong market presence with cult-favorite products such as the Mighty Patch and Rescue Balm. The website is built on Shopify, leveraging modern technologies and integrations for marketing, analytics, and customer engagement. The technical infrastructure is robust, with fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS, security headers, and secure payment processing, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

Arrid.com is the official website for the Arrid brand, a well-established personal care product line specializing in deodorants and antiperspirants. The brand operates under the corporate umbrella of Church & Dwight, Inc., a large and reputable consumer goods company. The website presents a professional and consistent brand image, offering detailed product information and clear navigation aimed at general consumers seeking sweat protection solutions. The site integrates standard marketing and tracking technologies such as Google Tag Manager and The Trade Desk pixel, alongside a robust cookie consent mechanism powered by OneTrust, reflecting a commitment to privacy compliance. However, the use of an outdated jQuery version and absence of explicit security headers suggest areas for technical improvement.

V

Viviscal

viviscal.com

76

Viviscal operates a professional e-commerce website focused on hair growth vitamins and hair care products, targeting consumers seeking solutions for thicker, fuller hair. The site is built on the Shopify platform, leveraging a modern tech stack including Google Analytics, Facebook Pixel, TikTok Pixel, Hotjar, Klaviyo, and Yotpo for marketing, analytics, and customer engagement. The website demonstrates good digital maturity with fast performance, mobile optimization, and accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable or protected, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and trust signals. Overall, Viviscal presents a credible and secure online presence with a solid foundation for business growth and customer trust.

T

Toppik.com

toppik.com

76

Toppik.com is a professionally designed e-commerce website specializing in hair building fibers and products for individuals experiencing hair thinning and hair loss. The site targets consumers seeking instant hair volume solutions and positions itself as a leading brand in this niche retail market. The business operates primarily in the United States and leverages Shopify as its e-commerce platform, integrating multiple third-party marketing and analytics tools to enhance customer engagement and operational efficiency. The website demonstrates good content quality, clear navigation, and consistent branding, supporting a positive user experience.

C

Church & Dwight Co., Inc.

replens.com

60

Replens.com is a professionally designed website representing a healthcare brand specializing in vaginal moisturizers and lubricants. The site is linked to Church & Dwight Co., Inc., a large and reputable parent company. The business focuses on providing clinically tested and FDA cleared products aimed at women experiencing vaginal dryness, positioning itself as a trusted and doctor-recommended brand in the women's health sector. The website content is relevant, well-structured, and targets a general adult female audience seeking intimate health solutions. Technically, the site uses modern web technologies including ASP.NET, Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager and MikMak. Privacy compliance is well addressed with a comprehensive privacy policy hosted on the parent company’s domain and an embedded cookie consent mechanism that supports GDPR compliance. However, direct contact information such as emails or phone numbers is not explicitly provided, relying instead on a contact form. The WHOIS data for the domain is unavailable, which raises some transparency concerns, but the overall trust signals and business legitimacy are strong given the association with Church & Dwight. Security posture is moderate with HTTPS implied but lacking explicit security headers or published security policies. Overall, the website presents a low-risk profile with good privacy and compliance practices but could improve transparency and security documentation.