Security Directory

Equitable Holdings, Inc. operates a comprehensive financial services website targeting individuals, financial professionals, and employers. The company offers a broad range of services including retirement planning, life insurance, annuities, employee benefits, and investment management. The website reflects a mature enterprise with a legacy dating back to 1859, positioning itself as a trusted financial partner with strong brand consistency and clear market positioning. Technically, the website employs modern web technologies such as Bootstrap 4, jQuery, and integrates third-party services like Vimeo for video content and Tealium for tag management and analytics. The site is mobile optimized and demonstrates good SEO and accessibility practices, though there is room for improvement in accessibility compliance. From a security perspective, the site enforces HTTPS, uses domain locking statuses, and implements secure form validation. However, DNSSEC is not enabled, and there is no explicit Content-Security-Policy header detected. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

C

Corebridge Financial, Inc.

corebridgefinancial.com

77

Corebridge Financial, Inc. operates a comprehensive financial services website focused on life insurance, annuities, retirement plans, and institutional market solutions. The company targets individuals, financial professionals, employers, and plan participants with tailored portals and resources. The website is built on Adobe Experience Manager and integrates modern marketing and analytics tools such as Adobe Launch, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. The site demonstrates good content quality, professional design, and clear navigation, supporting a strong user experience and trustworthiness. Security posture is solid with HTTPS and a dedicated security statement, though improvements in security headers and incident response contact visibility are recommended. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but the overall digital presence and business information support legitimacy.

ס

סטרים יאכטות

streamyachts.com

52

Stream Yachts (סטרים יאכטות) is a well-established Israeli company specializing in the sale, rental, management, and maintenance of new and used yachts and boats. With nearly two decades of experience, they represent leading international brands and provide comprehensive maritime services to customers domestically and internationally. The website is professionally designed, mobile-optimized, and integrates modern technologies including WordPress, Elementor, and various analytics and marketing tools. SEO is well implemented with structured data and meta tags. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Contact information is clearly presented, including phone, email, and a contact form, supporting good business credibility.

B

Bahçeşehir Üniversitesi

applybau.com

53

ApplyBAU is an educational platform operated by Bahçeşehir University, providing a unique university admission and scholarship system that considers personal talents and projects beyond traditional exam scores. The platform targets prospective students in Turkey and has been operational since 2013, positioning itself as a pioneering admission model in the region. The website is professionally designed, mobile optimized, and integrates multiple social media channels and video content to engage its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, Hotjar, and Microsoft Clarity. Hosting and DNS are managed via Cloudflare, enhancing performance and security. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

B

BAU Global

bauglobal.com

63

BAU Global is a well-established international education network founded in 2014, offering a broad range of academic programs through its universities, liaison offices, language schools, and K12 institutions. The website reflects a mature digital presence with a clear focus on education and cultural exchange, targeting students and academic professionals worldwide. Technically, the site leverages WordPress CMS with modern JavaScript libraries and integrates Google Analytics for user insights. Security posture is adequate with HTTPS and some security headers, though improvements such as DNSSEC and CSP are recommended. Privacy compliance is addressed with visible policies and consent mechanisms. Overall, the site demonstrates a strong business credibility and trustworthy domain registration, supporting its position in the education sector.

V

Vegas

vegas.se

59

Vegas is a well-established gaming entertainment brand operated under Svenska Spel, offering legal value-based gaming machines across approximately 1,400 locations in Sweden. The website targets both players and business partners, providing information on games, responsible gaming, and partnership opportunities. The business model focuses on providing cashless gaming entertainment in hospitality venues, emphasizing player safety and regulatory compliance. The site reflects a strong market position as Sweden's only legal value-based gaming machine provider with a high payout percentage. Technically, the site is built on WordPress with modern SEO and performance optimizations, including Yoast SEO and WP Rocket, and integrates Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are absent. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy operation.

B

Bonanza88

bonanza88asli25.org

61

Bonanza88 is an Indonesian online gambling platform established since 2011, offering a variety of gambling services including bola tangkas, slot online, live casino, judi bola, poker, and togel. The website targets Indonesian players and provides localized content in Bahasa Indonesia. The platform integrates multiple modern web technologies such as jQuery, Google Analytics, Google Tag Manager, OneSignal push notifications, and LiveChat for customer support, indicating a moderate level of digital maturity. The site is mobile optimized and features a custom CMS backend. Security measures include HTTPS usage and CAPTCHA on login forms, but lack visible advanced security headers or explicit cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection common in gambling domains, which slightly reduces trust. Overall, the platform appears functional and moderately professional but would benefit from enhanced security and privacy compliance.

Salus is an NHS-based provider specializing in Occupational Health, Safety, and Return to Work services for both public and private sectors. Operating as a social enterprise within the NHS framework, it is positioned as the largest multidisciplinary occupational health service in the UK. The website reflects this positioning with clear service offerings and NHS affiliations, supported by certifications such as BSI and SEQOHS. The target audience includes employers and employees seeking occupational health and safety solutions. Technically, the website is built on Microsoft SharePoint with jQuery and Google Analytics integration, indicating a moderately mature digital infrastructure but with legacy elements and basic mobile optimization. Security posture is moderate, with HTTPS usage but lacking advanced security headers and containing a suspicious third-party script. Privacy compliance is weak due to the absence of a clear privacy policy and consent mechanisms. Overall, the site is professional and functional but would benefit from enhanced security and privacy practices to improve trust and compliance.

F

Feedgenic

feedgenic.swiss

51

Feedgenic Sàrl is a Swiss-based technology company specializing in the integration of IT network solutions, VPN services, Synology NAS, and hosting. The company targets businesses and individuals seeking to maintain local control over their data with performant IT solutions. The website is professionally designed using WordPress with the Divi theme and incorporates modern SEO practices via Rank Math. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. The domain registration is consistent with the business identity and location, enhancing trustworthiness. Technically, the website employs standard web technologies including jQuery and Slider Revolution for interactive content. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No explicit privacy policy or terms of service were found, though a cookie policy with consent mechanism is present. Overall, the security posture is moderate with room for improvement in published policies and technical security controls. The absence of contact emails and phone numbers on the homepage limits direct communication channels. No signs of malicious activity or blocking by WAFs were detected, allowing full content analysis. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and adding incident response contacts to improve compliance and trust.

C

Coldwell Banker Commercial

cbcworldwide.com

71

Coldwell Banker Commercial Worldwide operates as a leading commercial real estate brokerage and franchise network in the United States, offering extensive property listings and professional services. The website reflects a mature, well-established brand with a history dating back to 1906 and a parent company affiliation with Anywhere Advisors LLC. The digital presence is robust, featuring advanced search capabilities, user engagement forms, and integration with modern web technologies such as Google Tag Manager, reCAPTCHA, and TrustArc consent management. Security posture is strong with HTTPS enforcement and secure form handling, though there is room for improvement in implementing security headers and publishing explicit security policies. The absence of WHOIS registration data for the domain is a notable anomaly that warrants monitoring but does not detract from the overall legitimacy of the business as presented on the site.

C

Coldwell Banker Global Luxury

coldwellbankerluxury.com

66

Coldwell Banker Global Luxury operates as a premier luxury real estate platform, providing affluent clients worldwide with access to high-end property listings, expert specialist agents, and curated editorial content. The brand is well-established with a global footprint spanning 40 countries and daily luxury sales exceeding $200 million, positioning it as a leader in the luxury real estate market. The website reflects a mature digital presence with modern technologies such as Google Maps integration, Google Tag Manager, and TrustArc consent management, ensuring a user-friendly and compliant experience. Technically, the site leverages a robust tech stack including jQuery, Owl Carousel, and likely Ruby on Rails backend, hosted on a CDN for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, though explicit security headers are not visible in the provided data. From a security perspective, the site demonstrates good practices but lacks visible security policy or incident response information. The absence of WHOIS data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts domain trustworthiness. Overall, the site is professional, secure, and compliant, serving its business purpose effectively.

C

clever

clever.com

63

Clever is an enterprise-level education technology platform specializing in identity and access management for K12 schools. It provides a unified identity platform that enables secure and streamlined access to digital learning applications, enhancing classroom engagement and safeguarding student data. The company positions itself as a leader in the education sector with a comprehensive suite of services including secure rostering, single sign-on, multi-factor authentication, and analytics. The website reflects a mature digital presence with professional design, clear navigation, and targeted content for schools, teachers, students, and application partners. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS and bot protection, though some security headers are not explicitly detected. Privacy compliance is supported by comprehensive policies, but lacks a visible cookie consent mechanism. WHOIS data is not publicly available, indicating privacy protection typical for enterprise domains. Overall, Clever demonstrates a robust business and technical infrastructure with a high level of professionalism and trustworthiness.

R

Relax Gaming Ltd

relaxgaming.com

69

Relax Gaming Ltd is a well-established B2B iGaming provider and aggregator founded in 2010, specializing in casino, poker, bingo, and jackpot gaming solutions. The company offers a robust aggregation platform (Relax Apex™) and develops in-house games, serving a global operator base with a focus on innovation and rapid integration. The website reflects a professional and modern digital presence with comprehensive content and clear navigation targeting iGaming operators and studios. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Microsoft Clarity for analytics, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies are absent. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and multiple gambling licenses displayed. This discrepancy impacts overall trustworthiness from a domain registration perspective. Overall, Relax Gaming presents a credible and professional business with strong market positioning in the iGaming sector, but domain registration transparency should be addressed to enhance trust and compliance.

V

Viktor Lenac Shipyard

lenac.hr

58

Viktor Lenac Shipyard is a well-established maritime service provider based in Croatia, specializing in ship repair, conversions, and offshore services. Positioned as one of the leading shipyards in the Mediterranean, it serves a diverse clientele including ship owners and offshore companies. The website reflects a professional and consistent brand image, supported by its affiliation with the Palumbo Group. Technically, the site employs modern JavaScript libraries and frameworks, hosted on reliable AWS infrastructure, and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and business legitimacy.

G

Glammatic

glammatic.com

64

Glammatic is a specialized technology company offering an all-in-one marketing platform tailored for beauty salons. Their services include salon website building, social media marketing, branding, and multi-location salon solutions. The company targets salon owners seeking to enhance their online presence, increase bookings, and boost retail sales. The website demonstrates a professional and modern design with clear navigation and a focus on user engagement. Technically, the site is built on WordPress with common plugins and integrates analytics and marketing tools such as Google Tag Manager and CookieYes for consent management. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and partner ecosystem suggest a legitimate business. Overall, the site scores well on content quality and technical implementation but needs improvements in privacy compliance and business credibility transparency.

O

OpenIMT

openimt.it

50

OpenIMT is an online web magazine affiliated with Scuola IMT, focusing on disseminating research and innovation news in science, technology, culture, and society. The platform targets researchers, enterprises, institutions, and the general public interested in scientific advancements and public policy. It offers articles, videos, podcasts, and newsletters to engage its audience. Technically, the website is built on WordPress using modern plugins and themes, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS and basic security practices, though minor server permission issues exist. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a professional and trustworthy digital presence for an educational media outlet.

A

ADZUNA LTD

adzuna.at

65

Adzuna.at is an Austrian localized job search engine operated by ADZUNA LTD, aggregating over 80,000 unique job listings from multiple sources. The platform targets job seekers in Austria and provides advanced search capabilities, salary statistics, and a mobile app to facilitate job hunting. The website is professionally designed with consistent branding and good content quality, supporting a medium-sized business model focused on online recruitment services. Technically, the site employs modern front-end technologies including jQuery, Tailwind CSS, and Google Tag Manager, ensuring mobile optimization and good SEO practices. Performance is moderate with no critical technical issues detected. Security posture is strong with HTTPS enforced and secure form handling, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. The security evaluation reveals no exposed sensitive data or vulnerabilities in the visible content. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits domain trust assessment, but the website's professionalism and security measures support a high trustworthiness rating. Overall, Adzuna.at presents a reliable and user-friendly job search platform with solid technical and privacy foundations. Strategic enhancements in security headers and incident response disclosures would further strengthen its security posture and user trust.

A

ADZUNA AUSTRALIA PTY LTD

adzuna.com.au

72

Adzuna Australia Pty Ltd operates a comprehensive job search engine platform targeting job seekers and recruiters within Australia. The website aggregates thousands of job listings daily, providing advanced search capabilities and additional services such as CV valuation. The company positions itself as a key player in the Australian employment market with a strong international presence. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and various advertising and analytics pixels, hosted on a CDN for performance optimization. The site is mobile-optimized and features a professional, user-friendly design with clear navigation and SEO best practices. Security-wise, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and a dedicated security policy page. WHOIS data is restricted due to auDA policies, but the domain appears legitimate and consistent with the business claims. Overall, the website demonstrates a mature digital presence with good security hygiene and privacy compliance, though improvements in explicit security policies and incident response transparency are recommended.

P

Prometheus PPC

prometheusppc.com

63

Prometheus PPC is a specialized digital marketing agency focused exclusively on Google Ads lead generation and PPC management. Founded in 2012 and led by an MIT and Silicon Valley engineer, the company positions itself as a high-precision, analytic-driven service provider targeting mid-sized companies. Their website showcases strong client testimonials, case studies, and a professional design that reflects their expertise and market niche. Technically, the site is built on WordPress with modern plugins and analytics tools, optimized for performance and mobile use. Security posture is solid with HTTPS and security headers, though explicit privacy and terms policies are missing. The absence of WHOIS registration data is a notable concern, potentially impacting trustworthiness despite the professional web presence.

O

OutSystems

outsystems.com

66

OutSystems is a leading enterprise low-code platform provider that integrates AI capabilities to accelerate custom application development. Positioned as a Forrester Wave Leader for 2025, the company targets professional developers and enterprises seeking scalable, intelligent software solutions. Their platform offers full-stack development, pre-built integrations, automated testing, DevOps, and cloud-native architecture, enabling digital transformation with existing teams. Technically, the website demonstrates a mature digital infrastructure with modern frameworks, extensive analytics, and strong mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and privacy-conscious tracking, although explicit incident response and vulnerability disclosure policies are not publicly visible. Overall, the website reflects a professional, trustworthy, and technically advanced organization with a strong market presence in the technology sector.

S

Scientiffic Nutrition

scientifficnutrition.com

49

Scientiffic Nutrition is a Spanish-based e-commerce business specializing in sports nutrition supplements and related products. Established in 2018, the company has positioned itself as a reputable provider within the sports nutrition retail sector, leveraging official partnerships with prominent sports teams to enhance brand credibility. Their website offers a comprehensive product catalog, targeting both professional athletes and fitness enthusiasts. Technically, the site is built on WordPress with WooCommerce, integrating modern plugins and tracking tools such as Google Analytics and Probance, while maintaining GDPR-compliant privacy and cookie policies with active consent mechanisms. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security headers could be improved. Overall, the website demonstrates good design, usability, and trustworthiness, supporting a medium-sized retail operation with a clear market focus.

U

UniversiDATA

universidata.es

57

UniversiDATA is a specialized open data portal focused on the higher education sector in Spain, aggregating datasets from multiple universities to promote transparency and data reuse. The platform offers a catalog of datasets, analytical applications, and news updates, targeting universities, researchers, and data reusers. The website is built on Drupal 7 with modern front-end technologies and integrates Google Analytics with privacy-conscious configurations. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is professional, trustworthy, and well-positioned within its niche.

C

CRUE

crue.org

61

CRUE (Conferencia de Rectores de las Universidades Españolas) is a prominent non-profit organization representing Spanish universities. The website serves as a central hub for information about the organization’s governance, activities, policies, and events, targeting academic institutions, students, researchers, and education stakeholders in Spain. It offers comprehensive resources including agendas, publications, and institutional representation. The organization holds a leading market position within the Spanish higher education sector. Technically, the website is built on WordPress with a modern plugin ecosystem including GDPR compliance tools, event management, and multimedia integration. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data and social media integration. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, reflecting compliance with GDPR. While explicit security headers are not fully visible in the HTML, the use of security/privacy plugins and absence of exposed sensitive data indicate a solid security posture. No critical vulnerabilities or suspicious WHOIS patterns were detected, though WHOIS data is privacy protected, which is typical for such organizations. Overall, CRUE’s website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include enhancing security headers, publishing explicit security policies, and enabling DNSSEC to further strengthen domain security.

A

Aidsfonds – Soa Aids Nederland

soaaids.nl

11

Soa Aids Nederland is a reputable Dutch non-profit organization dedicated to preventing, detecting, and treating HIV and other sexually transmitted infections. The website serves both the general public and healthcare professionals, offering comprehensive information, testing guidance, and professional tools. It is well-positioned in the Dutch healthcare sector with strong partnerships and a clear mission. The digital infrastructure is modern, leveraging Drupal 10 CMS and integrating advanced analytics and user engagement tools while maintaining GDPR compliance through explicit cookie consent mechanisms. Security posture is strong with HTTPS enforcement and secure data handling practices, though some security headers could be explicitly confirmed. Overall, the website demonstrates high professionalism, trustworthiness, and user-centric design.

C

CRMInbox

crminbox.io

60

CRMInbox is a Mexico-based technology company founded in 2023, specializing in WhatsApp CRM solutions including multi-agent management, mass messaging, and chatbot integration for ISPs. The website is professionally designed with clear navigation, detailed pricing, and FAQ sections targeting businesses seeking efficient WhatsApp communication tools. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Tag Manager and Smartsupp live chat, and is hosted with Cloudflare DNS and registrar services. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy policies and terms of service are present but GDPR compliance is limited. Overall, the site demonstrates a credible business presence with room for improvement in security and privacy compliance.

S

SIA Transact Pro

transactpro.lv

63

SIA Transact Pro is a Latvia-based licensed electronic money institution established in 2004, providing comprehensive payment services including card issuing, payment processing, and gateway services. It holds principal memberships with Visa and Mastercard and operates under the supervision of the Bank of Latvia. The company targets corporate clients, e-commerce businesses, and financial institutions, offering tailored payment solutions and card products such as debit, credit, prepaid, gift, loyalty, and virtual cards. The business is affiliated with Transact Bank N.A., enhancing its banking and financial service capabilities. Technically, the website employs modern JavaScript libraries and integrates Google Tag Manager, Google Analytics, and Yandex Metrica for analytics and user tracking. The site is mobile-optimized with good navigation and professional design. Security measures include HTTPS enforcement, PCI level 1 compliance claims, and use of Google reCAPTCHA for form protection. However, explicit security policies and incident response information are not published, representing an area for improvement. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is moderate due to the presence of a cookie policy and consent mechanism but lacks a dedicated privacy policy page. Contact information is clearly provided with multiple channels including phone, email, and physical address. Overall, the website and business demonstrate high trustworthiness and professionalism. Strategically, the company should focus on publishing comprehensive privacy and security policies, enhancing accessibility, and formalizing incident response and vulnerability disclosure processes to strengthen compliance and customer trust.

B

BRT

brt.it

77

BRT is a well-established Italian courier and logistics company operating under the parent company DPDgroup. The company offers a broad range of services including express courier, international shipping, logistics solutions, and specialized services such as temperature-controlled shipping (BRT fresh). The website targets both private individuals and business clients, providing comprehensive service information and customer support channels. The digital presence is professional, with a clear structure and multilingual support, primarily in Italian and English. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various plugins for enhanced functionality including form management and cookie consent. The site employs HTTPS with strong security headers, indicating a mature security posture. Tracking and analytics are implemented via Google Tag Manager and TrustCommander, with appropriate cookie consent mechanisms in place. Security-wise, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks publicly available dedicated security policies or incident response information. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. The domain registration is consistent with the business identity, reinforcing trustworthiness. Overall, BRT's website reflects a mature logistics business with solid technical infrastructure and good security hygiene. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.

R

RAV Flevoland RAV Gooi en Vechtstreek

ravflgv.nl

55

RAV Flevoland RAV Gooi en Vechtstreek operates as a regional ambulance service provider in the Netherlands, focusing on emergency medical care and patient transport within the Flevoland and Gooi en Vechtstreek regions. The website serves as an information portal for residents and healthcare professionals, offering details about ambulance services, locations, news, and contact options. The organization positions itself as a key regional healthcare service with a public service business model. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google services including Analytics, Tag Manager, and reCAPTCHA for security and tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Hosting appears to leverage Cloudflare for CDN and performance improvements. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks several important security headers that could improve defense against common web attacks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy present, but no explicit cookie consent mechanism was found, which is a gap for GDPR compliance. Overall, the website is professional, trustworthy, and well-maintained, with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and publishing explicit security and incident response policies to strengthen compliance and security posture.

The Virtuele Gemeente Assistent website serves as a virtual municipal assistant platform targeting residents of Dutch municipalities such as Utrecht, Tilburg, and Dongen. It offers chatbot-based support to facilitate access to municipal information and services. The platform appears to be a niche government service tool established in 2020, focusing on digital assistance for local government interactions. The website content is basic but functional, with moderate branding consistency and a clear target audience within the Netherlands. Technically, the site uses a combination of Bootstrap and jQuery libraries, with some Vue.js and BotUI scripts commented out, indicating potential future enhancements or incomplete features. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Hosting and CMS details are not explicitly identified. The site benefits from HTTPS and DNSSEC, ensuring secure domain resolution and encrypted communications. From a security perspective, the website has a good SSL configuration but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Forms are present but commented out, indicating inactive user input mechanisms and potential gaps in secure data handling. No contact information or incident response details are provided, limiting transparency and user trust. Overall, the security posture is moderate but requires improvements to meet best practices and regulatory requirements. The overall risk assessment suggests a moderately trustworthy site with no critical vulnerabilities detected but notable compliance and security gaps. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, activating secure forms with CSRF protection, and enhancing transparency with contact and incident response information to improve user trust and regulatory compliance.

C

Comcast Spectacor

comcastspectacor.com

73

Comcast Spectacor is a well-established event management and entertainment company with strong ties to Comcast NBCUniversal. The company focuses on leveraging technology and creativity to deliver memorable events and community engagement, positioning itself as a regional leader in media and entertainment. The website reflects a professional and consistent brand identity, with good content quality and clear navigation. Technically, the site is built on WordPress with modern integrations such as Algolia search and Vimeo video embedding, hosted on AWS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by adding explicit security headers and publishing a vulnerability disclosure policy. Overall, the site is compliant with privacy regulations and demonstrates a high level of business credibility.

D

DDMA

ddma.nl

74

DDMA is the largest trade association for marketing and data in the Netherlands, established in 2002. It serves a network of over 360 brands, non-profits, publishers, agencies, and technology suppliers focused on responsible and successful use of data for marketing purposes. The website is built on WordPress with modern technologies such as jQuery and Font Awesome, and employs Google Tag Manager for analytics and consent management. The site is well-branded, professionally designed, and mobile-optimized, providing a good user experience. Security posture is solid with HTTPS and DNSSEC enabled, and a consent mechanism actively denying ad personalization and storage except for security storage. However, the site lacks explicit privacy and cookie policy pages, visible contact information, and vulnerability disclosure details, which are areas for improvement. Overall, the domain registration data supports the legitimacy and trustworthiness of the organization.

D

DDMA

privacywaarborg.nl

76

DDMA is a well-established Dutch marketing industry association founded in 2002, providing privacy and security compliance services to organizations handling personal data for marketing purposes. The website focuses on the Privacy Waarborg program, which offers internal privacy and security checks to demonstrate compliance with privacy regulations such as GDPR. The organization targets marketing professionals and companies in the Netherlands, positioning itself as a trusted non-profit entity in the marketing compliance sector. The website is built on WordPress, uses modern technologies including Cookiebot for cookie consent and Google Tag Manager for analytics, and is hosted by a reputable provider with DNSSEC enabled, indicating a secure and stable technical infrastructure. Security posture is good with HTTPS and privacy-focused consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, well-structured, and compliant with privacy regulations, making it a credible resource for its target audience.

S

Seznam.cz, a.s.

o-seznam.cz

57

Seznam.cz, a.s. is a leading Czech internet company operating as the country's number one internet platform. The company manages over 30 services supported by more than 1,900 employees, including proprietary data centers and a broad portfolio of online services such as search, advertising, and media. The website 'O Seznamu' serves as a corporate information portal highlighting the company's vision, leadership, career opportunities, and social responsibility initiatives. Technically, the site is built on WordPress with modern web technologies including Google Tag Manager and a consent management platform, ensuring GDPR compliance and good SEO practices. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with excellent content quality, user experience, and trustworthiness.

M

MCM beton

mcmbeton.hu

47

MCM beton is a Hungarian construction-related company specializing in concrete and related services, operating as part of the larger Market corporate group. The website presents company information, contact details, and links to sister companies, targeting construction industry clients primarily in Hungary. The digital infrastructure uses modern JavaScript libraries and Google services, indicating moderate digital maturity. However, some security best practices such as security headers and cookie consent mechanisms are missing or minimal. The website is professionally designed with good navigation and mobile optimization, but lacks explicit privacy and security policies on-site. Overall, the domain registration and website content align well, supporting legitimacy and trustworthiness.

P

ProjectBinder

projectbinder.eu

61

ProjectBinder is a Nordic-based company specializing in IT and industrial automation solutions tailored for the life science industry. As part of the Init Group, it benefits from a broad European presence and a skilled workforce exceeding 650 employees. The company offers a comprehensive suite of services including advisory, architecture, IoT technologies, compliance, and digital transformation, targeting life science manufacturers aiming to optimize their operations and ensure regulatory compliance. The website reflects a professional and consistent brand image with clear messaging and a focus on digital transformation in manufacturing.

T

team one

teamone-usa.com

68

Team One is a marketing and branding agency focused on helping brands build meaningful relationships with affluent customers. The company positions itself as a specialized agency targeting a niche market segment. The website is built on the Squarespace platform, leveraging modern web technologies and includes integrations with Google Analytics and Google Ads for marketing and tracking purposes. The presence of a cookie consent banner indicates some level of privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is strong with HTTPS and HSTS enabled, but the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the website is professional and functional but lacks some critical compliance and transparency elements.

T

The Mind At Work

themindatwork.co.uk

69

The Mind At Work is a small, independently-owned consultancy specializing in purpose-driven organisational transformation, leadership development, and HR consultancy. Established in 2005 and based in London and Milan, the company partners with diverse clients undergoing change and growth, leveraging a blend of commercial and psychological expertise. Their strategic partnership with POLIMI Graduate School of Management enhances their academic credibility and service offerings. Technically, the website is built on WordPress with modern plugins for multilingual support, spam protection, and cookie consent, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and anti-spam measures, though lacking explicit security policies and some security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business presence with moderate user tracking and good content quality.

S

Sjællands Teater

het.dk

57

Sjællands Teater is a regional theater organization based in Denmark, offering a variety of live performances including family shows, youth theater, summer theater, comedy, and guest performances. The website positions itself as a cultural hub for the Zealand region, targeting families and young audiences. The business is relatively young, founded around 2019, and operates primarily as a small-sized cultural entity. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The site demonstrates good mobile optimization and a professional design, with clear navigation and relevant content. Security-wise, HTTPS is properly implemented, and cookie consent mechanisms are in place, though some security headers and explicit security policies are missing. Overall, the site shows a moderate to good security posture with room for improvement in formal security documentation and headers. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving contact transparency for security matters.

S

Saller Unternehmensgruppe

saller-bau.de

57

The Saller Unternehmensgruppe website presents a professional and well-structured digital presence for a family-run real estate investment and development company with over 40 years of experience in European retail properties. The site is built on WordPress with modern plugins for SEO, multilingual support, and user engagement, including multimedia sliders and cookie consent management. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership verification. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks security headers and explicit privacy and terms policies. Contact information is not explicitly provided, which may impact user trust and compliance. Overall, the website reflects a credible business with room for improvement in transparency and security best practices.

T

Tripplex ApS

tripplex.dk

66

Tripplex ApS is a Danish company specializing in bespoke acoustic wooden panel solutions designed to enhance both aesthetics and sound quality in buildings. Their business model focuses on B2B collaboration with architects and designers, offering sustainable and customizable products. The company maintains a professional online presence with clear contact information and multilingual support, positioning itself as a niche provider in the acoustic solutions market. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Weglot for translations, Google Tag Manager for analytics, and Cookiebot for consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and dedicated security or incident response policies. The absence of WHOIS data due to privacy protection slightly reduces transparency but does not significantly impact the overall trustworthiness given the professional content and contact details. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency would further enhance their security posture and trustworthiness.

A

Afinitas

hawkeyepedershaab.com

52

Afinitas is a manufacturing company specializing in equipment and services for producing concrete pipe and precast products. Established in 2014, the company targets B2B customers in the infrastructure and construction sectors. The website reflects a medium-sized enterprise with a consistent brand presence and a professional digital footprint. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern SEO and marketing tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and domain transfer protections in place, although DNSSEC is not enabled and some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stability.

L

Leth

lethsuez.com

61

Leth Agencies is a well-established maritime agency founded in 2002, specializing in providing comprehensive services in key maritime hotspots including transit handling, port calls, husbandry, and Suez Canal rebates. The company operates internationally with offices in multiple countries, targeting shipping companies and maritime operators. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern frameworks such as Bootstrap and integrates third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bygherreforeningen

bygherreforeningen.dk

62

Bygherreforeningen is a Danish organization established in 2000 that provides a professional forum for builders, users, and societal stakeholders to share experiences and strengthen competencies. The website positions itself as a knowledge-sharing platform with a focus on value creation for builders and society. Technically, the site is built on WordPress using the Enfold theme and WooCommerce, integrating multiple analytics tools including Google Analytics, Matomo, and Piwik Pro, with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enabled and no visible critical vulnerabilities, though security headers and explicit security policies are absent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting its credibility and trustworthiness in its sector.

B

Business Center

businesscenter-01.com

51

Business Center 01 is a well-established business center located in the Pays de Gex region near Geneva, offering a variety of services including office and meeting room rentals, domiciliation, accounting, translation, and telephone services. The company targets businesses and professionals seeking flexible office solutions close to international hubs. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site runs on Joomla CMS with modern libraries such as Bootstrap and jQuery, hosted by PlanetHoster. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is minimal with no visible cookie consent or explicit GDPR statements, though a privacy policy is likely present in the legal notice page. Overall, the website and domain registration indicate a credible and trustworthy business with room for enhanced security and privacy practices.

D

Dagens Medicin

dagensmedicin.dk

63

Dagens Medicin is a well-established Danish news media company specializing in the healthcare sector, targeting medical professionals and decision-makers. Founded in 1997, it holds a leading market position in health sector news in Denmark, offering subscription-based access to news, background stories, conferences, and job listings. The website is built on a mature WordPress infrastructure with e-commerce and event management capabilities, reflecting a moderate to good level of digital maturity. The technical stack includes modern analytics and marketing tools, supported by Cloudflare for hosting and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. Overall, the website demonstrates a high level of professionalism, GDPR compliance, and trustworthiness, with room for improvement in publishing security and incident response information.

N

Nørrebro Teater

nbt.dk

66

Nørrebro Teater is a Danish cultural institution focused on theatrical performances and entertainment. The website serves as the main digital presence for the theater, offering information about events and ticket sales, with a partner domain handling ticket transactions. The organization targets theater enthusiasts and the general public interested in cultural activities in Denmark. The site is built on WordPress with modern SEO and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent compliance, though explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust analysis but the active social media presence and detailed cookie management indicate a legitimate and professional operation. Strategic recommendations include publishing security and incident response policies and providing clear contact information to enhance trust and compliance.

H

HauCon

haucon.com

51

HauCon is an established company with a digital presence targeting Norway, Denmark, and Finland through dedicated country-specific websites. The company appears to operate in a sector related to construction or infrastructure, inferred from branding and domain usage. The website is built on Joomla CMS with modern frontend frameworks such as UIkit and Yootheme, providing a good user experience and mobile optimization. The technical infrastructure is moderate in performance with room for improvement in security headers and DNSSEC implementation. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security policies and incident response contacts. Overall, the website is professional and trustworthy but could benefit from enhanced transparency and security practices.

L

LiveTiles

wizdom-intranet.com

76

LiveTiles is a technology company specializing in intranet software solutions designed for global enterprise organizations. Their platform aims to enhance workforce engagement, unify distributed and hybrid teams, and improve internal communication and productivity. The company positions itself as a key player in the digital workplace solutions market, targeting large enterprises with a focus on collaboration and innovation. Technically, the website is built on WordPress, leveraging modern marketing and analytics tools such as Microsoft Clarity, Marketo, Facebook Pixel, and Google Tag Manager. The site is hosted with reputable providers and uses Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enabled and cookie consent implemented; however, the absence of explicit privacy policies, terms of service, and security incident response information indicates room for improvement in compliance and transparency. Overall, the domain registration data aligns well with the business claims, showing a legitimate and consistent online presence.

Showline is a Danish small business specializing in booking bands, DJs, and event equipment rental for corporate and private events. Their services include event management, concert organization, and music lessons, targeting companies and individuals planning events. The website is built on WordPress with a professional design and includes multimedia content to showcase offerings. However, the absence of WHOIS data limits domain trust verification. The technical infrastructure is modern but lacks some security best practices such as security headers and privacy compliance mechanisms. Overall, the business appears legitimate and operational with clear contact information and a focused niche in the event booking industry.

B

BookPrint Limited

bookprint.co.nz

56

BookPrint Limited is a specialist book printing and design company based in Auckland, New Zealand, established in 2011. The company focuses on providing high-quality, cost-effective book printing services for short and medium runs, catering to authors, educators, marketers, and businesses. Their offerings include local and offshore printing, cover design, typesetting, and various book types such as business, educational, memoirs, and more. The website is built on WordPress with Elementor and hosted on WP Engine, demonstrating a modern and professional digital presence. Security measures include HTTPS and Google reCAPTCHA on forms, but lack some security headers and formal privacy/cookie policies. Overall, the site is trustworthy and professional but could improve privacy compliance and security posture.