Security Directory

The Homecare & Hospice Association of Utah (HHAU) is a small non-profit organization focused on supporting Utah's home-based health, hospice, and personal care industries. The association provides education, advocacy, networking, and public outreach services to its members and the broader community. Their market position is that of a leading state-level association with active engagement in healthcare policy and community partnerships. Technically, the website is built on the Wild Apricot membership platform, utilizing JavaScript, React components, and Google reCAPTCHA for security. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS and bot protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.

M

Malta Meat Free Week | Promoting a meat free lifestyle in Malta and Gozo

maltameatfreeweek.com

45

Malta Meat Free Week is a campaign-focused website promoting a meat free lifestyle in Malta and Gozo. The site encourages community participation through events and contests, supported by partners such as VeggyMalta. The business operates primarily as a local awareness initiative with a small organizational footprint, founded in 2018. Technically, the website is built on WordPress using the Divi theme, with MailerLite integrated for email marketing and form management. The site is hosted by NameCheap and uses HTTPS, but lacks advanced DNS security features like DNSSEC and security headers. Privacy compliance is weak, with no visible privacy or cookie policies, which poses a compliance risk. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response contact information. Overall, the website is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

G

Generalmarine srl

pradatarghe.com

44

Prada Targhe, operating under Generalmarine srl and part of the Caim Group, is a specialized manufacturer of customizable marine signage with a history dating back to 1884. The company offers a broad range of services including printing, engraving, cutting, and material protection, primarily serving the marine industry with certified IMO signage and other safety and directional products. Their global reach is enhanced by the parent group's international hubs. Technically, the website is built on WordPress with common plugins and demonstrates good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published security policies and incident response information. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a professional business front but would benefit from improved transparency in domain registration and enhanced security disclosures.

G

Group Caim

groupcaim.com

54

Caim Group is a medium-sized Italian maritime industry consortium operating since 2019, providing a wide range of products and services including navigation charts, software, safety equipment, firefighting services, marine signage, and electronics. The company maintains a strong market position with multiple subsidiaries and international offices, targeting maritime commercial and leisure sectors globally. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie compliance, hosted on a reputable registrar with DNS hosted on vhosting-it.com. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Contact information and social media presence enhance business credibility. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively.

C

Corporate Identities

thedispatch.mt

60

The Dispatch, operated by Corporate Identities, is a Malta-based news media website providing curated international and local news with a global outlook and local perspective. Founded in 2020, it targets a general audience interested in news relevant to Malta and beyond. The website is built on WordPress and hosted by Automattic Inc., leveraging modern web technologies including Google Analytics, Tag Manager, and OneSignal for notifications. The site demonstrates good SEO practices and mobile optimization, with consistent branding and a professional design. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information includes a Maltese phone number and active social media channels. Overall, the site is credible and functional but could enhance privacy and security transparency.

C

Corporate Identities

cde.news

56

The Dispatch, operated by Corporate Identities, is a Malta-based online news portal established in 2020, delivering curated international and regional news with a focus on Malta and global perspectives. The website is positioned as a niche media outlet targeting audiences interested in Maltese and international affairs. The business model centers on digital news publishing with monetization through advertising networks such as Google AdSense. Technically, the site is built on WordPress, hosted by Automattic Inc., and employs modern web technologies including jQuery, Google Tag Manager, and OneSignal for push notifications. The site demonstrates good SEO practices with comprehensive metadata and structured data, and it is mobile optimized with a responsive design. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service policies. Overall, the site is professional and trustworthy but could improve transparency and security practices.

S

Stichting Nationale Onderwijsweek

nationaleonderwijsweek.nl

51

The Nationale Onderwijsweek website serves as a central platform for promoting and organizing education-related events and initiatives in the Netherlands. It targets education professionals, schools, and the general public interested in education. The site highlights key programs such as the Nationale Onderwijsweek, Onderwijsstad, Onderwijstalenten, and the Nationale Onderwijsprijs, positioning itself as a recognized non-profit entity in the Dutch education sector. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Font Awesome, ensuring a responsive and user-friendly experience with moderate performance. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a clear privacy and cookie policy but no terms of service or vulnerability disclosure. Overall, the site is professional, trustworthy, and well-branded, though it could improve in security transparency and accessibility.

A

Assignment Help Company

assignmenthelpcompany.com

58

Assignment Help Company is an online academic assistance provider specializing in assignment help, essay writing, dissertation support, and related educational services targeting university students globally, with a focus on Australia and other English-speaking countries. The website demonstrates a professional and user-friendly design with clear navigation and multiple service offerings. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is moderate with HTTPS enforced and captcha protection on forms, but lacks advanced security headers and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. Overall, the site is functional and credible in content but requires improvements in security and compliance transparency.

M

My Assignment Services

myassignmentservices.com

66

My Assignment Services is an Australian-based academic assistance provider specializing in assignment help, dissertation writing, thesis support, and various academic writing services. The company targets students primarily in Australia but also serves other English-speaking countries. Their market position is strong with claims of over 1 million assignments delivered and a large pool of subject experts. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates analytics and live chat tools, and enforces HTTPS with captcha-protected forms, indicating a good level of digital maturity. Security posture is solid but could be improved by adding explicit security headers and a dedicated security policy. The absence of WHOIS data for the domain raises concerns about domain legitimacy, which impacts overall trustworthiness despite the professional appearance and comprehensive service offerings. Overall, the site is functional, user-friendly, and trustworthy from a content and technical perspective but requires domain registration transparency improvements.

T

Tangiers Group

tangiersgroup.com

58

Tangiers Group is a Malta-based organization specializing in connecting insurance products, emergency medical assistance, maritime, travel, and claims management services globally. Established in 2006, it operates through a network of subsidiaries and partners, including battleface, Tangiers International, and MOAS, focusing on challenging environments and humanitarian aid. The company maintains a professional web presence with clear branding and comprehensive service descriptions. Technically, the website is built on WordPress with modern plugins and implements HTTPS and Google reCAPTCHA for security. However, it lacks some security headers and explicit privacy and security policies. The absence of WHOIS data for the domain raises some concerns about registration transparency, though the website content and external links support legitimacy. Overall, the site demonstrates a good security posture and compliance with cookie consent regulations but could improve in formalizing privacy and security documentation.

S

SilverDome Investment Partners

silverdomeip.com

59

SilverDome Investment Partners is a Swedish-based investment fund company specializing in alternative absolute return strategies, offering a daily traded UCITS fund named SilverDome One. The company targets investors seeking stable, diversified, and capital-preserving investment options. The website is built on WordPress with Elementor, featuring professional design and clear navigation. It uses Google Tag Manager for analytics and implements a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enabled but lacks published security policies and security headers. The domain registration is consistent with the business founding date and shows no suspicious patterns. Overall, the website presents a credible and professional investment service with room for improvement in privacy and security transparency.

R

Ridge Capital

ridgecapital.se

65

Ridge Capital is a Swedish investment firm specializing in Nordic high yield corporate bonds, aiming to deliver equity-like returns with lower risk by investing alongside its clients. The company is relatively new, founded in 2022, and targets investors interested in the Nordic corporate bond market. The website reflects a professional and consistent brand image, with good content quality and clear business focus. Technically, the site is built on WordPress using the GeneratePress theme, enhanced with Yoast SEO and integrated HubSpot forms, indicating a moderate level of digital maturity. The presence of Cookiebot and Google Tag Manager shows attention to privacy and marketing analytics. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the site is functional, compliant with GDPR, and presents a trustworthy business front, though it lacks explicit contact emails, phone numbers, and formal policies like terms of service or security policy pages.

Universidad Pablo de Olavide is a well-established public university based in Sevilla, Spain, offering a wide range of undergraduate and postgraduate programs, research facilities, and internationalization services. The website serves as a comprehensive portal for students, faculty, and institutional partners, providing access to academic information, administrative services, and virtual campus resources. The university maintains a strong market position within the Spanish higher education sector, supported by official certifications such as HRS4R and partnerships with regional and international organizations. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various multimedia plugins, hosted likely on an OpenCms platform. The site is mobile-optimized and features good SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and secure login mechanisms supporting digital certificates; however, the absence of security headers and visible cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. Overall, the security posture is good but could be enhanced by publishing explicit security policies, incident response contacts, and vulnerability disclosure information. The lack of WHOIS data due to registrar restrictions does not detract from the legitimacy of the site, which is corroborated by consistent branding, official domain usage, and external references. Strategic recommendations include implementing security headers, adding cookie consent banners, and improving transparency around security and privacy policies to strengthen trust and compliance.

S

Sabiedriba ar ierobezotu atbildibu "T-System Services"

riepas1.lv

39

Riepas1.lv is a Latvian-based online retailer specializing in tires and alloy wheels, complemented by physical service centers in Riga, Ventspils, and Daugavpils. The company offers a broad product range with a focus on quality and customer convenience, including free delivery across Latvia and a 14-day return policy. Their digital presence is supported by modern tracking and analytics tools, enabling effective customer engagement and marketing. Technically, the website employs a variety of contemporary technologies such as Google Tag Manager, Hotjar, and LiveChat, ensuring a responsive and user-friendly experience. The site is well-structured with clear navigation and mobile optimization, although some improvements in accessibility and security headers could enhance the overall robustness. From a security perspective, the site uses HTTPS and secure forms, with no evident vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for maturity in security governance. The WHOIS data confirms the domain's legitimacy with transparent registrant information aligned with the business's Latvian operations. Overall, Riepas1.lv presents a credible and professionally managed e-commerce platform with a solid market position in Latvia's automotive retail sector. Strategic enhancements in security policies and accessibility would further strengthen their digital trustworthiness and compliance posture.

S

Sports Data Campus

sportsdatacampus.com

65

Sports Data Campus is a specialized educational organization focused on advanced analytics, Big Data, and technology applied to football and sports. Founded in 2020 and based in Valladolid, Spain, it positions itself as a leading international campus for specialized training in sports data analytics. The website is built on WordPress using the Divi theme and integrates WooCommerce for e-commerce capabilities. It employs modern web technologies including Google Tag Manager and LinkedIn Insight for marketing and analytics. The site is well-designed, mobile-optimized, and provides clear contact information via structured data. Security posture is generally good with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is lacking as no privacy or cookie policies are found, and no consent mechanisms are implemented. Overall, the site is professional and credible but would benefit from enhanced privacy and security practices.

Jeugdgezondheidszorg Kennemerland is a regional Dutch healthcare provider specializing in youth health services and parental support, focusing on children aged 0-4 years and pregnant women. The organization offers a range of services including health consultations, vaccinations, workshops, and a dedicated digital app (JgzApp) to facilitate communication and health monitoring. The website reflects a well-established entity with a domain registered since 2004, indicating a mature presence in the healthcare sector within the Kennemerland region. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Contact Form 7, with integrations for Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, suitable for the target audience. From a security perspective, the site employs HTTPS with DNSSEC enabled, uses secure forms with validation, and does not expose sensitive data. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional image with a high level of content relevance and business credibility. The absence of critical security issues and the presence of trust indicators such as privacy policies and BIG-registration references support a positive risk assessment. Strategic improvements in security policy transparency and technical security headers would further strengthen the organization's digital security stance.

M

MantelZ

mantelz.nl

51

MantelZ is a Dutch non-profit organization dedicated to supporting unpaid caregivers (mantelzorgers) and professionals in the Beverwijk region and surrounding municipalities. The website provides comprehensive information, activities, and contact options to assist caregivers in managing their responsibilities. The organization positions itself as a regional support center with a focus on community engagement and practical assistance. Technically, the website is built on WordPress using modern plugins such as Gravity Forms for data collection, Yoast SEO for search optimization, and Complianz for GDPR-compliant cookie management. The site employs HTTPS with Google reCAPTCHA v3 to secure forms and prevent abuse. Security headers are not explicitly visible in the HTML but may be configured at the server level. Overall, the site demonstrates good privacy compliance and business credibility with clear contact information and trust signals such as testimonials. No critical security vulnerabilities or blocking mechanisms were detected, allowing full content accessibility and analysis.

D

Duck Diver Marketing

duckdiverllc.com

49

Duck Diver Marketing is a specialized marketing agency offering on-demand marketing services primarily targeting the dive industry. Their key offerings include social media management, SEO services, website creation, and online advertising management. The company positions itself as a flexible marketing partner for small to medium businesses, providing à la carte and full-service marketing solutions. The website content and branding are consistent and professional, reflecting a niche market focus with a history dating back to at least 2011. Technically, the website is built on WordPress using CherryFramework and Bootstrap, integrating WooCommerce and popular plugins like Contact Form 7 and Yoast SEO. The site employs Google Analytics and Jetpack for tracking, indicating moderate digital maturity. Performance and mobile optimization are good, though accessibility features are basic. The site uses HTTPS but lacks advanced security headers, which could be improved to enhance security posture. From a security perspective, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, raises concerns about compliance and domain legitimacy. No incident response or security policy information is provided, limiting transparency. Overall, the security posture is moderate but could benefit from enhancements in policy visibility and technical safeguards. The domain WHOIS data is unavailable or unregistered according to the raw WHOIS output, which is inconsistent with the active website presence. This discrepancy reduces trustworthiness and suggests the need for further verification. The website is accessible without WAF or security challenges, allowing full content analysis. Strategic recommendations include implementing privacy and cookie policies, improving security headers, verifying domain registration, and enhancing accessibility and compliance measures.

P

PAMESA CERAMICA COMPACTTO SLU

pamesa.com

68

Pamesa Cerámica is a Spanish manufacturing company specializing in the design and production of ceramic flooring and related products. It operates as the parent company within the Pamesa Grupo Empresarial, targeting architects, interior designers, and construction professionals with a broad catalog of ceramic solutions. The website reflects a mature digital presence with comprehensive product information, architectural solutions, and technical resources such as BIM libraries. Technically, the site uses modern JavaScript libraries, Google Fonts, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is generally strong with HTTPS enforced and a cookie consent mechanism in place, though the absence of visible security headers and WHOIS registration data presents areas for improvement. Privacy compliance is well addressed with detailed cookie and privacy policies in Spanish, including user consent options. Overall, the site is professional and trustworthy, but the missing WHOIS data warrants further investigation to confirm domain legitimacy.

J

Jaycom

jaycom.se

60

Jaycom is a Swedish SaaS provider specializing in comprehensive software solutions for the insurance industry, offering products such as Leo (a CRM for insurance brokers) and Focus (an insurance system for life and property insurance). The company has been operating since 2001, targeting insurance brokers and companies with tailored digital tools. The website reflects a small but focused business with consistent branding and relevant content for its niche market. Technically, the site uses a custom CMS with standard web technologies like JavaScript and CSS, and it is served over HTTPS with a valid SSL certificate, indicating a secure connection. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the queried domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site demonstrates moderate digital maturity with room for improvement in privacy compliance, security best practices, and richer business information disclosure.

H

Hola desde el mejor clima del mundo | Hola Islas Canarias

holaislascanarias.com

67

Hola Islas Canarias is a tourism-focused website providing comprehensive information and tools for visitors to the Canary Islands. It serves as an official or semi-official portal promoting the islands' attractions, accommodations, gastronomy, culture, and activities. The site targets tourists and travelers seeking detailed and localized content about the Canary Islands. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and Google Tag Manager for analytics. It employs a consent management platform (Didomi) to comply with GDPR cookie consent requirements. Security posture is moderate, with no explicit security headers or policies detected, and SSL configuration details unavailable. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Privacy policy and contact information are not explicitly found, indicating areas for compliance and transparency improvement.

C

Claus Web SRL

zutv.ro

59

ZUTV.ro is a Romanian entertainment and media news website operated by Claus Web SRL, established in 2014. The site provides news and updates on celebrities, music, films, and series, targeting Romanian-speaking audiences interested in entertainment content. The business model is primarily advertising-supported, leveraging multiple ad networks and tracking technologies to monetize content. The website demonstrates a consistent brand presence with good content quality and user experience.

U

UseIT.ro

useit.ro

55

UseIT.ro is a Romanian technology news website providing up-to-date information on technology, digital media, gadgets, gaming, and science. It operates under the Digital Antena Group umbrella, positioning itself as a niche media outlet targeting Romanian-speaking technology enthusiasts and general audiences interested in tech news. The website features a professional design, consistent branding, and a clear content structure with active updates and multimedia content. Technically, it is built on WordPress CMS, hosted on Amazon AWS infrastructure, and integrates modern advertising and analytics technologies including Google Analytics, Prebid.js, and OneSignal push notifications. The site demonstrates good mobile optimization and SEO practices, leveraging structured data and meta tags effectively. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers like CSP and X-Frame-Options are not detected, and no formal security or incident response policies are published. The domain registration is consistent and legitimate, with no suspicious indicators. Overall, UseIT.ro presents a solid digital presence with good security hygiene and privacy compliance, suitable for its media business model.

G

GRUPUL MEDIA CAMINA (G.M.C)

radiozu.ro

13

Radio ZU is a well-established Romanian media company operating a popular radio station with a strong digital presence including live streaming, podcasts, and music content. The website reflects a mature media brand with consistent branding and a broad target audience of Romanian-speaking music and entertainment consumers. The technical infrastructure leverages modern web technologies and third-party services for advertising, analytics, and user engagement, hosted behind Cloudflare DNS and CDN services. Security posture is adequate with HTTPS enabled and no critical vulnerabilities detected, though improvements in DNSSEC and security headers are recommended. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and functional with room for technical and security enhancements.

C

Catine.ro

catine.ro

55

CaTine.ro is a Romanian online media portal focused on lifestyle, fashion, beauty, entertainment, health, and horoscope content. Established in 2020, it targets Romanian-speaking audiences interested in these topics. The website operates on WordPress CMS, leveraging Yoast SEO for optimization and integrates multiple advertising and analytics technologies including Google Analytics, Facebook SDK, and Cxense. The site demonstrates good content quality and user experience with consistent branding and active social media presence. Technically, it is hosted on AWS infrastructure with modern ad tech and consent management mechanisms in place. Security posture is adequate with HTTPS enabled and cookie consent implemented, though explicit security headers and policies are not fully evident. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is legitimate and well-positioned in the Romanian media market but would benefit from enhanced transparency and security documentation.

O

Observator

antenastars.ro

55

AntenaStars.ro is a Romanian media and entertainment website operated under the brand Observator, part of the Antena Group. It provides live TV streaming, celebrity news, and entertainment content targeting Romanian-speaking audiences interested in popular culture and TV shows. The website is well-established since 2013 and maintains a consistent brand presence with professional content and user engagement via social media and push notifications. Technically, the site uses a modern stack including jQuery, Bootstrap, Google Tag Manager, and various advertising and analytics platforms, hosted behind Cloudflare DNS. Privacy compliance is strong with GDPR-aligned cookie and privacy policies and a consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the site is a credible and professional media outlet with a solid digital infrastructure and advertising ecosystem.

A

Antena 1

a1.ro

58

Antena 1 is a prominent Romanian media company offering a comprehensive digital platform for video entertainment, news, and TV programming. The website serves a broad Romanian-speaking audience with diverse content including celebrity news, sports, weather, and lifestyle. It operates a business model primarily based on advertising revenue, supported by extensive use of ad networks and tracking technologies. The platform is well-branded and consistent with a strong market position in the Romanian media sector. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, OneTrust for cookie consent, and advanced header bidding for advertising. The site is mobile-optimized and integrates multiple third-party marketing and tracking tools, reflecting a mature digital infrastructure. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit published security policies, incident response contacts, and vulnerability disclosure information. Security headers are minimal, and there is room for improvement in security best practices. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear security incident contacts to improve trust and compliance.

F

Federación de Peñas del Real Valladolid

fdprealvalladolid.com

42

Federación de Peñas del Real Valladolid is a non-profit organization founded in 1995 that serves as the official federation of fan clubs (peñas) supporting the Real Valladolid football club in Spain. The website provides news, event information, and resources for fans and collaborators, reinforcing community identity and engagement around the club. The organization maintains active social media channels and offers clear contact information and policies, reflecting a mature community-focused entity. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MasterSlider, and integrates Google Analytics and ShareThis for analytics and social sharing. The site is served over HTTPS with good SSL configuration, and the content is well-structured with SEO and mobile optimization considered. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the website shows good practices like HTTPS enforcement and secure forms but lacks advanced security headers and vulnerability disclosure mechanisms. The absence of WHOIS registration data for the domain is a notable anomaly that reduces trustworthiness, although the website content and affiliations suggest legitimacy. Overall, the site is functional, professional, and compliant with privacy regulations, but the domain registration inconsistency warrants further investigation. Strategic improvements in security policies and WHOIS transparency would enhance trust and security posture.

R

Real Valladolid CF International Academy

realvalladolidacademy.com

65

Real Valladolid CF International Academy is a specialized international football academy based in Spain, offering high-performance football training programs for young male athletes aged 15 to 18 from around the world. The academy leverages the professional methodology of Real Valladolid C.F. and provides comprehensive services including academic schooling and tailored football programs. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and analytics tools, hosted by OVH sas, ensuring reliable infrastructure. Security posture is strong with HTTPS, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

U

UMC Utrecht

hetwkz-kind.nl

64

Het Wilhelmina Kinderziekenhuis (WKZ) is a specialized pediatric hospital operating under the umbrella of UMC Utrecht, a major university medical center in the Netherlands. The website serves as an informational and service portal for patients, families, and healthcare professionals, offering insights into pediatric care, treatments, research, and education. The site emphasizes tailored care for children and provides digital tools such as patient portals and apps to enhance patient engagement. Technically, the website employs modern web technologies including React and jQuery, integrates Google Tag Manager and Google Analytics for tracking, and embeds YouTube videos using the iframe API. The site is well-structured with good mobile optimization and accessibility features, reflecting a mature digital infrastructure. Hosting and domain registration align with academic and healthcare institutions, supported by DNSSEC and HTTPS for secure communications. From a security perspective, the website demonstrates strong fundamentals with enforced HTTPS, DNSSEC, and a cookie consent mechanism that respects user privacy. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No critical vulnerabilities or suspicious elements were detected, and the domain registration data supports the legitimacy and trustworthiness of the site. Overall, the website presents a professional, secure, and user-friendly platform consistent with a reputable healthcare institution. Strategic enhancements in transparency around security policies and contact information would further strengthen trust and compliance.

V

Vrienden UMC Utrecht & Wilhelmina Kinderziekenhuis

vriendenumcutrecht-wkz.nl

70

Vrienden UMC Utrecht & Wilhelmina Kinderziekenhuis is a non-profit organization dedicated to supporting the UMC Utrecht hospital and its Wilhelmina Children's Hospital through fundraising efforts. The website serves as a platform to engage donors and supporters, emphasizing child-friendly and comfortable hospital care. The organization positions itself as a charitable entity focused on enhancing medical research and patient experience. Technically, the website is built on WordPress using modern technologies such as Gravity Forms, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-structured with SEO optimizations and mobile responsiveness, providing a good user experience. Security-wise, the site enforces HTTPS, uses DNSSEC, and integrates Google reCAPTCHA for form protection, but lacks explicit security policies or incident response information. Overall, the website demonstrates a solid security posture and compliance with privacy regulations through Cookiebot, though it could improve transparency by publishing privacy and terms of service documents and providing direct contact information. The domain registration data is consistent and trustworthy, supporting the legitimacy of the organization.

R

Radius Design

radiusdesign.fr

38

Radius Design is a French digital marketing and web agency specializing in website creation, SEO, and digital strategy services tailored for businesses and professionals. The company positions itself as a niche player in the regional market, focusing on delivering quality digital solutions to its clients. The website is built on WordPress using the Divi theme, reflecting a modern and professional digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in formalizing security policies and incident response mechanisms. Overall, the website and business present a moderate risk profile with no critical vulnerabilities detected, but the absence of WHOIS data limits full trust assessment.

O

O'Fun Park

ofunpark.fr

42

O'Fun Park is a medium-sized leisure and amusement park located in Vendée, France, established in 2019. It offers a variety of outdoor activities including accrobranche, aquapark, paintball, and more, targeting families, friends, and groups. The website is professionally designed using WordPress with the Divi theme and includes multi-language support, modern plugins, and integrated social media and review widgets. The technical infrastructure is solid, hosted by OVH, and employs standard security practices including HTTPS. However, explicit security policies and incident response information are not present. Privacy and cookie policies are available and indicate GDPR compliance. Overall, the site is trustworthy and well-maintained, with clear contact information and strong branding.

O

O'Fun Park

otelpark.fr

49

O'Tel Park is a French hospitality business specializing in unique and atypical lodging experiences such as diligences and chalets, located near O'Fun Park and O'Gliss Park. The company appears to be a small-sized enterprise founded in 2022, targeting tourists seeking nature-based accommodations. The website is built on WordPress using the Divi theme and several plugins, hosted by OVH, and incorporates modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Microsoft Clarity. While the site is well-designed, mobile-optimized, and SEO-friendly with structured data, it lacks visible privacy and cookie policies, explicit contact information, and security headers, which are important for compliance and trust. The domain registration data aligns well with the business claims, indicating legitimacy. Overall, the website demonstrates a good technical foundation and business credibility but requires improvements in privacy compliance and security best practices.

A

Antena Sport

as.ro

57

Antena Sport is a well-established Romanian sports news website, founded in 2004 and operated by Digital Antena Group. It provides comprehensive sports news coverage, live scores, and video content targeting sports enthusiasts primarily in Romania but also covering international sports events. The website demonstrates a mature digital infrastructure with a modern tech stack including WordPress CMS, Bootstrap framework, and various advertising and analytics technologies. It employs multiple ad networks and tracking services while maintaining GDPR compliance through a robust cookie consent mechanism. Security posture is good with HTTPS enforced and partial security headers in place, though there is room for improvement in implementing additional security headers and regular security audits. The domain registration data aligns with the website's claims, indicating a legitimate and long-standing online presence. Overall, Antena Sport presents a professional and trustworthy platform for sports news with a strong market position in Romanian media.

S

SAS Institute Inc.

aimatch.com

76

SAS Institute Inc. is a leading enterprise software company specializing in advanced analytics, business intelligence, and customer intelligence solutions. The analyzed webpage focuses on customer intelligence-driven advertising, showcasing SAS's first-party ad server and related marketing technologies. The company targets enterprise clients seeking to leverage data for personalized advertising and marketing effectiveness. The website demonstrates a mature digital presence with comprehensive product information, multimedia content, and extensive navigation options. Technically, the website employs modern web technologies including Adobe Experience Manager as CMS, Brightcove for video streaming, and multiple analytics and advertising tracking tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and indicate GDPR compliance, although explicit incident response contacts and vulnerability disclosure mechanisms are not evident. Overall, the website represents a professional, secure, and trustworthy digital asset for SAS Institute, supporting its market position as a leader in analytics software. Recommendations include enhancing transparency around incident response and vulnerability disclosure, and maintaining vigilance on third-party library updates to mitigate potential risks.

T

Tydliga AB

tydliga.se

60

Tydliga AB is a Swedish intermediary organization specializing in providing clear and professional advice on insurance and investment products. Positioned as a leading entity in Sweden's financial advisory sector, Tydliga supports independent insurance and investment advisors with procurement, education, compliance, and administrative services. The company emphasizes customer-centric, tailored solutions for both private individuals and businesses. Technically, the website is built on a custom CMS with JavaScript and uses modern analytics tools like Plausible and Google Analytics. The site is well-structured, mobile-optimized, and secured with HTTPS, although it lacks some security headers and formal privacy and terms of service pages. Security posture is solid with no evident vulnerabilities, but improvements in compliance documentation and security headers are recommended. Overall, the website reflects a professional and trustworthy business with a moderate to high digital maturity level.

V

Vereniging Eigen Huis

werkenbijeigenhuis.nl

63

Vereniging Eigen Huis is a well-established Dutch association dedicated to supporting homeowners in the Netherlands. The website serves as an information and service platform targeting homeowners, providing resources and membership benefits. The association holds a strong market position within the real estate sector in the Netherlands, focusing on homeowner empowerment and related services. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO plugins, indicating a mature digital infrastructure. The site is mobile-optimized and incorporates standard web technologies for user experience and performance. Security-wise, the website enforces HTTPS, uses reCAPTCHA for form protection, and implements a cookie consent mechanism via Cookiebot, reflecting a good security posture. However, explicit privacy policies, terms of service, and incident response contacts are not found in the provided content, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with basic privacy requirements, but could enhance transparency and compliance documentation.

U

UMCU

umcutrecht.nl

65

UMC Utrecht is a large, well-established academic medical center in the Netherlands, providing healthcare, research, and education services. The website reflects a professional and comprehensive digital presence with strong branding and clear focus on patient care, research, and education. The institution maintains a consistent identity with its subsidiaries and partner sites, such as the Wilhelmina Kinderziekenhuis and recruitment and fundraising platforms. Technically, the site uses modern JavaScript frameworks including React, integrates analytics tools like Google Tag Manager and Microsoft Clarity with user consent mechanisms, and is hosted by a reputable Dutch registrar SURF B.V. Security posture is strong with HTTPS and DNSSEC enabled, though some security headers and explicit security policies are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, user-friendly, and professionally maintained.

G

GoThru Media Inc.

gothru.co

58

GoThru Media Inc. operates gothru.co, a specialized platform providing comprehensive 360 virtual tour software solutions tailored for businesses in real estate, tourism, architecture, and related sectors. The company offers tools for creating, editing, and publishing immersive virtual tours, including integration with Google Street View and VR platforms such as Meta Quest. Their product suite includes a Virtual Tour Creator, Street View Moderator, 360 Video Creator, and VR applications, positioning them as a niche leader in the virtual tour technology market. The website content is professionally presented, with clear navigation and multilingual support, targeting business users seeking advanced 360 imaging solutions. Technically, the website is built on a modern JavaScript stack leveraging Vue.js, Axios, and jQuery, hosted on Amazon AWS infrastructure. It integrates analytics and user engagement tools such as Google Analytics, Microsoft Clarity, and Chatwoot live chat. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, and DNSSEC is not enabled on the domain. No explicit security policies or incident response contacts are published, and cookie consent mechanisms are absent despite the use of tracking scripts, indicating partial privacy compliance. WHOIS data is consistent with the business identity, showing a domain registered since 2015 under GoThru Media Inc. in Canada, supporting legitimacy. Overall, gothru.co presents a credible and professional business platform with solid technical foundations but could improve its security posture and privacy compliance to enhance trust and regulatory adherence. Strategic enhancements in security headers, cookie consent, and published security policies are recommended to mitigate risks and align with best practices.

C

COMPASS Division

compass-ops.com

56

COMPASS Division is a specialized manufacturer and supplier of diving equipment, including breathing systems, buoyancy devices, and drysuits, serving military professionals, first responders, and commercial divers globally. The company has a longstanding history dating back to the 1960s and operates under the parent company Huish Outdoors. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site is built on WordPress with WooCommerce and Bootstrap, providing a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent management via Osano, though some security headers and policies are absent. The lack of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly reduces trustworthiness. Overall, the site is functional, professional, and compliant with basic privacy standards.

G

GIATA

giata.com

57

GIATA is a prominent technology company specializing in providing high-quality hotel content and mapping services globally. They maintain the world's largest hotel content database and offer AI-driven solutions for images, descriptions, and fact sheets, focusing on mapping and localization. Their target audience includes hotels, OTAs, tour operators, and travel agencies, positioning them as a key player in the travel technology sector. The company's website reflects a medium-sized enterprise based in Germany, with a consistent brand presence and professional content.

F

Fundación LALIGA

futuraaficion.com

57

Futura Afición is an educational initiative affiliated with Fundación LALIGA, focused on promoting positive values in football such as fair play, respect, and non-violence. The program targets primary education centers across Spain and lower-tier football clubs, aiming to foster a respectful fan culture among children. The website serves as an informational and engagement platform, offering downloadable brochures and program details. Technically, the site uses a modern JavaScript stack including jQuery, Owl Carousel, and Google Tag Manager, hosted by OVH sas. The site is mobile-optimized with good SEO practices but lacks advanced accessibility features. Security posture is solid with HTTPS enforced and domain protections in place, though improvements like DNSSEC and security headers are recommended. Privacy compliance is adequate with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy, though it lacks explicit contact information and detailed security or incident response policies.

W

Web Oficial del Villarreal CF

villarrealcf.es

71

Villarreal CF's official website serves as a comprehensive digital platform for the football club, providing extensive information about the club, teams, schedules, ticket sales, and merchandise. The site is well-structured, professionally designed, and supports multiple languages, catering to a diverse audience of fans and stakeholders. The technical infrastructure is based on WordPress with modern plugins and frameworks, ensuring a robust and scalable platform. Security measures such as HTTPS, security headers, and GDPR compliance are in place, reflecting a mature security posture. No critical vulnerabilities or blocking mechanisms were detected, indicating reliable accessibility and trustworthiness. Overall, the website effectively supports the club's business and fan engagement objectives while maintaining good security and privacy standards.

V

Valencia CF

valenciacf.com

58

Valencia CF's official website serves as a comprehensive digital platform providing fans and stakeholders with news, ticketing, merchandise, and club information. The site demonstrates a strong market position as the official media and communication channel of a major Spanish football club, targeting sports enthusiasts and club members. Technically, the website employs modern web technologies including Google Tag Manager, Video.js, and various analytics and advertising tools, ensuring a responsive and engaging user experience across devices. Security measures such as HTTPS and Content-Security-Policy headers are in place, though additional headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site is professional, content-rich, and trustworthy, though the absence of WHOIS data introduces some uncertainty about domain registration transparency.

Getafe CF operates an official website serving as the primary digital platform for the Spanish football club. The site provides comprehensive information including news, match results, ticket sales, merchandise, and club history, targeting fans and supporters. The website demonstrates a good level of digital maturity, utilizing modern web technologies such as Next.js and React, with integration of third-party services for analytics and cookie consent management. The hosting infrastructure appears to leverage Microsoft Azure Blob Storage for static assets, ensuring reliable content delivery. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not clearly published. The absence of WHOIS registration data raises questions about domain registration status, but the presence of official branding and social media links supports legitimacy. Overall, the website is professional, user-friendly, and compliant with GDPR requirements, though improvements in security transparency and domain registration verification are recommended.

U

Undeniably Dairy

usdairy.com

60

Undeniably Dairy operates as a prominent U.S. dairy industry resource, providing nutrition education, recipes, health benefits, and sustainability information. Funded by American dairy farmers and importers, it serves as a trusted platform to promote dairy consumption and industry transparency. The website is professionally designed, mobile-optimized, and rich in content, targeting consumers, farmers, and industry stakeholders. Technically, it leverages a modern CMS (Kentico) and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit contact and incident response information are lacking. The absence of WHOIS data is a notable anomaly, suggesting privacy protection or data retrieval issues, which slightly impacts trustworthiness. Overall, the site is credible and authoritative but could enhance transparency and security disclosures.

Saltisdata IT-Support is a small Swedish IT service provider specializing in home and business IT support primarily in Stockholm. With over 10 years of experience, they offer a broad range of services including Apple and Windows support, networking, smart home installations, and general IT consultation. Their business model focuses on on-site visits and remote assistance, targeting private individuals and companies. The website is professionally designed using WordPress and includes SEO optimizations and structured data, but lacks privacy and cookie policies, which may affect compliance. Technically, the site uses common WordPress plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and anti-spam measures but lacks DNSSEC and security headers, indicating room for improvement. Overall, the domain registration data supports legitimacy and trustworthiness. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, and implementing security headers to enhance security and compliance.

E

Events in Gozo

eventsingozo.com

73

Events in Gozo is a government-supported digital platform dedicated to promoting and listing events on Gozo Island, Malta. The website offers comprehensive event information ranging from festivals, music concerts, food fairs, arts, sports, to family and kids activities. Supported by the Ministry for Gozo and Planning, the platform serves residents and visitors seeking up-to-date event details and features a mobile app to enhance accessibility and user engagement. The site is professionally designed with clear navigation, mobile optimization, and SEO best practices, reflecting a mature digital presence for a relatively new domain established in 2023. Technically, the website is built on WordPress using modern plugins such as The Events Calendar, Yoast SEO, and Ajax Search Pro, with a responsive design and moderate performance. Hosting appears to leverage Azure DNS services, indicating a reliable infrastructure. Security posture is good with HTTPS enforced and domain status protections in place; however, DNSSEC is not enabled and security headers are not fully implemented, suggesting room for improvement in hardening the site against advanced threats. Privacy compliance is strong, with clear privacy and cookie policies, cookie consent mechanisms, and GDPR adherence. Contact information is transparent and includes official government email and phone contacts. No incident response or vulnerability disclosure policies are found, which is typical for government event platforms but could be enhanced for security maturity. Overall, Events in Gozo presents a trustworthy, well-maintained, and user-friendly platform with solid government backing. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, and establishing formal vulnerability disclosure and incident response policies to further strengthen security and trust.