Security Directory

V

Veðurstofa Íslands

gottvedur.is

55

Veðurstofa Íslands operates the official Icelandic meteorological website gottvedur.is, providing weather forecasts, warnings, and observations primarily for the Icelandic public and emergency responders. The site is relatively new, launched in 2023, and is currently in beta. It uses modern web technologies such as Next.js and React, hosted on Microsoft Azure infrastructure. The website is well-branded and professionally designed, offering good user experience and mobile optimization. However, it lacks visible privacy policies, terms of service, and explicit security policies, which are areas for improvement. Security posture is generally good with HTTPS enabled and cookie consent implemented, but DNSSEC is not enabled and security headers are not explicitly detected. Overall, the domain registration and hosting setup indicate a legitimate government entity with a trustworthy online presence.

C

CSG Foundation

csgfoundation.com

67

CSG Foundation is a non-profit organization dedicated to supporting communities, first responders, promising talents, and CSG Group employees. The foundation focuses on three key pillars: firefighter support, science and education, and employee assistance. The website is professionally designed using modern technologies such as Next.js and Sanity CMS, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, though some security policies and incident response information are missing. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of WHOIS data is a concern but the website's linkage to the reputable Czechoslovak Group supports its legitimacy.

S

Sedlecký kaolin a.s.

sedlecky-kaolin.cz

60

Sedlecký kaolin a.s. is a leading international producer of kaolin and related mineral raw materials, with a history dating back to 1892. The company focuses on mining, processing, and supplying kaolin, bentonite, clay, and sandstone primarily for industrial clients in manufacturing and construction sectors. They emphasize innovation, environmental responsibility, and collaboration with research institutions to maintain high quality standards. The website reflects a professional and consistent brand image targeting industrial customers. Technically, the site is built on modern React and Next.js frameworks, with integrations for Google Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional, supporting the company's market position as a reputable mineral producer.

D

Discord

bkmbfans.cz

71

Discord is a leading global communication platform primarily serving communities and gamers. The analyzed page is an invite to a Discord server dedicated to the BK Mladá Boleslav hockey club community, reflecting Discord's core service of enabling community engagement through chat and voice. The platform is well-established with a domain age of over 20 years and uses modern web technologies including React and WebSocket for real-time communication. Hosting and DNS services are provided by Cloudflare, ensuring robust infrastructure and performance. Security posture is strong with HTTPS enforced and domain registration protections in place, though some improvements such as enabling DNSSEC and adding explicit security headers could enhance security further. Privacy compliance is supported by comprehensive privacy and terms policies linked from the main domain, but the invite page lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

I

Intellify

intellify.lv

51

Intellify is a Latvian company specializing in building automation and energy efficiency solutions, offering services such as HVAC equipment management, IoT sensor integration, and cloud-based data platforms. As a subsidiary of Lafi Group, it benefits from over 20 years of industry experience and a strong market position in Latvia. The website reflects a professional business-to-business model targeting building managers and enterprises seeking to optimize building operations. Technically, the site is built on modern frameworks like Next.js and React, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers implemented, though privacy compliance is lacking due to missing policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and compliance features.

S

STUDENT AGENCY TRAVEL k.s.

regiojethotels.cz

55

Regiojethotels.cz is a professionally managed hospitality website operated by STUDENT AGENCY TRAVEL k.s., offering a network of hotels, cottages, and pensions primarily in the Czech Republic and Austria. The business targets families, skiers, tourists, and corporate groups seeking self-service lodging with half-board dining options. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated with Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy, user-friendly, and well-positioned in its niche market.

S

STUDENT AGENCY TRAVEL k.s.

dovolena.cz

66

STUDENT AGENCY TRAVEL k.s. operates dovolena.cz, a comprehensive online travel platform offering a wide range of holiday packages, flight tickets, train and bus tickets, travel insurance, and related services primarily targeting Czech and German travelers. The company is well-established, with a domain age dating back to 2000, and maintains a strong market position supported by multiple subsidiaries and partnerships. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager and reCAPTCHA for analytics and security, and enforces HTTPS with strong security headers. Privacy and cookie policies are comprehensive and GDPR compliant, with an active consent mechanism. Contact information and trust indicators such as certifications and memberships are clearly presented, enhancing business credibility. No critical security issues or content safety concerns were detected.

S

STUDENT AGENCY TRAVEL k.s.

studentagency.cz

65

STUDENT AGENCY is a well-established Czech travel company offering a broad range of travel services including flight tickets, bus tickets, vacations, and language stays. With a market presence spanning over 30 years, it holds a strong position in the transportation sector in the Czech Republic. The website reflects a professional and comprehensive online travel agency platform targeting travelers seeking affordable and convenient travel options. The company operates multiple related domains serving different travel needs, indicating a diversified service portfolio. Technically, the website is built on modern frameworks such as Next.js and React, incorporating Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a robust security posture. However, the absence of visible privacy and cookie policies, as well as lack of WHOIS transparency, slightly reduce the overall trust and privacy compliance score. No explicit incident response or vulnerability disclosure information is found, which could be improved to enhance security transparency. Overall, the site is secure, professional, and trustworthy with room for improvement in privacy and compliance documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing WHOIS data transparency, and establishing clear security incident response and vulnerability disclosure channels to strengthen compliance and trust.

S

STUDENT AGENCY TRAVEL k.s.

sa.cz

66

STUDENT AGENCY TRAVEL k.s. operates a comprehensive online travel platform primarily serving the Czech Republic. The company offers a wide range of travel-related services including flight tickets, bus tickets, holiday packages, language stays, hotel bookings, and travel insurance. With a market presence of over 30 years, it holds a strong position in the regional travel market, targeting travelers, students, and general consumers seeking affordable and convenient travel options. The website reflects a mature business model with multiple related domains and a consistent brand identity. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA v3 for analytics and security. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. Security best practices are observed, including HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact information is transparent, enhancing business credibility. However, the absence of WHOIS data and vulnerability disclosure mechanisms slightly reduce trust scores. Overall, the site is professional, secure, and trustworthy, suitable for general audiences without any adult or questionable content.

Zvířetice Vision 21 is a small Facebook community page focused on community engagement through photo and video sharing. The page has a modest following with 301 likes and 339 followers, indicating a niche or local audience. The business model is primarily social and community-driven, leveraging the Facebook platform for content distribution and interaction. The website is hosted and managed by Facebook, utilizing modern web technologies such as React and JavaScript, ensuring a stable and performant user experience. Mobile optimization is good, consistent with Facebook's platform standards. Security posture is strong due to Facebook's infrastructure, with HTTPS enforced and robust SSL configuration. However, the page lacks explicit privacy, cookie, and security policies, which limits privacy compliance and transparency. No direct contact or incident response information is provided, which is typical for Facebook community pages but may impact trust for business users. Overall, the domain is highly legitimate as it is part of Facebook's main domain, but the page itself offers limited business credibility and compliance information.

A

Agency Vista LLC

agencyvista.com

67

Agency Vista LLC operates a leading online platform that connects brands with over 50,000 verified digital marketing agencies. Founded in 2019 and based in the United States, the company provides an all-in-one solution for marketing agencies to claim profiles and for businesses to find suitable marketing partners. The website is built on a modern React and Gatsby stack, leveraging AWS DNS and integrated with Google Analytics and HubSpot for marketing and analytics. The platform demonstrates strong digital maturity with excellent design, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforcement, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is professional, trustworthy, and well-positioned in the marketing technology sector.

D

Digitální a informační agentura

identitaobcana.cz

72

The website www.identita.gov.cz is an official Czech government portal managed by the Digitální a informační agentura, providing digital identity services to Czech citizens. It facilitates secure login and identity management for multiple government and public service portals, including Mobilní klíč eGovernmentu, NIA ID, and bankovní identita. The portal is well-positioned as a central hub for digital identity in the Czech Republic, offering comprehensive services and user support.

R

RegioJet a.s.

regiojet.cz

69

RegioJet a.s. is a well-established transportation company founded in 2009, operating primarily in the Czech Republic and across Europe. The company offers train and bus ticketing services with a strong focus on customer service and convenience. Their website reflects a mature digital presence with multilingual support, comprehensive travel options, and integration with partner services such as hotel bookings and language stays. The company holds a strong market position as a leading private transport operator in Central Europe. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized, fast, and accessible, with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the security posture is robust, though the site lacks a dedicated security policy and incident response contact information. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness. The risk assessment is low, with recommendations focusing on enhancing transparency around security policies and incident response. The company demonstrates a professional and trustworthy online presence suitable for its business sector.

D

dacia

dacia.cz

68

The website www.dacia.cz serves as the official Czech Republic portal for the Dacia automobile brand, providing comprehensive information on new and used vehicles, financing options, insurance, and after-sales services. It targets consumers in the Czech market interested in affordable and hybrid/electric vehicles. The site demonstrates a mature digital presence with modern technologies such as React, optimized images, and integration with Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policy and security headers, which are recommended for enhanced compliance and protection. The absence of WHOIS data reduces domain trustworthiness, but the branding and content strongly indicate legitimacy as an official brand site. Strategic recommendations include publishing clear privacy and terms policies, adding security headers, and providing contact information for security incidents and data protection officers.

U

Unihoc

unihoc.com

65

Unihoc is a well-established company specializing in floorball sticks and equipment, operating primarily through an e-commerce platform. The company has a strong market position as a world-leading brand in floorball gear, targeting players and teams globally. Their website showcases a comprehensive product catalog with a focus on innovation and quality. Technically, the site is built on modern frameworks like React and Next.js, hosted with reputable providers and optimized for performance and mobile use. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting a medium-sized retail business with a mature digital presence.

O

OptimizeCX

zeroto10m.com

64

Zero to $10M is a SaaS-focused community platform operated by OptimizeCX, offering founders a real-time growth system through educational playbooks, private Slack groups, weekly live calls, and podcasts. The platform targets SaaS founders aiming to scale to $10M ARR with practical, no-theory content and direct founder access. Technically, the site is built on modern frameworks like Next.js and React, hosted on Vercel, and employs PostHog for analytics with a cookie consent mechanism that denies tracking by default. Security posture is moderate with HTTPS enforced but lacks advanced security headers and published policies. WHOIS data shows inconsistencies, including a future domain creation date, which raises legitimacy questions but the professional content and branding suggest a legitimate early-stage business. Overall, the site is well-designed, mobile-optimized, and trustworthy for its niche audience.

I

InstantDocs

instantdocs.com

62

InstantDocs is a technology company specializing in AI-powered documentation solutions for product teams and enterprises. Their platform automates the creation, management, and publishing of product documentation including help docs, guides, manuals, SOPs, and knowledge bases. Positioned as a next-generation AI-native tool, InstantDocs targets startups and global industry leaders seeking to improve self-service support and reduce support tickets. The company is part of OptimizeCX, with sister companies Helply and Zero to $10M, indicating a broader ecosystem focused on customer experience optimization. Technically, the website leverages modern frameworks such as React and Next.js, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, InstantDocs presents a professional, trustworthy, and technically mature web presence with a clear business focus on AI-driven documentation automation.

O

OptimizeCX

optimizecx.com

63

OptimizeCX is a technology company founded in 2016 that provides a suite of SaaS tools focused on enhancing customer support experiences. Their offerings include Helply, an AI-driven customer support agent platform; InstantDocs, an AI-powered documentation creation tool; and Zero to $10M, a community for SaaS founders. The company positions itself as a provider of fast, focused tools without unnecessary complexity, targeting customer-first companies and SaaS teams. The website reflects a modern, professional design with clear branding and consistent messaging across its subsidiaries. Technically, the site is built on a modern stack using Next.js and hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The domain registration is consistent and appropriate for the business age, enhancing trustworthiness. Overall, OptimizeCX presents as a credible and professional SaaS technology provider with a strong digital presence.

C

Novinky | Chodrockfest | rockový open-air festival

chodrockfest.cz

54

Chodrockfest.cz is a Czech-language website dedicated to promoting and providing news about the Chodrockfest rock open-air festival. The site targets rock music fans and festival attendees primarily in the Czech Republic. The business model focuses on event promotion and information dissemination, with a local/regional market position. The website was founded in 2010, consistent with the domain registration date, and presents a professional design with good content relevance and navigation clarity. Technically, the website leverages modern web technologies including React, Next.js, and Material-UI, with Google Tag Manager integrated for analytics. The site shows moderate performance and good mobile optimization but lacks advanced accessibility features. Hosting appears to be linked to the Czech registrar WEDOS, aligning with the local focus. From a security perspective, the website lacks critical security headers and does not present privacy or cookie policies, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is available. The absence of contact information and security policies reduces trustworthiness and business credibility. The domain WHOIS data is transparent and consistent with the website's business and location, supporting legitimacy. Overall, the website is functional and professionally designed but requires significant improvements in privacy compliance, security posture, and contact transparency to enhance trust and regulatory adherence.

F

freeCodeCamp.org

freecodecamp.org

43

freeCodeCamp.org is a leading non-profit educational platform dedicated to providing free coding education globally. It offers an extensive curriculum covering web development, data science, and programming, supported by a large and active community. The platform is widely recognized for its certifications and open-source curriculum, targeting learners ranging from beginners to career changers. Technically, the website leverages modern frameworks such as React and Gatsby, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, freeCodeCamp.org demonstrates a mature digital presence with high trustworthiness and professionalism.

Relivo.app presents a login page for a web application that supports social login via Facebook and Google (though Google login is currently disabled). The site uses modern web technologies such as React and Next.js, indicating a contemporary technical infrastructure. The page is minimalistic, focusing on user authentication without additional business or policy information. The absence of privacy, cookie, and terms of service policies, as well as contact details, limits the transparency and compliance posture of the site. Security-wise, HTTPS is implied by the URL, but no explicit security headers or policies are present, which suggests room for improvement in security best practices. Overall, the site appears functional and safe for general audiences but lacks comprehensive compliance and trust indicators.

C

Crewfare

crewfare.com

72

Crewfare is a technology company specializing in travel solutions tailored for event creators, hotels, travel agencies, and attendees. Their platform offers tools to source hotel room blocks, manage internal travel, and monetize attendee bookings, positioning them as a key player in the event-centric hospitality technology market. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integrations with major analytics and marketing platforms. Security posture is strong with HTTPS, security headers, and domain management best practices, although DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Crewfare presents a professional, trustworthy, and technically sound online presence suitable for its business objectives.

N

naZavody.cz s.r.o.

nazavody.cz

65

naZavody.cz s.r.o. operates an online registration platform specialized in managing race registrations and sporting events primarily in the Czech Republic. The website offers services such as race registration, start list management, and profile pages for races, targeting both racers and event organizers. The platform is positioned as a trusted local solution with a focus on user-friendly event management and registration processes. Technically, the website is built on a modern React framework, leveraging cloud services like Cloudinary for media and Google Tag Manager for analytics, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and modern security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent mechanisms. Overall, the site presents a professional and trustworthy digital presence with room for improvement in transparency around security and incident handling.

T

THE POWER OF EVENTS (UK) – Showcase, Respect & Value the UK Events Industry

thepowerofevents.org

46

The Power of Events (UK) is a not-for-profit platform dedicated to showcasing and supporting the UK events industry. It provides an overview of the industry, event analysis, data evaluation, and community support services. The platform targets event professionals, new entrants, clients, investors, government entities, and media. The website demonstrates a moderate level of digital maturity, utilizing React, JavaScript, and integrating YouTube and Google Analytics for content delivery and user tracking. While the site is professionally designed with clear navigation and mobile optimization, it lacks explicit privacy and cookie policies, as well as detailed contact information, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal incident response policies. Overall, the platform appears legitimate and trustworthy, though WHOIS data is unavailable due to query failure, likely indicating privacy protection.

C

Captain Morgan

captainmorgan.com

74

Captain Morgan is a well-established brand specializing in spiced rum and related alcoholic beverages, holding a strong market position as America’s #1 Spiced Rum. The website serves as a comprehensive platform for product information, cocktail recipes, and brand engagement, targeting adult consumers interested in alcoholic beverages. Technically, the site is built using modern frameworks such as Next.js and React, with good performance, mobile optimization, and accessibility features. Security posture is strong with HTTPS enforcement and standard security headers, although some improvements could be made in transparency around incident response and vulnerability disclosures. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent management. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. Overall, the site is professional, trustworthy, and well-maintained, suitable for its target audience.

R

Rossmann

rossmann.pl

66

Rossmann.pl is a major Polish e-commerce platform specializing in cosmetics, personal care, and perfumes. The website offers a wide range of products, nearly 30,000 items, with competitive pricing and promotional campaigns. It targets consumers in Poland seeking beauty and personal care products online. The platform demonstrates a mature digital presence with modern technologies such as React and Next.js, and integrates analytics and marketing tools like Google Analytics and Tag Manager. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is well-implemented with HTTPS and some security headers, though there is room for improvement in security header completeness and privacy compliance documentation. No blocking or WAF challenges were detected, indicating full accessibility.

Helply is a technology company specializing in AI-powered customer support automation. Their platform offers next-generation AI agents that help service leaders scale high-quality support by learning from past tickets to improve speed and accuracy across multiple languages. Positioned as a SaaS solution, Helply targets customer support teams from startups to global industry leaders, providing services such as AI agents, knowledge management, workflow automation, and integrations with popular help desk tools. The company is part of OptimizeCX and has been operating since 2007, indicating a mature presence in the market. Technically, Helply's website is built using modern web technologies including React and Next.js, hosted on AWS infrastructure. The site demonstrates excellent performance, mobile optimization, and accessibility. Privacy and cookie consent mechanisms are implemented with a clear opt-out approach for ad and analytics storage, reflecting good privacy compliance. The domain registration is consistent with the business claims, with no privacy protection and a long domain age supporting legitimacy. From a security perspective, the website enforces HTTPS and employs cookie consent to restrict tracking by default. However, it lacks DNSSEC and some recommended security headers, and no public vulnerability disclosure or security.txt file was found. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved by adding DNSSEC and security headers. The overall risk assessment is low, with a professional and trustworthy online presence. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure policy, and enhancing security headers to further strengthen the security posture and trustworthiness of the platform.

L

Lubella (brand under Maspex Group)

pelneziarno.pl

56

The website uwielbiam.pl is a Polish food and recipe platform primarily promoting the Lubella brand and related food products. It serves as a content marketing channel targeting general consumers interested in cooking and meal planning. The site uses modern web technologies such as Next.js and React, with integration of Google Tag Manager and cookie consent mechanisms. However, the accessed URL returns a 404 error page, indicating the requested resource is not available. Security posture is moderate with HTTPS enabled but lacks explicit security headers and detailed security policies. Privacy compliance is supported by a comprehensive privacy policy and cookie consent, but direct contact information is limited to a contact form. Overall, the domain registration is consistent and legitimate, reflecting a trustworthy business presence in Poland.

M

Maspex Romania (implied from privacy policy URL)

tedi.ro

44

Tedi.ro is a Romanian website dedicated to the Tedi brand, primarily targeting children and parents with a focus on food products, educational content, and interactive activities. The site serves as a marketing and engagement platform for the brand, which is part of Maspex Romania, a well-established company since 2003. The website features product information, news, recipes, games, and educational programs, positioning itself as a trusted family-friendly resource. Technically, the site uses modern web technologies including React and jQuery, hosted on Hosterion infrastructure, and implements HTTPS with cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is good with a clear privacy policy and cookie consent, though no terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

T

TEDI

tedi.bg

45

Tedi.bg is a Bulgarian website dedicated to promoting children's beverages such as nectars and juices, alongside educational and entertaining content including videos and games. The site targets children and their parents, providing recipes, product information, and interactive content to engage its audience. The brand appears well-established locally with a consistent and professional online presence. Technically, the website employs modern web technologies including React, jQuery, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. Hosting is provided by SuperHosting.BG, a known Bulgarian hosting provider. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the site is safe, professional, and trustworthy with a moderate to good technical and security maturity.

A

Akumulatory Ogniwo

akumulatory-ogniwo.pl

39

Akumulatory Ogniwo is a small Polish company specializing in the online retail and servicing of lead-acid batteries under the SSB brand, including series SB, SBL, SBL HR, and gel batteries SBCG. The company targets both consumers and businesses requiring reliable energy storage solutions. Their market position is niche-focused within the energy sector in Poland, leveraging e-commerce and service offerings to reach customers. The website is built on WordPress with WooCommerce, integrating modern technologies such as React and jQuery, and optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some advanced security headers and published policies. Overall, the business appears legitimate and consistent with its domain registration data, though improvements in privacy compliance and security transparency are recommended.

Tork is a leading global brand specializing in professional hygiene and cleaning products, targeting businesses across various industries. The website presents a comprehensive portfolio of hygiene articles, cleaning products, dispensers, and related services tailored for business customers. The brand is positioned as a market leader under the parent company Essity, reflecting a strong market presence and trusted reputation. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. Privacy compliance is robust with GDPR-aligned policies and a consent management platform in place. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like Google reCAPTCHA Enterprise. However, the absence of WHOIS domain registration data and explicit security policies slightly detract from overall trust. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and verifying domain registration details to enhance credibility and trust.

P

Production Manager

production-manager.pl

48

Production Manager is a Polish media platform specializing in manufacturing industry news, events, and technological advancements. The website targets professionals and managers in manufacturing sectors, providing news articles, event information, and multimedia content. Technically, the site is built on modern frameworks such as Next.js and React, with integration of Google Tag Manager and Cookiebot for analytics and consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data confirms the domain's legitimacy with consistent registrant information matching the business profile. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

F

Food Union Latvia

foodunion.lv

69

Food Union Latvia is a well-established food manufacturing company specializing in dairy products with a strong market presence in Latvia since 1909. The company focuses on creating beloved local brands and emphasizes consumer well-being. Their website reflects a professional and consistent brand image, targeting general consumers in Latvia and neighboring regions. The business model centers on manufacturing and marketing food products, supported by a clear digital presence including social media and multilingual support via a partner international site. Technically, the website is built using modern technologies such as React and integrates Google Analytics and Cookiebot for analytics and privacy compliance. The site is served over HTTPS with a cookie consent mechanism that complies with GDPR requirements. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and a solid business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve trust and security posture.

SAP Analytics Cloud is a comprehensive cloud-based analytics and planning platform integrated within the SAP Business Data Cloud ecosystem. It offers advanced AI-powered analytics, business intelligence, and enterprise planning capabilities designed to enhance decision-making and operational efficiency for businesses. The website reflects SAP's strong market position as a visionary and leader in analytics platforms, supported by industry recognitions such as Gartner and BARC reports. Technically, the site leverages modern web technologies including SAP UI5, React, and Adobe Experience Manager, ensuring a fast, responsive, and accessible user experience. Security posture is robust with HTTPS enforcement and consent management, though explicit security headers and vulnerability disclosure mechanisms could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for SAP customers and prospects.

U

UCB Biopharma LTDA

programasempreemfrente.com.br

57

The website 'Sempre em Frente' is a patient support program operated by UCB Biopharma LTDA, targeting Brazilian patients diagnosed with chronic autoimmune diseases such as rheumatoid arthritis, psoriatic arthritis, ankylosing spondylitis, Crohn's disease, and plaque psoriasis. The program offers guidance, educational resources, welcome kits, and multidisciplinary assistance to improve patients' quality of life. The site is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, it leverages modern frameworks like React and Next.js, hosted on Microsoft Azure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. Overall, the site is trustworthy, compliant with privacy regulations, and free from suspicious or adult content.

V

Vaillant GmbH

myvaillantpro.ch

66

Vaillant GmbH operates a professional B2B platform, myVaillant Pro, targeting installers, planners, and partners in Switzerland. The website provides access to a webshop, technical documentation, planning and installation tools, and customer service resources. The platform is well-branded, consistent with the Vaillant Group identity, and serves as a critical digital touchpoint for professional partners. Technically, the site leverages modern frameworks such as Next.js and React, integrates consent management and analytics tools, and enforces strong security headers and HTTPS, reflecting a mature digital infrastructure. Security posture is strong with no evident vulnerabilities, though explicit security policy and incident response pages are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting Vaillant's market position in the energy sector.

K

Kompania Piwowarska

tyskie.pl

44

The website tyskie.pl serves as a brand landing page for Tyskie, a well-known Polish beer brand under Kompania Piwowarska. It primarily focuses on brand promotion with minimal content, linking to a partner site browarytyskie.pl and providing a cookie policy document. The site uses modern web technologies including Next.js and React, with Google Tag Manager for analytics and Cookie Script for consent management. The site is mobile optimized and presents a professional design but lacks comprehensive content such as privacy policy, terms of service, and contact information. Security posture is moderate with HTTPS enabled and cookie consent implemented, but no security headers were detected. WHOIS data aligns well with the brand, indicating legitimacy. Overall, the site is suitable for mature audiences due to its alcohol-related content.

F

Fundrbird

fundrbird.com

68

Fundrbird is a specialized SaaS provider offering integrated fund operations software tailored for private equity and venture capital funds. The platform automates fund accounting, investor reporting, KYC & AML compliance, and investor onboarding, serving over 550 funds with EUR 50 billion assets under administration. The company positions itself as a mature and trusted solution with a strong client retention rate and ISO 27001:2022 certification, indicating a commitment to information security. Technically, the website is built on a modern Next.js framework with React, hosted with Cloudflare DNS and registered via Amazon Registrar. It employs Google reCAPTCHA v3 for form security and demonstrates excellent mobile optimization and performance. SEO and accessibility are well addressed, though some security headers are missing. Security posture is solid with HTTPS enforced and domain registration locks in place, but improvements are recommended such as enabling DNSSEC, adding security headers, and publishing incident response and security policies. Privacy compliance is partial; a privacy policy exists but lacks cookie consent mechanisms and GDPR compliance indicators. Overall, Fundrbird presents a professional, trustworthy, and technically sound online presence with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would further strengthen their security posture and regulatory alignment.

R

rentiT ltd.

rentit.hu

56

rentiT ltd. is a well-established event IT company founded in 1996, specializing in comprehensive event technology solutions, software development, equipment rental, and event production management. The company serves a broad B2B audience including corporate clients and event organizers, positioning itself as a trusted provider with a strong client portfolio and international presence. The website reflects a mature digital infrastructure built on modern technologies such as Next.js and React, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS and security headers implemented, though the absence of explicit security policies and cookie consent mechanisms suggests room for improvement in compliance and transparency. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

P

PORSCHE HUNGARIA KERESKEDELMI KFT.

cupraofficial.hu

57

The website www.cupraofficial.hu represents the CUPRA automotive brand in Hungary, operated by Porsche Hungaria Kereskedelmi Kft. It focuses on promoting high-performance and electric vehicles, offering configurators, dealership information, and business fleet solutions. The site is well-positioned in the premium automotive market segment in Hungary, leveraging Porsche Holding's infrastructure and APIs. Technically, the site uses modern web technologies including Next.js and React, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

Coral Travel

coraltravel.pl

59

Coral Travel Poland is a well-established travel agency specializing in holiday packages, flights, and accommodation services for Polish customers. The company operates under the Coral Travel Group umbrella, offering a wide range of travel-related services with a strong market presence in Poland. Their website is professionally designed using modern technologies such as React and Ant Design, providing a good user experience with mobile optimization and clear navigation. Security measures are robust, including HTTPS enforcement and comprehensive security headers, ensuring safe user interactions. Privacy policies and cookie consent mechanisms are in place, reflecting compliance with GDPR requirements. Overall, the website demonstrates a mature digital infrastructure and trustworthy business operations.

E

Eurostar

eurostar.com

79

Eurostar is a prominent transportation company specializing in high-speed train services connecting major European cities such as London, Paris, Brussels, Amsterdam, and Cologne. The website serves as the official platform for booking train tickets and holiday packages, targeting general travelers across Europe. The business model focuses on providing efficient and convenient rail travel options, positioning Eurostar as a leading player in the European transportation sector. The website's content and branding are professional and consistent, reinforcing its market position and trustworthiness. Technically, the website employs modern web technologies including React and Next.js, with a CMS powered by Sanity. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by structured data and social media integration. Despite the lack of explicit hosting provider information, the infrastructure appears robust and well-maintained. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and publicly available security policies or incident response information. The absence of privacy and cookie policies, as well as WHOIS data, presents compliance and trust concerns that should be addressed to enhance transparency and user confidence. Overall, Eurostar's website is a high-quality, professional platform with strong business credibility and technical maturity. Addressing privacy compliance and security transparency will further strengthen its security posture and regulatory adherence.

E

Everyday Health Care

everydayhealth.care

62

Everyday Health Care operates a comprehensive online platform dedicated to connecting patients with healthcare providers across various specialties, conditions, procedures, and locations. The website is affiliated with Everyday Health, Inc., a well-established healthcare media company, enhancing its market credibility. The platform offers detailed provider profiles, including certifications, specialties, and affiliations with top hospitals, positioning itself as a trusted resource for healthcare provider discovery. Technically, the website leverages modern web technologies including React and Next.js, ensuring a responsive and performant user experience across devices. The presence of structured data and SEO best practices further supports discoverability and accessibility. Privacy and cookie consent mechanisms are implemented in compliance with GDPR, reflecting a mature approach to user data protection. From a security perspective, the site enforces HTTPS, employs security headers, and integrates cookie consent tools, indicating a solid security posture. However, explicit security policies and incident response contacts are not publicly disclosed, representing areas for improvement. The WHOIS data is privacy protected, which is common in healthcare domains, and does not detract from the site's legitimacy given its professional presentation and affiliations. Overall, Everyday Health Care presents a secure, privacy-conscious, and user-friendly platform with strong business credibility in the healthcare sector. Strategic enhancements in transparency around security policies and incident response would further strengthen trust and compliance.

P

PKO Leasing

pkoleasing.pl

64

PKO Leasing is a leading financial services provider in Poland specializing in leasing and financing of vehicles, machinery, and equipment. The company operates as part of the PKO Bank Polski group, offering a broad portfolio of leasing, loan, and insurance products tailored to businesses and individuals. The website reflects a professional and consistent brand image, providing detailed product information and easy navigation for users. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and privacy compliance documentation are lacking. Overall, the site demonstrates a mature digital presence aligned with a large financial institution.

G

Glamox

glamox.com

70

Glamox is a Norwegian industrial group specializing in the development, manufacturing, and distribution of professional lighting solutions globally. The company positions itself as an established player in the energy and manufacturing sectors, targeting professional markets requiring advanced lighting products. The website reflects a mature digital presence with a professional design, clear branding, and comprehensive cookie consent mechanisms, indicating a strong commitment to privacy and regulatory compliance. Technically, the site leverages modern technologies including React, Episerver CMS, and Microsoft Azure hosting, supported by analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Salesforce Pardot. Security posture is solid with HTTPS enforced and reputable third-party data processors, though explicit security headers and policies could be more visible. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

H

hmmh Poland sp. z o.o.

hmmh.pl

39

hmmh Poland sp. z o.o. is a professional software house specializing in web design, WordPress development, and e-commerce solutions. The company offers a comprehensive range of services including SEO, marketing automation, analytics, and outsourcing, targeting businesses seeking robust digital presence and e-commerce platforms. Recognized as a Shopware Gold Partner and awarded multiple industry accolades, hmmh Poland holds a strong market position in the technology and e-commerce sectors within Poland. The website reflects a mature digital infrastructure with modern technologies such as WordPress, Symfony, Laravel, React, and Vue.js, integrated with leading e-commerce platforms like Shopware, WooCommerce, and Salesforce Commerce Cloud. The site is well-optimized for mobile and SEO, featuring clear navigation and professional content. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though formal security policies and incident response contacts are not publicly documented. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, hmmh Poland demonstrates a credible, trustworthy, and technically competent online presence.

E

Everyday Health

everydayhealth.com

72

Everyday Health is a well-established digital health media company founded in 2002, providing trusted, medically reviewed health information, expert advice, and wellness resources to a broad audience. The website offers extensive content on health conditions, nutrition, fitness, product reviews, and tools such as symptom checkers and vaccine planners. It targets general consumers seeking reliable health information and wellness guidance. Technically, the site uses modern web technologies including React and Sitefinity CMS, with integrations for advertising and analytics through reputable providers like Google Tag Manager and Rubicon Project. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses reCAPTCHA for bot protection, and implements cookie consent mechanisms, but lacks explicit security headers and a published security.txt file. The WHOIS data for the domain is unavailable, which slightly reduces domain registration transparency, but the site's content quality, editorial policies, and social media presence strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with minor areas for security and transparency improvement.

R

Roche Polska

roche.pl

63

Roche Polska is a leading healthcare company in Poland, providing innovative solutions in health protection. The website reflects a professional and consistent brand image aligned with Roche's global identity. The target audience includes healthcare professionals and patients within Poland. Technically, the site is built using modern frameworks such as Gatsby and React, offering good mobile optimization and accessibility. However, there is a lack of visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The security posture is moderate with no detected blocking or WAF interference, but the absence of security best practices lowers the overall security score. Overall, the website is credible and trustworthy but could enhance compliance and security transparency.

ATB Therapeutics is a pioneering biotechnology company specializing in novel antibody therapies targeting oncology and auto-immune diseases. Their innovative atbody format and plant-based manufacturing technology position them as an emerging player in the biotech sector, focusing on unmet clinical needs. The company operates primarily in Belgium and has a small but focused organizational size, with a domain age consistent with their founding year of 2017. The website reflects a professional and consistent brand image, targeting healthcare professionals, investors, and partners. Technically, the website is built on modern web technologies including React, uses slick carousel for UI elements, and integrates Google Analytics for user tracking. Hosting is provided by One.com A/S, and the site is mobile-optimized with good performance. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security policies. No cookie consent mechanism is present, which impacts GDPR compliance. No incident response or vulnerability disclosure information is available, indicating a potential gap in security transparency. Overall, the website is trustworthy and professional but would benefit from enhanced security practices and privacy compliance measures to strengthen its risk posture and user trust.