Security Directory

S

SupportStandard

supportstandard.com

60

SupportStandard is a professional WordPress maintenance service provider offering tiered subscription plans focused on updates, backups, monitoring, and security. The company targets small to medium businesses seeking reliable and expert WordPress site care. The website is built on a modern React and Next.js stack, delivering excellent performance, mobile optimization, and SEO. Security posture is good with HTTPS and domain protections, though improvements are recommended in DNSSEC, security headers, and cookie consent mechanisms. WHOIS data shows inconsistencies with a future domain creation date, which slightly impacts trust. Overall, the site presents a professional and trustworthy business with room for security and compliance enhancements.

M

Mám Dron

mamdron.sk

52

Mám Dron is a Slovak non-profit association dedicated to supporting drone users through information dissemination, insurance services, job listings, and educational courses. The website serves as a hub for drone pilots, companies, institutions, and government bodies interested in drone technology and regulation. The association appears to be well-positioned within its niche market in Slovakia, focusing on community support and technological solutions for drone operations. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integration of Google Analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and formal security policies. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the site is professional and trustworthy but could improve in transparency and security documentation.

A

AidantK+

aidantkplus.fr

60

AidantK+ is a French healthcare support platform dedicated to informing and assisting close caregivers of cancer patients. The website offers a scientifically validated Mini-Zarit questionnaire to assess caregiver burden and provides information on available aids and support resources. The platform targets a niche audience of caregivers, positioning itself as a valuable informational resource in the healthcare non-profit sector. Technically, the website employs modern JavaScript frameworks such as Turbo-Rails and Stimulus, uses Bootstrap for responsive design, and integrates analytics tools like Matomo and Google Tag Manager. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and formal privacy policies are absent. No contact information or incident response channels are publicly available, which limits transparency. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve compliance and security transparency.

J

JUDr. Zuzana Staňková

advokat-prague.cz

38

The website advokat-prague.cz represents JUDr. Zuzana Staňková, a Czech legal professional offering a broad range of legal services including family law, civil law, commercial law, labor law, insolvency, and litigation. The site targets individuals and companies in the Czech Republic seeking legal counsel. The business is positioned as an independent legal practitioner with a focus on personalized client service. The website content is well-structured, professionally presented, and includes detailed service descriptions and contact information, supporting a high level of business credibility. Technically, the site is built on WordPress using WPBakery Page Builder and optimized with Yoast SEO and WP Rocket plugins. Hosting and DNS are managed via WEDOS and Cloudflare respectively, ensuring good performance and availability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No major performance issues were detected. From a security perspective, the site uses HTTPS and benefits from Cloudflare DNS, but lacks explicit security headers such as CSP or HSTS. No privacy or cookie policies are present, which is a compliance gap under GDPR. No incident response or vulnerability disclosure mechanisms are found. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

368MEGA is an Indonesian online gambling platform offering a wide range of gaming services including slots, live casino, sportsbook, lottery, and poker. The website targets adult users interested in online betting and gaming, positioning itself as a leading gaming site with multiple game providers and an affiliate program. The technical infrastructure includes modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, with hosting supported by Cloudflare DNS services. The website is mobile-optimized and provides a professional user experience with clear navigation and good content quality. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but requires improvements in privacy and security policies to enhance trust and compliance.

Schenker Technologies GmbH is a German company specializing in customized high-performance laptops and desktop PCs, operating since 2002. The company markets its products under the brands XMG and SCHENKER, targeting customers who require tailored computing solutions. The website is professionally built on WordPress using Elementor, with good SEO and mobile optimization. The technical infrastructure includes Cloudflare DNS services and HTTPS encryption, ensuring secure and reliable access. However, the website lacks visible privacy and cookie policies, as well as explicit contact information, which impacts privacy compliance and user trust. Security posture is adequate with HTTPS but could be improved by adding security headers and formal security policies. Overall, the website presents a credible business with room for improvement in compliance and security transparency.

B

BSS Commerce

bsscommerce.com

74

BSS Commerce is a global full-service eCommerce agency specializing in Magento and Shopify platforms, offering a wide range of development services and extensions/apps. The company has a strong market position with over 10 years of experience, 100,000+ customers, and multiple official platform partnerships and certifications. Their website reflects a mature digital infrastructure with modern technologies, comprehensive analytics, and good privacy compliance. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

T

teeinblue

teeinblue.com

65

Teeinblue is a specialized SaaS provider offering a product personalization tool tailored for print-on-demand merchants on the Shopify platform. The company positions itself as a leading solution in this niche, enabling merchants to add customizable options such as images, text, and maps to their products. The website reflects a professional and consistent brand image, targeting Shopify merchants seeking enhanced product customization capabilities. Technically, the site leverages Shopify's infrastructure, integrates multiple analytics and marketing tools, and employs modern JavaScript frameworks and third-party services like Crisp chat and PageFly builder. Security posture is solid with HTTPS enforced and domain status protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

D

Darklace Limited

kvpzr.cz

47

Adell Casino is an online gambling platform operated by Darklace Limited, licensed in Cyprus. The website offers a variety of casino games including slots, live dealer games, jackpots, and video poker, targeting adult players primarily in Czech and German languages. The platform provides demo modes, multiple payment options, and various bonuses to attract and retain players. Technically, the site is built on modern frameworks such as Next.js and React, hosted behind Cloudflare DNS services, and shows moderate performance and good mobile optimization. However, the site lacks explicit privacy and terms of service pages, security headers, and incident response contact information, which are critical for compliance and trust. The WHOIS data shows a suspicious domain creation date in the future, which raises concerns about legitimacy. Overall, the site is functional and professional but requires improvements in security posture and compliance documentation.

Ř

Římskokatolická farnost Radešínská Svratka, Olešná na Moravě

pallotini-pastorace.cz

56

The website represents the Roman Catholic parishes of Radešínská Svratka and Olešná na Moravě, providing parishioners and visitors with comprehensive information about religious services, community events, and spiritual life. It serves as a local community hub with a focus on non-profit religious activities. The site is well-branded and consistent with the church's mission, targeting local Czech-speaking audiences. Technically, it uses a custom CMS platform (IS OMNIA) with modern frontend technologies like Bootstrap and jQuery, hosted under a reputable registrar and using Cloudflare DNS. The site is moderately performant and mobile-optimized but lacks some advanced accessibility features.

368MEGA operates as an online gambling platform primarily targeting Indonesian users, offering a wide range of services including slot games, live casino, sportsbook, lottery, poker, and arcade games. The website positions itself as a trusted and comprehensive agent in the online gambling market with a focus on providing extensive game options and 24/7 customer service. The business appears to be medium-sized and founded in 2020, consistent with the domain registration data. Technically, the website employs modern tracking and marketing technologies such as Google Analytics, Facebook Pixel, TikTok Pixel, and LiveChat, and uses Cloudflare DNS services. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and security practices.

ش

شركة ذرى للتمويل الجماعي بالدين

tharaco.sa

55

شركة ذرى للتمويل الجماعي بالدين operates a Sharia-compliant crowdfunding platform specializing in real estate financing within Saudi Arabia. The company is licensed and regulated by the Saudi Central Bank (SAMA), positioning it as a trustworthy player in the Saudi financial and real estate markets. Their platform connects individual and institutional investors with real estate development projects, offering investment opportunities with competitive returns. The website is professionally designed, content-rich, and targets investors and developers seeking compliant financing solutions.

I

invoitix ag

invoitix.com

67

Invoitix AG operates as a specialized financial services provider focusing on factoring solutions tailored for road transport companies. Their website emphasizes quick payment turnaround times, aiming to optimize cash flow for their target audience. The company appears to be a small-sized entity founded in 2019, with a niche market position in the transportation sector. The website is built on WordPress using Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and compliance. The technical infrastructure is solid with SSL encryption and Cloudflare DNS, although some security headers could be improved. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service policies. No direct contact information is readily available on the homepage, which may affect user trust and engagement. Overall, the site presents a professional image with good design and SEO practices but could enhance transparency and security posture further.

F

Formbricks GmbH

formbricks.com

72

Formbricks GmbH operates an open source experience management platform positioned as a privacy-first alternative to Qualtrics. Founded in 2022, the company targets product teams and developers seeking customizable survey and feedback tools with strong privacy controls and self-hosting options. The website demonstrates a modern, professional design with clear messaging and trust signals including client logos and testimonials from reputable industry figures. Technically, the site leverages Next.js and React frameworks, hosted with Cloudflare DNS, and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms and terms of service are absent. Overall, the site reflects a mature digital presence for a young technology company with a focus on open source and privacy.

S

Scott Technology

scottautomation.com

69

Scott Technology is a medium-sized manufacturing and technology company specializing in smart automation and robotic solutions for industrial sectors. The company has a well-established online presence with a professional website that targets industrial manufacturers and automation customers globally. Their business model focuses on providing tailored automation systems and solutions across various industries including appliances, automotive, cosmetics, healthcare, mining, and meat processing. The website content is well-structured and professionally presented, supporting their market position as a reputable automation solutions provider. From a technical perspective, the website employs modern tracking and analytics technologies such as Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, integrated with a CookiePro consent mechanism to manage user privacy preferences. The site is hosted with Cloudflare DNS services, ensuring reliable domain resolution. Mobile optimization and SEO practices are good, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. Security posture is adequate with HTTPS enforced and domain registration locks in place, but lacks advanced security headers and DNSSEC, which could enhance protection against DNS attacks. No explicit security policies or incident response contacts are published, indicating an area for improvement in transparency and readiness. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service pages in the analyzed content. Overall, the website is trustworthy and professional, with a solid business foundation and digital presence. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, adding security headers, and implementing a vulnerability disclosure program to strengthen security posture and compliance.

S

Safeway Gangway |

safewaygangway.com

51

The website safewaygangway.com appears to represent a small business established in 2018, likely operating in a niche sector not explicitly detailed in the available content. The site is built on WordPress using the Divi theme and is hosted with DNS services provided by Cloudflare. The technical infrastructure is moderately modern but lacks advanced security configurations such as DNSSEC and security headers. The site uses Google Site Kit, indicating integration with Google Analytics for visitor tracking. However, the website lacks critical compliance documents such as privacy and cookie policies, terms of service, and explicit contact information, which impacts its trustworthiness and regulatory compliance. The content quality is minimal, with mostly technical CSS and style data visible, suggesting either incomplete content or a heavily styled but content-light site.

S

SiteOrigin

siteorigin.com

60

SiteOrigin is a well-established provider of free and premium WordPress themes and plugins, founded in 2004. The company offers a suite of tools including a drag-and-drop Page Builder, Widgets Bundle, CSS editor, and premium addons under SiteOrigin Premium. Their market position is strong within the WordPress ecosystem, supported by over 2.5 million installs and active community engagement through forums and social media. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content for WordPress users and developers. Technically, the site runs on WordPress with a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Cloudflare DNS services. The site uses HTTPS with a good SSL configuration but lacks DNSSEC. Performance is moderate with good mobile optimization. SEO and accessibility are basic to good, with room for improvement in accessibility features. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no explicit privacy or cookie policies were found, and GDPR compliance is not clearly indicated. Contact information such as emails or phone numbers is not explicitly provided, which may impact user trust. Overall, SiteOrigin presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in privacy compliance, security policy transparency, and contact information availability would enhance their security posture and user trust.

A

Art Jameel

hayyjameel.org

56

Hayy Jameel is a prominent arts complex and creative hub located in Jeddah, Saudi Arabia, developed and managed by Art Jameel. The organization focuses on fostering culture-oriented communities by hosting exhibitions, cinema events, learning programs, residencies, and cultural festivals. The website reflects a well-established non-profit entity with a clear mission to promote arts and culture in the region. Technically, the site is built on WordPress with modern frameworks and libraries, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic, with cookie and terms of use policies present but lacking consent mechanisms. Overall, the site is professional, trustworthy, and serves its target audience effectively.

B

Bradford Museums and Galleries

bradfordmuseums.org

54

Bradford Museums and Galleries operates as a public cultural institution managing four key venues in the Bradford District, UK. The organization focuses on providing museum exhibitions, art galleries, educational programs, and community engagement activities targeted at families, students, and art/history enthusiasts. The website reflects a well-established entity with a domain age dating back to 2004, consistent with its institutional nature. Technically, the site is built on WordPress using Elementor and Rank Math SEO, with Cloudflare DNS and HTTPS enabled, indicating a modern and secure infrastructure. However, explicit privacy and cookie policies are not detected, which may impact compliance and user trust. The security posture is good with HTTPS and domain transfer protections, but lacks visible security headers and DNSSEC. Overall, the website is professional, accessible, and content-rich, serving its audience effectively while leaving room for improvements in privacy compliance and security best practices.

C

Coinmate s.r.o

sslczech.cz

64

Coinmate s.r.o operates a well-established cryptocurrency exchange platform primarily serving European customers, with a unique market offering trading in EUR and CZK. Founded in 2013 and headquartered in Czechia, the company has built a strong market position as the largest Czech crypto exchange, offering services such as quick buy, recurring buy (DCA), a professional trading platform integrated with TradingView, and API access for automated trading. The website reflects a mature digital presence with modern technologies and good user experience.

Q

Questex

questex.com

60

Questex is a well-established information and events company founded in 2002, focusing on the experience economy across hospitality, healthcare, technology, and wellness sectors. The company operates multiple tradeshows, newsletters, and branding programs to connect professionals and businesses. Their market position is strong, supported by acquisitions such as Affordable Housing Finance and Multifamily Executive. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies and Cloudflare DNS, though DNSSEC is not enabled. Security posture is moderate with HTTPS enabled but lacks some security headers and published security policies. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and business credible, though improvements in security practices are recommended.

The website 'eefhsrv.com' represents 'Event Engine', a technology platform focused on event services. The site is built on WordPress with a basic but consistent branding and content structure. It leverages modern web technologies including Bootstrap and Google Analytics, indicating a moderate level of digital maturity. However, the content is minimal, with no privacy policy, terms of service, or contact information readily available, which limits transparency and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published policies. Overall, the site is functional but would benefit from enhanced compliance and security documentation to improve trust and regulatory adherence.

P

Peterson Solutions (Malaysia)

petersonmalaysia.com

62

Peterson Solutions (Malaysia) is a well-established sustainability consulting firm offering ESG, sustainability strategy, reporting, GHG management, and sustainable finance advisory services primarily in Malaysia. The company leverages a professional website built on WordPress with modern plugins and SEO optimizations to present its services and engage clients. The technical infrastructure includes Cloudflare DNS and standard WordPress technologies, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with policies present but lacking explicit consent mechanisms. Overall, the website reflects a credible business with strong branding and trust signals, suitable for its target audience of businesses seeking sustainability solutions.

P

Peterson Technologies

petersontechnologies.com

74

Peterson Technologies is a medium-sized technology company specializing in sustainability and agritech digital solutions. Operating globally across multiple industries, it offers services including geoservices, data analytics, software development, and ESG compliance solutions. The company is the technology arm of Peterson Solutions, supporting a large global workforce. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, HubSpot, and Google Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms policies. Overall, the domain registration and website content indicate a legitimate and credible business presence.

I

IAESTE A.s.b.l.

iaeste.org

72

IAESTE A.s.b.l. is a well-established global non-profit organization headquartered in Luxembourg, specializing in facilitating paid internships primarily in STEM fields for students worldwide. With a presence in over 100 countries and a history dating back to 1948, IAESTE connects students, employers, and universities to foster professional development and intercultural exchange. The website reflects a mature digital presence with comprehensive internship listings, volunteer opportunities, and alumni engagement. Technically, the site uses modern web technologies including Ruby on Rails, Cloudflare DNS, and integrates marketing and analytics tools such as Google Tag Manager and MailerLite. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though improvements can be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is moderate with cookie consent but no visible privacy policy in the provided content. Overall, the site is professional, trustworthy, and serves its educational and non-profit mission effectively.

A

Amazing Architecture

amazingarchitecture.com

65

Amazing Architecture is a well-established digital magazine founded in 2001, specializing in showcasing architecture projects, interior design, skyscrapers, visualizations, and student projects globally. The website targets architecture professionals, students, and enthusiasts, providing curated content and advertising opportunities. Technically, the site uses modern web technologies including Vue.js, Google Analytics, and Cloudflare DNS, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

I

Instant Landing Page Builder for Shopify | All-visual, No-code

instant.so

63

Instant.so is a small SaaS business offering a no-code, all-visual landing page builder specifically designed for Shopify merchants. The website serves as a marketing landing page promoting the app available on the Shopify app store. The technical infrastructure leverages modern web technologies including the Framer framework, Google Tag Manager, and Segment analytics, hosted behind Cloudflare DNS services. The site is well-designed with good mobile optimization and basic SEO practices, though accessibility features are minimal. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Business credibility is moderate but would benefit from clearer contact information and trust signals. Overall, the site is functional and professional but has room for improvement in privacy and security transparency.

A

Art Jameel LLC

artjameel.org

66

Art Jameel LLC is a well-established cultural organization founded in 2013, focused on supporting artists and creative communities in the Middle East through exhibitions, heritage preservation, educational initiatives, and sustainability programs. The website reflects a mature digital presence with consistent branding, comprehensive content, and clear navigation targeting artists, cultural institutions, and the general public interested in Middle Eastern art and culture. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and tracking tools such as Google Analytics and Facebook Pixel. Hosting and DNS are managed via reputable providers including GoDaddy and Cloudflare. Security posture is good with HTTPS enforced and domain locks in place, though DNSSEC is not enabled and some advanced security headers are missing. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR and related regulations. Contact is primarily via web forms and social media channels, with no direct emails or phone numbers publicly listed. Overall, the site is professional, trustworthy, and well-maintained, with minor recommendations to enhance DNS security and HTTP headers.

S

Sekce pro mládež České biskupské konference a Asociace křesťanských sdružení mládeže, z. s.

celostatnisetkanimladeze.cz

58

The website celostatnisetkanimladeze.cz represents a non-profit organization focused on organizing the Celostátní setkání mládeže (National Youth Meeting) in the Czech Republic. The event targets young people aged 14 to 30 and is organized by the Youth Section of the Czech Bishops' Conference and the Association of Christian Youth Associations. The site provides event information, news, and multimedia content related to the event and its history. The organization holds a recognized position within the Czech Catholic community and maintains active social media channels to engage its audience. Technically, the website uses a combination of jQuery, Bootstrap 4, and other JavaScript libraries, hosted with Cloudflare DNS and registered via a Czech registrar. The site is mobile-optimized and uses HTTPS with a good SSL configuration. However, it lacks some modern security headers and formal privacy and cookie policies, which are important for compliance and user trust. Analytics are handled via Matomo, indicating a moderate level of user tracking. From a security perspective, the site is well-configured with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy documentation are areas for improvement. The WHOIS data is consistent with the website's Czech origin and organizational claims, supporting legitimacy. Overall, the site is professional, trustworthy, and serves its community well but should enhance privacy compliance and security best practices to improve user trust and regulatory adherence.

E

Europe Direct Österreich

europainfo.at

63

Europe Direct Österreich operates as an official EU information center providing free and accessible information about the European Union to Austrian citizens. The website serves as a hub for EU-related news, events, educational resources, and advisory services. It is part of the Europe Direct network managed by the European Commission, positioning it as a trusted government-affiliated entity. The site targets EU citizens and residents interested in EU policies, rights, and participation in EU-related discussions and events. Technically, the website is built on WordPress with modern plugins and technologies, including event management and cookie consent tools, ensuring a functional and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by adding security headers and publishing explicit privacy and security policies. Overall, the website is professional, trustworthy, and well-maintained, supporting its mission to inform and engage the public about the EU.

O

Oceantic Network

offshorewindus.org

61

Oceantic Network is a specialized business network focused on the offshore wind energy sector, providing industry news, events, and networking opportunities to professionals and businesses within this niche. The website is built on WordPress and leverages modern web technologies such as UIkit and FontAwesome, with Cloudflare DNS services enhancing its infrastructure. The site demonstrates good SEO practices and a professional design, targeting a specialized audience in the renewable energy industry. From a technical perspective, the website uses a modern tech stack with performance and mobile optimization rated as good. However, there are areas for improvement including enabling DNSSEC and implementing security headers to enhance security posture. The site uses multiple marketing and tracking tools including Google Analytics and Facebook Pixel, indicating moderate user tracking. Security-wise, the site benefits from HTTPS and domain registration protections but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No privacy or cookie policies were detected, which is a compliance gap. Contact information is not explicitly provided in the analyzed content, which may impact user trust and business credibility. Overall, the website is a legitimate and professional platform serving a niche market but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and policy disclosures to strengthen trust and security posture.

S

Safeway Gangway

safewaygangway.nl

53

Safeway Gangway is a small Belgian company specializing in the manufacture and supply of gangways and access solutions, primarily serving the transportation and maritime sectors. The website is built on WordPress using the Divi theme and integrates Google services via the Site Kit plugin. The technical infrastructure is moderate with HTTPS enabled and DNS managed through Cloudflare, but lacks advanced security headers and DNSSEC. The website content is basic and primarily in Dutch, with no detected privacy or cookie policies, and no visible contact information, which limits user trust and compliance. Security posture is adequate but could be improved with additional headers and policies. Overall, the site appears legitimate and consistent with the business claims, but improvements in privacy compliance and security best practices are recommended.

Ř

Římskokatolická farnost Velešín

farnostvelesin.cz

58

Římskokatolická farnost Velešín operates as a non-profit religious organization serving multiple parishes in the Czech Republic. The website provides comprehensive information about sacraments, religious formation, events, and community activities, targeting local parishioners and visitors. It maintains a consistent brand presence and offers clear contact details, enhancing trust and community engagement. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted with Cloudflare DNS and registered via WEDOS. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS and standard security headers, though it lacks a Content Security Policy and vulnerability disclosure mechanisms. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

M

Musica sacra

musicasacra.cz

55

Musica sacra is a Czech non-profit organization dedicated to the promotion and enhancement of church liturgical music. Founded in 2006, it offers educational courses for organists, organizes events, publishes newsletters and music, and supports the community of church musicians. The website serves as a hub for information, resources, and event announcements targeting church musicians, choir members, and liturgical music enthusiasts primarily in the Czech Republic. Technically, the website uses a modern tech stack including jQuery, Bootstrap 4.6, FontAwesome, and Owl Carousel, with Cloudflare DNS and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, it lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS but does not implement key security headers such as Content-Security-Policy or HSTS. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's Czech origin and long-standing presence, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

S

Surf Expo

surfexpo.com

63

Surf Expo operates as a premier wholesale trade show organizer specializing in coastal and outdoor lifestyle products, including surf, resort, and swim merchandise. Established since 1997, the company has a strong market position as a key event for wholesale buyers and sellers in its niche. The website reflects a professional and consistent brand image, targeting industry professionals and businesses in retail and lifestyle sectors. Technically, the site is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization, and employs OneTrust for cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and domain status protections, though there is room for improvement by enabling DNSSEC and adding security headers. Privacy compliance is partially addressed with cookie consent but lacks visible privacy policy and terms of service pages. Overall, the site is trustworthy and professionally maintained but could enhance transparency and security documentation.

I

ICA Events

worldfood-istanbul.com

58

WorldFood Istanbul is a well-established international food exhibition organized by ICA Events, targeting food industry professionals globally. The website presents comprehensive information about the event, including exhibitor and visitor resources, agenda, news, and support partners. The technical infrastructure leverages modern web technologies and CMS, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain protections, but lacks advanced security headers and published policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for security and privacy improvements.

A

Association of Energy Engineers (AEE)

aeeworld.org

63

The website aeeworld.org represents the Association of Energy Engineers' global conference platform, focusing on energy efficiency, decarbonization, and sustainability. It serves as a professional hub for energy industry experts to network, learn, and showcase innovations. The site is well-structured, visually professional, and rich in relevant content including event recaps, keynote speakers, and detailed conference information. Technically, it is built on WordPress with modern plugins and tracking tools, hosted behind Cloudflare DNS, and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by enabling DNSSEC and adding explicit security headers. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. However, contact information and incident response policies are not prominently published, which could be enhanced for better trust and transparency.

S

Shoptalk

shoptalk.com

63

Shoptalk is a well-established event platform specializing in retail industry conferences and networking opportunities. Founded in 2003, it serves a medium-sized audience of retail professionals, solution providers, media partners, startups, and investors. The website provides comprehensive event-related content, speaker and sponsor applications, and community engagement features. Technically, the site uses a modern JavaScript stack with integrations for analytics, marketing, and consent management, hosted behind Cloudflare DNS and registered with GoDaddy. Security posture is solid with HTTPS, CSRF protections, and domain locking, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is professional, safe, and trustworthy but could improve transparency on privacy and security policies.

C

CEDIA Expo

cediaexpo.com

64

CEDIA Expo is a well-established event organizer specializing in smart home technology, hosting premier industry expos and networking events. The website reflects a professional presence with a clear focus on technology and industry engagement, targeting professionals and businesses in the smart home sector. The business is positioned as a leading event in its niche, founded in 2017, with a medium-sized operational scale. Technically, the website is built on WordPress using the Divi theme and incorporates modern tools such as Google Analytics and Tag Manager, with Cloudflare DNS services enhancing availability and security. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is solid with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not publish a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the analyzed content. Overall, the site is trustworthy and professional but could improve in privacy transparency and security best practices.

G

Groceryshop

groceryshop.com

64

Groceryshop.com is a professionally designed event platform focused on the grocery and consumer packaged goods (CPG) sectors, emphasizing technology and innovation. The website serves as a hub for industry professionals to engage with the latest trends and network through the Groceryshop 2025 event. The platform leverages modern marketing and analytics technologies such as HubSpot, Google Tag Manager, Facebook Pixel, and LinkedIn Insight, indicating a mature digital infrastructure. Hosting is provided via Microsoft Azure, and DNS is managed through Cloudflare, ensuring reliable performance and security. The site implements HTTPS with standard domain status protections but lacks DNSSEC, which is a recommended enhancement for DNS security. Cookie consent is managed through OneTrust, demonstrating compliance efforts with privacy regulations. However, explicit privacy policy and terms of service documents were not found in the analyzed content, representing an area for improvement. Contact information is primarily collected via forms, with no direct emails or phone numbers publicly listed. Overall, the website presents a trustworthy and professional image suitable for its target audience of grocery and CPG industry professionals.

F

Faversham House

favershamhouse.com

65

Faversham House is an established independent media group founded in 2008, specializing in delivering high-quality insights and content primarily focused on sustainability, utilities, and international sectors. The company operates through digital media, events, and publications, positioning itself as an industry leader with a strong emphasis on positive climate impact and sustainable business practices. Their market presence is reinforced by certifications such as B Corporation and Cyber Essentials Plus, underscoring their commitment to social and security standards. Technically, the website is built on WordPress and leverages modern JavaScript libraries including GSAP for animations and Google Analytics for tracking. The site is hosted with DNS managed by Cloudflare, though DNSSEC is not enabled. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and displays strong trust signals through certifications and cookie consent mechanisms. However, there is room for improvement by enabling DNSSEC, publishing a formal security policy, and adding security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The business is credible and well-positioned in its niche, with clear contact information and transparent policies. Strategic recommendations include enhancing DNS security, formalizing security and incident response policies, and improving security header implementation to further strengthen the security posture.

The website 'Event Engine' appears to be a small technology service platform focused on event-related services. The site is built on WordPress with common plugins such as Gravity Forms and Yoast SEO, and uses Bootstrap for responsive design. The technical infrastructure is modern but basic, with Google Analytics and Tag Manager integrated for user tracking. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is poor due to absence of privacy and cookie policies and no consent mechanisms. Business credibility is limited by lack of contact information and minimal content. Overall, the site is functional but would benefit from enhanced security and privacy practices.

F

Freegun - Underwear and Clothing for Men, Women and Children

freegun.com

60

Freegun.com is an established e-commerce retail website specializing in underwear and clothing for men, women, and children. The business appears to be based in France, supported by domain registration data and language settings. The website uses PrestaShop CMS and integrates several modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Klaviyo, and Doofinder for search functionality. Payment processing is handled via PayPlug, a known payment partner. The site design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content focused on retail apparel. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust.

P

Primary Engineer

leadersaward.com

57

Leaders Award is a UK-based educational initiative focused on promoting STEM education through an annual competition and free teaching resources. The platform targets teachers, parents, and pupils aged 3-19, providing curriculum-aligned materials and celebrating participation with personalized certificates. The website is professionally designed, mobile-optimized, and integrates modern web technologies including WordPress, Google Analytics, and Facebook Pixel for analytics and marketing. The domain has been active since 2009, reflecting a mature and established presence in the STEM education sector. Security measures include HTTPS, cookie consent with granular controls, and spam protection via Google reCAPTCHA, though improvements in security headers and DNSSEC are recommended. Privacy compliance is strong with a comprehensive cookie policy and GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness with clear social media engagement and partnership with Primary Engineer.

O

Open Source Initiative

opensource.org

63

The Open Source Initiative (OSI) is a well-established nonprofit organization dedicated to advocating for and educating about open source software and licensing. Founded in 1998, OSI serves as a global steward of the Open Source Definition and supports a healthy ecosystem through programs, events, and community engagement. The website reflects a mature digital presence with professional design, clear navigation, and rich content including testimonials and partner logos. Technically, the site is built on WordPress with modern front-end libraries and uses Cloudflare DNS services. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security.txt or incident response information is found. Privacy compliance is supported by a cookie consent banner, but no explicit privacy policy or terms of service pages were detected in the provided content. Overall, OSI demonstrates high business credibility and trustworthiness with a strong focus on open source advocacy.

O

Oceantic Network

oceantic.org

61

Oceantic Network is a specialized business network focused on the offshore wind energy sector, providing industry stakeholders with networking opportunities, events, and informational resources. The website is built on WordPress and leverages modern web technologies including UIkit, FontAwesome, and Google Fonts, with DNS managed via Cloudflare and domain registration through GoDaddy. The site demonstrates good technical maturity with HTTPS enabled and SEO optimization via Yoast SEO Premium. However, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with domain protections in place but missing DNSSEC and security headers. The site extensively uses third-party tracking and marketing scripts without clear privacy disclosures, which may raise privacy concerns. Overall, the website is professional and relevant to its niche but would benefit from enhanced privacy and security practices.

L

LASTR s.r.o.

portal.horse

63

Horse Portal is a niche social media and management platform dedicated to the equestrian community, offering tools for stable management, horse breeding, race tracking, and community engagement. The company LASTR s.r.o., based in the Czech Republic, founded the platform in 2022. The website is well-designed, mobile-optimized, and uses modern web technologies such as Next.js and React. It provides clear privacy and cookie policies with consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. No incident response or security policy information is provided. Overall, the platform presents a professional and trustworthy digital presence for its target audience.

E

ExpoFP

expofp.com

64

ExpoFP is a specialized SaaS provider offering floor plan management software tailored for exhibitions, expos, and trade shows. The platform enables event organizers to create interactive 3D floor plans, automate booth reservations and purchases, and provide exhibitors with self-service profile management. The company targets event professionals seeking efficient and user-friendly floor plan solutions, positioning itself as a niche player with a strong client base and industry memberships. Technically, the website employs modern web technologies including Bootstrap, Google reCAPTCHA v3, and integrates marketing and analytics tools such as Intercom and LinkedIn Insight. Hosting and DNS are managed via reputable providers including Cloudflare and GoDaddy. The site demonstrates good mobile optimization, SEO practices, and a professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and implements form validation and bot protection. However, DNSSEC is not enabled, and there is no visible security policy or incident response contact information, which are areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, ExpoFP presents a credible and professional online presence with a solid technical foundation and business model. Strategic enhancements in privacy compliance and security transparency would further strengthen its risk posture and trustworthiness.

L

LiquidNet Ltd.

2700chess.com

64

2700chess.com is a specialized website providing live chess ratings, player statistics, game archives, and tournament information focused on elite chess players with Elo ratings of 2700 and above. The site targets chess enthusiasts, professional players, and fans, offering a niche service with a premium subscription model for enhanced features. The business is operated by LiquidNet Ltd., with a domain established in 2011, indicating a mature and stable presence in the chess data niche. Technically, the site leverages modern web frameworks such as Next.js and React, combined with jQuery and Bootstrap for UI components, and is hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, providing a positive user experience. Security-wise, the site uses HTTPS and domain transfer locks but lacks advanced DNS security features like DNSSEC and does not publish a dedicated security policy or incident response contacts. Privacy and cookie policies are present but basic, with no explicit GDPR compliance statements. Overall, the site is trustworthy, professional, and well-positioned within its niche, though it could improve its security and privacy transparency.

I

IT2GO s.r.o.

farnost.cz

60

The website farnost.cz represents IS OMNIA, a specialized modular information system designed for parish management in the Czech Republic. The platform offers a web module for parish websites, mobile applications for priests and parishioners, and integrated management features such as mass intentions and schedules. The business is operated by IT2GO s.r.o., a small Czech company with a domain age dating back to 2000, indicating established presence and experience in this niche market. The site is professionally designed with clear navigation and consistent branding, targeting parish communities and clergy. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted with WEDOS and using Cloudflare DNS services. The site is mobile-optimized and provides a good user experience, though accessibility features are basic. Performance is moderate, and SEO practices are basic but adequate for the target audience. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS and modern setup), includes CAPTCHA on its contact form to prevent spam, and uses Matomo for analytics to reduce privacy concerns. However, no explicit security headers were detected in the provided data, and no cookie consent mechanism is present despite analytics usage. There is no published incident response or security policy, and no direct contact emails or phone numbers are provided, which could limit user trust and support responsiveness. Overall, the website is safe, professional, and trustworthy for its intended audience, with room for improvement in security headers, privacy compliance, and contact transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in security posture and privacy practices would further strengthen the platform's credibility and compliance.