Security Directory

P

Privacy service provided by Withheld for Privacy ehf

crucials.io

46

Crucials is a newly launched SaaS company founded in 2024, offering an all-in-one suite of over 30 integrated apps designed to enhance BigCommerce stores by boosting sales and improving customer experience. The company targets e-commerce businesses using the BigCommerce platform, positioning itself as a comprehensive toolkit to streamline store management and growth. The website is professionally designed, mobile-optimized, and uses modern technologies including Unicorn Platform, Intercom for customer engagement, and Facebook Pixel for marketing analytics. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy and terms policies are present and GDPR compliance is indicated, but no cookie consent mechanism is implemented despite tracking pixels. Contact information is limited to a physical address in Hanoi, Vietnam, and an Intercom chat interface, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a strong business and technical foundation with room for improvement in security headers and privacy transparency.

The website topnahradnidily24.cz is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. This prevents extraction of meaningful business, contact, or policy information. The domain was registered in 2016 and uses Cloudflare for DNS and security services, indicating a stable but small-scale operation likely based in the Czech Republic. The lack of visible content or metadata limits the ability to assess the business model or market position. Technically, the site uses modern security mechanisms but does not expose any SEO or accessibility features on the challenge page. Security posture is limited to Cloudflare's WAF protections, with no additional headers or policies visible. Overall, the site appears legitimate but lacks transparency and accessible content for full analysis.

The website euautodily.cz is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct content access. The domain is registered since 2015 under a Czech registrar and uses Cloudflare for security and performance. Due to the WAF challenge, no business content, contact information, or policies are accessible for analysis. The technical infrastructure indicates use of modern security measures but limits visibility into the site's actual offerings or compliance posture. Security posture cannot be fully assessed beyond the presence of Cloudflare protection. Overall, the site appears legitimate based on domain age and registrar data but lacks accessible content for comprehensive evaluation.

P

PUBHTML5.com

pubhtml5.com

75

PubHTML5.com is a digital publishing platform established in 2014, offering software tools to create mobile-friendly HTML5 flipbooks, eMagazines, catalogs, and brochures. The platform targets publishers, marketers, and digital content creators, providing a SaaS model with free and paid offerings. The website demonstrates a consistent brand presence and professional content focused on digital publishing solutions. Technically, the site uses a modern tech stack including jQuery, Cloudflare DNS, and Cookiebot for consent management, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and domain protection statuses, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong, with comprehensive privacy and cookie policies and an active consent mechanism. However, contact information and terms of service are not clearly presented, which could impact user trust. Overall, the site is professional, secure, and compliant, suitable for its target audience.

D

DigitaltMuseum

digitaltmuseum.se

58

DigitaltMuseum is a well-established digital platform founded in 2008 that aggregates collections from Norwegian and Swedish museums, providing public access to over four million cultural heritage items including photographs, artworks, and buildings. The platform targets museums, researchers, and the general public interested in cultural heritage, positioning itself as a leading resource in the Nordic region for digital museum collections. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Video.js for media playback, with hosting and DNS services provided by reputable providers such as Domeneshop AS and AWS Route53. Security measures include HTTPS enforcement, CSRF token usage, and Google reCAPTCHA integration, although DNSSEC is not enabled and explicit security headers are not visible in the HTML content. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website demonstrates a high level of professionalism, content quality, and business credibility, with room for improvement in privacy policy transparency and security header implementation.

The website zbl.basketball serves as the official online presence for the Czech Women's Basketball League, operated under the Czech Basketball Federation. It provides comprehensive information including news, match schedules, player and team statistics, and multimedia content targeted at basketball enthusiasts, players, coaches, and officials within the Czech Republic. The site is well-branded and consistent with the federation's identity, supporting its role as a key information hub for women's basketball in the region. Technically, the site employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized and features a cookie consent mechanism, indicating a moderate level of digital maturity. Hosting and domain registration are consistent with the official federation, enhancing trust. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and some recommended security headers. There is no visible privacy policy or terms of service, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is professional, trustworthy, and serves its business purpose effectively. However, improvements in privacy compliance documentation and security best practices are recommended to reduce risk and increase user confidence.

The website nbl.basketball serves as the official digital platform for the Czech National Basketball League, operated by the Czech Basketball Federation. It provides comprehensive basketball-related content including news, match schedules, statistics, team profiles, and ticketing information. The site targets basketball enthusiasts, players, coaches, and officials within the Czech Republic, positioning itself as a central hub for national basketball activities. The business model appears to be informational and promotional, supported by the federation and possibly sponsorships. Technically, the website employs modern web technologies such as HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for tracking and analytics. The site is hosted by Bombora Technologies Pty Ltd., with a moderate performance profile and good mobile optimization. Accessibility is basic but functional, and SEO practices are adequately implemented through meta tags and structured navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a cookie consent mechanism is present, no privacy policy or terms of service pages were found, representing a compliance gap. Contact information and incident response details are not explicitly provided. Overall, the website is trustworthy and professionally maintained, with a strong alignment between domain registration data and website content. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to improve the security posture and compliance standing.

C

CZ.BASKETBALL

cbf.cz

50

CZ.BASKETBALL is a well-established Czech basketball portal founded in 2009, serving as a central hub for basketball news, videos, competitions, and community engagement in the Czech Republic. The website targets basketball fans, players, coaches, and officials, providing comprehensive coverage of national teams, leagues, and events. It maintains strong partnerships with official basketball organizations and sponsors, enhancing its market position as a leading basketball information source in the region. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and a custom CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security documentation.

B

Bundesanstalt für Straßen- und Verkehrswesen

bast.de

64

The Bundesanstalt für Straßen- und Verkehrswesen (BASt) is a German federal government research institute specializing in road and traffic safety, infrastructure, vehicle technology, and traffic engineering. It operates under the Federal Ministry for Digital and Transport and provides authoritative research, publications, and quality assessments to support transportation infrastructure and safety in Germany. The website serves as a comprehensive portal for research outputs, news, and public information targeting professionals, government bodies, and the general public. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It is well-optimized for mobile devices, accessible, and SEO-friendly. The site uses HTTPS with excellent SSL configuration, though security headers are not explicitly detected in the HTML content. Privacy and cookie policies are clearly presented with GDPR compliance, and a cookie consent mechanism is implemented. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contact details and does not provide a security.txt file for vulnerability disclosures. The domain registration and DNS setup align with German government and research networks, reinforcing legitimacy and trustworthiness. Overall, the BASt website is a professional, trustworthy, and secure government portal with excellent content quality and user experience. Strategic improvements could include enhancing security headers and publishing explicit security policies to further strengthen its security posture.

R

Ráj veteránů

rajveteranu.cz

55

Ráj veteránů is a specialized online classifieds platform focused on vintage and classic vehicles primarily serving the Czech Republic market. The website offers a comprehensive vehicle listing service with detailed search filters, partner promotions, and community engagement through a Facebook group. The business operates as a niche marketplace catering to classic car enthusiasts and sellers, with a business model centered on advertising and listing fees. Technically, the site employs modern web technologies including Google Fonts, Google Analytics, and Adform for advertising and tracking, with HTTPS and security headers implemented to ensure secure user interactions. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact information is limited to a contact form. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and active content suggest legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, making it a reliable resource for its target audience.

M

Mount-Apps

mount-apps.com

62

Mount Apps is a SaaS company providing white-label engagement tools and apps designed to empower agencies to expand their offerings under their own brand. The platform emphasizes ease of use, allowing agencies to launch client-facing apps without coding. With over 50,000 websites using their Smartarget apps daily, Mount Apps positions itself as a trusted solution in the SaaS white-label market. The company targets agencies and businesses seeking to enhance client engagement and marketing capabilities through branded dashboards and app management tools. Technically, the website is built with modern web technologies including Bootstrap and SVG graphics, hosted via Cloudflare, ensuring good performance and mobile optimization. However, the WHOIS data shows inconsistencies with a future domain creation date, which may indicate privacy protection or data errors. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and functional but could improve transparency and security practices.

A

Autoškolský ombudsman

autoskolsky-ombudsman.cz

50

The website 'Autoškolský ombudsman' serves as an independent advisory and mediation portal focused on driving schools and related stakeholders in the Czech Republic. It is a joint project of two professional associations representing driving schools, providing free expert advice, mediation services, and legislative input collection. The site targets driving school students, instructors, examiners, and operators, positioning itself as a niche expert resource within the transportation and education sectors. The business model is non-profit, funded initially by sponsorships and planned contributions from driving schools. Technically, the site employs a modern but basic technology stack including Bootstrap, jQuery, and Google Analytics. The design is professional and mobile-optimized with clear navigation and consistent branding. However, the site lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies. No incident response or security contact information is provided. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and partner affiliations support legitimacy. Tracking via Google Analytics is present, but privacy compliance is minimal. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and compliance posture.

The Associação Comercial e Industrial de Vizela (ACIV) is a well-established regional business association founded in 1986, serving the commercial and industrial sectors of the Vale de Vizela region in Portugal. The organization focuses on representing and promoting the interests of local businesses through services such as legal and financial consultancy, professional training, job insertion support, and event organization. The website reflects a professional and community-oriented approach, targeting local entrepreneurs and business stakeholders. Technically, the website employs a traditional web stack with Bootstrap, jQuery, and various UI libraries to deliver a responsive and user-friendly experience. While the site is functional and moderately optimized for mobile devices, there is room for improvement in performance and accessibility. The absence of a known CMS suggests a custom-built platform maintained by the developer acastro dev. From a security perspective, the site uses HTTPS and includes basic form validation but lacks critical security headers and anti-CSRF protections. No privacy or cookie policies are present, which is a compliance gap under GDPR. The integration of Facebook SDK indicates some level of user tracking, but overall tracking is minimal. The WHOIS data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, the site is a credible and useful resource for its target audience but would benefit from enhanced security measures and privacy compliance to strengthen trust and regulatory adherence.

P

Plataforma de Cessação de Contratos

cessacaodecontratos.pt

67

The Plataforma de Cessação de Contratos is a Portuguese government-supported online platform designed to facilitate consumers' access to information regarding their electronic communications contracts and to enable the cessation of such contracts. The platform targets Portuguese consumers seeking to manage or terminate their telecommunications contracts and provides key services including contract information retrieval and contract termination requests. The site is supported by reputable government entities and EU funding programs, which enhances its trustworthiness and market position. From a technical perspective, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, with a responsive design suitable for mobile devices. While the site demonstrates good content quality and user experience, there is room for improvement in accessibility and SEO optimization. No advanced frameworks or CMS platforms were detected, suggesting a custom or lightweight implementation. Security posture is moderate; the site uses HTTPS and modal confirmations for form submissions but lacks visible security headers and explicit security policies. There is no evidence of cookie consent mechanisms or detailed privacy compliance features beyond a basic privacy policy. No contact information or incident response details are provided, which could be improved to enhance user trust and compliance. Overall, the platform presents a low-risk profile with a solid business credibility foundation due to its government backing. Strategic recommendations include implementing comprehensive security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility features to meet compliance standards and improve user trust.

T

TopSoft UG

smartarget.online

61

Smartarget.online is a technology-focused SaaS platform operated by TopSoft UG, Germany, providing no-code apps and widgets to enhance website user engagement and increase sales. The platform supports multiple languages and integrates with popular platforms like Wix, WordPress, and Ecwid, positioning itself as a versatile solution for website owners and businesses. The website demonstrates a professional design with clear navigation and calls to action, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap and Cloudflare CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

M

MSC Abensberg e.V.

msc-abensberg.de

51

MSC Abensberg e.V. is a well-established motorsport club based in Abensberg, Germany, with a rich history dating back to 1928. The club specializes in speedway racing and hosts significant international events such as the FIM Speedway Grand Prix Qualifying rounds. It also emphasizes youth development and community engagement, serving over 500 members. The website reflects a professional and consistent brand image, providing comprehensive event information, news updates, and membership details. Technical infrastructure includes modern web technologies, integration of Google Maps for location services, and Google Analytics for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Overall, the site is user-friendly, mobile-optimized, and trustworthy, supporting the club's community and promotional goals effectively.

P

Participa

participa.pt

58

Participa.pt is an official Portuguese government portal dedicated to facilitating public participation in public consultations, primarily related to environmental, energy, and territorial management topics. The website serves as a centralized platform for citizens and entities to access information about ongoing and past public consultations, submit contributions, and follow consultation processes. It also offers educational resources related to environmental awareness. The portal is well-positioned as the authoritative source for public consultation participation in Portugal, supported by government partnerships and official branding. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Select2 and Toastr.js, and integrates Google Analytics for user tracking. The site is mobile-optimized with responsive design and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS ensuring encrypted communication, and the login forms enforce password requirements. Nonetheless, the absence of security headers and lack of published security policies or incident response contacts indicate areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed with a privacy policy and terms of service, but the lack of a cookie consent mechanism is a compliance gap. Overall, participa.pt demonstrates a solid business credibility and trustworthy presence as a government platform. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility features to improve compliance and user trust.

A

AMT - Autoridade da Mobilidade e dos Transportes

amt-autoridade.pt

59

AMT - Autoridade da Mobilidade e dos Transportes is a Portuguese government regulatory authority responsible for overseeing and supervising the mobility and transport sectors including terrestrial, railway, maritime, and fluvial transport. The organization provides regulatory frameworks, consumer protection, public consultations, and knowledge management services. It holds a strong national position as the official transport regulator in Portugal, serving a broad audience including consumers, transport operators, and government stakeholders. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Video.js, ensuring good mobile optimization and accessibility. The site uses HTTPS with an excellent SSL configuration and integrates Google Analytics for user tracking with appropriate cookie consent mechanisms. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security perspective, the site demonstrates good practices including secure video embedding and no exposed sensitive data. The absence of a security.txt file and incident response contact points are areas for improvement. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business purpose and country. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen the security posture and user trust.

The website www.deco.proteste.pt is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any meaningful content, business information, or policies. The page only displays a verification message and no metadata or structured data is present. The technical infrastructure relies on Cloudflare's security services, but no further technology stack or CMS can be identified. Due to the blocking mechanism, no security posture or compliance details can be assessed. Overall, the site is currently not analyzable beyond the WAF detection.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder or offline error page within the browser. It does not represent an actual external website and contains no business or contact information, privacy policies, or terms of service. The page primarily includes JavaScript related to the Chrome offline dinosaur game and minimal HTML structure. Due to the nature of this content, no meaningful business or security posture can be assessed. The absence of HTTPS, security headers, or any external links further confirms that this is not a live website but a browser-generated error page.

K

K2

k2centrum.se

54

K2 is Sweden's national knowledge center for public transportation, serving as a collaborative platform where academia, public authorities, and industry stakeholders converge to discuss and develop collective mobility solutions. The organization is supported and financed by Lund University, Malmö University, VTI, and regional governmental bodies, positioning it as a key player in Sweden's transportation research and development landscape. The website reflects a professional and well-structured digital presence, offering research publications, educational courses, events, and partnership information targeted at researchers, practitioners, and students in the field of public transport. Technically, the website is built on WordPress with modern web technologies including jQuery and responsive CSS, ensuring good mobile optimization and accessibility. The site employs HTTPS with a strong SSL configuration, though it lacks some advanced security headers and cookie consent mechanisms. The presence of a secure newsletter subscription form indicates attention to data collection security, but privacy compliance could be enhanced with clearer cookie policies and vulnerability disclosure information. From a security perspective, the site demonstrates a solid baseline with HTTPS and secure form handling but would benefit from implementing additional HTTP security headers and publishing incident response or vulnerability disclosure policies. The absence of WHOIS data for the exact queried subdomain is a minor concern but likely due to querying the subdomain rather than the base domain. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, K2 should focus on enhancing privacy compliance by adding cookie consent and detailed privacy notices, improving security posture with security headers, and publishing clear vulnerability disclosure and incident response contacts to build further trust and compliance with GDPR and related regulations.

H

Home

castrol.com

77

Castrol's website presents a professional corporate presence focused on lubricants and specialty oils for automotive and industrial sectors. The company positions itself as a global leader embracing innovation and sustainability. The technical infrastructure includes modern tracking and video playback technologies, with good mobile optimization and SEO practices. However, explicit privacy and terms of service pages are not clearly found, and WHOIS data for the domain is unavailable, which raises transparency concerns. Security posture is moderate with HTTPS implied but lacking visible security headers in the provided data. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

N

E-VÝSTAVY archiv NdB

ndbrno-evystavy.cz

57

The website www.ndbrno-evystavy.cz serves as a digital archival platform showcasing scenography of Shakespearean productions at the National Theatre Brno from 1918 to 1988. It targets cultural enthusiasts and researchers interested in theatrical history. The site offers digital exhibitions with scheduled dates and archival content, positioning itself as a niche cultural resource. Technically, the site is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery, and uses modern web technologies including HTML5, CSS3, and JavaScript. The site is mobile-optimized and provides a cookie consent mechanism, but lacks visible privacy and terms of service pages. Security posture is moderate with HTTPS enforced but missing security headers and no visible incident response or security policy information. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural sites but slightly reduces trust. Overall, the site is functional, professionally designed, and serves its cultural archival purpose effectively.

O

Okidoki Kommunikation AB

transportportal.se

51

Transportportal.se is a Swedish transport research portal operated by or affiliated with Okidoki Kommunikation AB and the Swedish National Road and Transport Research Institute (VTI). It aggregates and provides access to multiple transport research resources including catalogs, databases, and knowledge centers focused on public transit and transport research in Sweden. The portal targets researchers, transport professionals, and stakeholders within the Swedish transport sector. The website is well-branded, consistent, and offers good content quality with clear navigation and relevant resources. Technically, the site uses modern JavaScript libraries such as Modernizr and Masonry for UI enhancements and is hosted on Azure cloud infrastructure, as indicated by DNS records. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected, suggesting a custom or lightweight implementation. From a security perspective, the site lacks DNSSEC and security headers, and no cookie consent mechanism is present, indicating gaps in GDPR compliance and security best practices. The domain registration is consistent and legitimate, with no privacy protection, and the domain age aligns with the business history. No forms or user input fields reduce attack surface, and no vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is a credible and professional resource for transport research in Sweden but would benefit from enhanced security headers, GDPR compliance improvements, and cookie consent implementation to strengthen its security posture and privacy compliance.

The website cdvplus.cz is currently a parked domain with no active business content or services. It primarily serves as a placeholder page indicating the domain may be for sale. The site is heavily monetized through advertising scripts and tracking pixels from Google Adsense and third-party providers. There is no meaningful business information, contact details, or user engagement features present. The domain is newly registered in December 2024 and uses parking name servers, consistent with domain resale or parking services. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with integration of Google Adsense Domains CAF scripts and Cloudfront CDN for content delivery. The site shows basic mobile optimization but lacks accessibility and SEO best practices. No CMS or advanced frameworks are detected. Performance is moderate but limited by the minimal content and advertising load. Security posture is weak with no visible HTTPS enforcement or security headers. There are no forms or inputs to evaluate for secure data handling. Privacy compliance is minimal with only a basic privacy policy accessible via a popup link and no cookie consent mechanism. No incident response or security policies are disclosed. The WHOIS data confirms the domain is very new and consistent with a parked domain profile. Overall, the site presents a low trust profile with poor content quality and minimal business credibility. It is recommended to implement HTTPS, add clear business and contact information, provide comprehensive privacy and cookie policies with consent mechanisms, and reduce excessive third-party tracking to improve user trust and compliance.

F

FORVIA

forvia.com

69

FORVIA is a major global technology supplier in the automotive industry, ranking as the 7th largest worldwide. The company emphasizes sustainability and innovation, offering a broad portfolio of automotive technologies including electrification, automated driving, and sustainable materials. The website is professionally designed using Drupal 10, with modern web standards and analytics via Matomo. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not published. WHOIS data is missing, which is unusual for a corporate domain and suggests privacy protection or recent registration. Overall, the site presents a credible and professional business presence with room for improvement in transparency and direct contact information.

D

Datová kostka

dataovozidlech.cz

49

The website dataovozidlech.cz serves as an official portal providing access to vehicle registration data for the Czech Republic. It offers open data compliant with national legislation, vehicle technical information search, individual data issuance, and statistical summaries. The site is positioned as a government or government-affiliated service, targeting researchers, businesses, and the general public interested in vehicle data. The platform is moderately sized and founded in 2019, reflecting a stable operational history. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with deferred script loading to optimize performance. Hosting is provided by Active24, a known Czech hosting provider. The site is mobile-optimized with a clear and consistent branding approach. However, there is room for improvement in SEO, accessibility, and security headers implementation. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not explicit), but lacks visible security headers and formal privacy or cookie policies. No contact information for security incidents or data protection officers is provided, which limits transparency and compliance with GDPR best practices. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

E

Elektromobilní platforma, z.s.

eplatforma.cz

59

The Czech E-mobility Platform is a non-profit technological platform dedicated to supporting the development of e-mobility, charging infrastructure, and related scientific research and education within the Czech Republic. It serves as a key partner to government ministries, coordinating legislative, communication, and educational efforts to advance the National Clean Mobility Action Plan. The platform's membership includes representatives from automotive, energy, scientific, research, and governmental sectors, positioning it as a central hub for electromobility initiatives in the country. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for hosting static assets. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no significant technical issues detected. The site employs HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. No contact information or incident response channels are provided, which limits transparency and user trust. The absence of WHOIS data reduces confidence in domain registration legitimacy, although the website content and hosting appear professional and consistent with the stated mission. Overall, the platform presents a credible and professional front for e-mobility development in the Czech Republic but would benefit from enhanced transparency through published privacy policies, contact information, and security best practices. Addressing these gaps would improve trustworthiness and compliance with data protection regulations.

S

Spirii

spirii.com

68

Spirii is a Denmark-based company specializing in EV charging solutions and eMobility business platforms. Their offerings include a Charge Point Management System, an EV charging app, and a suite of services such as branded solutions, financial services, grid services, and operational support. The company operates across multiple European countries with dedicated offices and subsidiaries, positioning itself as an experienced and reliable player in the eMobility sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the presence of VAT registration and detailed business information supports the company's credibility. Overall, Spirii presents a professional and trustworthy digital presence with room for improvement in transparency around security policies and domain registration details.

The website evozero.com represents a pioneering product initiative by Heidelberg Materials, focusing on the world's first carbon captured net-zero cement. The business is positioned as an industry innovator in sustainable construction materials, leveraging carbon capture and storage technology to reduce CO₂ emissions significantly. The target audience includes construction partners committed to sustainability and environmental responsibility. The site provides rich multimedia content, product brochures, and detailed information about the Brevik CCS project, reinforcing its market leadership in decarbonizing cement production. From a technical perspective, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, ensuring fast performance, excellent mobile optimization, and good accessibility. The site employs HTTPS with strong security headers, indicating a solid security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response information are not published, which could be improved. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Despite this, the website content and branding strongly associate with Heidelberg Materials, a reputable multinational company, lending credibility to the site. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of professionalism, security, and compliance, with room for improvement in transparency of security policies and domain registration details.

S

Savage

verysavage.com

58

Savage is a small, professional branding and digital design collective founded in 2019, offering services including branding, illustration, UI design, and video production. The company targets ambitious companies globally and maintains a strong portfolio with external links to Behance and social media profiles. Technically, the website uses modern front-end technologies such as Bootstrap 5, jQuery, Firebase, and Google Analytics, delivering a responsive and visually engaging user experience. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

Pardini is a firearms manufacturer with a presence in Italy and the United States, operating through Pardini Armi Srl and Pardini USA LLC respectively. The company targets shooting sports enthusiasts and dealers, offering manufacturing and distribution services. The website is professionally branded and provides clear contact information but lacks comprehensive privacy and security policies. Technically, the site uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with basic mobile optimization and moderate performance. Security measures are minimal, with no HTTPS verification visible in the data and no security headers detected, though email obfuscation is implemented. The absence of WHOIS registration data for the domain www.pardini.com raises concerns about domain legitimacy, despite the professional appearance of the site. Overall, the site is functional but requires improvements in security, privacy compliance, and domain registration verification.

P

Pražský RALLYSPRINT

prazskyrallysprint.cz

48

Pražský Rallysprint is a well-established motorsport event in Prague with a history dating back over two decades. The website serves as an information hub for participants, spectators, media, and partners, providing event details, results, galleries, and contact information. The business model revolves around event organization, sponsorship, and media partnerships, positioning it as a key annual rally event in the Czech Republic. Technically, the website uses modern web technologies including jQuery and Swiper.js, with a cookie consent mechanism and basic SEO optimizations. Security posture is moderate with room for improvement in security headers and explicit policies. Privacy compliance is addressed with cookie consent and a privacy policy in Czech. Overall, the site is professional, trustworthy, and well-maintained, though lacking some advanced security and compliance features.

C

Centrum dopravního výzkumu, v.v.i.

katalog-poskozeni.cz

57

The website katalog-poskozeni.cz operates as a specialized database platform primarily serving court experts and professionals in transportation accident analysis. It offers a catalog of vehicle damage and an EES catalog with real accident and crash test data, supported by reputable Czech research institutions. The site is well-branded and targeted to a niche professional audience, with clear affiliations to Centrum dopravního výzkumu and VUT Brno. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Nette Forms, with a moderate performance profile and good mobile optimization. Security posture is adequate with cookie consent mechanisms and session management, but lacks explicit security headers and published privacy or security policies. The domain registration is consistent with the business origin and age appropriate for the service launch. Overall, the site is professional, trustworthy, and safe for its intended audience.

C

Câmara Municipal de Castelo Branco

barrocal-parque.pt

62

O Parque do Barrocal is a municipal natural park located in Castelo Branco, Portugal, offering visitors a unique natural and cultural experience centered on a granitic landscape shaped over 310 million years. The park provides educational and recreational services including walking paths, observation points, and audio guides, targeting tourists, local residents, and educational groups. The website is professionally designed, consistent in branding, and supported by multiple recognized awards and certifications, enhancing its credibility. Technically, the website is built on the Webflow platform using modern web technologies such as HTML5, CSS3, JavaScript, and Google Fonts. It is mobile-optimized with good SEO practices, though performance is moderate and accessibility features are basic. The site uses a cookie consent mechanism but lacks explicit security headers and detailed privacy or security policies. From a security perspective, the site uses HTTPS and implements cookie consent, but there is room for improvement in security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with the municipal nature of the site, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policies, headers, and incident response readiness would enhance its security posture and trust further.

T

TSC Group

tsc-group.cz

54

TSC Group is a prominent holding company based in the Czech Republic, specializing in a broad range of facility management and technical services including cleaning, laundry, technological cleaning, and paint stripping. The group oversees 12 subsidiaries, serving diverse sectors such as industrial manufacturing, healthcare, administrative offices, and outdoor maintenance. Their market position is strong as the largest group in their sector within the Czech Republic, supported by certifications like ISO 50001 and EcoVadis, and partnerships with notable sports clubs. The website reflects a professional and comprehensive digital presence with clear service offerings and strong branding consistency. Technically, the website employs modern web technologies including Google Tag Manager, Swiper.js for UI components, and the Nette framework for form validation. The site is mobile-optimized with good performance and SEO practices. Security measures include HTTPS enforcement, use of reCaptcha on forms, and a cookie consent mechanism compliant with GDPR. However, some recommended security headers like Content-Security-Policy and X-Frame-Options are not explicitly confirmed and could be improved. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain registration insights, but the professional presentation, certifications, and subsidiary network strongly indicate legitimacy and trustworthiness. The website content is safe for general audiences, with no adult or questionable material detected. Strategically, TSC Group should focus on enhancing security headers, maintaining GDPR compliance, and continuing to leverage their strong market position and certifications to build trust and expand their service offerings.

I

INSTITUTUL NAȚIONAL DE CERCETARE-DEZVOLTARE ÎN INFORMATICĂ - ICI BUCUREȘTI

lir.ro

50

The website lir.ro represents the Registru Local de Internet (LIR) operated by the Institutul Național de Cercetare-Dezvoltare în Informatică - ICI București. It serves as the first Local Internet Registry in Romania, providing critical services such as allocation of IPv4 and IPv6 addresses (both PA and PI types) and Autonomous System (AS) numbers. The organization is a longstanding member of RIPE NCC since 1992, establishing a strong market position within the Romanian internet infrastructure ecosystem. The target audience primarily includes ISPs and organizations requiring IP resources in Romania. The business model revolves around resource allocation and registry services, supported by institutional credibility and a long operational history dating back to 2001 for the domain.

L

Laser Game Arény – návrh a stavba Laser Arény, vybavení pro Laser Game, vesty a zbraně pro Laser Game

lasergameareny.cz

44

LaserGameAreny.cz is a Czech-based company specializing in the design, construction, and outfitting of laser game arenas. With over 25 realized projects and 13 years of experience, they position themselves as a leading European provider in this niche entertainment sector. Their services include arena design, supply of gaming equipment such as vests and guns, development of game extensions, and comprehensive operational support including marketing and reservation systems. The website is professionally designed, mobile-optimized, and provides detailed information about the business model and benefits of laser game arenas. Technically, the site uses standard web technologies including jQuery and Google Fonts, hosted on a Czech hosting provider. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. Contact is primarily via a contact page with no direct emails or phone numbers visible. Overall, the site is safe, suitable for a general audience, and reflects a credible business presence in the Czech Republic.

UI Avatars is a small technology service providing a free API to generate user initials avatars for developers and websites. The service is mature, founded in 2017, and enjoys high usage with over 1.7 billion monthly requests. The website is well designed, mobile optimized, and provides clear usage instructions and API parameters. The technical infrastructure leverages modern web technologies, Google Fonts, Google Analytics, and Cloudflare DNS for performance and reliability. Security posture is good with HTTPS enforced and no user data stored, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is strong with a comprehensive cookie consent management platform and GDPR-aligned vendor disclosures. Business credibility is moderate due to lack of direct contact information but supported by open source code and sponsor transparency. Overall, the website is trustworthy, safe, and professionally maintained.

V

Void Software

void.pt

67

Void Software is a Portugal-based technology company specializing in custom software development, advanced AI integration, and embedded systems development. The company positions itself as a skilled, agile, and innovative technology partner offering a broad range of services including security, blockchain solutions, and DevOps. Their market approach targets businesses seeking cutting-edge technology solutions with a focus on quality and security. The website reflects a professional and consistent brand image with clear service offerings and certifications that enhance trust. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The site is moderately performant and well-optimized for mobile devices, though accessibility features are basic. SEO optimization is present but could be improved. No CMS or advanced frameworks were detected, indicating a custom or lightweight implementation. From a security perspective, the company demonstrates maturity through ISO 27001 certification and a suite of security services. However, the website lacks visible security headers and does not provide cookie consent mechanisms or incident response policies, which are important for compliance and security transparency. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website and business present a low-risk profile with strong business credibility and a good security posture. Strategic improvements in privacy compliance and security best practices would further enhance trust and reduce potential risks.

P

PSD Aero

psdaero.com

72

PSD Aero is a well-established French company specializing in the distribution and processing of metallurgical products for the aerospace, nuclear, and mechanical industries. With a strong international presence and partnerships with major aerospace players such as Safran and Airbus, PSD Aero positions itself as a first-tier supplier offering high-quality alloys and customized services. The company emphasizes quality, environmental sustainability, and supply chain acceleration to meet the demanding needs of its customers. Technically, the website employs modern web technologies including Bootstrap, Swiper.js, and Microsoft Clarity for analytics, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, security headers, and secure forms are implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable digital presence for PSD Aero.

I

Imaginary Cloud

imaginarycloud.com

67

Imaginary Cloud is a Portugal-based technology company specializing in custom software development and digital acceleration services. Founded in 2010, the company offers a comprehensive suite of services including product ideation, software development, AI and data science, UX/UI design, and quality assurance. Their market position is reinforced by a portfolio of notable clients such as Neom, Remax, ThermoFisher, and Nokia, indicating strong industry trust and credibility. The website reflects a professional and modern digital presence, optimized for performance and mobile devices, with clear navigation and rich content that targets businesses seeking scalable technology solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and HubSpot forms for marketing and analytics. The site demonstrates good SEO and accessibility practices, with fast loading times and responsive design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not evident, suggesting room for improvement in formal security documentation. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive privacy and cookie policies, including GDPR compliance indicators. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness but is mitigated by the professional presentation and business transparency on the site. Strategically, the company should enhance its security documentation and consider publishing a vulnerability disclosure policy to further strengthen trust. Monitoring domain registration status is recommended due to the missing WHOIS data. The website’s digital maturity and business credibility position Imaginary Cloud well for continued growth in the competitive software development market.

T

TSC Marketing, s.r.o.

tsc-marketing.com

50

TSC Marketing, s.r.o. is a marketing and communication company serving as the centralized marketing arm for the TSC Group holding. The company focuses on brand building, managing online and offline campaigns, internal communications, public relations, HR marketing, and event management. It supports the entire TSC Group, which is a leading provider of cleaning and technical services in the Czech Republic. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses modern web technologies including Google Tag Manager and Nette Framework for form validation, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and reCaptcha protection on forms, but lacks explicit security headers and published security policies. WHOIS data is missing or unavailable, which raises some trust concerns despite the professional appearance and business legitimacy. Overall, the site is safe, business-focused, and well-structured, but could improve transparency and security documentation.

T

TSC Spectre, s.r.o.

tsc-spectre.cz

49

TSC Spectre, s.r.o. operates as the central administrative and support entity within the TSC Group holding, providing comprehensive economic, legal, personnel, administrative, and IT services to its subsidiaries. The company emphasizes quality management, ISO certification support, and ESG initiatives, positioning itself as a key enabler of operational excellence within the group. Their market presence spans multiple countries including the Czech Republic, Slovakia, Germany, Poland, and Hungary, serving a large client base with a workforce exceeding 7,000 employees. Technically, the website employs modern web technologies such as Google Tag Manager and Swiper.js, with responsive design and good SEO practices, although some security headers are missing. Security posture is solid with HTTPS and secure forms, but could be improved with additional headers and published security policies. The absence of WHOIS data is a concern for domain legitimacy, but the professional content and detailed contact information mitigate this risk. Overall, the company demonstrates a mature business model with strong compliance and quality focus.

T

TSC Jet, a.s.

tsc-jet.com

51

TSC Jet, a.s. is a Czech-based company specializing in comprehensive technological cleaning and paint stripping services primarily for industrial clients such as automotive manufacturers and paint shops. It operates as part of the larger TSC Group holding, which encompasses multiple subsidiaries offering cleaning, facility management, and related services. The company emphasizes modern technologies including robotic and manual high-pressure water jet stripping, chemical, thermal, and laser cleaning methods. The website reflects a professional and consistent brand image with clear service descriptions and multiple contact points. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and includes a GDPR-compliant privacy and cookie policy. Security posture is moderate with HTTPS enabled and use of reCaptcha on contact forms, but lacks explicit security headers and incident response information. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and group affiliation support business credibility. Overall, the site is well-structured, safe, and serves its target industrial audience effectively.

T

TSC GROUP, a.s.

tsc-cleaning.sk

47

TSC GROUP, a.s. is a holding company operating in Slovakia and the Czech Republic, specializing in facility management, cleaning, security, laundry, and technical cleaning services. The company holds a strong market position as the largest group in its sector in the Czech Republic and maintains a significant presence in Slovakia. Their service portfolio covers industrial, healthcare, commercial, and public sectors, leveraging modern technologies and extensive experience. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on its contact form to mitigate spam. Cookie consent mechanisms are implemented with granular controls, and privacy policies are comprehensive and GDPR compliant. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. The risk profile is low, with recommendations focusing on improving security headers, publishing security policies, and enhancing accessibility compliance to further strengthen the security posture and user trust.

F

FORVIA

faurecia.com

70

FORVIA is a major global supplier in the automotive industry, focusing on sustainable and innovative automotive technologies. The company positions itself as a tech company with a strong emphasis on sustainability and digital transformation in mobility. The website reflects a professional corporate presence with detailed sections on technologies, sustainability, investor relations, and careers. Technically, the site is built on Drupal 10 and uses Matomo for analytics, indicating a modern and privacy-conscious approach. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. The absence of WHOIS data limits domain trust verification but the website content and branding suggest legitimacy. Privacy and cookie policies are not clearly found, indicating room for compliance improvement.

K

Kulturní středisko města Blanska

akceblansko.cz

43

The website akceblansko.cz serves as a comprehensive local event calendar for the city of Blansko in the Czech Republic, focusing on cultural, sports, and community events. It aggregates detailed event information, including dates, locations, organizers, and categories, targeting residents and visitors interested in local activities. The site is supported by local cultural institutions and event organizers, providing a valuable community resource. Technically, the site uses modern web standards with responsive design, structured data (JSON-LD), and privacy-conscious analytics (Matomo with cookies disabled). Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published privacy or cookie policies, representing compliance gaps. The domain is recently registered in 2023, consistent with the upcoming event dates, and shows no suspicious WHOIS patterns. Overall, the site is professional, trustworthy, and well-positioned as a local cultural hub, but should improve privacy and security disclosures to enhance compliance and user trust.

A

ACC Belgium

bestofreputation.be

51

The website bestofreputation.be serves as the official platform for the Best of Reputation Awards 2025, an event recognizing excellence in earned media and influencer relations. Operated under the auspices of ACC Belgium, the site targets PR professionals and agencies in Belgium, offering entry kits, case submission portals, and showcasing past winners. The business model centers on event organization and industry recognition, positioning itself as a niche leader in the Belgian PR awards sector. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, hosted by OVH, a reputable European provider. The site demonstrates good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS identification. Performance is moderate with a clean, professional design and clear navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but improvements in security best practices are recommended. Overall, the website presents a professional and trustworthy front for its niche business, with moderate technical sophistication and compliance. Strategic enhancements in security posture and transparency would further strengthen its risk profile and user trust.

A

ACC

bestofcontent.be

52

Bestofcontent.be is a professional website dedicated to organizing and promoting the Best of Content Awards (BOCA) in Belgium, focusing on recognizing excellence in content marketing strategies and craftsmanship. The platform targets content marketing professionals, agencies, and brands seeking recognition for their marketing efforts. The business operates as a niche award organizer with a small but focused market presence, leveraging partnerships with ACC Belgium and other industry players. Technically, the website is custom-built with modern HTML5, CSS3, and JavaScript technologies, hosted via OVH, and demonstrates good mobile optimization and user experience. However, it lacks visible CMS signatures and advanced technical frameworks. Security posture is moderate, with cookie consent mechanisms in place and use of Facebook Pixel for tracking, but missing explicit security headers and incident response information. Privacy compliance is strong due to linked comprehensive policies hosted on ACC Belgium's domain. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected.