Security Directory

Š

Šachový svaz České republiky z. s.

chess.cz

40

Šachový svaz České republiky z. s. is the official Czech Chess Federation, serving as the national governing body for chess activities in the Czech Republic. The website provides comprehensive information about chess competitions, commissions, training, and events targeted at chess players, clubs, coaches, and enthusiasts. It maintains partnerships with recognized chess organizations such as FIDE and the European Chess Union, reinforcing its authoritative position in the chess community. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome. It is mobile-optimized and features a structured event calendar, partner showcases, and social media integration. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses sandboxed iframes for advertising, but lacks some recommended security headers and a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, though the site appears professional and trustworthy. Overall, the website is a well-maintained, content-rich platform supporting the Czech chess community, with room for improvement in privacy compliance and security hardening.

L

LiquidNet Ltd.

2700chess.com

64

2700chess.com is a specialized website providing live chess ratings, player statistics, game archives, and tournament information focused on elite chess players with Elo ratings of 2700 and above. The site targets chess enthusiasts, professional players, and fans, offering a niche service with a premium subscription model for enhanced features. The business is operated by LiquidNet Ltd., with a domain established in 2011, indicating a mature and stable presence in the chess data niche. Technically, the site leverages modern web frameworks such as Next.js and React, combined with jQuery and Bootstrap for UI components, and is hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, providing a positive user experience. Security-wise, the site uses HTTPS and domain transfer locks but lacks advanced DNS security features like DNSSEC and does not publish a dedicated security policy or incident response contacts. Privacy and cookie policies are present but basic, with no explicit GDPR compliance statements. Overall, the site is trustworthy, professional, and well-positioned within its niche, though it could improve its security and privacy transparency.

G

Glow Space z. s.

glowspace.cz

52

Glow Space z. s. is a Czech non-profit digital community focused on developing and supporting Christian open-source applications and projects. The organization positions itself as an alliance of Christian digital projects, targeting developers, users, and supporters within the Christian digital ecosystem. Their business model revolves around community collaboration, open-source software development, and fundraising through donation platforms. The website reflects a niche market position with a clear focus on Christian digital initiatives and community engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Fontello icons, Owl Carousel, and Matomo analytics. It is hosted with a reputable registrar (REG-WEDOS) and uses Cloudflare DNS services. The site is mobile-optimized and uses HTTPS with a good SSL configuration. However, accessibility and SEO optimizations are basic, and no major CMS is detected beyond the IS OMNIA system for parish management. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, which are positive indicators. However, it lacks security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy or cookie policy, nor is there a published security policy or incident response contact information. The use of Matomo analytics indicates moderate user tracking without explicit consent mechanisms, which may pose compliance risks under GDPR. Overall, the website is professionally designed and trustworthy, with good content quality and clear business information. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

K

Komunita Sant'Egidio

santegidio.cz

41

Komunita Sant'Egidio is a Czech non-profit community organization dedicated to prayer, aiding the poor, and promoting peace. The website serves as a platform to engage volunteers, provide information about charitable events such as Christmas meals for the homeless, and share news about their activities across several Czech cities. The organization targets vulnerable populations and volunteers, operating primarily through donations and community involvement. Technically, the website is built on WordPress using a modern theme and plugins, with good mobile optimization and basic SEO practices. Security measures include HTTPS and Google reCAPTCHA, but lack published privacy policies and security headers, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate and professional non-profit entity.

P

Přátelé společenství Cenacolo, z.s.

cenacolo.cz

41

Cenacolo Česká republika is a small non-profit community organization dedicated to supporting individuals struggling with addiction and their families through spiritual and community activities. The website provides information about prayer intentions, parent clubs, and community meetings primarily in the Czech Republic. The organization appears well-established with a domain age since 2005 and official registration details. Technically, the website is built on WordPress using Elementor and Astra theme, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve compliance and security transparency.

J

Jubileum 2025

jubileum2025.cz

58

The Jubileum 2025 website serves as an informational and community platform dedicated to the religious event of the Jubilee year 2025 and its preparatory year 2024. It provides visitors with detailed information about the jubilee, including official documents, prayers, hymns, news updates, and event galleries. The site targets religious communities, pilgrims, and the general public interested in the jubilee celebrations, positioning itself as a niche, non-profit event website with official church backing. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap 4.6.1, Fontello icons, Owl Carousel, and Matomo analytics for user tracking. It is hosted behind Cloudflare DNS and likely uses Cloudflare CDN services. The site is mobile-optimized with good navigation and design quality, though accessibility features are basic. The CMS powering the site is IS OMNIA, a system for parish management. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible exposed sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, which could improve its security posture. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanism, which is a notable gap given GDPR requirements. Contact information is limited to a contact form without explicit emails or phone numbers. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally presented with a clear purpose and consistent branding. The domain registration is recent but appropriate for the event timeline, and no suspicious patterns are detected. Strategic improvements in privacy compliance and security headers would enhance the site's security and trustworthiness.

The 2026 ITS World Congress website serves as the official digital platform for the upcoming international Intelligent Transportation Systems event scheduled in Gangneung, South Korea. The site provides event-related information, user login and registration capabilities, and program management features targeting transportation professionals and ITS community members. The business model centers on event organization and information dissemination, positioning itself as a key resource for attendees and stakeholders in the transportation sector. Technically, the website employs a modern JavaScript stack including Axios, jQuery, and Moment.js, with CSS styling from Froala Editor and slick carousel libraries. Hosting is provided by Gabia, Inc., a Korean registrar and hosting provider. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices evident through meta tags and Open Graph data. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and domain transfer/update protections but lacks DNSSEC and explicit security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, and no incident response or vulnerability disclosure information is provided. Tracking technologies include Facebook Meta Pixel and Google Tag Manager, indicating moderate user tracking without clear privacy compliance mechanisms. Overall, the website is professionally designed and functional but requires enhancements in privacy compliance, security best practices, and accessibility to improve trust and user protection. The domain WHOIS data shows some inconsistencies, notably a future domain creation date, which should be clarified to ensure legitimacy. Strategic improvements in these areas will strengthen the site's security posture and compliance standing.

I

ITS mobility GmbH

its-mobility.de

48

ITS mobility GmbH operates as one of the largest competence clusters for intelligent mobility in Germany, headquartered at the Forschungsflughafen in Braunschweig. The organization serves a broad audience including businesses, scientific institutions, associations, and municipalities, with over 200 members collaborating to advance intelligent mobility solutions. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern plugins such as Elementor and All in One SEO to optimize content delivery and search engine visibility. Social media integration includes Instagram, YouTube, and LinkedIn, enhancing outreach and engagement. From a technical perspective, the website employs a contemporary technology stack with WordPress 6.8.3, Astra theme, and various plugins for SEO and user experience enhancements. The site is mobile-optimized and demonstrates moderate performance. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and explicit security policies suggests room for improvement. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Security-wise, the site lacks explicit privacy and cookie policies, as well as incident response or vulnerability disclosure mechanisms, which are critical for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, and the WHOIS data, while minimal, does not raise immediate concerns but lacks detailed registrant information. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response and vulnerability disclosure information, and improving contact information visibility to bolster user trust and regulatory compliance.

ITS Ísland is an Icelandic organization dedicated to advancing intelligent transportation systems and smart mobility solutions. The website serves as a platform to share news, organize events, and promote collaboration among stakeholders in the transportation sector. Affiliated with ITS Nordic, ITS Ísland positions itself as a key player in Iceland's transportation innovation landscape. The website content is professionally presented, focusing on events such as conferences on future transportation, MaaS, tolling, and drones. The target audience includes industry professionals, government entities, and interested public in Iceland.

M

Mobil in Pulse

mobilinpulse.com

45

Mobil in Pulse is a well-established French non-profit association dedicated to intelligent mobility and transportation systems. The organization acts as a network connecting public and private stakeholders to promote sustainable and innovative mobility solutions. With over 50 years of history, the association recently rebranded to Mobil'in Pulse and maintains a strong presence in the ITS sector through publications, events, and working groups. The website reflects a professional and comprehensive digital presence targeting mobility professionals and decision-makers. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern libraries such as jQuery, Flickity, and Materialize CSS. SEO is enhanced by Rank Math, and analytics are implemented via Google Analytics. Hosting is provided by OVH sas, a reputable provider. The site performs moderately well with good mobile optimization and accessibility features, though some improvements could be made in accessibility and performance tuning. From a security perspective, the site uses HTTPS and has domain protections in place, but lacks DNSSEC and important security headers like CSP and HSTS. No explicit security or incident response policies are published, and cookie consent mechanisms are absent, which may pose compliance risks. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy and professional, with strong business credibility and content quality. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent, and publishing security policies to improve compliance and trust.

I

ITS Finland Ry

its-finland.fi

58

ITS Finland Ry is a Finnish non-profit collaboration network focused on advancing intelligent transportation systems through digitalization, innovation, and international cooperation. The organization brings together government bodies, cities, research institutions, and companies to promote sustainable, safe, and efficient transportation solutions. The website reflects a mature and professional presence consistent with the organization's mission and activities. Technically, the website is built on WordPress using modern plugins and frameworks, including Cookiebot for consent management and Google Analytics for minimal tracking. The site is mobile-optimized, accessible, and well-structured with comprehensive metadata and SEO practices. Hosting appears stable with no blocking or WAF interference detected. Security posture is good with HTTPS enforced and cookie consent implemented. However, some security headers are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a clear privacy policy and GDPR-aligned cookie management. Overall, the website and domain registration data indicate a trustworthy and legitimate organization with a strong market position in the Finnish intelligent transportation sector. Strategic recommendations include enhancing security headers, publishing a security policy, and enabling DNSSEC to further improve domain security.

C

Clúster de Movilidad y Logística de Euskadi

mlcluster.com

52

Clúster de Movilidad y Logística de Euskadi is a well-established regional business association founded in 2010, focused on enhancing competitiveness in the Basque Country's mobility and logistics sectors. The organization promotes innovation, cooperation, and sector promotion among its members, which include companies and agents in logistics, supply chain, infrastructure, and mobility. The website reflects a professional and consistent brand presence with multilingual support and active content updates including news and events. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS, domain transfer protection, and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is good with visible cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and credible, supporting the cluster's business objectives effectively.

I

ITSDanmark

itsdanmark.dk

55

ITSDanmark is a Danish interest organization established in 2003 that brings together companies, authorities, research institutions, regions, and municipalities working with intelligent transport systems and solutions. The organization serves as a collaborative platform offering news, webinars, and project facilitation to its members. The website reflects a professional and consistent brand presence targeting stakeholders in Denmark's transportation sector. Technically, the site is built on the Umbraco CMS with modern front-end components such as carousels and responsive design, providing a good user experience across devices. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-positioned within its niche but could improve security and privacy practices.

B

Bulgarian Intelligent Transport Systems Association

bitsa.bg

43

The Bulgarian Intelligent Transport Systems Association (BITSA) is a specialized expert association focused on the development and promotion of intelligent transport systems in Bulgaria. It operates as part of the ITS Europe partner network, aiming to enhance sustainable, safe, and efficient transportation through policy advocacy, projects, and stakeholder engagement. The website reflects a professional and consistent brand presence with clear mission and vision statements targeting transport sector professionals and partners. Technically, the website is built on WordPress using Elementor and integrates modern web technologies including Bootstrap and Google reCAPTCHA for form security. Hosting is provided by a reputable Bulgarian hosting provider, inferred from the nameservers. The site is mobile-optimized and SEO-friendly with structured data and meta tags properly implemented. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is privacy protected in compliance with GDPR, which is justified for this type of organization. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, BITSA's website demonstrates a solid digital presence with good business credibility and technical implementation. Enhancing privacy compliance and security headers would further strengthen its security posture and trustworthiness.

I

ITS.be

its.be

43

ITS.be is a well-established public-private non-profit organization focused on accelerating the deployment of intelligent transport systems and linked mobility services in Belgium. The website reflects a professional and consistent brand presence with a clear focus on sustainable mobility and ITS solutions. The organization targets companies, public bodies, associations, and knowledge institutes involved in the ITS domain. Technically, the website is built on Drupal CMS with modern libraries such as Bootstrap and jQuery, and it uses Google Analytics for visitor tracking. The site is mobile-optimized and has good SEO and accessibility features, although accessibility could be improved further. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The domain registration data is consistent with the website's claims, showing a legitimate and trustworthy presence since 2007. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

AustriaTech – Gesellschaft des Bundes für technologiepolitische Maßnahmen GmbH

austriatech.at

60

AustriaTech is a federal agency of the Austrian government specializing in mobility and technology policy, focusing on digitalization, automated and connected mobility, and decarbonization. The organization acts as a consultant and network facilitator for stakeholders in politics, industry, and research, aiming to foster knowledge exchange and collaborative learning. The website reflects a mature, well-established entity with a clear government affiliation and a 20-year operational history. Technically, the site is built on Silverstripe CMS with modern libraries such as jQuery and Bootstrap, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response contacts are absent. Overall, the site demonstrates high professionalism, compliance with privacy regulations, and trustworthy business credibility.

The Schweizerische Mobilitätsplattform ITS-CH is a Swiss-based platform dedicated to promoting the modernization and digitalization of transportation systems. It serves as a collaborative hub for stakeholders from government bodies, economic sectors, research, education, and associations to foster sustainable, ecological, safe, and efficient mobility development across Switzerland. The platform positions itself as a national non-profit entity focused on advancing transportation innovation and cooperation. Technically, the website is built on the Jimdo Creator CMS platform, leveraging standard web technologies such as HTML5, CSS3, and jQuery. The site demonstrates moderate performance and good mobile optimization, with a clean and consistent design. SEO and accessibility features are basic but functional. Hosting is provided by Jimdo, a reputable provider for small to medium-sized websites. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, and no WAF or blocking mechanisms interfere with content access. Overall, the website presents a professional and trustworthy digital presence for ITS-CH, with clear contact information and compliance with privacy standards. Strategic recommendations include enhancing security transparency, adding terms of service, and improving accessibility to further strengthen the platform's digital maturity and stakeholder trust.

I

ITS-Sweden

its-sweden.se

56

ITS Sweden is a well-established industry association founded in 2003, focused on advancing intelligent transport systems and smart mobility solutions in Sweden. The organization serves as a collaborative platform for industry players, public sector entities, and academia to drive digital transport innovations. Their website reflects a professional and consistent brand image, targeting industry stakeholders and promoting knowledge exchange and capacity building. Technically, the website is built on WordPress using the Avada theme, enhanced with SEO and cookie consent tools such as Yoast SEO and Cookiebot. Hosting is provided by Propeller Hosting, and the site employs HTTPS with a good SSL configuration. Security practices include cookie consent management and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. However, explicit contact information, terms of service, and security policies are not prominently published. Overall, the website demonstrates a mature digital presence with good security posture and compliance, suitable for its role as an industry association.

I

IT2GO s.r.o.

farnost.cz

60

The website farnost.cz represents IS OMNIA, a specialized modular information system designed for parish management in the Czech Republic. The platform offers a web module for parish websites, mobile applications for priests and parishioners, and integrated management features such as mass intentions and schedules. The business is operated by IT2GO s.r.o., a small Czech company with a domain age dating back to 2000, indicating established presence and experience in this niche market. The site is professionally designed with clear navigation and consistent branding, targeting parish communities and clergy. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, hosted with WEDOS and using Cloudflare DNS services. The site is mobile-optimized and provides a good user experience, though accessibility features are basic. Performance is moderate, and SEO practices are basic but adequate for the target audience. From a security perspective, the site uses HTTPS (implied by Cloudflare DNS and modern setup), includes CAPTCHA on its contact form to prevent spam, and uses Matomo for analytics to reduce privacy concerns. However, no explicit security headers were detected in the provided data, and no cookie consent mechanism is present despite analytics usage. There is no published incident response or security policy, and no direct contact emails or phone numbers are provided, which could limit user trust and support responsiveness. Overall, the website is safe, professional, and trustworthy for its intended audience, with room for improvement in security headers, privacy compliance, and contact transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in security posture and privacy practices would further strengthen the platform's credibility and compliance.

W

Wilde Ganzen Partners

wildeganzenpartners.nl

72

Wilde Ganzen Partners is a Dutch non-profit organization dedicated to supporting hundreds of development projects annually across dozens of countries. The projects are initiated by Dutch and Belgian foundations in collaboration with local partners, focusing on sustainable community development such as clean water, education, healthcare, and financial independence. The organization holds multiple certifications and maintains a transparent presence with clear contact information and compliance with GDPR and cookie regulations. Technically, the website is built on WordPress with modern technologies including jQuery, Cookiebot for consent management, and Google Tag Manager for analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. Overall, the website reflects a professional, trustworthy, and compliant non-profit entity with a strong digital presence.

K

Křižovnický domácí hospic

krizovnickapomoc.cz

37

Křižovnický domácí hospic sv. Anežky České is a Czech non-profit organization providing home hospice and palliative care services. The website presents a professional and consistent brand image, targeting patients and families in need of end-of-life care. The organization is relatively new, founded in 2021, and maintains partnerships with several healthcare and social service entities. Technically, the site is built on WordPress with common plugins and libraries, including Contact Form 7 and Google reCAPTCHA for spam protection. While HTTPS is properly configured, the site lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security headers are not visibly implemented, representing an area for improvement. Overall, the site is trustworthy and functional but could enhance privacy compliance and security posture.

Ing. Jiří Škoda operates a professional software development and web design service based in the Czech Republic. The website showcases a portfolio of projects and emphasizes custom software solutions, modern websites, and web applications tailored to client needs. The business targets clients seeking bespoke digital solutions with a focus on quality, clean code, and customer support. Technically, the website employs a modern tech stack including PHP, Symfony, Java, Spring, Vaadin, and front-end technologies like HTML5, CSS3, Bootstrap, and JavaScript frameworks. The site is hosted by REG-WEDOS, a Czech registrar, and uses HTTPS with Google reCAPTCHA for form security. Security posture is good but could be improved with additional HTTP security headers and explicit incident response information. Privacy compliance is addressed with GDPR consent and a cookie policy. Overall, the site is professional, well-structured, and trustworthy with minimal tracking and no advertising.

M

MEIN EINE WELT JAHR

mein-eine-welt-jahr.de

54

The Sternsinger-Freiwilligendienst website represents a medium-sized non-profit organization based in Germany, focused on providing international voluntary service opportunities for youth and adults aged 18-28. The organization partners with over 100 global entities to facilitate a Freiwilliges Internationales Jahr (FIJ), offering educational seminars, crisis support, and personalized placement services. The website is professionally designed using WordPress with the Avada theme, featuring comprehensive content, SEO optimization, and a clear navigation structure. Cookie consent is implemented via Borlabs Cookie, and multiple analytics and tracking tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel are in use. However, explicit privacy and terms of service policies are not found, which is a compliance gap. The WHOIS data is minimal but consistent with the website's non-profit nature, and no blocking or WAF mechanisms are detected, allowing full content access.

M

Město Slatiňany

slatinany.cz

47

Město Slatiňany operates an official municipal website providing comprehensive information about the city, its administration, tourist attractions, public services, and community events. The site targets local citizens, tourists, and stakeholders interested in municipal affairs and regional culture. It serves as a digital portal for public communication and service delivery, reflecting the city's historical and cultural heritage. Technically, the website employs modern JavaScript libraries, cookie consent mechanisms, and integrates external services such as YouTube and social media platforms. The site is built on a custom CMS platform with responsive design and good SEO practices, ensuring accessibility and usability across devices. From a security perspective, the site enforces HTTPS and includes cookie consent for GDPR compliance. However, it lacks visible security headers and formal security or incident response policies. The absence of WHOIS data for the domain is a notable gap, though the website content and official contact details support its legitimacy. Overall, the website presents a professional and trustworthy digital presence for the municipality, with room for improvement in security policy transparency and domain registration clarity.

W

Womens Utilities Network

thewun.co.uk

63

Womens Utilities Network (WUN) is a UK-based organization focused on empowering women in the utilities sector, particularly energy and water. Founded in 2018, WUN provides networking, mentoring, career development, and events to support women in building fulfilling careers. The website reflects a professional and consistent brand with active social media engagement and a clear mission. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and published security policies. No privacy or terms of service pages were found, indicating compliance gaps. Overall, the domain registration and WHOIS data support the legitimacy of the organization.

P

Primary Engineer

primaryengineer.com

56

Primary Engineer is a UK-based not-for-profit educational organization focused on bringing engineering into primary school classrooms. Established since 2005, it serves children, pupils, teachers, parents, and engineers with various educational programs, competitions, and qualifications. The website is professionally designed, well-branded, and provides comprehensive content relevant to its mission. Technically, the site is built on WordPress hosted on WPEngine, utilizing modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency but does not detract from the site's apparent legitimacy based on content and social presence. Overall, the site is trustworthy and well-positioned in the education sector.

E

endboss

stadtlabor-wittenberg.de

44

Stadtlabor Wittenberg is a community-focused non-profit initiative aimed at fostering participatory urban development and cultural engagement in the Lutherstadt Wittenberg area. The project provides a physical space for collaboration, events, and workshops, managed by the interdisciplinary studio endboss. The website effectively communicates its mission, event calendar, and contact information, targeting local residents and community members interested in shaping their city's future. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks some security headers and formal privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

R

RNDr. Miloš Vystrčil | Senátor | Senátní obvod č. 52 – Jihlava

vystrcil.cz

47

The website www.vystrcil.cz represents Miloš Vystrčil, the chairman of the Senate of the Czech Republic and a senator for district 52 – Jihlava. It serves as a political and informational platform providing news, biography, calendar events, and press releases related to his political activities. The site targets Czech citizens, particularly voters in his senatorial district, and functions primarily as a communication channel for his political work. Technically, the website is built on WordPress, utilizing common plugins for SEO, GDPR compliance, and user interaction such as contact forms. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a modern and secure infrastructure. Security posture is adequate but could be improved by implementing additional security headers and publishing a vulnerability disclosure policy. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned policies. Overall, the site is professional, trustworthy, and serves its purpose effectively as a political communication tool.

Dialogversand.de is an established German e-commerce platform specializing in the sale of books, particularly those published by the in-house dialogverlag as well as other publishers. The website targets German-speaking customers interested in religious, regional, and thematic literature. The business operates as a small-sized retailer with a focused niche market. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and a professional theme to deliver a good user experience. The site is mobile-optimized and includes SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The WHOIS data aligns well with the business, indicating a legitimate and consistent domain registration. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

R

RadioKing

radioking.com

56

RadioKing is a professional SaaS platform enabling users to create and manage their own internet radio stations easily. The company targets individuals, associations, and professional entities such as brands and marketing agencies. With over 10 years of experience and more than 4,000 radio stations trusting their services, RadioKing offers a comprehensive suite of tools including media library management, scheduling, live broadcasting, widgets, mobile apps, and smart speaker integration. The website is well-branded, mobile-friendly, and rich in multimedia content, supporting a strong market position in the internet radio hosting industry. Technically, the site is built on WordPress with Elementor and uses modern web technologies and SEO best practices, though hosting details are not explicit.

W

West Virginia Radio Corporation

wvrcmedia.com

55

WVRC Media is a well-established media company serving West Virginia with a broad portfolio including radio broadcasting, statewide news and sports network, video production, and digital marketing services. The company targets businesses and audiences within West Virginia, leveraging decades of experience and multiple media platforms to grow local businesses. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with common plugins and integrations, hosted on A2 Hosting, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security headers and published security policies. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website presents a credible and professional digital presence for WVRC Media.

N

NASUWT

nasuwt.org.uk

61

NASUWT is a prominent UK-based teachers' union dedicated to protecting the status and working conditions of teachers and school leaders. The website serves as a comprehensive platform offering member support, advice, training, news, and campaign information. It targets educators across the UK, providing resources tailored to different regions and professional needs. The union operates a membership-based model, emphasizing advocacy and professional development. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, and Bootstrap, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and privacy policies indicates a commitment to GDPR compliance. Security-wise, the site uses HTTPS and secure login forms but lacks explicit security headers and incident response information. The WHOIS data is unavailable due to domain naming rules errors, but the website's content and branding strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving a large audience in the education sector.

K

Krames

kramesstore.com

76

Krames is a well-established healthcare company specializing in patient education materials, operating an e-commerce platform under the parent company WebMD Ignite. The website offers both digital and physical educational resources aimed at healthcare providers and patients, reflecting a mature market position since 1974. Technically, the site is built on Magento with a modern tech stack including RequireJS, jQuery, and integrations with marketing and analytics tools such as HubSpot, LinkedIn Insight, and New Relic. Security posture is solid with HTTPS enforced and domain protections in place, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with cookie consent mechanisms and comprehensive policies. Overall, the site demonstrates a professional and trustworthy online presence with extensive marketing and analytics capabilities.

N

Nutricia

nutricia.fr

68

Nutricia is a specialized medical nutrition company operating under the Danone group, targeting patients with nutritional needs and healthcare professionals. The website reflects a professional and consistent brand presence with comprehensive product and service information. Technically, the site is built on WordPress with modern tracking and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification but the site’s affiliation and content quality support legitimacy. Overall, the website is well-maintained and trustworthy for its intended audience.

N

Nutricia Medical Oy

nutricia.fi

63

Nutricia Medical Oy operates a professional healthcare website focused on medical nutrition products and services in Finland. The website targets healthcare professionals and patients, providing resources and product information. The company maintains a consistent brand presence with social media links and structured data confirming its identity. Technically, the site is built on WordPress, leveraging modern tracking and consent management tools such as Google Tag Manager and OneTrust, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is supported by a cookie consent mechanism and inferred privacy policy, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence suitable for its healthcare audience.

N

Nutricia A/S

nutricia.dk

58

Nutricia A/S is a well-established healthcare company specializing in medical nutrition products for adults and children, supporting nutritional management before, during, and after disease treatment. The company operates under the global parent Danone and maintains a strong market position in Denmark and beyond. Their website reflects a professional digital presence with clear branding, relevant content, and a focus on patient and healthcare professional audiences. Technically, the site is built on WordPress with modern tools such as Google Tag Manager and OneTrust for cookie consent, and it employs New Relic for performance monitoring. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not detected. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. However, the absence of WHOIS data limits domain trust verification, slightly impacting overall credibility. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

A

Arrowhead Winch

paccarwinch.com

60

Arrowhead Winch is a professional industrial manufacturing company specializing in hydraulic winches, hoists, and drive systems under the well-known brands BRADEN, CARCO, and Gearmatic. The company targets industrial and commercial sectors requiring heavy-duty engineered solutions. Their website demonstrates a strong market position with a comprehensive product portfolio and a global distributor network. Technically, the website is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and LinkedIn Insight Tag, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent management, though explicit security policies and incident response contacts are not published. The WHOIS data is missing, which raises concerns about domain registration transparency, but the website's professional presentation and consistent branding mitigate some trust issues. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a credible online presence for the business.

PACCAR Powertrain is a division of PACCAR Inc., specializing in manufacturing and engineering powertrain components such as engines, transmissions, and axles for heavy-duty trucks. The company positions itself as a leader in the transportation sector, offering innovative and durable products designed to maximize performance and efficiency for commercial vehicle operators. The website reflects a professional and consistent brand image aligned with its parent company and partners. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies and multilingual support. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the transportation industry.

P

PACCAR AUSTRALIA

paccar.com.au

62

PACCAR Australia is a prominent player in the commercial vehicle manufacturing and services sector, representing well-known brands such as DAF and Kenworth. The company offers a comprehensive suite of services including parts supply, financial services, and leasing options, positioning itself as a leader in the Australian transport industry. The website reflects a mature digital presence with professional design, clear branding, and relevant content targeting commercial vehicle operators and industry professionals. Technically, the site is built on WordPress with modern plugins like Elementor and Slider Revolution, ensuring a responsive and visually appealing user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by implementing security headers and explicit incident response policies. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, PACCAR Australia's website demonstrates high legitimacy and professionalism, supporting its market position and business operations effectively.

V

VWI Verband Deutscher Wirtschaftsingenieure e.V.

vwi.org

48

The VWI Verband Deutscher Wirtschaftsingenieure e.V. is a well-established professional association representing Wirtschaftsingenieure (industrial engineers) in the German-speaking region. With over 6,000 members, 20 regional groups, and 40 university groups, the association focuses on personal networking, quality education, and political advocacy for its members. The website serves as an information hub for members and interested parties, presenting a professional and consistent brand image. Technically, the website is built on WordPress, utilizing popular plugins such as LayerSlider and WPBakery Page Builder. It employs Matomo for analytics and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent with granular user controls. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the association's history, enhancing trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers, explicit privacy and security policies, and clearer contact information would further strengthen its posture.

B

big. bechtold-gruppe

big-gruppe.com

63

big. bechtold-gruppe is a well-established German family-owned service provider specializing in integrated facility, engineering, and security services. Founded in 1981 and employing over 3,000 people, the company offers a broad portfolio including engineering services, facility management, security services, and smart services. Their market position is strong within Germany, targeting businesses and organizations requiring comprehensive building-related services. The website reflects a professional and consistent brand image with clear navigation and detailed service descriptions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and privacy-conscious analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. This discrepancy between the professional website and missing domain registration data suggests a need for further verification. Overall, the site presents a low risk but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include implementing comprehensive security headers, publishing a security policy and incident response contacts, and verifying domain registration details to enhance trust.

M

Médiář

mediar.cz

64

Médiář is a Czech online media publication focused on daily news about media, marketing, advertising, and PR industries. It serves professionals and agencies within the Czech media and marketing sectors by providing news, industry insights, job listings, and advertising galleries. The website is well-structured with a consistent brand presence and targets a specialized audience interested in media and marketing developments. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and Seznam SSP ads, indicating a mature digital infrastructure. The site employs Google Consent Mode and cookie consent mechanisms to address privacy concerns, although an explicit privacy policy page was not found in the provided content. Security posture is good with HTTPS and some security best practices, but could be improved by adding explicit security headers and clearer incident response contacts. The absence of WHOIS data reduces domain transparency and slightly impacts trustworthiness, but the website content and technical setup suggest a legitimate and professional media outlet. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in privacy compliance and business credibility transparency.

C

Crown Estate Scotland

crownestatescotland.com

71

Crown Estate Scotland is a public body managing property, natural resources, and community assets in Scotland to generate lasting economic and social value. The website clearly communicates its roles, projects, and services, targeting Scottish public authorities, community organizations, tenants, and stakeholders. The organization positions itself as a key player in sustainable development, offshore wind projects, and community empowerment. Technically, the website is built on Drupal 10 with modern libraries and frameworks, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and aligned with its public sector mission.

E

EDF power solutions UK and Ireland

edf-re.uk

54

EDF power solutions UK and Ireland is a business focused on delivering clean and renewable energy solutions to combat climate change within the UK and Ireland markets. The website presents a professional and consistent brand image aligned with the energy sector, emphasizing a net zero future powered by clean energy. The technical infrastructure is built on a modern WordPress CMS platform enhanced with React components, Bootstrap styling, and SEO optimization via Yoast plugin. Analytics and cookie consent are managed through Google Tag Manager and OneTrust respectively, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and formal privacy or security policies. The absence of WHOIS data due to domain naming rules violation introduces uncertainty about domain legitimacy, warranting further verification. Overall, the website is functional, well-designed, and targeted at business stakeholders interested in renewable energy, but improvements in transparency and security documentation are recommended.

R

RWE

rwe.com

69

RWE is a major global energy company with a strong focus on renewable energy and sustainability. With over 125 years of history, it has transformed into a leading supplier of clean, safe, and affordable electricity. The company operates a diversified portfolio including renewable energies such as solar, wind (onshore and offshore), hydrogen, battery storage, and bioenergy, alongside conventional energy sources. RWE also invests in energy transition projects and provides related services including energy trading and procurement portals. The website reflects a mature corporate presence with comprehensive information for investors, partners, and job seekers. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and structured navigation. The CMS appears to be Progress Sitefinity, supporting a robust content management environment. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure policies are not publicly visible, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and well-maintained, supporting RWE's market position as a leading energy supplier. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's credibility given the corporate branding and content quality.

D

Dogger Bank Wind Farm

doggerbank.com

63

Dogger Bank Wind Farm is a large-scale offshore renewable energy project aiming to become the world's largest offshore wind farm with a combined capacity of 3.6GW. The project is a joint venture between SSE, Equinor, and Vårgrønn, targeting the UK market and focusing on sustainable energy generation and community benefits. The website reflects a mature digital presence with comprehensive project information, community engagement, and supplier recruitment. Technically, the site is built on WordPress with modern plugins and analytics, showing good SEO and accessibility practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some improvements like DNSSEC and security.txt could enhance trust. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting the business's credibility and market position.

E

Energi Coast

energicoast.co.uk

60

Energi Coast is a well-established cluster organization dedicated to supporting and promoting the offshore wind energy sector in North East England. The website reflects a professional and consistent brand presence, offering key services such as supply chain coordination, skills development, innovation support, and business networking. The organization is positioned as a central hub connecting industry players, academia, and government bodies to foster regional economic growth in renewable energy. Technically, the website uses modern web technologies including Umbraco CMS, Bootstrap, and integrates Google Analytics and reCAPTCHA for security and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be improved. Privacy compliance is addressed with cookie consent and a privacy policy, though a dedicated security policy and incident response information are absent. Overall, the website is trustworthy, safe, and serves its business purpose effectively.

L

Lukáš Krása

kraasa.cz

43

The website kraasa.cz represents a personal brand and portfolio of Lukáš Krása, a Czech graphic designer, web designer, coder, photographer, and lecturer. The site showcases a professional portfolio with various projects and emphasizes educational offerings with a well-reviewed course. The business operates as a small freelance entity targeting clients seeking creative design and training services. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Easy Fancybox, using jQuery and Font Awesome for UI elements. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and privacy policies. No WHOIS data is available, which slightly impacts trust but the professional presentation and contact details support legitimacy. Overall, the site is safe, professional, and well-maintained but could improve privacy compliance and security hardening.

D

Digitalwerk

digital-werk.org

53

Digitalwerk is a regional initiative based in Brandenburg, Germany, focused on supporting the digital transformation of small and medium-sized enterprises (SMEs). The organization offers free workshops, events, and experience stations to help businesses in the crafts and mid-sized sectors adopt digital technologies. The website is professionally designed using WordPress and the Divi theme, incorporating modern SEO and event management plugins. The technical infrastructure is solid, with HTTPS enabled and reputable hosting and domain registration through IONOS SE. However, the absence of DNSSEC and missing privacy and cookie policies indicate areas for improvement in security and compliance. Tracking is minimal and primarily conducted via etracker, with no aggressive user profiling detected. Overall, the site presents a trustworthy and professional image aligned with its business mission.

M

MINUTACZ s.r.o.

minutacz.cz

46

MINUTACZ s.r.o. operates as an authorized distributor and retailer of Swiss watch brands TISSOT and BALL within the Czech Republic. The company has a well-established market presence since 2010, offering official products, service locations, and brand information targeted at consumers seeking quality Swiss watches. The website is professionally designed using WordPress CMS, incorporating SEO and GDPR compliance plugins to enhance digital maturity and user experience. The site is optimized for mobile devices and provides clear navigation and contact information, reinforcing trust and credibility. From a technical perspective, the website employs modern web technologies including Google Analytics and Tag Manager for user tracking, Yoast SEO for search optimization, and Slider Revolution for visual content. The site uses HTTPS with good SSL configuration, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a retail website. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR requirements. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness. Strategically, MINUTACZ should focus on enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to strengthen its security culture and compliance posture. These steps will further solidify customer trust and reduce risk exposure in the evolving digital landscape.