Security Directory

E

ESB

esb.ie

72

ESB is a large, established Irish utility company operating across the electricity market including generation, transmission, distribution, and supply. The company also has diversified operations in telecommunications and electric vehicle charging infrastructure. The website reflects a mature digital presence with comprehensive corporate governance, sustainability, and investor relations content, targeting a broad audience including consumers, businesses, and investors. The business model is vertically integrated, supporting a strong market position in Ireland and internationally through subsidiaries.

R

RWE

rwe.com

69

RWE is a major global energy company with a strong focus on renewable energy and sustainability. With over 125 years of history, it has transformed into a leading supplier of clean, safe, and affordable electricity. The company operates a diversified portfolio including renewable energies such as solar, wind (onshore and offshore), hydrogen, battery storage, and bioenergy, alongside conventional energy sources. RWE also invests in energy transition projects and provides related services including energy trading and procurement portals. The website reflects a mature corporate presence with comprehensive information for investors, partners, and job seekers. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and structured navigation. The CMS appears to be Progress Sitefinity, supporting a robust content management environment. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure policies are not publicly visible, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and well-maintained, supporting RWE's market position as a leading energy supplier. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's credibility given the corporate branding and content quality.

N

NOF

nof.co.uk

72

NOF is a UK-based business development membership organization focused on facilitating valuable connections within the global energy sector. The company positions itself as the strongest energy sector network in the UK, offering services such as business development support, industry introductions, events, and access to an offshore wind projects database. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and membership benefits. Contact details and social media presence reinforce its credibility. Technically, the website leverages modern technologies including Umbraco CMS, Bootstrap, Google Analytics, HubSpot, and Google reCAPTCHA for security. The site implements HTTPS with a Content Security Policy header, indicating a good security posture. However, additional security headers could enhance protection. The WHOIS data is unavailable due to domain registration constraints, but the website content and contact information strongly indicate a legitimate UK-based business. Security-wise, the site shows good practices such as secure forms with CAPTCHA and no exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No vulnerabilities or suspicious domains were detected. Overall, the site is safe, professional, and trustworthy with a moderate to high security posture. The main risk is the lack of WHOIS data due to domain registration rules, which limits domain trust verification but does not indicate malicious intent. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to further improve trust and compliance.

B

Bebat, Fost Plus en Recupel

sorteerveilig.be

56

The website www.sorteerveilig.be is a collaborative public awareness campaign by Bebat, Fost Plus, and Recupel, focusing on educating the Belgian public about the safe and correct recycling of batteries and electronic devices. The campaign aims to reduce fire hazards and improve recycling efficiency by encouraging proper sorting and disposal practices. The site features educational content, including embedded Vimeo videos, and links to partner organizations' official websites. Technically, the site employs modern web technologies such as Google Tag Manager for analytics and Usercentrics for cookie consent management, ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. Security-wise, the site uses HTTPS and consent management but lacks explicit security headers and published security policies. WHOIS data is restricted due to DNS Belgium policies, but the domain's association with reputable organizations and consistent branding supports its legitimacy. Overall, the site presents a trustworthy and professional digital presence aligned with its public service mission.

F

Fost Plus

bettersorting.be

58

Better Sorting is a professionally maintained website operated by Fost Plus, a Belgian non-profit organization dedicated to organizing the collection and recycling of household packaging waste. The site provides comprehensive sorting guides, recycling process information, a mobile app, and educational blog content targeted at Belgian residents interested in sustainable waste management. The website is well-branded, consistent, and offers multilingual support, enhancing accessibility and user engagement. Technically, the website is built on Drupal CMS with modern front-end frameworks like Bootstrap and FontAwesome. It employs best practices such as lazy loading images and consent management via Usercentrics, alongside analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The WHOIS data is restricted, showing a 'NOT ALLOWED' status, which is common for .be domains and does not indicate malicious intent. Overall, the domain registration appears consistent with the business purpose. The overall risk assessment is low, with strong trust indicators and no suspicious content or links. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

F

Fost Plus

trionsmieux.be

52

Fost Plus operates the website www.trionsmieux.be as a key platform for educating Belgian residents on proper waste sorting and recycling practices. The organization holds a leading position in Belgium's environmental sustainability sector, focusing on household packaging recycling. The website offers comprehensive content including sorting guides, recycling processes, a mobile app, and a contact point for overpackaging complaints. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and integrates tracking and consent management tools such as Google Tag Manager and Usercentrics. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and user-friendly resource aligned with Fost Plus's mission.

PILA MARTINICE s.r.o., operating under the brand MARTINICE GROUP, is a Czech company specializing in turnkey wooden buildings including family houses, halls, roofs, and photovoltaic installations. With over 20 years of experience since 1997, the company positions itself as a reliable regional manufacturer and construction service provider offering high precision and a 25-year warranty on their wooden construction systems. Their target audience includes individuals and businesses seeking quality wooden buildings with modern technology and flexible project options. Technically, the website is built on a custom CMS (IPO CMS) and uses modern JavaScript libraries such as jQuery, Google Tag Manager, Facebook Pixel, and Matomo for analytics. The site is mobile-optimized and employs HTTPS with reCAPTCHA for form security. However, it lacks some security headers and a published privacy policy, which are areas for improvement. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, impacting the overall trustworthiness assessment. Overall, the website is professional, content-rich, and trustworthy from a business perspective but would benefit from enhanced transparency in privacy and security policies and improved domain registration visibility.

M

MINUTACZ s.r.o.

minutacz.cz

46

MINUTACZ s.r.o. operates as an authorized distributor and retailer of Swiss watch brands TISSOT and BALL within the Czech Republic. The company has a well-established market presence since 2010, offering official products, service locations, and brand information targeted at consumers seeking quality Swiss watches. The website is professionally designed using WordPress CMS, incorporating SEO and GDPR compliance plugins to enhance digital maturity and user experience. The site is optimized for mobile devices and provides clear navigation and contact information, reinforcing trust and credibility. From a technical perspective, the website employs modern web technologies including Google Analytics and Tag Manager for user tracking, Yoast SEO for search optimization, and Slider Revolution for visual content. The site uses HTTPS with good SSL configuration, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a retail website. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR requirements. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness. Strategically, MINUTACZ should focus on enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to strengthen its security culture and compliance posture. These steps will further solidify customer trust and reduce risk exposure in the evolving digital landscape.

C

Úvod | CIVOP - bezpečnost práce (BOZP) pro firmy

civop.cz

55

The website civop.cz represents a small business specializing in occupational safety (BOZP) services targeted at companies in the Czech Republic. The site is built on WordPress using the GeneratePress theme and incorporates Google Tag Manager for analytics and marketing purposes. The content is professional and relevant to its business domain, focusing on safety consulting and compliance services. Technical infrastructure appears standard for a small business website with moderate performance and good mobile responsiveness. Security posture is basic, with no advanced security headers detected and no visible privacy or cookie policies, indicating room for improvement in compliance and security transparency. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly reduces overall trustworthiness. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and verifying domain registration details to improve business credibility and compliance.

P

Planeo

planeo.cz

68

Planeo.cz is a large Czech retail and e-commerce platform specializing in electronics, garden, sport, and auto-moto products with over 100 physical stores. The website presents a professional and user-friendly interface with comprehensive privacy and cookie policies compliant with GDPR. The technical infrastructure leverages modern analytics and advertising technologies including Google Tag Manager, Cookiebot, Exponea, and multiple ad networks, indicating a mature digital marketing strategy. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers are not confirmed in the provided data. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security headers and ensuring all forms are secured against CSRF and input vulnerabilities.

Legendary Cards is an e-commerce platform operated by eSports s.r.o., specializing in collectible sports cards and memorabilia primarily targeting Czech sports enthusiasts and collectors. The website offers a range of products including limited edition cards, sports figures, and related accessories, supported by promotional content and news updates. The business operates with a clear focus on the Czech market and maintains an active social media presence to engage its audience. Technically, the website employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and the Nette Framework. The site is mobile-optimized with a responsive design and uses cookie consent mechanisms to comply with GDPR. Performance is moderate with good navigation and content structure, though some improvements in accessibility and SEO could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent with granular user controls. However, it lacks explicit security headers and a published security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Overall, the website is trustworthy and professionally maintained, with legitimate domain registration consistent with the business identity. Strategic improvements in security headers and incident response transparency would enhance the security posture further.

E

EnVys, a.s.

envys.cz

66

EnVys, a.s. operates a community energy platform in the Czech Republic, offering long-term stable electricity prices sourced directly from local power plants. The company targets citizens, firms, and municipalities, emphasizing sustainability and compliance with ESG and Green Deal requirements. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Blazor, jQuery, Google Analytics, Microsoft Clarity, and a chatbot for enhanced user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. WHOIS data is unavailable due to CZ NIC privacy policies, but the presence of official documents and clear contact information supports legitimacy. Overall, the site reflects a mature digital presence suitable for a medium-sized energy company.

C

Clearly

clearly.cz

68

Clearly.cz is a newly launched e-commerce website specializing in health and wellness products, leveraging the Shopify platform for its online retail operations. The site targets general consumers interested in supplements and wellness, positioning itself as a clear and trustworthy brand dedicated to health. The business model is direct-to-consumer online sales with regional partner domains supporting multiple European markets. The website content is professionally designed, well-structured, and optimized for SEO and mobile devices, providing a good user experience.

M

Ministerstvo vnitra České republiky

prevencekriminality.cz

52

The website prevencekriminality.cz is an official government portal operated by the Ministry of Interior of the Czech Republic, focused on crime prevention strategies and public safety. It serves as a comprehensive resource for citizens, public authorities, and professionals involved in crime prevention, offering news, projects, events, and educational materials. The site maintains a strong market position as the authoritative source for crime prevention information in the Czech Republic. Technically, the site is built on WordPress using modern plugins such as Oxygen Builder, Yoast SEO, and GDPR compliance tools like Complianz. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, though some improvements could be made. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and uses Cloudflare services, with cookie consent management in place. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a dedicated security policy page are absent, which could be enhanced. Incident response and vulnerability disclosure mechanisms are not publicly documented. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively balances user experience with security and privacy considerations, making it a reliable resource for its audience.

P

PixelBrothers s.r.o.

pixelbrothers.cz

50

PixelBrothers s.r.o. is a Prague-based digital agency specializing in custom web design, e-commerce platforms, and corporate systems development. The company offers a broad range of services including SEO, PPC marketing, programming, and mobile app development, targeting businesses seeking tailored digital solutions. Their market position is strong within the Czech Republic, supported by a portfolio of reputable clients and positive testimonials. Technically, the website is built on modern frameworks such as Bootstrap and PrestaShop, with integrations for analytics and live chat, demonstrating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though improvements are recommended in security headers and explicit privacy documentation. Overall, the website is professional, user-friendly, and trustworthy, though the absence of WHOIS data slightly impacts domain trustworthiness. Strategic recommendations include enhancing security policies, publishing comprehensive privacy and terms documents, and verifying domain registration details.

S

Sedláček s.r.o.

sedlacek-karcher.cz

50

Sedláček s.r.o. operates the website www.sedlacek-karcher.cz as an authorized reseller and service provider of cleaning and hygiene systems, prominently featuring brands such as Kärcher, TORK, and Kimberly-Clark. The company has a long-standing presence since 1994, targeting both business and consumer markets with sales, service, and rental offerings. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site employs modern tracking and analytics tools including Google Tag Manager, Hotjar, and Facebook Pixel, alongside security measures like HTTPS and Google reCAPTCHA for form protection. However, the absence of explicit privacy and cookie policy pages and lack of WHOIS domain registration data introduce some trust and compliance concerns. Overall, the site demonstrates a moderate security posture with room for improvement in transparency and security headers.

N

Nej.cz

internetpb.cz

74

Nej.cz is a Czech telecommunications provider offering internet, digital television, and telephone services primarily targeting personal and business customers. The company operates as part of the O2 group, indicating a strong market position within the Czech Republic. The website presents a professional and consistent brand image with clear service offerings and contact information. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, Hotjar for user behavior analytics, and reCAPTCHA for form security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. However, WHOIS data is unavailable, likely due to privacy protection, which is common for this business type. Overall, Nej.cz demonstrates a trustworthy and professional online presence with room for minor security enhancements.

R

Rheingas Halle-Saalegas GmbH

gasmann.de

59

Rheingas Halle-Saalegas GmbH, operating under the brand 'Der Gasmann', is a regional energy supplier specializing in liquefied gas and gas bottles serving Mitteldeutschland, Germany. The company offers a range of services including sales, rental, and maintenance of gas tanks and bottles, targeting residential and commercial customers in the region. Their market position is that of a trusted local energy provider with a focus on sustainable and modern energy solutions. The website is built on TYPO3 CMS, integrates Google services for analytics and maps, and demonstrates a moderate to good level of digital maturity with responsive design and clear navigation. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. Overall, the website reflects a professional and trustworthy business presence with good customer engagement features.

P

Pavliš a Hartmann, spol. s r.o.

firefighting-phhp.com

45

Pavliš a Hartmann, spol. s r.o. is a traditional Czech manufacturer specializing in fire hoses and firefighting equipment, including hydrant systems, pumps, nozzles, and valves. The company operates an e-commerce platform targeting firefighting professionals and safety equipment buyers, with a market presence primarily in the Czech Republic and Slovakia but serving customers worldwide. The website is professionally designed, mobile-optimized, and provides comprehensive product information and contact details, supporting a medium-sized manufacturing business model. Technically, the website uses a custom CMS (Live System), integrates Google Tag Manager with privacy-conscious consent settings, and employs modern web technologies such as Bootstrap and Lightbox. Hosting appears to be provided by Active24. The site demonstrates good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS domain registration data reduces trustworthiness slightly, though the website content and contact information appear legitimate and professional. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture. Strategic improvements in security transparency and domain registration clarity are recommended to enhance trust and compliance.

O

Ocmis Irrigazione S.p.A. a Socio Unico

ocmis-irrigazione.it

10

Ocmis Irrigazione S.p.A. is a medium-sized Italian manufacturing company specializing in irrigation systems and technology. The company offers a broad portfolio of irrigation products including machines, pivot systems, rain hoses, and tractor pumps, complemented by digital irrigation services such as the Irriverso platform. With a global presence spanning 90 countries and 5 continents, Ocmis maintains a strong market position supported by 350 active dealers and four distributed brands. The website is professionally designed, multilingual, and emphasizes sustainability and efficient water resource management. Technically, the website is built on Drupal 8 and leverages modern JavaScript libraries and frameworks such as jQuery, Slick Slider, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. The WHOIS data is unavailable, indicating either recent domain registration or privacy protection, which slightly reduces trust but is mitigated by the professional presentation and legal disclosures on the site. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a mature digital presence aligned with the company's business objectives and market reach.

P

Peterbilt

peterbilt.com

11

Peterbilt is a leading American manufacturer specializing in diesel and electric trucks for various applications including long-haul and local delivery. The company maintains a strong market position with a comprehensive product lineup and dealer network. The website reflects a mature digital presence with modern technologies such as Nuxt.js and integrates multiple analytics and marketing tools to optimize user experience and business insights. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although dedicated security and incident response policies are not publicly available. The absence of WHOIS data for the www subdomain is noted but does not detract from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance trust and compliance.

K

Kenworth

kenworth.com

10

Kenworth is a well-established manufacturer of premium heavy and medium duty trucks, operating under the parent company PACCAR Inc. The website reflects a strong market position with a focus on innovation, including zero emissions and connected truck technologies. The digital infrastructure is modern, leveraging popular analytics and advertising platforms, with good mobile optimization and user experience. Security posture is adequate with HTTPS and domain protections, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partially addressed via the parent company's privacy policy, but cookie consent mechanisms are lacking. Overall, the site is professional and trustworthy, serving a commercial audience effectively.

B

Busworld Europe

busworldeurope.org

11

Busworld Europe is a leading B2B exhibition organizer specializing in the bus and coach industry, hosting the largest dedicated event in Brussels. The website reflects a mature digital presence with comprehensive event information, strong branding, and active engagement channels including a dedicated app and social media. The technical infrastructure is modern, leveraging Drupal 11 and multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be enhanced. Privacy and cookie policies are well implemented, supporting GDPR compliance. Overall, the site demonstrates a trustworthy and professional business operation with clear contact points and industry relevance.

N

Nice Ltd.

incontact.com

72

NiCE is a leading enterprise technology company specializing in AI-driven customer service automation solutions. Their offerings focus on enhancing customer experience and operational efficiency for businesses globally. The company demonstrates a strong market position with comprehensive services tailored for enterprise clients. The website reflects a mature digital infrastructure leveraging modern web technologies such as Next.js, React, and advanced marketing and analytics tools including Marketo and Google Tag Manager. Security posture is robust with HTTPS enforcement, multiple security headers, and adherence to recognized standards like ISO 27001 and SOC 2. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, NiCE presents a professional, secure, and trustworthy online presence suitable for its enterprise audience.

S

Sedláček s.r.o.

author-sedlacek.cz

49

Sedláček s.r.o. operates the website www.author-sedlacek.cz as a retail and service center specializing in bicycles, particularly the Author brand, along with related accessories and rental services. The company has an established presence since 1994 and targets cycling enthusiasts in the Czech Republic. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, alongside security measures like HTTPS and reCAPTCHA for form protection. However, the absence of privacy and terms of service pages indicates a compliance gap. The WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and contact information suggest a legitimate small retail business. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance and security header implementation.

I

investujdopole.cz s.r.o.

investujdopole.cz

10

Investujdopole.cz s.r.o. is a Czech Republic-based company specializing in land investment brokerage and advisory services. With over 20 years of experience and a portfolio of more than 5,000 land parcels sold, the company positions itself as a trusted leader in the Czech land investment market. Their services include legal support, property valuation, and educational webinars aimed at helping investors protect their savings against inflation through land investments. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and React, ensuring a smooth user experience. Security measures include HTTPS, Google reCAPTCHA, and secure forms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is a notable gap in transparency but does not detract significantly from the overall trustworthiness given the comprehensive business information and contact details provided. Privacy and cookie policies are present and GDPR compliant, supporting responsible data handling practices.

P

P6PA+Architects

p6pa.com

41

P6PA+Architects is a premium architecture studio with a global outlook and local presence, notably in Prague and New York. The company offers architectural design and consulting services, targeting clients seeking high-quality architectural solutions. The website presents a professional portfolio and branding consistent with a niche premium service provider in the real estate sector. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Google Maps API, and Swiper.js, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing purposes. While the site is accessible and well-structured, it lacks visible privacy and cookie policies, explicit contact information, and WHOIS registration data, which raises concerns about transparency and compliance. Security posture is moderate with HTTPS usage implied but no security headers detected in the provided data. Overall, the site is functional and professional but would benefit from enhanced compliance and security practices.

H

Hodinářství a Zlatnictví Tomáš Vyskočil - TOVYS

tovys.cz

52

Tovys.cz is a Czech Republic-based retailer specializing in watches and jewelry, operating since 1996 with a physical store in Jihlava and an online e-commerce platform. The company offers a wide range of products from over 55 global brands, including luxury and smart watches, complemented by watchmaking and goldsmith services. The website demonstrates a mature digital presence with modern technologies such as jQuery, Swiper.js, and integration of Google Analytics and Facebook Pixel for marketing and analytics purposes. Privacy compliance is well addressed with detailed GDPR policies and cookie consent mechanisms. Security posture is generally good with HTTPS and consent management, though improvements in security headers and incident response documentation are recommended. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and comprehensive contact information support business credibility. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

P

PRVNÍ CHODSKÁ eshop

chodska.cz

59

PRVNÍ CHODSKÁ eshop operates a professional e-commerce platform specializing in construction materials such as roofing, windows, insulation, gutters, wood assortments, pergolas, and facades. The company serves a regional market in the Czech Republic with multiple physical branches, targeting construction professionals and retail customers. The website demonstrates a solid market position as a supplier with a broad product range and local availability through its branch network. Technically, the site uses a modern JavaScript stack including jQuery, Swiper.js, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel, managed via Google Tag Manager. The platform appears to be built on a proprietary or custom e-commerce CMS (K2 eShop). Security posture is adequate with enforced HTTPS and error monitoring, but lacks some security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy page. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

N

Nadační fond Škoda Auto

nfsa.cz

63

Nadační fond Škoda Auto is a non-profit foundation dedicated to supporting the development of the home regions of Škoda Auto, namely Mladoboleslavska, Rychnovska, and Vrchlabska. The foundation provides financial aid, educational programs, and fosters partnerships to enhance community development. It operates grant programs and strategic projects focused on social services, cultural life, and public space revitalization. The website reflects a strong affiliation with Škoda Auto and Volkswagen, indicating a reputable backing. Technically, the website employs modern frontend technologies such as Vue.js and Vuetify, ensuring a responsive and accessible user experience. Google Analytics and Tag Manager are used for analytics, with a clear cookie consent mechanism in place, demonstrating attention to privacy compliance. The site is well-structured, professionally designed, and optimized for SEO and mobile devices. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, but the website's content and partner affiliations support its credibility. Overall, the site presents a trustworthy and professional image suitable for its non-profit mission. Strategic recommendations include improving security header implementation, publishing security and incident response policies, and verifying domain registration details to enhance trustworthiness.

S

SELLERIA EQUIPE SPA

selleriaequipe.it

46

Gruppo Selleria Equipe is a medium-sized Italian company specializing in the manufacture and retail of high-quality equestrian saddles and accessories under the brands EQUIPE and AMERIGO. With over 25 years of experience, the company combines artisanal craftsmanship with technical innovation to serve equestrian professionals and enthusiasts globally. The website reflects a professional and consistent brand image, offering detailed product categories, rider endorsements, and comprehensive service information. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Facebook Pixel, integrated with a GDPR-compliant cookie consent mechanism via Iubenda. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear policies and consent management. Contact information is transparent, enhancing business credibility. Overall, the site is well-optimized for mobile and SEO, providing a good user experience.

Equitana Hotel Resort is a Czech Republic based wellness hotel and equestrian resort offering accommodation, spa, restaurant, and corporate event services. The website is professionally designed, mobile responsive, and provides clear navigation and contact information. The technical infrastructure relies on jQuery, Google Analytics, Facebook Pixel, and a proprietary CMS (IPO). Security posture is good with HTTPS and CAPTCHA usage, but lacks some security headers and explicit privacy policy documentation. The WHOIS data is unavailable publicly, indicating privacy protection, which is common and justified for this business type. Overall, the website presents a trustworthy and professional hospitality business with moderate digital maturity.

E

EquiSoul s.r.o.

equisoul.cz

51

EquiSoul s.r.o. operates an e-commerce website specializing in equestrian clothing and accessories, primarily targeting customers in the Czech Republic. The company emphasizes manufacturing 100% Czech products and maintains a professional online presence with clear branding and customer engagement through social media and a customer club. The website is built on the Shoptet platform, leveraging standard e-commerce technologies and multiple analytics tools for marketing and user behavior tracking. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is generally good with HTTPS and CSRF protections, though improvements are recommended in security headers and updating legacy libraries. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear credible and professional. Overall, the site presents a trustworthy and user-friendly shopping experience for its niche market.

Recycle! is a Belgium-focused digital platform providing residents with comprehensive waste management information including recycling calendars, sorting guides, and local collection points. The website is positioned as a niche service supporting environmental sustainability efforts in Belgium, leveraging partnerships with recognized organizations such as Fost Plus and Bebat. The platform is accessible via web and mobile apps, with verified presence on Google Play and Apple App Store, indicating a mature digital offering. Technically, the site uses modern web technologies including React, Google Tag Manager, Facebook Pixel, and Dynatrace for monitoring, reflecting a moderate to advanced digital infrastructure. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and privacy policies, which are areas for improvement. WHOIS data is restricted due to registry policies, but the domain and website content appear legitimate and consistent with the business purpose. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

Fost Plus

betersorteren.be

61

Beter Sorteren is the official website operated by Fost Plus, a Belgian organization dedicated to educating the public on proper waste sorting and recycling processes. The site offers comprehensive guides on sorting household packaging materials such as PMD, paper-cardboard, and glass, supported by interactive tools, a mobile app, and multimedia content like blogs and podcasts. It targets Belgian residents seeking to improve their recycling habits and contributes to environmental sustainability efforts. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses advanced features such as lazy loading and consent management to enhance user experience and privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Fost Plus's role as a leading recycling authority in Belgium.

P

Philadelphia Convention and Visitors Bureau

discoverphl.com

61

DiscoverPHL, operated by the Philadelphia Convention and Visitors Bureau, serves as the official tourism and convention sales agency for Philadelphia and the Pennsylvania Convention Center. The organization targets tourists, event planners, travel trade professionals, and partners, offering services such as tourism promotion, convention sales, event planning resources, and a partner directory. The website reflects a professional and consistent brand image aligned with its government-affiliated status. Technically, the website is built on WordPress and leverages modern technologies including jQuery, Google Tag Manager, Google reCAPTCHA Enterprise, Mapbox GL JS, and New Relic for performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Advertising and analytics tools are used responsibly with clear cookie consent mechanisms. From a security perspective, the site enforces HTTPS, implements security headers, and uses advanced bot protection via reCAPTCHA Enterprise. However, it lacks a publicly available security policy or incident response page, and no vulnerability disclosure or security.txt file is found. The WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional presentation and official nature of the site. Overall, DiscoverPHL presents a secure, compliant, and user-friendly digital presence appropriate for its role as a government tourism bureau. Strategic improvements include publishing security and incident response policies and enhancing WHOIS transparency to further strengthen trust and compliance.

T

TEKA Systems

tekasystems.gr

60

TEKA Systems is a well-established company founded in 2004, specializing in engineering and information technology services, including SAP solutions, digital transformation, and analytics. The company holds a leading market position in its sector and targets business and enterprise clients. The website reflects a professional digital presence built on WordPress with modern SEO and tracking tools. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced DNS security and explicit security policies. Overall, the site is trustworthy and business credible but could improve privacy and security transparency.

N

Navingo BV

navaltoday.com

66

NavalToday.com is a specialized online news platform delivering expert coverage and press releases focused on the naval, maritime, and offshore energy sectors. The website targets industry professionals and businesses seeking timely and relevant information about naval technology, vessels, and related industry developments. The business operates under Navingo BV and appears to have been active since at least 2020, positioning itself as a niche media provider within the maritime and energy industries. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Analytics, Microsoft Clarity, and Google Tag Manager. It employs a comprehensive cookie consent mechanism powered by CookieYes, supporting GDPR compliance and user privacy preferences. The site is mobile-optimized, accessible, and features a professional design with clear navigation. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, no explicit security headers were detected in the provided data, and there is no visible security policy or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding appear professional and trustworthy. Overall, NavalToday.com demonstrates a solid digital presence with good content quality and privacy compliance but would benefit from enhanced transparency in domain registration and explicit security policies to strengthen trust and security posture.

D

Dredging Today

dredgingtoday.com

67

DredgingToday.com is a specialized online news platform delivering expert coverage and breaking news in the dredging and offshore energy sectors. The website targets industry professionals and businesses, providing timely updates, analysis, and event information. The business operates as a niche media publication within the energy and transportation sectors, with a medium-sized digital presence established since 2020. Technically, the site is built on WordPress with modern web technologies including Google Tag Manager, CookieYes for consent management, and ElasticPress for search enhancements. The site demonstrates good SEO and accessibility practices, with mobile optimization and structured data implemented. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, including a comprehensive cookie consent banner with granular controls. However, the absence of WHOIS registration data and lack of explicit security policy or incident response pages reduce overall trustworthiness. The site integrates standard advertising and analytics services such as Google Analytics and Microsoft Clarity, with extensive user tracking balanced by GDPR-compliant consent. Overall, the website is professional, content-rich, and technically sound but would benefit from improved domain registration transparency and enhanced security disclosures.

N

Navingo BV

offshorewind.biz

66

offshoreWIND.biz is a specialized online media platform delivering daily news and insights focused on the offshore wind energy sector, including emerging technologies like floating wind and Power-to-X. The platform serves industry professionals and stakeholders, providing timely updates on projects, market developments, and technological advancements. The website is part of the Navingo BV media group, which operates several related industry news sites, positioning offshoreWIND.biz as a reputable niche media outlet within the renewable energy sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and ElasticPress, ensuring good SEO and search capabilities. It employs Google Analytics and Google Tag Manager for analytics and tracking, alongside a comprehensive cookie consent management system powered by CookieYes, reflecting a moderate level of digital maturity and privacy compliance. The site is mobile-optimized and accessible, with a professional design and clear navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The cookie consent mechanism is robust, offering granular control over tracking and advertising cookies, though the absence of a published privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for media companies. Overall, offshoreWIND.biz presents a professional and trustworthy online presence with good technical and content quality. Strategic improvements include publishing comprehensive privacy and terms of service documents, enhancing security headers, and providing clearer business contact information to strengthen compliance and trustworthiness.

O

Offshore Energy

oeec.biz

65

Offshore Energy operates a professional event website promoting the Offshore Energy Exhibition & Conference scheduled for November 2025 in Amsterdam. The business focuses on organizing and hosting a major industry event targeting energy sector professionals, exhibitors, and visitors interested in offshore energy solutions. The website provides comprehensive event information, exhibitor details, ticketing options, and networking opportunities, positioning itself as a key player in the offshore energy event market. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies including Google Analytics, Microsoft Clarity, and CookieYes for privacy compliance. The site demonstrates good SEO, accessibility, and mobile optimization, with a moderate performance profile. Security measures include HTTPS enforcement, Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers and policies are not explicitly published. The security posture is solid with no critical vulnerabilities detected in the HTML content. However, the absence of a published privacy policy, terms of service, security policy, and incident response contacts represents areas for improvement. The domain registration uses privacy protection, which is justified for this event business, and the domain age aligns with the event timeline. Overall, the website is trustworthy, professional, and compliant with cookie consent regulations but would benefit from enhanced transparency in privacy and security policies to strengthen user trust and regulatory compliance.

L

LSP Renewables

lsprenewables.com

66

LSP Renewables is a specialized recruitment agency focused on the renewable energy sector, providing talent acquisition services globally with offices in Europe, Asia, and the USA. Their offerings include permanent recruitment, contract labor hire, retained search, talent advisory, and RPO services, targeting a broad spectrum of renewable energy sectors such as offshore wind, solar, subsea, and green hydrogen. The company positions itself as a market leader with a strong emphasis on quality and client service. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics and marketing tools like Google Tag Manager and Mailchimp. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with cookie consent mechanisms in place, indicating good privacy compliance. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the absence of a public vulnerability disclosure or incident response contact is noted. The missing WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence and business indicators. Overall, LSP Renewables presents a credible, professional, and secure online presence suitable for its business domain. Strategic recommendations include enhancing transparency around security incident response and verifying domain registration details to strengthen trust further.

O

Offshore Wind North East 2025

offshorewindne.com

54

Offshore Wind North East 2025 is a professional event focused on the offshore wind energy sector in North East England. The website serves as a platform to promote the conference and exhibition, providing detailed information about the event, its organizers, sponsors, and partners. The event targets industry professionals and stakeholders in the renewable energy sector, emphasizing networking, knowledge sharing, and business opportunities. Technically, the website is built on Joomla CMS, uses modern JavaScript libraries and sliders, and integrates Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and includes CSRF tokens but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and should be investigated further. Overall, the website is functional and credible for its purpose but would benefit from enhanced security and privacy compliance measures.

Z

ZX Lidars

zxlidars.com

65

ZX Lidars is a specialized company providing advanced wind lidar technology for accurate remote wind measurement, primarily serving the energy sector globally. Their product portfolio includes onshore, offshore, and turbine-mounted wind lidars, positioning them as an industry leader in wind energy measurement solutions. The company is based in the UK and has been operational since 2007, targeting wind energy developers and meteorological organizations. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Slick Carousel, Font Awesome, and Google Tag Manager, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good content quality and professional design. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and contact information suggest a legitimate business. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced privacy compliance and security best practices.

F

Fitmin.cz

fitmin.cz

55

Fitmin.cz is a Czech-based e-commerce business specializing in manufacturing and retailing high-quality pet food and accessories for dogs, cats, horses, and rodents. The company emphasizes fresh ingredients sourced from the Orlické Mountains region and targets pet owners primarily in the Czech Republic. The website is professionally designed with clear navigation and a comprehensive product catalog, including loyalty programs and promotional offers. Technically, the site leverages modern e-commerce technologies, including the Shoptet platform, Google Analytics, Microsoft Clarity, and Facebook SDK, ensuring a robust digital presence. Security measures such as HTTPS and security headers are properly implemented, though the site lacks a dedicated security policy or incident response contact. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data limits domain legitimacy verification, posing a moderate risk. Overall, Fitmin.cz presents a trustworthy and professional online retail platform with room for improvement in transparency around security and incident response.

L

LERAM s.r.o.

leram.cz

47

LERAM s.r.o. is a family-owned Czech company with nearly 30 years of experience primarily in the healthcare and pharmacy sectors. The company offers a comprehensive range of services including pharmaceutical manufacturing, distribution, storage, and retail pharmacy operations. Additionally, it has diversified interests in construction and gastronomy. The website reflects a professional and consistent brand image targeting business partners and customers in healthcare. Technically, the site uses modern web technologies such as Google Tag Manager, Google reCAPTCHA v3, and Three.js, with a YII PHP framework backend inferred from form validation patterns. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and reCAPTCHA protecting forms, though HTTP security headers are not explicitly detected. WHOIS data is not publicly available, likely due to privacy protection, which is common for businesses of this size and sector. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

K

KEDGE Business School

kedge.edu

68

KEDGE Business School is a prominent French business and management school with campuses in Marseille, Bordeaux, Paris, and Toulon. It offers a range of academic programs including bachelor, master, and specialized master's degrees targeting students, professionals, companies, alumni, and candidates. The school holds triple accreditation (AACSB, EQUIS, AMBA), reinforcing its market position and reputation in higher education. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its educational mission. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, Kameleoon, and Plausible Analytics, integrated with a GDPR-compliant cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, the website is professional, secure, and compliant, supporting KEDGE's credibility as a leading educational institution.

K

Kindermissionswerk Die Sternsinger e.V.

sternsinger.de

54

Kindermissionswerk Die Sternsinger e.V. operates a professional and well-established German non-profit website dedicated to supporting children worldwide through fundraising, educational materials, and awareness campaigns. The organization holds recognized certifications such as the DZI Spendensiegel, enhancing its credibility and trustworthiness. The website targets a broad audience including donors, schools, and children, providing clear donation pathways and educational content. Technically, the site is built on TYPO3 CMS with modern web technologies, good SEO, and mobile optimization, though some security header enhancements could be made. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response contacts. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the site presents a trustworthy and professional digital presence for a charitable organization.

M

missio Aachen

missio-hilft.de

49

missio Aachen is a well-established international Catholic non-profit organization focused on humanitarian aid and church development projects primarily in Africa, Asia, and Oceania. The organization holds a strong market position in Germany as one of the largest Catholic aid agencies, supported by transparent operations and recognized certifications such as the DZI-Spendensiegel. Their website reflects a professional and trustworthy image, offering multiple donation channels and detailed project information to engage donors and partners. Technically, the website is built on the TYPO3 CMS platform, leveraging modern tools like Google Tag Manager and Usercentrics for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by a reputable German provider (NetCologne). Performance is moderate with good technical implementation. Security posture is solid with HTTPS enforced, consent mechanisms for cookies, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, and a security.txt file is absent, representing areas for improvement. Overall, the website and domain registration data indicate a legitimate, trustworthy organization with a high level of professionalism and compliance. The risk level is low, but strategic enhancements in security transparency and vulnerability disclosure would further strengthen their posture.