Security Directory

A

Apty

apty.io

67

Apty is an AI-powered digital adoption platform focused on accelerating business processes by reducing onboarding time, minimizing errors, and maximizing ROI. The company targets enterprise clients seeking to enhance digital adoption through advanced AI capabilities. The website is built on WordPress with modern plugins and technologies, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain protections, but lacks published security policies and vulnerability disclosures. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site presents a professional and trustworthy business presence with room for improvement in privacy and security transparency.

P

Pro Natura Zentrum Aletsch

pronatura-aletsch.ch

63

Pro Natura Zentrum Aletsch is a Swiss non-profit nature conservation and education center located in the Alps near the Aletsch Glacier. The organization offers visitor experiences including nature center visits, accommodation, dining, guided excursions, and educational programs targeting families, schools, and nature enthusiasts. The website is professionally designed with clear navigation, multilingual support, and strong branding consistency. Technically, it is built on Drupal 10, uses modern web technologies, and integrates consent management and analytics tools responsibly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a trustworthy and credible organization with a strong focus on environmental education and conservation.

H

HEAD DRINKS | water, sport and energy drinks

head-drinks.com

45

HEAD DRINKS is a small beverage company specializing in water, sport, and energy drinks, targeting active and health-conscious consumers. The website is built on WordPress using the Divi theme, reflecting a standard CMS infrastructure with moderate digital maturity. The site design is professional and mobile-optimized, though navigation clarity and SEO could be improved. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. Privacy compliance is weak due to absence of privacy and cookie policies, and no contact or incident response information is provided, which may impact user trust and regulatory compliance. Overall, the website is functional and relevant to its industry but requires enhancements in security and compliance to strengthen its risk profile.

M

Panenky Malunka

malunka.cz

43

Panenky Malunka is a small artisan retail business based in the Czech Republic specializing in handcrafted dolls made from natural materials. The website showcases various doll categories, including flower dolls, traditional dolls, and small figurines, with a focus on custom orders and personalized craftsmanship. The business targets consumers seeking unique, handcrafted gifts and collectibles. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted with Amazon Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

W

Wohnout

wohnout.cz

45

Wohnout.cz is the official website of the Czech music band Wohnout, providing fans with information about upcoming concerts, albums, lyrics, and an online merchandise shop. The site targets Czech-speaking music enthusiasts and offers direct links to ticket sales and social media channels, establishing a solid presence in the Czech entertainment market. The business model revolves around live performances and merchandise sales, supported by partnerships with music instrument brands and media outlets. Technically, the website employs modern web technologies including JavaScript, jQuery, and Slick Carousel for UI elements, and uses the Pagebuilder CMS platform. The site is mobile-optimized with a responsive design and basic SEO metadata, though there is room for improvement in accessibility and SEO completeness. The site is served over HTTPS, but lacks visible advanced security headers and cookie consent mechanisms. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, explicit contact information for incident response, and cookie consent mechanisms indicate areas for enhancement. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and external links appear legitimate and professional. Overall, Wohnout.cz is a well-structured and content-rich site for a music band with good user experience and moderate security posture. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance trust and compliance.

E

EGE, spol. s r.o.

ege.cz

52

EGE, spol. s r.o. is a Czech-based medium-sized company specializing in the development, manufacturing, installation, and servicing of energy-related equipment, including encapsulated conductors, arc suppression reactors, and steel constructions. With over 30 years of experience, the company serves industrial and energy sectors, offering full-service solutions and maintaining a strong market presence supported by certifications and EU-funded projects. The website reflects a professional business model targeting B2B clients in energy and manufacturing industries. Technically, the website employs modern web technologies such as Google Tag Manager and Google Analytics, with responsive design and basic accessibility features. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate GDPR compliance, although some SEO and accessibility improvements are possible. From a security perspective, the site shows good practices like HTTPS enforcement and cookie consent but lacks some security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain trustworthiness, but the website content and business information appear legitimate. Overall, the website is safe, professional, and compliant with privacy regulations, though domain registration transparency should be improved to enhance trust. Strategic recommendations include adding security headers, publishing incident response details, and enhancing SEO and accessibility.

E

eclair design s.r.o.

pagebuilder.cz

53

Pagebuilder.cz is a Czech-based technology company offering a proprietary content management system designed for easy website creation and management. The company positions itself as a small, customer-focused provider delivering cloud-hosted, modern CMS solutions that are simpler and more secure than traditional platforms like Wordpress or Joomla. The website is professionally designed, mobile-optimized, and integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel. However, it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is generally good with HTTPS and cloud hosting, but missing security headers and incident response information are areas for improvement. WHOIS data is unavailable, which reduces transparency but the site content and contact details support legitimacy.

R

responsiblo s.r.o.

responsiblo.com

60

responsiblo s.r.o. operates a specialized smart education platform targeting businesses in regulated sectors such as alcohol, gambling, tobacco, pharmaceuticals, and financial services. The platform offers interactive, customizable educational content designed to promote responsible product use and help companies meet CSR and regulatory compliance requirements. The company is positioned as an innovative leader in responsible business education with a focus on leveraging AI and machine learning for tracking and analytics. Technically, the website uses modern web technologies including Vue.js and is well-optimized for mobile and SEO, though some security headers and cookie consent mechanisms are missing. The security posture is solid with HTTPS enabled and no exposed sensitive data, but improvements in DNS security and explicit security policies are recommended. Overall, the website is professional, trustworthy, and mature-audience oriented due to the nature of the industries served.

DIFFERENT.VISION is a small Czech Republic based web development agency operated by provocation s.r.o., founded in 2018. The company specializes in creating websites and applications, targeting businesses or individuals seeking web presence and custom applications. The website is minimalistic, providing basic contact information and service description without extensive content or policies. Technically, the site uses modern web standards including HTTPS, Google Fonts, and Google Analytics for tracking. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The domain registration data is consistent with the business location and entity, indicating legitimacy. Overall, the digital maturity is moderate with room for improvement in security and compliance.

B

Blaukreuz-Brockis

blaukreuz-brocki.ch

58

Blaukreuz-Brockis operates as a Swiss non-profit organization focused on retailing second-hand goods through multiple physical Brocki shops across Switzerland. Their business model supports social causes, including addiction support and integration services. The website reflects a mature digital presence built on Drupal 10, integrating Google Maps for location services and Matomo for privacy-conscious analytics. The site is professionally designed, mobile-optimized, and provides clear contact information for various locations. Security posture is solid with HTTPS and security headers in place, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided, representing an area for improvement. Overall, the website is trustworthy and serves its target audience effectively.

I

International Blue Cross

internationalbluecross.org

47

International Blue Cross is a Switzerland-based non-profit organization dedicated to protecting people from harm caused by alcohol and drugs, uniting 37 countries under its umbrella. The website reflects a professional and consistent brand presence with a focus on health and social protection services. The technical infrastructure is built on WordPress with the Divi theme, leveraging modern web fonts and a privacy-conscious analytics tool (Matomo). While the website is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site demonstrates good business credibility but needs enhancements in privacy compliance and security transparency.

Appenzellerland Tourismus AR operates a regional tourism website focused on promoting activities, accommodation, and restaurants in the Appenzellerland region of Switzerland. The website targets tourists and visitors seeking information and inspiration for their stay. The business model centers on tourism promotion and providing comprehensive regional information, positioning itself as a key regional tourism authority. Technically, the site is built on the Contao Open Source CMS, leveraging modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-friendly analytics. The site is well-optimized for mobile devices and includes good SEO practices. Security-wise, the website enforces HTTPS, implements cookie consent with granular controls, and uses reputable third-party services, reflecting a mature security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR through Cookiebot integration, but could improve transparency by adding terms of service and contact information.

B

Boomy Web Company

boomy.co.uk

62

Boomy Web Company is a small UK-based web design and marketing agency specializing in custom WordPress websites, eCommerce solutions, and digital marketing services. The company targets businesses and individuals seeking modern, mobile-responsive, and Google-friendly websites, primarily serving the Newport and Shropshire areas. Their market position is that of a local specialist with a focus on quality and customer experience. Technically, the website is built on WordPress using the Genesis Framework and Yoast SEO plugin, incorporating modern JavaScript libraries such as jQuery and ScrollMagic. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. HTTPS is properly configured, but some security headers are missing, and there is no cookie consent mechanism, which impacts privacy compliance. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response information, and terms of service pages indicates room for improvement in governance and compliance. The WHOIS lookup failed due to domain naming issues, which slightly reduces trustworthiness but does not negate the legitimacy of the business as evidenced by the professional website. Overall, Boomy presents a professional and trustworthy web presence with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and publishing governance documents would enhance their security posture and compliance standing.

T

TEAS spol. s r.o.

teas.cz

43

TEAS spol. s r.o. is a well-established software supplier specializing in the automotive market in the Czech Republic and Slovakia, with a domain registered since 1997. The company positions itself as the largest software provider for this sector in the region, offering tailored software solutions to automotive businesses. Their website reflects a professional and consistent brand image, targeting automotive industry clients with clear navigation and relevant content. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and uses a reputable consent management platform to comply with privacy regulations. Hosting is provided by Forpsi, a known Czech hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

P

Plastenco design s.r.o.

plastenco.cz

64

Plastenco design s.r.o. is a Czech-based eco-design studio specializing in transforming local plastic waste into innovative design products using advanced 3D printing technology. The company targets exceptional firms and architects interested in sustainable design and circular economy principles. Their business model revolves around product design, custom projects, workshops, and collaboration with academic and technological partners. The website demonstrates a professional and modern digital presence built on SvelteKit, with multimedia content and active social media integration. Security posture is adequate with HTTPS and cookie consent, but lacks some security headers and formal privacy documentation. The absence of WHOIS data limits domain trust assessment, though the website content and partnerships support legitimacy. Overall, the site is well-designed, content-rich, and aligned with the company's sustainability mission.

I

Indep s.r.o.

indep.cz

56

Indep s.r.o. is an independent production agency based in Prague, Czechia, specializing in event management and audiovisual production. The company offers a range of services including corporate events, public space events, and professional audiovisual and photography production. Their business model focuses on personalized client relationships and creative, high-quality event execution. The website is professionally designed using the Squarespace platform, with good mobile optimization and clear navigation. Technical infrastructure is modern but lacks some security headers and privacy policy documentation. Security posture is generally good with HTTPS enabled and cookie consent implemented, though improvements are recommended in security headers and privacy transparency. Overall, the website presents a trustworthy and professional image consistent with a small, specialized service provider in the event production industry.

P

proFem

profem.cz

51

proFem is a Czech Republic-based non-profit organization with over 30 years of experience dedicated to supporting victims of domestic and sexual violence. The organization provides direct empathetic assistance, educational programs, and legislative advocacy to create safer environments for victims. Their key services include a crisis accommodation center named PORT and a client helpline. The website reflects a mature and professional presence with clear calls to action for donations and volunteering, targeting victims and the general public seeking help. Technically, the website uses modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, and is built on the Fenomio Flow CMS platform. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, and the site employs HTTPS with a cookie consent mechanism, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS but lacks visible security headers and does not provide a privacy policy or terms of service pages, which are compliance gaps. No contact email for security or incident response is found, limiting incident handling readiness. The absence of WHOIS data reduces domain trust slightly, but the website's content quality and social media presence support its legitimacy. Overall, proFem presents a trustworthy and professional online presence aligned with its mission. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance compliance and security posture, reducing risk and increasing stakeholder trust.

T

Tomáš Klus s.r.o.

tomasklus.cz

45

The website www.tomasklus.cz serves as the official online presence for Tomáš Klus, a Czech singer-songwriter. It provides comprehensive information about his music albums, upcoming concerts, media content such as photos and videos, and an integrated e-commerce platform for merchandise sales. The site targets fans and music enthusiasts primarily in the Czech Republic, positioning itself as a professional and trusted source for artist-related content and services. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and a custom e-commerce widget (Bzuco). It is mobile-optimized with good navigation and design quality. However, some technical improvements are recommended, such as implementing security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. Yet, the absence of WHOIS data and lack of explicit security policies or incident response information reduce transparency and trustworthiness. No critical vulnerabilities or adult content were detected, but privacy compliance could be improved by adding cookie consent and clearer data protection disclosures. Overall, the website is a well-maintained digital asset for the artist with moderate technical maturity and a good user experience. Strategic enhancements in security and privacy compliance would further strengthen its trust and professional standing.

V

VSIA Latvijas Vēstnesis

juristavards.lv

57

Juristavards.lv is a specialized Latvian legal journal portal operated by VSIA Latvijas Vēstnesis, providing weekly legal publications, news, essays, and legal resources targeted at legal professionals in Latvia. The platform supports subscription-based access to e-journals and features job advertisements and a legal library. The website demonstrates a solid market position as an authoritative source for legal information in Latvia. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Google Fonts, Google reCAPTCHA, and Gemius analytics, with a moderate performance profile and good mobile optimization. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of CAPTCHA, though explicit security headers and a formal security policy are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it could improve by publishing dedicated security and incident response policies. The domain WHOIS data aligns well with the website's claims, showing consistency and legitimacy for a government-affiliated media entity.

L

Latvijas Vēstnesis

vestnesis.lv

54

Latvijas Vēstnesis is the official publication platform of the Republic of Latvia, serving as the authoritative source for legal acts and official announcements. The website targets government officials, legal professionals, businesses, and the general public interested in accessing official legal documents and notices. It operates as a government entity providing essential services related to legal transparency and public information dissemination. Technically, the site employs a modern JavaScript stack including jQuery, jQuery UI, and Google services such as reCAPTCHA and Google Analytics 4, ensuring a functional and moderately optimized user experience. The site is mobile-friendly and well-structured, though SEO is limited by intentional 'noindex' directives, likely due to the nature of official content. Security-wise, the website enforces HTTPS and uses reCAPTCHA for bot protection, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site demonstrates high business credibility as an official government resource but could improve privacy compliance and security transparency.

B

Biomondo

biomondo.ch

68

Biomondo is an online marketplace focused on organic products in Switzerland, connecting consumers directly with regional bio farms. The website presents a professional and modern design using Vue.js and Vuetify frameworks, indicating a moderate level of digital maturity. The platform emphasizes regional and organic product offerings, targeting environmentally conscious consumers within Switzerland. Technically, the site uses HTTPS and includes a cookie consent mechanism via Cookiebot, but lacks visible privacy policies, terms of service, and security headers, which are important for compliance and security posture. No contact information or incident response details are readily available, which may impact user trust and regulatory compliance. Overall, the website is functional and secure at a basic level but would benefit from enhanced transparency and security practices.

V

Virgin Wines

virginwines.co.uk

61

Virgin Wines is a prominent UK-based online retailer specializing in wines, spirits, and gift products, offering next working day delivery. The website demonstrates a professional and consistent brand presence, leveraging modern web technologies and cloud-based hosting to deliver a responsive and user-friendly experience. The integration of marketing and analytics tools such as Google Tag Manager, Trustpilot, and Adobe Marketing Cloud indicates a mature digital marketing strategy. Security-wise, the site enforces HTTPS and includes CSRF protection, though additional security headers could enhance its posture. Privacy compliance is partially addressed with a cookie consent mechanism, but explicit privacy and terms of service pages were not detected in the provided content. Overall, Virgin Wines presents a trustworthy and well-established e-commerce platform catering to mature audiences interested in alcoholic beverages.

V

Virgin Red Ltd

virginred.com

72

Virgin Red Ltd operates a comprehensive loyalty rewards platform under the Virgin brand, targeting consumers primarily in the UK and US. The platform offers over 150 ways to earn points and more than 200 ways to spend them, including travel, retail, food & drink, and experiences. The service is free to join and accessible via web and mobile app, with integration to Virgin Atlantic Flying Club and Virgin Wines accounts. The website demonstrates a mature digital infrastructure using modern technologies such as React, Google Tag Manager, Hotjar, and Branch.io, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though public security policies and incident response contacts are not disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site reflects a professional, trustworthy, and well-branded digital presence consistent with Virgin Group standards.

S

Sports Thread, Inc.

sportsthread.info

61

Sports Thread, Inc. operates a SaaS platform focused on youth sports event management, offering services such as ticketing, registration, age verification, scheduling, and recruiting. The company targets event providers, coaches, athletes, and fans, positioning itself as a comprehensive technology solution in the youth sports sector with a significant client base and audience reach. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on Webflow with modern web technologies including Google Tag Manager and Apollo.io for tracking, and is hosted on a reliable CDN. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present, indicating room for improvement in privacy compliance. No WHOIS data was found for the subdomain, which is typical, but the main domain's WHOIS should be reviewed for full legitimacy verification. Overall, the site is trustworthy, safe, and well-positioned in its market niche.

M

Multisistema Riga SIA

ms.lv

55

Multisistema Riga SIA operates the website ms.lv, an established Latvian online retailer specializing in computer hardware, electronics, and related accessories. The company has a strong local presence with a physical store located at KR.VALDEMĀRA IELA 25/4, Rīga, and offers a broad range of products including Apple devices, computer components, and office supplies. The website targets general consumers and businesses seeking technology products in Latvia. The business model is primarily e-commerce with additional service offerings such as technical support and repair services.

E

Europuls.eu

europuls.eu

60

Europuls.eu operates as an online catalog and rating system for European internet resources, providing users with categorized listings and popularity statistics. The website targets European internet users and website owners seeking to discover and evaluate online resources across various sectors. The business model relies on advertising revenue through multiple ad networks and Google Adsense, supported by a GDPR-compliant consent management platform. The site has been operational since at least 2009, indicating a stable presence in its niche market. From a technical perspective, Europuls.eu employs standard web technologies including JavaScript, Google Fonts, and Google Adsense scripts. The site uses HTTPS and integrates a comprehensive consent management platform to comply with GDPR requirements. However, the design and user experience are basic, with moderate mobile optimization and limited accessibility features. Performance is moderate, and SEO practices are basic but present. Security posture is adequate with HTTPS enabled and GDPR consent mechanisms in place, but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the website's claims, registered through a reputable registrar without privacy protection, enhancing trustworthiness. Overall, Europuls.eu presents a functional and compliant online directory service with room for improvement in design, security best practices, and contact transparency. The site is safe for general audiences and does not contain adult or questionable content.

D

DMarket

dmarket.com

69

DMarket operates as a specialized online marketplace focused on trading in-game virtual items such as skins for popular games including CS2, TF2, Dota 2, and Rust. The platform targets gamers and virtual asset traders, offering a secure and extensive inventory with features like instant sales, inventory refresh, and a mobile application for trading on the go. The website demonstrates a strong market position supported by a large user base and active community engagement. Technically, the site is built on modern frameworks such as Angular and integrates multiple analytics and marketing tools, ensuring a responsive and performant user experience across devices. Security posture is robust with HTTPS enforcement and use of security-focused browser extensions, although explicit security policies and incident response contacts are not publicly visible. Overall, the platform presents a professional and trustworthy environment for virtual item trading, with recommendations to enhance privacy compliance and transparency.

W

Cryptocoin price index and market cap - WorldCoinIndex

worldcoinindex.com

64

WorldCoinIndex is a cryptocurrency market data aggregator providing real-time price indexes, market capitalization, trading volumes, charts, and news for a wide range of cryptocurrencies. The platform targets cryptocurrency traders, investors, and enthusiasts seeking comprehensive market insights. It offers key services such as price tracking, market cap data, volume statistics, and API access for integration. The website demonstrates a professional design with consistent branding and good content quality, positioning itself as a reliable source in the crypto finance sector. Technically, the site employs modern web technologies including Bootstrap for responsive design, Google Fonts, FontAwesome icons, and integrates advertising and analytics services such as Amazon A9 Ads, Google Ad Manager, Google Analytics, and Google Tag Manager. The site is mobile optimized and shows moderate performance with good SEO practices. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses some best practices like lazy loading scripts and ads. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a security policy, incident response contacts, or vulnerability disclosure information. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR compliance indicators. Overall, the website is functional and professional but would benefit from enhanced privacy and security transparency. The domain uses privacy protection for WHOIS data, which is common in the crypto industry but reduces trust slightly due to lack of registrant transparency. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

B

Benelli Armi Spa

benellidefense.com

65

Benelli Defense is a well-established Italian manufacturer specializing in defense-related products such as shotguns, accessories, and ammunitions. The company targets professional defense, law enforcement, and military sectors, offering specialized products including advanced solutions like the M4 A.I. Drone Guardian. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern SEO and cookie consent tools, ensuring a good level of digital maturity and user experience. Security posture is solid with HTTPS, bot protection via Google reCAPTCHA, and a comprehensive cookie consent mechanism, although there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and compliant with GDPR, supporting a positive risk profile for users and partners.

D

Domov Sue Ryder, z. ú.

neztratitsevestari.cz

45

The website 'Neztratit se ve stáří' is a professionally designed non-profit platform focused on providing advice, education, and support related to aging and elder care. It is supported by reputable partners such as Sue Ryder and ČSOB, indicating a strong market position within the Czech Republic's non-profit sector. The site offers a variety of services including advisory hotlines, educational courses, and case management articles targeted at seniors, caregivers, and professionals. The content is well-structured, relevant, and updated regularly, reflecting a mature digital presence. Technically, the website employs modern web technologies including Google Tag Manager and Vizus CMS, with good mobile optimization and SEO practices. The site is served over HTTPS with a solid SSL configuration, although explicit security headers are not evident in the HTML source. Cookie consent mechanisms and privacy policies are implemented, demonstrating compliance with GDPR requirements. However, there is room for improvement in accessibility and security best practices such as adding security.txt and incident response contacts. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is common for non-profits and does not detract from the site's legitimacy. Overall, the website presents a trustworthy and professional image with moderate to high security and privacy compliance. Strategically, the site should focus on enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility to further strengthen its digital maturity and trustworthiness.

H

Health Food Manufacturers' Association

hfma.co.uk

50

The Health Food Manufacturers' Association (HFMA) is a UK-based trade association representing companies in the health food and supplement manufacturing sector. The website serves as an informational and advocacy platform for its members, providing industry representation and support. The domain is well-established, dating back to 1999, indicating a mature presence in the market. Technically, the site is built on WordPress using the Elementor page builder, with standard web technologies and fonts loaded from trusted sources. Google Tag Manager is employed for analytics, reflecting moderate digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies, which are areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency to improve compliance and user trust.

S

SIGVARIS GROUP

sigvaris.com

66

SIGVARIS GROUP is a well-established Swiss family-owned company specializing in medical compression products with a history spanning over 160 years. The company offers a broad portfolio including compression stockings, bandages, and postoperative compression clothing, serving both healthcare professionals and consumers primarily in Switzerland. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site leverages modern monitoring and analytics tools such as Google Tag Manager, Raygun, Azure Application Insights, and Elastic APM, hosted likely on Microsoft Azure, and built on the EPiServer CMS platform. Security posture is strong with HTTPS enforced and use of error monitoring, though explicit security headers could be verified further. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. The WHOIS data is unavailable, which is common for corporate privacy but reduces transparency. Overall, the website is professional, secure, and trustworthy, supporting SIGVARIS GROUP's market position as a leader in medical compression therapy products.

R

Rara Themes

raratheme.com

76

Rara Themes is a specialized WordPress theme provider established in 2015, offering both free and premium mobile-friendly themes. The company targets WordPress users and small to medium businesses seeking easy-to-use themes with good support. Their business model includes theme sales and a theme club subscription, supported by documentation and customer testimonials. Technically, the website is built on WordPress with popular plugins and frameworks such as Elementor and Easy Digital Downloads, hosted behind Cloudflare for DNS and security. The site demonstrates moderate performance and excellent mobile optimization, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks visible security headers and DNSSEC. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages found. The domain WHOIS data is transparent and consistent with the business claims, indicating legitimacy. Overall, the website is professional and trustworthy but could improve privacy and security disclosures.

E

Evolve Creative

evolvecreative.com

61

Evolve Creative is a well-established creative agency based in Bemidji, Minnesota, specializing in website design, branding, marketing, videography, and SEO services primarily targeting businesses and organizations in Greater Minnesota. The company emphasizes custom, affordable solutions and has been operating since 2004, positioning itself as a regional leader in its sector. The website showcases a professional portfolio and client work, reinforcing its market position. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and Breeze caching. It demonstrates good SEO practices, mobile optimization, and accessibility features. The site uses HTTPS and includes privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site benefits from HTTPS and basic security best practices but lacks explicit security headers and documented incident response or security policies. No vulnerabilities or exposed sensitive data were detected. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the business's claimed history and reduces trustworthiness. Overall, the website is professional and trustworthy in content and design but would benefit from clarifying domain registration details and enhancing security headers and policies to improve its security posture and business credibility.

V

Vertical Aviation International (VAI) Gift Store

vaigiftstore.com

56

The VAI Gift Store is an e-commerce platform specializing in helicopter and vertical aviation-related merchandise, including apparel, accessories, and gifts. The website targets aviation enthusiasts and professionals, offering branded products from recognized suppliers. The business appears to be a small, niche online retailer launched recently in December 2023, leveraging the BigCommerce platform for its digital storefront. The site demonstrates consistent branding and a clear focus on its target market, supported by active social media channels and a visible contact phone number for customer support. From a technical perspective, the website uses modern e-commerce technologies including BigCommerce Stencil framework, Google Fonts, and integrates marketing tools such as Mailchimp and Olark chat. The site is mobile-optimized with good navigation and user experience, although SEO and accessibility features are basic. Performance is moderate, typical for a BigCommerce hosted store. Security posture is adequate with HTTPS enabled and domain transfer lock active, but lacks advanced security headers and DNSSEC. No privacy or cookie policies were found, indicating gaps in compliance with data protection regulations such as GDPR. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and security readiness. Overall, the website is functional and professional for its business purpose but would benefit from enhanced privacy compliance, security hardening, and transparency policies to improve user trust and regulatory adherence.

CebiaNET is a professional service portal associated with the Cebia brand, providing login access for professional users likely related to automotive or related sectors. The website presents a clean, professional interface with a focus on secure user authentication. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, FontAwesome, and ASP.NET MVC framework, indicating a mature and maintainable platform. Security practices such as HTTPS usage and CSRF tokens are implemented, though some security headers are missing and cookie consent mechanisms are absent, which could be improved to enhance compliance and security posture. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the perceived legitimacy given the professional branding and contact information. Overall, the site is functional, secure, and targeted at a professional audience with moderate risk and room for improvement in privacy compliance and security hardening.

S

SharpEnd Designs

sharpenddesigns.com

58

SharpEnd Designs is a small design service provider located in Bishop and Mammoth Lakes, California, specializing in branding, graphic design, and website development. The company targets small businesses and individuals seeking professional design strategy and implementation. The website is built on the Squarespace platform, leveraging modern web technologies including Typekit fonts and Google Fonts, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers such as HSTS and does not provide privacy or cookie policies, which are important for compliance. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the professional presentation and active social media presence support business credibility. Overall, the site is safe for general audiences and demonstrates moderate technical maturity.

Ecocardprint is a Swiss-based company specializing in eco-responsible printing solutions, focusing on sustainable business cards made from FSC® certified wood, biodegradable PET, and recycled cardboard. The company targets environmentally conscious businesses across sectors such as hospitality, retail, watchmaking, tourism, and health insurance. As a member of the Schellenberg Group, Ecocardprint benefits from a network of related companies enhancing its market position. The website is built on WordPress with the Divi theme and includes modern plugins for SEO and user experience. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, which may impact compliance with GDPR and other regulations. Security posture is moderate with HTTPS enforced but missing some security headers and incomplete reCAPTCHA configuration. Contact information is clearly presented, including phone, email, physical address, and a contact form. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy compliance and security hardening.

SuperCub.Org is an established online community and forum dedicated to Piper Super Cubs and similar aircraft enthusiasts, focusing on backcountry flying and related adventures. The website offers forums, classifieds, videos, membership services, and an online store, targeting a niche audience of aviation hobbyists and pilots. The business is operated by SLP, INC., a US-based entity with a domain registration dating back to 2000, indicating a mature and stable presence in its niche market. Technically, the website employs a Bootstrap framework with jQuery and Google Fonts, hosted on infrastructure using Google Cloud DNS. It integrates Google Analytics for visitor tracking and MailChimp for email marketing. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced CMS features and some modern security enhancements such as DNSSEC and security headers. From a security perspective, the site uses HTTPS and has domain statuses that prevent unauthorized transfers or deletions, which are positive indicators. However, it lacks DNSSEC and important HTTP security headers like Content-Security-Policy and HSTS, which could improve its security posture. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional, professionally designed, and serves its community well but would benefit from enhanced security measures and improved privacy compliance to reduce risk and increase user trust.

S

SalesAPE.ai

salesape.ai

67

SalesAPE.ai is a technology company specializing in AI-powered sales assistants designed to automate lead qualification, engagement, and appointment booking for small to medium-sized businesses. The platform integrates seamlessly with popular CRM systems and leverages conversational AI to mimic top sales team members, enabling businesses to increase sales efficiency and conversion rates. Backed by significant venture capital funding, SalesAPE.ai positions itself as a scalable and cost-effective solution in the sales automation market. The website demonstrates a mature digital presence with comprehensive content, professional design, and strong trust signals including customer testimonials and case studies. Technically, the site is built on modern frameworks such as Webflow and integrates multiple marketing and analytics tools, ensuring robust performance and user experience. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business present a credible and professional front with low risk indicators.

F

Full Circle Marketing Limited

full-circle-marketing.co.uk

46

Full Circle Marketing Limited operates as a UK-based marketing agency specializing in digital strategy, web development, content marketing, SEO, PPC, and social media marketing. The company targets businesses seeking to enhance their online presence and sales performance. The website presents a professional image with a consistent brand and a portfolio showcasing client work, indicating a solid market position within the marketing services sector. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance documentation. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy, although the website content itself appears trustworthy. Overall, the site scores well on business credibility and content quality but needs improvements in privacy compliance and security best practices.

Rail Recruiter Limited operates a specialized online job board focused on the UK rail industry, providing job listings, career advice, and recruitment services to both job seekers and employers. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. The technical infrastructure is based on ASP.NET WebForms with standard tracking tools like Google Analytics and Bing UET, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some advanced security headers and uses an outdated jQuery version, which should be addressed to improve resilience. The absence of WHOIS data due to domain naming rules error limits full trust verification, but the website content and contact information support legitimacy. Overall, the site presents a trustworthy and functional platform for rail industry recruitment.

S

Ski Kind

skikind.org

53

Ski Kind is a small non-profit organization focused on promoting responsible behavior in backcountry skiing and riding. The website serves as an educational platform offering toolkits, partner information, merchandise, and community engagement opportunities. It is affiliated with the Winter Wildlands Alliance and Granite Backcountry Alliance, indicating a credible position within the niche outdoor advocacy sector. The website is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and secure form handling, though it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to privacy protection is typical for non-profits and does not detract from the site's legitimacy. Overall, Ski Kind presents a trustworthy and professional online presence with room to enhance compliance and security transparency.

D

DevIT Software

devit.software

67

DevIT Software is a specialized IT company focused on software engineering services for the Shopify platform, including app and theme development. As an authorized Shopify partner, they have established a credible market position with over 6,000 app users and a strong presence on the Shopify App Store and Discord Marketplace. Their business model centers on B2B software solutions tailored for Shopify store owners and businesses seeking to enhance their e-commerce capabilities. Technically, the website leverages modern web technologies such as React and Next.js, with hosting and DNS services provided by Cloudflare. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with their branding. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks important security headers and explicit security policies. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement to enhance compliance and trust. Overall, the website is professional and trustworthy with a solid business foundation, but could benefit from enhanced privacy compliance and security best practices to reduce risk and improve user confidence.

K

KeepCart

keepcart.co

55

KeepCart is a SaaS company specializing in protecting e-commerce stores, particularly Shopify merchants, from coupon code leaks and abuse caused by coupon extensions and duplicate customer accounts. Their product suite includes coupon extension blocking, leak alerts, and duplicate customer blocking, aimed at increasing merchant margins by preventing revenue loss. The company positions itself as a cost-effective and more comprehensive alternative to competitors like CleanCart, with a focus on ease of installation and customer support. Technically, the website is built on Webflow CMS and integrates with Shopify, leveraging modern web technologies such as Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and a public security policy or incident response contact, which are areas for improvement. The WHOIS data is privacy protected, which is common for SaaS businesses but limits transparency. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, KeepCart presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance mechanisms and security best practices would further enhance their security posture and trustworthiness.

I

Internet Ltd

top.lv

53

TOP.LV is a Latvian web portal established in 1998, operating as the largest website rating and directory system in Latvia. It categorizes Latvian web content and provides rankings and statistics for various local websites. The platform primarily targets Latvian internet users seeking organized access to local web resources. Monetization is achieved through advertising networks including Google Adsense and multiple programmatic ad partners. The website's technical infrastructure is based on traditional web technologies such as HTML, CSS, and JavaScript, with integration of Google Fonts and analytics tools. While the site implements a GDPR-compliant consent management platform, it lacks explicit privacy and terms of service pages, which are critical for full compliance and user trust. Security posture is moderate with HTTPS usage implied but no advanced security headers detected. The site design is functional but dated, with basic mobile optimization and accessibility features.

R

Rīgas Valsts Tehnikums

rvt.lv

51

Rīgas Valsts Tehnikums (RVT) is a Latvian state technical school providing vocational education across multiple technical and commercial disciplines. The institution targets students and adult learners, offering a broad range of programs supported by EU projects such as Erasmus+. The website reflects a well-established educational entity with a clear focus on technical training and community engagement. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and security practices including HTTPS and security headers. However, the absence of a visible cookie consent mechanism and explicit security policies indicates room for compliance improvement. Overall, the site is professional, secure, and trustworthy, with active social media presence and clear contact channels.

J

Jisc

jisc.ac.uk

75

Jisc is a UK-based organization focused on providing digital technology and data services to the tertiary education, research, and innovation sectors. The website demonstrates a strong market position as a leading provider of training, consultancy, connectivity, cloud, AI, cyber security, and data analytics services tailored for educational institutions. The digital infrastructure is modern, leveraging React, Next.js, and Material-UI, with integration of analytics and tracking tools such as Matomo, Google Analytics, and Hotjar, all managed with user consent mechanisms. Security posture is robust with HTTPS, Content Security Policy, and bot protection via hCaptcha, though explicit security policies and incident response details are not published. Overall, the website is professional, accessible, and trustworthy, supporting a large, established organization in the UK education sector.

R

Radio Čas Rock

rocknagrilu.cz

54

Holba Rock na grilu 2025 is a Czech rock music festival organized by Radio Čas Rock, targeting rock music enthusiasts primarily in the Czech Republic. The festival features a diverse lineup of rock bands and artists, offering a two-day event with ticket sales managed online and on-site. The website serves as an information and ticketing portal, showcasing event details, lineup schedules, partner logos, and social media links. The business operates in the media and hospitality sectors, focusing on event management and promotion. Technically, the website is built on WordPress with Yoast SEO plugin, leveraging modern web technologies such as lazy loading and responsive design. Hosting is provided by Active24, a Czech hosting provider, ensuring good performance and accessibility. SEO and structured data are well implemented, enhancing search engine visibility. However, some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Contact information is primarily via email and a contact form, with no phone numbers or physical addresses explicitly listed. The WHOIS data aligns well with the website's business claims, showing consistent registration and domain age appropriate for the event's timeline. Overall, the website is professional, trustworthy, and well-suited for its purpose, though it would benefit from enhanced privacy compliance features and security best practices to strengthen user trust and regulatory adherence.

S

SportsBet.com

sportsbet.com

57

SportsBet.com is an established online platform providing information, tips, and live odds related to sports betting, horseracing, and online casino games. The site operates primarily as an affiliate marketing business, directing users to betting platforms such as bet365. The website is well-structured, with good content quality and clear navigation, targeting adult sports bettors and gambling enthusiasts. Technical infrastructure includes modern libraries and frameworks like jQuery, Bootstrap, and Google Tag Manager, supporting a responsive and moderately performant user experience. Security posture is adequate but could be improved with enhanced security headers and explicit policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the site's content and affiliate relationships lend credibility. Privacy compliance is basic, with cookie consent implemented but limited GDPR indicators. Overall, the site is professional and trustworthy within its niche but would benefit from improved transparency and security documentation.