Security Directory

B

Brána Jihlavy, příspěvková organizace

branajihlavy.cz

56

Brána Jihlavy is a contributory organization affiliated with the statutory city of Jihlava, focused on promoting culture and tourism within the region. The organization operates several cultural and historical sites, organizes events, publishes materials, and provides tourist information services. It positions itself as an official promoter of Jihlava as a significant cultural destination, targeting the general public interested in culture, leisure, and tourism. The website reflects a medium-sized public entity with clear business objectives and official city backing. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries such as jQuery and Typer.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and design quality, though accessibility features are basic. Performance is moderate, leveraging Webflow's CDN for hosting. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide explicit security or incident response policies. Privacy and cookie policies are present, but the absence of a cookie consent mechanism is a compliance gap. WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and contact information appear trustworthy and official. Overall, the site presents a professional and credible digital presence for a government-affiliated cultural organization, with moderate technical maturity and some room for security and privacy improvements.

The website greatspatownsofeurope.eu is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or similar bot protection mechanism, which blocks content access and prevents a full analysis of the website's business and security posture. The domain is registered with IONOS SE, a reputable registrar, but no detailed registrant or business information is publicly available. The website lacks visible privacy, cookie, or terms of service policies, and no contact information or business details are present on the accessible page. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA, but no other frameworks or CMS are detected. Security headers and SSL configuration details are not visible in the provided data. Overall, the site appears to be in a locked state, limiting the ability to assess its content quality, business credibility, and compliance.

K

Kimsoft Media AB

kimsoft.media

41

Kimsoft Media AB is a small Swedish web agency specializing in building attractive, fast, and affordable WordPress websites, primarily serving local clients in Kungshamn and Örnsköldsvik. The company positions itself as a local partner guiding clients from idea to finished website. The website reflects a professional digital presence using WordPress and Elementor, with modern design and good mobile optimization. The technical infrastructure includes standard web technologies, Google Analytics, Facebook Pixel, and Cloudflare DNS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy policy or incident response information is published, which are areas for improvement. Overall, the website is trustworthy and professional, with a moderate risk profile due to some missing compliance and security best practices.

Q

Query Digital, s.r.o.

query.cz

63

Query Digital, s.r.o. is a Czech Republic-based web studio specializing in the development, operation, and consulting of web applications. The company serves a business clientele, including notable brands, and positions itself as a small but professional and trusted service provider in the technology sector. Their website reflects a modern, well-structured digital presence built on Next.js and React, with strong mobile optimization and user experience. Privacy and cookie policies are clearly presented and GDPR compliant, enhancing trust. Security posture is good with HTTPS and consent mechanisms, though some security policy documentation and incident response contacts are missing. WHOIS data is unavailable, which slightly impacts domain trust but does not detract from the professional appearance and business legitimacy of the site.

A

AUTODROM MOST a.s.

autodrom-most.cz

54

Autodrom Most is a well-established motorsport and driving safety center in the Czech Republic, offering a wide range of services including racing events, driving courses, and public rides. The website reflects a professional business with a clear market position as a leading motorsport venue hosting international events such as the World Superbike Championship. The company operates an e-commerce platform for ticket sales and merchandise, targeting motorsport enthusiasts and drivers seeking advanced driving training. Technically, the website uses a modern CMS platform (BSSHOP) with integration of popular marketing and analytics tools like Google Tag Manager and Seznam retargeting. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Privacy and cookie policies are implemented with consent mechanisms, indicating compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and has basic security best practices in place, though it lacks advanced security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and business information appear trustworthy and professional. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic improvements in security transparency and domain registration disclosure would enhance trust further.

K

Ksenko Auto Production

ksenkoautoproduction.com

41

Ksenko Auto Production is a Ukrainian company specializing in the manufacturing of commercial and specialized vehicles, particularly ambulances, and supplying medical equipment. Founded in 2022, the company serves medical institutions, emergency services, and government agencies within Ukraine. Their market position is supported by notable clients and partnerships, emphasizing quality and compliance with medical standards. The website reflects a professional digital presence built on WordPress with Oxygen Builder and integrates Google Analytics for user insights. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are important for compliance. Security posture is moderate with HTTPS enabled but missing key security headers and DNSSEC.

І

Інтернет-магазин Люксоптика

luxoptica.ua

61

Luxoptica.ua is a well-established Ukrainian e-commerce and retail company specializing in optical products including frames, sunglasses, and contact lenses. With over 30 years in the market and a wide network of physical stores, it serves a broad consumer base seeking eye care products and services. The website is professionally designed, mobile-optimized, and offers comprehensive product catalogs and appointment booking services. Technically, it leverages Bitrix CMS and integrates modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and explicit security policies. WHOIS data confirms the legitimacy and consistency of the domain registration, aligning with the business claims. Overall, the site presents a trustworthy and professional digital presence for its sector.

IRIDEX Europe GmbH operates a professional website focused on providing innovative laser solutions for ophthalmology, specifically targeting glaucoma and retinal disease treatments. The company positions itself as a specialized provider in the German healthcare market, offering patented laser technologies and customer support. The website is well-structured, professionally designed, and includes multiple trust signals such as social media presence, testimonials, and affiliations with recognized ophthalmology societies. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and HubSpot forms for marketing and data collection. Security posture is moderate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. WHOIS data is minimal, which slightly reduces domain trust but does not contradict the business legitimacy. Overall, the site is suitable for healthcare professionals seeking laser treatment solutions.

I

Iridex Corporation

pascalvision.com

46

Pascal Synthesis is a healthcare-focused company specializing in advanced ophthalmic laser technology, offering the PASCAL Synthesis System designed to improve retinal laser treatments. The company targets ophthalmologists and retinal specialists, positioning itself as an innovator with nearly a decade of market presence. The website is built on WordPress with modern technologies such as Bootstrap and integrates Google Analytics and reCAPTCHA for tracking and security. While the site is professional and content-rich, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, supporting the business credibility.

The analyzed website is completely empty with no visible content, metadata, or technical elements. There is no indication of business operations, services, or contact information. The domain WHOIS data is privacy protected, limiting the ability to verify legitimacy or business details. The lack of HTTPS and security headers indicates a very low security posture. Overall, the website appears to be a placeholder or unconfigured domain with no digital maturity or business presence.

T

Together Platform

togetherplatform.com

74

Together Platform is a technology company specializing in mentorship software designed to accelerate employee development and foster professional growth within organizations. The company offers a comprehensive SaaS platform that includes mentorship programs, colleague connection tools, virtual coffee chats, and integrations with popular enterprise tools such as Absorb LMS and Microsoft Teams. Positioned as a leader in the mentorship software market, Together Platform is highly rated by users and recognized for its ease of use and robust support. The website showcases strong branding, customer testimonials from large enterprises, and a rich resource library to support HR and L&D professionals. Technically, the website is built on modern web technologies including Webflow CMS, HubSpot marketing and analytics tools, Google Tag Manager, and various user experience enhancement scripts like Hotjar and Visual Website Optimizer. The site is mobile-optimized, fast-loading, and well-structured for SEO and accessibility. Security-wise, the platform enforces HTTPS, holds SOC 2 certification, supports SAML and SSO, and maintains comprehensive privacy and cookie policies, reflecting a mature security posture. While WHOIS data for the domain is unavailable, which is unusual, the overall digital footprint, professional content, and security certifications strongly indicate a legitimate and trustworthy business. No critical vulnerabilities or security issues were detected in the website content. The company provides clear contact information and maintains transparency through detailed policies and customer success stories. Overall, Together Platform demonstrates a strong market presence, technical sophistication, and a solid security foundation, making it a credible and reliable provider of mentorship software solutions.

T

Type A

typeamedia.net

52

Type A is a London-based SEO and Digital PR agency specializing in helping established businesses increase website traffic through fast implementation and fair pricing. The company positions itself as a mid-sized agency with a strong reputation, supported by client testimonials, published case studies, and endorsement as SEMrush Academy trainers. Their business model revolves around flat fee retainers with flexible deliverables, targeting a professional audience seeking reliable SEO services. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted behind Cloudflare for DNS and CDN services. The site is mobile-optimized and uses modern web technologies including Google Tag Manager and ConvertKit for marketing and analytics. Performance is moderate with good SEO optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, it lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy with a solid business presence but could improve its privacy compliance and security posture. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and enhancing incident response transparency.

B

Bitly, Inc.

maj.to

75

Bitly, Inc. is a well-established technology company specializing in branded link management and URL shortening services. Founded in 2003, Bitly serves a broad business and marketing audience, providing tools to create custom branded short domains and links that enhance click-through rates and engagement. The company is positioned as a market leader, trusted by major brands globally. The website reflects a mature digital infrastructure, leveraging WordPress CMS, CDN hosting via AWS Cloudfront, and modern analytics and consent management tools such as Snowplow, Google Tag Manager, and OneTrust. Security practices are robust, with HTTPS enforced and domain registration locked against unauthorized changes, though DNSSEC is not enabled. Privacy compliance is strong, with comprehensive privacy and cookie policies and active consent mechanisms. No critical vulnerabilities or security issues were detected, and the content is professional, safe, and business-focused.

K

Klet Observatory

klet.org

46

Kleť Observatory is a well-established scientific research institution based in the Czech Republic, specializing in astronomy and near-earth object observations. Supported by the South Bohemian Region and grants, it operates a research program focused on minor planets and the KLENOT project. The website reflects a professional and consistent brand image, targeting a general audience interested in astronomy and scientific research. The domain age and WHOIS data confirm the legitimacy and long-standing presence of the observatory. Technically, the website uses a straightforward tech stack including jQuery and Lightbox, with responsive design elements and basic SEO optimizations. The cookie consent mechanism is implemented in compliance with GDPR principles, although no explicit privacy policy or terms of service pages were found. Performance is moderate, and mobile optimization is good. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks advanced security headers and DNSSEC. No vulnerabilities or exposed sensitive data were detected, but improvements are recommended to enhance security posture. The absence of a published security policy or incident response contacts is noted. Overall, the website is trustworthy and professional, with a moderate security posture and good business credibility. Strategic improvements in security and privacy documentation would enhance compliance and user trust.

A

Access-i

access-i.be

39

Access-i is a well-established platform founded in 2008 that provides comprehensive information on the accessibility of public places, events, bike circuits, and natural leisure spaces in Wallonia and Brussels. It serves a broad audience including people with specific accessibility needs and the general public interested in accessible locations. The platform offers certification services and acts as a trusted regional resource with strong partnerships and clear contact channels. Technically, the website is built on WordPress with modern plugins and multilingual support, hosted by OVH, and optimized for performance and accessibility. Security posture is solid with HTTPS, reCAPTCHA, and no exposed sensitive data, though some security headers could be improved. Privacy compliance is good with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly.

D

DREWAG - Stadtwerke Dresden GmbH

drewag.de

60

DREWAG - Stadtwerke Dresden GmbH is a regional energy utility provider based in Dresden, Germany, offering electricity, natural gas, district heating, and drinking water services primarily to residential and commercial customers. The company emphasizes customer satisfaction and provides multiple tariff options and online customer portals to facilitate service management. The website is professionally designed with consistent branding and clear navigation, targeting local customers with relevant energy solutions. Technically, the site is built on IBM WebSphere Portal with modern JavaScript modules and integrates Google Tag Manager for analytics and marketing purposes. Accessibility and mobile optimization are well addressed, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies could enhance the security maturity. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

V

Vlassenroot

vlassenroot.com

39

Vlassenroot is a family-owned Belgian company specializing in the production of complex steel structures and components, serving diverse sectors such as lifting, railway, energy, military, and construction. The company positions itself as a leading supplier in the mobile crane industry and beyond, offering comprehensive steel processing services including cutting, bending, welding, machining, assembling, and painting. Their website reflects a professional B2B manufacturing business model targeting industrial clients requiring high precision steel components. Technically, the website is built on WordPress with modern plugins and frameworks such as LayerSlider, Bootstrap, and Yoast SEO, supported by Google Analytics and LinkedIn Insight for marketing and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is restricted by DNS Belgium's policy, showing a 'NOT ALLOWED' status which is typical for .be domains and indicates privacy protection. Despite limited WHOIS transparency, the website content and professional presence support the legitimacy of the domain and business. No WAF or content blocking was detected, allowing full analysis. Overall, Vlassenroot's digital presence is professional and trustworthy, with good compliance to privacy regulations and a clear focus on industrial steel manufacturing. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and adding explicit security and incident response policies to further strengthen trust and compliance.

A

ADAMS ARMATUREN GmbH

adams-armaturen.de

44

ADAMS ARMATUREN GmbH is a medium-sized manufacturing company based in Germany, specializing in the design and production of specialized valves, including the innovative triple-eccentric valve technology. The company operates as a group with subsidiaries in Switzerland, the USA, and hydrovalves, targeting industrial clients requiring critical valve applications. The website reflects a professional corporate presence with multilingual support and clear branding. Technically, the site is built on WordPress with Elementor and various Jet plugins, hosted by priomni.de, and optimized for performance and mobile use. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism using Borlabs Cookie, alongside privacy-respecting Matomo analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and suitable for its business purpose.

K

Kernkraftwerk Gösgen-Däniken AG

kkg.ch

76

Kernkraftwerk Gösgen-Däniken AG operates a nuclear power plant in Switzerland, providing reliable and climate-friendly electricity. The company emphasizes technical expertise, environmental responsibility, and economic efficiency, serving a broad audience including professionals, schools, and job seekers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business entity.

A

Axpo Schweiz

axpo.ch

77

Axpo Schweiz operates as the largest Swiss producer of renewable energy and holds a leading international position in energy trading and marketing of solar and wind power. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting Swiss energy consumers, business clients, investors, and media. The technical infrastructure includes modern JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent, indicating a focus on privacy and compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust analysis but the overall website professionalism supports legitimacy. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust.

K

Kernkraftwerk Leibstadt AG

kkl.ch

57

Kernkraftwerk Leibstadt AG operates the largest and most powerful nuclear power plant in Switzerland, producing low-CO2 electricity since 1984. The website serves as an information portal for the public, stakeholders, and visitors, offering detailed insights into nuclear energy production, safety measures, and visitor services including guided tours and educational events. The company holds a strong market position within the Swiss energy sector and maintains affiliations with key regulatory and industry bodies such as ENSI and swissnuclear. Technically, the website is built on the TYPO3 CMS platform, employing modern web technologies and adhering to good practices in mobile optimization, accessibility, and SEO. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR and related privacy regulations. Analytics are implemented via Google Tag Manager, with moderate user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. Strategic improvements in security policy transparency and header implementation would further strengthen its security and compliance stance.

R

Rolls-Royce plc

mtu-solutions.com

59

The website represents mtu Solutions, a Power Systems Business Unit of Rolls-Royce plc, specializing in sustainable, climate-neutral power and propulsion solutions for industrial, maritime, and heavy-duty vehicle sectors. The company positions itself as a leader in standby power and integrated propulsion systems with over 110 years of history. The website is professionally designed, mobile-optimized, and uses modern web technologies including Adobe Experience Manager and Usercentrics for consent management. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are not published on this splash page. WHOIS data for the domain is missing, which reduces trustworthiness and raises questions about domain registration legitimacy. Overall, the site is credible and professional but would benefit from enhanced transparency on privacy, security policies, and domain registration details.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.com

47

Ahifi.com is an e-commerce platform specializing in car audio equipment, car cosmetics, and related accessories. The website targets car enthusiasts and vehicle owners primarily in Central Europe, offering a wide range of products including car radios, speakers, amplifiers, subwoofers, and car care products. The business operates with multiple language versions, indicating a regional market focus. Technically, the site uses modern JavaScript libraries such as jQuery and Google Tag Manager for analytics and tracking, and implements cookie consent mechanisms compliant with GDPR. However, the absence of WHOIS data for the .com domain raises concerns about domain registration legitimacy. Security posture is moderate with room for improvement in HTTP security headers and explicit incident response policies. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security hardening.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.ro

54

Ahifi.ro is a professional e-commerce retailer specializing in automotive audio equipment and car care products, serving primarily the Romanian market with additional sister sites in neighboring countries. The company has a strong market presence with approximately 20 years of operation, offering a wide range of products including radios, amplifiers, speakers, subwoofers, and automotive cosmetics. The website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and comprehensive product offerings. Technically, the site uses modern JavaScript libraries and integrates Google Tag Manager and analytics tools for marketing and performance tracking. Security measures such as HTTPS, security headers, and cookie consent mechanisms are properly implemented, reflecting a mature security posture. However, the WHOIS data is privacy protected by ROTLD, which is typical for Romanian domains, limiting direct registrant visibility but not detracting from the site's legitimacy. Overall, Ahifi.ro demonstrates a solid digital maturity and trustworthy business presence in the automotive retail sector.

I

Internetový prodej s.r.o., Shean s.r.o.

ahifi.hu

52

Ahifi.hu is a well-established Hungarian e-commerce retailer specializing in car audio equipment and automotive accessories. The website offers a broad range of products including car radios, speakers, amplifiers, subwoofers, and car care products. It targets car audio enthusiasts and vehicle owners primarily in Hungary, supported by sister sites in neighboring countries. The business has a history of approximately 20 years, indicating a mature market presence. Technically, the site uses modern web technologies such as Vue.js and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are missing. Cookie consent mechanisms are in place, supporting GDPR compliance to some extent. Overall, the site is professional and trustworthy but could improve transparency by publishing dedicated privacy and security policy documents.

F

FERRING Slovakia s.r.o.

ferring.sk

54

FERRING Slovakia s.r.o. operates as a specialized biopharmaceutical company focusing on reproductive medicine, maternal health, gastroenterology, and urology. The company positions itself as a leader in these healthcare sectors, providing innovative therapeutic solutions and supporting families and patients. The website reflects a professional and consistent brand image with clear business descriptions and contact information. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Google Maps API, hosted by HostCreators. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Goshcosmetics

goshcosmetics.sk

47

Goshcosmetics is a small retail e-commerce business specializing in Scandinavian minimalist decorative cosmetics under the GOSH Copenhagen brand. The website targets consumers interested in high-quality, multifunctional cosmetics tested locally by a Slovak makeup team. The site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO plugins to provide a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

The website ww38.radioexpres.sk currently serves as a parked domain with advertising content and no substantive business information or services presented. The site lacks any clear company identity, contact details, or descriptive content about its purpose or offerings. The presence of multiple third-party advertising and tracking scripts indicates a business model focused on monetizing domain traffic rather than providing direct services or content. Technically, the site uses standard HTML and JavaScript with content delivery via Amazon Cloudfront CDN, but lacks modern security practices such as HTTPS enforcement and security headers. Privacy compliance is minimal, with only a basic privacy policy linked via a JavaScript popup and no cookie consent mechanism. Overall, the site exhibits low digital maturity and poor user experience.

A

Association of University Presses

aupresses.org

62

The Association of University Presses (AUPresses) is a non-profit membership organization dedicated to supporting university presses globally. Their mission focuses on advancing academic excellence and cultivating knowledge through a community of scholarly publishers. The website reflects a professional and well-structured digital presence, targeting academic publishers, researchers, librarians, and related stakeholders. Key services include membership management, events, advocacy, and resource sharing. The organization is positioned as a leading advocate and community hub for university presses, with a medium-sized operational scale and a founding date consistent with the domain registration in 2017. Technically, the website is built on WordPress using Elementor and Yoast SEO, leveraging modern web technologies such as jQuery and Google Analytics for tracking. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting details are not explicit, but the domain is registered via NameCheap with privacy protection. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are absent, suggesting room for improvement. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not found, which could be enhanced to improve trust and compliance. The WHOIS data shows privacy protection justified for this non-profit entity, with no suspicious registration patterns. Overall, the website is trustworthy, professionally maintained, and suitable for its academic audience. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing detailed security policies, and enhancing privacy compliance disclosures to strengthen security posture and user trust.

A

Association of Learned and Professional Society Publishers

alpsp.org

63

The Association of Learned and Professional Society Publishers (ALPSP) is an international trade association supporting not-for-profit organizations and institutions involved in scholarly and professional publishing. The website presents a professional and comprehensive platform offering training, events, membership services, and publications tailored to the scholarly publishing community. The organization positions itself as a key player in the non-profit publishing sector with a strong focus on education and community engagement. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and provides clear navigation and rich content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR, but lacks explicit security headers and published security policies. The absence of WHOIS registration details limits domain trust verification, though the website's professional presentation supports its legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

E

ENT CENTER FOR THE ARTS at UCCS

entcenterforthearts.org

61

The Ent Center for the Arts at the University of Colorado Colorado Springs is a regional arts and cultural hub providing diverse arts programming including theatre, exhibitions, and educational outreach. The website reflects a medium-sized non-profit educational arts center with a professional digital presence built on Drupal 10 and hosted via Amazon services. The site integrates modern analytics and marketing tools but lacks explicit privacy and cookie policies, which are compliance gaps. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and security headers. Overall, the site is accessible, well-structured, and trustworthy, serving a general audience interested in arts and culture in the Pikes Peak region.

U

University of Colorado Colorado Springs

gomountainlions.com

66

The University of Colorado Colorado Springs (UCCS) Athletics website serves as the official digital platform for the Mountain Lions sports teams, providing comprehensive information including schedules, rosters, news, and fan engagement resources. Positioned as a key resource for students, athletes, and fans, the site supports NCAA Division II athletics within the Rocky Mountain Athletic Conference. The business model focuses on delivering timely sports content and fostering community involvement through digital channels. Technically, the website leverages a modern technology stack including JavaScript frameworks, RequireJS, jQuery, and integrates with multiple third-party services such as Google Analytics, Facebook Pixel, and Google Tag Manager. Hosting is managed via AWS Cloudfront CDN, ensuring reasonable performance and scalability. The site demonstrates good mobile optimization and accessibility features, with a consistent and professional design. From a security perspective, the site enforces HTTPS and employs domain transfer protections. However, it lacks some advanced security headers like Content-Security-Policy and explicit incident response contact information. Privacy compliance is addressed with accessible privacy and cookie policies, including consent mechanisms. No critical vulnerabilities or suspicious patterns were detected, indicating a mature security posture suitable for an educational institution. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.

C

CollegeVine

collegevine.com

68

CollegeVine is a technology-driven platform focused on enhancing the higher education experience through autonomous AI agents that engage prospects, students, and alumni. The platform integrates with existing institutional data systems to support the entire student journey from prospect to post-graduation. The website reflects a medium-sized education technology company with a professional and consistent brand presence. Technically, the site uses modern web technologies including React, jQuery, and various UI frameworks, hosted on Amazon Cloudfront CDN, with moderate performance and good mobile optimization. Security-wise, the site employs HTTPS and secure form tokens but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable publicly, indicating privacy protection or recent registration, which slightly impacts trust but is not uncommon for tech companies. Overall, the site is safe, professional, and trustworthy with moderate tracking and analytics usage.

J

Jo sóc donant ambiental

donantambiental.cat

61

Jo sóc donant ambiental is a small non-profit environmental initiative based in Catalonia, Spain, focused on supporting conservation projects through donations. The website serves as a platform to promote various environmental projects and facilitate donations via WooCommerce. The organization targets environmentally conscious individuals and groups interested in supporting nature conservation locally. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Google Fonts, Facebook Pixel, Google Analytics, and reCAPTCHA v3 for security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and anti-bot measures, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is well addressed with visible cookie consent and privacy policy pages in Catalan, aligned with GDPR requirements. Overall, the domain registration is privacy protected but consistent with the organization's profile and age. No critical security issues or suspicious content were detected, and the site is safe for general audiences.

F

Fundación Teaming

teaming.net

67

Teaming is a Spanish non-profit foundation providing a micro-donation platform enabling individuals, NGOs, companies, and educational institutions to raise funds for social causes with a simple 1€/month donation model. The platform is well-established with a large user base and significant funds raised, supported by corporate sponsors and pro bono services. Technically, the website uses modern frameworks like Bootstrap and jQuery, is hosted on Amazon Cloudfront CDN, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The WHOIS data is missing or unavailable, which slightly reduces trust but the professional site and social proof mitigate concerns. Overall, Teaming presents a trustworthy, well-maintained platform for social fundraising.

A

Associació de Naturalistes de Girona (ANG)

sospeix.org

46

SOSpeix is a non-profit environmental campaign focused on promoting responsible consumption of fish and seafood in the Girona and Empordà regions of Spain. The campaign is organized by the Associació de Naturalistes de Girona (ANG) and IAEDEN – Salvem Empordà, collaborating with local fishermen, scientists, restaurants, schools, and supermarkets to raise awareness about overfishing and marine protection. The website serves as an educational platform providing guides, news, recipes, and recommendations to encourage sustainable seafood consumption. Technically, the website uses a modest technology stack including jQuery 1.9.1, Google Tag Manager, Google Translate widget, and Google Fonts. The site is mobile optimized with a responsive design and good SEO practices. However, some technologies are outdated, and security headers are not detected, indicating room for improvement in security hardening. Cookie consent mechanisms and privacy policies are implemented, showing compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. The WHOIS data is unavailable due to a malformed query response, which reduces domain trustworthiness. Nevertheless, the website content, contact information, and partnerships indicate a legitimate and trustworthy non-profit organization. Overall, the site presents a good balance of content quality, technical implementation, and privacy compliance, with moderate security posture. Strategic improvements in security headers, updated libraries, and enhanced transparency on security policies would strengthen the site’s security and trust profile.

S

Serveis ambientals | Economia social i solidària

ess-ecologica.cat

44

The website 'Serveis ambientals | Economia social i solidària' is a small-scale, non-profit project focused on promoting environmental services and social solidarity economy initiatives primarily in the Girona region of Catalonia, Spain. It is supported by recognized organizations such as Fundació ENT and Associació Naturalistes de Girona. The site provides news, event agendas, and detailed information about various ecological projects and agroecological experiences. Technically, the site is built on WordPress with common plugins and libraries, including jQuery and Owl Carousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with consistent branding. Security-wise, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, although the website content and activity suggest a legitimate operation. Overall, the site is safe for general audiences and serves as an informational platform for environmental and social economy topics.

A

Associacio de Naturalistes de Girona

itinerarisnaturalistes.org

60

The website itinerarisnaturalistes.org is a non-profit project managed by the Associacio de Naturalistes de Girona, focused on providing detailed natural itineraries and promoting protected natural spaces in the Girona province of Spain. The site targets nature enthusiasts and hikers interested in exploring regional natural heritage. The business model is informational and community-oriented, leveraging digital tools like the Wikiloc app for route discovery. The domain registration data is consistent with the organization's identity and location, supporting legitimacy. Technically, the website is built on WordPress using Elementor and JetEngine plugins, with Yoast SEO for optimization. The site is hosted likely by web24.cat, uses HTTPS, and includes a GDPR cookie compliance plugin, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, HTTPS is properly configured, but no advanced security headers were detected, and DNSSEC is not enabled. There is no published privacy policy or security policy, and no vulnerability disclosure or security.txt file is present. Cookie consent mechanisms are implemented, but contact information and incident response channels are not explicitly provided. Overall, the website is trustworthy and professional for its niche, but improvements in privacy compliance, security headers, and transparency about incident response would enhance its security posture and user trust.

GALILEU.net is a small technology service provider based in Girona, Spain, specializing in internet services including web design, development, online marketing, hosting, and digital transformation support for SMEs. The company acts as an agent for the Kit Digital program, helping local businesses access European digitalization funds. The website content is well-structured and bilingual (Catalan and Spanish), targeting regional SMEs and autonomous professionals. Technically, the site uses older JavaScript libraries such as jQuery 1.8.3 and jQuery UI 1.9.1, along with the fullPage.js framework for navigation. While the site is accessible and functional, it lacks modern security headers and up-to-date libraries, which may expose it to vulnerabilities. The cookie consent mechanism is implemented, but no privacy or security policies are published, indicating gaps in compliance. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the active website presence.

Themesvila is a specialized digital marketplace focused on providing premium and free WordPress themes and plugins. Established in 2016, it caters primarily to WordPress users, digital agencies, and businesses seeking customizable website solutions. The platform offers a variety of products including themes for different industries and plugins to extend website functionality, supported by custom development and installation services. The website demonstrates a professional and user-friendly design with clear navigation and a focus on customer support and satisfaction.

The website qrbus.me is operated by MH Wertyz s.r.o., a Slovak company founded in 2021, likely providing transportation services involving QR code technology for bus routes or ticketing. The site is a web application utilizing modern JavaScript frameworks such as Quasar and OpenLayers for map rendering, hosted on Websupport.cz. The technical infrastructure is moderately modern but lacks SEO and accessibility optimizations. Security posture is basic with no DNSSEC and no security headers detected, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. Contact information and incident response details are absent, limiting user trust and support avenues. Overall, the site is functional but requires improvements in privacy, security, and user experience to enhance credibility and compliance.

I

International Road and Transport Union

iru.org

70

The International Road and Transport Union (IRU) operates a professional and comprehensive website serving as the global voice for road transport and logistics. The organization supports drivers and transport companies worldwide, offering advocacy, certification, and trade facilitation services. The website demonstrates a mature digital presence with modern CMS technology, integrated analytics, and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall credibility given the professional presentation and consistent branding.

V

Volvo Trucks

volvotrucks.cz

70

Volvo Trucks Czech Republic operates as a regional market website for the global Volvo Trucks brand, providing comprehensive information about their range of commercial trucks, services, financing, and fleet management solutions. The website is well localized for the Czech market and targets transport companies, fleet managers, and truck buyers. The business model focuses on manufacturing, sales, after-sales services, and financing, positioning Volvo Trucks as a leading player in the transportation sector in the region. Technically, the site leverages Adobe Experience Manager CMS, Adobe analytics, and robust CDN services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though some improvements in CSP and incident response transparency are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security policies, publishing vulnerability disclosure information, and improving accessibility compliance.

K

Kögel Trailer

koegel.com

55

Kögel Trailer GmbH is a well-established German manufacturer specializing in trailers and transport solutions. The company offers a broad portfolio including trailer manufacturing, parts sales, service, rental, and telematics solutions, positioning itself as a key player in the European transportation sector. Their website reflects a professional and comprehensive digital presence with multilingual support and detailed product and service information. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and business information. Strategic recommendations include enhancing security headers, adding incident response details, and verifying domain registration data to strengthen trust.

H

HandyTicket Deutschland

handyticket.de

56

HandyTicket Deutschland operates a mobile application platform that enables users to purchase public transportation tickets across multiple regions in Germany. The website serves as an informational and promotional portal for the app, providing download links, partner information, and support resources. The business is positioned as a key mobility service provider in the German public transport sector, aggregating various regional transport providers into a single app experience. Technically, the website employs modern web technologies including Google Tag Manager for analytics and advertising, optimized images, and responsive design for mobile users. The site is well-structured with good SEO and accessibility basics, though some advanced accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency by publishing terms of service and security policies.

Krajská správa a údržba silnic Karlovarského kraje is a regional government organization responsible for the maintenance and management of secondary and tertiary roads in the Karlovarský region of the Czech Republic. The organization manages over 1,800 km of roads, coordinates with contractors, and oversees investment planning and quality control of road works. It also administers funding from regional, state, and European sources. The website reflects a professional public sector entity with clear communication of services and contact information. Technically, the website employs a custom CMS platform developed by ANTEE s.r.o., utilizing jQuery, jQuery UI, Owl Carousel, Google reCAPTCHA v3, and Matomo analytics. The site is mobile responsive and includes accessibility and SEO optimizations, though some libraries like jQuery are outdated. Security practices include HTTPS enforcement and cookie consent mechanisms, but lack explicit security headers and published incident response policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security headers and updating libraries. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. The absence of WHOIS data limits domain trust assessment, but the official nature and content of the site support legitimacy. Overall, the site is a well-maintained government resource with moderate technical maturity and good security hygiene. Strategic enhancements in security policies, technical updates, and transparency would further strengthen trust and compliance.

F

Freiraum Fichtelgebirge

freiraum-fichtelgebirge.de

49

Freiraum Fichtelgebirge is a regional initiative focused on promoting the Fichtelgebirge region in Germany through community engagement, innovation, and support for local businesses. The website serves as a hub for news, events, and stories about local makers and projects, targeting residents, visitors, and entrepreneurs. It positions itself as a collaborative platform fostering sustainable development and smart city projects. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and accessibility enhancements. Hosting is provided by netcup, a reputable German hosting provider. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant. The site integrates analytics and marketing tools responsibly, maintaining good privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for its audience and purpose.

I

Information centre Karlovy Vary

karlovyvary.cz

47

The website www.karlovyvary.cz is the official tourist information portal for the Karlovy Vary region in the Czech Republic. It provides comprehensive information about local spas, hotels, health care tourism, cultural events, and sightseeing opportunities. The site targets tourists and visitors seeking detailed travel and accommodation options in the region. It operates as a government or municipal tourism promotion entity, offering curated packages and official contact points. Technically, the site is built on Drupal 7 CMS, utilizing common JavaScript libraries such as jQuery and Google Analytics for tracking. The site is served over HTTPS with a good SSL configuration, though no advanced security headers were detected. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, indicating a reasonable level of privacy compliance. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further. The site lacks explicit security or incident response policies publicly available, which could be improved. Overall, the website presents a professional and trustworthy front for regional tourism, with good content quality and user experience. Strategic improvements in security headers, WHOIS transparency, and mobile optimization would enhance its security posture and compliance standing.