Security Directory

E

EZEXPO

ezexpo.com

60

EZEXPO is a Saudi Arabia-based company specializing in event furniture rental and expo setup solutions. The website presents a professional e-commerce platform offering various furniture rental packages tailored for exhibitions and events. The company targets event organizers and businesses requiring comprehensive expo setups. Technically, the site is built on modern frameworks such as Next.js and React, integrating popular analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Weglot for multilingual support. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy compliance is basic with a privacy policy and terms of service present but no explicit cookie consent mechanism. Overall, the site is well-designed, mobile-optimized, and trustworthy, though the absence of WHOIS registration data raises some concerns about domain legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and establishing a vulnerability disclosure policy.

T

TIP Group

tip-group.com

70

TIP Group is a well-established company specializing in truck and trailer leasing, rental, maintenance, and repair services. With over 55 years of experience and a large fleet of more than 100,000 trailers, TIP Group serves a broad transportation and logistics market across multiple countries. The website reflects a professional business presence with clear service offerings and a focus on fleet management solutions. Technically, the website employs modern frameworks such as Next.js and integrates marketing and analytics tools like HubSpot, Google Analytics, and Cookiebot for privacy compliance. The security posture is solid with HTTPS enforcement and standard security headers, although there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website content and structure suggest a credible business. Overall, TIP Group's digital presence is mature, compliant with privacy regulations, and professionally maintained.

T

Turancar.cz

turancar.cz

54

Turancar.cz operates as a specialized dealer and service provider for ISUZU buses and related products in the Czech Republic. The company focuses on sales of various ISUZU bus models, warranty and post-warranty servicing, and supplying original spare parts including industrial engines. Their market position is that of a niche transportation sector player catering to bus operators, municipalities, and schools. The website is professionally designed using modern web technologies such as Next.js and React, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with GDPR policies and cookie consent mechanisms in place. However, the absence of WHOIS registration data reduces domain trustworthiness, although the website content and contact information appear legitimate and professional. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response information.

F

Formbricks GmbH

formbricks.com

72

Formbricks GmbH operates an open source experience management platform positioned as a privacy-first alternative to Qualtrics. Founded in 2022, the company targets product teams and developers seeking customizable survey and feedback tools with strong privacy controls and self-hosting options. The website demonstrates a modern, professional design with clear messaging and trust signals including client logos and testimonials from reputable industry figures. Technically, the site leverages Next.js and React frameworks, hosted with Cloudflare DNS, and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms and terms of service are absent. Overall, the site reflects a mature digital presence for a young technology company with a focus on open source and privacy.

I

iKomunita.cz

ikomunita.cz

66

iKomunita.cz is a Czech company specializing in community energy solutions, primarily focusing on photovoltaic systems for residential buildings and housing cooperatives (SVJ). The company offers comprehensive services including project design, installation, financing, and after-sales support, leveraging state subsidies and innovative energy sharing technologies. Their market position is strong within the Czech Republic, with over 250 completed projects and a network of 35+ partner companies. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, cookie consent, and certified components, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

S

Spacebring

spacebring.com

70

Spacebring is a specialized SaaS provider focused on coworking space management, offering automation for booking, invoicing, resource management, and member engagement primarily targeting the German market. The platform emphasizes efficiency gains, saving operators significant administrative time and enhancing member retention through a seamless web and mobile app experience. The company positions itself as a fast, reliable, and comprehensive solution with integrations to popular payment gateways, accounting software, and access control systems.

Community Jameel is a well-established global non-profit organization focused on advancing science, education, and community development. Founded in 2003, it continues the philanthropic legacy of the Jameel family of Saudi Arabia. The organization operates various programs in partnership with academic institutions such as MIT and J-PAL, targeting social impact through scholarships, research, arts, health, and climate initiatives. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to a global audience interested in philanthropy and social development. Technically, the website is built on modern frameworks like Next.js and React, ensuring fast performance and excellent mobile optimization. It employs best practices in web development, including the use of security headers and HTTPS, contributing to a strong security posture. Privacy and cookie policies are clearly stated with consent mechanisms, indicating good compliance with GDPR and related regulations. Security-wise, the site demonstrates a mature posture with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy pages and incident response contacts, which could enhance trust and preparedness. The absence of WHOIS data due to privacy protection is typical for non-profits and does not detract from the site's legitimacy given its affiliations and professional presentation. Overall, Community Jameel's website is a trustworthy, well-maintained platform that effectively communicates its mission and programs while adhering to modern technical and privacy standards. Strategic improvements in security transparency and contact information could further strengthen its credibility and user trust.

C

CEE Automotive Supply Chain

ceeautomotive.eu

65

CEE Automotive Supply Chain 2025 is a professional event platform focused on the automotive industry in Central and Eastern Europe, particularly the V4 countries and Austria. It organizes conferences, networking evenings, and B2B matchmaking meetings to connect automotive professionals and companies. The platform leverages the b2match event system and integrates Google Analytics and Tag Manager for visitor insights with GDPR-compliant consent mechanisms. The website is well-structured, mobile-optimized, and provides comprehensive event information and partner details. Security posture is solid with HTTPS and cookie consent, though explicit security policies and incident response details are absent. WHOIS data is not publicly available due to EURid privacy policies, which is typical for EU domains and does not detract from legitimacy. Overall, the site presents a trustworthy and professional digital presence for the event.

Business Danmark is a well-established Danish trade union and unemployment insurance fund catering to professionals in sales and marketing. The website clearly communicates its membership offerings and pricing, targeting a specific professional audience. The domain has been active since 2004, supporting the company's credibility and market presence. Technically, the website is built on modern frameworks such as Next.js and React, with integration of common analytics and marketing tools like Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and implements standard security headers, although it lacks a publicly stated security policy or incident response contacts. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a professional and trustworthy digital presence with moderate tracking and advertising transparency.

V

VEJ-EU

vej-eu.dk

64

VEJ-EU is a Danish organization focused on developing and transforming the road sector through educational courses, conferences, and workplace initiatives. The website positions itself as a key resource for professionals in the transportation sector in Denmark, offering sector-specific knowledge and networking opportunities. The domain has been active since 1999, indicating a well-established presence in the market. Technically, the website is built on a modern Next.js framework with React, ensuring a responsive and user-friendly experience. The use of Cookiebot for consent management and integration of analytics tools like Google Analytics and Hotjar demonstrate a mature digital infrastructure with attention to privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks explicit contact information and detailed security policies.

Global Champions operates a professional and well-branded website focused on the world of show jumping and equestrian sports, providing event coverage and media content for a global audience. The site leverages modern web technologies including React and Next.js, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is adequate with HTTPS enforced, but lacks some security headers and visible privacy policies, which are areas for improvement. The absence of WHOIS data for the domain raises questions about domain registration legitimacy, though the website content and branding suggest a legitimate business presence. Overall, the site presents a moderate risk profile with recommendations to enhance transparency and security.

B

Broadcom Inc.

wavefront.com

82

Broadcom Inc. is a leading enterprise technology company specializing in semiconductor and software solutions, including cloud monitoring and analytics products such as Tanzu Observability. The company targets enterprise IT organizations and DevOps teams with advanced observability and AIOps solutions to manage multi-cloud environments effectively. Broadcom's market position is strong, supported by a consistent brand presence and comprehensive product offerings in the technology sector. Technically, the website demonstrates a mature digital infrastructure utilizing modern frameworks like React, integrated analytics via Google Tag Manager, and robust cookie consent management through OneTrust. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates privacy and cookie policies aligned with GDPR compliance. However, explicit public security policies and incident response contacts are not prominently available, indicating areas for improvement in transparency and security communication. Overall, the website and business exhibit a high level of professionalism and trustworthiness, with no signs of blocking or malicious activity. The absence of WHOIS data is likely due to registry restrictions rather than privacy concerns, and does not detract from the site's legitimacy. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure mechanisms to enhance trust and compliance further.

S

SP Electricity North West

enwl.co.uk

68

SP Electricity North West operates as the regional electricity distribution network operator for the North West of England, managing critical infrastructure such as overhead lines, underground cables, and substations. The company serves both residential and business customers, providing essential services including power cut information, connection services, and specialized support such as the Extra Care register. The website reflects a mature digital presence with multi-language support and comprehensive customer resources, positioning the company as a key utility provider in its region. Technically, the website employs modern web technologies including AngularJS and React frameworks, integrates with Microsoft Bot Framework for chat services, and uses analytics and monitoring tools such as Google Analytics, Hotjar, and Azure Application Insights. The site demonstrates good performance, accessibility, and SEO practices, with mobile optimization and clear navigation. Cookie consent and privacy compliance mechanisms are implemented, indicating attention to regulatory requirements. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes multiple security headers to protect against common web vulnerabilities. No exposed sensitive data or vulnerable libraries were detected. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and aligned with the business's operational needs. The absence of WHOIS data for the queried subdomain is due to the nature of the query rather than an indication of illegitimacy. The site’s digital maturity and compliance posture are strong, though enhancements in transparency around security policies and incident handling would further strengthen trust and resilience.

ScottishPower is a major UK energy provider offering gas and electricity supply, renewable energy solutions such as solar panels, and home services including boiler care and EV charging. The company positions itself as a customer-centric and environmentally conscious energy supplier with award-winning customer service and partnerships with charities like Cancer Research UK. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, with integrated consent management and analytics tools. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response information is publicly available. Overall, the website is professional, well-designed, and trustworthy, supporting a large enterprise energy business. The WHOIS data for the 'www' subdomain is unavailable due to domain naming rules, but this does not detract from the legitimacy of the main domain.

Unicorn University is a private higher education institution specializing in information technology, data analysis, and business education. Established in 2013, it targets students and professionals seeking specialized education in these fields. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern JavaScript frameworks such as React and UU5, hosted on a platform associated with Plus4U, and integrates Google Tag Manager for analytics. Security posture is moderate with HTTPS enabled and domain registration consistent and legitimate; however, there is room for improvement in security headers and privacy compliance. No blocking or WAF mechanisms were detected, and the site content is accessible and safe for general audiences.

V

Vejdirektoratet

vejdirektoratet.dk

53

Vejdirektoratet is the Danish government agency responsible for developing and managing Denmark's road infrastructure, including the national road network. The website serves as a comprehensive portal providing traffic information, project updates, legal regulations, and resources for various stakeholders including private motorists, professionals, and local authorities. The agency positions itself as a key national infrastructure authority with a focus on safety, efficiency, and public service. Technically, the website is built using modern frameworks such as React and Next.js, with a headless Drupal CMS backend, ensuring a responsive and performant user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a mature digital presence consistent with a large government entity, though WHOIS data is unavailable to confirm domain registration details. The site is safe, professional, and trustworthy, serving a broad public audience.

I

ITS America Events

itsamericaevents.com

65

ITS America Events is a prominent event organizer specializing in intelligent transportation system conferences and expos in the United States. The website highlights major upcoming events such as the ITS World Congress 2028 in Orlando, Florida, and the ITS America Conference & Expo 2026 in Detroit, Michigan. The organization targets transportation leaders and decision-makers from both public and private sectors, focusing on the deployment of innovative transportation technologies to create safer, greener, and smarter transportation systems. The site is professionally designed, with consistent branding and clear navigation, reflecting a mature digital presence backed by ITS America association and Reed Exhibitions.

I

Intra-African Trade Fair (IATF)

iatf.africa

55

The Intra-African Trade Fair (IATF) 2025 website serves as a comprehensive platform promoting a major pan-African trade event scheduled in Algiers, Algeria. The event focuses on fostering intra-African trade, investment, and economic development across multiple sectors including agribusiness, creative industries, automotive, and research. The platform targets a diverse audience of businesses, investors, government entities, and entrepreneurs seeking to engage with Africa's growing $3.5 trillion market. The website provides detailed session schedules, speaker profiles, and event information, positioning itself as a key gateway for trade opportunities in Africa. Technically, the website is built on modern web technologies including React and Next.js, leveraging Material-UI for UI components and Amazon Cloudfront for content delivery. It demonstrates good mobile optimization and SEO practices, although accessibility features are basic. The site uses Google Tag Manager for analytics and tracking, indicating moderate user tracking levels. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no accessible privacy policy or terms of service pages. WHOIS data is privacy protected but consistent with a legitimate event domain. Overall, the website is professional and trustworthy, with strong business credibility but some gaps in privacy and security transparency. Strategic improvements in privacy policy publication, security header implementation, and incident response disclosure would enhance trust and compliance.

A

ATG Entertainment GmbH

atgtickets.de

68

ATG Entertainment GmbH operates a professional ticketing platform focused on musicals, concerts, and theater shows primarily in Germany. The company positions itself as a leading provider of live entertainment tickets, offering a wide range of shows and exclusive deals. The website is well-designed, mobile-optimized, and uses modern web technologies including Next.js and Vercel hosting, ensuring fast performance and good user experience. Security posture is solid with HTTPS and Cloudflare DNS, though some security headers and policies could be improved. Privacy compliance is supported by a Usercentrics cookie consent mechanism, but lacks explicit privacy and terms of service pages. Contact information is clearly provided, enhancing business credibility.

A

Alpro

alpro.com

65

Alpro is a prominent European brand specializing in plant-based food and beverage products, targeting health-conscious and environmentally aware consumers. The company operates under the parent company Danone and maintains a strong market position in the dairy alternative sector. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, ensuring fast performance and good SEO. Security measures including HTTPS and security headers are properly implemented, though the absence of a dedicated security policy and incident response page suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the brand's established reputation. Strategic recommendations include enhancing transparency around security policies and verifying domain registration details to strengthen trust.

D

Dr. Oetker

oetker.fr

62

Dr. Oetker France operates a comprehensive website offering food products, recipes, and consumer engagement through newsletters and social media. The brand is well-established in the retail food sector with a strong market presence in France. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with cookie consent and privacy policies in French. Overall, the website is professional, trustworthy, and user-friendly, supporting Dr. Oetker's brand reputation.

E

EDF power solutions UK and Ireland

edf-re.ie

56

EDF power solutions UK and Ireland is a company focused on providing clean energy solutions and combating climate change, aiming to create a net zero future. The website positions the company as an established player in the energy sector within the UK and Ireland, emphasizing renewable energy and sustainability. The digital infrastructure is built on WordPress with modern technologies such as React and Bootstrap, supported by SEO tools like Yoast and tracking via Google Tag Manager. The site includes a cookie consent mechanism compliant with privacy regulations but lacks visible privacy policy and terms of service documents. Security posture is generally good with HTTPS enforced, but the absence of security headers and explicit security policies suggests room for improvement. WHOIS data is unavailable, limiting domain trust verification. Overall, the website presents a professional and credible business presence with moderate risk due to missing compliance documentation and WHOIS transparency.

T

Tiny Technologies Inc.

tiny.cloud

73

Tiny Technologies Inc. operates the website tiny.cloud, offering the widely trusted TinyMCE WYSIWYG rich text editor, along with complementary products like MoxieManager and Drive for media and cloud file management. The company targets web developers and enterprises seeking advanced text editing solutions, positioning itself as a market leader with over 1.5 million developers relying on its technology. The business model combines SaaS offerings with licensing options, supported by comprehensive documentation and AI-powered tools to enhance user experience. Technically, the website is built on modern frameworks including React and Gatsby, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and uses CAPTCHA and consent management tools to protect user data and privacy. While DNSSEC is not enabled, the domain registration is consistent and secure, with clientTransferProhibited status preventing unauthorized transfers. No critical vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, tiny.cloud presents a professional, trustworthy, and well-maintained online presence with strong business credibility and compliance with privacy regulations. Strategic recommendations include enabling DNSSEC, publishing a formal security policy, and establishing a vulnerability disclosure program to further enhance security transparency and resilience.

Not a number is a Dutch digital agency specializing in knowledge digitization to reduce organizational dependency on specialists by making specialist knowledge accessible across the entire organization. Their market position is supported by over 100 partners and multiple detailed case studies showcasing successful digital transformation projects including product configurators, document configurators, and ERP integrations. The company targets businesses seeking to streamline and scale specialist knowledge digitally. Technically, the website uses a modern stack including React and WordPress as a headless CMS, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting a positive business credibility profile.

WireHeadZ is an eSports association linked to the Westsächsische Hochschule Zwickau, focusing on integrating gaming, academic research, corporate cooperation, and community building. The organization targets students, eSports enthusiasts, and companies interested in innovative event management and talent networking. The website reflects a professional and modern digital presence, leveraging Next.js and Prismic CMS, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is trustworthy and well-positioned within its niche, supported by multiple corporate partners and sponsors.

D

Damen Shipyards Group

damen.com

77

Damen Shipyards Group is a globally recognized family-owned maritime company established in 1927, specializing in shipbuilding, ship repair, and marine equipment supply. The company positions itself as a leader in sustainable and connected shipbuilding, serving diverse markets including defense, offshore energy, public transport, and dredging. Damen operates a large network of shipyards and service hubs worldwide, emphasizing client-driven innovation and lifecycle support services. Technically, the Damen website employs modern web technologies such as React and Next.js, ensuring a responsive and accessible user experience. The site features comprehensive content, multimedia elements, and clear navigation, reflecting a mature digital infrastructure. Privacy and cookie compliance are well implemented, with consent mechanisms and GDPR-aligned policies. From a security perspective, the website enforces HTTPS, utilizes robust security headers, and avoids exposing sensitive data. No critical vulnerabilities were detected in the visible content or scripts. However, the absence of WHOIS registration details is notable and warrants caution, although the website's professional presentation and extensive business information support its legitimacy. Overall, Damen Shipyards Group presents a strong business and digital presence with a high level of trustworthiness and security maturity. Continued vigilance on domain registration transparency and public vulnerability disclosure would further enhance their security posture.

L

LASTR s.r.o.

portal.horse

63

Horse Portal is a niche social media and management platform dedicated to the equestrian community, offering tools for stable management, horse breeding, race tracking, and community engagement. The company LASTR s.r.o., based in the Czech Republic, founded the platform in 2022. The website is well-designed, mobile-optimized, and uses modern web technologies such as Next.js and React. It provides clear privacy and cookie policies with consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. No incident response or security policy information is provided. Overall, the platform presents a professional and trustworthy digital presence for its target audience.

L

LiquidNet Ltd.

2700chess.com

64

2700chess.com is a specialized website providing live chess ratings, player statistics, game archives, and tournament information focused on elite chess players with Elo ratings of 2700 and above. The site targets chess enthusiasts, professional players, and fans, offering a niche service with a premium subscription model for enhanced features. The business is operated by LiquidNet Ltd., with a domain established in 2011, indicating a mature and stable presence in the chess data niche. Technically, the site leverages modern web frameworks such as Next.js and React, combined with jQuery and Bootstrap for UI components, and is hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, providing a positive user experience. Security-wise, the site uses HTTPS and domain transfer locks but lacks advanced DNS security features like DNSSEC and does not publish a dedicated security policy or incident response contacts. Privacy and cookie policies are present but basic, with no explicit GDPR compliance statements. Overall, the site is trustworthy, professional, and well-positioned within its niche, though it could improve its security and privacy transparency.

ScottishPower Renewables operates as a key part of the ScottishPower group under the Iberdrola umbrella, focusing on renewable energy development, particularly wind energy in the UK. The website reflects a mature business with a strong market position and community engagement initiatives. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and integrates third-party services such as Google Tag Manager and Osano for consent management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. The absence of WHOIS registration data is a notable gap in transparency but does not detract significantly from the overall legitimacy given the corporate affiliations and professional presentation. Overall, the site is well-structured, accessible, and provides relevant information to its target audience including landowners, suppliers, and the general public interested in renewable energy.

E

EDF power solutions UK and Ireland

edf-re.uk

54

EDF power solutions UK and Ireland is a business focused on delivering clean and renewable energy solutions to combat climate change within the UK and Ireland markets. The website presents a professional and consistent brand image aligned with the energy sector, emphasizing a net zero future powered by clean energy. The technical infrastructure is built on a modern WordPress CMS platform enhanced with React components, Bootstrap styling, and SEO optimization via Yoast plugin. Analytics and cookie consent are managed through Google Tag Manager and OneTrust respectively, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and formal privacy or security policies. The absence of WHOIS data due to domain naming rules violation introduces uncertainty about domain legitimacy, warranting further verification. Overall, the website is functional, well-designed, and targeted at business stakeholders interested in renewable energy, but improvements in transparency and security documentation are recommended.

B

Bebat

bebat.be

68

Bebat is a well-established producer responsibility organisation based in Belgium, specializing in the collection, sorting, and recycling of used batteries. With over 30 years of experience and a network of more than 23,000 collection points, Bebat holds a leading position in Europe for battery recycling. The organization targets individuals, schools, companies, and stores, providing educational resources and practical tools such as collection cubes to facilitate battery recycling. The website reflects a professional and comprehensive approach to environmental sustainability and compliance support for producers. Technically, the website is built on modern frameworks including Next.js and React, with integration of Piwik PRO for analytics and Usercentrics for consent management, indicating a mature digital infrastructure. The site is fast, mobile-optimized, and accessible, with good SEO practices and security headers in place. HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. Security posture is strong, though the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is supported by clear branding, educational content, and calls to action, though contact emails and phone numbers are not explicitly listed on the homepage. Overall, Bebat presents a trustworthy and professional online presence with a focus on environmental responsibility. The main limitation is the lack of WHOIS transparency due to DNS Belgium restrictions, which does not appear to impact the legitimacy of the organization. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

I

investujdopole.cz s.r.o.

investujdopole.cz

10

Investujdopole.cz s.r.o. is a Czech Republic-based company specializing in land investment brokerage and advisory services. With over 20 years of experience and a portfolio of more than 5,000 land parcels sold, the company positions itself as a trusted leader in the Czech land investment market. Their services include legal support, property valuation, and educational webinars aimed at helping investors protect their savings against inflation through land investments. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and React, ensuring a smooth user experience. Security measures include HTTPS, Google reCAPTCHA, and secure forms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is a notable gap in transparency but does not detract significantly from the overall trustworthiness given the comprehensive business information and contact details provided. Privacy and cookie policies are present and GDPR compliant, supporting responsible data handling practices.

L

LSP Renewables

lsprenewables.com

66

LSP Renewables is a specialized recruitment agency focused on the renewable energy sector, providing talent acquisition services globally with offices in Europe, Asia, and the USA. Their offerings include permanent recruitment, contract labor hire, retained search, talent advisory, and RPO services, targeting a broad spectrum of renewable energy sectors such as offshore wind, solar, subsea, and green hydrogen. The company positions itself as a market leader with a strong emphasis on quality and client service. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics and marketing tools like Google Tag Manager and Mailchimp. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with cookie consent mechanisms in place, indicating good privacy compliance. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the absence of a public vulnerability disclosure or incident response contact is noted. The missing WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence and business indicators. Overall, LSP Renewables presents a credible, professional, and secure online presence suitable for its business domain. Strategic recommendations include enhancing transparency around security incident response and verifying domain registration details to strengthen trust further.

T

Teo via Donace s.r.o.

donace.cz

47

DONACE.CZ is a Czech-based non-profit platform operated by Teo via Donace s.r.o., founded in 2022, that facilitates charitable donations and supports the development of various social and community projects. The platform connects donors with project creators, providing transparent tracking of donations and project progress. It holds a strong market position within the Czech and Slovak charitable sectors, supported by partnerships with reputable organizations. The website is professionally designed, mobile-optimized, and offers a rich content experience with detailed project information and updates. Technically, the website is built on modern technologies including React and Next.js, hosted on Forpsi servers, and demonstrates good performance and SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers present, although there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is generally good, with a comprehensive privacy policy available, but lacks a visible cookie consent mechanism. Overall, the website is trustworthy, transparent, and well-maintained, with no detected vulnerabilities or suspicious content. The domain registration data aligns well with the business information, supporting legitimacy. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing direct contact information to further improve trust and compliance.

E

Elevup s.r.o.

filmana.cz

62

Filmana.cz is a Czech-Slovak streaming platform specializing in Christian films, series, and documentaries. Founded in 2023 and based in Zlín, Czech Republic, it operates under Elevup s.r.o. The platform targets audiences interested in faith-based media content, positioning itself as the first in the region with this niche focus. The business model is subscription-based streaming, supported by an independent foundation promoting Christian messages through film art. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure. It integrates standard analytics and marketing tools including Google Analytics, Microsoft Clarity, Google Tag Manager, and Facebook Pixel. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance in user tracking and data collection. From a security perspective, the site enforces HTTPS and uses cookie consent controls to manage user privacy. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain registration consistency and legitimacy, matching the business's founding date and location. Overall, Filmana.cz presents a professional and trustworthy online presence with good content quality and technical implementation. To enhance security posture and compliance, it is recommended to publish detailed privacy and security policies, implement security.txt, and regularly audit third-party scripts. The platform is safe for general audiences with no adult or questionable content detected.

C

Centrum pro rodinný život Olomouc

rodinnyzivot.eu

40

Rodinný život is a Czech family and spiritual magazine published by Centrum pro rodinný život Olomouc, with a 35-year tradition. The website offers rich content focused on family life, Christian spirituality, and related cultural topics. It provides subscription options, digital editions, and a newsletter signup. The site is well-designed, mobile-optimized, and uses modern web technologies such as React and Next.js. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. No security headers or incident response information are published, representing areas for improvement. The website links to reputable partner domains related to Christian media and cultural organizations, enhancing its credibility.

T

Tower Health

mytowerhealth.org

65

Tower Health operates the MyTowerHealth patient portal, providing secure online access to healthcare services such as appointment scheduling, prescription refills, test results, and billing management. The portal is built on the Epic MyChart platform, a widely used healthcare IT solution, indicating a mature and robust technical infrastructure. The website demonstrates good digital maturity with responsive design, accessibility features, and integration of modern JavaScript libraries such as React and Handlebars. Security measures include HTTPS enforcement, anti click-jacking scripts, and CSRF tokens, though some security headers are not explicitly detected. Privacy compliance is partially addressed with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. The absence of WHOIS registrant data suggests privacy protection, which is appropriate for a healthcare service. Overall, the site is professional, trustworthy, and well-positioned to serve its patient audience.

M

MetroNews Television

wvmetronewstv.com

68

MetroNews Television is a media streaming platform dedicated to providing comprehensive news, talk, and sports coverage for West Virginia. It offers a variety of programming including live and archived shows, sports broadcasts, and exclusive interviews, positioning itself as the only true statewide medium for the Mountain State. The platform targets West Virginia residents and sports enthusiasts, delivering content accessible across multiple devices without requiring a traditional TV provider. Technically, the website leverages modern web technologies such as React, Google Analytics 4, Google Tag Manager, and Google reCAPTCHA Enterprise for security and analytics. It is hosted likely on AWS infrastructure using Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site includes proper meta tags, SEO elements, and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. While explicit security headers are not fully confirmed, the site demonstrates good security hygiene with CSRF tokens and no exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, MetroNews Television presents a professional and trustworthy media service with strong technical and security foundations. The main risk lies in the lack of publicly available domain registration information, which should be addressed to enhance trust and credibility.

C

CreativeThemes

creativethemes.com

64

CreativeThemes operates the Blocksy WordPress theme website, offering a free and premium theme optimized for Gutenberg and WooCommerce. The company positions itself as a provider of fast, customizable, and SEO-friendly WordPress themes targeting developers and e-commerce businesses. The website demonstrates a mature digital presence with comprehensive documentation, active community engagement, and a professional design. Technically, the site leverages modern web technologies including React, Webpack, Babel, and PHP 7, hosted with GoDaddy and using Cloudflare DNS services. Performance and mobile optimization are strong points, with good SEO practices implemented. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is partially addressed with a clear privacy policy and GDPR mention, but lacks a cookie consent mechanism. Overall, the domain registration is consistent and long-standing, supporting the legitimacy of the business. The site is safe for general audiences and free from adult or questionable content.

I

Irriverso

irriverso.com

47

Irriverso operates a digital platform focused on irrigation data management, as evidenced by the login portal branded with irrigation-dataserver.com logos. The platform uses Auth0 for secure user authentication, indicating a modern approach to identity management. The site is targeted at users requiring access to irrigation-related data services, likely professionals in agriculture or irrigation system management. The business model appears to be subscription or account-based access to digital irrigation data services. Technically, the site employs React components and CSS variables, leveraging Auth0's Universal Login Page framework. The login page is functional and accessible, with good mobile optimization and accessibility features. However, SEO optimization is minimal, and no privacy or cookie policies are present, which limits compliance and user trust. No contact or incident response information is provided, which is a gap in transparency. Security-wise, the use of Auth0 provides a strong authentication foundation, including password visibility toggles and ARIA-compliant form validation. However, the absence of visible security headers and privacy policies reduces the overall security posture. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site is functional and secure for authentication purposes but lacks comprehensive privacy, compliance, and business transparency features. Enhancements in policy disclosures, contact information, and SEO would improve trust and compliance.

D

DAF Used Trucks

dafusedtrucks.com

74

DAF Used Trucks operates as a professional platform offering used trucks with a focus on quality, expert service, and a one-year guarantee. The website targets businesses and fleet operators seeking reliable used vehicles. The platform is well-designed, mobile-optimized, and provides advanced filtering options to assist customers in finding suitable trucks. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Sitecore Cloud infrastructure, and integrates privacy compliance tools like OneTrust and analytics via Google Tag Manager and Google Analytics. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy despite the professional appearance and branding consistency of the website.

E

EnviWeb s.r.o.

enviweb.cz

68

EnviWeb.cz is a Czech environmental news and information portal operated by EnviWeb s.r.o., established since 1999. It serves as a leading source for environmental news, CSR, climate change, education, and professional ecology events in the Czech Republic. The website targets municipalities, businesses, environmental professionals, and the general public interested in ecological topics. The business model is primarily content-driven with advertising and event promotion revenue streams. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for analytics and cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is privacy-protected, limiting domain registration transparency.

S

Scuk.cz

scuk.cz

61

Scuk.cz is an e-commerce platform specializing in the sale of local farm products including bakery items, meats, dairy, fruits, and vegetables primarily serving the Czech Republic market. The platform connects local farmers directly with consumers, offering delivery and pickup options, as well as wholesale services. The website demonstrates a professional and consistent brand presence with a clear focus on local and fair-priced farm goods. Technically, the site is built on modern web technologies such as React and Apollo GraphQL, with integrations for analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and content relevance. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, though some security headers and policies are missing. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Overall, Scuk.cz presents a solid digital presence with room for improvement in security documentation and WHOIS transparency.

R

Rankai

rankai.ai

61

Rankai is a newly founded AI-powered SEO agency focused on delivering high-quality SEO services to startups and SMBs at a competitive price point. The company leverages a hybrid approach combining human SEO expertise with AI-driven content creation and optimization to generate significant organic traffic growth for clients. Backed by reputable investors such as OpenAI, Andreessen Horowitz, Y Combinator, and Microsoft, Rankai positions itself as an innovative player in the SEO technology space. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics, Plausible, PostHog) and customer engagement (Intercom). The site is well-optimized for performance, mobile responsiveness, and SEO best practices, reflecting a mature digital infrastructure for a startup. Hosting is via GoDaddy, with domain privacy protection enabled. From a security perspective, the site uses HTTPS and follows basic security best practices but lacks advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a clear privacy policy and terms of service but no cookie consent mechanism. WHOIS data indicates a legitimate startup with privacy protection justified by business type. Overall, Rankai presents a professional, trustworthy, and technically sound online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas will strengthen trust and regulatory adherence.

P

PICO

pico-interactive.com

62

PICO is a leading virtual reality company specializing in all-in-one VR headsets and immersive interactive experiences. Founded in 2015, PICO has established a strong market presence, particularly in China and globally, offering a range of consumer and enterprise VR products. Their business model includes hardware sales, software platforms, developer support, and community engagement, targeting both end consumers and enterprise clients. The website reflects a mature digital presence with comprehensive product information, localized content, and active marketing efforts. Technically, the website is built on modern frameworks such as React and leverages advanced analytics and marketing tools including Google Analytics, TikTok Pixel, and Facebook Pixel. The hosting infrastructure appears to be managed by ByteDance-related services, ensuring fast performance and good mobile optimization. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, PICO's website demonstrates a high level of professionalism, security, and privacy compliance, supporting its position as a reputable VR technology provider. Strategic recommendations include enhancing transparency around security policies, incident response, and vulnerability disclosure to further strengthen trust and compliance.

D

Dr. Josef Raabe Verlags-GmbH

raabe.de

11

Dr. Josef Raabe Verlags-GmbH operates a comprehensive educational publishing platform focused on providing teaching materials, school management software, and professional development services primarily for German-speaking schools. The company has evolved from a traditional publisher to a modern media enterprise offering both analog and digital solutions tailored to educators, school leaders, and school authorities. Their market position is strong within the education sector, supported by a broad portfolio including RAAbits digital teaching materials and EduPage school management software. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance, mobile responsiveness, and good SEO practices. The integration of Usercentrics for GDPR-compliant consent management demonstrates a mature approach to privacy. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MWAY DIGITAL GmbH

relution.io

10

Relution.io is the online presence of MWAY DIGITAL GmbH, offering privacy-compliant and platform-independent Unified Endpoint Management (UEM) and Mobile Device Management (MDM) software targeted at school authorities, public administrations, and enterprises. The website is professionally designed using modern web technologies such as Gatsby and React, hosted likely on AWS infrastructure, and incorporates standard analytics and cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit privacy and security policies are not found in the provided content. The domain registration data is consistent with the business claims, indicating a legitimate and established company founded in 2012. Overall, the website demonstrates good technical maturity and business credibility but would benefit from enhanced privacy and contact transparency.

Igluu is a Czech Republic-based real estate platform offering a comprehensive digital ecosystem for buyers, sellers, and real estate professionals. The platform integrates services such as personal brokers, online mortgage applications, financial health checks, and a professional CRM and MLS system for agents. It is positioned as a modern, trustworthy service and is a member of the ČSOB group, enhancing its market credibility. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the website uses a modern React and Next.js stack hosted on Vercel, with integration of DatoCMS for content management and Vercel Analytics for performance tracking. The site demonstrates good performance, accessibility, and SEO practices. Security is well implemented with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and explicit security or incident response policies are areas for improvement. The WHOIS data for the domain is unavailable, which is a concern for domain legitimacy verification. Despite this, the strong brand association with ČSOB and professional presentation mitigate some trust concerns. Overall, the site presents a low-risk profile but should address privacy compliance and transparency to enhance trust further.

D

Danone s.r.o

nutriklub.sk

67

Nutriklub.sk is a professionally managed website operated by Danone s.r.o, a reputable multinational company specializing in infant and toddler nutrition products. The site serves as both an e-commerce platform and an expert advisory resource for pregnancy, breastfeeding, and child nutrition, targeting parents and caregivers primarily in Slovakia. The website features a rich content library authored by experts, integrated e-shop functionality, and multiple user engagement tools including live chat support. Technically, the site is built on Adobe Experience Manager with React components, leveraging modern web technologies and third-party services such as Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

S

Schüttflix Group

schuettflix.com

64

Schüttflix Group operates a comprehensive digital platform focused on sustainable logistics and circular economy solutions for the construction sector in Germany. The platform connects construction companies, material suppliers, waste disposal services, and transport providers to streamline ordering, transport, and disposal processes digitally. The company positions itself as Europe's largest platform for circular economy in construction, emphasizing sustainability and efficiency. Technically, the website is built on modern frameworks such as Next.js and React, with mobile optimization and fast performance. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy. WHOIS data is missing, raising some legitimacy concerns, but the professional website content and business focus mitigate this risk. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and compliance documentation.