Security Directory

A

ALPA, a.s.

alpa.cz

49

ALPA, a.s. is a Czech company specializing in natural cosmetic products with a heritage spanning over 100 years. Their product portfolio includes massage products, embrocations, preparations for athletes, children's cosmetics, and other personal care items. The company targets general consumers, families, and athletes seeking traditional and natural health and cosmetic solutions. The website reflects a well-established brand with consistent messaging and a good level of professionalism. Technically, the website is built on the xartCMS platform, utilizing JavaScript libraries such as MooTools and jQuery for interactive features. Google Tag Manager is implemented for analytics and marketing purposes. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, it lacks important security headers and does not provide visible incident response or vulnerability disclosure information. The absence of WHOIS data reduces transparency but does not necessarily indicate malicious intent given the brand's established presence. Overall, the website presents a trustworthy and professional front for ALPA, a.s., with minor technical and security improvements recommended to enhance compliance and user trust.

F

FORPSI

forpsi.com

74

FORPSI is a professional service provider specializing in domain registration, web hosting, VPS, and cloud services primarily targeting customers in the Czech Republic. The company positions itself as a reliable partner with its own data center, offering a range of hosting and server solutions. The website is well-structured, primarily in Czech, and provides comprehensive information about its services, targeting both business and individual customers. The presence of cookie consent and privacy policy indicates attention to regulatory compliance. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, and appears to be built on Kentico CMS. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected in the content. However, the absence of WHOIS domain registration data raises concerns about domain transparency and legitimacy, which slightly impacts trustworthiness. Overall, the website is professional and functional but would benefit from improved domain registration transparency and explicit contact information.

F

FTV Prima, spol. s r.o.

fachmani.cz

42

Český Kutil.cz is a well-established Czech media website specializing in DIY, home improvement, gardening, and crafts content. It operates under the umbrella of FTV Prima, a recognized media company in the Czech Republic. The website targets hobbyists and professionals interested in construction, household management, and creative projects, offering a broad range of articles and guides. Its market position is solid within the Czech DIY media niche, supported by a medium-sized operation and a consistent brand presence since 2002. Technically, the website employs a modern tech stack including Bootstrap, Google Fonts, FontAwesome, and various third-party analytics and advertising tools such as Google Tag Manager, Gemius, and Didomi CMP for GDPR compliance. Hosting and domain registration are managed by Active24, a reputable provider. The site is mobile-optimized and demonstrates good performance and accessibility, although some improvements in security headers and accessibility could be made. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly present and should be implemented to enhance security posture. Incident response and security policy documentation are not publicly available. Overall, the website presents a trustworthy and professional front with good privacy compliance and a strong business credibility score. It is recommended to enhance security headers and consider publishing security policies to further improve trust and compliance.

F

FTV Prima, spol. s r.o.

ceskykutil.cz

42

Český Kutil.cz is a Czech media website focused on DIY, home improvement, gardening, and crafts. It operates as part of the FTV Prima media group, with a domain registered since 2002, indicating a well-established presence. The site offers a variety of articles, tips, and guides targeting DIY enthusiasts and homeowners. It supports user engagement through newsletter subscriptions and social media channels. Technically, the site uses modern frontend libraries such as Bootstrap, FontAwesome, and integrates third-party services for analytics, advertising, and consent management. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and clear privacy policy references. Overall, the site is professional, trustworthy, and content-rich, serving a general audience with safe and relevant content.

T

To dáš!

to-das.cz

53

To-das.cz is a Czech educational service specializing in preparatory courses and simulated entrance exams for students in 5th, 7th, and 9th grades. The website offers comprehensive content including course descriptions, schedules, personalized training applications, and extensive testimonials. The business is well-positioned in the Czech education market with strong trust signals such as high Google review ratings, notarized statistics, and media coverage. Technically, the site is built on WordPress and uses a modern tech stack with multiple analytics and marketing tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be improved. Privacy compliance is basic but includes cookie consent and a privacy policy. WHOIS data is unavailable, which slightly impacts domain trust assessment, but overall the site appears legitimate and professional.

P

PeckaDesign

peckadesign.cz

57

PeckaDesign is a well-established Czech company specializing in custom e-commerce solutions for large market players, boasting 25 years of experience. Their services encompass bespoke e-shop development, omnichannel strategies, UX research, frontend coding, mobile applications, and consulting. The company targets leading e-commerce businesses in the Czech and Slovak markets, positioning itself as a trusted partner with a strong portfolio of references and awards. Technically, the website employs modern JavaScript technologies, including New Relic for performance monitoring and Google Tag Manager for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and professionally designed, providing a positive user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published privacy or terms policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and branding are professional and trustworthy. Overall, the site demonstrates solid business credibility and technical implementation but would benefit from enhanced security and compliance documentation.

Z

Zátiší Catering Group a.s.

zatisigroup.cz

53

Zátiší Catering Group a.s. is a reputable hospitality company based in Prague, Czech Republic, operating multiple restaurant brands and catering services. Their market position is strong within the local and European hospitality sector, offering high-quality dining experiences and event catering. The website reflects a professional digital presence with good content quality and consistent branding. Technically, the site uses a Kentico CMS on an ASP.NET platform, integrates modern analytics and cookie consent tools, and demonstrates moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie management. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection. The site is safe for general audiences and does not contain adult or explicit content.

R

Rat für Formgebung – German Design Council

german-brand-award.com

58

The German Brand Award website represents a well-established branding award platform operated by the Rat für Formgebung – German Design Council. It targets marketing professionals and companies seeking recognition for brand excellence. The site offers comprehensive information about the award, jury, events, and participation benefits, positioning itself as a reputable and professional entity in the branding and marketing sector. The business model revolves around organizing award competitions, hosting award shows, and facilitating networking events to promote brand success. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as Swiper.js and integrating analytics and marketing tools including Google Tag Manager, Google Analytics, Hotjar, and Criteo. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Hosting appears to be supported by Cloudflare as a CDN, enhancing performance and security. From a security perspective, the website enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and no dedicated security policy or incident response contact information is provided. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly reduces the overall trustworthiness. Overall, the website demonstrates a strong digital presence and business credibility, with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing explicit security headers, publishing a security policy, and verifying domain registration details to enhance trust and compliance.

R

Rat für Formgebung – German Design Council

german-design-award.com

57

The German Design Award website represents a prestigious international design award managed by the Rat für Formgebung – German Design Council. The site showcases award categories, jury members, news, and event information, targeting design professionals globally. The business model revolves around promoting design excellence through competitions, networking, and visibility for winners. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries like Swiper.js, and integrates analytics tools such as Google Tag Manager and Hotjar with GDPR-compliant cookie consent mechanisms. The website is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. WHOIS data is missing or privacy protected, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand and organizational backing. Overall, the site is trustworthy, compliant, and professionally maintained.

R

Ranxplorer

kifdom.com

52

KifDom is a French niche marketplace specializing in the acquisition and resale of expired .fr domain names, targeting SEO professionals and domain investors. The website is professionally designed, mobile-optimized, and provides clear navigation with comprehensive domain listings, auctions, and immediate purchase options. The business is operated by Ranxplorer, a company accredited by AFNIC since 2014, indicating a stable market presence. Technically, the site uses modern frontend technologies including Bootstrap, Tailwind CSS, and Google Tag Manager, with HTTPS enforced for secure communications. Security measures include CSRF protection and session management, though some standard security headers are not explicitly detected. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in French, consistent with GDPR requirements. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. WHOIS data for the domain is unavailable or shows no match, which raises minor concerns about domain registration transparency but does not detract significantly from the site's legitimacy. Overall, KifDom presents a trustworthy and functional platform for expired domain transactions in the French market.

C

Cluster Industrial

clusterindustrial.com.mx

25

Cluster Industrial is a Mexican-based digital platform focused on providing leading information and specialized content for the mobility and industrial sectors. The company positions itself as a key player in transforming the industrial landscape in Mexico through its digital platform, strategic events, and expert content. The website reflects a professional and consistent brand image targeting industry professionals and stakeholders in Mexico. Technically, the site is built on the Ghost CMS platform, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although the absence of visible privacy and cookie policies indicates room for compliance improvement. Overall, the site is trustworthy and well-structured but would benefit from enhanced privacy and legal disclosures to improve user trust and regulatory compliance.

D

Deutsche Messe AG

ligna.de

66

LIGNA is a globally recognized trade fair organized by Deutsche Messe AG, focusing on tools, machines, and plants for woodworking and wood processing industries. The website serves as a comprehensive platform for exhibitors, visitors, and press, providing event information, exhibitor details, news, and multimedia content. The site is well-branded, professionally designed, and targets industry professionals and stakeholders primarily in Germany but with international reach. Technically, the website employs modern JavaScript frameworks like Vue.js, integrates a consent management platform (Usercentrics), and uses Google Tag Manager for analytics and tracking. Hosting is managed via managed IP name servers, ensuring reliable delivery. Security posture is strong with HTTPS enforced and CSRF tokens present, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is robust with clear privacy and cookie policies and active consent mechanisms. Overall, the website is trustworthy, professional, and secure, with no signs of adult or questionable content.

E

Electricity Transformation Canada

electricity-transformation.ca

48

Electricity Transformation Canada is a newly established platform and event organizer focused on accelerating the renewable energy transition across Canada. Founded in 2024, it serves as a hub for industry professionals, government representatives, and innovators to collaborate, showcase technologies, and drive clean energy adoption. The website reflects a professional and consistent brand presence with clear messaging about its mission and services. Technically, the site is built on WordPress with Elementor and integrates SEO and analytics tools, indicating moderate digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. Overall, the domain registration and website content align well, supporting the legitimacy of the business.

G

Grupo Reforma

reforma.com

71

Grupo Reforma operates reforma.com, a leading Mexican news media website providing real-time news, editorials, and multimedia content. The site targets a general audience interested in national and international news, opinion pieces, and cultural content. It holds a strong market position as a reputable and credible news source in Mexico. Technically, the website employs modern JavaScript libraries such as jQuery, Google Tag Manager, and Cxense for analytics and advertising, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and standard security headers, though improvements like CSP and incident response contacts are recommended. Privacy compliance is basic with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and content-rich, though WHOIS data inconsistency warrants further verification.

T

TIPOS, národná lotériová spoločnosť, a. s.

etipos.sk

53

TIPOS, národná lotériová spoločnosť, a. s., is the official national lottery operator in Slovakia, providing a wide range of regulated gambling services including lotteries, scratch cards, sports betting, virtual sports, and online casino games. The website moj.etipos.sk serves as a portal for these services, targeting the adult Slovak population with a professional and well-structured online presence. The company holds a strong market position as a government-backed entity with exclusive rights in the sector. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Google Analytics, and Cookiebot for analytics and consent management. The site is mobile-optimized and uses secure HTTPS connections with robust security headers and two-factor authentication for user login, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility practices, though some accessibility enhancements could be made. From a security perspective, the site demonstrates strong adherence to best practices including HTTPS enforcement, CSP with violation reporting, and secure login mechanisms. Privacy policies and cookie consent are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, moj.etipos.sk is a trustworthy, professional, and secure platform for regulated gambling services in Slovakia. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include publishing incident response contacts, adding a security.txt file, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.

V

Vysoké učení technické v Brně

vut.cz

62

Vysoké učení technické v Brně (Brno University of Technology) is a prestigious Czech technical university with over 120 years of tradition. It offers a wide range of technical, economic, natural science, and artistic study programs across eight faculties and three university institutes. The university maintains a strong position in scientific research and international cooperation, supported by memberships in notable university networks and awards such as the HR Excellence in Research Award. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, researchers, and academic partners. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.12.4, Google Tag Manager, CookieHub for cookie consent, and Cloudflare for hosting and security. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforcement and multiple security headers, although the use of an older jQuery version suggests some technical debt. Privacy compliance is robust, featuring detailed privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, explicit vulnerability disclosure and incident response information are not publicly available, which could be improved to enhance transparency and security readiness. Overall, the site is professional, trustworthy, and well-maintained, representing a large educational institution with a strong market position. Strategic recommendations include updating legacy libraries, publishing vulnerability disclosure policies, and enhancing incident response visibility to further strengthen security and compliance.

T

Technologické centrum Praha

tc.cz

52

Technologické centrum Praha is a Czech national technology center focused on supporting the country's participation in the European Research Area. It provides strategic studies, technology transfer, and innovation support services primarily targeting research institutions, SMEs, and public sector entities. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics and reCAPTCHA for security. While the site enforces HTTPS and includes CSRF tokens in forms, it lacks some security headers and an explicit cookie consent mechanism. The absence of WHOIS data reduces trust assessment confidence but the overall presentation and content quality indicate a legitimate and established organization. Social media presence on major platforms further supports credibility.

ELI Beamlines is a prominent European research infrastructure specializing in high-power laser science and technology. It operates advanced femtosecond laser systems and provides unique experimental facilities for scientific research in physics, materials science, life sciences, and related fields. The organization supports a large international team and offers educational and technology transfer programs. The website reflects a mature digital presence with comprehensive content tailored to researchers and industrial users. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS, cookie consent, and form protections, though additional security headers could enhance defenses. The WHOIS data is privacy protected, which is typical for EU domains, and the domain appears legitimate and consistent with the organization's profile. Overall, the website is professional, secure, and compliant with GDPR, serving as a trustworthy portal for the research community.

V

Vysoká škola ekonomická v Praze

vse.cz

66

Vysoká škola ekonomická v Praze (VŠE) is a prominent business university in the Czech Republic, recognized as the best business university in Central and Eastern Europe. It offers a wide range of academic programs including bachelor's, master's, doctoral, and MBA/MPA studies, supported by strong international cooperation and research initiatives. The institution is well-accredited with prestigious certifications such as AACSB, EQUIS, and CEMS, underscoring its academic excellence and global standing. The website reflects a mature digital presence with comprehensive content tailored to students, academics, and partners. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Popper.js, and Google Tag Manager. It is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. The site employs HTTPS with strong SSL configuration and security headers, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR and related privacy regulations. From a security perspective, the site follows best practices such as enforcing HTTPS and using security headers. However, it lacks a publicly available security policy and incident response contact details, which are recommended for enhanced transparency and readiness. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation and accreditations support its legitimacy. Overall, VŠE's website is a well-constructed, secure, and compliant platform that effectively serves its educational mission. Strategic improvements include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

V

VŠCHT Praha

vscht.cz

68

Vysoká škola chemicko-technologická v Praze (VŠCHT Praha) is a leading Czech higher education institution specializing in chemical technology, biochemistry, food technology, and environmental sciences. The university offers comprehensive bachelor, master, and doctoral programs, alongside active research and industry collaboration. It holds a strong market position as a premier technical university in the Czech Republic with strategic partnerships such as ORLEN Unipetrol. The website reflects a professional academic institution targeting students, researchers, and industry partners. Technically, the site employs modern JavaScript frameworks including Vue.js and RequireJS, integrates Google Analytics and Facebook Pixel for tracking, and uses a custom CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented; however, it lacks visible security headers and published security policies. WHOIS data is missing, which slightly reduces trustworthiness but the official content and social media presence support legitimacy. Overall, the website is well-maintained, secure, and serves its educational mission effectively.

C

Central European Institute of Technology

ceitec.cz

10

The Central European Institute of Technology (CEITEC) is a multidisciplinary research and education consortium based in Brno, Czech Republic, comprising six partner universities and research institutions. It focuses on advancing scientific knowledge in life and material sciences, providing access to cutting-edge core facilities, and fostering industry cooperation. The website reflects a professional and well-structured digital presence targeting scientists, students, and industrial partners. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Facebook SDK, hosted likely on DigitalOcean infrastructure. Security posture is solid with HTTPS and form protection via reCAPTCHA, though it lacks explicit security headers and published privacy or cookie policies. The WHOIS data is unavailable due to EURid privacy restrictions, but the domain and website content indicate legitimacy and alignment with the claimed academic mission. Overall, the site is trustworthy, well-maintained, and suitable for its audience.

Z

Západočeská univerzita v Plzni

zcu.cz

66

Západočeská univerzita v Plzni is a well-established public university in the Czech Republic offering over 300 study programs across nine faculties. The website serves as a comprehensive portal for prospective and current students, staff, and partners, providing information on admissions, research, partnerships, and university events. The institution holds recognized certifications such as the HR Award and demonstrates compliance with GDPR regulations through detailed privacy policies and cookie consent mechanisms. The university maintains an active presence on major social media platforms, enhancing its outreach and engagement. Technically, the website employs a custom CMS with a jQuery-based frontend, supported by multiple JavaScript modules for enhanced user interaction. The site is mobile-optimized and features responsive design elements, although performance is moderate and could benefit from further optimization. Google Tag Manager and Facebook tracking cookies are used for analytics and marketing purposes, with clear cookie consent provided to users. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, explicit security headers are not evident, and no dedicated vulnerability disclosure or incident response contacts are published. The absence of WHOIS data due to privacy protection is typical for such institutions and does not detract from the site's legitimacy. Overall, the website presents a secure and professional digital presence aligned with the university's educational mission.

H

HiLASE

hilase.cz

9

HiLASE is a Czech high-tech laser research center focused on delivering innovative laser technologies and solutions that bridge excellent scientific results with industrial requirements. The center offers research programs, engineering support, project management, business development, open access to research infrastructure, and training. The website reflects a medium-sized organization with a professional online presence and active engagement through social media and partner collaborations. Technically, the site is built on WordPress with common plugins and tracking tools, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policy pages and security headers. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on content and partner affiliations. Strategic improvements include publishing privacy and security policies, enhancing security headers, and providing clearer contact information.

T

Triggerbee

triggerbee.com

61

Triggerbee is a Denmark-based technology company founded in 2014 that provides an all-in-one onsite marketing platform designed to help businesses convert website traffic through personalization, forms, promotions, surveys, referrals, and gamification. The company targets businesses seeking to enhance onsite marketing effectiveness using SaaS solutions. The website is built on WordPress with Elementor, leveraging modern web technologies and integrating multiple analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Ads. Hosting appears to be on Microsoft Azure, inferred from cookies. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully published. Privacy compliance is partially addressed with a detailed cookie consent banner but lacks a clearly accessible privacy policy and terms of service. Overall, the website demonstrates good technical maturity, professional design, and consistent branding, supporting a high trustworthiness level.

A

AJ Produkter

ajprodukter.se

61

AJ Produkter is a leading Swedish company specializing in office, warehouse, and workshop furniture and workplace equipment. The company operates a professional e-commerce platform complemented by a catalog sales model, targeting business customers seeking quality workplace furnishings with fast delivery and extended warranties. The website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks, comprehensive analytics, and marketing tools, ensuring a rich user experience and effective customer engagement. Security posture is strong with HTTPS, Content-Security-Policy headers, and cookie consent mechanisms in place, although explicit privacy and terms policies are not found in the provided content. WHOIS data is missing, which raises concerns about domain registration transparency but does not detract from the professional presentation and contact availability on the site. Overall, AJ Produkter presents a credible and well-established business with room for improvement in compliance documentation and domain registration transparency.

U

Universo L.O.L. Surprise!

universololsurprise.com

58

Universo L.O.L. Surprise! is a Spanish retail website specializing in the sale and promotion of L.O.L. Surprise! toys and related products. The site targets a general audience, primarily children and their parents, offering product information and multimedia content such as video trailers. The business operates as a small-sized e-commerce retailer with a niche market focus. Technically, the website is built on WordPress using the Genesis Framework and integrates Google Tag Manager and Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. Security-wise, the website enforces HTTPS and has domain transfer protections but lacks DNSSEC and some security headers like Content-Security-Policy. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.

E

Energy & Commerce

energyandcommerce.com.mx

49

Energy & Commerce is a bilingual digital platform specializing in news and publications related to the industrial and energy sectors in Mexico. The website serves professionals and businesses within these sectors by providing industry news, expert columns, and digital publications. It holds a moderate market position as a specialized media outlet with a consistent brand presence and active social media engagement. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and advertising, offering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks comprehensive security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

M

MexicoIndustry

mexicoindustry.com

58

MexicoIndustry is a well-established digital media platform specializing in news and analysis for the Mexican manufacturing sector. Founded in 2013, it serves a professional audience including industry stakeholders, investors, and manufacturing professionals. The website offers sector-specific news, videos, technical documents, and event promotions, positioning itself as a key information source in the industrial media space in Mexico. The business model is primarily advertising-driven with partnerships to related industry sites. Technically, the website uses modern frontend technologies such as Bootstrap 5, Swiper carousels, and integrates Google Analytics and Facebook Pixel for tracking. It is hosted on Bluehost and employs HTTPS with a valid SSL certificate. The site is mobile optimized and has good SEO practices, though it lacks some advanced security headers and DNSSEC. From a security perspective, the site enforces HTTPS and has domain locks to prevent unauthorized changes. However, it lacks DNSSEC, security headers, and published security or incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the website is professional, content-rich, and trustworthy with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance its posture and user trust.

M

Metalmecánica

metalmecanica.com

68

Metalmecánica is a Spanish-language online platform serving the metalworking community in Latin America, connecting suppliers and professionals with industry-specific content, product catalogs, and services. The website demonstrates a professional design and uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and analytics tools such as Google Analytics and Microsoft Clarity. The platform offers a variety of services including supplier directories, job listings, and industry news, positioning itself as a regional hub for the metalworking sector. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Additionally, the lack of explicit privacy and cookie policies and contact information indicates gaps in privacy compliance and business transparency. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response details. Overall, the site is functional and well-designed but would benefit from enhanced transparency and security practices.

M

Manufactura Latam

manufactura-latam.com

64

Manufactura Latam operates as a specialized online directory and content platform serving the manufacturing industry in Latin America, primarily Mexico. It offers a comprehensive supplier directory, product catalogs, industry news, articles, events, and a digital magazine, targeting manufacturing professionals and companies seeking industry information and business connections. The platform leverages modern web technologies including Bootstrap, jQuery, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, but lack explicit security headers and published privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and functionality of the website.

G

Global Industries

globalindustries.mx

51

Global Industries is a Mexican business news publication targeting industry leaders and decision makers across sectors such as energy, manufacturing, construction, and transportation. The website provides industry news, analyses, and virtual editions to inform professionals and business executives. Technically, the site is built on WordPress with common SEO and advertising plugins, including Yoast SEO and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with good SSL configuration, but lacks visible privacy and terms of service policies. Security posture is adequate with no visible vulnerabilities, though security headers could be improved. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

C

CCI France México

franciamexico.com

58

CCI France México is a well-established bilateral chamber of commerce founded in 1884, serving French and Mexican businesses with a broad range of services including membership, networking, recruitment, business development, and event organization. The website is professionally designed using TYPO3 CMS, with modern technologies and integrations such as Google Tag Manager and reCAPTCHA, ensuring a good user experience and security posture. Privacy compliance is well addressed with clear cookie consent and privacy policies. However, the WHOIS data for the domain is missing, which raises questions about domain registration legitimacy despite the professional appearance and content quality. Overall, the site is a credible business platform with minor concerns regarding domain registration transparency.

G

Gobierno de México

gob.mx

54

Gob.mx is the official digital portal of the Mexican federal government, providing citizens with access to federal procedures, social programs, and government services. It serves as a centralized platform to facilitate government-citizen interactions, offering key services such as procedure lookup, social program information, and secure authentication via LLave MX. The portal targets Mexican citizens and residents seeking government services online, positioning itself as the authoritative government digital gateway. Technically, the website employs modern web technologies including JavaServer Faces with PrimeFaces, jQuery, and Swiper.js for UI components. It leverages Google Fonts and Google Tag Manager for typography and analytics respectively. Hosting appears to be supported by Akamai CDN, ensuring performance and availability. The site is mobile optimized with responsive design and basic accessibility features. From a security perspective, the site uses HTTPS with strong SSL configuration and includes several security headers. However, it lacks explicit cookie consent mechanisms and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data confirms the site is legitimately registered to the Mexican government, reinforcing trust. Overall, gob.mx demonstrates a mature digital government presence with good technical and security posture. To enhance compliance and user trust, it should implement explicit cookie consent, publish security and privacy policies more prominently, and provide clear contact information for data protection and incident response.

N

NTT DATA Group Corporation

nttdata.com

79

NTT DATA Group Corporation is a global enterprise specializing in IT consulting, digital transformation, and managed services. The company offers a broad portfolio of services including consulting, industry-specific solutions, business process services, IT modernization, cybersecurity, cloud, and artificial intelligence. Positioned as a large, enterprise-level technology provider headquartered in Japan, NTT DATA serves a diverse range of industries such as finance, healthcare, manufacturing, energy, and transportation. The website reflects a mature digital presence with comprehensive content, multi-language support, and clear navigation tailored for enterprise clients worldwide. Technically, the site employs modern JavaScript libraries and tracking tools, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a public security policy are absent. WHOIS data is unavailable, likely due to privacy or registry restrictions, but the website's branding, structured data, and external references strongly support legitimacy. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

N

Nokia Corporation

nokia.com

82

Nokia Corporation is a globally recognized leader in telecommunications and technology infrastructure, providing mobile, fixed, and cloud network solutions. The company operates as a B2B technology provider serving enterprises, governments, and technology professionals worldwide. With a founding date of 1865 and a large enterprise size, Nokia maintains a strong market position supported by subsidiaries such as Nokia Networks and Nokia Bell Labs. The website reflects this stature with professional design, consistent branding, and comprehensive corporate information. Technically, the website is built on Drupal 10 CMS and integrates advanced marketing and analytics tools including Marketo, Google Tag Manager, Google Analytics, and New Relic. Performance is moderate with good mobile optimization and SEO practices. Accessibility is basic but functional. The site employs modern security headers and enforces HTTPS, indicating a strong security posture. However, explicit security policy pages and incident response contacts are not evident. Security-wise, the site demonstrates best practices such as content security policies and cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is noted but attributed to registry restrictions rather than suspicious activity. Overall, the site is trustworthy and professionally maintained. Strategically, Nokia should consider publishing explicit security policies and vulnerability disclosure information to enhance transparency and trust. Improving accessibility and regularly auditing third-party scripts will further strengthen the security and user experience. These steps will support Nokia's reputation as a secure and reliable technology leader.

M

Mitsubishi Electric Corporation

mitsubishielectric.com

65

Mitsubishi Electric Corporation operates a comprehensive global website showcasing its leadership in manufacturing electrical and electronic products across diverse sectors including energy, transportation, and technology. The company targets a global industrial and commercial audience with a broad portfolio of products and solutions. The website reflects a mature digital presence with multiple regional domains and language options, indicating a well-established multinational operation. Technically, the site leverages modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, and is built on Adobe Experience Manager, ensuring a robust content management framework. Security posture is strong with HTTPS enforcement and consent management, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is unavailable, which slightly impacts transparency but the overall site content and branding strongly support legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and improving contact information visibility for security and privacy inquiries.

Schneider Electric is a global leader specializing in energy management and automation, operating in over 100 countries. The company offers integrated energy solutions across multiple market segments, targeting industrial, commercial, and residential customers. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for a global audience. The technical infrastructure leverages modern web technologies including Google Tag Manager, OneTrust for cookie consent, and performance monitoring tools, ensuring fast and responsive user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and published security policies, although the absence of a security.txt file suggests room for improvement in vulnerability disclosure transparency. Privacy compliance is robust, featuring detailed privacy and cookie policies with GDPR adherence and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness consistent with a large multinational enterprise.

S

SportCom

sportcom.eu

44

SportCom is a European-based company specializing in the manufacture and sale of combat sports and martial arts equipment, including boxing rings, MMA cages, mats, and accessories. The company also offers custom gym and product conception services, targeting combat sports professionals, gyms, and fitness centers. The website demonstrates a professional digital presence with clear navigation, multilingual support, and integration of modern marketing and analytics tools. Security posture is good with HTTPS and reCAPTCHA implemented, though additional security headers and a published security policy would enhance trust. Privacy compliance is basic with cookie consent and privacy/legal notices present. The WHOIS data is privacy protected by EURid, which is typical for European domains, and does not raise immediate concerns given the professional website and clear contact information. Overall, the site is trustworthy and well-positioned in its niche.

B

BJJ System

bjjsystem.fr

49

BJJ System is a French-language online platform specializing in Brazilian Jiu-Jitsu educational videos. It offers a categorized and leveled video library, targeting practitioners from beginners to advanced levels. The platform is subscription-based with free content samples and is led by a highly qualified instructor. Technically, the site is built on WordPress with modern plugins such as Elementor, Yoast SEO, and tracking tools including Google Analytics and Facebook Pixel. The hosting provider is OVH, a reputable French hosting company. Security posture is good with HTTPS and some security best practices, though explicit security headers and policies are missing. Privacy compliance is partial, lacking explicit privacy and cookie policies. Business credibility is strong with clear contact information and professional content. The domain is newly registered but consistent with the business claims.

M

moskova-europe

moskova-europe.com

63

Moskova Europe operates as a niche e-commerce retailer specializing in surf and action sports apparel, targeting European surfers and enthusiasts. The company offers a range of products including underwear, clothing, Jiu-Jitsu gear, and surf accessories, with a focus on comfort and quality validated by the action sports community. The business leverages Shopify as its e-commerce platform, integrating marketing and analytics tools such as Klaviyo and Yotpo to enhance customer engagement and sales performance. The website is professionally designed, mobile-optimized, and supports multiple languages, primarily French, English, and Spanish.

Ú

Ústí Region Convention Bureau

ustecky-convention.cz

44

Ústí Region Convention Bureau operates as a regional partner for organizing conferences, corporate events, and incentive travel within the Ústecký region of the Czech Republic. The website serves as a comprehensive resource for venue selection, event planning assistance, and regional promotion, targeting event planners and corporate clients. The bureau is positioned as an official regional entity with partnerships including the Czech Convention Bureau and local government bodies. Technically, the website is built on Drupal 10, employs modern web technologies, and is hosted on a Czech hosting provider, ensuring regional alignment and performance. The site is mobile optimized and accessible, with a clear navigation structure and professional design. Security posture is moderate; HTTPS is used and cookie consent is implemented, but security headers and explicit security policies are absent. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and well-suited for its purpose but could improve in security and privacy transparency.

O

Obec Zeleneč

zelenec.cz

47

Obec Zeleneč operates as the official municipal government website for the Zeleneč community in the Czech Republic, providing residents with comprehensive information about local governance, community events, public services, and contact details. The site targets local citizens and stakeholders, offering a centralized platform for municipal communication and service delivery. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and various JavaScript libraries for calendar and pagination functionalities. The site is mobile-optimized and demonstrates good design and navigation clarity, although some accessibility features could be enhanced. The CMS appears to be a custom or specialized platform named Progres, tailored for municipal websites. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of a published privacy policy, security headers, and vulnerability disclosure reduces the overall security maturity. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices are recommended. Overall, the website is trustworthy and professional in appearance and function, serving its intended audience effectively. The lack of WHOIS data is a concern but likely due to privacy or registry restrictions rather than malicious intent. Strategic enhancements in privacy transparency and security hardening would further strengthen the site's posture.

F

Fédération de MMA Français

fmmaf.fr

45

The Fédération de MMA Français (FMMAF) is the national governing body for Mixed Martial Arts in France, providing licensing, club affiliation, training, and event organization services. The website positions FMMAF as a professional federation affiliated with the International Mixed Martial Arts Federation (IMMAF), targeting MMA practitioners, clubs, and enthusiasts across France. The business model focuses on regulatory oversight, athlete development, and promotion of MMA as a sport within the country. Technically, the website is built on WordPress using the Divi theme and several specialized plugins such as EventON for event management and Matomo for analytics. The site is well-structured with good SEO practices including JSON-LD structured data and Open Graph metadata. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a good baseline security posture. However, the absence of explicit privacy policy and terms of service documents, as well as no visible incident response or vulnerability disclosure information, suggests room for improvement in compliance and transparency. Overall, the website is trustworthy and professional, though the lack of WHOIS registrant data and some compliance documents slightly reduce the trust score. Strategic recommendations include publishing comprehensive privacy and security policies, implementing a vulnerability disclosure program, and enhancing accessibility and compliance features.

Verif is a French-based business intelligence platform specializing in providing comprehensive financial health and identity verification services for companies worldwide. Leveraging the extensive Altares / Dun & Bradstreet database, Verif offers subscription-based and pay-per-report products that enable businesses to assess the solvency, credit risk, and payment behavior of their partners. The website is professionally designed, targeting B2B customers seeking reliable business data to support decision-making and international expansion. Technically, the site is built on modern frameworks such as React and Next.js, with Material-UI for UI components, and integrates third-party services like Google Tag Manager and Crisp Chat for analytics and customer support. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness and should be investigated further. Overall, Verif presents a credible and professional service offering in the financial data sector with room for improvement in privacy and security transparency.

R

Ringier Slovakia Communities s. r. o.

pokec.sk

60

Pokec.sk is the largest Slovak online social networking and chat community platform operated by Ringier Slovakia Communities s. r. o., a subsidiary of Ringier Axel Springer Slovakia. The platform serves over 500,000 daily users, offering chat rooms, user profiles, photo sharing, and mobile app access. It targets a broad Slovak and neighboring country audience seeking social interaction and entertainment. Technically, the site leverages modern web technologies including React and Next.js, with integrated analytics and advertising platforms managed under GDPR-compliant consent mechanisms. Security posture is strong with HTTPS and secure login forms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professionally designed, well-branded, and trustworthy, with safe content suitable for general audiences.

T

Transparency International – Česká republika o.p.s.

ruzovypatnik.cz

63

Transparency International – Česká republika o.p.s. is a well-established non-profit organization dedicated to fighting corruption and promoting transparency in the Czech Republic. With a small but effective team, they focus on advocacy, legal expertise, public education, and free legal counseling. Their website reflects their mission with professional content, clear messaging, and a focus on public awareness. The organization has been active for over 20 years, positioning itself as a trusted entity in the anti-corruption space. Technically, the website is built on Webflow and uses modern web technologies including Google Tag Manager and CookieScript for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent mechanisms. Security-wise, while HTTPS is assumed, explicit security headers and policies are not evident. No security.txt or incident response information is published, which could be improved. The WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency somewhat. Overall, the website is professional, trustworthy, and aligned with its mission. The main risks relate to limited publicly available security policies and lack of WHOIS transparency. Strategic improvements in security posture and transparency would enhance trust further.

I

Integrity Watch Česká republika

integritywatch.cz

45

Integrity Watch Česká republika is a specialized transparency platform focused on monitoring the financial activities of Czech political parties from 2017 to 2022. It provides detailed visualizations and data tables to promote political transparency and accountability. The platform is affiliated with Transparency International Czech Republic, enhancing its credibility and trustworthiness. Technically, the website uses modern JavaScript libraries such as D3.js and dc.js for interactive data visualization and is hosted on DigitalOcean, indicating a reliable infrastructure. However, the site lacks explicit privacy and cookie policies, and no contact information is provided, which may affect user trust and compliance. Security-wise, the site uses HTTPS but lacks visible security headers and incident response contacts, suggesting room for improvement in security posture. Overall, the website is professional, content-rich, and trustworthy for its target audience but should enhance privacy compliance and security transparency to improve its overall risk profile.

P

Picards

picards.cz

45

Picards is a Czech-based UX design agency specializing in user experience, SEO, content strategy, and analytics. Founded in 2015, they serve a variety of clients with a strong portfolio of case studies and testimonials, positioning themselves as a trusted partner in digital design and optimization. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics, Tag Manager, and Optimize for performance and user insights. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks published security policies and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site reflects a credible and professional business with room for improvement in compliance and security transparency.

M

MEDIA ENERGY s.r.o.

mediaenergy.cz

58

MEDIA ENERGY s.r.o. is a Czech-based small technology company specializing in custom web projects and online marketing services. Their offerings include responsive websites, e-commerce platforms with integration to inventory and accounting systems, online marketing including SEO and PPC, custom IT systems, web hosting, and corporate identity services. The company positions itself as a personalized service provider with a strong client retention rate and Google Professional certifications, indicating a credible market presence in the Czech Republic. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security posture is solid with HTTPS and reCAPTCHA integration, though additional security headers could enhance protection. Privacy compliance is well addressed with GDPR and cookie policies and consent mechanisms in place. However, the absence of WHOIS data reduces domain transparency and trustworthiness, which is a notable risk factor. Overall, the website is professional, well-structured, and trustworthy for its business domain.