Security Directory

N

Natural.PT

natural.pt

56

Natural.PT is a Portuguese platform dedicated to promoting the country's protected natural areas, offering detailed information on pathways, places to stay, eat, and buy, as well as membership options for community engagement. The platform targets nature enthusiasts and tourists interested in sustainable exploration of Portugal's natural heritage. Technically, the website is a modern React single-page application utilizing Google Analytics, Google Tag Manager, and reCAPTCHA v3 for bot protection. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its niche effectively.

A

AMT - Autoridade da Mobilidade e dos Transportes

amt-autoridade.pt

59

AMT - Autoridade da Mobilidade e dos Transportes is a Portuguese government regulatory authority responsible for overseeing and supervising the mobility and transport sectors including terrestrial, railway, maritime, and fluvial transport. The organization provides regulatory frameworks, consumer protection, public consultations, and knowledge management services. It holds a strong national position as the official transport regulator in Portugal, serving a broad audience including consumers, transport operators, and government stakeholders. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Video.js, ensuring good mobile optimization and accessibility. The site uses HTTPS with an excellent SSL configuration and integrates Google Analytics for user tracking with appropriate cookie consent mechanisms. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security perspective, the site demonstrates good practices including secure video embedding and no exposed sensitive data. The absence of a security.txt file and incident response contact points are areas for improvement. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business purpose and country. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen the security posture and user trust.

Associação Nacional do Ramo Automóvel (ARAN) is a Portuguese national association representing the automotive sector. The organization provides member support, training, publications, and events to automotive professionals and companies in Portugal. The website reflects a mature and professional digital presence with clear branding and comprehensive content tailored to its target audience. The association recently renewed its leadership, signaling ongoing organizational vitality. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap, jQuery, and Font Awesome. It incorporates GDPR-compliant cookie consent mechanisms and uses Google Analytics for traffic analysis. The site is mobile-optimized and structured with SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating good baseline security hygiene. However, no advanced security headers were detected, and there is no public security policy or incident response contact information. The absence of a vulnerability disclosure or security.txt file suggests room for improvement in transparency and security maturity. Overall, ARAN's website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture and stakeholder confidence.

UGC - União Geral de Consumidores is a Portuguese non-profit organization dedicated to consumer rights advocacy, debt counseling, and education on essential public services. The website provides informational content including podcasts, news, and downloadable brochures aimed at Portuguese consumers. The organization holds public utility status and collaborates with governmental consumer protection entities, reinforcing its legitimacy and trustworthiness. Technically, the website uses legacy JavaScript libraries and a custom PHP-based CMS, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but mixed content risks and outdated libraries present. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve technical and privacy aspects.

T

The Brussels Times

brusselstimes.com

63

The Brussels Times is a media organization providing news and analysis focused on politics, Brussels, EU affairs, business, and national and world news. It serves a general audience interested in regional and European Union topics, positioning itself as a niche news provider with a professional online presence. The website employs modern web technologies including Angular framework, Google Fonts, and integrates multiple analytics and advertising services such as Google Analytics, Chartbeat, and OneSignal for push notifications. The technical infrastructure supports mobile optimization and good SEO practices, although some accessibility features appear basic. Security posture is moderate with HTTPS enabled and use of reputable third-party services, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, and no GDPR compliance indicators are found. The domain WHOIS data is missing, which raises concerns about registration transparency and reduces trustworthiness despite the professional content and design. Overall, the website is functional and credible as a news source but would benefit from improved privacy disclosures and security practices.

A

American Planning Association

planning.org

69

The American Planning Association (APA) operates planning.org as the leading membership organization for professional planners in the United States. The website serves as a comprehensive resource hub offering membership services, professional certification (AICP), publications, conferences, career resources, and policy advocacy. APA holds a strong market position as the largest and most authoritative planning organization, targeting planners, students, employers, and government officials. The website's content is rich, professionally presented, and well-structured to support its diverse audience. Technically, the site employs a modern tech stack including Bootstrap, jQuery, HubSpot marketing tools, and integrates multiple analytics and advertising platforms. The site is mobile-optimized and accessible, with good SEO practices.

R

RISE Research Institutes of Sweden

kajt.org

53

Forskningsprogrammet KAJT is a Swedish research program focused on optimizing railway capacity and traffic flow, established in 2013 and operated under the auspices of RISE Research Institutes of Sweden. The program collaborates with Trafikverket, academia, and industry to develop tools, methods, and concepts to improve the efficiency, quality, and flexibility of the Swedish railway system. The website serves as an information hub for ongoing projects, seminars, and research results, targeting researchers, industry stakeholders, and public authorities. Technically, the website is built using the One.com Web Editor platform, hosted by One.com, and incorporates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO is basic but functional, with proper meta tags and Open Graph data present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and important security headers such as Content-Security-Policy and Strict-Transport-Security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or sensitive data collection mechanisms are detected, reducing immediate risk exposure. Overall, the website is professional, trustworthy, and content-rich, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

B

BISON project

bison-transport.eu

53

The BISON project website serves as an informational and research dissemination platform focused on biodiversity and infrastructure synergies within European transport networks. The site targets stakeholders in the transport and environmental sectors, providing project updates, research outputs, and engagement opportunities. The business model is primarily research and knowledge sharing, positioning itself as a niche player in the European transport research community. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and analytics plugins such as Yoast SEO and MonsterInsights. The infrastructure is hosted by OVH SAS, a reputable hosting provider. The site demonstrates moderate performance and good mobile optimization, with structured data and meta tags implemented for SEO. From a security perspective, the site enforces HTTPS, includes standard security headers, and does not expose sensitive data. However, it lacks explicit security policies, vulnerability disclosure, and incident response information, which are recommended for enhanced trust and compliance. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional and trustworthy front for the BISON project, with good content quality and technical implementation. Strategic recommendations include adding explicit security and incident response policies, improving accessibility features, and maintaining regular updates to plugins and themes to mitigate potential vulnerabilities.

The DROIDS project website represents a European research initiative focused on advancing National Road Authorities into digital road operators by leveraging data strategies and digital twin technologies. The project is funded by the CEDR Transnational Research Programme and involves multiple consortium partners including TRAFICON and FEHRL. The website provides comprehensive information about work packages, consortium members, news, and events, targeting transportation professionals and European road infrastructure stakeholders. Technically, the site uses a mix of legacy and modern web technologies including Bootstrap 3, jQuery 1.9.1, Google reCAPTCHA, and Google Analytics. While the site enforces HTTPS and includes a Content-Security-Policy header, it lacks some modern security headers and uses outdated JavaScript libraries, which could pose security risks. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy policy or vulnerability disclosure page is found. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

C

Cortinatex Kft.

szonyegakcio.hu

61

Cortinatex Kft. operates szonyegakcio.hu, a Hungarian e-commerce website specializing in a wide range of rugs and home textile products. The business targets Hungarian consumers seeking quality rugs in various styles and sizes, offering additional home comfort products. The company has an established market presence since 2016, with a clear focus on retail and customer satisfaction through competitive pricing and convenient delivery services. The website is well-structured, professionally designed, and provides comprehensive product categories and information to facilitate user shopping experience. Technically, the website leverages a mature technology stack including jQuery, Tippy.js, and Perfect Scrollbar, running on the UNAS e-commerce platform. It integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, enabling effective user tracking and advertising. The site is mobile-optimized and SEO-friendly, ensuring good accessibility and performance for users. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While no explicit security policy or incident response information is published, the site follows best practices in data protection and does not expose sensitive information. The domain registration data aligns with the business claims, indicating legitimacy and stability. Overall, szonyegakcio.hu presents a trustworthy and professional online retail platform with solid technical and privacy compliance foundations. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

C

Chatwee

chatwee.com

59

Chatwee is a well-established technology company founded in 2012, specializing in live chat and instant messaging applications tailored for online communities, virtual events, and team collaboration. The company offers a SaaS model with flexible subscription and pay-per-use plans, serving a broad target audience including mental health support providers, educational webinars, and online gaming communities. Their market position is strong with over 80,000 registered websites and 50 million chat users, supported by multi-language offerings and extensive customization options. Technically, Chatwee employs a modern web technology stack including JavaScript, PHP SDK, and integrates with popular CMS platforms. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The website is well-optimized for mobile devices, SEO, and accessibility, with fast loading times and a professional design. From a security perspective, the site uses HTTPS and displays a SecurityMetrics certification badge, indicating a commitment to secure operations. However, there is room for improvement by enabling DNSSEC, adding security headers, publishing a security policy, and implementing a cookie consent mechanism to enhance GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, Chatwee presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic enhancements in security transparency and privacy compliance would further strengthen their risk posture and customer trust.

REGBU.COM is a Czech-based multilingual content publishing website established in 2021, offering articles across diverse categories such as sport, fashion, health, travel, finance, technology, and entertainment. The site targets general internet users interested in lifestyle and informational content, monetizing primarily through Google AdSense advertising. Technically, the website is built on WordPress 6.8.2, utilizing popular plugins like Yoast SEO and TranslatePress for multilingual support. It leverages Cloudflare for DNS and hosting infrastructure, ensuring HTTPS security with a good SSL configuration. However, the site lacks DNSSEC and important security headers, which could be improved to enhance security posture. Privacy compliance is minimal, with no visible privacy or cookie policies and no consent mechanisms, which may pose compliance risks under GDPR. Contact and security policy information are absent, limiting user trust and transparency. Overall, the website is functional but basic in content quality and security maturity.

M

Memento Historia - Magazín o dávné a ještě dávnější historii

memento-historia.cz

41

Memento Historia is a Czech-language online magazine dedicated to ancient and medieval history, providing educational articles and multimedia content such as podcasts on YouTube. The website targets history enthusiasts and the general public interested in historical topics, operating primarily as a content publisher monetized through advertising networks like Seznam SSP and Google Ads. The site demonstrates a consistent and professional brand presentation with a good quality of content and user experience. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Google Fonts, and integrates analytics and advertising scripts from Google and Seznam. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers, and no explicit privacy or cookie policies are found, though a cookie consent mechanism is present. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Despite this, the website appears professionally maintained with active content updates and social media presence. No critical security vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, Memento Historia is a niche media site with solid content and technical foundation but would benefit from improved transparency in privacy policies, enhanced security headers, and WHOIS data availability to strengthen trust and compliance.

R

Repsol

repsol.pt

69

Repsol Portugal operates as a major energy supplier providing electricity, gas, and related services to individual consumers. The website is well-branded and professionally designed, targeting retail customers with a clear focus on energy solutions and customer benefits. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Adobe Web SDK, and Gigya, and employs security best practices such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies on the accessible pages indicates room for improvement in compliance transparency. Overall, the security posture is strong with proper headers and no detected vulnerabilities, but privacy compliance could be enhanced by publishing comprehensive policies and contact points for incident response.

Childhood Education International is a well-established international non-profit organization focused on advancing education and child development globally since 1892. The organization operates a professional website that highlights its global network, educational services, publications, and partnership opportunities. The site targets educators, donors, and partners interested in international development and education innovation. The business model centers on collaboration, professional learning, and advocacy to improve educational outcomes worldwide. The organization maintains a reputable market position with certifications and trust indicators supporting its credibility. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and multiple analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and DNS are managed via reputable providers, with Cloudflare DNS and GoDaddy registrar. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and terms of service are present and GDPR compliant. However, no explicit security policy or incident response contacts were identified, suggesting room for improvement in security governance. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience. The risk profile is low with minor security enhancements recommended. Strategic focus on publishing security policies and enabling DNSSEC would strengthen the security posture and trust further.

C

Conselho Empresarial Para O Desenvolvimento Sustentavel

bcsdportugal.org

57

BCSD Portugal is a well-established business council focused on sustainability, representing over 190 Portuguese companies committed to sustainable transition. The organization operates as a non-profit entity, providing advocacy, networking, and support services to its members. The website reflects a professional and consistent brand image, targeting Portuguese businesses and stakeholders interested in sustainability. Technically, the site is built on WordPress using the Divi theme, with integrations such as Google Analytics and Tag Manager for tracking. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring a secure connection. Security posture is generally good, though improvements can be made by enabling DNSSEC and implementing comprehensive security headers. Privacy compliance is lacking, with no visible privacy or cookie policies, which is a notable gap given the GDPR context. Overall, the domain registration data aligns well with the website's business claims, supporting its legitimacy.

Ateliér PKO s.r.o., operating under the brand APKO, is a specialized engineering firm focused on road communications and related infrastructure services in the Czech Republic. Their offerings include road design, traffic engineering, expert opinions, safety audits, environmental assessments, and professional translations. The company targets professionals and organizations involved in transportation infrastructure projects, positioning itself as a niche service provider with a clear and consistent brand presence. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. While the site is moderately optimized for performance and basic mobile responsiveness, it lacks advanced accessibility features and modern frameworks. SEO is basic but sufficient for the content presented. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and includes Google Analytics scripts loaded securely. However, it lacks visible security headers and published security or privacy policies, which are important for GDPR compliance and user trust. No forms or input fields were detected on the analyzed page, reducing immediate risk exposure. The WHOIS data aligns well with the website content, indicating legitimacy and consistent registration information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and clearer incident response information to strengthen its security posture and regulatory adherence.

Rede Convergir operates as a community-oriented platform dedicated to mapping sustainable initiatives and providing a calendar of related events. Established in 2012, it serves a niche audience interested in sustainability, offering tools such as initiative maps, event listings, newsletter subscriptions, and exportable content. The website presents a professional and consistent brand image with clear navigation and relevant content, targeting a general audience interested in sustainability efforts. Technically, the site uses a classic web stack including Bootstrap 3.3.5, jQuery 1.11.2, and Font Awesome 4.5.0, with Google Analytics for visitor tracking. While the site is mobile responsive at a basic level and loads with moderate performance, some technical debt is evident due to older library versions and lack of advanced SEO or accessibility features. Hosting details are not explicit, and no CMS is detected. From a security perspective, the website benefits from HTTPS and domain transfer protection but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No privacy or cookie policies are present, and GDPR compliance indicators are missing, which poses compliance risks. The use of Google Analytics without a visible consent mechanism further impacts privacy posture. No forms or sensitive data collection points were detected in the analyzed content. Overall, Rede Convergir is a legitimate, small-scale platform with a clear mission and consistent branding but requires improvements in privacy compliance, security hardening, and technical modernization to enhance trust and resilience.

The Centro Nacional de Informação e Arbitragem de Conflitos de Consumo (CNIACC) is a Portuguese national center dedicated to consumer conflict resolution through information, mediation, and arbitration services. It operates primarily in regions not covered by other dispute resolution entities, serving consumers and companies across Portugal. The website reflects a government/non-profit organization with a clear mission and multiple partner affiliations, positioning itself as a trusted authority in consumer arbitration. Technically, the website employs a traditional tech stack including jQuery, Modernizr, and Swiper.js, with Google Analytics for user tracking. While the site is functional and well-structured, it uses an outdated jQuery version and lacks some modern security headers and cookie consent mechanisms. Security posture is generally good with HTTPS enforced, but improvements are recommended in security headers and privacy compliance. Overall, the site is professional, trustworthy, and serves its target audience effectively.

The American Petroleum Institute (API) website serves as the digital presence for the national trade association representing the U.S. oil and natural gas industry. The site provides comprehensive information about the industry, membership services, energy economics, and standards development. It targets industry professionals, policymakers, and consumers interested in energy topics. The business model is centered on advocacy, standards, and member services, positioning API as a key industry representative. Technically, the website employs modern frameworks such as Bootstrap, integrates multiple analytics and advertising tools, and uses Google reCAPTCHA for form security. The site is mobile optimized and demonstrates good SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and explicit incident response or vulnerability disclosure information. Privacy and cookie policies are not clearly found in the provided content, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and content-rich, but WHOIS data is unavailable from the provided raw output, limiting domain trust verification.

S

SOGILUB – Sociedade de Gestão Integrada de Óleos Lubrificantes Usados, Lda.

sogilub.pt

52

Sogilub is a licensed non-profit entity operating in Portugal since 2005, managing the integrated system for used lubricating oils (SIGOU). It serves producers of new and used oils, ensuring environmental compliance and efficient waste management. The organization maintains a strong market position as the official system manager in Portugal Continental, providing contractual frameworks, educational resources, and operational tools for stakeholders. The website reflects a mature digital presence with comprehensive content, clear navigation, and active communication channels. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering moderate performance and good mobile responsiveness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supporting Sogilub's role as a key environmental management entity in the energy sector.

N

Národní divadlo Brno

divadlojedarek.cz

51

Národní divadlo Brno operates the website divadlojedarek.cz, offering gift vouchers for theater performances in Brno. The site targets cultural consumers and gift buyers in the Czech Republic, providing an online platform for purchasing vouchers valid for one year. The business model focuses on enhancing theater attendance through flexible gift options. Technically, the site is built on WordPress with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The website demonstrates good design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

L

Lusavouga

lusavouga.pt

45

Lusavouga is a well-established Portuguese company founded in 1967, specializing in the supply and distribution of industrial equipment, tools, chemical products, and safety gear primarily for the metalworking, construction, and manufacturing sectors. With a presence in over 30 countries, Lusavouga holds a strong market position as a trusted supplier offering a broad range of products and services tailored to professional and industrial clients. The website reflects this business focus with comprehensive product categories, brand partnerships, and clear contact channels. Technically, the website employs a modern front-end technology stack including jQuery, Materialize CSS, Bootstrap, and Owl Carousel, combined with analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are implemented with GDPR compliance mechanisms, including consent banners and newsletter subscription forms with explicit consent checkboxes. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration details are consistent with the business claims, supporting the legitimacy of the website. Overall, Lusavouga's website demonstrates a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and trustworthiness.

F

Fédération Internationale de l'Automobile (FIA)

cikfia.com

59

The FIA Karting website serves as the official digital platform for the Fédération Internationale de l'Automobile's karting division, providing authoritative information on karting championships, regulations, and news. The site targets karting enthusiasts, competitors, and officials globally, positioning itself as a key resource within the motorsport community. The business model revolves around governance, event management, and information dissemination within the karting sport sector. The website reflects a large, established organization with consistent branding and professional content quality. Technically, the website leverages modern web technologies including Angular framework, Font Awesome icons, and integrates analytics tools such as Google Analytics and Matomo. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be enhanced. Hosting details are not explicitly identified, but the infrastructure supports a professional and responsive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating a commitment to user privacy and data protection. However, explicit security headers are not detected, and no dedicated security policy or incident response contacts are published. The absence of WHOIS data for the domain www.fiakarting.com raises concerns about domain registration legitimacy, although the website content and branding strongly suggest official affiliation with FIA. This discrepancy warrants further verification. Overall, the website presents a low risk in terms of content safety and user trust, but the domain registration ambiguity impacts business credibility scores. Strategic recommendations include enhancing security headers, publishing clear security policies, and verifying domain registration to strengthen trust and compliance.

M

Motul

motul.com

68

Motul is a well-established company specializing in high-performance engine oils, lubricants, and vehicle care products for a wide range of vehicles including cars, motorcycles, trucks, and bicycles. The website reflects a strong market position with a comprehensive product offering and multiple sales channels including B2B and e-commerce platforms. The brand is supported by consistent and professional digital presence with clear navigation and rich content. Technically, the site is built on modern frameworks such as Next.js and React, integrating advanced analytics and marketing tools with user consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the brand recognition and content quality. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies to further strengthen trust and compliance.

I

International Motorcycling Federation (FIM)

fim-heritage.com

61

The FIM Heritage Programme website serves as a digital platform for the International Motorcycling Federation's initiative to conserve and promote motorcycle competition heritage worldwide. It offers certification services for historic competition motorcycles and organizes historic events to engage enthusiasts and collectors. The site is professionally designed with clear navigation and rich content targeted at motorcycle fans and stakeholders in the heritage community. Technically, the website employs modern frameworks such as Bootstrap and jQuery, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and incident response information. The absence of WHOIS registration data raises some legitimacy concerns, but the strong branding and external links to official FIM domains support authenticity. Overall, the site is a credible resource for motorcycle heritage with room for security and transparency improvements.

A

Autonómia Alapítvány

autonomia.hu

41

Autonómia Alapítvány is a well-established Hungarian non-profit organization focused on strengthening civil society and supporting marginalized groups, particularly Roma integration. Operating since 1990, it delivers community development programs, advocacy, and international cooperation. The website reflects a professional and consistent brand presence with clear contact information and social media integration. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Maps and analytics tools. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves its audience effectively.

SWOV is a well-established Dutch national scientific institute specializing in road safety research. The organization provides valuable knowledge, data, and expert advice to improve traffic safety in the Netherlands. Their website reflects a professional and authoritative presence with clear content targeting researchers, policymakers, and the general public interested in traffic safety. The site is built on a modern Drupal 10 CMS platform, featuring good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS and DNSSEC enabled, cookie consent implemented, and no visible critical vulnerabilities. However, the site could improve by adding explicit security headers and a vulnerability disclosure policy. Overall, the website demonstrates high legitimacy, trustworthiness, and compliance with privacy regulations.

T

The Chartered Institution of Highways & Transportation (CIHT)

ciht.org.uk

75

The Chartered Institution of Highways & Transportation (CIHT) is a well-established professional membership organization focused on the highways and transportation infrastructure sector primarily in the UK with international groups. The website serves as a comprehensive portal for professional development, qualifications, events, and resources tailored to transportation professionals. It offers a range of services including membership management, e-learning, and industry insights, positioning itself as a leading voice in the sector. Technically, the website employs modern web technologies such as AngularJS and Bootstrap, with integration of Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response information. WHOIS data for the www subdomain is unavailable due to an invalid query format, but the domain is likely registered properly without the www prefix, consistent with the professional nature of the organization. Overall, the website is trustworthy, safe, and well-maintained, serving its target audience effectively.

A

Austroads

austroads.com.au

63

Austroads is a government-related organization focused on supporting efficient, reliable, and safe road transport across Australia and New Zealand. It provides authoritative guidance, research, and standards covering drivers, vehicles, road safety, infrastructure, environment, and transport operations. The website serves government agencies, transport authorities, health professionals, and industry stakeholders with comprehensive resources including guides, publications, data services, and training programs. The organization holds a leading market position as a collaborative body for road transport standards in the region. Technically, the website is built on the Squiz Matrix CMS platform and leverages modern web technologies such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and DataTables. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the website enforces HTTPS and employs secure forms with validation. However, it lacks DNSSEC, a published security policy, incident response contacts, and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered by the Department of Finance, consistent with its government affiliation, and domain status codes indicate protection against unauthorized changes. Overall, Austroads presents a trustworthy, professional, and authoritative online presence with a strong business credibility and technical foundation. Strategic improvements in privacy compliance and security transparency would further enhance its posture and user trust.

G

GTO Solutions s.r.o.

jdvm.cz

48

Skutočnosť.sk is an online Slovak informational portal operated by GTO Solutions s.r.o., focusing primarily on transportation-related news, including traffic updates, toll information, fuel prices, and travel advice. The website targets Slovak-speaking drivers and travelers seeking up-to-date and practical information for navigating road transport in Slovakia and neighboring countries. The business model appears to be content publishing monetized through advertising networks such as Google Adsense. The site maintains a consistent brand presence with a clear navigation structure and regularly updated content.

V

Vaseliteratura.cz

vaseliteratura.cz

43

Vaseliteratura.cz is a Czech literary magazine providing daily articles, book reviews, author interviews, and literary news targeting a general audience interested in literature. The website operates on Joomla CMS and integrates common web technologies such as MooTools and Google Analytics for tracking user engagement. The site demonstrates moderate technical maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit cookie consent mechanisms, indicating room for improvement in privacy compliance. The absence of WHOIS data limits transparency, but the website content and social media presence support its legitimacy as a media outlet. Overall, the site is functional and content-rich but could benefit from enhanced security and privacy features.

D

Drupal ᐬrts

drupalarts.cz

51

Drupal Arts is a specialized Drupal web development service provider based in the Czech Republic, established in 2017. The company offers a range of Drupal-related services including custom web development, Drupal maintenance (servis), UX design, and e-commerce solutions. Their website positions them as experts motivated by professional work with lasting value, targeting businesses and individuals seeking Drupal expertise. The site features client testimonials from reputable organizations, enhancing trust and credibility. Technically, the website is built on Drupal 7, utilizing common web technologies such as jQuery, Bootstrap, and Google Analytics. Hosting is provided by Active24, consistent with the domain registrar information. The site is mobile-optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, with asynchronous loading of analytics scripts. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. User tracking is moderate via Google Analytics and Tag Manager, but no cookie consent mechanism is implemented. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices to enhance its security posture and regulatory adherence.

F

FMP - Federação de Motociclismo de Portugal

fmp.pt

41

FMP - Federação de Motociclismo de Portugal is the national governing body for motorcycling sports in Portugal, providing licensing, event organization, and news dissemination to motorcycling enthusiasts and members. The website serves as an information hub with news, multimedia content, and member services, positioning itself as a trusted federation in the Portuguese motorsport sector. Technically, the site is built on WordPress with a modern theme and SEO optimizations, integrating social media and multimedia platforms effectively. Security posture is solid with HTTPS and some security best practices, though it lacks advanced security headers and explicit incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in privacy and security disclosures.

F

Federação Portuguesa de Automobilismo e Karting

fpak.pt

54

The Federação Portuguesa de Automobilismo e Karting (FPAK) is the official Portuguese federation responsible for the regulation, organization, and promotion of motorsport and karting activities in Portugal. The website serves as a comprehensive portal for licensing, event calendars, regulations, and communication with stakeholders including athletes, teams, and fans. It holds a strong national position as the authoritative body in its sector, supported by partnerships with international and national sports organizations. The site targets motorsport participants and enthusiasts, providing detailed information on championships, regulations, and news.

O

Objectivos Desenvolvimento Sustentável

ods.pt

52

The website ods.pt is a Portuguese non-profit platform dedicated to promoting the United Nations Sustainable Development Goals (ODS) and the 2030 Agenda. It serves as an educational and advocacy resource primarily targeting Portuguese-speaking businesses and organizations interested in sustainability. The site is affiliated with BCSD Portugal and offers masterclasses, case studies, and resources to integrate sustainability into corporate strategies. The market position is niche, focusing on sustainability awareness and corporate engagement within Portugal. Technically, the website is built on WordPress using the Elementor page builder, enhanced with SEO plugins like Rank Math and tracking via Google Analytics. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. However, some accessibility features are basic, and there is room for improvement in SEO and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Business credibility is strong with clear organizational information and trust signals such as official UN imagery and structured data. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security practices to improve its risk posture and user trust.

Fundação "la Caixa" is a well-established non-profit foundation based in Portugal with over a century of history dedicated to social and cultural initiatives. The website reflects a professional and consistent brand presence, targeting a general audience interested in social welfare and cultural projects. The foundation operates with a large organizational size and maintains a reputable market position within the non-profit sector. Technically, the website is built on the Liferay CMS platform using modern technologies such as React and integrates widely used analytics and marketing tools like Google Analytics and Google Tag Manager. The site is mobile optimized and demonstrates good SEO and accessibility practices, although accessibility could be further improved. Security-wise, the website enforces HTTPS, uses security headers, and implements a cookie consent mechanism, indicating a good security posture. However, it lacks explicit privacy policies, terms of service, and incident response information, which are recommended for compliance and transparency. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

A

Agência Portuguesa do Ambiente

apambiente.pt

61

The Agência Portuguesa do Ambiente (APA) is the official Portuguese government agency responsible for implementing environmental policies in Portugal. The website serves as a comprehensive portal for environmental information, water resource management, licensing, and public engagement. It targets a broad audience including the general public, government entities, and environmental stakeholders. The APA holds a strong market position as the national authority on environmental matters, offering key services such as environmental monitoring, licensing, and education. The site is well-branded and professionally maintained, reflecting its authoritative status. Technically, the website is built on Drupal 10, leveraging modern web technologies and libraries such as Google Analytics for user behavior insights and CookiesJSR for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with anonymized IP tracking in Google Analytics, indicating a strong privacy posture. However, explicit security headers like X-Frame-Options and Content-Security-Policy are not clearly visible in the provided data, suggesting potential areas for enhancement. No vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response page is noted. Overall, the APA website is a secure, trustworthy, and professionally managed government portal with excellent content quality and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response information, and considering a security.txt file for vulnerability disclosures to further strengthen trust and security posture.

2

2adapt

2adapt.pt

46

2adapt is a specialized company founded in 2017 in Portugal, focusing on climate risk assessment and adaptation services. Their offerings include technological solutions such as climate risk alert systems, soil moisture monitoring, geographic information analysis, and sustainability education. The company collaborates with municipalities and notable organizations like Deloitte and the European Space Agency, positioning itself as a niche player in the climate resilience sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of municipalities and environmental organizations. Technically, the site uses modern frameworks like Bootstrap and integrates analytics tools such as Google Analytics and Plausible. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in policy transparency and incident response readiness. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

M

MARE - Centro de Ciências do Mar e do Ambiente

mare-centre.pt

59

MARE - Centro de Ciências do Mar e do Ambiente is a Portuguese national research center focused on marine and environmental sciences. It operates as a scientific research, technological development, and innovation hub with a broad territorial presence in Portugal. The center targets academic researchers, students, and environmental stakeholders, offering educational programs and engaging in collaborative projects with national and international partners. The website reflects a well-structured and professionally designed platform built on Drupal 7, featuring multilingual support and integration with social media and analytics tools. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent. Contact information is limited on the website, and no dedicated security or incident response policies are published. Overall, the site is trustworthy and serves its educational and research mission effectively.

U

Universidade de Lisboa

ulisboa.pt

62

Universidade de Lisboa is the largest Portuguese university and among the largest in Europe, offering a wide range of undergraduate and graduate programs, research initiatives, and international cooperation. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization, accessibility, and SEO practices. The site uses modern analytics tools such as Google Analytics and Tag Manager, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. WHOIS data confirms the legitimacy and consistency of the domain registration, matching the university's public identity. Overall, the website is professional, trustworthy, and well-maintained, serving a broad academic audience effectively.

C

CLIKT.com

clikt.com

64

CLIKT.com is a small business technology service provider specializing in digital marketing, social media, web design, AI, content management, and e-learning solutions. The company targets small businesses and technology users, leveraging open-source tools to keep costs down and adhering to industry standards. The website presents a professional image with a clear portfolio of client projects and a range of marketing and business tools integrated into its offerings. The domain is mature, registered since 2006, and hosted via GoDaddy, indicating a stable online presence. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, with integrations for Google Analytics and Google Tag Manager for tracking and marketing insights. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in performance and security hardening. The technical stack includes modern web technologies and third-party marketing tools, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security or incident response policies. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data is consistent and trustworthy, with no privacy protection masking the registrant information. Overall, the security posture is moderate but could be enhanced with better policy disclosures and technical controls. The overall risk assessment suggests a generally trustworthy and professional website with minor compliance and security gaps. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response information to improve trust and compliance.

T

Transport Research Centre (CDV)

avcrashes.net

51

The AV Crashes website is a specialized platform providing a unique database and visualization of autonomous vehicle crashes worldwide. It is developed and maintained by researchers at the Transport Research Centre (CDV), indicating a research-focused and authoritative source in the transportation technology sector. The platform targets researchers, policymakers, and the public interested in autonomous vehicle safety data, offering interactive maps and statistical insights. Technically, the site employs modern web technologies including React, Material-UI, Leaflet.js for mapping, and integrates Google Analytics for user metrics. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and CAPTCHA on its feedback form, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trust slightly, but the affiliation with CDV and the professional presentation support its legitimacy. Overall, the site is a credible, well-structured resource with moderate technical maturity and some gaps in privacy compliance and security best practices.

C

Centrum dopravního výzkumu, v. v. i.

czrso.cz

48

The website 'Observatoř bezpečnosti silničního provozu' is a Czech Republic-based platform operated by the Centrum dopravního výzkumu, v. v. i., focused on providing comprehensive information and research data to improve road safety. It serves government bodies, local authorities, and traffic safety professionals by offering data, surveys, educational content, and strategic insights. The site is well-structured with clear navigation and professional design, supporting its role as an authoritative resource in the transportation safety sector. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries for data visualization and user interaction. It uses Google Analytics and Tag Manager for traffic analysis and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks explicit security headers such as CSP and HSTS, which are recommended to enhance protection. No WHOIS data was retrievable, which slightly impacts trust assessment, but the website's content and external references strongly indicate legitimacy. No adult or questionable content is present, making it safe for general audiences. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in security headers, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance.

E

Euro NCAP

euroncap.com

70

Euro NCAP is a leading European organization dedicated to providing consumer information on the safety of new cars through comprehensive crash testing and safety ratings. The website serves as a trusted resource for consumers, automotive professionals, and safety engineers, offering detailed safety assessments, assisted driving gradings, and safety campaign information. The organization positions itself as a key authority in automotive safety within Europe, supporting safer vehicle design and consumer awareness. Technically, the website employs modern web technologies including AngularJS and jQuery, with integration of multiple analytics platforms such as Google Analytics, Matomo, and Microsoft Application Insights. The site is mobile optimized, well-structured, and demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure analytics scripts but lacks explicit security headers and published incident response policies. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and branding appear professional and trustworthy. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website presents a strong business and technical profile with minor security and transparency gaps. Strategic improvements in security headers, incident response disclosure, and WHOIS transparency would further strengthen its security posture and trustworthiness.

S

Savage

verysavage.com

58

Savage is a small, professional branding and digital design collective founded in 2019, offering services including branding, illustration, UI design, and video production. The company targets ambitious companies globally and maintains a strong portfolio with external links to Behance and social media profiles. Technically, the website uses modern front-end technologies such as Bootstrap 5, jQuery, Firebase, and Google Analytics, delivering a responsive and visually engaging user experience. Security posture is moderate with HTTPS implied but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

D

Delta AG

delta.at

52

Delta AG operates as a comprehensive service provider in the construction sector, offering architecture, general planning, construction management, green building, and IT services primarily in Austria. The company positions itself as a trusted partner for building projects, with a professional and consistent online presence targeting business clients in the real estate and construction industries. The website is built on WordPress with modern SEO and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates good compliance with GDPR and marketing transparency, but lacks visible direct contact information and formal security policies. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

M

MagNet Bank Zrt.

magnetbank.hu

72

MagNet Bank Zrt. is a Hungarian financial institution providing a broad range of banking services including retail and corporate accounts, loans, deposits, and digital banking solutions. The bank emphasizes community banking and sustainable finance, targeting individuals, companies, and nonprofit organizations. The website reflects a medium-sized bank with a solid market position in Hungary, offering comprehensive services and community-oriented programs. Technically, the website uses modern JavaScript frameworks like Vue.js and integrates popular analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security-wise, the site enforces HTTPS, employs multiple security headers, and integrates recaptcha for form protection, indicating a strong security posture. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR and other relevant regulations.

N

Norvég Civil Támogatási Alap

norvegcivilalap.hu

51

The website norvegcivilalap.hu represents the Norwegian Civil Support Fund, a non-profit organization supporting civil society projects in Hungary since 2008. The site provides information about grant programs, supported projects, news, and events, targeting Hungarian NGOs and civil society stakeholders. The business model is focused on grant-making and community support, positioning itself as a key player in the Hungarian non-profit sector with a consistent brand presence and historical content.

K

Közös Értékeink Program

kozosertekeink.hu

49

The Közös Értékeink Program website serves as an informational and support platform for a Hungarian non-profit initiative funded by the European Union. It focuses on supporting civil organizations that promote fundamental rights and values within the EU framework. The site is built on Drupal 10, employs modern web technologies, and provides a good user experience with mobile optimization and accessibility features. While the site lacks direct contact information and dedicated security or terms pages, it maintains a moderate security posture with HTTPS and cookie consent mechanisms. The domain registration aligns well with the program's recent launch, and partner organizations add credibility. Overall, the website is professional, trustworthy, and serves its target audience effectively.