Security Directory

The website maxdrive.ovh is a recently registered domain (July 2023) owned by Gruppo Duemila snc, hosting a login portal named MaxDrive. The portal provides user authentication functionality including username/password and OTP multi-factor authentication, indicating a focus on secure access management. However, the site lacks publicly accessible privacy policies, terms of service, or contact information, which limits transparency and user trust. Technically, the site uses standard web technologies including jQuery and Font Awesome, hosted on OVH infrastructure. Security practices include OTP but lack modern security headers and DNSSEC, which are recommended for improved security posture. Overall, the site appears functional but basic, with room for improvement in compliance, security, and user trust features.

E

EasyStore

easystore.co

68

EasyStore is a technology company specializing in providing a unified customer experience platform for retailers and e-commerce merchants. Their platform integrates online stores, point of sale systems, marketplaces, live selling, payment gateways, and customer engagement tools to create seamless shopping journeys across multiple channels. The company targets retailers and brands seeking to unify their customer interactions and enhance loyalty through technology. Technically, the website is built with modern JavaScript frameworks and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, CSRF tokens, and no visible vulnerabilities, though explicit security policies and headers could be improved. The absence of WHOIS data is due to privacy protection, which is justified for this business type. Overall, EasyStore presents a professional, trustworthy, and technologically advanced platform with a strong market presence.

M

Mount-Apps

mount-apps.com

62

Mount Apps is a SaaS company providing white-label engagement tools and apps designed to empower agencies to expand their offerings under their own brand. The platform emphasizes ease of use, allowing agencies to launch client-facing apps without coding. With over 50,000 websites using their Smartarget apps daily, Mount Apps positions itself as a trusted solution in the SaaS white-label market. The company targets agencies and businesses seeking to enhance client engagement and marketing capabilities through branded dashboards and app management tools. Technically, the website is built with modern web technologies including Bootstrap and SVG graphics, hosted via Cloudflare, ensuring good performance and mobile optimization. However, the WHOIS data shows inconsistencies with a future domain creation date, which may indicate privacy protection or data errors. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and functional but could improve transparency and security practices.

R

Region Stockholm

sl.se

62

SL (Storstockholms Lokaltrafik) operates the public transportation network in Stockholm County, Sweden, providing metro, bus, train, tram, and boat services. The website serves as a comprehensive portal for travel planning, ticketing, traffic updates, and customer support, targeting residents and visitors of Stockholm. The business is a large, government-affiliated entity with a strong market position as the primary transit provider in the region. The website content is rich, professionally presented, and accessible, supporting multiple languages and accessibility needs. Technically, the site is built on modern web technologies including React and Next.js, hosted on Microsoft Azure with good performance and mobile optimization. The use of Contentful CMS is inferred, enabling dynamic content management. Security practices include HTTPS enforcement, standard security headers, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and user consent mechanisms. Business credibility is high, supported by official regional government affiliation, clear contact channels, and trust signals such as social media presence and comprehensive content. Overall, SL.se is a trustworthy, well-maintained, and user-friendly website that effectively supports its public transportation mission. Minor improvements could include enabling DNSSEC, publishing a security.txt file, and providing explicit incident response contacts to further enhance security transparency and readiness.

E

European Commission - Directorate-General for Communications Networks, Content and Technology

5gobservatory.eu

70

The European 5G Observatory is an official monitoring platform managed by the European Commission's Directorate-General for Communications Networks, Content and Technology. It provides comprehensive data and insights on 5G technology deployment, market developments, spectrum allocation, and policy progress across the EU and neighboring countries. The platform targets policymakers, researchers, telecom operators, and technology enthusiasts, offering reliable and up-to-date information to support the EU's digital transformation goals. Technically, the website is built on Drupal 10 and leverages the European Commission's design system (ECL), ensuring a modern, accessible, and mobile-optimized user experience. The site integrates standard web technologies and includes social media sharing tools and Matomo analytics for user insights. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, includes cookie consent mechanisms, and links to a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy documentation and incident response contacts could enhance transparency and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with EU privacy regulations. It serves as a key resource for tracking 5G progress in Europe, supporting the Digital Decade connectivity targets.

R

R.A.C.E.

race.pt

61

R.A.C.E. is a small Portuguese company specializing in the promotion, advertising, and rental of competition vehicles, particularly classic and historic racing cars. The company has a notable presence in national classic car racing championships and offers services targeting motorsport enthusiasts and sponsors. The website reflects a focused business model with clear content about their vehicles and achievements, supported by active social media channels. Technically, the site uses modern web technologies including HTTPS, service workers for PWA capabilities, and a responsive design, although some SEO and accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of a privacy policy and terms of service. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

P

Plataforma de Cessação de Contratos

cessacaodecontratos.pt

67

The Plataforma de Cessação de Contratos is a Portuguese government-supported online platform designed to facilitate consumers' access to information regarding their electronic communications contracts and to enable the cessation of such contracts. The platform targets Portuguese consumers seeking to manage or terminate their telecommunications contracts and provides key services including contract information retrieval and contract termination requests. The site is supported by reputable government entities and EU funding programs, which enhances its trustworthiness and market position. From a technical perspective, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, with a responsive design suitable for mobile devices. While the site demonstrates good content quality and user experience, there is room for improvement in accessibility and SEO optimization. No advanced frameworks or CMS platforms were detected, suggesting a custom or lightweight implementation. Security posture is moderate; the site uses HTTPS and modal confirmations for form submissions but lacks visible security headers and explicit security policies. There is no evidence of cookie consent mechanisms or detailed privacy compliance features beyond a basic privacy policy. No contact information or incident response details are provided, which could be improved to enhance user trust and compliance. Overall, the platform presents a low-risk profile with a solid business credibility foundation due to its government backing. Strategic recommendations include implementing comprehensive security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility features to meet compliance standards and improve user trust.

D

DMSB – Deutscher Motor Sport Bund e.V.

bahnsport-deutschland.de

57

Bahnsport Deutschland is the official website for the German motor sports federation's Bahnsport discipline, operated by the Deutscher Motor Sport Bund e.V. The site serves as a comprehensive information hub for enthusiasts, athletes, and clubs involved in motor sports in Germany, providing news, event schedules, results, and official documents. The website demonstrates a solid market position as a national governing body platform with a clear focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and integrates accessibility tools to support diverse user needs. Security posture is strong with HTTPS enforcement, security headers, and bot protection via Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements could be made in transparency around security and vulnerability disclosures.

R

Radio New Zealand

radionz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster, providing comprehensive news, current affairs, and audio content including podcasts and documentaries. The website serves a broad New Zealand audience interested in national and international news, cultural programming, and specialist audio features. RNZ holds a leading market position as a trusted public media entity with a large content offering and consistent branding. Technically, the RNZ website employs a modern SPA architecture with extensive use of JavaScript frameworks and libraries such as D3.js and Observable Plot for data visualization. It integrates advanced monitoring and analytics tools including New Relic, Google Tag Manager, Chartbeat, and Nielsen, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as lack of explicit security incident contact information, suggests room for improvement in privacy compliance and incident response readiness. Overall, RNZ's website is professionally designed, content-rich, and technically sound, reflecting its status as a major public broadcaster. The lack of WHOIS data is consistent with .nz domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing privacy disclosures, security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

N

NetAction.cz

netaction.cz

44

NetAction.cz is a small professional studio based in the Czech Republic specializing in the creation, management, and promotion of websites and e-shops. Established since 2000, the company offers comprehensive services including web development, SEO optimization, and marketing strategies aimed at increasing client revenue and online presence. The website is well-structured and provides detailed service descriptions and client references, indicating a mature business model focused on long-term client relationships. Technically, the website employs JavaScript, jQuery 1.7.2, and Cookiebot for cookie consent management. While the site is accessible and functional, it uses an outdated jQuery version and lacks modern security headers, which could pose security risks. The site includes a cookie consent banner compliant with GDPR, but lacks explicit privacy and terms of service pages, limiting full privacy compliance. Security posture is moderate with HTTPS presumably enabled (though SSL configuration details are not provided), and cookie consent mechanisms in place. However, the absence of security headers and outdated libraries suggest room for improvement. No vulnerabilities or malicious content were detected. The WHOIS data is missing, which reduces domain legitimacy verification and trustworthiness. Overall, the website is professional and business-focused with good content quality and user experience. Strategic recommendations include updating technical components, enhancing security headers, publishing comprehensive privacy and security policies, and improving domain registration transparency to strengthen trust and compliance.

R

Region Stockholm

regionstockholm.se

63

Region Stockholm is a regional government entity responsible for healthcare, public transportation, regional development, and cultural activities within Stockholm County, Sweden. The website serves as a comprehensive portal for residents, providing access to services, news, job opportunities, and contact information. The organization holds a strong market position as the primary regional authority in its sector, offering essential public services to a large population. The site is well-branded, professionally designed, and targets a broad audience including citizens, healthcare users, cultural actors, and job seekers. Technically, the website is built using modern web technologies including React and Next.js, with indications of Episerver CMS usage. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. However, the absence of a vulnerability disclosure program and data protection officer contact details are areas for improvement. Overall, the website presents a low risk profile with high trustworthiness and professionalism. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure channel, and enhancing transparency around data protection roles.

Malmö universitet is a well-established public university located in Malmö, Sweden, founded in 2003. It serves approximately 24,000 students and focuses on innovative, urban, and international education and research that contributes to societal development. The website reflects a professional academic institution with a clear focus on education and research services. Technically, the site uses modern web technologies including React and third-party widgets, hosted on Oracle Cloud DNS. However, there is room for improvement in security posture, including enabling DNSSEC, implementing security headers, and publishing privacy and cookie policies. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the site is credible and trustworthy but could enhance privacy compliance and security best practices.

T

TopSoft UG

smartarget.online

61

Smartarget.online is a technology-focused SaaS platform operated by TopSoft UG, Germany, providing no-code apps and widgets to enhance website user engagement and increase sales. The platform supports multiple languages and integrates with popular platforms like Wix, WordPress, and Ecwid, positioning itself as a versatile solution for website owners and businesses. The website demonstrates a professional design with clear navigation and calls to action, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap and Cloudflare CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

L

LightRocket

lightrocket.com

67

LightRocket operates as a digital asset management (DAM) platform targeting global organizations and media professionals. The company offers a comprehensive DAM system with AI-powered tools, collaboration features, and seamless integrations to enhance digital asset workflows. The website presents a professional and polished image with strong client testimonials and a clear value proposition. Technically, the site uses modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, though some security headers are not detected and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the overall business credibility remains solid based on website content and client references.

M

MSC Abensberg e.V.

msc-abensberg.de

51

MSC Abensberg e.V. is a well-established motorsport club based in Abensberg, Germany, with a rich history dating back to 1928. The club specializes in speedway racing and hosts significant international events such as the FIM Speedway Grand Prix Qualifying rounds. It also emphasizes youth development and community engagement, serving over 500 members. The website reflects a professional and consistent brand image, providing comprehensive event information, news updates, and membership details. Technical infrastructure includes modern web technologies, integration of Google Maps for location services, and Google Analytics for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Overall, the site is user-friendly, mobile-optimized, and trustworthy, supporting the club's community and promotional goals effectively.

The domain observanatura.com is currently a parked domain with no active website content beyond a SedoParking iframe and Google ads. The domain was registered in 2020 and is managed by GMO Internet Group, a reputable registrar. The website lacks any business information, contact details, or privacy and cookie policies, indicating it is not currently used for active business operations. Technically, the site uses basic HTML, CSS, and JavaScript with no CMS or advanced frameworks detected. The hosting is via SedoParking services, and no HTTPS enforcement or security headers are present, which lowers the security posture significantly. There are no signs of malware or phishing, but the lack of security best practices and minimal content results in a low trust score. Overall, the site is a placeholder domain with advertising but no substantive content or business presence.

P

Participa

participa.pt

58

Participa.pt is an official Portuguese government portal dedicated to facilitating public participation in public consultations, primarily related to environmental, energy, and territorial management topics. The website serves as a centralized platform for citizens and entities to access information about ongoing and past public consultations, submit contributions, and follow consultation processes. It also offers educational resources related to environmental awareness. The portal is well-positioned as the authoritative source for public consultation participation in Portugal, supported by government partnerships and official branding. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Select2 and Toastr.js, and integrates Google Analytics for user tracking. The site is mobile-optimized with responsive design and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and performance optimization. Security-wise, the site uses HTTPS ensuring encrypted communication, and the login forms enforce password requirements. Nonetheless, the absence of security headers and lack of published security policies or incident response contacts indicate areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed with a privacy policy and terms of service, but the lack of a cookie consent mechanism is a compliance gap. Overall, participa.pt demonstrates a solid business credibility and trustworthy presence as a government platform. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility features to improve compliance and user trust.

P

Pinterest

pinterest.pt

72

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The pt.pinterest.com site is a localized Portuguese version of the platform, maintaining the brand's global presence and user engagement. The business operates primarily through advertising and e-commerce integrations, positioning itself as a leader in the technology and social media sectors. The website demonstrates a mature digital infrastructure with modern technologies such as React, AWS hosting, and comprehensive security measures including HTTPS and Content Security Policy enforcement. Security posture is strong with no evident vulnerabilities or exposed sensitive data, and privacy compliance is well addressed through detailed policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and enterprise-grade online presence.

The website www.deco.proteste.pt is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any meaningful content, business information, or policies. The page only displays a verification message and no metadata or structured data is present. The technical infrastructure relies on Cloudflare's security services, but no further technology stack or CMS can be identified. Due to the blocking mechanism, no security posture or compliance details can be assessed. Overall, the site is currently not analyzable beyond the WAF detection.

S

skodahrou.cz

skodahrou.cz

49

skodahrou.cz is a Czech language online magazine dedicated to fans of the ŠKODA brand, offering a variety of content including news, reviews, tips, contests, and lifestyle articles related to automotive topics and beyond. The website targets automotive enthusiasts and general readers interested in transport, economy, finance, technology, health, and society. The business model is content publishing with monetization through advertising. The domain is newly registered in late 2024, consistent with the website's fresh content and market entry. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Matomo analytics and Google Adsense for advertising and tracking. The site is hosted on vas-hosting.com servers and shows good mobile optimization and navigation clarity. However, no CMS or advanced frameworks were detected. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and explicit security or incident response policies. No cookie consent mechanism is present, which may affect GDPR compliance. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is average but could be enhanced with standard best practices. The overall risk assessment indicates a legitimate, small-scale media website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and auditing third-party scripts to improve trust and compliance.

L

La Stampa

lastampa.it

65

La Stampa is a prominent Italian news media organization providing comprehensive news coverage on politics, economy, and current events in Italy and worldwide. The website serves a broad general audience with a professional digital news publishing model supported by subscriptions and advertising. Technically, the site employs modern JavaScript libraries, asynchronous loading, and third-party services for analytics and advertising, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility practices, though some accessibility features could be enhanced. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks publicly documented security policies or incident response procedures. Overall, the website is trustworthy and professionally managed, with no signs of blocking or malicious activity.

R

Radio New Zealand

rnz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster providing comprehensive news, current affairs, audio on demand, podcasts, and documentaries. The website serves as a primary digital platform for delivering timely and relevant content to the New Zealand public, positioning itself as a trusted media source. The site features a professional design, clear navigation, and multimedia content tailored to a general audience interested in news and cultural programming. Technically, the website employs modern JavaScript frameworks and libraries, including New Relic for performance monitoring, Google Tag Manager for marketing and analytics, and D3.js for data visualization. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident in meta tags and structured content. Performance is moderate, with asynchronous loading of scripts and CDN usage. From a security perspective, RNZ uses HTTPS with good SSL configuration and includes security best practices such as monitoring and error tracking. However, explicit privacy and cookie policies are not evident in the provided content, and no dedicated security or incident response pages were found. The WHOIS data for the domain is unavailable due to registry policies, but the website's public broadcaster status and content quality provide strong legitimacy. Overall, RNZ's website demonstrates a mature digital presence with strong business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and cookie policies, implement a vulnerability disclosure mechanism, and provide explicit contact information for security incidents.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which serves as a placeholder or offline error page within the browser. It does not represent an actual external website and contains no business or contact information, privacy policies, or terms of service. The page primarily includes JavaScript related to the Chrome offline dinosaur game and minimal HTML structure. Due to the nature of this content, no meaningful business or security posture can be assessed. The absence of HTTPS, security headers, or any external links further confirms that this is not a live website but a browser-generated error page.

A

American Planning Association

planning.org

69

The American Planning Association (APA) operates planning.org as the leading membership organization for professional planners in the United States. The website serves as a comprehensive resource hub offering membership services, professional certification (AICP), publications, conferences, career resources, and policy advocacy. APA holds a strong market position as the largest and most authoritative planning organization, targeting planners, students, employers, and government officials. The website's content is rich, professionally presented, and well-structured to support its diverse audience. Technically, the site employs a modern tech stack including Bootstrap, jQuery, HubSpot marketing tools, and integrates multiple analytics and advertising platforms. The site is mobile-optimized and accessible, with good SEO practices.

C

Chatwee

chatwee.com

59

Chatwee is a well-established technology company founded in 2012, specializing in live chat and instant messaging applications tailored for online communities, virtual events, and team collaboration. The company offers a SaaS model with flexible subscription and pay-per-use plans, serving a broad target audience including mental health support providers, educational webinars, and online gaming communities. Their market position is strong with over 80,000 registered websites and 50 million chat users, supported by multi-language offerings and extensive customization options. Technically, Chatwee employs a modern web technology stack including JavaScript, PHP SDK, and integrates with popular CMS platforms. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The website is well-optimized for mobile devices, SEO, and accessibility, with fast loading times and a professional design. From a security perspective, the site uses HTTPS and displays a SecurityMetrics certification badge, indicating a commitment to secure operations. However, there is room for improvement by enabling DNSSEC, adding security headers, publishing a security policy, and implementing a cookie consent mechanism to enhance GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, Chatwee presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic enhancements in security transparency and privacy compliance would further strengthen their risk posture and customer trust.

A

Axeptio

axeptio.eu

73

Axeptio is a specialized Consent Management Platform (CMP) providing GDPR, CCPA, Law 25, and other international privacy regulation compliance solutions. Trusted by over 80,000 websites and apps, Axeptio offers customizable consent banners, contractual consent modules, mobile SDKs, and compliance tools tailored for brands, publishers, and agencies. The company holds certifications from Google and IAB Europe, positioning itself as a leading player in the privacy compliance SaaS market. Technically, the website is built on HubSpot CMS, leveraging modern JavaScript libraries and integrations with major marketing and analytics platforms such as Google Tag Manager and HubSpot Analytics. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent mechanisms implemented, though explicit security headers could be improved. WHOIS data is privacy protected, which is typical for SaaS companies, and no suspicious patterns were detected. Overall, Axeptio demonstrates a mature digital presence with strong business credibility and compliance focus.

R

Repsol

repsol.pt

69

Repsol Portugal operates as a major energy supplier providing electricity, gas, and related services to individual consumers. The website is well-branded and professionally designed, targeting retail customers with a clear focus on energy solutions and customer benefits. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Adobe Web SDK, and Gigya, and employs security best practices such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies on the accessible pages indicates room for improvement in compliance transparency. Overall, the security posture is strong with proper headers and no detected vulnerabilities, but privacy compliance could be enhanced by publishing comprehensive policies and contact points for incident response.

Ateliér PKO s.r.o., operating under the brand APKO, is a specialized engineering firm focused on road communications and related infrastructure services in the Czech Republic. Their offerings include road design, traffic engineering, expert opinions, safety audits, environmental assessments, and professional translations. The company targets professionals and organizations involved in transportation infrastructure projects, positioning itself as a niche service provider with a clear and consistent brand presence. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. While the site is moderately optimized for performance and basic mobile responsiveness, it lacks advanced accessibility features and modern frameworks. SEO is basic but sufficient for the content presented. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and includes Google Analytics scripts loaded securely. However, it lacks visible security headers and published security or privacy policies, which are important for GDPR compliance and user trust. No forms or input fields were detected on the analyzed page, reducing immediate risk exposure. The WHOIS data aligns well with the website content, indicating legitimacy and consistent registration information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and clearer incident response information to strengthen its security posture and regulatory adherence.

H

Home

castrol.com

77

Castrol's website presents a professional corporate presence focused on lubricants and specialty oils for automotive and industrial sectors. The company positions itself as a global leader embracing innovation and sustainability. The technical infrastructure includes modern tracking and video playback technologies, with good mobile optimization and SEO practices. However, explicit privacy and terms of service pages are not clearly found, and WHOIS data for the domain is unavailable, which raises transparency concerns. Security posture is moderate with HTTPS implied but lacking visible security headers in the provided data. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

Spolek přátel Národního divadla Brno is a voluntary, non-political, and non-profit association focused on promoting theatrical arts including opera, ballet, and drama in Brno, Czech Republic. The organization collaborates closely with the National Theatre Brno and related artistic institutions to deepen public interest and knowledge in performing arts. The website serves as an informational platform showcasing news, events, and publications related to their activities. Technically, the website is built on the eStránky.cz platform using legacy JavaScript libraries such as jQuery 1.12.4 and includes Facebook SDK for social media integration. The site is accessible and provides relevant content but lacks modern technical and security enhancements.

N

E-VÝSTAVY archiv NdB

ndbrno-evystavy.cz

57

The website www.ndbrno-evystavy.cz serves as a digital archival platform showcasing scenography of Shakespearean productions at the National Theatre Brno from 1918 to 1988. It targets cultural enthusiasts and researchers interested in theatrical history. The site offers digital exhibitions with scheduled dates and archival content, positioning itself as a niche cultural resource. Technically, the site is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery, and uses modern web technologies including HTML5, CSS3, and JavaScript. The site is mobile-optimized and provides a cookie consent mechanism, but lacks visible privacy and terms of service pages. Security posture is moderate with HTTPS enforced but missing security headers and no visible incident response or security policy information. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural sites but slightly reduces trust. Overall, the site is functional, professionally designed, and serves its cultural archival purpose effectively.

The website www.ceske-knizni-novinky.cz is a Czech-language informational portal dedicated to providing extensive listings and descriptions of new book releases primarily for the year 2025 and previous years. It targets Czech-speaking readers interested in literature across various categories including women, men, children, youth, and multiple genres such as fantasy, historical, and detective books. The site aggregates content and links to a reputable external book database (CBDB.cz) for detailed book information. The business model is content aggregation and informational service with a niche focus on the Czech book market. The site is small in scale with consistent branding and good content quality.

T

test

dobre-knihy.cz

62

Dobré knihy is a prominent Czech online retailer specializing in books, audiobooks, games, toys, stationery, and gifts. The website offers a large catalog with over 90,000 titles in stock, targeting Czech-speaking customers primarily. The business model is e-commerce retail with a strong focus on book sales and related products. The site features clear navigation, product categorization, and a user-friendly shopping experience. Structured data and contact information are provided to enhance trust and usability. Technically, the website employs modern JavaScript frameworks and tracking technologies including Google Tag Manager, Microsoft Clarity, and Exponea for analytics and marketing. The site is mobile-optimized and accessible, with secure HTTPS connections and validated forms for login and shopping cart functionality. However, some security best practices such as security headers and vulnerability disclosure mechanisms are not evident. From a security perspective, the site enforces HTTPS and cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable concern, reducing domain transparency and trustworthiness. Overall, the security posture is good but could be improved by adding security headers and publishing incident response information. The overall risk assessment indicates a legitimate and professional e-commerce platform with minor transparency and security improvements recommended. Strategic focus should be on enhancing domain registration visibility, implementing security headers, and formalizing security policies to strengthen trust and compliance.

Chatwee Sp. z o.o. is a Poland-based technology company operating the chatwee.com platform, providing chat and communication services primarily targeting businesses and website owners. Established in 2014, the company offers SaaS solutions with user account management, direct marketing, and customer support features. The website content is professional and GDPR compliant, reflecting a mature business with a clear privacy focus. Technically, the website leverages AWS infrastructure and custom JavaScript and CSS, with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS usage and privacy policy adherence, but lacks visible security headers and a published security policy or incident response plan. Overall, the website is trustworthy and well-maintained, with transparent WHOIS data and consistent business information. No critical vulnerabilities or suspicious patterns were detected. Strategic improvements in security policy publication, DNSSEC enablement, and cookie consent mechanisms would enhance compliance and trust. The risk level is low, but continuous monitoring and enhancement of security and privacy practices are recommended to maintain high standards and user confidence.

Közösségfejlesztők Egyesülete is a Hungarian non-profit organization dedicated to community development, social programs, and professional support within civil society and local development sectors. The website serves as an informational and resource platform for community developers and related stakeholders, offering training, publications, and event information. The organization has an established presence since 2014, reflected in the domain age and content maturity. Technically, the website is built on WordPress with a modern tech stack including jQuery and standard JavaScript libraries. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with privacy and cookie policies present, though a cookie consent mechanism is missing. Overall, the website is professional and trustworthy, serving its niche audience effectively.

O

Okidoki Kommunikation AB

transportportal.se

51

Transportportal.se is a Swedish transport research portal operated by or affiliated with Okidoki Kommunikation AB and the Swedish National Road and Transport Research Institute (VTI). It aggregates and provides access to multiple transport research resources including catalogs, databases, and knowledge centers focused on public transit and transport research in Sweden. The portal targets researchers, transport professionals, and stakeholders within the Swedish transport sector. The website is well-branded, consistent, and offers good content quality with clear navigation and relevant resources. Technically, the site uses modern JavaScript libraries such as Modernizr and Masonry for UI enhancements and is hosted on Azure cloud infrastructure, as indicated by DNS records. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected, suggesting a custom or lightweight implementation. From a security perspective, the site lacks DNSSEC and security headers, and no cookie consent mechanism is present, indicating gaps in GDPR compliance and security best practices. The domain registration is consistent and legitimate, with no privacy protection, and the domain age aligns with the business history. No forms or user input fields reduce attack surface, and no vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is a credible and professional resource for transport research in Sweden but would benefit from enhanced security headers, GDPR compliance improvements, and cookie consent implementation to strengthen its security posture and privacy compliance.

P

PIARC (World Road Association)

piarc.org

52

PIARC (World Road Association) is a well-established international non-profit organization founded in 1909, serving as a global forum for knowledge exchange on roads and road transport policies. It has a strong market position with over 120 member governments and consultative status to the United Nations Economic and Social Council. The website reflects a mature digital presence with professional design, comprehensive content, and active engagement through seminars, congresses, and publications. Technically, the site uses modern analytics tools and JavaScript frameworks, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy and terms policies. Overall, the site is trustworthy and authoritative in its domain, though improvements in transparency and security documentation are recommended.

E

European Transport Safety Council

etsc.eu

46

The European Transport Safety Council (ETSC) operates as a Brussels-based independent non-profit organization dedicated to reducing deaths and injuries in European transport. The website serves as a comprehensive platform for advocacy, research dissemination, policy recommendations, and public engagement on road safety issues. It targets policymakers, transport safety professionals, media, and the general public interested in transport safety. ETSC holds a recognized position in the European transport safety sector, offering key services including research publications, policy advocacy, and organizing safety-related projects and events. Technically, the website is built on WordPress with a modern tech stack including JavaScript, PHP, and various plugins for SEO, caching, and analytics. It demonstrates good performance, mobile optimization, and accessibility. The site uses HTTPS with a good SSL configuration and employs security best practices such as CAPTCHA on forms and cookie consent mechanisms. However, some security headers are not explicitly detected and could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent, and GDPR adherence. Contact information is clearly provided, enhancing trust and credibility. No incident response or vulnerability disclosure policies are found, which could be areas for future enhancement. Overall, ETSC's website is professional, trustworthy, and well-aligned with its mission. It effectively balances content quality, technical implementation, security, and privacy compliance, resulting in a high AI score of 87. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular security audits to sustain and improve its security posture.

The Victoria Transport Policy Institute is an independent Canadian research organization specializing in innovative and practical transportation solutions. Established in 1999, it offers free resources, consulting services, and publishes research to improve transportation planning and policy analysis. The website serves transportation planners, policymakers, researchers, and the public with a focus on sustainable and equitable transportation. Technically, the site is custom-built with classic HTML, JavaScript, and CSS, hosted on Island Hosting, and integrates Mailchimp for marketing. While the site content is rich and professionally presented, technical modernization opportunities exist, including improved mobile optimization and accessibility. Security posture is moderate; domain management is sound with transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is trustworthy and credible but would benefit from enhanced security and privacy practices.

G

GTO Solutions s.r.o.

jdvm.cz

48

Skutočnosť.sk is an online Slovak informational portal operated by GTO Solutions s.r.o., focusing primarily on transportation-related news, including traffic updates, toll information, fuel prices, and travel advice. The website targets Slovak-speaking drivers and travelers seeking up-to-date and practical information for navigating road transport in Slovakia and neighboring countries. The business model appears to be content publishing monetized through advertising networks such as Google Adsense. The site maintains a consistent brand presence with a clear navigation structure and regularly updated content.

The website cdvplus.cz is currently a parked domain with no active business content or services. It primarily serves as a placeholder page indicating the domain may be for sale. The site is heavily monetized through advertising scripts and tracking pixels from Google Adsense and third-party providers. There is no meaningful business information, contact details, or user engagement features present. The domain is newly registered in December 2024 and uses parking name servers, consistent with domain resale or parking services. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with integration of Google Adsense Domains CAF scripts and Cloudfront CDN for content delivery. The site shows basic mobile optimization but lacks accessibility and SEO best practices. No CMS or advanced frameworks are detected. Performance is moderate but limited by the minimal content and advertising load. Security posture is weak with no visible HTTPS enforcement or security headers. There are no forms or inputs to evaluate for secure data handling. Privacy compliance is minimal with only a basic privacy policy accessible via a popup link and no cookie consent mechanism. No incident response or security policies are disclosed. The WHOIS data confirms the domain is very new and consistent with a parked domain profile. Overall, the site presents a low trust profile with poor content quality and minimal business credibility. It is recommended to implement HTTPS, add clear business and contact information, provide comprehensive privacy and cookie policies with consent mechanisms, and reduce excessive third-party tracking to improve user trust and compliance.

ELEVUP is a Czech-based technology company specializing in advanced business and software development services. Their offerings include full stack development, mobile and web development, DevOps, cloud engineering, UX/UI design, and emerging technologies such as AI, AR/VR, and IoT. The company serves a diverse client base including media, automotive, fintech, and logistics sectors, with notable clients like ŠKODA Auto and RENOMIA. The website demonstrates a modern technical infrastructure built on React and Next.js, indicating a mature digital presence. However, a client-side application error on the homepage negatively impacts user experience. Security posture is moderate with the presence of HTTPS and cookie consent but lacks explicit security headers and incident response contacts. The absence of WHOIS data raises concerns about domain registration legitimacy, though the professional certifications and client portfolio support business credibility. Strategic improvements in security practices and domain verification are recommended to enhance trust and compliance.

F

FORVIA

forvia.com

69

FORVIA is a major global technology supplier in the automotive industry, ranking as the 7th largest worldwide. The company emphasizes sustainability and innovation, offering a broad portfolio of automotive technologies including electrification, automated driving, and sustainable materials. The website is professionally designed using Drupal 10, with modern web standards and analytics via Matomo. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not published. WHOIS data is missing, which is unusual for a corporate domain and suggests privacy protection or recent registration. Overall, the site presents a credible and professional business presence with room for improvement in transparency and direct contact information.

I

Infor Z

quotasonline.pt

57

Quotas Online is a Portuguese SaaS platform developed by Infor Z that provides streamlined management solutions for associations, clubs, and collectives. The platform offers key services such as member management, quota billing, digital payment processing, and accounting of income and expenses, targeting small to medium-sized organizations primarily in Portugal. The website is professionally designed, mobile-optimized, and provides clear navigation and pricing information, supporting a positive user experience. Technically, the website leverages modern web technologies including JavaScript, jQuery, SweetAlert2, and integrates Tawk.to for live chat support. The platform appears to be built on ASP.NET MVC, indicating a robust backend framework. Performance and mobile optimization are good, though SEO and accessibility could be further improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The site does not show signs of WAF or blocking mechanisms, allowing full content access. Privacy and cookie policies are present and GDPR compliance is indicated, though incident response and vulnerability disclosure information are absent. WHOIS data aligns well with the website's business claims, supporting legitimacy. Overall, Quotas Online presents a trustworthy and professional online presence with a solid technical foundation and good privacy practices. Strategic improvements in security headers, incident response transparency, and SEO could enhance the platform's security and market competitiveness.

Fundação "la Caixa" is a well-established non-profit foundation based in Portugal with over a century of history dedicated to social and cultural initiatives. The website reflects a professional and consistent brand presence, targeting a general audience interested in social welfare and cultural projects. The foundation operates with a large organizational size and maintains a reputable market position within the non-profit sector. Technically, the website is built on the Liferay CMS platform using modern technologies such as React and integrates widely used analytics and marketing tools like Google Analytics and Google Tag Manager. The site is mobile optimized and demonstrates good SEO and accessibility practices, although accessibility could be further improved. Security-wise, the website enforces HTTPS, uses security headers, and implements a cookie consent mechanism, indicating a good security posture. However, it lacks explicit privacy policies, terms of service, and incident response information, which are recommended for compliance and transparency. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

A

Alibaba Cloud Computing (Beijing) Co., Ltd.

pifyapp.com

60

PifyApp operates as a Shopify app provider focused on enabling merchants to build customized Shopify stores. The website serves primarily as a demo store showcasing their customization capabilities, including announcement bars and form builders. The business targets Shopify store owners seeking enhanced store personalization and promotional tools. Technically, the site is built on the Shopify platform using standard Shopify Liquid templates, JavaScript, and third-party tools like PageFly for page building. Hosting is provided by Alibaba Cloud with DNS managed via Cloudflare, ensuring reliable infrastructure. Security posture is moderate with HTTPS enabled and use of hCaptcha for form protection; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is functional but basic in content and security maturity, suitable for a small e-commerce SaaS provider.

D

Datová kostka

dataovozidlech.cz

49

The website dataovozidlech.cz serves as an official portal providing access to vehicle registration data for the Czech Republic. It offers open data compliant with national legislation, vehicle technical information search, individual data issuance, and statistical summaries. The site is positioned as a government or government-affiliated service, targeting researchers, businesses, and the general public interested in vehicle data. The platform is moderately sized and founded in 2019, reflecting a stable operational history. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with deferred script loading to optimize performance. Hosting is provided by Active24, a known Czech hosting provider. The site is mobile-optimized with a clear and consistent branding approach. However, there is room for improvement in SEO, accessibility, and security headers implementation. From a security perspective, the site uses HTTPS (implied by domain and modern standards though SSL details are not explicit), but lacks visible security headers and formal privacy or cookie policies. No contact information for security incidents or data protection officers is provided, which limits transparency and compliance with GDPR best practices. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

E

Elektromobilní platforma, z.s.

eplatforma.cz

59

The Czech E-mobility Platform is a non-profit technological platform dedicated to supporting the development of e-mobility, charging infrastructure, and related scientific research and education within the Czech Republic. It serves as a key partner to government ministries, coordinating legislative, communication, and educational efforts to advance the National Clean Mobility Action Plan. The platform's membership includes representatives from automotive, energy, scientific, research, and governmental sectors, positioning it as a central hub for electromobility initiatives in the country. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for hosting static assets. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no significant technical issues detected. The site employs HTTPS with a strong SSL configuration, ensuring secure communications. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. No contact information or incident response channels are provided, which limits transparency and user trust. The absence of WHOIS data reduces confidence in domain registration legitimacy, although the website content and hosting appear professional and consistent with the stated mission. Overall, the platform presents a credible and professional front for e-mobility development in the Czech Republic but would benefit from enhanced transparency through published privacy policies, contact information, and security best practices. Addressing these gaps would improve trustworthiness and compliance with data protection regulations.

E

EV FireSafe

evfiresafe.com

58

EV FireSafe is a small Australian-based educational resource focused on providing free electric vehicle fire safety knowledge targeted at emergency responders. The website is professionally designed using the Wix platform and offers relevant content to a niche audience in the energy and transportation sectors. The business model centers on information dissemination and education without evident commercial transactions. Technically, the site leverages Wix's infrastructure with standard JavaScript polyfills and is hosted securely with HTTPS enabled. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS but lacks advanced security headers and privacy compliance mechanisms. Overall, the site is functional and trustworthy in content but requires improvements in compliance and domain registration transparency.

S

Spirii

spirii.com

68

Spirii is a Denmark-based company specializing in EV charging solutions and eMobility business platforms. Their offerings include a Charge Point Management System, an EV charging app, and a suite of services such as branded solutions, financial services, grid services, and operational support. The company operates across multiple European countries with dedicated offices and subsidiaries, positioning itself as an experienced and reliable player in the eMobility sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the presence of VAT registration and detailed business information supports the company's credibility. Overall, Spirii presents a professional and trustworthy digital presence with room for improvement in transparency around security policies and domain registration details.