Security Directory

A

Audika New Zealand

audika.co.nz

59

Audika New Zealand is a healthcare service provider specializing in hearing aids, hearing tests, and audiologist consultations. The company operates multiple clinics across New Zealand and offers flexible payment options, positioning itself as a trusted provider in the hearing care market. The website is professionally designed, mobile-optimized, and provides clear pathways for booking appointments and accessing services. Technically, the site employs modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a public security policy and incident response information suggests room for improvement. WHOIS data is not publicly available, likely due to privacy protection, but the website content and branding strongly support legitimacy. Overall, the site presents a low-risk profile with good business credibility and compliance with privacy standards.

V

Virgin Red Ltd

virginred.com

72

Virgin Red Ltd operates a comprehensive loyalty rewards platform under the Virgin brand, targeting consumers primarily in the UK and US. The platform offers over 150 ways to earn points and more than 200 ways to spend them, including travel, retail, food & drink, and experiences. The service is free to join and accessible via web and mobile app, with integration to Virgin Atlantic Flying Club and Virgin Wines accounts. The website demonstrates a mature digital infrastructure using modern technologies such as React, Google Tag Manager, Hotjar, and Branch.io, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though public security policies and incident response contacts are not disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site reflects a professional, trustworthy, and well-branded digital presence consistent with Virgin Group standards.

D

DMarket

dmarket.com

69

DMarket operates as a specialized online marketplace focused on trading in-game virtual items such as skins for popular games including CS2, TF2, Dota 2, and Rust. The platform targets gamers and virtual asset traders, offering a secure and extensive inventory with features like instant sales, inventory refresh, and a mobile application for trading on the go. The website demonstrates a strong market position supported by a large user base and active community engagement. Technically, the site is built on modern frameworks such as Angular and integrates multiple analytics and marketing tools, ensuring a responsive and performant user experience across devices. Security posture is robust with HTTPS enforcement and use of security-focused browser extensions, although explicit security policies and incident response contacts are not publicly visible. Overall, the platform presents a professional and trustworthy environment for virtual item trading, with recommendations to enhance privacy compliance and transparency.

Replacing Animal Research is a UK-based charitable organization founded in 1969 dedicated to ending animal testing by promoting human-relevant, non-animal research methods. The organization funds innovative scientific projects, educates stakeholders, and advocates for alternatives to animal research. The website reflects a professional and consistent brand presence targeting scientists, researchers, and animal welfare supporters. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The domain is newly registered in 2024, which is inconsistent with the organization's long history, suggesting a recent domain acquisition or rebranding. Overall, the site is trustworthy, well-maintained, and compliant with basic privacy and security standards, but could enhance transparency by publishing explicit privacy and terms policies.

T

Thurbo AG

thurbo.ch

65

Thurbo AG is a regional railway company operating in Eastern Switzerland and parts of Southern Germany, providing passenger rail services primarily targeting commuters and regional travelers. The company is a subsidiary of the Swiss Federal Railways (SBB), positioning it as a key player in the regional transportation sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation, supporting a positive user experience. The technical infrastructure includes modern tracking and marketing tools such as Google Tag Manager, Adobe DTM, Facebook Pixel, and Hotjar, alongside a robust cookie consent mechanism via OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. However, the site lacks a public security policy and incident response contact details, which are recommended for enhanced transparency and trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website.

F

FC St.Gallen 1879

fcsg.ch

75

FC St.Gallen 1879 is a historic Swiss football club with a well-established digital presence, including live match tracking, news, video content, and an e-commerce platform for merchandise. The website is built on Shopify, leveraging modern web technologies and third-party analytics tools to engage fans and customers effectively. The technical infrastructure is solid, with good mobile optimization and performance, although some SEO and accessibility aspects could be improved. Security posture is generally strong with HTTPS and no exposed sensitive data, but explicit security policies and headers could be enhanced. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site reflects a professional sports organization with a medium-sized digital footprint and good business credibility.

T

TicketSpice

ticketspice.com

74

TicketSpice is a technology company specializing in event ticketing software designed to help event organizers, attractions, nonprofits, and reservation managers sell tickets online efficiently and affordably. Positioned as a leading SaaS provider, TicketSpice offers a comprehensive suite of features including a drag-and-drop event page builder, mobile ticketing, ticket scanning, reserved seating, add-ons sales, and fraud prevention. The platform emphasizes ease of use, customization, and cost savings compared to competitors. Technically, the website is built on modern web technologies including Webflow CMS, jQuery, and integrates multiple analytics and marketing tools such as Google Tag Manager, Hotjar, and TikTok Pixel. The site is mobile optimized, well-structured, and professionally designed, providing an excellent user experience. Security posture is good with HTTPS enforced and some security headers present, though there is room for improvement in explicit security policies and headers. Privacy compliance is addressed with a comprehensive privacy and cookie policy and GDPR indicators. However, the absence of WHOIS domain registration data is a notable anomaly that reduces domain trustworthiness. Overall, TicketSpice presents a professional and trustworthy online presence with strong business credibility but should address domain registration transparency and enhance security disclosures.

S

SalesAPE.ai

salesape.ai

67

SalesAPE.ai is a technology company specializing in AI-powered sales assistants designed to automate lead qualification, engagement, and appointment booking for small to medium-sized businesses. The platform integrates seamlessly with popular CRM systems and leverages conversational AI to mimic top sales team members, enabling businesses to increase sales efficiency and conversion rates. Backed by significant venture capital funding, SalesAPE.ai positions itself as a scalable and cost-effective solution in the sales automation market. The website demonstrates a mature digital presence with comprehensive content, professional design, and strong trust signals including customer testimonials and case studies. Technically, the site is built on modern frameworks such as Webflow and integrates multiple marketing and analytics tools, ensuring robust performance and user experience. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business present a credible and professional front with low risk indicators.

K

KeepCart

keepcart.co

55

KeepCart is a SaaS company specializing in protecting e-commerce stores, particularly Shopify merchants, from coupon code leaks and abuse caused by coupon extensions and duplicate customer accounts. Their product suite includes coupon extension blocking, leak alerts, and duplicate customer blocking, aimed at increasing merchant margins by preventing revenue loss. The company positions itself as a cost-effective and more comprehensive alternative to competitors like CleanCart, with a focus on ease of installation and customer support. Technically, the website is built on Webflow CMS and integrates with Shopify, leveraging modern web technologies such as Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and a public security policy or incident response contact, which are areas for improvement. The WHOIS data is privacy protected, which is common for SaaS businesses but limits transparency. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, KeepCart presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance mechanisms and security best practices would further enhance their security posture and trustworthiness.

R

Rīgas Valsts Tehnikums

rvt.lv

51

Rīgas Valsts Tehnikums (RVT) is a Latvian state technical school providing vocational education across multiple technical and commercial disciplines. The institution targets students and adult learners, offering a broad range of programs supported by EU projects such as Erasmus+. The website reflects a well-established educational entity with a clear focus on technical training and community engagement. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and security practices including HTTPS and security headers. However, the absence of a visible cookie consent mechanism and explicit security policies indicates room for compliance improvement. Overall, the site is professional, secure, and trustworthy, with active social media presence and clear contact channels.

J

Jisc

jisc.ac.uk

75

Jisc is a UK-based organization focused on providing digital technology and data services to the tertiary education, research, and innovation sectors. The website demonstrates a strong market position as a leading provider of training, consultancy, connectivity, cloud, AI, cyber security, and data analytics services tailored for educational institutions. The digital infrastructure is modern, leveraging React, Next.js, and Material-UI, with integration of analytics and tracking tools such as Matomo, Google Analytics, and Hotjar, all managed with user consent mechanisms. Security posture is robust with HTTPS, Content Security Policy, and bot protection via hCaptcha, though explicit security policies and incident response details are not published. Overall, the website is professional, accessible, and trustworthy, supporting a large, established organization in the UK education sector.

S

Sefinance

sefinance.lv

60

Sefinance is a Latvian financial services company specializing in providing various loan products including consumer loans, business loans, refinancing, and secured loans. With over 14 years of experience and more than 260,000 satisfied customers, it holds a strong position in the Latvian lending market. The website is professionally designed using modern web technologies such as Next.js and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and Cloudflare DNS used, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates good business credibility and technical maturity.

A

Armac Martin

armacmartin.co.uk

68

Armac Martin is a UK-based luxury brand specializing in solid brass cabinet hardware and interior accessories, with a heritage dating back to 1929. The company operates an e-commerce platform built on Shopify, targeting consumers and businesses seeking high-quality, luxury hardware products. The website demonstrates a professional design and consistent branding, reflecting its market position as a premium manufacturer and retailer. Technically, the site leverages modern e-commerce technologies including Shopify's platform, Google Analytics 4, Facebook Pixel, and other marketing and tracking tools, ensuring a robust digital presence. Security measures such as HTTPS, security headers, and cookie consent mechanisms are properly implemented, contributing to a strong security posture. However, the absence of a publicly accessible privacy policy and terms of service pages, along with the failure to retrieve WHOIS data due to domain naming rules, introduces some concerns regarding transparency and domain legitimacy. Overall, the site is functional, secure, and professionally maintained but would benefit from enhanced compliance documentation and clearer domain registration information.

E

Exostar

exostar.com

75

Exostar operates a secure and compliant collaboration platform targeting regulated industries such as aerospace, defense, healthcare, life sciences, and consumer services. The company provides a broad suite of solutions including cybersecurity, compliance management, supply chain collaboration, and clinical trials management. Their platform supports enterprise customers with secure access management and compliance readiness tools, positioning Exostar as a trusted partner in highly regulated sectors. Technically, the website is built on WordPress with modern SEO and analytics tools, demonstrating digital maturity and good performance. Security posture is strong with HTTPS enforcement and secure login portals, though explicit security headers and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy enterprise business, though the absence of WHOIS data reduces transparency and slightly impacts trust. Strategic recommendations include publishing security headers, incident response contacts, and vulnerability disclosure policies to enhance security posture and trust.

M

Modemedia

modemedia.com.au

46

Modemedia is a well-established Australian creative branding and digital agency based in Parramatta, with over 25 years of experience in growing brands through strategic design and storytelling. The company offers a comprehensive suite of services including strategy, design, digital marketing, retail design, and brand management, targeting businesses seeking to enhance their brand presence. The website reflects a professional and consistent brand image, supported by active social media channels and structured data for SEO. Technically, the website is built on WordPress with modern plugins and tools such as Slider Revolution, WPBakery Page Builder, and tracking integrations like Facebook Pixel and Hotjar. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers and explicit privacy and cookie policies. The absence of WHOIS registration details limits the ability to fully verify domain legitimacy, though the website content and social presence support its authenticity. Tracking and marketing tools are used with some GDPR prior consent mechanisms, but explicit privacy and cookie policies are not found, indicating room for compliance improvement. Overall, Modemedia presents a credible and professional digital presence with solid business and technical foundations. Enhancing security headers, privacy compliance, and WHOIS transparency would further strengthen trust and reduce risk.

L

Lindenhofgruppe AG

lindenhofgruppe.ch

62

Lindenhofgruppe AG is a large healthcare provider based in Bern, Switzerland, offering comprehensive and interdisciplinary basic care with approximately 2500 employees across three locations. The website presents detailed information about their medical specialties, patient services, family support, and career opportunities, positioning them as a well-established regional healthcare institution. Technically, the site is built on Weblication® CMS and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, TikTok Pixel, and LinkedIn Insight Tag, reflecting a moderate level of digital maturity. The website uses HTTPS with good security headers and secure forms, but lacks explicit privacy and cookie policies, which impacts privacy compliance. Overall, the security posture is solid with no critical vulnerabilities detected, but improvements in transparency and compliance documentation are recommended. The domain WHOIS data is consistent with the business claims, supporting the legitimacy of the website.

N

Netomi

netomi.com

77

Netomi is a leading enterprise technology company specializing in AI-powered conversational customer experience solutions. Their platform leverages advanced AI, including sanctioned generative AI and large language models, to automate and enhance customer service across multiple channels. The company positions itself as a market leader with a strong focus on brand safety, security, and seamless integration with existing business systems. The website demonstrates a mature digital infrastructure using WordPress CMS, modern marketing and analytics tools, and strong SEO and accessibility practices. Security posture is robust with HTTPS, multiple certifications (SOC2, ISO 27001, GDPR, HIPAA, etc.), and secure form handling. However, the domain WHOIS data is not publicly available, which slightly impacts transparency but does not detract from the overall trustworthiness given the professional site content and strong business signals. Overall, the site is well-designed, content-rich, and targets enterprise clients seeking AI-driven customer service solutions.

E

Equinox Hotels

equinox-hotels.com

70

Equinox Hotels operates a luxury 5-star hotel brand with a strong emphasis on wellness, fitness, and premium hospitality services, primarily in New York City. The business model integrates hotel accommodations with spa services, on-site dining, and exclusive access to the Equinox Club, targeting affluent travelers seeking a holistic luxury experience. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern JavaScript frameworks and integrates multiple third-party analytics and marketing tools, demonstrating digital maturity. Security posture is adequate with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and well-positioned in the luxury hospitality market.

A

American Alpine Club

americanalpineclub.org

66

The American Alpine Club is a well-established 501(c)(3) nonprofit organization founded in 1902, dedicated to supporting climbers through resources, advocacy, and community engagement. The website reflects a mature digital presence with clear business information, membership services, and an integrated e-commerce store. The organization targets climbers and outdoor enthusiasts primarily in the United States, positioning itself as the largest climbing community in the country. Technically, the site is built on Squarespace with Shopify integration, leveraging modern analytics and marketing tools. Security posture is good with HTTPS enforced and domain transfer protections, though improvements such as enabling DNSSEC and HSTS are recommended. Privacy compliance is addressed with a cookie banner and privacy policy, but terms of service and security policies are absent. Overall, the site is professional, trustworthy, and serves its audience effectively.

N

NORQAIN

norqain.com

69

NORQAIN is an independent Swiss watch brand established in 2018, specializing in luxury Swiss made watches and related merchandise. The company operates a professional e-commerce platform powered by Shopify, targeting watch enthusiasts and outdoor explorers. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS, clientTransferProhibited domain status, and form protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-positioned in its niche market.

P

PAPÍRNY BRNO a.s.

papirnybrno.cz

42

PAPÍRNY BRNO a.s. is a leading Czech manufacturer and retailer specializing in school and office paper products, including notebooks, diaries, paper bags, and gastro packaging. The company operates an e-commerce platform offering a wide range of paper goods targeting schools, offices, and gastronomy sectors. Their market position is strong within the Czech Republic, supported by a clear brand presence and active social media engagement. The website is professionally designed with good navigation and mobile optimization, reflecting a medium-sized enterprise with a solid digital infrastructure. Technically, the site uses modern web technologies and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar, managed via Google Tag Manager. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security headers and a published security policy would enhance their security maturity. WHOIS data is unavailable, limiting domain trust assessment, but the business information on the site is transparent and credible. Overall, the website is safe, GDPR compliant, and well-positioned for its target audience.

K

Kinet s.r.o.

vladeko.cz

50

Vladeko.cz is a Czech-based company specializing in the manufacturing and retail of wooden garden furniture and structures, including pergolas, altány, garden houses, and children's playground equipment. The company operates both a physical showroom in Tachlovice and an e-commerce platform, targeting homeowners, municipalities, and businesses interested in quality wooden garden products. Their business model combines custom woodworking services with online sales, supported by design, visualization, and installation offerings. The website reflects a mature digital presence with a clear product catalog and user-friendly navigation. Technically, the website is built on the PrestaShop CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and Cookiebot for consent management. The site is served over HTTPS with a good SSL configuration, though some security headers could be improved. Performance is moderate, with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits transparency, but the presence of physical contact information and partner links supports legitimacy. Overall, Vladeko.cz presents a trustworthy and professional online presence for a medium-sized retail and manufacturing business in the garden furniture sector. Strategic improvements in security headers and transparency around privacy and incident response would enhance their security posture and compliance standing.

M

M2C

m2c.eu

46

M2C is an established international group specializing in integrated facility management, security services, and digital innovation for building management. Operating in 13 European countries and the USA, M2C offers comprehensive services including maintenance, cleaning, security, and advanced technology solutions to optimize building operations. The company also invests in software development through its subsidiary Good Sailors, which emphasizes social responsibility by employing disabled developers. M2C recently entered the Prague Stock Exchange, signaling growth and investor interest. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Hotjar. The site is well-structured, mobile-optimized, and uses multiple languages to serve a broad audience. Security practices include HTTPS and asynchronous loading of tracking scripts, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of a visible privacy policy and terms of service reduces privacy compliance scores. The WHOIS data is privacy protected, which is common but limits transparency. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy disclosures. Strategically, M2C should enhance its privacy and legal policy visibility, strengthen security headers, and maintain rigorous audits of third-party scripts to uphold trust and compliance in a competitive market.

J

JPJ Forest, s.r.o.

jpjforest.cz

48

JPJ Forest, s.r.o. is a Czech company specializing in the import, manufacture, and sale of professional forestry, agricultural, and municipal machinery since 2009. The company offers a wide range of high-quality products including forestry trailers, hydraulic cranes, wood splitting machines, and hydraulic components. It serves a diverse clientele including private forest owners, agricultural businesses, and municipal service providers primarily in the Czech Republic and Slovakia. The website reflects a mature digital presence with comprehensive product information, customer references, and support services including financing and subsidies. Technically, the site is built on WordPress with modern web technologies and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security posture is solid with HTTPS enforced and GDPR-compliant privacy and cookie policies, although some security headers and explicit incident response information are missing. The absence of WHOIS data limits domain trust verification, but the overall business credibility and professional web presence suggest legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance.

J

JDC Entwine

jdcentwine.org

62

JDC Entwine is a non-profit organization focused on building a generation of young Jews who lead with global Jewish responsibility. The website highlights travel programs, leadership fellowships, community engagement, and educational toolkits aimed at young Jewish audiences worldwide. The organization is affiliated with the American Jewish Joint Distribution Committee (JDC), which serves as its parent entity. The website is professionally designed using WordPress and the Divi theme, incorporating modern web technologies and plugins to enhance user experience and functionality. It includes integrations with Google Analytics and Hotjar for user behavior tracking and Mailchimp for newsletter management. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. The WHOIS data is unavailable or privacy protected, which is common for non-profits, but the website's branding and external references support its legitimacy. Overall, the site is safe, well-structured, and serves its target audience effectively, though improvements in security headers and privacy compliance would enhance trust and resilience.

S

SYNOT TIP, a.s.

synottip.sk

66

SYNOT TIP, a.s. operates a professional online sports betting and gaming platform primarily targeting Slovak customers. The website offers a variety of betting options including live bets, virtual games, and promotions, positioning itself as a leading player in the Slovak market. The company branding is consistent and the site content is relevant and professionally presented. Technically, the site uses a modern tech stack including ASP.NET, jQuery, and integrates third-party services such as Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. Security posture is solid with HTTPS enforced, anti-CSRF protections, and bot detection mechanisms in place. However, explicit security policies and incident response contacts are not published, and no terms of service page was found. Overall, the site is trustworthy and compliant with GDPR, with a comprehensive cookie consent mechanism. The domain WHOIS data aligns well with the business claims, reinforcing legitimacy.

E

EasyStore

easystore.co

68

EasyStore is a technology company specializing in providing a unified customer experience platform for retailers and e-commerce merchants. Their platform integrates online stores, point of sale systems, marketplaces, live selling, payment gateways, and customer engagement tools to create seamless shopping journeys across multiple channels. The company targets retailers and brands seeking to unify their customer interactions and enhance loyalty through technology. Technically, the website is built with modern JavaScript frameworks and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, CSRF tokens, and no visible vulnerabilities, though explicit security policies and headers could be improved. The absence of WHOIS data is due to privacy protection, which is justified for this business type. Overall, EasyStore presents a professional, trustworthy, and technologically advanced platform with a strong market presence.

E

Ergomotion® Plus

ergomotionplus.com

71

Ergomotion® Plus operates an e-commerce platform specializing in smart beds designed to improve sleep quality and health. The website targets consumers interested in advanced sleep solutions, offering a range of smart beds through a Shopify-based online store. The business positions itself in a niche market with a focus on comfort and health benefits, leveraging multilingual support to cater to European markets. The company employs modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Trustpilot to enhance customer engagement and trust. Technically, the website is built on the Shopify platform using the Dawn theme, ensuring a responsive and user-friendly experience across devices. The infrastructure includes integrations with multiple third-party services for marketing, analytics, and cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are available. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which impacts overall trustworthiness. Overall, Ergomotion® Plus presents a professional and functional e-commerce presence with good privacy compliance and marketing sophistication. The main risks relate to domain registration opacity and limited published security policies. Strategic improvements in security transparency and direct contact information would enhance trust and compliance.

M

Motul

motul.com

68

Motul is a well-established company specializing in high-performance engine oils, lubricants, and vehicle care products for a wide range of vehicles including cars, motorcycles, trucks, and bicycles. The website reflects a strong market position with a comprehensive product offering and multiple sales channels including B2B and e-commerce platforms. The brand is supported by consistent and professional digital presence with clear navigation and rich content. Technically, the site is built on modern frameworks such as Next.js and React, integrating advanced analytics and marketing tools with user consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the brand recognition and content quality. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies to further strengthen trust and compliance.

A

Austroads

austroads.com.au

63

Austroads is a government-related organization focused on supporting efficient, reliable, and safe road transport across Australia and New Zealand. It provides authoritative guidance, research, and standards covering drivers, vehicles, road safety, infrastructure, environment, and transport operations. The website serves government agencies, transport authorities, health professionals, and industry stakeholders with comprehensive resources including guides, publications, data services, and training programs. The organization holds a leading market position as a collaborative body for road transport standards in the region. Technically, the website is built on the Squiz Matrix CMS platform and leverages modern web technologies such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and DataTables. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the website enforces HTTPS and employs secure forms with validation. However, it lacks DNSSEC, a published security policy, incident response contacts, and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered by the Department of Finance, consistent with its government affiliation, and domain status codes indicate protection against unauthorized changes. Overall, Austroads presents a trustworthy, professional, and authoritative online presence with a strong business credibility and technical foundation. Strategic improvements in privacy compliance and security transparency would further enhance its posture and user trust.

K

Kino Blansko

kinoblansko.cz

55

Kino Blansko is a local cinema in Blansko, Czech Republic, with a rich history spanning over a century. The website provides detailed information about film screenings, events, and ticket sales, targeting families and general audiences. The business model centers on cinema operations, event hosting, and gift voucher sales, positioning itself as a key entertainment venue in the region. Technically, the site leverages modern frameworks such as Next.js and Material-UI, ensuring a responsive and user-friendly experience. The presence of Hotjar indicates some level of user behavior analytics. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy and cookie policies are present and GDPR compliant, though no explicit cookie consent mechanism is detected. Overall, the site is professional and trustworthy, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, adding incident response info, and implementing cookie consent mechanisms.

V

Veselá věda kroužky a tábory, SVČ z.ú. / Veselá věda středisko volného času s.r.o.

veselaveda.cz

46

Veselá věda is a Czech educational organization specializing in science clubs and camps for children, operating for over 12 years with a presence in more than 350 cities. Their offerings include science experiment clubs, LEGO building clubs, day camps, and residential camps, targeting children and parents seeking engaging educational activities. The website is professionally designed with clear navigation and mobile optimization, leveraging modern web technologies including jQuery, Nette Framework, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. Privacy and cookie policies are present with consent mechanisms, reflecting good GDPR compliance. Security posture is adequate with HTTPS enforced but could be improved by adding more security headers and publishing a formal security policy. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and consistent with an established educational service provider. Overall, the site presents a trustworthy and professional front for its business activities.

R

Realness s.r.o.

realness.cz

57

Realness s.r.o. is a Czech Republic-based branding and creative marketing agency specializing in brand strategy, creative campaigns, visual and verbal identity, and digital marketing services. The company positions itself as an award-winning agency with a strong portfolio of clients across various sectors including biotechnology, education, retail, and IT. The website demonstrates a high level of professionalism, with excellent design quality, clear navigation, and comprehensive content showcasing their projects and accolades. Technically, the site is built on Webflow, leveraging modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected in the HTML content. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism was found, which may pose GDPR compliance risks. The absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy, though the website content and business information suggest a legitimate and credible business. Overall, the site scores well on content quality, technical implementation, and business credibility, with recommendations to enhance privacy compliance and security headers.

P

Prodesi/Domesi

prodesidomesi.cz

51

Prodesi/Domesi is a Czech Republic based architectural and construction firm specializing in wooden houses and dřevostavby (wooden buildings). The company offers comprehensive services including individual design and realization, turnkey wooden houses, and public/commercial buildings. With over 22 years of experience and 250 completed projects, they hold a solid regional market position. Their website is professionally designed, mobile optimized, and includes clear navigation and relevant content targeting clients interested in wooden architecture. Technically, the site uses WordPress CMS with modern tracking and analytics tools such as Google Analytics, Hotjar, and Google Tag Manager. Hosting is provided by OVH, a reputable provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers and incident response policies are absent. Overall, the site is trustworthy and compliant with GDPR, with clear contact information and social media presence.

S

STI Group

sti-group.com

54

STI Group is a large, Germany-based manufacturer specializing in sustainable packaging and point-of-sale display solutions. The company emphasizes innovation and environmental responsibility, offering fiber-based, plastic-free packaging for food and non-food products. Their market position is strong, supported by multiple certifications and awards, and they operate multiple production sites across Europe and Asia Pacific. Technically, the website is built on TYPO3 CMS with modern frontend libraries and includes comprehensive cookie consent and privacy management, reflecting good digital maturity. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy.

A

Amper S.A.

grupoamper.com

56

Grupo Amper is a Spanish industrial and technological group with over 60 years of history, specializing in defense, security, communications, energy, and sustainability sectors. The company positions itself as a leader in technological and industrial strategic capabilities with a significant international presence. Their key services include defense and security solutions, energy and sustainability services, and telecommunications. The website reflects a professional corporate presence targeting businesses and government entities in these sectors. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder, Slider Revolution, and LiteSpeed Cache. It employs modern tracking and analytics tools like Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which impacts the overall trustworthiness assessment. Overall, the website is professional and content-rich, but the discrepancy in WHOIS data suggests a need for further verification of domain registration. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trust and compliance.

S

Smartsolutions

smartsolutions.ua

61

Smartsolutions is a medium-sized Ukrainian company founded in 2000, specializing in legal, tax, and financial solutions, including business and asset protection, anti-piracy efforts, and IT project support. The company targets businesses and IT projects primarily within Ukraine, positioning itself as an established service provider with a professional online presence. The website is built on WordPress and employs modern JavaScript libraries and analytics tools, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is professional and trustworthy, but enhancing privacy and security transparency would strengthen its risk profile.

E

ENVIPARTNER, s.r.o.

gisella.app

49

Gisella.app is a Czech-developed mobile mapping application designed for efficient field data collection, targeting municipalities, environmental researchers, sociological researchers, and educators. The app supports multiple GIS data formats and integrates with popular platforms such as Google Drive and WEGAS, positioning itself as a niche but valuable tool in the GIS and education sectors. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, Hotjar, and Google Analytics, ensuring a functional and moderately performant platform. Security posture is solid with HTTPS enforced and anti-bot measures on the contact form, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the domain registration aligns well with the business claims, enhancing legitimacy. Strategic improvements in privacy documentation, security headers, and incident response transparency would elevate the site's security and compliance maturity.

E

Editora Moderna

salamandra.com.br

73

Editora Moderna is a well-established Brazilian educational publisher specializing in literature and didactic materials for schools and educational institutions. The website serves as a comprehensive catalog for their literature offerings, targeting educators, students, and institutions. The company operates under the Santillana group, with related brands such as Richmond and Santillana Espanol. The site demonstrates a professional digital presence with modern web technologies and a focus on accessibility and privacy compliance. Technically, the site uses Next.js framework, hosted on AWS infrastructure, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.

S

Santillana

santillana.com.br

68

Santillana is a well-established educational publisher operating in Brazil, providing educational content and learning resources targeted at students, educators, and educational institutions. The website reflects a professional digital presence with consistent branding and good content quality focused on education. The technical infrastructure leverages modern analytics and marketing technologies, hosted on AWS with strong HTTPS enforcement and security headers, indicating a mature digital setup. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust and compliance. Overall, the website demonstrates a solid security posture with no critical vulnerabilities detected, and privacy compliance is supported by comprehensive cookie and privacy policies integrated with a recognized consent management platform. Strategic recommendations include publishing clear security and incident response policies, implementing a vulnerability disclosure mechanism, and enhancing accessibility features to further improve user experience and compliance.

A

Agence Web Marketing

poush.be

52

Agence Web Marketing, operating under the brand 'Poush', is a Belgian digital marketing agency specializing in custom WordPress website creation, SEO, digital strategy, and AI integration. The company positions itself as a growth partner for businesses seeking to enhance their online presence and conversion rates. Their service portfolio includes audits, site creation, SEO, marketing, AI services, and training. Technically, the website is built on WordPress with modern plugins and tracking tools, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though some security headers could be improved. The domain WHOIS data is restricted, which is common but reduces transparency. Overall, the site is professional, compliant with GDPR, and trustworthy, with no signs of malicious activity or adult content.

A

Anglo-American University in Prague

aauni.edu

72

Anglo-American University in Prague is a well-established non-profit higher education institution founded in 1990, offering dual accredited bachelor and master programs in English across diverse fields such as Business, International Relations, Humanities, and Law. The university positions itself as a leading private university in Prague with a strong international presence and multiple accreditations. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, faculty, and academic partners. Technically, the site is built on WordPress with modern performance and SEO optimizations, leveraging various analytics and marketing tools while maintaining GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some HTTP security headers and formal security policies are not explicitly published. The absence of WHOIS domain registration data is a notable concern but does not detract significantly from the overall legitimacy given the rich content and trust signals. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

E

Editora Moderna

moderna.com.br

72

Editora Moderna is a well-established educational publisher in Brazil, offering a wide range of educational content and services targeted at public and private schools across various educational levels. The company is part of the larger Grupo Santillana and Grupo Prisa, which strengthens its market position and credibility. The website reflects a professional and consistent brand image with good content quality and user experience tailored for educators and students. Technically, the site uses modern frameworks such as Next.js and integrates popular analytics and tracking tools like Google Analytics, Facebook Pixel, and Hotjar, hosted on AWS infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, suitable for its educational audience.

D

Duncan-Parnell

duncan-parnell.com

65

Duncan-Parnell is a well-established company with over 75 years of experience specializing in survey equipment, geospatial technology, and custom printing solutions. The company serves a professional B2B audience including construction contractors, engineers, and architects primarily in the Southeastern United States. Their business model focuses on providing high-quality hardware, software, and services to support successful project execution. The website reflects a mature digital presence with multiple locations and a broad product catalog. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness somewhat, but the professional content and business information mitigate this risk. Overall, the site is trustworthy and professionally maintained.

N

Nové Město na Moravě

nmnm.cz

54

The website www.nmnm.cz serves as the official online presence of the town Nové Město na Moravě, providing comprehensive information about municipal services, cultural events, education, social services, tourism, and local news. It is well-structured with multiple subdomains dedicated to specific sectors, indicating a mature digital infrastructure supporting diverse community needs. The site employs modern web technologies including WordPress CMS, Yoast SEO, and various analytics and marketing tools, all integrated with a robust cookie consent mechanism to ensure GDPR compliance. Security posture is strong with HTTPS enforced and security headers present, although explicit security policies and incident response contacts are not prominently disclosed. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness despite the professional and official nature of the site. Overall, the site is a reliable and authoritative resource for residents and visitors, with good technical and privacy practices but room for improvement in transparency of security governance.

R

reinis.redzidigital

redzidigital.com

59

REDZI Digital is a small digital agency specializing in web development, design, SEO, content creation, video production, animation, and digital marketing campaigns. The company targets clients with challenging tech projects and aims to deliver beyond limitations. The website reflects a professional and consistent brand image with a clear focus on technology services. The business appears to be recently founded in 2020, with domain registration consistent with this timeline. Technically, the website is built on WordPress with WooCommerce, leveraging modern tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Sendinblue for marketing and analytics. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced DNSSEC and security headers. Privacy compliance is partial, with cookie consent but no explicit privacy or terms pages. Overall, the site is trustworthy but could improve transparency and security documentation.

C

Chatter by Stingray

chatterresearch.com

58

Chatter by Stingray is a Canadian-based technology company specializing in AI-driven customer feedback solutions tailored for the retail sector. Their platform leverages conversational AI and natural language processing to gather real-time customer insights, enabling retailers to improve customer experience, increase sales, and enhance employee engagement. The company positions itself as a modern, innovative player in the customer experience management space, supported by a professional website and notable client logos such as Fanatics and Staples. Technically, the website is built on WordPress with a robust tech stack including Gravity Forms for data collection, Google Analytics and Hotjar for analytics and user behavior tracking, and a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some security headers could be improved. From a security perspective, the site enforces HTTPS and uses reCAPTCHA v3 on forms, indicating a baseline security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity. The missing WHOIS data for the domain raises some concerns about transparency but does not detract significantly from the overall legitimacy given the professional presentation and business information. Overall, the website scores well on content quality, technical implementation, and privacy compliance, with moderate scores on security posture and business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.

C

Changer BAN

clubchanger.com

51

Changer BAN operates as an exclusive international business club focused on angel investing and networking among ultra-high-net-worth individuals and power families. Founded in 2019, it positions itself as a premier community for late-stage startup investments and access to renowned venture capitalists, with events in Europe and Dubai. The website reflects a professional digital presence built on WordPress with modern tracking and marketing tools, though it lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and enabling DNSSEC. Contact information is limited primarily to a WhatsApp phone number and inquiry forms, with no direct email addresses disclosed. Overall, the site is accessible, business-focused, and safe for general audiences.

M

MilDef

mildef.com

72

MilDef Group AB is a well-established Swedish company founded in 2001, specializing in rugged IT solutions tailored for military, government, and critical infrastructure sectors. The company operates as a systems integrator providing a full spectrum of hardware, software, and services designed to withstand harsh environments and high-stakes operational contexts. Their market position is strong within defense and security domains, supported by a professional and content-rich website that clearly communicates their offerings and corporate identity. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and employs a comprehensive set of analytics and marketing tools including Google Analytics, HubSpot, and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security practices include HTTPS enforcement and use of Google reCAPTCHA, although DNSSEC is not enabled and some security headers appear to be missing. From a security posture perspective, the site demonstrates good practices but lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. The domain registration data is consistent with the business claims, showing a long-standing and legitimate presence. Overall, MilDef's website reflects a professional, trustworthy, and secure digital asset supporting their business objectives in a sensitive industry. Minor improvements in DNS security and explicit security disclosures could further enhance their security posture and trustworthiness.

R

Riga Technical University

rtu.lv

64

Riga Technical University is a leading technical university in the Baltic region, offering a wide range of educational programs including bachelor, master, and doctoral studies. The institution also emphasizes research, innovation, and international collaboration, targeting students, researchers, and academic professionals. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technical infrastructure includes modern JavaScript libraries, Google Tag Manager, analytics, and consent management tools, indicating a well-maintained and user-focused platform. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit security and incident response policies are not publicly detailed. Overall, the domain registration and WHOIS data align well with the university's identity, supporting high legitimacy and trustworthiness.