Security Directory

C

Clearly

clearly.no

70

Clearly is a Norway-based e-commerce company specializing in health and wellness products, founded in 2022. The company operates multiple regional partner domains across Europe, indicating a strategic market presence. The website is built on Shopify, leveraging a modern tech stack with integrated marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Judge.me for customer reviews. The site demonstrates good design quality, mobile optimization, and accessibility, providing a professional user experience. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards, although explicit security and incident response policies are not publicly detailed. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional e-commerce platform with room for improvement in explicit security disclosures.

C

Clearly

clearly.lu

68

Clearly is a European e-commerce retailer specializing in health-related products, operating multiple country-specific domains to serve a broad audience. The website is built on Shopify, leveraging a modern tech stack with extensive marketing and analytics integrations. The site demonstrates good content quality, professional design, and clear navigation, targeting general consumers interested in health and wellness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security and contact information.

C

Clearly

clearly.gr

10

Clearly is a Greece-based e-commerce retailer specializing in health and wellness products, operating on the Shopify platform with a multi-country European presence. The website is professionally designed with a clear focus on customer experience, leveraging multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Judge.me for reviews. GDPR compliance is well implemented with a cookie consent mechanism and a comprehensive privacy policy. The technical infrastructure is modern and performant, hosted on Shopify's secure environment, and the site is mobile optimized. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good business credibility and trust indicators.

C

Clearly

clearly.fr

10

Clearly.fr is an e-commerce website specializing in health and wellness products, operating primarily in the French market with sister sites across Europe. The company was founded in 2021 and leverages the Shopify platform for its online retail operations. The website demonstrates a mature digital marketing infrastructure with extensive use of analytics, tracking, and customer review integrations. While the site enforces HTTPS and includes cookie consent mechanisms, it lacks explicit privacy policy and terms of service pages, which are critical for full GDPR compliance. No direct contact information or security policies are published, which could impact user trust and compliance. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices.

S

Synaptor s.r.o.

synaptor.ai

52

Synaptor s.r.o. is a Czech Republic-based technology company specializing in AI-driven customer communication solutions, including chatbots, emailbots, and voicebots. Their platform automates over 85% of routine customer inquiries across multiple channels, enhancing operational efficiency and customer engagement. The company targets businesses seeking to streamline customer service with AI assistants available 24/7 and supporting multiple languages. The website reflects a professional and consistent brand image with clear contact information and compliance with privacy regulations through Cookiebot integration. Technically, the website leverages modern frameworks such as Blazor WebAssembly and Bootstrap, indicating a contemporary and scalable infrastructure. The presence of Google Analytics and Microsoft Clarity shows a focus on user behavior analysis and performance monitoring. The site is mobile-optimized and accessible, though some SEO and accessibility enhancements could be considered. From a security perspective, the site enforces HTTPS and uses anti-CSRF cookies, with a comprehensive cookie consent mechanism in place. However, explicit security headers and dedicated security or incident response policies are not evident, suggesting room for improvement in formalizing security posture. WHOIS data is privacy protected, common for small tech firms, and no suspicious indicators are present. Overall, Synaptor.ai presents a credible, well-structured business with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and considering a vulnerability disclosure program to further strengthen trust and security maturity.

F

FreeWheel

freewheel.tv

72

FreeWheel operates as a leading technology platform that connects advertisers directly to streaming video inventory from top publishers, eliminating intermediaries to maximize working media dollars. Their offerings include suites tailored for media buyers and sellers, facilitating programmatic video advertising and monetization strategies. The website demonstrates a mature digital infrastructure with WordPress CMS, integrated analytics, and marketing tools such as Google Analytics, Facebook Pixel, and OneTrust for cookie consent, reflecting a high level of digital maturity and compliance awareness. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of visible security headers and a public security policy suggests room for improvement. The WHOIS data is unavailable, which slightly impacts transparency but the professional website and consistent branding support the company's legitimacy. Overall, FreeWheel presents a trustworthy and professional online presence suitable for enterprise-level media advertising clients.

B

BALL Watch

ballwatch.ch

58

BALL Watch Online Boutique is a professional e-commerce platform specializing in luxury Swiss watches. The website showcases a broad range of watch collections, including Engineer Hydrocarbon, Roadmaster, and Trainmaster series, targeting watch enthusiasts and collectors. The business model focuses on direct online sales, pre-orders, and exclusive offers, positioning BALL Watch as a niche luxury brand with a strong heritage. Technically, the site uses a modern tech stack including jQuery, Bootstrap datetimepicker, Flickity, and integrates major analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The platform is built on OpenCart CMS, optimized for mobile devices, and offers a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present, indicating room for improvement in transparency and compliance. Overall, the website is trustworthy and well-branded but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence.

F

FLY UNITED s.r.o.

mujlet.cz

57

FLY UNITED s.r.o. operates the website mujlet.cz, a professional travel booking platform primarily serving the Czech market. The company specializes in corporate travel management and general travel services including flight reservations, hotel bookings, car rentals, and travel insurance. Established in 2005 and holding ISO 9001:2008 certification, the company presents itself as a reputable and established player in the transportation sector. The website supports Czech and English languages and targets both corporate clients and general travelers. Technically, the website uses a custom travel booking system named Symphony, built with AngularJS and enhanced by common JavaScript libraries such as jQuery and Moment.js. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is hosted likely via Active24, consistent with the WHOIS data. Performance is moderate with basic mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no visible cookie consent mechanism and limited GDPR indicators. Contact information and business legitimacy are well presented, enhancing trustworthiness. Overall, the website is professionally designed and functional with good business credibility but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

I

Invest North East England

investnortheastengland.co.uk

61

Invest North East England is a strategic inward investment agency supporting businesses to relocate and invest in the North East of England. It operates as part of the North East Combined Authority and provides free support services including a land and property database. The website presents a professional image with sector-specific information, testimonials from major companies, and multiple contact channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and security plugins, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and well-positioned as a government-related business support platform.

C

Čtenářský deník k maturitě, pro základní školu - Čtenářský-deník.cz

ctenarsky-denik.cz

44

Čtenářský-deník.cz is a Czech educational website providing a large database of literary analyses, summaries, biographies, and study materials primarily targeted at students preparing for maturita exams and basic school students. The platform offers both free and paid downloadable content, positioning itself as a significant resource in the Czech educational market. Technically, the site employs a traditional web stack with JavaScript, jQuery, and integrates multiple third-party advertising and analytics services including Google Tag Manager, Google Analytics, and Gemius Audience. While the site is accessible and functional with a good user experience, it uses an outdated jQuery version and lacks some modern security headers and explicit security policies. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting GDPR awareness. The absence of WHOIS data limits domain trust assessment, but the website's content and partner ecosystem suggest legitimacy. Overall, the site scores moderately well in content quality, technical implementation, security posture, privacy compliance, and business credibility.

Seminarky.cz is a well-established Czech educational platform offering the largest database of academic works including seminar papers, reports, reading diaries, and theses. It targets students and educators primarily in the Czech Republic, providing both free and paid downloadable content. The website has been operating for approximately 25 years and is supported by advertising and educational material sales. Technically, the site uses legacy technologies such as jQuery 1.6.2 alongside modern tracking and advertising tools like Google Analytics and Facebook SDK. While the site is accessible and functional with good SEO and navigation, it lacks some modern security headers and uses an outdated JavaScript library, which could pose security risks. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, but explicit security and incident response policies are not publicly available. The WHOIS data is missing, which reduces trustworthiness, but the website's longevity and content quality support its legitimacy. Overall, the site is safe for general audiences and serves as a valuable educational resource.

S

Social Impact

socialimpact.eu

44

Social Impact is a German-based agency specializing in social innovation projects aimed at addressing societal challenges for a just and sustainable future. The website positions itself as a niche player in the non-profit sector, offering consultancy and project development services focused on social impact. The digital infrastructure is built on TYPO3 CMS, enhanced with modern tracking and consent management tools such as Google Analytics, Google Tag Manager, and Usercentrics for GDPR compliance. The website demonstrates good SEO practices and mobile optimization, though lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but could be improved by adding security headers and publishing formal security policies. Overall, the site is professional and trustworthy with moderate tracking and no suspicious content detected.

E

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn

europe-direct.de

43

EUROPE DIRECT Bayerischer Wald - Böhmerwald - Unterer Inn operates as a regional EU information and cultural engagement center serving the Bavarian-Bohemian border region. It provides citizens, students, and local communities with educational events, workshops, and cross-border cooperation initiatives to promote understanding of the European Union and its policies. The organization is part of the EUREGIO network and collaborates with universities, government bodies, and cultural institutions. The website is built on TYPO3 CMS and uses standard web technologies including jQuery and Bootstrap. It features event announcements, educational content, and contact information prominently, targeting a general audience interested in EU affairs.

E

EMCÉ Winches

emce.com

60

EMCÉ Winches is a well-established manufacturer specializing in high-quality lifting and pulling equipment such as winches and capstans, serving diverse industrial sectors including energy, marine, oil & gas, and renewables. The company has a strong market presence with over 80 years of experience and a medium-sized operational scale based in the Netherlands. Their website reflects a professional business model focused on custom engineering and global support services. Technically, the website is built on a Yii PHP framework with modern JavaScript libraries and analytics tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CSRF protections but lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

B

BRIDGES2000.NL

bridges2000.com

50

BRIDGES2000 is a Netherlands-based company specializing in the design, manufacture, and rental of safe bridge and gangway solutions primarily serving the maritime, offshore, civil engineering, and event sectors. The company emphasizes safety, fast delivery, and tailored solutions, supported by a strong market presence with thousands of satisfied customers and extensive experience. The website is built on WordPress using the Avada theme and integrates modern SEO and analytics tools, reflecting a moderate to advanced digital maturity. Security posture is generally good with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

H

Holland Shipyards Group

hollandshipyardsgroup.com

61

Holland Shipyards Group operates as a maritime shipbuilding and services company specializing in new vessel construction, repair, conversions, and rentals. Their market position is that of an established medium-sized player in the Netherlands maritime sector, offering a broad range of vessel types including tugs, ferries, dredging vessels, and accommodation units. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on the Webflow platform, leveraging modern web technologies and analytics tools such as Google Analytics and Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks advanced security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and trustworthy. Overall, the site scores well in content quality and privacy compliance but should improve security transparency and domain registration clarity.

S

Sonardyne

sonardyne.com

62

Sonardyne is a well-established company specializing in underwater technology with over 50 years of experience. The company offers a broad range of products and services including underwater positioning, navigation, monitoring, communications, marine robotics, and custom engineering solutions primarily targeting energy, defense, and ocean science sectors. The website reflects a professional and comprehensive digital presence with clear branding and detailed content about their expertise and product offerings. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. The absence of WHOIS domain registration data is a notable transparency gap, but the overall business credibility remains high based on website content and corporate affiliations. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving contact information visibility to strengthen trust and compliance.

T

Total Safety

totalsafety.com

66

Total Safety is a global enterprise specializing in advanced industrial safety solutions, including equipment rental, PPE distribution, specialized safety personnel, and compliance services. The company serves multiple sectors such as energy and transportation, positioning itself as a market leader with a broad portfolio and global footprint. Their website reflects a mature digital presence with professional design, comprehensive service offerings, and strong trust indicators including client logos and industry certifications. Technically, the site is built on WordPress with modern libraries and analytics tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is partially addressed with cookie consent but lacks a clear privacy policy page. WHOIS data is missing, which is unusual and reduces trust slightly, but the overall business credibility remains high based on content and branding.

YOKE Industrial Corp. is a well-established manufacturing company specializing in industrial safety and lifting equipment, including Grade100 lifting chain fittings, fall protection gear, and RFID tagging products. Founded in 1997, the company maintains a global presence with certifications and awards, targeting industrial clients and distributors. The website reflects a professional business model focused on manufacturing and distribution within the manufacturing sector. Technically, the site uses legacy JavaScript libraries alongside modern tracking tools such as Google Analytics and Tag Manager. Mobile optimization and user experience are good, though accessibility and SEO could be improved. Security posture shows moderate maturity with HTTPS usage and domain transfer protections but lacks DNSSEC and security headers, and uses outdated libraries that could pose risks. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic improvements in security headers, updated libraries, and privacy compliance would enhance the site's security and trust profile.

N

Norwegian Offshore Rental AS

offshorerental.no

67

Norwegian Offshore Rental AS is a well-established Norwegian company founded in 2011, specializing in the rental of offshore and subsea equipment primarily serving the energy sector. The company positions itself as a significant provider in the offshore rental market, offering a wide range of certified and well-maintained equipment with a focus on customer trust and fast response. The website reflects a professional business model centered on equipment rental and maintenance services, targeting offshore industry professionals. The technical infrastructure is robust, leveraging WordPress CMS with modern plugins such as Gravity Forms for data collection, Yoast SEO for search optimization, and Google Analytics for visitor insights. The site uses Cloudflare services for bot management and CDN, along with Gumlet for image optimization, ensuring fast performance and good mobile responsiveness. SEO and accessibility are well addressed, contributing to a positive user experience. Security posture is strong with HTTPS enforced, use of Google reCAPTCHA on forms, and a comprehensive cookie consent mechanism compliant with GDPR. However, explicit security headers like X-Frame-Options and a published security policy are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected, indicating a mature security environment. Overall, the website and domain exhibit high legitimacy and trustworthiness, with consistent WHOIS data and no suspicious patterns. The company demonstrates good compliance with privacy regulations and transparent contact information. Strategic recommendations include enhancing security headers, publishing incident response details, and implementing a vulnerability disclosure policy to further strengthen security and trust.

G

Gray Dawes Travel

vcktravel.nl

61

Gray Dawes Travel is a professional travel management company focused on elevating corporate travel programs. The website presents a clear business description targeting business travelers and corporate clients, offering travel management and consultancy services. The company appears to have an established market position within the transportation sector, supported by a medium-sized business model. Technically, the website is built on WordPress using the Divi theme, integrating modern analytics and tracking tools such as Google Analytics and MonsterInsights. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and detailed privacy or terms of service documentation. No WHOIS registrant data is publicly available, indicating privacy protection which is justified for this business type. Overall, the website is professional and trustworthy but could improve transparency and security practices.

B

Bioveta, a.s.

bioveta.cz

45

Bioveta, a.s. is a modern pharmaceutical company specializing in the production of veterinary and human medicines with a global presence, exporting to over 90 countries. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. The business targets veterinary professionals, farmers, and distributors, offering a broad catalog of veterinary pharmaceuticals and related services. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Facebook SDK, and is built on the WebRedakce CMS platform. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and explicit security policies. The security posture is moderate with a well-implemented cookie consent mechanism and no visible vulnerabilities in the HTML content. However, the absence of WHOIS data limits domain legitimacy verification, which is a concern for trust assessment. Overall, the website is functional, professional, and compliant with GDPR cookie consent requirements but could improve in security transparency and domain registration clarity.

Jítravský Dvorec is a Czech hospitality business offering a wide range of services including apartment-hotel accommodation, wellness, restaurant and pub dining, equestrian facilities, conference rooms, and a bakery. The company targets tourists, families, corporate clients, and wellness seekers, positioning itself as a regional provider of comprehensive leisure and event services. The website is built on WordPress with modern plugins and technologies, featuring good design, mobile optimization, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits full trust assessment of the domain registration, but the website content and contact information indicate a legitimate business. Strategic recommendations include improving security headers, adding vulnerability disclosure mechanisms, and enhancing accessibility compliance.

O

Opidum – reality a.s.

bytyprezletice.cz

51

The website bytyprezletice.cz represents a real estate development project by Opidum – reality a.s., focusing on the sale of 57 apartments near Prague. The company positions itself as a regional real estate developer with a clear target audience of home buyers and investors in the Prague vicinity. The site provides comprehensive information about the project, location, and available units, supported by interactive elements and a contact mechanism for customer engagement. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer trust.

P

Prague Playoffs

pragueplayoffs.com

40

Prague Playoffs is a professionally presented event website dedicated to the 2025 edition of the Prague Playoffs, a major equestrian show jumping event held at the O2 Arena in Prague. The site serves as a comprehensive information hub for attendees, participants, and fans, offering detailed program schedules, ticketing options, VIP services, news updates, and media accreditation. It is closely associated with the Global Champions Tour and Global Champions League, indicating a strong position within the international equestrian sports community. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. It integrates multiple tracking and marketing tools such as Google Analytics, Facebook Pixel, and Google Ads conversion tracking, reflecting a mature digital marketing approach. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, no security headers were detected in the provided data, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance and user trust. The WHOIS data is missing or unavailable, which raises questions about domain registration legitimacy, though the website content itself appears professional and trustworthy. Overall, Prague Playoffs presents a credible and well-maintained digital presence for a significant sporting event, but it would benefit from enhanced transparency in privacy practices, improved security headers, and clearer contact information to strengthen its security posture and compliance.

L

LIPNO REAL s.r.o.

lipno-invest.com

49

Lipno Invest operates as a specialized real estate investment and development company focused on properties around Lake Lipno in the Czech Republic. The company offers construction, sale, and rental of resorts, houses, and apartments directly on the lake, emphasizing architectural quality and natural surroundings. It is part of the Group Dorn-Fussenegger and has a family-owned business background with over 20 years of market presence. The website reflects a professional and consistent brand image targeting investors and buyers interested in lakeside real estate. Technically, the website uses modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for security on forms. The site is mobile optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, no CMS or hosting provider details are explicitly detected. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent is implemented with granular user controls. However, no explicit security policy or incident response information is found, and security headers are not detected, which are areas for enhancement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is safe, professional, and trustworthy for general audiences with a strong business focus on real estate investment. The main risk is the lack of WHOIS transparency, which should be addressed to improve trustworthiness and compliance.

L

Lipno Rent s. r. o.

lipno-rent.com

49

Lipno Rent s. r. o. is a family-owned company operating in the hospitality and real estate rental sector, specializing in holiday accommodation on Lipno Lake in the Czech Republic. The company is part of the Gruppe Dorn-Fussenegger and offers a range of services including property rental, management, recruitment, and related real estate services. The website is professionally designed with multi-language support and integrates Google Maps for property visualization. It maintains a clear privacy and cookie policy with GDPR compliance and provides transparent contact information including phone, email, and physical addresses. However, the domain WHOIS data is not publicly available, which raises some concerns about domain registration transparency.

N

NexGen IT s.r.o.

lipno-real.com

47

Lipno Real is a specialized real estate business focusing on luxury and investment properties around Lipno Lake in the Czech Republic. The website presents a professional portfolio of houses, apartments, and plots for sale, targeting affluent buyers and investors interested in this recreational area. The business model centers on brokerage and property sales with additional rental services. The company behind the website appears to be NexGen IT s.r.o., likely the developer or operator of the site. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics, Google Tag Manager, Google Consent Mode, and Tawk.to chat widget. The site is mobile-optimized with good SEO practices and moderate performance. SSL is properly configured ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve its security posture. Privacy compliance is basic; no explicit privacy or cookie policies were found, and GDPR compliance indicators are minimal. Contact information is available but limited to an email address and contact forms, with no phone numbers or physical addresses explicitly listed. The WHOIS data for the domain is unavailable, indicating either a very recent registration or privacy protection, which slightly reduces trustworthiness. Despite this, the website content and professional presentation support the legitimacy of the business. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy disclosures and security headers to improve compliance and security posture.

T

Tuesday.cz

eventworld.cz

65

Tuesday.cz is a Czech-based company specializing in organizing professional events ranging from training sessions to large full-day conferences, both online and offline. The website targets professionals seeking educational and networking opportunities in their respective fields. The business operates in the education sector with a focus on event management and training services. The website presents a professional design with consistent branding and relevant content, although it lacks explicit contact details and comprehensive privacy documentation. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and performs moderately well, but there is room for improvement in accessibility and SEO. Security measures include HTTPS enforcement and frame busting scripts, but the absence of security headers and vulnerability disclosure mechanisms suggests potential gaps in security maturity. The security posture is adequate but could be enhanced by implementing recommended headers and publishing clear privacy and terms policies. The lack of WHOIS data due to privacy protection slightly reduces trustworthiness but is understandable for a small business. Overall, the site is safe for general audiences and does not contain any adult or questionable content. Strategic recommendations include enhancing privacy compliance, improving security headers, publishing contact and incident response information, and establishing a vulnerability disclosure policy to strengthen trust and security culture.

C

Czech Space Portal

czechspaceportal.cz

70

The Czech Space Portal serves as the official information and coordination platform for space activities in the Czech Republic, managed under the Ministry of Transport. It provides comprehensive news, event calendars, databases, and strategic information related to national and European space initiatives. The portal targets companies, academia, students, and the general public interested in space industry developments within the Czech Republic. The business model is government-coordinated information dissemination and industry support, positioning it as an authoritative national resource in the space sector. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It employs Google reCAPTCHA for form security and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization and accessibility, though some improvements in security headers and direct contact information could enhance its posture. Security-wise, the portal uses HTTPS with strong SSL configuration and has implemented cookie consent and anti-bot measures. However, the absence of WHOIS data and lack of explicit security headers slightly reduce its trust score. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the Czech Space Portal is a trustworthy, professional government site with good content quality and technical implementation. The main risk lies in the missing WHOIS data, which should be investigated to ensure domain legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information to improve trust and compliance.

C

Czechtour

czechtour.net

39

The website www.czechtour.net represents an established chess tournament series in the Czech Republic, active since 2001. It organizes multiple international chess festivals including the well-known CZECH OPEN Pardubice. The site targets chess players and their families, offering tournament participation and accommodation discounts. Technically, the site uses Plume CMS with common JavaScript libraries and Google Analytics for visitor tracking. However, it lacks visible privacy and cookie policies, and no contact information is explicitly provided on the main pages. Security posture is weak due to missing HTTPS confirmation and absence of security headers. WHOIS data is unavailable or the domain is not found in the registry, raising concerns about domain legitimacy and registration status. Overall, the site provides relevant content but requires improvements in security, privacy compliance, and transparency to enhance trust and compliance.

The website vecerychval.cz serves as a platform for organizing and promoting worship and praise events primarily in the Czech Republic. It targets individuals interested in religious community gatherings and provides event schedules, blog content, and online streaming options. The site is small-scale and community-focused, with a domain age of over 15 years, indicating a stable presence. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, hosted likely by WEDOS, a Czech hosting provider. The design is professional and mobile-optimized, offering a good user experience with clear navigation. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate, with HTTPS presumably enabled but missing important security headers and vulnerability disclosures. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security hardening.

I

ITS Finland Ry

its-finland.fi

58

ITS Finland Ry is a Finnish non-profit collaboration network focused on advancing intelligent transportation systems through digitalization, innovation, and international cooperation. The organization brings together government bodies, cities, research institutions, and companies to promote sustainable, safe, and efficient transportation solutions. The website reflects a mature and professional presence consistent with the organization's mission and activities. Technically, the website is built on WordPress using modern plugins and frameworks, including Cookiebot for consent management and Google Analytics for minimal tracking. The site is mobile-optimized, accessible, and well-structured with comprehensive metadata and SEO practices. Hosting appears stable with no blocking or WAF interference detected. Security posture is good with HTTPS enforced and cookie consent implemented. However, some security headers are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a clear privacy policy and GDPR-aligned cookie management. Overall, the website and domain registration data indicate a trustworthy and legitimate organization with a strong market position in the Finnish intelligent transportation sector. Strategic recommendations include enhancing security headers, publishing a security policy, and enabling DNSSEC to further improve domain security.

I

ITS.be

its.be

43

ITS.be is a well-established public-private non-profit organization focused on accelerating the deployment of intelligent transport systems and linked mobility services in Belgium. The website reflects a professional and consistent brand presence with a clear focus on sustainable mobility and ITS solutions. The organization targets companies, public bodies, associations, and knowledge institutes involved in the ITS domain. Technically, the website is built on Drupal CMS with modern libraries such as Bootstrap and jQuery, and it uses Google Analytics for visitor tracking. The site is mobile-optimized and has good SEO and accessibility features, although accessibility could be improved further. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The domain registration data is consistent with the website's claims, showing a legitimate and trustworthy presence since 2007. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

ITS-Sweden

its-sweden.se

56

ITS Sweden is a well-established industry association founded in 2003, focused on advancing intelligent transport systems and smart mobility solutions in Sweden. The organization serves as a collaborative platform for industry players, public sector entities, and academia to drive digital transport innovations. Their website reflects a professional and consistent brand image, targeting industry stakeholders and promoting knowledge exchange and capacity building. Technically, the website is built on WordPress using the Avada theme, enhanced with SEO and cookie consent tools such as Yoast SEO and Cookiebot. Hosting is provided by Propeller Hosting, and the site employs HTTPS with a good SSL configuration. Security practices include cookie consent management and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. However, explicit contact information, terms of service, and security policies are not prominently published. Overall, the website demonstrates a mature digital presence with good security posture and compliance, suitable for its role as an industry association.

Kindermissionswerk "Die Sternsinger" is a well-established German non-profit organization dedicated to supporting children worldwide through development aid and advocacy. The website serves as an information and donation platform targeting donors, volunteers, and partners interested in child welfare. It maintains a professional and consistent brand presence with multilingual support and clear navigation. The organization operates primarily in the non-profit sector with a large operational size in Germany.

W

Wave Energy Scotland

waveenergyscotland.co.uk

65

Wave Energy Scotland is a government-backed organization focused on advancing wave energy technology through research, development, and funding programs. The website reflects a professional and authoritative presence with comprehensive information about their technology programs, research strategies, educational resources, and impact. The organization positions itself as a leader in wave energy innovation in Scotland with international collaborations. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and various UI libraries, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the organization's mission effectively.

B

Begegnungszentrum Wittenberg West e.V.

nachbarschaftstreff.net

49

The website represents the Begegnungszentrum Wittenberg West e.V., a small non-profit organization operating the Nachbarschaftstreff in Wittenberg West, Germany. The organization focuses on fostering community engagement, social support, and intergenerational cooperation through various events and volunteer projects. The website provides comprehensive contact information, event details, and encourages community participation. Technically, the site is built on the CIDEMOS CMS platform, uses modern web technologies including SVG graphics and a Swiper.js slider, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place. Security-wise, HTTPS is enabled, but there is a lack of security headers and no published incident response or vulnerability disclosure policies. The absence of WHOIS data for the domain reduces trust in domain legitimacy, although the website content and contact details appear authentic and consistent with a local community organization. Overall, the site is functional, informative, and serves its target audience effectively, but could improve security posture and domain transparency.

N

Nouvelle-Ligne

nlcontest.com

55

NL Contest is a well-established urban sports and arts festival based in Strasbourg, France, organized by Nouvelle-Ligne. The website showcases event information, results, media content, and partner affiliations, targeting urban sports enthusiasts and festival attendees. The business operates primarily as an event organizer and promoter with a strong community and partner network. Technically, the site is built on WordPress with integrations such as Google Maps API, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly with good content quality and navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and formal policies are absent. The WHOIS data is missing, raising concerns about domain registration legitimacy, but the professional content and social presence mitigate some risk. Overall, the site is trustworthy but would benefit from improved transparency and security documentation.

S

Studio SCHNEIDER

studioschneider.cz

54

Studio SCHNEIDER is a small Czech-based creative studio specializing in graphic design, web design, photography, and mobile application design. The website presents a professional image with clear service offerings targeting clients seeking creative and digital design solutions. The business operates primarily as a service provider in the creative sector with a local market focus. Technically, the website employs modern JavaScript libraries, Google Analytics, and a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS data and privacy policy pages suggests gaps in transparency and compliance. Security posture is moderate with no detected blocking or WAF, but lacks security headers and explicit incident response information. Overall, the website is functional and professional but would benefit from improved compliance and security practices.

B

BestSite s.r.o.

bestsite.cz

59

BestSite s.r.o. is a Czech Republic-based small business specializing in the creation of websites, e-shops, and intranet/extranet applications, with nearly 14 years of experience. The company targets businesses and organizations seeking professional web and application development services. Their key offerings include web development, e-commerce solutions, and the CMS K2 content management system. The website is professionally designed with clear navigation and branding consistent with their business identity. Technically, the website employs modern front-end technologies including Google Analytics for tracking, IAB TCF for consent management, and Nette Forms for form handling. The site is mobile optimized and uses Google Fonts for typography. However, no explicit hosting provider or server details are discernible. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses cookie consent mechanisms aligned with GDPR requirements but lacks visible security headers and an explicit privacy policy page. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact emails or phone numbers are present on the site, limiting direct communication channels. Overall, the security posture is moderate but could be improved with better transparency and technical safeguards. The overall risk assessment suggests a generally trustworthy small business website with room for improvement in compliance and security transparency. Strategic recommendations include implementing security headers, publishing a privacy policy, verifying domain registration details, and providing clear contact information to enhance trust and compliance.

L

Le Meteor

lemeteor.fr

53

Le Meteor is a small hospitality business operating a brasserie and bar located in the center of Strasbourg, France. The business offers Alsatian cuisine throughout the day along with a full range of METEOR beers, positioning itself as a local gathering place and a venue for culinary and beverage experiences. The website is built on the Readymag platform and integrates several third-party services for analytics, font management, and booking functionalities. The technical infrastructure is modern and hosted by OVH, a reputable provider. Security posture is solid with HTTPS and security headers implemented, though privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website presents a professional image with good design and user experience, targeting a mature audience interested in local cuisine and beer culture.

N

NASUWT

nasuwt.org.uk

61

NASUWT is a prominent UK-based teachers' union dedicated to protecting the status and working conditions of teachers and school leaders. The website serves as a comprehensive platform offering member support, advice, training, news, and campaign information. It targets educators across the UK, providing resources tailored to different regions and professional needs. The union operates a membership-based model, emphasizing advocacy and professional development. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, and Bootstrap, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and privacy policies indicates a commitment to GDPR compliance. Security-wise, the site uses HTTPS and secure login forms but lacks explicit security headers and incident response information. The WHOIS data is unavailable due to domain naming rules errors, but the website's content and branding strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving a large audience in the education sector.

W

WebMD Ignite

webmdignite.com

65

WebMD Ignite is a healthcare-focused business launched in 2023, providing marketing, analytics, platform, clinical, and content solutions to healthcare organizations. The company positions itself as a premier growth partner empowering decision-making and action across the health journey. The website is professionally designed with consistent branding and targets health systems, plans, associations, government, and healthcare organizations. Technically, the site uses a modern tech stack including Google Tag Manager, OneTrust for cookie consent, and Cloudflare DNS, with Drupal as the CMS. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Business credibility is strong with clear branding and contact form presence, though no direct emails or phone numbers are found. Overall, the site is trustworthy and safe for general audiences.

W

Welkeys

welkeys.com

56

Welkeys operates a professional luxury vacation rental platform focused on France and Europe, offering villas, chalets, and concierge services. The website is well designed, mobile optimized, and integrates modern technologies such as Webflow CMS, Weglot for translations, and various marketing and analytics tools. Security posture is strong with HTTPS and security headers, but the absence of privacy and cookie policies is a compliance gap. The missing WHOIS data for the domain raises some concerns about domain registration transparency, though the active and professional website mitigates this somewhat. Overall, the business appears credible and positioned well in the luxury travel market, but should improve privacy compliance and domain registration transparency.

K

Kenworth Mexicana

kenworth.com.mx

74

Kenworth Mexicana operates as a prominent player in the transportation sector within Mexico, specializing in commercial trucks and related services. The company benefits from a long-established domain since 1999, indicating a mature market presence and stable operations. The website primarily targets businesses and professionals in logistics and transportation, offering products, after-sales services, and financing options. The brand is consistent and well represented digitally, with a professional design and clear branding elements. Technically, the website employs modern web technologies including JavaScript, Cookiebot for cookie consent management, and integrates major analytics and marketing platforms such as Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. Hosting and domain registration are managed by reputable providers, supporting a reliable infrastructure. From a security perspective, the website enforces HTTPS and uses a robust cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, but enhancements in security headers and transparency around security practices are recommended. Overall, the website presents a low-risk profile with good business credibility and compliance posture. Strategic improvements in privacy policy visibility, security headers, and accessibility would further strengthen the site’s trustworthiness and user experience.

P

PacLease

paclease.com

71

PacLease is a well-established commercial truck rental and leasing company, operating under the parent company PACCAR Inc. The website presents a professional image with clear branding and a focus on premium truck rental and leasing services. The target audience includes commercial fleet operators and businesses requiring medium to heavy-duty trucks. The company leverages multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and ClickDimensions to optimize user engagement and advertising effectiveness. Technically, the website uses modern JavaScript libraries like jQuery and integrates Cookiebot for GDPR-compliant cookie consent management. However, some areas such as explicit privacy policy, terms of service, and contact information are not clearly found in the analyzed content. Security posture is good with HTTPS enabled and domain protections in place, but could be improved by adding security headers and publishing security policies. Overall, the website is credible, secure, and professionally maintained, with room for enhanced transparency and compliance documentation.

D

Dynacraft

dynacraftnet.com

73

Dynacraft, a subsidiary of PACCAR, operates as a specialized supplier of premium OEM components and assemblies primarily serving the transportation manufacturing sector. The company is well-established with a domain age dating back to 2000, reflecting a mature business presence. Their website emphasizes their role in supporting the PACCAR brand with quality manufacturing services targeted at OEM manufacturers and industry partners. The digital infrastructure incorporates modern analytics and consent management tools, indicating a moderate level of digital maturity and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enabled and domain protections in place, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the website presents a professional and trustworthy image consistent with its business model and market position.

The website 'Nechybí ti něco?' is a Czech-language wellness and personal development platform offering an interactive self-assessment quiz focused on physical, mental, and spiritual well-being. It targets individuals interested in reflecting on their lifestyle habits and improving overall wellness. The site is small-scale and community-oriented, with no commercial or transactional features detected. Technically, the site uses modern frontend technologies including Bootstrap 4.3.1, jQuery, and Google Fonts, providing a responsive and user-friendly experience. However, it lacks advanced SEO and accessibility features and has moderate performance characteristics. Security posture is basic; while HTTPS is assumed, no security headers or explicit security policies are present. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms, despite the use of Google Analytics for tracking. Business credibility is moderate but limited by the lack of contact information and trust indicators. WHOIS data is consistent and supports legitimacy, with the domain registered in 2019 by a Czech registrar matching the website's language and content. Overall, the site is safe, professional, and functional but requires improvements in privacy compliance, security best practices, and business transparency.