Security Directory

R

Ráj aut

rajaut.cz

53

Ráj aut is a Czech Republic based online automotive classifieds platform specializing in car advertisements, sales, and bazaar listings. The website offers a comprehensive search and filter system for vehicles, targeting car buyers and sellers primarily within the Czech market. It maintains a moderate market position with partnerships to related automotive sites and services. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site is served over HTTPS, ensuring secure data transmission, but lacks some advanced security headers and has only basic mobile optimization. Privacy and cookie policies are present but could be more explicit and comprehensive. No WHOIS data was retrievable, which slightly impacts trustworthiness but the site content and business presence indicate legitimate operation. Overall, the website is functional, moderately secure, and serves its niche audience effectively.

R

Ráj veteránů

rajveteranu.cz

55

Ráj veteránů is a specialized online classifieds platform focused on vintage and classic vehicles primarily serving the Czech Republic market. The website offers a comprehensive vehicle listing service with detailed search filters, partner promotions, and community engagement through a Facebook group. The business operates as a niche marketplace catering to classic car enthusiasts and sellers, with a business model centered on advertising and listing fees. Technically, the site employs modern web technologies including Google Fonts, Google Analytics, and Adform for advertising and tracking, with HTTPS and security headers implemented to ensure secure user interactions. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact information is limited to a contact form. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and active content suggest legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, making it a reliable resource for its target audience.

S

Sportovní vozy

sportovnivozy.cz

55

Sportovní vozy is a Czech online platform specializing in the listing and sale of sports cars. It offers classified ads, dealer catalogs, automotive news, and advertising opportunities primarily targeting car enthusiasts and buyers in the Czech Republic and Slovakia. The website has been active since at least 2007, indicating a stable presence in its niche market. The business model revolves around providing a marketplace for sports car sales and monetizing through advertising and partnerships. Technically, the website employs common web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site uses HTTPS and Google Fonts, but lacks advanced security headers and explicit privacy or terms of service pages. Mobile optimization and accessibility are basic, with room for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of WHOIS registrant data and missing security headers reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. The site uses extensive user tracking through third-party analytics and advertising services. Overall, the website is functional and professionally designed for its target audience but would benefit from enhanced security practices, clearer privacy disclosures, and improved contact transparency. The domain's WHOIS data is unavailable, which slightly impacts the trust score but does not negate the site's legitimacy based on content and longevity.

T

TECHNOLOGY - GARAGE spol. s r.o.

technology-garage.cz

73

TECHNOLOGY - GARAGE spol. s r.o. is a Czech Republic based company specializing in professional equipment and machinery for automotive service centers, tire services, industrial workshops, and the energy sector. Established since 1995, the company offers a broad catalog of products including lifts, compressors, diagnostic tools, and safety equipment, positioning itself as a trusted supplier in its niche markets. The website reflects a mature business with a clear focus on B2B customers in automotive and energy industries. The technical infrastructure of the website is built on a proprietary or custom e-commerce platform (wpj.cz), utilizing modern web technologies such as JavaScript, CSS, Google Tag Manager, Google Analytics, and Sentry for error monitoring. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website employs HTTPS and error monitoring but lacks some important security headers and explicit privacy and security policies. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, but no dedicated privacy or terms of service pages were found. The absence of WHOIS data for the domain reduces trust in the domain registration legitimacy, though the website content and business presence suggest a legitimate operation. Overall, the website presents a professional and trustworthy business front with room for improvement in security best practices and privacy transparency. The risk level is moderate, primarily due to missing domain registration data and incomplete privacy documentation.

M

Mala GPS

malagps.cz

55

Mala GPS operates as a Czech-based e-commerce retailer specializing in GPS tracking devices tailored for pets, personal safety, bicycles, and property monitoring. The company emphasizes reliability, simplicity, and safety, targeting consumers who seek peace of mind through GPS technology. Their market position is strengthened by Czech manufacturing, competitive subscription pricing, and customer support in the Czech language. The website offers a comprehensive product catalog, customer testimonials, and mobile applications for iOS and Android, reflecting a mature digital presence. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates multiple analytics and marketing tools including Google Analytics 4, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized, accessible, and employs HTTPS with CSRF protection in forms, indicating a solid technical foundation. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, Mala GPS presents a professional and trustworthy online presence with good security hygiene and privacy compliance. The main risk lies in the opaque domain registration status, which slightly diminishes trustworthiness. Strategic improvements in security transparency and domain registration clarity are recommended.

Jumpseller is an established e-commerce platform founded in 2012, offering a SaaS online store builder targeted at fast-growing businesses and entrepreneurs. The platform supports multiple languages and countries, positioning itself as a versatile solution for online retail. The website presents a professional and consistent brand image with clear business descriptions and a 14-day free trial offer, indicating a customer-focused approach. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, and Google Fonts, alongside robust analytics and marketing tools such as Google Analytics, Microsoft Clarity, Mixpanel, Facebook Pixel, and Visual Website Optimizer. Hosting appears to be on AWS infrastructure, ensuring scalability and reliability. The site is mobile-optimized and SEO-friendly, with good performance metrics. From a security perspective, the site uses HTTPS and implements reCAPTCHA v3 for bot mitigation. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published security policy or incident response information, which could be improved to enhance trust. Privacy and cookie policies are not explicitly found, though a consent mechanism is implied. Overall, Jumpseller demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

U

UC AB

uc.se

73

UC AB is Sweden's leading business and credit information company, providing comprehensive credit reports, risk assessments, and related services to both businesses and private individuals. The company operates under the parent group Enento and offers a wide range of services including corporate and personal credit information, ID protection, and credit scoring. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience in Sweden. Technically, the site uses modern web technologies such as Episerver CMS, Google Tag Manager, and cookie consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS enforced and ISO certifications (9001 and 27701) indicating a commitment to quality and privacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, UC AB demonstrates a high level of business credibility and digital maturity, with clear trust signals and compliance adherence.

S

SPŠ stavební Liberec

stavlib.cz

41

SPŠ stavební Liberec is a vocational secondary school specializing in construction and geodesy education located in the Czech Republic. The website serves as an information portal for prospective students, current students, and other stakeholders, offering detailed course information, news, and resources. The institution positions itself as a reputable regional educational provider with a focus on practical training and career readiness in prestigious technical fields. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and social media integrations, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and social media presence support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR, making it a trustworthy source for its audience.

R

Região de Turismo do Algarve

visitalgarve.pt

57

VisitAlgarve.pt is the official tourism portal for the Algarve region in Portugal, providing comprehensive information about the region's attractions, events, and travel services. The website serves as a key marketing platform to promote Algarve as a premier holiday destination in Europe, targeting tourists and travel professionals. It offers event promotion, corporate and convention services, and travel trade support, positioning itself as a leading regional tourism authority. Technically, the site is built on modern web technologies including React and integrates Google services for analytics and translation, reflecting a moderate to good level of digital maturity. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a solid security posture with room for improvement in security best practices and incident response readiness. The domain registration data aligns well with the website's regional tourism focus, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen the site's security and compliance posture.

A

AIRV

airv.pt

46

AIRV is a well-established Portuguese non-profit business association founded in 1982, serving over 500 member companies primarily in the Viseu region. The organization focuses on supporting regional businesses through innovation, training, legal assistance, incubation, and entrepreneurship development. Their website reflects a mature digital presence built on WordPress with modern technologies and SEO optimizations. Privacy and cookie compliance are well implemented, including GDPR consent mechanisms. The security posture is solid with HTTPS and no critical vulnerabilities detected, though some security headers could be improved. Overall, AIRV demonstrates a credible and trustworthy online presence aligned with its mission to promote regional economic and social development.

P

Portal 5G

portal5g.pt

40

Portal 5G is a specialized Portuguese informational website focused on the dissemination of news, thematic content, and updates related to 5G technology deployment and applications in Portugal. It serves a niche audience interested in telecommunications advancements and provides a structured portal with news, event agendas, and educational resources. The website uses WordPress CMS with a modern theme and plugins to deliver content effectively, including push notifications and cookie compliance mechanisms. While the site is well-designed and mobile-optimized, it lacks explicit privacy and security policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enforced, but additional security headers and incident response information would strengthen its security maturity. Overall, the site is legitimate, trustworthy, and provides valuable content to its target audience, but could improve in privacy transparency and security disclosures.

Communications 4 Expats is an official Portuguese government service provided by ANACOM, designed to assist expatriates with telecommunications contracts and services in Portugal. The website offers comprehensive guidance on topics such as arriving in Portugal, choosing operators, contracting, usage, switching, and cancelling services. It serves as a trusted consumer resource with links to official regulatory and consumer protection bodies. The platform is positioned as a government-backed consumer assistance portal targeting expatriates and consumers in Portugal.

ANACOM's Portal do Consumidor is an official Portuguese government website dedicated to providing consumers with comprehensive information and tools related to electronic communications and postal services. The portal offers services such as internet speed comparison, tariff simulations, consumer rights education, complaint submission, and updates on telecommunications developments like 5G and roaming. It serves as a trusted resource for Portuguese consumers seeking guidance and support in these sectors. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Tag Manager, and Alloy UI. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with room for improvements in modernizing some JavaScript libraries. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR and privacy best practices. However, it lacks explicit security policies, incident response contacts, and security headers, which could enhance its security posture. No vulnerabilities or suspicious content were detected. Overall, the portal is a professional, trustworthy, and well-maintained government resource with strong business credibility and good privacy compliance. Strategic improvements in security transparency and technical modernization would further strengthen its position.

U

UITP

uitp.org

70

UITP is a globally recognized international association dedicated to public transport authorities, operators, policy makers, scientific institutes, and sector service providers. It champions sustainable urban mobility and serves as a comprehensive network for all public transport stakeholders worldwide. The website reflects a mature digital presence with a modern tech stack including Vue.js and WordPress, supported by Cloudflare for hosting and security. The site is well-structured, mobile-optimized, and rich in content, offering resources, events, training, and membership services. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, UITP presents a trustworthy, professional, and authoritative online presence in the transportation sector.

R

Radio New Zealand

radionz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster, providing comprehensive news, current affairs, and audio content including podcasts and documentaries. The website serves a broad New Zealand audience interested in national and international news, cultural programming, and specialist audio features. RNZ holds a leading market position as a trusted public media entity with a large content offering and consistent branding. Technically, the RNZ website employs a modern SPA architecture with extensive use of JavaScript frameworks and libraries such as D3.js and Observable Plot for data visualization. It integrates advanced monitoring and analytics tools including New Relic, Google Tag Manager, Chartbeat, and Nielsen, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as lack of explicit security incident contact information, suggests room for improvement in privacy compliance and incident response readiness. Overall, RNZ's website is professionally designed, content-rich, and technically sound, reflecting its status as a major public broadcaster. The lack of WHOIS data is consistent with .nz domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing privacy disclosures, security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

N

Noor Jobs AB

ledigajobb.se

64

Ledigajobb.se is a Swedish job search platform operated by Noor Jobs AB, founded in 2018. The website offers a large inventory of job listings across Sweden and some international locations, targeting job seekers and employers. The platform provides career advice, guides, and recruitment advertising services, positioning itself as a significant player in the Swedish employment market. Technically, the site uses modern web technologies including Bootstrap, Google Fonts, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. It is hosted behind Cloudflare DNS and likely uses CDN services for performance. The site is mobile-optimized and implements a Progressive Web App (PWA) approach for enhanced user experience. Security-wise, the site enforces HTTPS and uses modern JavaScript libraries without visible vulnerabilities. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose security or incident response policies. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms on the homepage. The domain registration is transparent, consistent with the business location and history, and shows no suspicious patterns. Overall, the website is professional and functional but could improve in privacy and security transparency.

T

Traficon Oy

traficon.fi

54

Traficon Oy is a Finnish specialist company focused on traffic planning and transportation consulting. Their website presents a professional image with clear contact details and a focus on expert services in traffic safety and planning. The company targets municipalities, infrastructure planners, and transport authorities, positioning itself as an established player in the Finnish transportation sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, reflecting a mature digital presence for a small-sized professional services firm.

E

Ergomotion® Plus

ergomotionplus.com

71

Ergomotion® Plus operates an e-commerce platform specializing in smart beds designed to improve sleep quality and health. The website targets consumers interested in advanced sleep solutions, offering a range of smart beds through a Shopify-based online store. The business positions itself in a niche market with a focus on comfort and health benefits, leveraging multilingual support to cater to European markets. The company employs modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Trustpilot to enhance customer engagement and trust. Technically, the website is built on the Shopify platform using the Dawn theme, ensuring a responsive and user-friendly experience across devices. The infrastructure includes integrations with multiple third-party services for marketing, analytics, and cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are available. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which impacts overall trustworthiness. Overall, Ergomotion® Plus presents a professional and functional e-commerce presence with good privacy compliance and marketing sophistication. The main risks relate to domain registration opacity and limited published security policies. Strategic improvements in security transparency and direct contact information would enhance trust and compliance.

2

2NP production s.r.o.

oktagonmma.cz

67

OKTAGON MMA is a prominent European mixed martial arts organization founded in 2016, with a strong presence in the Czech Republic and neighboring countries. The website serves as the official platform for event promotion, fighter information, ticket sales, and media streaming through OKTAGON.tv. The organization targets MMA fans and sports enthusiasts, offering a comprehensive range of services including live events, online streaming, and merchandise sales. The business model is centered on event-driven revenue and media content distribution, supported by partnerships with major broadcasters and sponsors.

R

Route Radio s.r.o.

radiodalnice.cz

54

Rádio Dálnice, operated by Route Radio s.r.o., is a Czech media company specializing in transportation-related radio content. The company has transitioned from traditional FM broadcasting to a digital podcast platform focusing on travel, healthy lifestyle, sports, and news, targeting drivers and travelers primarily in the Czech Republic. The website reflects a niche media outlet with a clear business model centered on content production and distribution, supported by partnerships and EU co-financing. Technically, the site is built on WordPress with modern plugins and tools, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements in security headers and plugin updates are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

H

Harley-Davidson® Praha

harley-davidson-praha.cz

51

Harley-Davidson® Praha is an established authorized dealer and service center for Harley-Davidson motorcycles located in Prague, Czech Republic. Founded in 2005, the company offers a comprehensive range of services including new and used motorcycle sales, rentals, authorized servicing, and retail of branded clothing and accessories. The website reflects a strong brand presence with consistent Harley-Davidson branding and a clear focus on motorcycle enthusiasts and potential buyers in the local market. The business model integrates retail, service, and event engagement, positioning it as a key player in the regional motorcycle retail sector. Technically, the website employs modern JavaScript libraries such as jQuery and Glide.js for UI components, integrates Facebook SDK and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA for form security. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain's WHOIS data. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the HTML content, and there is no visible security policy or incident response information published. Tracking and retargeting scripts are present but managed with user consent. The WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, with a solid business credibility score. Strategic improvements in security headers and published security policies would enhance the security posture and trustworthiness further.

S

Silnice LK a.s.

silnicelk.cz

50

Silnice LK a.s. is a regional transportation service company specializing in the maintenance and upkeep of roads, greenery, and related infrastructure within the Liberecký kraj region of the Czech Republic. The company provides essential services including summer and winter road maintenance, vegetation management, and repair of road components, positioning itself as a key regional player in transportation infrastructure services. The website reflects a professional and consistent brand image, targeting local government entities, residents, and road users in the region. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, hosted likely within the Czech Republic under a reputable registrar. The site uses Insite CMS, supports mobile optimization, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs cookie consent with default denial of storage, indicating a privacy-conscious approach. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and expanding accessibility features to further strengthen the security posture and user trust.

A

Asociace autoškol ČR, z.s.

asociaceautoskol.cz

47

Asociace autoškol ČR, z.s. is a Czech non-profit association dedicated to improving the quality and standards of driving schools and driver education in the Czech Republic. The organization provides educational seminars, develops innovative testing materials including hazard perception videos, and offers support services such as an ombudsman for driving schools and students. It maintains partnerships with government bodies and safety organizations, positioning itself as a key stakeholder in national driver education and road safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google services such as reCAPTCHA v3 and Google Analytics. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although a formal privacy policy page is not found. From a security perspective, the site uses HTTPS and bot protection but lacks visible security headers and formal security policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional presentation and official contact information mitigate concerns. Overall, the website is a credible and professional platform supporting a non-profit association with a clear mission in driver education. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

L

LightRocket

lightrocket.com

67

LightRocket operates as a digital asset management (DAM) platform targeting global organizations and media professionals. The company offers a comprehensive DAM system with AI-powered tools, collaboration features, and seamless integrations to enhance digital asset workflows. The website presents a professional and polished image with strong client testimonials and a clear value proposition. Technically, the site uses modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, though some security headers are not detected and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the overall business credibility remains solid based on website content and client references.

N

Natural.PT

natural.pt

56

Natural.PT is a Portuguese platform dedicated to promoting the country's protected natural areas, offering detailed information on pathways, places to stay, eat, and buy, as well as membership options for community engagement. The platform targets nature enthusiasts and tourists interested in sustainable exploration of Portugal's natural heritage. Technically, the website is a modern React single-page application utilizing Google Analytics, Google Tag Manager, and reCAPTCHA v3 for bot protection. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its niche effectively.

A

ANACOM - Autoridade Nacional de Comunicações

anacom.pt

71

ANACOM is the national regulatory authority for postal and electronic communications in Portugal. It serves as a government entity overseeing regulation, consumer protection, spectrum management, and licensing within the telecommunications sector. The website is professionally designed, content-rich, and targets Portuguese consumers, businesses, and international stakeholders. It provides comprehensive regulatory information, public consultations, and consumer resources. Technically, the site uses established libraries such as jQuery and Bootstrap, integrates Google Tag Manager for analytics, and is mobile optimized with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a formal security policy page. The domain registration aligns with the official Portuguese authority, confirming legitimacy. Overall, the website is trustworthy, professional, and well-maintained, supporting ANACOM's authoritative role in Portugal's communications sector.

E

European Automobile Manufacturers' Association

futuredriven.eu

59

The website represents the European Automobile Manufacturers' Association (ACEA) and serves as a platform to promote their #FutureDriven initiative focused on the EU automotive industry's future, sustainability, and mobility revolution. It provides policy recommendations, manifestos, and multimedia content targeting policymakers, industry stakeholders, and the public. The technical infrastructure is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response contacts are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a large industry association.

R

Radio New Zealand

rnz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster providing comprehensive news, current affairs, audio on demand, podcasts, and documentaries. The website serves as a primary digital platform for delivering timely and relevant content to the New Zealand public, positioning itself as a trusted media source. The site features a professional design, clear navigation, and multimedia content tailored to a general audience interested in news and cultural programming. Technically, the website employs modern JavaScript frameworks and libraries, including New Relic for performance monitoring, Google Tag Manager for marketing and analytics, and D3.js for data visualization. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident in meta tags and structured content. Performance is moderate, with asynchronous loading of scripts and CDN usage. From a security perspective, RNZ uses HTTPS with good SSL configuration and includes security best practices such as monitoring and error tracking. However, explicit privacy and cookie policies are not evident in the provided content, and no dedicated security or incident response pages were found. The WHOIS data for the domain is unavailable due to registry policies, but the website's public broadcaster status and content quality provide strong legitimacy. Overall, RNZ's website demonstrates a mature digital presence with strong business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and cookie policies, implement a vulnerability disclosure mechanism, and provide explicit contact information for security incidents.

R

RISE Research Institutes of Sweden

kajt.org

53

Forskningsprogrammet KAJT is a Swedish research program focused on optimizing railway capacity and traffic flow, established in 2013 and operated under the auspices of RISE Research Institutes of Sweden. The program collaborates with Trafikverket, academia, and industry to develop tools, methods, and concepts to improve the efficiency, quality, and flexibility of the Swedish railway system. The website serves as an information hub for ongoing projects, seminars, and research results, targeting researchers, industry stakeholders, and public authorities. Technically, the website is built using the One.com Web Editor platform, hosted by One.com, and incorporates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO is basic but functional, with proper meta tags and Open Graph data present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and important security headers such as Content-Security-Policy and Strict-Transport-Security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or sensitive data collection mechanisms are detected, reducing immediate risk exposure. Overall, the website is professional, trustworthy, and content-rich, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

M

MYRIAD-EU

myriadproject.eu

52

MYRIAD-EU is a European Union funded research project focused on developing a harmonised framework for multi-hazard, multi-sector, and systemic risk management. The project addresses interconnected risks such as droughts, floods, and their cascading effects on ecosystems, energy, finance, food, infrastructure, and tourism sectors. The website presents detailed information about the project, its pilots across Europe, and its mission to improve disaster prevention and mitigation through scientific collaboration. Technically, the website is built on WordPress, uses modern JavaScript libraries like jQuery and Slick, and integrates analytics tools such as Google Tag Manager and Matomo. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is good with HTTPS enabled, but could be improved with additional security headers and published policies. WHOIS data is privacy protected, which is typical for EU projects, and does not detract from the site's legitimacy. Overall, the site is professional and trustworthy, serving as an informative platform for the MYRIAD-EU project.

C

Cortinatex Kft.

szonyegakcio.hu

61

Cortinatex Kft. operates szonyegakcio.hu, a Hungarian e-commerce website specializing in a wide range of rugs and home textile products. The business targets Hungarian consumers seeking quality rugs in various styles and sizes, offering additional home comfort products. The company has an established market presence since 2016, with a clear focus on retail and customer satisfaction through competitive pricing and convenient delivery services. The website is well-structured, professionally designed, and provides comprehensive product categories and information to facilitate user shopping experience. Technically, the website leverages a mature technology stack including jQuery, Tippy.js, and Perfect Scrollbar, running on the UNAS e-commerce platform. It integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, enabling effective user tracking and advertising. The site is mobile-optimized and SEO-friendly, ensuring good accessibility and performance for users. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While no explicit security policy or incident response information is published, the site follows best practices in data protection and does not expose sensitive information. The domain registration data aligns with the business claims, indicating legitimacy and stability. Overall, szonyegakcio.hu presents a trustworthy and professional online retail platform with solid technical and privacy compliance foundations. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

M

Memento Historia - Magazín o dávné a ještě dávnější historii

memento-historia.cz

41

Memento Historia is a Czech-language online magazine dedicated to ancient and medieval history, providing educational articles and multimedia content such as podcasts on YouTube. The website targets history enthusiasts and the general public interested in historical topics, operating primarily as a content publisher monetized through advertising networks like Seznam SSP and Google Ads. The site demonstrates a consistent and professional brand presentation with a good quality of content and user experience. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Google Fonts, and integrates analytics and advertising scripts from Google and Seznam. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers, and no explicit privacy or cookie policies are found, though a cookie consent mechanism is present. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Despite this, the website appears professionally maintained with active content updates and social media presence. No critical security vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, Memento Historia is a niche media site with solid content and technical foundation but would benefit from improved transparency in privacy policies, enhanced security headers, and WHOIS data availability to strengthen trust and compliance.

W

Wiz Team

wiz-team.com

66

Wiz Team operates a website offering event management software solutions under the brand Event Works. The company appears to be a small technology business founded in 2012, focusing on providing software tools for event organizers and related businesses. The website is built on WordPress using Elementor, indicating a modern but standard CMS infrastructure. The technical setup includes performance optimization plugins like WPRocket and anti-spam measures via CleanTalk, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and some security plugins, but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and functional but would benefit from enhanced security and compliance documentation.

A

Axeptio

axeptio.eu

73

Axeptio is a specialized Consent Management Platform (CMP) providing GDPR, CCPA, Law 25, and other international privacy regulation compliance solutions. Trusted by over 80,000 websites and apps, Axeptio offers customizable consent banners, contractual consent modules, mobile SDKs, and compliance tools tailored for brands, publishers, and agencies. The company holds certifications from Google and IAB Europe, positioning itself as a leading player in the privacy compliance SaaS market. Technically, the website is built on HubSpot CMS, leveraging modern JavaScript libraries and integrations with major marketing and analytics platforms such as Google Tag Manager and HubSpot Analytics. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent mechanisms implemented, though explicit security headers could be improved. WHOIS data is privacy protected, which is typical for SaaS companies, and no suspicious patterns were detected. Overall, Axeptio demonstrates a mature digital presence with strong business credibility and compliance focus.

R

Repsol

repsol.pt

69

Repsol Portugal operates as a major energy supplier providing electricity, gas, and related services to individual consumers. The website is well-branded and professionally designed, targeting retail customers with a clear focus on energy solutions and customer benefits. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Adobe Web SDK, and Gigya, and employs security best practices such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies on the accessible pages indicates room for improvement in compliance transparency. Overall, the security posture is strong with proper headers and no detected vulnerabilities, but privacy compliance could be enhanced by publishing comprehensive policies and contact points for incident response.

E

Ergomotion®

ergomotion.com

64

Ergomotion® is a leading global manufacturer and provider of smart and adjustable bed bases, focusing on enhancing comfort, style, and well-being through innovative sleep technology. The company operates primarily in the B2B space, offering private label solutions and retail partnerships to expand its market reach. Their market position is strong, supported by a large global retailer network and the world's largest adjustable base manufacturing facility. Technically, the website is built on modern Webflow CMS infrastructure, integrating advanced tools such as HubSpot forms and Google Tag Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly available. Overall, the website and business demonstrate high professionalism and trustworthiness, with recommendations to enhance transparency by adding terms of service and security disclosures.

Childhood Education International is a well-established international non-profit organization focused on advancing education and child development globally since 1892. The organization operates a professional website that highlights its global network, educational services, publications, and partnership opportunities. The site targets educators, donors, and partners interested in international development and education innovation. The business model centers on collaboration, professional learning, and advocacy to improve educational outcomes worldwide. The organization maintains a reputable market position with certifications and trust indicators supporting its credibility. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and multiple analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and DNS are managed via reputable providers, with Cloudflare DNS and GoDaddy registrar. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and terms of service are present and GDPR compliant. However, no explicit security policy or incident response contacts were identified, suggesting room for improvement in security governance. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience. The risk profile is low with minor security enhancements recommended. Strategic focus on publishing security policies and enabling DNSSEC would strengthen the security posture and trust further.

The American Petroleum Institute (API) website serves as the digital presence for the national trade association representing the U.S. oil and natural gas industry. The site provides comprehensive information about the industry, membership services, energy economics, and standards development. It targets industry professionals, policymakers, and consumers interested in energy topics. The business model is centered on advocacy, standards, and member services, positioning API as a key industry representative. Technically, the website employs modern frameworks such as Bootstrap, integrates multiple analytics and advertising tools, and uses Google reCAPTCHA for form security. The site is mobile optimized and demonstrates good SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and explicit incident response or vulnerability disclosure information. Privacy and cookie policies are not clearly found in the provided content, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and content-rich, but WHOIS data is unavailable from the provided raw output, limiting domain trust verification.

BP is a global energy company focused on delivering energy solutions including oil, gas, bioenergy, renewables, and electric vehicle charging. The website reflects a large multinational enterprise with a comprehensive digital presence, including detailed corporate governance, investor relations, sustainability, and career information. The technical infrastructure uses modern web technologies such as Adobe Experience Manager CMS, Google Tag Manager, and Algolia search, indicating a mature digital platform. Security posture is moderate with cookie consent implemented but lacks visible security headers or explicit security policies in the provided content. WHOIS data is unavailable, which slightly impacts trust but the website's branding and content strongly support legitimacy. Overall, the site is professional, well-structured, and targets a general audience interested in energy and corporate information.

H

Home

castrol.com

77

Castrol's website presents a professional corporate presence focused on lubricants and specialty oils for automotive and industrial sectors. The company positions itself as a global leader embracing innovation and sustainability. The technical infrastructure includes modern tracking and video playback technologies, with good mobile optimization and SEO practices. However, explicit privacy and terms of service pages are not clearly found, and WHOIS data for the domain is unavailable, which raises transparency concerns. Security posture is moderate with HTTPS implied but lacking visible security headers in the provided data. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

N

Národní divadlo Brno

divadlojedarek.cz

51

Národní divadlo Brno operates the website divadlojedarek.cz, offering gift vouchers for theater performances in Brno. The site targets cultural consumers and gift buyers in the Czech Republic, providing an online platform for purchasing vouchers valid for one year. The business model focuses on enhancing theater attendance through flexible gift options. Technically, the site is built on WordPress with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The website demonstrates good design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

N

Národní divadlo Brno, p. o.

janacek-brno.cz

58

Janáček Brno is an internationally recognized opera and music festival organized by Národní divadlo Brno, a reputable cultural institution in the Czech Republic. The festival celebrates the legacy of composer Leoš Janáček and holds a strong position in the European cultural landscape, evidenced by its International Opera Awards recognition. The website is professionally designed, multilingual, and provides comprehensive information about the festival, partners, and media resources. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and GDPR compliance mechanisms, though some security headers could be improved. Overall, the site reflects a mature and trustworthy cultural event with strong business credibility.

A

American Chemistry Council

americanchemistry.com

73

The American Chemistry Council (ACC) is a prominent trade association representing the chemical industry in the United States. Their website reflects a mature, professional organization focused on advocacy, scientific research, and promoting safety and sustainability within the chemical sector. The ACC positions itself as a leader in innovation and manufacturing, targeting industry professionals, policymakers, and the general public interested in chemistry's role in the economy. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, reCAPTCHA v3, and a cookie consent management system (Termly). The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. The use of Ibexa CMS is inferred from HTML attributes, indicating a robust content management infrastructure. Security-wise, the site enforces HTTPS, uses bot protection, and implements cookie consent mechanisms. However, it lacks visible security headers and a published security.txt file, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data reduces transparency slightly. The ACC demonstrates strong compliance with privacy regulations and provides clear user consent options. Strategic recommendations include improving security header implementation, publishing vulnerability disclosure information, and enhancing incident response transparency.

T

Toyota Portugal

toyota.pt

68

Toyota Portugal operates as the official regional website for Toyota's automobile sales and services in Portugal, offering new and used vehicles along with customer support and dealer location services. The website reflects a strong brand presence consistent with Toyota's global identity and targets consumers in Portugal interested in automotive products. The business model centers on vehicle sales and after-sales services, positioning Toyota as a major player in the Portuguese transportation sector. Technically, the website is built on Adobe Experience Manager, leveraging advanced digital asset management via Adobe Scene7, and integrates monitoring and analytics tools such as Datadog RUM and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Hosting and content delivery utilize Toyota Europe infrastructure and cloud services, ensuring reliable performance. From a security perspective, the site enforces HTTPS, employs reCAPTCHA for form protection, and uses session replay with input masking to safeguard user data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, representing areas for improvement. The absence of a visible privacy policy and terms of service pages also suggests incomplete privacy compliance documentation. Overall, the website is professional, trustworthy, and technically sound, with moderate to high security posture. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security.txt files, enhancing accessibility, and maintaining vigilant third-party script audits to sustain security and compliance.

M

Motul

motul.com

68

Motul is a well-established company specializing in high-performance engine oils, lubricants, and vehicle care products for a wide range of vehicles including cars, motorcycles, trucks, and bicycles. The website reflects a strong market position with a comprehensive product offering and multiple sales channels including B2B and e-commerce platforms. The brand is supported by consistent and professional digital presence with clear navigation and rich content. Technically, the site is built on modern frameworks such as Next.js and React, integrating advanced analytics and marketing tools with user consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the brand recognition and content quality. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies to further strengthen trust and compliance.

F

Fédération Internationale de Motocyclisme

fim-moto.com

58

The Fédération Internationale de Motocyclisme (FIM) operates as the global governing body for motorcycle sport and motorcycling activities. It commands a strong market position as the authoritative international federation, organizing multiple world championships and providing comprehensive regulatory frameworks. The website serves a diverse audience including motorcycling enthusiasts, federations, and members of the FIM family, offering news, official documents, event calendars, and educational resources. Technically, the site is built on TYPO3 CMS and integrates modern analytics tools such as Matomo and Google Tag Manager, alongside multimedia content from YouTube and Google Maps APIs. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced, but could benefit from additional security headers and explicit security policies. Despite the strong digital presence and professional content, the absence of WHOIS registration data for the domain introduces a notable risk factor. This inconsistency may be due to privacy protection or a lookup failure but warrants further investigation. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website reflects a mature and professional digital asset for an international sports federation, with recommendations focusing on enhancing security headers, clarifying domain registration status, and publishing incident response information.

F

Fédération Internationale de Motocyclisme

fim-pictures.com

60

Fédération Internationale de Motocyclisme (FIM) operates fim-pictures.com as an official media platform providing extensive photographic content and official documents related to motorcycling sports worldwide. The website targets motorcycling enthusiasts, media professionals, and sports fans, offering free access to images upon signup. The platform is well-positioned as the international governing body for motorcycle sport, leveraging partnerships with recognized brands such as Motul and Hertz. Technically, the site is built on modern frameworks including Next.js and Chakra UI, hosted with reputable providers, and optimized for performance and mobile use. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, with no indications of malicious or adult content.

F

Fédération Internationale de Motocyclisme

fim-landspeed-worldrecords.com

50

The website www.fim-landspeed-worldrecords.com serves as the official platform for the Fédération Internationale de Motocyclisme (FIM) to publish and manage motorcycle land speed world records. It provides comprehensive information including record rules, event calendars, news, galleries, and registration for record attempts. The site targets motorcycle enthusiasts, racers, and professionals interested in land speed achievements, positioning itself as an authoritative source in this niche. Technically, the site is built on TYPO3 CMS, leveraging modern analytics tools such as Google Tag Manager and Matomo, and integrates Google Maps for location services. The design is professional, mobile-optimized, and SEO-friendly, offering a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses standard analytics scripts but lacks explicit security headers and a published security policy or incident response information. The absence of WHOIS registration data reduces domain trustworthiness, although the website's branding and external links to official FIM domains support its legitimacy. Overall, the site is functional, secure, and compliant with privacy regulations, but could improve transparency and security posture.

F

Fédération Internationale de Motocyclisme

fim-awards.com

49

The Fédération Internationale de Motocyclisme (FIM) operates the FIM Awards website to celebrate and recognize world champions in motorcycling disciplines globally. The site serves as an informational and promotional platform for annual award ceremonies, trophies, and related motorcycling events. It targets motorcycling enthusiasts, sports professionals, and stakeholders within the motorcycling sports community. The organization positions itself as a reputable international non-profit entity dedicated to the sport's promotion and recognition. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Matomo for analytics, and integrates Google Maps API for location services. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reputable analytics tools. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and branding strongly indicate a legitimate organization. Overall, the website presents a professional and trustworthy front for the FIM Awards, but improvements in transparency regarding domain registration, security policies, and contact information would enhance trust and compliance. Strategic recommendations include implementing security headers, publishing incident response contacts, and verifying domain registration details to strengthen credibility and security posture.

F

FIM (Fédération Internationale de Motocyclisme)

fim-moto.tv

66

FIM-MOTO.TV is the official video streaming platform of the Fédération Internationale de Motocyclisme (FIM), providing live broadcasts, race highlights, and exclusive motorcycle sport content globally. The platform targets motorcycle sport enthusiasts and serves as a central hub for FIM's world and national championships. Technically, the website leverages modern web technologies including Next.js, React, and integrates analytics tools such as Matomo and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the platform presents a professional and trustworthy front with room for enhanced transparency and security practices.