Security Directory

C

CZ.BASKETBALL

cbf.cz

50

CZ.BASKETBALL is a well-established Czech basketball portal founded in 2009, serving as a central hub for basketball news, videos, competitions, and community engagement in the Czech Republic. The website targets basketball fans, players, coaches, and officials, providing comprehensive coverage of national teams, leagues, and events. It maintains strong partnerships with official basketball organizations and sponsors, enhancing its market position as a leading basketball information source in the region. Technically, the site uses modern web technologies including Google Tag Manager and Google Analytics, with good mobile optimization and a custom CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. Privacy compliance is basic, with no clear privacy policy or terms of service pages found. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and security documentation.

B

Brunswick Bowling

brunswickbowling.com

57

Brunswick Bowling is a well-established company specializing in high-performance bowling equipment and supplies, targeting bowlers of all skill levels. The company positions itself as a leading supplier in the retail bowling industry, offering a wide range of products including bowling balls, bags, shoes, and apparel. The website reflects a professional retail business model with a focus on e-commerce and brand consistency. Technically, the site is built on Craft CMS, hosted on DigitalOcean infrastructure, and employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot for tracking and consent management. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS, implements CSRF tokens, and has a cookie consent mechanism, but lacks explicit security policies and some security headers. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy and professionally maintained but would benefit from publishing clear privacy and terms of service pages and providing explicit contact information to enhance compliance and user trust.

L

LaserMaxx74

lasermaxx74.fr

57

LaserMaxx74 is a small local entertainment business based in Annecy, France, specializing in laser game and quiz boxing activities. The company targets a broad audience including families and children aged 8 and above, offering event hosting for birthdays, corporate events, and bachelor/bachelorette parties. The website is professionally designed using modern web technologies and integrates booking services through a partner platform. The digital infrastructure includes analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical and justified for this business type. Overall, the website presents a trustworthy and professional image suitable for its market niche.

S

SYNOT TIP, a.s.

synottip.sk

66

SYNOT TIP, a.s. operates a professional online sports betting and gaming platform primarily targeting Slovak customers. The website offers a variety of betting options including live bets, virtual games, and promotions, positioning itself as a leading player in the Slovak market. The company branding is consistent and the site content is relevant and professionally presented. Technically, the site uses a modern tech stack including ASP.NET, jQuery, and integrates third-party services such as Google Analytics, Hotjar, Zendesk, and Cookiebot for analytics, customer support, and privacy compliance. Security posture is solid with HTTPS enforced, anti-CSRF protections, and bot detection mechanisms in place. However, explicit security policies and incident response contacts are not published, and no terms of service page was found. Overall, the site is trustworthy and compliant with GDPR, with a comprehensive cookie consent mechanism. The domain WHOIS data aligns well with the business claims, reinforcing legitimacy.

K

Kingsbet

kingsbet.cz

64

Kingsbet is an online gambling and sports betting platform targeting the Czech market, offering online casino games, live casino, and sports betting services with promotional bonuses. The website is professionally designed with consistent branding and good content quality tailored for adult users interested in gambling. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for cookie consent management. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of WHOIS data and lack of visible privacy policy or terms of service pages reduce transparency and trustworthiness. Security posture is moderate with HTTPS enforced but missing security headers and no explicit security or incident response policies disclosed.

S

Sazka

sazkabet.cz

55

Sazka.cz is a leading Czech online gambling and lottery operator offering a wide range of sports betting and lottery products. The website provides extensive betting markets including live betting, supported by modern web technologies and integrations with analytics and telemetry services. The company targets adult sports bettors primarily in the Czech Republic, offering attractive bonuses and a mobile app to enhance user engagement. The website demonstrates a high level of digital maturity with professional design, clear navigation, and GDPR-compliant privacy and cookie policies. Security posture is strong with HTTPS, secure third-party integrations, and cookie consent mechanisms, although some HTTP security headers could be improved. The absence of public WHOIS data suggests privacy protection typical for gambling businesses, which does not detract from the site's legitimacy. Overall, Sazka.cz presents a trustworthy and professional online gambling platform with a solid technical foundation.

U

UITP Summit

uitpsummit.org

63

UITP Summit is a prominent event organizer specializing in public transport sector events, with the 2026 summit scheduled in Dubai. The website serves as a comprehensive platform for event information, including exhibition, congress, networking, sponsorship, and exhibitor opportunities. The site targets professionals and stakeholders in the public transport industry, offering a well-structured and professionally designed user experience. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Analytics, and CookieYes for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence aligned with its business goals.

The website www.noveotazky.cz serves as an educational platform focused on providing new test questions and traffic situation scenarios for driver license applicants in the Czech Republic. It is supported by reputable organizations including the Czech Insurers' Bureau and various government and road safety partners, positioning it as a niche but trusted resource in the transportation education sector. The site targets individuals preparing for driving tests and aims to enhance road safety awareness through interactive content such as hazard perception video sequences. From a technical perspective, the site employs modern JavaScript frameworks, likely Vue.js, and is built on a Laravel backend, as indicated by route and sanctum references. It integrates Google Tag Manager for analytics and uses libraries like SweetAlert2 and NProgress for UI enhancements. The site is mobile-optimized with good design quality and navigation clarity, though accessibility features are basic. Performance is moderate, with room for improvement in SEO and accessibility. Security-wise, the site enforces HTTPS and includes CSRF tokens, but lacks visible security headers and explicit privacy or cookie policies. No vulnerability disclosures or incident response contacts are provided, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain legitimacy verification, though the presence of partner logos and contact email supports credibility. Overall, the website is a well-designed, functional educational resource with a solid business foundation but could benefit from enhanced privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

S

Start Driving

startdriving.cz

54

Start Driving is a Czech Republic-based educational project focused on enhancing the knowledge, responsibility, and driving skills of novice drivers. Supported by the Association of Driving Schools of the Czech Republic and other partners including government bodies, the project offers free advanced driver training and educational activities for young drivers, driving instructors, and responsible parents. The website reflects a well-structured initiative with strong institutional backing and a clear mission to improve road safety through education. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Google Analytics, and YouTube embeds. It implements a cookie consent mechanism compliant with GDPR requirements, although a dedicated privacy policy page is not clearly found. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers are missing, and the Google Maps API key is exposed in the source code, which should be reviewed for restrictions. From a security perspective, the site uses HTTPS and has no visible critical vulnerabilities or exposed sensitive data. The cookie consent mechanism and partner trust signals enhance its compliance posture. The absence of WHOIS registrant data limits domain trust assessment but does not detract significantly from the overall legitimacy given the project's nature and partnerships. Overall, Start Driving presents a credible, well-supported educational platform with moderate technical maturity and good security practices. Strategic improvements in privacy policy transparency and security header implementation are recommended to enhance compliance and trust further.

B

B interactive

binteractive.cz

61

B interactive is a Czech-based creative studio specializing in web development, graphic design, and hosting services, operating since 2013. The company targets businesses and organizations seeking professional web and graphic solutions, positioning itself as a quality-focused local service provider. Their website reflects a consistent brand and offers clear navigation and relevant content to their audience. Technically, the site uses common web technologies such as jQuery, Slick Carousel, Google Analytics, and Google Tag Manager, hosted under Czech domain registrars and name servers. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. Security posture is moderate with cookie consent mechanisms in place, but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR through its privacy and cookie policies.

R

Ráj aut

rajaut.cz

53

Ráj aut is a Czech Republic based online automotive classifieds platform specializing in car advertisements, sales, and bazaar listings. The website offers a comprehensive search and filter system for vehicles, targeting car buyers and sellers primarily within the Czech market. It maintains a moderate market position with partnerships to related automotive sites and services. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site is served over HTTPS, ensuring secure data transmission, but lacks some advanced security headers and has only basic mobile optimization. Privacy and cookie policies are present but could be more explicit and comprehensive. No WHOIS data was retrievable, which slightly impacts trustworthiness but the site content and business presence indicate legitimate operation. Overall, the website is functional, moderately secure, and serves its niche audience effectively.

R

Ráj veteránů

rajveteranu.cz

55

Ráj veteránů is a specialized online classifieds platform focused on vintage and classic vehicles primarily serving the Czech Republic market. The website offers a comprehensive vehicle listing service with detailed search filters, partner promotions, and community engagement through a Facebook group. The business operates as a niche marketplace catering to classic car enthusiasts and sellers, with a business model centered on advertising and listing fees. Technically, the site employs modern web technologies including Google Fonts, Google Analytics, and Adform for advertising and tracking, with HTTPS and security headers implemented to ensure secure user interactions. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact information is limited to a contact form. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and active content suggest legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, making it a reliable resource for its target audience.

S

Sportovní vozy

sportovnivozy.cz

55

Sportovní vozy is a Czech online platform specializing in the listing and sale of sports cars. It offers classified ads, dealer catalogs, automotive news, and advertising opportunities primarily targeting car enthusiasts and buyers in the Czech Republic and Slovakia. The website has been active since at least 2007, indicating a stable presence in its niche market. The business model revolves around providing a marketplace for sports car sales and monetizing through advertising and partnerships. Technically, the website employs common web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site uses HTTPS and Google Fonts, but lacks advanced security headers and explicit privacy or terms of service pages. Mobile optimization and accessibility are basic, with room for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of WHOIS registrant data and missing security headers reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. The site uses extensive user tracking through third-party analytics and advertising services. Overall, the website is functional and professionally designed for its target audience but would benefit from enhanced security practices, clearer privacy disclosures, and improved contact transparency. The domain's WHOIS data is unavailable, which slightly impacts the trust score but does not negate the site's legitimacy based on content and longevity.

T

TECHNOLOGY - GARAGE spol. s r.o.

technology-garage.cz

73

TECHNOLOGY - GARAGE spol. s r.o. is a Czech Republic based company specializing in professional equipment and machinery for automotive service centers, tire services, industrial workshops, and the energy sector. Established since 1995, the company offers a broad catalog of products including lifts, compressors, diagnostic tools, and safety equipment, positioning itself as a trusted supplier in its niche markets. The website reflects a mature business with a clear focus on B2B customers in automotive and energy industries. The technical infrastructure of the website is built on a proprietary or custom e-commerce platform (wpj.cz), utilizing modern web technologies such as JavaScript, CSS, Google Tag Manager, Google Analytics, and Sentry for error monitoring. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website employs HTTPS and error monitoring but lacks some important security headers and explicit privacy and security policies. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, but no dedicated privacy or terms of service pages were found. The absence of WHOIS data for the domain reduces trust in the domain registration legitimacy, though the website content and business presence suggest a legitimate operation. Overall, the website presents a professional and trustworthy business front with room for improvement in security best practices and privacy transparency. The risk level is moderate, primarily due to missing domain registration data and incomplete privacy documentation.

M

Mala GPS

malagps.cz

55

Mala GPS operates as a Czech-based e-commerce retailer specializing in GPS tracking devices tailored for pets, personal safety, bicycles, and property monitoring. The company emphasizes reliability, simplicity, and safety, targeting consumers who seek peace of mind through GPS technology. Their market position is strengthened by Czech manufacturing, competitive subscription pricing, and customer support in the Czech language. The website offers a comprehensive product catalog, customer testimonials, and mobile applications for iOS and Android, reflecting a mature digital presence. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates multiple analytics and marketing tools including Google Analytics 4, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized, accessible, and employs HTTPS with CSRF protection in forms, indicating a solid technical foundation. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, Mala GPS presents a professional and trustworthy online presence with good security hygiene and privacy compliance. The main risk lies in the opaque domain registration status, which slightly diminishes trustworthiness. Strategic improvements in security transparency and domain registration clarity are recommended.

Jumpseller is an established e-commerce platform founded in 2012, offering a SaaS online store builder targeted at fast-growing businesses and entrepreneurs. The platform supports multiple languages and countries, positioning itself as a versatile solution for online retail. The website presents a professional and consistent brand image with clear business descriptions and a 14-day free trial offer, indicating a customer-focused approach. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, and Google Fonts, alongside robust analytics and marketing tools such as Google Analytics, Microsoft Clarity, Mixpanel, Facebook Pixel, and Visual Website Optimizer. Hosting appears to be on AWS infrastructure, ensuring scalability and reliability. The site is mobile-optimized and SEO-friendly, with good performance metrics. From a security perspective, the site uses HTTPS and implements reCAPTCHA v3 for bot mitigation. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published security policy or incident response information, which could be improved to enhance trust. Privacy and cookie policies are not explicitly found, though a consent mechanism is implied. Overall, Jumpseller demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

U

UC AB

uc.se

73

UC AB is Sweden's leading business and credit information company, providing comprehensive credit reports, risk assessments, and related services to both businesses and private individuals. The company operates under the parent group Enento and offers a wide range of services including corporate and personal credit information, ID protection, and credit scoring. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience in Sweden. Technically, the site uses modern web technologies such as Episerver CMS, Google Tag Manager, and cookie consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS enforced and ISO certifications (9001 and 27701) indicating a commitment to quality and privacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, UC AB demonstrates a high level of business credibility and digital maturity, with clear trust signals and compliance adherence.

S

SPŠ stavební Liberec

stavlib.cz

41

SPŠ stavební Liberec is a vocational secondary school specializing in construction and geodesy education located in the Czech Republic. The website serves as an information portal for prospective students, current students, and other stakeholders, offering detailed course information, news, and resources. The institution positions itself as a reputable regional educational provider with a focus on practical training and career readiness in prestigious technical fields. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and social media integrations, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and social media presence support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR, making it a trustworthy source for its audience.

R

Região de Turismo do Algarve

visitalgarve.pt

57

VisitAlgarve.pt is the official tourism portal for the Algarve region in Portugal, providing comprehensive information about the region's attractions, events, and travel services. The website serves as a key marketing platform to promote Algarve as a premier holiday destination in Europe, targeting tourists and travel professionals. It offers event promotion, corporate and convention services, and travel trade support, positioning itself as a leading regional tourism authority. Technically, the site is built on modern web technologies including React and integrates Google services for analytics and translation, reflecting a moderate to good level of digital maturity. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a solid security posture with room for improvement in security best practices and incident response readiness. The domain registration data aligns well with the website's regional tourism focus, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen the site's security and compliance posture.

A

AIRV

airv.pt

46

AIRV is a well-established Portuguese non-profit business association founded in 1982, serving over 500 member companies primarily in the Viseu region. The organization focuses on supporting regional businesses through innovation, training, legal assistance, incubation, and entrepreneurship development. Their website reflects a mature digital presence built on WordPress with modern technologies and SEO optimizations. Privacy and cookie compliance are well implemented, including GDPR consent mechanisms. The security posture is solid with HTTPS and no critical vulnerabilities detected, though some security headers could be improved. Overall, AIRV demonstrates a credible and trustworthy online presence aligned with its mission to promote regional economic and social development.

P

Portal 5G

portal5g.pt

40

Portal 5G is a specialized Portuguese informational website focused on the dissemination of news, thematic content, and updates related to 5G technology deployment and applications in Portugal. It serves a niche audience interested in telecommunications advancements and provides a structured portal with news, event agendas, and educational resources. The website uses WordPress CMS with a modern theme and plugins to deliver content effectively, including push notifications and cookie compliance mechanisms. While the site is well-designed and mobile-optimized, it lacks explicit privacy and security policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enforced, but additional security headers and incident response information would strengthen its security maturity. Overall, the site is legitimate, trustworthy, and provides valuable content to its target audience, but could improve in privacy transparency and security disclosures.

Communications 4 Expats is an official Portuguese government service provided by ANACOM, designed to assist expatriates with telecommunications contracts and services in Portugal. The website offers comprehensive guidance on topics such as arriving in Portugal, choosing operators, contracting, usage, switching, and cancelling services. It serves as a trusted consumer resource with links to official regulatory and consumer protection bodies. The platform is positioned as a government-backed consumer assistance portal targeting expatriates and consumers in Portugal.

ANACOM's Portal do Consumidor is an official Portuguese government website dedicated to providing consumers with comprehensive information and tools related to electronic communications and postal services. The portal offers services such as internet speed comparison, tariff simulations, consumer rights education, complaint submission, and updates on telecommunications developments like 5G and roaming. It serves as a trusted resource for Portuguese consumers seeking guidance and support in these sectors. Technically, the website is built on the Liferay CMS platform, utilizing technologies such as jQuery, Google Tag Manager, and Alloy UI. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with room for improvements in modernizing some JavaScript libraries. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR and privacy best practices. However, it lacks explicit security policies, incident response contacts, and security headers, which could enhance its security posture. No vulnerabilities or suspicious content were detected. Overall, the portal is a professional, trustworthy, and well-maintained government resource with strong business credibility and good privacy compliance. Strategic improvements in security transparency and technical modernization would further strengthen its position.

U

UITP

uitp.org

70

UITP is a globally recognized international association dedicated to public transport authorities, operators, policy makers, scientific institutes, and sector service providers. It champions sustainable urban mobility and serves as a comprehensive network for all public transport stakeholders worldwide. The website reflects a mature digital presence with a modern tech stack including Vue.js and WordPress, supported by Cloudflare for hosting and security. The site is well-structured, mobile-optimized, and rich in content, offering resources, events, training, and membership services. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, UITP presents a trustworthy, professional, and authoritative online presence in the transportation sector.

R

Radio New Zealand

radionz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster, providing comprehensive news, current affairs, and audio content including podcasts and documentaries. The website serves a broad New Zealand audience interested in national and international news, cultural programming, and specialist audio features. RNZ holds a leading market position as a trusted public media entity with a large content offering and consistent branding. Technically, the RNZ website employs a modern SPA architecture with extensive use of JavaScript frameworks and libraries such as D3.js and Observable Plot for data visualization. It integrates advanced monitoring and analytics tools including New Relic, Google Tag Manager, Chartbeat, and Nielsen, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as lack of explicit security incident contact information, suggests room for improvement in privacy compliance and incident response readiness. Overall, RNZ's website is professionally designed, content-rich, and technically sound, reflecting its status as a major public broadcaster. The lack of WHOIS data is consistent with .nz domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing privacy disclosures, security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

N

Noor Jobs AB

ledigajobb.se

64

Ledigajobb.se is a Swedish job search platform operated by Noor Jobs AB, founded in 2018. The website offers a large inventory of job listings across Sweden and some international locations, targeting job seekers and employers. The platform provides career advice, guides, and recruitment advertising services, positioning itself as a significant player in the Swedish employment market. Technically, the site uses modern web technologies including Bootstrap, Google Fonts, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. It is hosted behind Cloudflare DNS and likely uses CDN services for performance. The site is mobile-optimized and implements a Progressive Web App (PWA) approach for enhanced user experience. Security-wise, the site enforces HTTPS and uses modern JavaScript libraries without visible vulnerabilities. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose security or incident response policies. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms on the homepage. The domain registration is transparent, consistent with the business location and history, and shows no suspicious patterns. Overall, the website is professional and functional but could improve in privacy and security transparency.

T

Traficon Oy

traficon.fi

54

Traficon Oy is a Finnish specialist company focused on traffic planning and transportation consulting. Their website presents a professional image with clear contact details and a focus on expert services in traffic safety and planning. The company targets municipalities, infrastructure planners, and transport authorities, positioning itself as an established player in the Finnish transportation sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, reflecting a mature digital presence for a small-sized professional services firm.

E

Ergomotion® Plus

ergomotionplus.com

71

Ergomotion® Plus operates an e-commerce platform specializing in smart beds designed to improve sleep quality and health. The website targets consumers interested in advanced sleep solutions, offering a range of smart beds through a Shopify-based online store. The business positions itself in a niche market with a focus on comfort and health benefits, leveraging multilingual support to cater to European markets. The company employs modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Trustpilot to enhance customer engagement and trust. Technically, the website is built on the Shopify platform using the Dawn theme, ensuring a responsive and user-friendly experience across devices. The infrastructure includes integrations with multiple third-party services for marketing, analytics, and cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are available. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which impacts overall trustworthiness. Overall, Ergomotion® Plus presents a professional and functional e-commerce presence with good privacy compliance and marketing sophistication. The main risks relate to domain registration opacity and limited published security policies. Strategic improvements in security transparency and direct contact information would enhance trust and compliance.

2

2NP production s.r.o.

oktagonmma.cz

67

OKTAGON MMA is a prominent European mixed martial arts organization founded in 2016, with a strong presence in the Czech Republic and neighboring countries. The website serves as the official platform for event promotion, fighter information, ticket sales, and media streaming through OKTAGON.tv. The organization targets MMA fans and sports enthusiasts, offering a comprehensive range of services including live events, online streaming, and merchandise sales. The business model is centered on event-driven revenue and media content distribution, supported by partnerships with major broadcasters and sponsors.

R

Route Radio s.r.o.

radiodalnice.cz

54

Rádio Dálnice, operated by Route Radio s.r.o., is a Czech media company specializing in transportation-related radio content. The company has transitioned from traditional FM broadcasting to a digital podcast platform focusing on travel, healthy lifestyle, sports, and news, targeting drivers and travelers primarily in the Czech Republic. The website reflects a niche media outlet with a clear business model centered on content production and distribution, supported by partnerships and EU co-financing. Technically, the site is built on WordPress with modern plugins and tools, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements in security headers and plugin updates are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

H

Harley-Davidson® Praha

harley-davidson-praha.cz

51

Harley-Davidson® Praha is an established authorized dealer and service center for Harley-Davidson motorcycles located in Prague, Czech Republic. Founded in 2005, the company offers a comprehensive range of services including new and used motorcycle sales, rentals, authorized servicing, and retail of branded clothing and accessories. The website reflects a strong brand presence with consistent Harley-Davidson branding and a clear focus on motorcycle enthusiasts and potential buyers in the local market. The business model integrates retail, service, and event engagement, positioning it as a key player in the regional motorcycle retail sector. Technically, the website employs modern JavaScript libraries such as jQuery and Glide.js for UI components, integrates Facebook SDK and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA for form security. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain's WHOIS data. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the HTML content, and there is no visible security policy or incident response information published. Tracking and retargeting scripts are present but managed with user consent. The WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, with a solid business credibility score. Strategic improvements in security headers and published security policies would enhance the security posture and trustworthiness further.

S

Silnice LK a.s.

silnicelk.cz

50

Silnice LK a.s. is a regional transportation service company specializing in the maintenance and upkeep of roads, greenery, and related infrastructure within the Liberecký kraj region of the Czech Republic. The company provides essential services including summer and winter road maintenance, vegetation management, and repair of road components, positioning itself as a key regional player in transportation infrastructure services. The website reflects a professional and consistent brand image, targeting local government entities, residents, and road users in the region. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, hosted likely within the Czech Republic under a reputable registrar. The site uses Insite CMS, supports mobile optimization, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs cookie consent with default denial of storage, indicating a privacy-conscious approach. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and expanding accessibility features to further strengthen the security posture and user trust.

A

Asociace autoškol ČR, z.s.

asociaceautoskol.cz

47

Asociace autoškol ČR, z.s. is a Czech non-profit association dedicated to improving the quality and standards of driving schools and driver education in the Czech Republic. The organization provides educational seminars, develops innovative testing materials including hazard perception videos, and offers support services such as an ombudsman for driving schools and students. It maintains partnerships with government bodies and safety organizations, positioning itself as a key stakeholder in national driver education and road safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google services such as reCAPTCHA v3 and Google Analytics. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although a formal privacy policy page is not found. From a security perspective, the site uses HTTPS and bot protection but lacks visible security headers and formal security policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional presentation and official contact information mitigate concerns. Overall, the website is a credible and professional platform supporting a non-profit association with a clear mission in driver education. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

L

LightRocket

lightrocket.com

67

LightRocket operates as a digital asset management (DAM) platform targeting global organizations and media professionals. The company offers a comprehensive DAM system with AI-powered tools, collaboration features, and seamless integrations to enhance digital asset workflows. The website presents a professional and polished image with strong client testimonials and a clear value proposition. Technically, the site uses modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. Security posture is generally good with HTTPS enforced and secure forms, though some security headers are not detected and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the overall business credibility remains solid based on website content and client references.

N

Natural.PT

natural.pt

56

Natural.PT is a Portuguese platform dedicated to promoting the country's protected natural areas, offering detailed information on pathways, places to stay, eat, and buy, as well as membership options for community engagement. The platform targets nature enthusiasts and tourists interested in sustainable exploration of Portugal's natural heritage. Technically, the website is a modern React single-page application utilizing Google Analytics, Google Tag Manager, and reCAPTCHA v3 for bot protection. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses reCAPTCHA, but lacks some security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its niche effectively.

A

ANACOM - Autoridade Nacional de Comunicações

anacom.pt

71

ANACOM is the national regulatory authority for postal and electronic communications in Portugal. It serves as a government entity overseeing regulation, consumer protection, spectrum management, and licensing within the telecommunications sector. The website is professionally designed, content-rich, and targets Portuguese consumers, businesses, and international stakeholders. It provides comprehensive regulatory information, public consultations, and consumer resources. Technically, the site uses established libraries such as jQuery and Bootstrap, integrates Google Tag Manager for analytics, and is mobile optimized with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a formal security policy page. The domain registration aligns with the official Portuguese authority, confirming legitimacy. Overall, the website is trustworthy, professional, and well-maintained, supporting ANACOM's authoritative role in Portugal's communications sector.

E

European Automobile Manufacturers' Association

futuredriven.eu

59

The website represents the European Automobile Manufacturers' Association (ACEA) and serves as a platform to promote their #FutureDriven initiative focused on the EU automotive industry's future, sustainability, and mobility revolution. It provides policy recommendations, manifestos, and multimedia content targeting policymakers, industry stakeholders, and the public. The technical infrastructure is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response contacts are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a large industry association.

R

Radio New Zealand

rnz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster providing comprehensive news, current affairs, audio on demand, podcasts, and documentaries. The website serves as a primary digital platform for delivering timely and relevant content to the New Zealand public, positioning itself as a trusted media source. The site features a professional design, clear navigation, and multimedia content tailored to a general audience interested in news and cultural programming. Technically, the website employs modern JavaScript frameworks and libraries, including New Relic for performance monitoring, Google Tag Manager for marketing and analytics, and D3.js for data visualization. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident in meta tags and structured content. Performance is moderate, with asynchronous loading of scripts and CDN usage. From a security perspective, RNZ uses HTTPS with good SSL configuration and includes security best practices such as monitoring and error tracking. However, explicit privacy and cookie policies are not evident in the provided content, and no dedicated security or incident response pages were found. The WHOIS data for the domain is unavailable due to registry policies, but the website's public broadcaster status and content quality provide strong legitimacy. Overall, RNZ's website demonstrates a mature digital presence with strong business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and cookie policies, implement a vulnerability disclosure mechanism, and provide explicit contact information for security incidents.

R

RISE Research Institutes of Sweden

kajt.org

53

Forskningsprogrammet KAJT is a Swedish research program focused on optimizing railway capacity and traffic flow, established in 2013 and operated under the auspices of RISE Research Institutes of Sweden. The program collaborates with Trafikverket, academia, and industry to develop tools, methods, and concepts to improve the efficiency, quality, and flexibility of the Swedish railway system. The website serves as an information hub for ongoing projects, seminars, and research results, targeting researchers, industry stakeholders, and public authorities. Technically, the website is built using the One.com Web Editor platform, hosted by One.com, and incorporates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO is basic but functional, with proper meta tags and Open Graph data present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and important security headers such as Content-Security-Policy and Strict-Transport-Security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No forms or sensitive data collection mechanisms are detected, reducing immediate risk exposure. Overall, the website is professional, trustworthy, and content-rich, but improvements in privacy compliance and security hardening are recommended to enhance user trust and regulatory adherence.

M

MYRIAD-EU

myriadproject.eu

52

MYRIAD-EU is a European Union funded research project focused on developing a harmonised framework for multi-hazard, multi-sector, and systemic risk management. The project addresses interconnected risks such as droughts, floods, and their cascading effects on ecosystems, energy, finance, food, infrastructure, and tourism sectors. The website presents detailed information about the project, its pilots across Europe, and its mission to improve disaster prevention and mitigation through scientific collaboration. Technically, the website is built on WordPress, uses modern JavaScript libraries like jQuery and Slick, and integrates analytics tools such as Google Tag Manager and Matomo. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is good with HTTPS enabled, but could be improved with additional security headers and published policies. WHOIS data is privacy protected, which is typical for EU projects, and does not detract from the site's legitimacy. Overall, the site is professional and trustworthy, serving as an informative platform for the MYRIAD-EU project.

C

Cortinatex Kft.

szonyegakcio.hu

61

Cortinatex Kft. operates szonyegakcio.hu, a Hungarian e-commerce website specializing in a wide range of rugs and home textile products. The business targets Hungarian consumers seeking quality rugs in various styles and sizes, offering additional home comfort products. The company has an established market presence since 2016, with a clear focus on retail and customer satisfaction through competitive pricing and convenient delivery services. The website is well-structured, professionally designed, and provides comprehensive product categories and information to facilitate user shopping experience. Technically, the website leverages a mature technology stack including jQuery, Tippy.js, and Perfect Scrollbar, running on the UNAS e-commerce platform. It integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, enabling effective user tracking and advertising. The site is mobile-optimized and SEO-friendly, ensuring good accessibility and performance for users. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While no explicit security policy or incident response information is published, the site follows best practices in data protection and does not expose sensitive information. The domain registration data aligns with the business claims, indicating legitimacy and stability. Overall, szonyegakcio.hu presents a trustworthy and professional online retail platform with solid technical and privacy compliance foundations. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

M

Memento Historia - Magazín o dávné a ještě dávnější historii

memento-historia.cz

41

Memento Historia is a Czech-language online magazine dedicated to ancient and medieval history, providing educational articles and multimedia content such as podcasts on YouTube. The website targets history enthusiasts and the general public interested in historical topics, operating primarily as a content publisher monetized through advertising networks like Seznam SSP and Google Ads. The site demonstrates a consistent and professional brand presentation with a good quality of content and user experience. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Google Fonts, and integrates analytics and advertising scripts from Google and Seznam. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers, and no explicit privacy or cookie policies are found, though a cookie consent mechanism is present. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age. Despite this, the website appears professionally maintained with active content updates and social media presence. No critical security vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, Memento Historia is a niche media site with solid content and technical foundation but would benefit from improved transparency in privacy policies, enhanced security headers, and WHOIS data availability to strengthen trust and compliance.

W

Wiz Team

wiz-team.com

66

Wiz Team operates a website offering event management software solutions under the brand Event Works. The company appears to be a small technology business founded in 2012, focusing on providing software tools for event organizers and related businesses. The website is built on WordPress using Elementor, indicating a modern but standard CMS infrastructure. The technical setup includes performance optimization plugins like WPRocket and anti-spam measures via CleanTalk, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and some security plugins, but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and functional but would benefit from enhanced security and compliance documentation.

A

Axeptio

axeptio.eu

73

Axeptio is a specialized Consent Management Platform (CMP) providing GDPR, CCPA, Law 25, and other international privacy regulation compliance solutions. Trusted by over 80,000 websites and apps, Axeptio offers customizable consent banners, contractual consent modules, mobile SDKs, and compliance tools tailored for brands, publishers, and agencies. The company holds certifications from Google and IAB Europe, positioning itself as a leading player in the privacy compliance SaaS market. Technically, the website is built on HubSpot CMS, leveraging modern JavaScript libraries and integrations with major marketing and analytics platforms such as Google Tag Manager and HubSpot Analytics. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent mechanisms implemented, though explicit security headers could be improved. WHOIS data is privacy protected, which is typical for SaaS companies, and no suspicious patterns were detected. Overall, Axeptio demonstrates a mature digital presence with strong business credibility and compliance focus.

R

Repsol

repsol.pt

69

Repsol Portugal operates as a major energy supplier providing electricity, gas, and related services to individual consumers. The website is well-branded and professionally designed, targeting retail customers with a clear focus on energy solutions and customer benefits. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Adobe Web SDK, and Gigya, and employs security best practices such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies on the accessible pages indicates room for improvement in compliance transparency. Overall, the security posture is strong with proper headers and no detected vulnerabilities, but privacy compliance could be enhanced by publishing comprehensive policies and contact points for incident response.

E

Ergomotion®

ergomotion.com

64

Ergomotion® is a leading global manufacturer and provider of smart and adjustable bed bases, focusing on enhancing comfort, style, and well-being through innovative sleep technology. The company operates primarily in the B2B space, offering private label solutions and retail partnerships to expand its market reach. Their market position is strong, supported by a large global retailer network and the world's largest adjustable base manufacturing facility. Technically, the website is built on modern Webflow CMS infrastructure, integrating advanced tools such as HubSpot forms and Google Tag Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly available. Overall, the website and business demonstrate high professionalism and trustworthiness, with recommendations to enhance transparency by adding terms of service and security disclosures.

Childhood Education International is a well-established international non-profit organization focused on advancing education and child development globally since 1892. The organization operates a professional website that highlights its global network, educational services, publications, and partnership opportunities. The site targets educators, donors, and partners interested in international development and education innovation. The business model centers on collaboration, professional learning, and advocacy to improve educational outcomes worldwide. The organization maintains a reputable market position with certifications and trust indicators supporting its credibility. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and multiple analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and DNS are managed via reputable providers, with Cloudflare DNS and GoDaddy registrar. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and terms of service are present and GDPR compliant. However, no explicit security policy or incident response contacts were identified, suggesting room for improvement in security governance. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience. The risk profile is low with minor security enhancements recommended. Strategic focus on publishing security policies and enabling DNSSEC would strengthen the security posture and trust further.

The American Petroleum Institute (API) website serves as the digital presence for the national trade association representing the U.S. oil and natural gas industry. The site provides comprehensive information about the industry, membership services, energy economics, and standards development. It targets industry professionals, policymakers, and consumers interested in energy topics. The business model is centered on advocacy, standards, and member services, positioning API as a key industry representative. Technically, the website employs modern frameworks such as Bootstrap, integrates multiple analytics and advertising tools, and uses Google reCAPTCHA for form security. The site is mobile optimized and demonstrates good SEO practices, though accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA, but lacks some security headers and explicit incident response or vulnerability disclosure information. Privacy and cookie policies are not clearly found in the provided content, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and content-rich, but WHOIS data is unavailable from the provided raw output, limiting domain trust verification.

BP is a global energy company focused on delivering energy solutions including oil, gas, bioenergy, renewables, and electric vehicle charging. The website reflects a large multinational enterprise with a comprehensive digital presence, including detailed corporate governance, investor relations, sustainability, and career information. The technical infrastructure uses modern web technologies such as Adobe Experience Manager CMS, Google Tag Manager, and Algolia search, indicating a mature digital platform. Security posture is moderate with cookie consent implemented but lacks visible security headers or explicit security policies in the provided content. WHOIS data is unavailable, which slightly impacts trust but the website's branding and content strongly support legitimacy. Overall, the site is professional, well-structured, and targets a general audience interested in energy and corporate information.

H

Home

castrol.com

77

Castrol's website presents a professional corporate presence focused on lubricants and specialty oils for automotive and industrial sectors. The company positions itself as a global leader embracing innovation and sustainability. The technical infrastructure includes modern tracking and video playback technologies, with good mobile optimization and SEO practices. However, explicit privacy and terms of service pages are not clearly found, and WHOIS data for the domain is unavailable, which raises transparency concerns. Security posture is moderate with HTTPS implied but lacking visible security headers in the provided data. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.