Security Directory

N

Národní divadlo Brno

divadlojedarek.cz

51

Národní divadlo Brno operates the website divadlojedarek.cz, offering gift vouchers for theater performances in Brno. The site targets cultural consumers and gift buyers in the Czech Republic, providing an online platform for purchasing vouchers valid for one year. The business model focuses on enhancing theater attendance through flexible gift options. Technically, the site is built on WordPress with integration of modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The website demonstrates good design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

N

Národní divadlo Brno, p. o.

janacek-brno.cz

58

Janáček Brno is an internationally recognized opera and music festival organized by Národní divadlo Brno, a reputable cultural institution in the Czech Republic. The festival celebrates the legacy of composer Leoš Janáček and holds a strong position in the European cultural landscape, evidenced by its International Opera Awards recognition. The website is professionally designed, multilingual, and provides comprehensive information about the festival, partners, and media resources. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and GDPR compliance mechanisms, though some security headers could be improved. Overall, the site reflects a mature and trustworthy cultural event with strong business credibility.

T

Toyota Portugal

toyota.pt

68

Toyota Portugal operates as the official regional website for Toyota's automobile sales and services in Portugal, offering new and used vehicles along with customer support and dealer location services. The website reflects a strong brand presence consistent with Toyota's global identity and targets consumers in Portugal interested in automotive products. The business model centers on vehicle sales and after-sales services, positioning Toyota as a major player in the Portuguese transportation sector. Technically, the website is built on Adobe Experience Manager, leveraging advanced digital asset management via Adobe Scene7, and integrates monitoring and analytics tools such as Datadog RUM and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Hosting and content delivery utilize Toyota Europe infrastructure and cloud services, ensuring reliable performance. From a security perspective, the site enforces HTTPS, employs reCAPTCHA for form protection, and uses session replay with input masking to safeguard user data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, representing areas for improvement. The absence of a visible privacy policy and terms of service pages also suggests incomplete privacy compliance documentation. Overall, the website is professional, trustworthy, and technically sound, with moderate to high security posture. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security.txt files, enhancing accessibility, and maintaining vigilant third-party script audits to sustain security and compliance.

M

Motul

motul.com

68

Motul is a well-established company specializing in high-performance engine oils, lubricants, and vehicle care products for a wide range of vehicles including cars, motorcycles, trucks, and bicycles. The website reflects a strong market position with a comprehensive product offering and multiple sales channels including B2B and e-commerce platforms. The brand is supported by consistent and professional digital presence with clear navigation and rich content. Technically, the site is built on modern frameworks such as Next.js and React, integrating advanced analytics and marketing tools with user consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the brand recognition and content quality. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies to further strengthen trust and compliance.

F

Fédération Internationale de Motocyclisme

fim-moto.com

58

The Fédération Internationale de Motocyclisme (FIM) operates as the global governing body for motorcycle sport and motorcycling activities. It commands a strong market position as the authoritative international federation, organizing multiple world championships and providing comprehensive regulatory frameworks. The website serves a diverse audience including motorcycling enthusiasts, federations, and members of the FIM family, offering news, official documents, event calendars, and educational resources. Technically, the site is built on TYPO3 CMS and integrates modern analytics tools such as Matomo and Google Tag Manager, alongside multimedia content from YouTube and Google Maps APIs. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced, but could benefit from additional security headers and explicit security policies. Despite the strong digital presence and professional content, the absence of WHOIS registration data for the domain introduces a notable risk factor. This inconsistency may be due to privacy protection or a lookup failure but warrants further investigation. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website reflects a mature and professional digital asset for an international sports federation, with recommendations focusing on enhancing security headers, clarifying domain registration status, and publishing incident response information.

F

Fédération Internationale de Motocyclisme

fim-pictures.com

60

Fédération Internationale de Motocyclisme (FIM) operates fim-pictures.com as an official media platform providing extensive photographic content and official documents related to motorcycling sports worldwide. The website targets motorcycling enthusiasts, media professionals, and sports fans, offering free access to images upon signup. The platform is well-positioned as the international governing body for motorcycle sport, leveraging partnerships with recognized brands such as Motul and Hertz. Technically, the site is built on modern frameworks including Next.js and Chakra UI, hosted with reputable providers, and optimized for performance and mobile use. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, with no indications of malicious or adult content.

F

Fédération Internationale de Motocyclisme

fim-landspeed-worldrecords.com

50

The website www.fim-landspeed-worldrecords.com serves as the official platform for the Fédération Internationale de Motocyclisme (FIM) to publish and manage motorcycle land speed world records. It provides comprehensive information including record rules, event calendars, news, galleries, and registration for record attempts. The site targets motorcycle enthusiasts, racers, and professionals interested in land speed achievements, positioning itself as an authoritative source in this niche. Technically, the site is built on TYPO3 CMS, leveraging modern analytics tools such as Google Tag Manager and Matomo, and integrates Google Maps for location services. The design is professional, mobile-optimized, and SEO-friendly, offering a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses standard analytics scripts but lacks explicit security headers and a published security policy or incident response information. The absence of WHOIS registration data reduces domain trustworthiness, although the website's branding and external links to official FIM domains support its legitimacy. Overall, the site is functional, secure, and compliant with privacy regulations, but could improve transparency and security posture.

F

Fédération Internationale de Motocyclisme

fim-awards.com

49

The Fédération Internationale de Motocyclisme (FIM) operates the FIM Awards website to celebrate and recognize world champions in motorcycling disciplines globally. The site serves as an informational and promotional platform for annual award ceremonies, trophies, and related motorcycling events. It targets motorcycling enthusiasts, sports professionals, and stakeholders within the motorcycling sports community. The organization positions itself as a reputable international non-profit entity dedicated to the sport's promotion and recognition. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Matomo for analytics, and integrates Google Maps API for location services. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reputable analytics tools. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and branding strongly indicate a legitimate organization. Overall, the website presents a professional and trustworthy front for the FIM Awards, but improvements in transparency regarding domain registration, security policies, and contact information would enhance trust and compliance. Strategic recommendations include implementing security headers, publishing incident response contacts, and verifying domain registration details to strengthen credibility and security posture.

F

FIM (Fédération Internationale de Motocyclisme)

fim-moto.tv

66

FIM-MOTO.TV is the official video streaming platform of the Fédération Internationale de Motocyclisme (FIM), providing live broadcasts, race highlights, and exclusive motorcycle sport content globally. The platform targets motorcycle sport enthusiasts and serves as a central hub for FIM's world and national championships. Technically, the website leverages modern web technologies including Next.js, React, and integrates analytics tools such as Matomo and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the platform presents a professional and trustworthy front with room for enhanced transparency and security practices.

T

test

dobre-knihy.cz

62

Dobré knihy is a prominent Czech online retailer specializing in books, audiobooks, games, toys, stationery, and gifts. The website offers a large catalog with over 90,000 titles in stock, targeting Czech-speaking customers primarily. The business model is e-commerce retail with a strong focus on book sales and related products. The site features clear navigation, product categorization, and a user-friendly shopping experience. Structured data and contact information are provided to enhance trust and usability. Technically, the website employs modern JavaScript frameworks and tracking technologies including Google Tag Manager, Microsoft Clarity, and Exponea for analytics and marketing. The site is mobile-optimized and accessible, with secure HTTPS connections and validated forms for login and shopping cart functionality. However, some security best practices such as security headers and vulnerability disclosure mechanisms are not evident. From a security perspective, the site enforces HTTPS and cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable concern, reducing domain transparency and trustworthiness. Overall, the security posture is good but could be improved by adding security headers and publishing incident response information. The overall risk assessment indicates a legitimate and professional e-commerce platform with minor transparency and security improvements recommended. Strategic focus should be on enhancing domain registration visibility, implementing security headers, and formalizing security policies to strengthen trust and compliance.

K

Kresťanskodemokratické hnutie

kdh.sk

55

Kresťanskodemokratické hnutie (KDH) is a Slovak political party representing conservative Christian-democratic values. The website serves as an official communication platform providing information about the party's program, representatives, and news updates. It targets conservative voters and citizens interested in Christian democratic principles. The party is established with a domain age since 2003 and is a member of the European People's Party, indicating a strong political network and legitimacy. Technically, the website is built on WordPress 6.8.2 using the Breakdance page builder plugin, integrated with GDPR-compliant cookie management (Complianz), Mailchimp for newsletters, and Google Tag Manager for analytics. The site is hosted on websupport.sk, uses HTTPS with good SSL configuration, and includes modern UI elements like sliders and responsive menus. SEO and accessibility are adequately addressed, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and avoids exposing sensitive data. However, no explicit security policy or incident response information is provided, and no vulnerability disclosure mechanism is found. The site appears secure with no visible vulnerabilities or WAF blocking. Overall, the website is professional, trustworthy, and compliant with GDPR. It effectively supports the party's communication and engagement goals. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to strengthen security posture and trust.

A

ASITIS

asitis.cz

59

ASITIS is a specialized consultancy focused on climate change adaptation and mitigation, offering services primarily in energy, sustainability, water management, regional development, and urban greenery. The company targets municipalities, public sector entities, and private firms, positioning itself as a trusted partner in the Czech Republic for climate-related strategic planning and reporting. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it is built on WordPress with modern performance and analytics tools integrated, including Google Tag Manager and Usermaven. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and explicit incident response contacts are missing. Overall, the domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen compliance and trust.

P

PIARC (World Road Association)

piarc.org

52

PIARC (World Road Association) is a well-established international non-profit organization founded in 1909, serving as a global forum for knowledge exchange on roads and road transport policies. It has a strong market position with over 120 member governments and consultative status to the United Nations Economic and Social Council. The website reflects a mature digital presence with professional design, comprehensive content, and active engagement through seminars, congresses, and publications. Technically, the site uses modern analytics tools and JavaScript frameworks, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy and terms policies. Overall, the site is trustworthy and authoritative in its domain, though improvements in transparency and security documentation are recommended.

E

European Transport Safety Council

etsc.eu

46

The European Transport Safety Council (ETSC) operates as a Brussels-based independent non-profit organization dedicated to reducing deaths and injuries in European transport. The website serves as a comprehensive platform for advocacy, research dissemination, policy recommendations, and public engagement on road safety issues. It targets policymakers, transport safety professionals, media, and the general public interested in transport safety. ETSC holds a recognized position in the European transport safety sector, offering key services including research publications, policy advocacy, and organizing safety-related projects and events. Technically, the website is built on WordPress with a modern tech stack including JavaScript, PHP, and various plugins for SEO, caching, and analytics. It demonstrates good performance, mobile optimization, and accessibility. The site uses HTTPS with a good SSL configuration and employs security best practices such as CAPTCHA on forms and cookie consent mechanisms. However, some security headers are not explicitly detected and could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent, and GDPR adherence. Contact information is clearly provided, enhancing trust and credibility. No incident response or vulnerability disclosure policies are found, which could be areas for future enhancement. Overall, ETSC's website is professional, trustworthy, and well-aligned with its mission. It effectively balances content quality, technical implementation, security, and privacy compliance, resulting in a high AI score of 87. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular security audits to sustain and improve its security posture.

A

Austroads

austroads.com.au

63

Austroads is a government-related organization focused on supporting efficient, reliable, and safe road transport across Australia and New Zealand. It provides authoritative guidance, research, and standards covering drivers, vehicles, road safety, infrastructure, environment, and transport operations. The website serves government agencies, transport authorities, health professionals, and industry stakeholders with comprehensive resources including guides, publications, data services, and training programs. The organization holds a leading market position as a collaborative body for road transport standards in the region. Technically, the website is built on the Squiz Matrix CMS platform and leverages modern web technologies such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and DataTables. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the website enforces HTTPS and employs secure forms with validation. However, it lacks DNSSEC, a published security policy, incident response contacts, and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered by the Department of Finance, consistent with its government affiliation, and domain status codes indicate protection against unauthorized changes. Overall, Austroads presents a trustworthy, professional, and authoritative online presence with a strong business credibility and technical foundation. Strategic improvements in privacy compliance and security transparency would further enhance its posture and user trust.

G

GTO Solutions s.r.o.

jdvm.cz

48

Skutočnosť.sk is an online Slovak informational portal operated by GTO Solutions s.r.o., focusing primarily on transportation-related news, including traffic updates, toll information, fuel prices, and travel advice. The website targets Slovak-speaking drivers and travelers seeking up-to-date and practical information for navigating road transport in Slovakia and neighboring countries. The business model appears to be content publishing monetized through advertising networks such as Google Adsense. The site maintains a consistent brand presence with a clear navigation structure and regularly updated content.

C

Centrum dopravního výzkumu, v. v. i.

cdvgis.cz

58

Centrum dopravního výzkumu, v. v. i. is a Czech public research institution specializing in transport research and infrastructure diagnostics under the Ministry of Transport. The organization offers a broad range of services including laboratory testing, transport safety analysis, smart city solutions, and professional training. The website reflects a well-structured and professional digital presence with clear navigation, comprehensive content, and active social media engagement. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook Pixel for tracking, and is hosted with CDN support for performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response disclosures are absent. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the official nature of the institution and consistent branding mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

A

AS Sadales tīkls

e-st.lv

56

AS Sadales tīkls operates a professional and secure customer portal aimed at business clients in Latvia's energy sector. The portal facilitates service applications, electricity consumption monitoring, and meter reading submissions, leveraging multiple secure authentication methods including eID, Smart-ID, and major Latvian banks. The website demonstrates a moderate to high level of digital maturity with modern JavaScript libraries, cookie consent management, and integration with Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and CSRF protections, though some security headers and explicit security policies are absent. Overall, the site is trustworthy and well-aligned with the company's business identity, with no signs of suspicious activity or content.

A

AproapeAcasă

aproapeacasa.ro

48

AproapeAcasă is a Romanian real estate platform launched recently in 2024, offering property listings, free evaluations, and professional consultancy to facilitate buying, selling, and renting homes. The website is built on WordPress with modern SEO and marketing tools, targeting individuals and businesses in Romania seeking real estate solutions. The platform positions itself as a trusted intermediary with premium promotion services and dedicated support. Technically, the site uses a solid WordPress infrastructure with Elementor and various plugins, hosted under a Romanian registrar with DNS via Cloudflare. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but would benefit from enhanced privacy and security measures.

V

Vaseliteratura.cz

vaseliteratura.cz

43

Vaseliteratura.cz is a Czech literary magazine providing daily articles, book reviews, author interviews, and literary news targeting a general audience interested in literature. The website operates on Joomla CMS and integrates common web technologies such as MooTools and Google Analytics for tracking user engagement. The site demonstrates moderate technical maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit cookie consent mechanisms, indicating room for improvement in privacy compliance. The absence of WHOIS data limits transparency, but the website content and social media presence support its legitimacy as a media outlet. Overall, the site is functional and content-rich but could benefit from enhanced security and privacy features.

Č

ČBDB.cz

cbdb.cz

44

ČBDB.cz operates as a Czech-language online book database and community platform, offering users access to book information, author details, user reviews, forums, and a marketplace for buying and selling books. The site targets Czech-speaking book enthusiasts and authors, positioning itself as a leading local resource in this niche. The platform also supports mobile app integration for enhanced user engagement. Technically, the website employs modern web technologies including Bootstrap, jQuery, and multiple third-party analytics and advertising services, with a focus on GDPR-compliant cookie consent management. Security posture is generally good with HTTPS enforced and OAuth login options, though the absence of explicit security headers and incident response policies suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the site's consistent branding, active content, and partner relationships support its legitimacy. Overall, the site presents a professional and user-friendly experience with moderate technical performance and good privacy compliance.

D

Drupal ᐬrts

drupalarts.cz

51

Drupal Arts is a specialized Drupal web development service provider based in the Czech Republic, established in 2017. The company offers a range of Drupal-related services including custom web development, Drupal maintenance (servis), UX design, and e-commerce solutions. Their website positions them as experts motivated by professional work with lasting value, targeting businesses and individuals seeking Drupal expertise. The site features client testimonials from reputable organizations, enhancing trust and credibility. Technically, the website is built on Drupal 7, utilizing common web technologies such as jQuery, Bootstrap, and Google Analytics. Hosting is provided by Active24, consistent with the domain registrar information. The site is mobile-optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, with asynchronous loading of analytics scripts. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. User tracking is moderate via Google Analytics and Tag Manager, but no cookie consent mechanism is implemented. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices to enhance its security posture and regulatory adherence.

J

Jovilucas - Automóveis e Acessórios, Lda

jovilucas.pt

60

Jovilucas - Automóveis e Acessórios, Lda is a small regional automotive dealership based in Castelo Branco, Portugal, specializing in the sale of used and semi-new vehicles. The company offers a range of services including automobile consultancy, vehicle purchase from customers, and credit intermediation. The website is professionally designed with a clear focus on automotive sales, targeting consumers in the Portuguese market seeking quality used vehicles. The presence of positive Google reviews and active social media accounts enhances the company's market credibility. Technically, the website employs a modern JavaScript-based tech stack including jQuery, Owl Carousel, and Google Tag Manager, hosted by omeustand.pt, a specialized hosting and website builder provider. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security is well implemented with HTTPS and appropriate security headers, though there is room for improvement in privacy compliance and incident response transparency. From a security perspective, the website shows a solid posture with no critical vulnerabilities detected. However, the absence of explicit cookie consent mechanisms, security policies, and vulnerability disclosure pages suggests areas for enhancement to meet higher compliance standards. Overall, the domain registration details align well with the business claims, supporting the legitimacy and trustworthiness of the site. Strategically, the company should focus on improving privacy compliance by implementing cookie consent banners, publishing security and incident response policies, and establishing a vulnerability disclosure process. These steps will strengthen user trust and regulatory adherence, positioning Jovilucas for sustainable growth in the competitive automotive retail sector.

S

Sustainable Development Solutions Network

unsdsn.org

63

The Sustainable Development Solutions Network (SDSN) is a globally recognized non-profit organization operating under the auspices of the United Nations Secretary-General. It mobilizes a vast network of over 2,000 universities, think tanks, and research institutions worldwide to promote and implement solutions aligned with the Sustainable Development Goals (SDGs) and the Paris Agreement. The organization focuses on education, research, policy analysis, and fostering global cooperation to address critical sustainable development challenges. Its market position is strong, supported by a large membership base and clear UN affiliation. Technically, the SDSN website is built using modern technologies such as Astro and is hosted on Cloudflare Pages, ensuring fast performance and excellent mobile optimization. The site employs Google Tag Manager and Google Analytics for tracking and marketing purposes, reflecting a mature digital infrastructure. The website is well-designed, accessible, and SEO optimized, providing a professional user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are areas for improvement. The WHOIS data is unavailable due to privacy protection, which is justified given the organization's nature. Overall, the security posture is strong but could benefit from enhanced privacy compliance features. The overall risk assessment is low, with the website demonstrating high professionalism, trustworthiness, and compliance with best practices. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further enhance trust and compliance.

Fundação "la Caixa" is a well-established non-profit foundation based in Portugal with over a century of history dedicated to social and cultural initiatives. The website reflects a professional and consistent brand presence, targeting a general audience interested in social welfare and cultural projects. The foundation operates with a large organizational size and maintains a reputable market position within the non-profit sector. Technically, the website is built on the Liferay CMS platform using modern technologies such as React and integrates widely used analytics and marketing tools like Google Analytics and Google Tag Manager. The site is mobile optimized and demonstrates good SEO and accessibility practices, although accessibility could be further improved. Security-wise, the website enforces HTTPS, uses security headers, and implements a cookie consent mechanism, indicating a good security posture. However, it lacks explicit privacy policies, terms of service, and incident response information, which are recommended for compliance and transparency. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

U

Universidade de Lisboa

ulisboa.pt

62

Universidade de Lisboa is the largest Portuguese university and among the largest in Europe, offering a wide range of undergraduate and graduate programs, research initiatives, and international cooperation. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization, accessibility, and SEO practices. The site uses modern analytics tools such as Google Analytics and Tag Manager, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. WHOIS data confirms the legitimacy and consistency of the domain registration, matching the university's public identity. Overall, the website is professional, trustworthy, and well-maintained, serving a broad academic audience effectively.

C

Conselho Nacional do Ambiente e do Desenvolvimento Sustentável

cnads.pt

43

The Conselho Nacional do Ambiente e do Desenvolvimento Sustentável (CNADS) is a Portuguese national council dedicated to environmental and sustainable development advisory services. Established in 1997, it serves as a government-linked non-profit entity providing policy advice, reports, and organizing events related to sustainability. The website reflects a professional and consistent brand presence targeting government officials, environmental professionals, and the public interested in sustainability. Technically, the site is built on WordPress with the Avada theme, incorporating Google Analytics and translation tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and basic headers but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and well-positioned within its niche but could improve compliance and security transparency.

M

MoEngage

hashgrowth.org

66

MoEngage is a technology company specializing in customer engagement and marketing automation solutions. The company offers a comprehensive SaaS platform that includes push notifications, email campaigns, in-app messaging, web push, SMS marketing, and customer analytics. Positioned as an enterprise-grade solution, MoEngage targets businesses seeking to enhance customer retention and engagement through data-driven marketing strategies. The website content and branding are consistent with a professional B2B SaaS provider, supported by trust signals such as Gartner Peer Insights ratings and integration with HubSpot marketing tools. Technically, the website is built on HubSpot CMS and leverages a modern technology stack including Google Analytics 4, Facebook Pixel, LinkedIn Insight Tag, and other marketing and analytics tools. Hosting is provided via AWS infrastructure, and the site demonstrates good mobile optimization and moderate performance. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism implemented via OneTrust. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible advanced security headers and published security policies or incident response contacts. The domain is privacy protected via Domains By Proxy, which is justified for this business type. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious patterns were found in the WHOIS or site content. Overall, the website presents a trustworthy and professional front for MoEngage, though the analyzed URL is a 404 error page, limiting content quality. Recommendations include enabling DNSSEC, publishing a security policy, and adding vulnerability disclosure information to enhance security posture and transparency.

C

CLIKT.com

clikt.com

64

CLIKT.com is a small business technology service provider specializing in digital marketing, social media, web design, AI, content management, and e-learning solutions. The company targets small businesses and technology users, leveraging open-source tools to keep costs down and adhering to industry standards. The website presents a professional image with a clear portfolio of client projects and a range of marketing and business tools integrated into its offerings. The domain is mature, registered since 2006, and hosted via GoDaddy, indicating a stable online presence. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, with integrations for Google Analytics and Google Tag Manager for tracking and marketing insights. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in performance and security hardening. The technical stack includes modern web technologies and third-party marketing tools, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security or incident response policies. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data is consistent and trustworthy, with no privacy protection masking the registrant information. Overall, the security posture is moderate but could be enhanced with better policy disclosures and technical controls. The overall risk assessment suggests a generally trustworthy and professional website with minor compliance and security gaps. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response information to improve trust and compliance.

S

Spirii

spirii.com

68

Spirii is a Denmark-based company specializing in EV charging solutions and eMobility business platforms. Their offerings include a Charge Point Management System, an EV charging app, and a suite of services such as branded solutions, financial services, grid services, and operational support. The company operates across multiple European countries with dedicated offices and subsidiaries, positioning itself as an experienced and reliable player in the eMobility sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the presence of VAT registration and detailed business information supports the company's credibility. Overall, Spirii presents a professional and trustworthy digital presence with room for improvement in transparency around security policies and domain registration details.

T

The Sigrid Rausing Trust

sigrid-rausing-trust.org

62

The Sigrid Rausing Trust is a well-established philanthropic grant-making foundation based in London, founded in 1995. It focuses on supporting human rights, open societies, and environmental causes globally. The website reflects a professional and consistent brand image, targeting non-profit organizations and social causes. The Trust operates with a significant endowment and a clear mission to fund impactful programs. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and cookie consent tools, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. WHOIS data is privacy protected, which is typical and justified for this type of organization. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained.

M

MagNet Bank Zrt.

magnetbank.hu

72

MagNet Bank Zrt. is a Hungarian financial institution providing a broad range of banking services including retail and corporate accounts, loans, deposits, and digital banking solutions. The bank emphasizes community banking and sustainable finance, targeting individuals, companies, and nonprofit organizations. The website reflects a medium-sized bank with a solid market position in Hungary, offering comprehensive services and community-oriented programs. Technically, the website uses modern JavaScript frameworks like Vue.js and integrates popular analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security-wise, the site enforces HTTPS, employs multiple security headers, and integrates recaptcha for form protection, indicating a strong security posture. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR and other relevant regulations.

Ö

Ökotárs Alapítvány

civiljogok.hu

42

The Civil Jogok website is operated by the Ökotárs Foundation, a Hungarian non-profit organization dedicated to improving the legal framework and operational environment for civil society organizations. The site provides legal research, advocacy materials, and practical guidance aimed at civil organizations and policymakers. It has a clear focus on transparency, cooperation, and reform within the civil sector. Technically, the site is built on Drupal CMS with standard web technologies including jQuery and Google Tag Manager for analytics. While the site is functional and content-rich, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The contact information is clearly presented, and the domain age and WHOIS data support the legitimacy of the organization.

R

Reclaim Our Civil Space

civilspace.eu

48

The website 'Reclaim Our Civil Space' is a non-profit advocacy platform focused on empowering and supporting civil society organizations in Central and South-eastern Europe. It operates as a regional network addressing democratic backsliding and shrinking civic space, collaborating with partners across multiple countries. The site is built on Drupal 9 and employs Google Tag Manager for analytics, indicating a moderate level of digital maturity. The content is well-structured, mobile-optimized, and accessible, targeting NGOs, activists, and the general public interested in civil rights and democracy. However, the absence of explicit privacy, cookie, and security policies, as well as lack of direct contact information, limits its compliance and trustworthiness aspects. Security headers and incident response details are also missing, which could expose the site to risks. Overall, the site is functional and professional but requires improvements in privacy compliance and security posture to enhance trust and resilience.

A

Asitis

asitisready.com

56

Asitis is a newly established consulting company specializing in climate change adaptation and mitigation, targeting firms, municipalities, and other entities primarily in the energy sector. The company leverages a team of experienced experts and modern technologies to prepare clients for climate change impacts. The website is professionally designed using WordPress with modern tools and demonstrates good digital maturity with SEO and analytics integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC are missing. No critical vulnerabilities or exposed sensitive data were found. Overall, the site reflects a trustworthy and professional business presence with room for enhanced security policies and incident response information.

Ž

Židovská obec v Praze

kehilaprag.cz

59

Židovská obec v Praze (ŽOP) is a well-established non-profit organization serving the Jewish community in Prague. It focuses on religious, cultural, social, and health services for its members and the wider community. The website reflects a community-oriented mission with detailed information about departments, events, partners, and services. The organization maintains partnerships with reputable international and local entities, enhancing its credibility and outreach. Technically, the website uses a moderate modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security on forms. The site is mobile-optimized with good navigation and content quality. However, there is room for improvement in accessibility and SEO optimization. The absence of a CMS identification suggests a custom or less common platform. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a cookie consent banner but no clear privacy policy or terms of service pages. WHOIS data is missing, which reduces domain trust assessment but the website content and contact information appear legitimate. Overall, the site is a credible digital presence for a community organization but should enhance transparency and security practices to improve trust and compliance.

S

Sportity OÜ

sportity.com

63

Sportity OÜ is a small Estonian technology company specializing in IT solutions for sports events and organizations. Their offerings include a digital infoboard app and a comprehensive accreditation system designed to streamline event management and communication. The company targets sport events, organizations, and clubs, positioning itself as a niche provider with notable clients in international sports federations. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on the Tilda CMS platform, uses modern analytics tools, and is hosted behind Cloudflare DNS, ensuring good performance and security basics. However, the absence of privacy and terms of service policies indicates compliance gaps. Security posture is solid with HTTPS and secure domain registration but lacks advanced security headers and published security policies. Overall, the website is trustworthy and functional but could improve privacy compliance and security transparency.

P

Pardini USA LLC

pardiniguns.com

55

Pardini USA LLC operates as the US importer and supporter of Pardini Armi, a manufacturer specializing in high-quality sports firearms used in international competitions such as ISSF World Championships and the Olympics. The company targets competitive shooters and firearm enthusiasts, offering a range of pistols, rifles, accessories, and training services. The website is professionally designed using WordPress, featuring detailed product information, technical articles, and customer testimonials, supporting a niche market position in competitive shooting sports. Technically, the website employs a standard WordPress CMS with the Twenty Seventeen theme and uses jQuery and Everest Forms for functionality. Google Tag Manager is integrated for analytics. The site is HTTPS secured, though it lacks some advanced security headers and cookie consent mechanisms. Performance and mobile optimization are adequate, with good SEO and accessibility basics. Security posture is moderate with HTTPS enforced and no visible vulnerabilities, but improvements are recommended in security headers and privacy compliance. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and clear contact information. No incident response or vulnerability disclosure information is provided. Overall, the website presents a credible business front with solid content and technical implementation but should address domain registration transparency and enhance security and privacy compliance to improve trust and reduce risk.

zeroheight is a mature SaaS company founded in 2015 that provides a centralized platform for design system documentation and collaboration, targeting design, engineering, product, and marketing teams. The company is well-positioned in the technology sector with a strong market presence, evidenced by trusted clients such as Adobe, Uber, and Guardian. Their platform integrates with popular design and development tools, offering automation, governance, and community engagement features. Technically, the website is built on WordPress hosted on AWS, leveraging modern analytics and marketing technologies with proper consent mechanisms. The site is fast, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be enhanced. Privacy compliance is strong with clear policies and cookie consent. Overall, zeroheight demonstrates a professional, trustworthy online presence with extensive resources and community support.

V

VisionSpace Intelligent Systems UG

karel.ai

62

VisionSpace Intelligent Systems UG operates the website karel.ai, offering an AI-powered conversational assistant named Karel designed to support operations of complex and critical systems. The assistant provides functionalities such as answering operational questions, predictive analytics, task automation, explainable AI reasoning, skill teaching via API, and team collaboration. The company is positioned as a niche technology provider with backing from the European Space Agency incubation program and EU funding, targeting operators and managers in aerospace and industrial sectors. The website is professionally designed, mobile-optimized, and includes EU trust signals, but lacks explicit security and incident response policies. The technical infrastructure leverages modern front-end technologies including Bootstrap, jQuery, FontAwesome, and Google Analytics, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS implied and cookie consent implemented, but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website and business present a credible and professional front with room for enhanced security transparency and compliance documentation.

L

LANaaS by Wavecom

lanaas.pt

50

LANaaS by Wavecom offers a managed LAN as a Service solution targeting corporate clients in Portugal. Their service includes switching, firewall security, and Wi-Fi infrastructure with 24/7 monitoring and support, enabling businesses to flexibly scale their network infrastructure. The website is built on WordPress with modern plugins and SEO tools, reflecting a professional digital presence. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies are missing. Tracking technologies like Google Analytics and LinkedIn Insight are used moderately. Overall, the website is trustworthy and well-positioned in the technology sector, but could improve privacy compliance and contact transparency.

R

Raiffeisen stavební spořitelna a.s.

rsts.cz

70

Raiffeisen stavební spořitelna a.s. is a Czech financial institution specializing in building savings, housing loans, and related financial products. The company targets individuals and legal entities in the Czech Republic seeking financial solutions for housing and savings. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service offerings. Technically, the site employs modern web technologies including JavaScript, SVG graphics, and integrates Google Tag Manager and Sentry for analytics and error tracking. Cookie consent management is robust, supporting GDPR compliance. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not published. The domain WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and presence on social media platforms support legitimacy. Recommendations include publishing security policies and enhancing security headers.

Federace židovských obcí v ČR operates as a non-profit organization dedicated to supporting the Jewish community in the Czech Republic through cultural preservation, education, and social services. The website serves as a central hub for news, reports, and community events, reflecting a well-established presence in its sector. Technically, the site is built on WordPress with common plugins and libraries, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the site is trustworthy and professional, though improvements in privacy policy transparency and security practices are recommended.

Ö

Ökotárs Alapítvány

okotars.hu

46

Ökotárs Alapítvány is a well-established Hungarian non-profit organization founded in 1999, dedicated to supporting citizen self-organizations to foster a democratic, sustainable, and just society. The foundation focuses on environmental protection, civil society development, and sustainability programs, offering grants, training, and advocacy. Their website reflects a mature digital presence built on Drupal 7, integrating Google Analytics and Tag Manager for user insights. The content is rich, professionally presented, and targets civil society actors, students, and environmentally conscious communities. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements are needed in security headers and updating legacy libraries. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

I

IVT Tepelná čerpadla s.r.o.

cerpadla-ivt.cz

41

IVT Tepelná čerpadla s.r.o. operates a professional website focused on the sale and installation of Swedish quality heat pumps in the Czech Republic. The company positions itself as a market leader with over 20,000 installations and targets homeowners, commercial building managers, and new house builders. The website provides detailed product information, guides, and news updates, reflecting a mature business model centered on energy-efficient heating solutions. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and various tracking tools, managed via Topinfo CMS. The site is mobile-optimized and SEO-friendly, though some technical debt is evident with outdated libraries and missing security headers. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but has room for improvement in security and privacy compliance.

H

Heidelberg Materials CZ, a.s.

heidelbergcement.cz

62

Heidelberg Materials CZ, a.s. is a leading Czech manufacturer of cement, ready-mix concrete, and aggregates, operating as part of the global Heidelberg Materials group. The company targets construction industry professionals and business clients within the Czech Republic, offering a broad portfolio of building materials. The website is professionally designed using Drupal 10, with modern JavaScript libraries and Google Tag Manager for analytics. It is mobile optimized and accessible, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is privacy protected, which is typical for corporate domains, and no suspicious patterns were detected. Overall, the website is trustworthy, compliant with GDPR, and safe for general audiences.

A

Annual Reviews

annualreviews.org

66

Annual Reviews is a well-established nonprofit academic publisher specializing in comprehensive review articles across a broad spectrum of scientific disciplines. Founded in 1932, it serves researchers, academics, librarians, and informed citizens by providing high-quality synthesized knowledge through journals and magazines such as Knowable Magazine and Katina Magazine. The organization operates a subscription-based and open access business model, including initiatives like Subscribe to Open (S2O), positioning itself as a leader in scholarly publishing. The website infrastructure employs a mix of legacy and modern web technologies including jQuery, Google Tag Manager, Adsense, and MathJax for rendering scientific content. The site is mobile optimized, accessible, and well-structured with clear navigation and professional design. Privacy and cookie policies are present with consent mechanisms, reflecting good compliance practices. However, explicit security headers and a published security policy are absent, representing an area for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is typical for organizations of this type and does not detract from legitimacy. Overall, the site demonstrates a mature digital presence with moderate tracking and advertising practices consistent with nonprofit academic publishing. Strategically, Annual Reviews should enhance security transparency by publishing incident response contacts and security policies, update legacy libraries, and implement comprehensive security headers to strengthen defenses. These steps will improve trust and compliance while maintaining their strong market position.

S

STI Group Asia Pacific

sti-group-apac.com

61

STI Group Asia Pacific is a subsidiary of the German-headquartered STI Group specializing in premium packaging solutions and supply chain services in the Asia Pacific region. The company offers a broad portfolio including primary, premium, and transport packaging, displays, merchandise, and logistics services. Their market position is supported by over a decade of regional experience and strong partnerships, delivering European quality standards locally. The website reflects a professional and consistent brand image with clear business focus and customer engagement mechanisms such as a contact form secured by CAPTCHA and cookie consent management. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cloudflare services for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though it lacks explicit security headers and published security policies. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and reduces trustworthiness despite the professional appearance and business credibility of the site. No explicit privacy policy page was found, though cookie consent is implemented. Overall, the site scores well on content quality and business credibility but should improve transparency on privacy and security policies to enhance trust and compliance.

N

Nadační fond Proni

fondproni.cz

48

Nadační fond Proni is a Czech non-profit foundation dedicated to supporting families in childbirth and women's health in the Jihomoravský region. The organization focuses on building and supporting a modern gynecological and obstetric clinic, providing educational activities, and fundraising through donations. The website reflects a professional and consistent brand image with clear messaging targeted at women, families, healthcare professionals, and donors. Technically, the site employs modern web technologies including the Nette framework, jQuery, Google reCAPTCHA, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and form protections, though the absence of explicit security headers and WHOIS data are notable gaps. Overall, the site is trustworthy and well-designed, but domain registration transparency should be improved to enhance credibility.

G

Gynekologicko-porodnická klinika Fakultní nemocnice Brno

gynporbrno.cz

44

The Gynekologicko-porodnická klinika Fakultní nemocnice Brno is a specialized healthcare provider focused on comprehensive gynecological and obstetric care within the Faculty Hospital Brno in the Czech Republic. The website presents a professional and well-structured digital presence highlighting multiple subspecialties and partnerships with related specialized centers. The target audience primarily consists of patients seeking expert women's health services. Technically, the site employs modern web technologies including jQuery, Nette Framework, and Google reCAPTCHA, ensuring a secure and interactive user experience. However, the absence of WHOIS data and privacy policy pages indicates areas for improvement in transparency and compliance. Security posture is solid with HTTPS and anti-bot measures but lacks some security headers and formal incident response information. Overall, the website is trustworthy and professional but would benefit from enhanced compliance documentation and security hardening.