Security Directory

The UFC Store is the official e-commerce platform for UFC merchandise, offering licensed apparel and accessories to fans worldwide. The website presents a professional and consistent brand image, targeting UFC enthusiasts and sports merchandise consumers. The business model focuses on retail sales of official UFC gear, positioning itself as a key player in the sports retail sector. Technically, the site employs modern web technologies including JavaScript, CSS, and optimized font formats, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and comprehensive privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain registration transparency, although the site itself appears legitimate and trustworthy. Overall, the site scores well in content quality and business credibility but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

I

iNDiGO multimedia s.r.o.

indigo.cz

41

iNDiGO multimedia s.r.o. is a small Czech Republic-based technology company specializing in bespoke mobile and web-based solutions tailored to client needs. The website presents a basic but clear business overview with contact information and social media links, targeting business clients seeking customized software solutions. The company has been established since 2005, indicating a stable market presence. Technically, the website is simple, built with basic HTML and CSS, hosted on Forpsi servers as inferred from the nameservers. There is no evidence of modern frameworks, CMS, or analytics tools. The site is accessible without WAF or security challenges but lacks advanced technical features such as security headers, HTTPS confirmation, or performance optimizations. From a security perspective, the site does not display privacy or cookie policies, security policies, or incident response information. No security headers or vulnerability disclosures are present, and no forms or scripts that could pose risks are detected. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved significantly. The overall risk is moderate due to the lack of security and privacy compliance features, but no critical vulnerabilities or suspicious indicators were found. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and establishing incident response contacts to enhance trust and compliance.

B

BARBORA ŠNÁBLOVÁ Attorneys

snablova.com

59

BARBORA ŠNÁBLOVÁ Attorneys is a specialized boutique law firm based in Prague, Czech Republic, focusing on international and domestic dispute resolution, particularly arbitration and litigation. Established in 2015, the firm offers expert legal services in commercial arbitration, investment disputes, sports-related cases, and arbitration-related litigation, serving clients both locally and internationally. Their website reflects a professional and client-focused approach, emphasizing strategic legal guidance throughout dispute processes. Technically, the website is built on the Webnode platform, hosted on AWS S3 with Cloudfront CDN, and employs modern web technologies including JavaScript and Google Tag Manager for analytics. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and domain legitimacy verification.

Nikon is a globally recognized leader in imaging and optics technology, offering a wide range of digital cameras, lenses, and photography accessories. The website serves as a comprehensive retail and informational platform targeting photography enthusiasts and professionals, providing detailed product information, firmware updates, and support resources. The site demonstrates a high level of digital maturity with modern technologies such as React, Google Tag Manager, and Microsoft Application Insights integrated for analytics and performance monitoring. Privacy and cookie policies are well implemented with consent mechanisms, reflecting compliance with GDPR standards. Security posture is strong, with HTTPS enforced and appropriate security headers present, although dedicated security and incident response pages are not found. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

Nikon is a globally recognized technology company specializing in imaging products such as cameras, lenses, and sport optics. The Ukrainian localized website serves as a comprehensive portal for product information, firmware updates, support services, and brand engagement. The site targets photographers ranging from hobbyists to professionals, offering detailed product showcases and support resources. The business model focuses on manufacturing and retail of high-quality imaging equipment, maintaining a strong market position as a leading brand in the technology sector. The website demonstrates excellent content quality, professional design, and consistent branding aligned with Nikon's global identity. Technically, the website employs modern web technologies including React, Google Tag Manager, Microsoft Application Insights for analytics, and OneTrust for cookie consent management. The site is built on the Optimizely CMS platform, optimized for mobile devices, and incorporates accessibility features. Performance is fast with proper SEO and metadata implementation. Security is robust with HTTPS enforced and standard security headers present, though explicit security policy and incident response information are not published. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR compliance indicators. Contact information is available via web forms, but no direct emails or phone numbers are published. Social media links are official and consistent with Nikon's brand presence. The domain WHOIS data aligns with Nikon's corporate identity, confirming legitimacy and trustworthiness. Overall, the website is a professional, secure, and user-friendly platform that effectively supports Nikon's business objectives in Ukraine. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

Nikon is a globally recognized brand specializing in digital cameras, lenses, and photography accessories. The Spanish website serves as a comprehensive portal for product information, firmware updates, and customer support, targeting photography enthusiasts and professionals. The site demonstrates a strong market position with consistent branding and a broad product portfolio. Technically, the website employs modern web technologies including React, Google Tag Manager, and Microsoft Application Insights, ensuring a responsive and user-friendly experience across devices. Security measures such as HTTPS, nonce-based script loading, and cookie consent mechanisms are implemented, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Nikon's reputation in the photography retail sector.

Nikon Moldova's website serves as a comprehensive digital storefront and information portal for Nikon's photography products including digital cameras, lenses, and accessories. The site targets photography enthusiasts and professionals in Moldova, offering product details, firmware updates, and customer support resources. The brand is well-established globally, and this localized site reflects Nikon's commitment to regional markets with consistent branding and multilingual support. Technically, the website employs modern web technologies such as React, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Analytics and tracking are implemented with privacy considerations, including consent mechanisms. From a security perspective, the site uses HTTPS with strong SSL configuration and security headers, employs nonce attributes for scripts, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or suspicious activities were detected in the content. Overall, Nikon Moldova's website demonstrates a high level of professionalism, security, and compliance, supporting Nikon's reputable market position. Strategic recommendations include publishing detailed security and incident response policies, enhancing transparency on data protection roles, and maintaining vigilance on third-party script security.

D

dieBeiden Internetagentur GmbH

diebeiden.at

45

dieBeiden Internetagentur GmbH is a small, regional full-service internet agency based in Salzburg, Austria, with approximately 19 years of industry experience. The company specializes in web design, custom web development, CMS solutions, mobile app development, e-commerce platforms, and newsletter systems. Their market position is supported by a solid client base of over 400 satisfied customers and a professional online presence that highlights their expertise and service breadth. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the website is built on the XMS Content Management System, leveraging modern web standards including HTML5, CSS, and JavaScript. The site demonstrates good SEO practices and basic accessibility features, with moderate performance characteristics. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, though there is room for improvement by adding security headers and explicit security policies. From a security and compliance perspective, the site complies with GDPR requirements, evidenced by a comprehensive privacy policy and cookie consent banner. However, no dedicated security policy or incident response contacts are provided, which could be enhanced to improve trust and readiness. No vulnerabilities or suspicious activities were detected in the provided content. Overall, dieBeiden presents a trustworthy and professional digital footprint suitable for its business scope. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen their security posture and compliance standing.

W

Wiedermayer & Friends

wf-creative.com

48

Wiedermayer & Friends is a small, local advertising agency based in Vienna, Austria, founded in 2017. The company offers creative advertising and marketing services targeting businesses in the Vienna region. The website is built on WordPress using the Elementor framework and includes modern web technologies and marketing tools such as Google Tag Manager and Sendinblue. The technical infrastructure is hosted by Hetzner Online GmbH, a reputable hosting provider. Security posture is adequate with HTTPS enabled and no evident vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and functional but could improve in privacy and security transparency.

S

Stauss-Perlite GmbH

stauss-perlite.at

66

Stauss-Perlite GmbH is a well-established Austrian manufacturer and supplier specializing in mineral building materials, non-combustible insulation, plaster carriers, and facade systems. With over 100 years of history, the company serves a global customer base, offering a broad product portfolio including expanded perlite and related construction materials. The website reflects a mature business with clear branding, comprehensive product information, and a professional digital presence. Technically, the site uses modern web technologies, is mobile-optimized, and includes privacy-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and provides multiple contact channels for customer engagement.

Č

Český svaz chovatelů masného skotu

cschms.cz

43

ČSCHMS (Český svaz chovatelů masného skotu) is a Czech national association founded in 1990 that unites breeders of 25 beef cattle breeds. It manages breed registries, conducts performance and genetic controls, evaluates animal exterior, and organizes selection of young bulls. The website serves as an information hub for breeders and stakeholders, providing news, event calendars, breed-specific data, and access to specialized services like breed databases and performance control portals. The association holds recognized certifications such as ICAR, enhancing its credibility in the agricultural sector. Technically, the website uses legacy technologies like MooTools and Slimbox, with a basic design and limited mobile optimization. Security posture is moderate with HTTPS implied but lacking advanced security headers and privacy compliance mechanisms. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the association's established presence and external trust signals.

The International Floorball Federation (IFF) operates the website floorball.sport as the official global governing body for the sport of floorball. The site primarily serves as an informational hub for floorball events, news, and media channels, targeting players, fans, and sports organizations worldwide. The domain registration data aligns well with the organization's identity, confirming legitimacy and appropriate domain age. Technically, the website employs basic HTML and CSS with external resources such as Font Awesome and Azure DNS hosting. The site is currently under construction, resulting in limited content and slower page loads. Mobile optimization and accessibility are basic but functional. No advanced CMS or analytics tools are detected, indicating a simple technical infrastructure. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No contact or incident response information is provided, limiting transparency and user trust. Overall, the website is moderately trustworthy and functional but requires improvements in privacy compliance, security hardening, and content completeness to better serve its audience and meet modern standards.

D

Datlab Institut z.s.

datlabinstitut.cz

52

Datlab Institut is a Czech non-profit organization affiliated with Charles University, specializing in research and analysis to promote transparency and efficiency in public procurement and political finance. The organization operates several projects such as ZINDEX and Politickefinance.cz, targeting public sector stakeholders and the general public interested in governance and public spending. The website reflects a professional and consistent brand image with clear contact information and active external partnerships. Technically, the website employs modern tracking and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a Vue.js-based cookie consent mechanism. Hosting appears to be managed through WEDOS, consistent with the domain registrar data. The site is mobile-optimized with good navigation and content relevance, though some accessibility and SEO improvements are possible. From a security perspective, the site enforces HTTPS and employs cookie consent defaults denying ad and analytics storage until consent. However, explicit security headers are not detected in the HTML, and no privacy policy or terms of service pages are present, indicating compliance gaps. No vulnerabilities or exposed sensitive data were found. The WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website presents a low-risk profile with good business credibility and moderate technical maturity. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and trust.

D

Datlab s.r.o.

datlab.eu

59

Datlab s.r.o. is a Czech-based company specializing in data gathering, processing, and analytics with a focus on economic data and public procurement. Their website highlights multiple specialized products aimed at public authorities, businesses, and researchers, including sanctions verification, tender documentation, supplier risk detection, and procurement monitoring. The company serves a diverse client base including government agencies, municipalities, universities, and NGOs, positioning itself as a trusted regional player in the public procurement data sector. Technically, the website employs modern JavaScript frameworks such as Vue.js and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and professional design. Cookie consent is managed via a Vue.js component, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, registered under a reputable Czech registrar, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include publishing a privacy policy and terms of service, adding security headers, and providing vulnerability disclosure information to enhance security posture and compliance.

O

Original Games

spotthedifference.com

55

SpotTheDifference.com is a niche casual gaming website offering over 70 'spot the difference' puzzles and games. The site targets general audiences interested in casual online puzzles and is funded primarily through advertising. The business appears small and focused on providing entertainment through browser-based games with some social media integration. Technically, the site uses a variety of third-party ad networks and tracking services, including Google Analytics, Criteo, and InMobi, indicating a moderate level of digital maturity but with potential privacy concerns. The site lacks visible privacy policies and contact information, which impacts trust and compliance. Security posture is weak due to missing HTTPS enforcement and security headers, and the absence of WHOIS registration data raises legitimacy concerns. Overall, the site functions as a basic casual gaming platform with room for improvement in security, privacy, and business transparency.

H

Helix Pflanzensysteme GmbH

helix-pflanzensysteme.de

58

Helix Pflanzensysteme GmbH is a specialized company focused on vertical greening systems and sustainable urban green solutions, serving architects, urban planners, and municipalities primarily in Germany. Their website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content about their services including planning, construction, and maintenance of green facades and noise barriers. The technical infrastructure is based on TYPO3 CMS, with modern web technologies and integrations such as Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with detailed policies and user consent options. Overall, the website reflects a trustworthy and credible business with a strong market position in the real estate and urban ecology sector.

K

Kreitl GmbH

kreitl.at

58

Kreitl GmbH is a small Austrian company specializing in tree care, garden design, and water features, aiming to create natural oases for its clients. The website reflects a local service provider with a clear focus on landscaping and environmental aesthetics. Technically, the site is built on WordPress using the Avada theme and incorporates modern plugins like Slider Revolution and lazy loading for images, indicating a moderate level of digital maturity. The site is mobile-optimized and includes basic SEO and accessibility features. Security-wise, the website uses HTTPS and has a cookie consent mechanism, but lacks advanced security headers and visible privacy or terms of service policies, which are areas for improvement. Overall, the site is legitimate and consistent with the business's WHOIS registration data, but could enhance its compliance and security posture to build greater trust and meet regulatory requirements.

W

WoodRocks Bau GmbH

wood-rocks.com

66

WoodRocks Bau GmbH is a medium-sized Austrian company specializing in sustainable wood construction and residential building solutions. The company emphasizes holistic, future-proof building practices with a strong focus on human and environmental integration. Their services span from initial contact and planning through prefabrication and construction to completed residential complexes. The website reflects a professional and consistent brand image, targeting a broad audience interested in sustainable living and affordable housing. Technically, the website employs modern web technologies including Google Tag Manager and CookieHub for cookie consent management, with embedded multimedia content and responsive design. The site is well-structured with good SEO and accessibility basics, although some advanced security headers are missing. The presence of HTTPS and secure forms with CSRF tokens indicates a solid baseline security posture. Security-wise, the site shows good practices such as cookie consent and encrypted communications but lacks explicit security policies or incident response information. The absence of WHOIS registration data is a concern and reduces trustworthiness, though the website content and contact details support legitimacy. No vulnerabilities or suspicious content were detected. Overall, the website scores well on content quality, technical implementation, and privacy compliance but is slightly penalized for missing WHOIS data and security headers. Strategic improvements in security transparency and WHOIS registration verification are recommended to enhance trust and compliance.

S

StadtLABOR – Innovationen für urbane Lebensqualität GmbH

stadtlaborgraz.at

47

StadtLABOR – Innovationen für urbane Lebensqualität GmbH is a small Austrian company specializing in sustainable and cooperative urban development. Their website presents them as an innovation lab focused on integrating climate protection, resource conservation, and innovation into urban projects and neighborhood development. The company targets municipalities, urban planners, and citizens interested in sustainable city living. Their business model revolves around consulting, project management, and community engagement in urban development. Technically, the website is built on WordPress using the Neve theme, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled, but lacks some advanced security headers and published security policies. Privacy compliance is mostly met with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the website is professional, trustworthy, and well-branded, with active social media channels and recent content updates.

TilePuzzles.com is a niche online gaming website specializing in sliding tile puzzles, including traditional 15 puzzles, wood puzzles, and original train games. The site targets casual puzzle enthusiasts and offers free gameplay supported by advertising and a mobile app for iPhone/iPod Touch. The business model is primarily ad-supported with user engagement through medal scoring and championships. The website is small in scale, with consistent branding linked to OriginalGames.com, and has been active since at least 1999 according to site content, though domain registration data is unavailable. Technically, the site uses classic web technologies such as HTML, CSS, and JavaScript, with Google Adsense for monetization. It is mobile responsive and promotes an iPhone app, indicating some digital maturity. However, the site lacks modern security features such as HTTPS enforcement and security headers, and no CMS or hosting provider information is evident. Performance is moderate, and SEO and accessibility are basic. From a security perspective, the site shows minimal risk but also minimal protections. There is no evidence of privacy or cookie policies, no contact or incident response information, and no security certifications. The absence of HTTPS and security headers is a concern. No vulnerabilities or exposed sensitive data were detected, but the lack of security best practices reduces trustworthiness. Overall, the site is a functional, small-scale gaming portal with basic technical implementation and limited security posture. The missing WHOIS data raises questions about domain legitimacy, though the content appears genuine. Strategic improvements in security, privacy compliance, and contact transparency are recommended to enhance trust and compliance.

C

CrossFit Medical Society™

crossfitmedicalsociety.com

60

CrossFit Medical Society™ is a healthcare community platform focused on empowering individuals to take control of their health through access to providers, biomarker labs, and community-based healthcare solutions. The website is professionally designed using Squarespace, offering clear navigation and membership services including a provider directory and CommunityCare crowdfunding. Technically, the site is well-implemented with HTTPS and HSTS enabled, but lacks explicit cookie consent and detailed security policies. The absence of WHOIS data for the domain raises some legitimacy concerns, though the site content and structure suggest a legitimate small healthcare-focused business. Overall, the site is safe, targeted at a general audience, and provides valuable healthcare resources.

B

Sælg billetter online som arrangør | Billetlugen.Light

billetlugen-light.dk

61

Billetlugen.Light is a Danish online ticket sales platform targeting event organizers who want to create their own online shops and sell tickets easily. The platform emphasizes user-friendliness and full control over ticket sales, leveraging the reach of Billetlugen's marketplace. Technically, the website is built on TYPO3 CMS and uses modern web technologies including Google Tag Manager and a consent management platform, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but lacks some security headers and explicit privacy and terms pages. The absence of WHOIS registration data is a notable concern, impacting trust and legitimacy assessments. Overall, the site is professional and functional but would benefit from enhanced transparency and security best practices.

A

Aspen Institute Central Europe

aspeninstitutece.org

54

Aspen Institute Central Europe is a well-established non-profit organization founded in 2012, serving as a regional platform for policy innovation, leadership development, and inclusive dialogue primarily in the Czech Republic, Hungary, Poland, and Slovakia. The organization is affiliated with the global Aspen network, enhancing its credibility and reach. Their website reflects a professional and comprehensive digital presence, offering detailed information about programs, events, and publications aimed at fostering societal improvement and values-based leadership. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and GDPR compliance, ensuring a robust and user-friendly experience. The site is mobile-optimized, fast-loading, and accessible, with clear navigation and rich content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved and explicit security policies are absent. Overall, the website demonstrates a strong commitment to privacy and compliance, with comprehensive privacy and cookie policies. However, the absence of WHOIS data and direct contact emails or phone numbers slightly reduces transparency. No signs of blocking or WAF interference were detected, allowing full content accessibility and analysis.

The website www.novatur.de currently hosts only a placeholder page titled 'Neue Website' indicating that a new website is under construction. There is no substantive business content, contact information, or policies present. The domain uses name servers associated with 'agenturserver', suggesting hosting by a third-party agency. The technical infrastructure is minimal, consisting solely of basic HTML and CSS without any scripts, forms, or external integrations. No security headers or SSL information is available, and the site lacks HTTPS, which is a critical security deficiency. No privacy, cookie, or terms of service policies are found, indicating poor privacy compliance. Overall, the website is not currently operational as a business site and provides no trust or security signals.

U

Unie státních zástupců České republiky

uniesz.cz

52

Unie státních zástupců České republiky is a professional non-profit association representing state prosecutors in the Czech Republic. The website serves as an information portal providing organizational details, internal regulations, news, and official statements relevant to its members and the public. The site targets legal professionals and government officials within the Czech Republic. Technically, the website is built on WordPress with common web technologies such as jQuery and FontAwesome, and it integrates Facebook social media features. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. Security-wise, the website uses HTTPS and secure login forms but lacks advanced security headers and explicit incident response or security policy disclosures. The absence of WHOIS data for the domain is a notable concern, limiting trust verification of domain registration details. Overall, the website is functional and professional but could improve its security posture and transparency regarding privacy and terms of service.

L

LYOS

lyoskin.com

60

LYOS is a small Finnish e-commerce skincare brand launched in 2024, offering a playful and natural skincare product line. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Facebook Pixel for marketing. The brand has received industry recognition through awards and media features, positioning itself as a niche player in the clean and natural beauty market. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is lacking as no explicit privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, LYOS presents a professional and trustworthy online presence but should improve privacy and compliance disclosures to enhance user trust and regulatory adherence.

The website eticsconfigurator.com currently serves a 404 error page with minimal content, indicating either a misconfiguration or an unavailable resource. The site uses Angular 13.3.11 as its frontend framework and is hosted on infrastructure associated with Akamai, a reputable content delivery network. However, the lack of substantive content, metadata, and contact information limits the ability to fully assess the business or technical maturity. Security posture is weak due to absence of security headers and no visible HTTPS enforcement data. Privacy and compliance policies are missing, which is a significant gap for user trust and regulatory adherence. Overall, the site appears to be in an early or incomplete state, requiring substantial improvements in content, security, and compliance to be considered professional and trustworthy.

D

DGNB GmbH

dgnb-system.de

56

DGNB GmbH operates as a leading non-profit organization specializing in sustainability certification for buildings and urban districts, positioning itself as a global benchmark in sustainable building practices. The website provides comprehensive information about the DGNB certification system, its benefits, criteria, and processes, targeting professionals and organizations in the construction and real estate sectors. The company offers certification services, educational programs, and consulting to promote sustainable building standards. Technically, the website is built on TYPO3 CMS, employs Matomo for analytics, and is hosted on agenturserver infrastructure, delivering a well-structured, mobile-optimized, and SEO-friendly user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a mature digital presence with strong business credibility and trust indicators.

D

DGNB GmbH

dgnb-akademie.de

57

DGNB GmbH operates the DGNB Akademie, a central platform dedicated to education and certification in sustainable building and real estate management. The company offers a broad range of training programs, seminars, and certifications recognized nationally and internationally, targeting professionals in architecture, construction, and real estate sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted on agenturserver infrastructure, indicating a stable and modern setup. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Overall, the site demonstrates high business credibility with clear contact information, trust signals like testimonials and certifications, and compliance with GDPR and cookie regulations. No blocking or WAF interference was detected, allowing full content accessibility.

M

MOSAIQ

mosaiq.com

61

MOSAIQ is a digital agency specializing in branding, user experience (UX), and technology solutions. The company targets businesses seeking professional digital projects such as websites, landing pages, and digital branding. The website presents a professional and consistent brand image, indicating a focused small-sized agency based in Germany. Technically, the website employs modern JavaScript frameworks and integrates Google Tag Manager and Flockler for analytics and content embedding, reflecting a moderate level of digital maturity. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain registration transparency, though the website content itself appears legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced security and privacy compliance measures.

D

DLC Websites

pointlesssites.com

59

PointlessSites.com is a niche entertainment portal that curates and lists amusing, pointless, and family-friendly websites for users seeking light-hearted fun. The site has been operating since at least 1999 according to meta data, offering daily new site recommendations and a voting system to engage users. The business model appears to rely on advertising revenue, primarily through Google Adsense, and partnerships with other niche sites. Technically, the site uses standard HTML, CSS, and JavaScript with integrations for social media and analytics. While the site is accessible and functional, it lacks modern security headers and a clear privacy policy, which impacts its compliance posture. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the site provides a moderate user experience with basic mobile optimization and SEO.

D

DLC Websites

top50names.com

63

Top50Names.com is a niche informational website focused on providing popular and unusual baby names, including origins, popularity rankings, and a voting system for users to influence name popularity. The site targets parents and individuals interested in baby naming trends, offering tools such as a name selector and search functionality. The business model relies primarily on advertising revenue, leveraging Google Adsense and multiple ad networks integrated into the site. The website is developed with standard web technologies including HTML, CSS, JavaScript, and uses Google Fonts for typography. It employs a consent management platform compliant with the IAB Europe Transparency and Consent Framework to manage GDPR-related user consent. Security posture is moderate with HTTPS enforced and a Content Security Policy header present, though additional security headers could enhance protection. No direct company contact information or privacy policy page is found, which impacts trust and compliance perception. WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the site is functional, content-rich, and serves its niche well but would benefit from improved transparency and security enhancements.

Wodka Store is a Finnish e-commerce business specializing in functional training equipment and accessories. Originating from CrossFit Messukylä Oy in Tampere, the brand offers products tested by competitive athletes, targeting fitness enthusiasts. The website is built on the Shopify platform using the Dawn theme, hosted on Google Cloud infrastructure, and optimized for mobile and accessibility. While the site employs HTTPS and hCaptcha for security, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a professional and trustworthy online presence with room for improvement in privacy compliance and security headers.

C

coding. powerful. systems. CPS GmbH

cps-it.de

61

coding. powerful. systems. CPS GmbH is a well-established digital agency based in Berlin, Germany, specializing in TYPO3 CMS solutions and comprehensive digital experiences. Founded in 2002, the company offers a broad range of services including full-stack development, consulting, hosting, UX/UI design, and accessibility, positioning itself as a leading TYPO3 partner with platinum membership status. Their long-standing client relationships and certifications underscore their market credibility and expertise. Technically, the website is built on TYPO3 CMS with a modern tech stack including PHP, Symfony, Docker, and GitLab, reflecting a mature and professional digital infrastructure. The site demonstrates good performance, mobile optimization, and excellent accessibility features. Security-wise, HTTPS is enforced, but the absence of visible security headers and public security policies suggests room for improvement. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused with minimal security risks detected.

N

NousuCommunity Oy

nousut.fi

68

NousuCommunity Oy operates a Finnish e-commerce website specializing in high-quality, sustainable casual clothing manufactured domestically. The company positions itself as a niche player emphasizing Finnish craftsmanship and sustainability, targeting consumers who value locally made fashion. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrating customer review systems to enhance trust and engagement. Technical infrastructure is robust, with fast performance, mobile optimization, and good SEO practices. Security posture is strong, with HTTPS enforced and standard security headers in place, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

5

5.11 Tactical Finland

511tactical.fi

63

5.11 Tactical Finland operates as a specialized retail e-commerce platform and physical store in Helsinki, focusing on tactical clothing and equipment for professionals such as military, law enforcement, emergency responders, and outdoor enthusiasts. The company is positioned as the European flagship store for the 5.11 Tactical brand in Finland, offering a comprehensive product range and leveraging a mature domain established in 2005. The business model centers on direct-to-consumer sales via a Shopify-powered online store complemented by a physical retail presence. Technically, the website is built on the Shopify platform using a modern Enterprise theme, integrating multiple third-party services including Judge.me for customer reviews, Blockify for fraud prevention, and Omnisend for marketing automation. The site demonstrates good performance, mobile optimization, and accessibility, with a well-structured SEO setup and comprehensive metadata including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS with strong SSL configuration, employs fraud detection mechanisms, and uses CAPTCHA protections on forms. While explicit security headers are not directly visible in the HTML, Shopify's platform typically enforces standard security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility, technical maturity, and security posture. Strategic recommendations include publishing a dedicated security policy, adding a vulnerability disclosure or security.txt file, and enhancing incident response contact visibility to further strengthen trust and compliance.

H

Hodnocení práce a firem

hodnoceni-prace.cz

41

The website www.hodnoceni-prace.cz operates as a Czech-language platform focused on providing user-generated reviews of companies and workplaces. It targets a general audience interested in honest and objective evaluations of employers and services within the Czech Republic. The platform offers features such as user registration, login, search with advanced filters, and the ability to request the addition of new companies. The business model centers on aggregating and presenting customer and employee feedback to assist users in making informed decisions. From a technical perspective, the website employs a traditional web stack with HTML5, CSS, and JavaScript, relying heavily on older versions of jQuery and jQuery UI libraries. Google Analytics is integrated for visitor tracking. The site demonstrates basic mobile optimization and SEO practices but lacks modern frameworks or CMS indications. Performance is moderate, and accessibility features are minimal. Security posture reveals several concerns: the use of outdated JavaScript libraries with known vulnerabilities, absence of visible security headers, and no explicit cookie consent mechanism despite GDPR applicability. The WHOIS data is unavailable, suggesting privacy protection or domain registration opacity, which impacts trustworthiness. No advanced security policies or incident response contacts are evident. Overall, the website is functional and provides relevant content for its niche but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience against threats.

T

TESCOMA s.r.o.

tescoma.com

50

TESCOMA s.r.o. operates a multilingual website offering a comprehensive range of kitchen stainless steel cookware, utensils, and accessories for cooking and table use. The company targets a broad general audience interested in kitchenware products and maintains a consistent brand presence across multiple country-specific domains. The business model is retail-focused, serving customers primarily in the Czech Republic and other European markets. The website content is professionally presented with good design and navigation, although mobile optimization and accessibility are basic. Technically, the website uses standard HTML, CSS, and JavaScript technologies, including an outdated version of jQuery (1.4.4) and Google Analytics for tracking. The site lacks modern security headers and does not provide visible privacy or cookie policies, which impacts compliance and user trust. Performance is moderate, and SEO optimization is good based on meta tags and multilingual support. From a security perspective, the site uses Google Analytics asynchronously but lacks visible HTTPS confirmation and security headers in the provided data. The WHOIS lookup failed to return registrar or registrant information, raising concerns about domain registration legitimacy. No contact information or incident response details are provided, limiting transparency and trust. Overall, the security posture is moderate but requires improvements in SSL configuration, security headers, and compliance documentation. The overall risk assessment indicates a functional and professional retail website with some technical and compliance gaps. Strategic recommendations include updating JavaScript libraries, implementing HTTPS and security headers, publishing privacy and cookie policies, and improving transparency with contact and incident response information to enhance trust and security posture.

T

Tescoma

tescoma.hu

61

Tescoma.hu is the Hungarian localized e-commerce website for Tescoma, a leading Czech kitchenware brand. The site offers a wide range of original kitchen tools for cooking, baking, and table setting, targeting general consumers interested in quality kitchen products. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses modern web technologies including Next.js and Google Tag Manager, hosted on a CDN for fast performance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. Privacy and cookie policies are present and GDPR compliant. Contact information includes a clear phone number and contact form. The domain registration details align well with the business claims, indicating high legitimacy. Overall, the site is a trustworthy and professional retail platform for kitchenware products in Hungary.

MyIpNumber.com is a small informational website dedicated to providing users with their IP address and educational content about IP numbers, DNS, NAT, and related internet technologies. The site targets general internet users seeking to understand their IP address and networking concepts. It operates primarily through advertising revenue, leveraging Google Adsense and social sharing tools like AddThis. The website content is straightforward, focusing on technical explanations and IP address display without commercial transactions or user accounts. Technically, the site uses basic HTML, CSS, and JavaScript with embedded Google Adsense scripts for monetization. The design and navigation are functional but basic, with limited mobile optimization and accessibility features. No modern frameworks or CMS platforms are detected. Performance is moderate, with no explicit indicators of advanced hosting or CDN usage. From a security perspective, the site lacks HTTPS/SSL information in the provided data, and no security headers are detected. There are no privacy or cookie policies, nor contact information for security or incident response. The absence of WHOIS data raises concerns about domain registration legitimacy and transparency. No vulnerabilities or malicious content are evident, but the security posture is weak due to missing best practices. Overall, the site is safe for general audiences, providing educational content without adult or explicit material. However, the lack of privacy compliance, security measures, and contact information limits trustworthiness and business credibility. Strategic improvements in security, privacy policies, and domain registration transparency are recommended to enhance user trust and compliance.

D

DLC Websites

randomnumbergenerator.com

51

RandomNumberGenerator.com is a niche utility website operated by DLC Websites since 1999, providing free random number generation tools primarily for lottery and gaming purposes. The site offers customizable random number tables and educational content about randomness. It is monetized through Google AdSense advertising and maintains a simple, functional design with basic mobile responsiveness. The website does not collect personal data or provide contact information, privacy policies, or terms of service, which limits its compliance posture. Technically, it uses standard web technologies including HTML, CSS, JavaScript, and Google Ads scripts. Security posture is moderate with no visible security headers or advanced protections, and the random number generation relies on JavaScript's Math.random(), which is not cryptographically secure but sufficient for casual use. Overall, the site is legitimate and consistent with its domain registration data but would benefit from improved privacy and security practices.

D

DLC Websites

deadlinkchecker.com

39

DeadLinkChecker.com is a specialized online service offering free and subscription-based tools to detect broken links on websites, targeting webmasters and SEO professionals. The business operates a niche service focused on website quality and SEO enhancement, with a freemium model that includes manual checking and automated scheduled scans. The website content is professional and consistent with its stated purpose, providing clear service descriptions and user testimonials. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Analytics, with basic security measures such as HTTPS and a Content-Security-Policy header. However, the absence of additional security headers and cookie consent mechanisms indicates room for improvement in privacy compliance and security posture. The WHOIS data is notably missing or unregistered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site scores well on content quality and usability but should address privacy and security gaps to enhance trust and compliance.

S

SANANIM z.ú.

drogy.net

44

The website www.drogy.net is an informational portal focused on legal and illegal drugs, addiction, and prevention, operated by the non-profit organization SANANIM z.ú. It provides news, research, statistics, opinions, and recommendations primarily targeting the general public and professionals interested in drug-related topics in the Czech Republic. The site is well-structured with consistent branding and good content quality, offering valuable resources and external references to reputable news and research organizations. Technically, the site uses a custom CMS with multiple CSS and JavaScript assets, including Google Analytics and Google Tag Manager for user tracking. Hosting is provided by SmartWEB.CZ. The site demonstrates moderate performance and basic mobile optimization. SEO practices are good, but accessibility and privacy compliance need improvement. From a security perspective, HTTPS is implied but no explicit security headers or policies are detected. There is no visible sensitive data exposure or vulnerable libraries. However, the absence of privacy and cookie policies and lack of incident response information are notable gaps. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency despite the website's active status and association with a known non-profit. Overall, the website is a credible and useful resource with moderate security posture and technical maturity. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and compliance.

T

Turistické informační centrum Hlučín

ic-hlucin.cz

47

The website www.ic-hlucin.cz serves as the official online presence of the Turistické informační centrum Hlučín, a local government-affiliated tourism information center in the Czech Republic. It provides visitors with historical, cultural, and tourist information about Hlučín and the surrounding region, including an event calendar and an e-shop for local products. The site targets tourists and local visitors interested in exploring the area. Technically, the site employs a modern JavaScript stack including jQuery, FullCalendar, and Mapy.cz API for interactive maps, along with Google Analytics for visitor tracking. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with no critical vulnerabilities detected, but security headers are not explicitly observed. WHOIS data is unavailable, limiting domain legitimacy verification, though the site content and external links suggest a legitimate local government entity. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience.

S

Sanoma Learning

sanomalearning.com

67

Sanoma Learning is a prominent European K12 education company providing a broad range of printed and digital learning content and platforms to support teachers and schools. The company is part of the larger Sanoma Group, with multiple subsidiaries across Europe. The website reflects a mature digital presence with professional design, clear navigation, and relevant educational content targeting educators and institutions. Technically, the site uses modern JavaScript libraries, Microsoft Application Insights for telemetry, and Adobe DTM for tag management, indicating a well-instrumented digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are lacking. The absence of WHOIS data is a notable anomaly, potentially impacting domain trustworthiness. Overall, the website is professional, content-rich, and trustworthy from a business perspective but could improve transparency in privacy and security disclosures.

D

DGNB GmbH

dgnb-navigator.de

49

DGNB GmbH operates the DGNB Navigator, a specialized online platform dedicated to sustainable building products. The platform connects manufacturers providing detailed sustainability data with architects, planners, and DGNB auditors, facilitating informed product selection and integration into DGNB certification processes. The website is professionally designed, multilingual (German and English), and supported by a mature CMS (TYPO3). It hosts a large ecosystem of partners and manufacturers, reinforcing its market position as a unique sustainability-focused product database in the construction sector. Technically, the site is well-structured and mobile-optimized, though it lacks some advanced security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but could be improved with better header policies and incident response information. Overall, the site is trustworthy and serves a niche but important role in sustainable construction, with room for enhanced privacy compliance and security best practices.

S

SANANIM z.ú.

drogovaporadna.cz

50

The website drogovaporadna.cz is operated by SANANIM z.ú., a Czech non-profit organization focused on drug prevention and treatment. The site provides an anonymous online drug advisory service, educational content about various drugs, and a telephone counseling line. It targets individuals affected by drug issues, their families, and professionals seeking information. The domain has been registered since 2000, indicating a well-established presence in the Czech Republic's drug prevention sector. Technically, the website uses a custom or unknown CMS with standard web technologies including JavaScript, CSS, and HTML. It integrates Google Analytics and Google Tag Manager for user tracking. Hosting is provided by SmartWEB.CZ. The site shows basic mobile optimization and accessibility but lacks advanced SEO and modern security headers. Performance is moderate. From a security perspective, the site uses HTTPS and employs POST methods for forms, but lacks visible security headers such as CSP or HSTS. The charset is iso-8859-2 instead of UTF-8, which is outdated. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is found. The domain WHOIS data is consistent with the organization, supporting legitimacy. Overall, the site is a credible, safe, and educational resource with moderate technical and security maturity. Improvements in privacy compliance, security headers, and modern technical standards are recommended to enhance trust and protection.

S

Sympa HR

sympahr.net

66

Sympa HR is a technology company providing a human resources management platform, as evidenced by the branded login portal. The website is primarily a login interface targeting organizations and HR professionals who use their SaaS platform. The technical infrastructure is based on ASP.NET WebForms with jQuery and New Relic monitoring, indicating a moderately modern but somewhat dated technology stack. The site enforces HTTPS but lacks visible advanced security headers and privacy policies, which limits its compliance posture. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the site is functional but minimalistic, focusing on user authentication without public-facing marketing or informational content.

W

Wuxly

wuxly.com

58

Wuxly is a Canadian-based e-commerce retailer specializing in sustainable, animal-free outerwear such as parkas, winter coats, and fleeces. Established in 2016, the company positions itself as an ethical and eco-friendly brand targeting consumers interested in high-performance, cruelty-free winter apparel. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations with marketing and analytics tools like Klaviyo, Judge.me, and Microsoft Clarity. The technical infrastructure is solid, with good mobile optimization and SEO practices, although there is room for improvement in security headers and DNS security. The security posture is good, with HTTPS enforced and domain registration protections in place, but lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR.

B

Brush On Block

brushonblock.com

64

Brush On Block is a specialized e-commerce retailer focused on mineral powder sunscreen and natural skincare products, emphasizing vegan-friendly and reef-safe formulations. Established in 2011, the company targets environmentally conscious consumers seeking effective sun protection with natural ingredients. Their market position is that of a niche leader with a strong brand identity and commitment to sustainability. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as loyalty programs, subscription management, and live chat support, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, though there is room for improvement in DNSSEC and formal security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.