Security Directory

C

Cooperativa “Consejo de Lenguaje Neutro”

pronombr.es

20

Pronombr.es is a community-driven cooperative project dedicated to promoting inclusive language and the correct use of personal pronouns. It offers educational resources, personalized pronoun cards, and fosters a supportive environment for the queer community and allies. The project is open source and supported by a small but active team, with a strong emphasis on respect, freedom, and inclusivity in language use. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging CDN services for performance and Shopify for merchandise sales. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS and public key cryptography, though it lacks some formal policies like a security.txt and cookie consent mechanisms. Overall, the site is trustworthy, professional, and serves a niche but important community function.

The website www3.rinici.de is a parked domain landing page primarily designed to advertise the domain rinici.de for sale. It lacks substantive business content, contact information, or any service offerings. The site relies heavily on advertising scripts and tracking technologies, with minimal user-facing content. Technically, the site uses standard HTML and JavaScript with external ad and tracking services, hosted via Amazon Cloudfront CDN. There is no evidence of HTTPS or security headers, and privacy compliance is minimal, with only a basic privacy policy accessible via a popup. The security posture is weak due to lack of HTTPS and absence of security best practices. Overall, the site presents a low trust profile and limited business credibility.

W

Wikidot Inc.

wikidot.com

60

Wikidot Inc. operates a well-established wiki hosting platform that enables users to create, collaborate, and publish wiki-based websites. The company targets a broad audience including individuals, communities, and professionals seeking collaborative web spaces. Their business model is freemium, offering free wiki hosting with optional paid Pro features. The website demonstrates consistent branding and professional content, supporting a medium-sized technology company profile.

The website www3.lobi-teamsport.de is a parked domain with minimal content primarily consisting of advertising scripts and placeholders. There is no clear business description, contact information, or services offered. The site uses multiple third-party ad and tracking scripts, including Google Adsense and Youseasky, but lacks privacy or cookie consent mechanisms. Technically, the site uses standard HTML and JavaScript with Cloudfront CDN hosting but does not enforce HTTPS or implement security headers. The overall security posture is weak, with no visible compliance to GDPR or other privacy regulations. Business credibility is low due to lack of verifiable information and registrant transparency. The domain WHOIS data indicates use of generic redirect name servers typical for parked domains, further reducing trust. The site is accessible without WAF or security challenges but offers limited value or trustworthiness to users.

F

FarWorks, Inc.

thefarside.com

67

The Far Side official website serves as the digital home for Gary Larson's iconic comic strip, offering daily classic comics, collections, and an online shop. The site is professionally designed, mobile-optimized, and hosted by Andrews McMeel Universal, a reputable media publisher. The business model focuses on content publishing and merchandising within the media sector, targeting a general audience with family-friendly content. The site demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks, third-party analytics, and advertising networks to monetize and engage users. From a technical perspective, the website employs a modern React-based stack with lazy loading, CDN delivery, and integration of multiple ad and tracking services. Performance and SEO are well addressed, with good accessibility features. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, no direct contact information or explicit security policies are published, which could be improved. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected. The site uses multiple ad networks and tracking pixels but maintains transparency through consent banners. The absence of WHOIS data is a notable anomaly, possibly due to privacy protection or query limitations, but the overall trustworthiness remains high given the official branding and hosting. Overall, the website is a professional, secure, and privacy-conscious platform for The Far Side brand, though it would benefit from publishing clearer security and incident response policies and providing direct contact channels for enhanced trust and compliance.

The website casadecompensare.ro is currently a parked domain with no active business content or services offered. The site primarily displays advertising scripts and a domain sale banner, indicating it is not in operational use by a company. There is no contact information, no forms, and minimal content, which limits its utility and trustworthiness. Technically, the site uses basic HTML and JavaScript with external ad scripts and a CDN for hosting, but lacks HTTPS and security headers, which are critical for secure web presence. Privacy compliance is minimal with only a basic privacy policy accessible via a popup, and no cookie or terms of service policies are present. Overall, the site has a low security posture and poor business credibility, reflecting its status as a domain parking page.

The website cnvmr.ro is currently a parked domain with no active business content or services. It primarily serves as a placeholder page indicating the domain may be for sale, with advertising scripts embedded from Google Adsense and related ad networks. The site lacks any meaningful business description, contact information, or user engagement features. Technically, the site uses standard HTML and JavaScript with content delivered via Cloudfront CDN, but lacks modern security headers and HTTPS enforcement is not confirmed. Privacy compliance is minimal with only a basic privacy policy accessible via a popup link and no cookie consent mechanisms. Overall, the security posture is weak due to missing HTTPS enforcement and absence of security best practices. The domain registration is consistent with a parked domain, registered in 2022 via Tool Domains Ltd, with no suspicious WHOIS patterns. The site is safe in terms of content, with no adult or explicit material detected. The overall risk is low but the site offers no business value or trust signals, and improvements are needed to establish legitimacy and security.

The website sibex.ro is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain may be for sale, with advertising scripts and no meaningful user engagement features. The domain was registered in 2021 by Net In EOOD, a legitimate registrar, but the website itself does not represent an active company or service. Technically, the site uses basic HTML and JavaScript with advertising integrations from Google Adsense Domains CAF and Youseasky, hosted on Amazon Cloudfront CDN. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie consent mechanisms are implemented. From a security perspective, the site has a low maturity level with no forms or inputs to secure, but also no visible vulnerabilities. Overall, the site poses minimal risk but lacks professionalism and trustworthiness due to its parked status and lack of business information.

C

CrowdChange

crowdchange.ca

71

CrowdChange is a professional fundraising software provider focused on delivering advanced technology solutions to nonprofits, fraternities, sororities, academic institutions, and athletic programs. Their platform offers a comprehensive suite of fundraising tools including peer-to-peer campaigns, event ticketing, online donations, and integrations with third-party payment and donation services. Positioned as a market leader in North America, CrowdChange emphasizes customer support and ease of campaign setup to maximize fundraising success. Technically, the website is built on the Duda platform, leveraging modern web technologies such as service workers for offline support, and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and ZoomInfo Pixel. The site is mobile optimized with good SEO and accessibility basics, though some security headers could be improved. From a security perspective, the site enforces HTTPS and uses secure forms with CAPTCHA, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of a cookie consent banner may pose privacy compliance risks. WHOIS data is unavailable due to privacy protection, which is common but reduces transparency. Overall, CrowdChange presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security headers would enhance their security posture and regulatory adherence.

F

FeatPaper

featpaper.com

56

FeatPaper is a South Korean SaaS company specializing in converting static PDFs into interactive documents enriched with videos, GIFs, and embedded tools, coupled with advanced analytics to track viewer engagement. The platform targets B2B sales and marketing teams, providing real-time notifications and communication channels to enhance customer interaction and sales effectiveness. The website is professionally designed, mobile-optimized, and hosted on AWS, leveraging modern web technologies such as Next.js and React. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and privacy compliance documentation is missing. The site integrates multiple analytics and tracking tools, indicating a moderate level of user tracking. Overall, the business appears legitimate and focused on a niche market with good technical maturity but would benefit from improved privacy and compliance transparency.

The website cretablog.gr currently serves as a parked domain landing page with minimal content, primarily advertising the domain for sale. There is no active business presence, no contact information, and no substantive content describing any services or products. The technical infrastructure relies on third-party ad networks and tracking scripts, with no detected CMS or advanced frameworks. Security posture is weak, lacking HTTPS and security headers, and privacy compliance is minimal with only a basic privacy policy linked via a popup. Overall, the site does not present a professional or trustworthy business front and is likely intended for domain resale rather than active operation.

L

Lexus Slovensko

lexus.sk

72

Lexus Slovensko operates as the official luxury automotive brand presence in Slovakia, specializing in hybrid and fully electric vehicles. The website reflects a strong brand identity consistent with Lexus Europe and Toyota Motor Corporation, targeting consumers interested in premium automotive products. The digital infrastructure leverages modern technologies including Adobe Experience Manager, cloud-based CDNs, and advanced analytics tools such as Datadog and Google Tag Manager, indicating a mature technical setup. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and terms of service documentation are absent, representing an area for improvement. Overall, the site is professional, trustworthy, and aligned with the brand's market positioning.

A

Antiwar.com

antiwar.com

55

Antiwar.com is a long-established non-profit media platform focused on providing anti-war news, opinions, and related content to a general audience interested in international conflict and peace advocacy. Founded in 1995, it maintains a niche position in the media industry with regular updates, podcasts, and a newsletter. The website uses a custom or unknown CMS and is hosted via Cloudfront CDN, with Google Analytics integrated for user tracking. The design and navigation are basic but functional, supporting content relevance and user engagement. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks advanced security headers and incident response disclosures. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

The website invitationagent.com currently serves as a parked domain with no active business content or services. The page primarily displays a placeholder indicating the domain may be for sale, supported by advertising scripts from Google and third-party ad networks. There is no identifiable company information, contact details, or business description. The technical infrastructure relies on basic HTML and JavaScript with ad integrations but lacks modern CMS or frameworks. Security posture is weak with no visible HTTPS enforcement, no security headers, and no privacy or cookie consent mechanisms. WHOIS data is suspicious due to a future creation date and lack of registrant details, further undermining trust. Overall, the site does not present a credible or professional business presence and poses risks related to transparency and security.

N

Nimbata Call Tracking

nimbata.com

66

Nimbata is a technology company specializing in call tracking and marketing analytics software, enabling businesses to link phone calls to PPC, SEO, and offline campaigns for true marketing attribution. The company targets marketers and businesses seeking to optimize their marketing impact through integrated tools such as Google Analytics 4, Google Ads, HubSpot, and Slack. With a user base exceeding 13,000 marketers across more than 4,300 US cities and 70 countries, Nimbata positions itself as a reliable and scalable SaaS provider in the marketing technology space. Technically, the website is built on WordPress using the Astra theme and incorporates a modern tech stack including HubSpot analytics, Google Tag Manager, Facebook Pixel, Hotjar, and various marketing and retargeting tools. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security measures include HTTPS and a strict Content-Security-Policy, although some improvements are recommended. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms indicates gaps in compliance and transparency. The WHOIS data is missing or indicates the domain may be unregistered or privacy-protected, which raises concerns about domain legitimacy relative to the business claims. Overall, Nimbata presents a professional and trustworthy front with strong technical and marketing capabilities but should address compliance and domain registration transparency to enhance trust and security posture.

S

Schroders Capital

schroderscapital.com

69

Schroders Capital is a global asset management firm specializing in private markets, offering a broad range of investment solutions including Private Equity, Real Estate, Infrastructure, and Private Debt & Credit Alternatives. The company serves professional and institutional investors worldwide, with a strong presence across 25 global locations and managing assets exceeding $99 billion. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for its target audience of professional investors. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Amazon Cloudfront CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the brand association and professional presentation.

eKupon.ba is a regional e-commerce platform focused on providing discounted travel, wellness, and leisure offers primarily targeting customers in Bosnia and Herzegovina. The website presents a professional and modern design with a good user experience, showcasing a variety of hotel deals, spa treatments, and travel packages. The platform leverages modern web technologies including Alpine.js and Laravel Livewire, and integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by adding explicit cookie consent and detailed GDPR-compliant privacy policies. Contact information is limited to a contact form, with no direct emails or phone numbers visible. WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, the site is well-positioned in its market niche but should enhance privacy and compliance transparency to improve trust and regulatory adherence.

Z

ZEIT SPRACHEN

zeit-sprachen.de

49

ZEIT SPRACHEN is a reputable language learning brand offering printed and digital magazines for multiple languages including English, French, Spanish, Italian, and German. It operates as a 100% subsidiary of the ZEIT Verlagsgruppe, a well-known German publishing group, positioning itself strongly in the education sector with high-quality journalistic content tailored for language learners and educators. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content.

The website kaarna.fi is a parked domain primarily intended for sale, as indicated by the prominent domain sale banner and minimal content. The site lacks substantive business information, contact details, or services, positioning it as a placeholder rather than an active business site. The technical infrastructure relies on basic HTML and JavaScript with advertising scripts from Google Adsense and Youseasky, hosted via Cloudfront CDN. The site shows moderate performance but limited mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and privacy compliance is minimal with only a basic privacy policy and no cookie consent mechanism. Overall, the site presents low business credibility and trustworthiness, suitable only as a domain sale landing page.

The website farmabih.ba is currently a parked domain with no active business content or services. It serves primarily as a placeholder page indicating the domain may be for sale. The site relies heavily on third-party advertising scripts, mainly Google Adsense Domains CAF and DoubleClick, with no original content or user engagement features. The technical infrastructure is basic, using standard HTML and JavaScript with Amazon Cloudfront CDN for content delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie consent mechanisms. The site does not provide any contact or business information, which limits trust and credibility. Overall, the domain appears to be used for domain parking and resale rather than an operational business website.

K

Kynutá buchta

kynutabuchtabistro.cz

55

Kynutá buchta is a small hospitality business operating a bistro, café, and pastry shop in the Czech Republic. The website presents a traditional and family-inspired brand focused on quality baked goods and local coffee offerings. The business targets local customers and visitors seeking authentic Czech culinary experiences. The site is built on the Webnode platform and uses AWS Cloudfront CDN for hosting, with Google Tag Manager implemented for analytics. The website is mobile-optimized and provides a user-friendly experience with clear navigation and appealing visuals. However, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. No direct contact emails or phone numbers are provided on the site, but social media links to Facebook and Instagram are present.

U

University of Missouri Tiger Scholarship Fund

tsfmizzou.com

59

The website represents the University of Missouri Tiger Scholarship Fund's Memorial Stadium Improvements Project, serving as a fundraising and informational splash page. It targets university supporters and athletics fans, providing project renderings, press releases, and donation forms. The site is built on the Sidearm Sports platform and hosted on AWS infrastructure, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and comScore. The technical implementation is solid with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and domain registration protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a linked privacy policy and cookie consent mechanism, though no terms of service or security policies are present. The WHOIS data shows an anomalous future creation date, likely a data error, but the domain is registered with a reputable registrar and uses AWS DNS. Overall, the site is professional, trustworthy, and serves its fundraising purpose effectively.

M

Mississippi State University

msubulldogclub.com

66

The Mississippi State Bulldog Club website serves as the official athletics fundraising and engagement platform for Mississippi State University. It provides comprehensive information about giving opportunities, donor recognition, membership benefits, and event details. The site targets alumni, donors, and sports fans, positioning itself as a key non-profit entity supporting university athletics. The business model focuses on philanthropic contributions and community involvement to enhance student-athlete experiences. Technically, the website leverages a specialized sports CMS (Sidearm Sports), modern JavaScript frameworks like Knockout.js and RequireJS, and is hosted on a robust CDN infrastructure (Amazon Cloudfront). It employs Google Analytics and Tag Manager for analytics and tracking, alongside a consent management platform ensuring privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses domain status protections, and integrates consent management. However, it lacks DNSSEC and some recommended HTTP security headers, which could be improved to enhance resilience against DNS and web-based attacks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in DNS security and HTTP headers would further strengthen its security posture.

U

University of Texas

texassports.com

63

The University of Texas Athletics official website serves as the authoritative digital platform for all Longhorns sports-related content, including news, schedules, rosters, ticket sales, and multimedia. It targets university sports fans, students, alumni, and media, positioning itself as a comprehensive resource for collegiate athletics. The site leverages a mature technical infrastructure built on the Sidearm Sports CMS platform, utilizing modern JavaScript libraries, AWS hosting, and multiple CDN services to deliver content efficiently. Analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager are extensively used to monitor user engagement and optimize marketing efforts. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements like enabling DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with a comprehensive privacy policy and consent management integration. Overall, the site demonstrates a professional, trustworthy, and user-friendly experience with strong branding and consistent content quality.

U

University of Oklahoma

soonersports.com

57

The University of Oklahoma's official athletics website serves as a comprehensive digital platform for collegiate sports fans, students, and alumni. It provides extensive coverage of sports news, schedules, rosters, ticketing, and multimedia content, positioning itself as the authoritative source for all things related to University of Oklahoma athletics. The site leverages modern web technologies including Vue.js and Nuxt.js frameworks, hosted on AWS infrastructure with Cloudfront CDN, ensuring fast and responsive user experiences across devices. Privacy and cookie policies are well established and GDPR compliant, reflecting a mature approach to user data protection. Security posture is strong with HTTPS enforced and domain registration locked, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical sophistication appropriate for a large educational institution's athletics department.

U

University of Georgia Athletics

georgiadogs.com

64

The GeorgiaDogs.com website serves as the official athletics platform for the University of Georgia Bulldogs, providing comprehensive sports news, schedules, rosters, ticketing, and merchandise services. It targets sports fans, students, alumni, and media, positioning itself as the authoritative source for university athletics information. The site leverages modern web technologies including Vue.js and the Sidearm Sports CMS, hosted on AWS infrastructure with CDN support for performance optimization. The design is professional, mobile-optimized, and accessible, offering a high-quality user experience with clear navigation and rich content. Security posture is solid with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site is trustworthy, technically mature, and business credible, supporting the university's athletics brand effectively.

P

Powster

powster.com

76

Powster is a well-established digital creative studio founded in 2006, specializing in innovative digital experiences for the entertainment industry. Their portfolio includes award-winning projects involving augmented reality, AI photobooths, and interactive campaigns for major clients such as Netflix, Universal Pictures, and BBC. The company demonstrates strong market positioning with a medium-sized operation based in the UK, delivering cutting-edge technology solutions and creative services. Technically, the website is modern, fast, and mobile-optimized, leveraging AWS hosting, WebGL, and advanced AR platforms like 8th Wall. Security posture is solid with HTTPS and reCAPTCHA integration, though explicit security headers and policies could be improved. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, Powster presents a professional, trustworthy digital presence with strong business credibility and technical maturity.

T

Tockify | Modern Attractive Website Calendars

tockify.com

71

Tockify.com is a technology-focused website offering modern, attractive website calendar solutions primarily targeting website owners and developers. The business operates on a SaaS model, providing embeddable and standalone calendar services optimized for mobile use. The domain is well-established since 2011, consistent with the business age, and hosted on reputable infrastructure including AWS and Cloudfront CDN. The website employs modern web technologies such as JavaScript and Bootstrap, with Google Tag Manager integrated for analytics. However, the site lacks visible privacy, cookie, and terms of service policies, which impacts privacy compliance scores. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No contact information or incident response details are found, limiting direct communication channels and security transparency. Overall, the website is professional and safe for general audiences but would benefit from enhanced privacy and security disclosures.

T

The Outline

theoutline.com

63

The Outline is a niche digital media publication focused on culture, power, and future-oriented topics. It operates under the Bustle Digital Group umbrella and targets a general adult audience interested in editorial content and social commentary. The website demonstrates a professional design with good content quality and consistent branding. Technically, it leverages modern web technologies including React, AWS hosting, and multiple CDNs for performance and scalability. Analytics and tracking are extensively used, primarily through Google Analytics, Parsely, and Quantcast, though privacy compliance mechanisms such as cookie consent are minimal. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. WHOIS data confirms domain legitimacy with a long registration history and no privacy protection, supporting trustworthiness. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.

B

Bleecker Street

breaking.movie

60

The website www.breaking.movie serves as the official digital platform for the movie 'Breaking,' distributed by Bleecker Street. It provides users with access to trailers, showtimes, ticket booking, and digital streaming options. The site targets moviegoers and fans, positioning itself as a professional and trustworthy source for information and access to the film. The business model revolves around media promotion and digital distribution, supported by a medium-sized studio presence in the USA. Technically, the site is built on a modern stack including JavaScript, Google Tag Manager, and Amazon Cloudfront CDN for hosting. It employs analytics and advertising technologies such as Google Analytics and DoubleClick, ensuring good performance, mobile optimization, and SEO practices. Accessibility features are present, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response information. Privacy compliance is basic but includes accessible privacy and terms of service pages, with GDPR compliance likely given the studio's professional standards. Overall, the website is secure, professional, and reliable with a strong business credibility score. The absence of WHOIS data is typical for media sites using privacy protection and does not detract from legitimacy. Strategic improvements include enhancing security headers, adding explicit cookie consent, and publishing security policies to further strengthen trust and compliance.

P

Proxy Protection LLC

cssdb.org

53

CSS Database is a specialized online resource providing detailed information about CSS features and their progression through standardization stages. It targets web developers and front-end engineers seeking up-to-date, authoritative data on CSS specifications, browser support, and polyfills. The site is well-structured, with comprehensive content linking to official documentation and community tools, positioning it as a niche but valuable technical reference in the web development ecosystem. Technically, the website employs modern web standards, uses Google Fonts and Cloudfront CDN for performance, and is hosted by DreamHost. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Security posture is moderate; while HTTPS is implied, no explicit security headers or policies are detected, and domain registration uses privacy protection, which is common for small technical sites. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is trustworthy and professional but could improve transparency and security practices.

L

Landgoedhotel Woodbrooke

woodbrookebarchem.nl

62

Landgoedhotel Woodbrooke is a medium-sized hospitality business located in the Netherlands, offering hotel accommodations, conference facilities, and event hosting services. The company positions itself as a leading meeting and event hotel in East Netherlands, with a focus on regional and organic products and outdoor activities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers and integrates with third-party booking and marketing platforms. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit security policies. Overall, the website is trustworthy and well-maintained, supporting the business's market position effectively.

The website europazagradane.hr is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and no meaningful user engagement features. The domain was registered recently in 2022 by a Bulgarian registrar and uses parking name servers, consistent with domain parking practices. Technically, the site uses basic HTML and JavaScript with third-party ad networks such as Google Adsense Domains CAF and Youseasky. There is no evidence of a CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers detected, and no privacy or cookie consent mechanisms implemented. No contact or business information is provided, limiting trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.

C

Civil Liberties Union for Europe

liberties.eu

11

The Civil Liberties Union for Europe operates as a non-profit human rights watchdog focused on protecting and promoting civil liberties across the European Union. The organization provides advocacy, campaigns, training, and research services to inform and mobilize citizens and civil society organizations. Their market position is strong within the EU human rights sector, supported by a network of NGOs and media presence. Technically, the website is built on a modern Ruby on Rails stack with CDN and security integrations such as reCAPTCHA and Stripe for donations. The site is well-optimized for performance, mobile, and accessibility. Security posture is robust with HTTPS, security headers, and CSRF protections, though explicit security policies and incident response details are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, with no signs of malicious activity or content blocking.

N

NEXT.cz

next.cz

56

NEXT.cz is a Czech company specializing in the manufacturing and installation of high-quality steel security doors tailored to individual customer requirements. Established since 1990, the company serves residential and commercial clients across the Czech Republic, offering certified products in security classes 3 and 4, including fire-resistant and sound-insulating doors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of security headers and published security policies suggests room for improvement. The lack of WHOIS data limits domain trust assessment but does not detract from the professional appearance and operational transparency of the business. Overall, NEXT.cz presents a credible and trustworthy business with a solid market position in the Czech security door manufacturing sector.

Creative Fabrica B.V. operates a leading e-commerce platform specializing in crafting resources including fonts, graphics, embroidery designs, and digital crafting tools. The company targets hobbyists, designers, and small businesses with a subscription-based model offering access to a vast library of premium digital assets. Their market position is strong within the crafting niche, supported by a professional and content-rich website. Technically, the site leverages modern frameworks such as Next.js and React, with CDN hosting via Amazon Cloudfront ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure form handling, although explicit security policies and vulnerability disclosures are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of content blocking or security challenges.

W

Walmart

walmart.com

62

Walmart.com is the official online retail platform of Walmart, a leading global retailer and e-commerce enterprise. The website offers a wide range of products including groceries, apparel, electronics, and home goods, supported by services such as in-store pickup, delivery, and the Walmart+ subscription. The site targets general consumers seeking everyday low prices and convenience. Technically, the site is built on modern frameworks like React and Next.js, leveraging multiple CDNs and third-party services for performance and marketing. Security posture is strong with HTTPS, comprehensive Content Security Policy, and bot protection. However, explicit privacy and cookie policies were not detected in the provided content, which is a compliance gap. WHOIS data is unavailable or blocked, but the website's branding and technical indicators confirm legitimacy. Overall, Walmart.com demonstrates a mature digital presence with excellent user experience and security, though privacy transparency could be improved.

T

The Scout Shop IE

thescoutshop.ie

61

The Scout Shop IE is an established Irish e-commerce retailer specializing in scouting uniforms, badges, camping gear, and outdoor equipment. Founded in 2009, it serves the scouting community in Ireland as an official supplier, offering a wide range of products tailored for scouts of all ages. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing tools such as Klaviyo for customer engagement. The site demonstrates good design quality, mobile optimization, and clear navigation, providing a professional user experience. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but the absence of DNSSEC and security headers indicates room for improvement. Overall, the website is trustworthy and safe for general audiences, with a solid business credibility score but moderate privacy compliance.

A

Autodistribution

autodistribution.fr

56

Autodistribution is a leading French retailer specializing in automotive spare parts, operating over 350 physical stores and offering online ordering with free in-store pickup. The website presents a professional and consistent brand image targeting vehicle owners and automotive professionals. The technical infrastructure leverages modern web technologies including Angular framework, cloud-based CDN delivery, and integrates standard marketing and consent management tools. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is safe, well-optimized for SEO and mobile, and compliant with GDPR requirements through clear privacy and cookie policies. The absence of WHOIS data slightly reduces trust but does not detract significantly from the site's legitimacy given its market presence and professional presentation.

C

Cash Matters

cashmatters.org

68

Cash Matters is a non-profit advocacy platform dedicated to supporting and promoting the use of cash within the global payment industry. The website serves as a hub for news, studies, events, and resources that emphasize the importance of cash as a payment method, highlighting its role in privacy, inclusion, and financial freedom. The organization targets consumers, industry stakeholders, and policymakers, positioning itself as a credible voice in the payments landscape. Technically, the website is built using modern web technologies including React and Next.js, with Apollo GraphQL for data management and Amazon Cloudfront for content delivery. The site is well-optimized for performance and mobile devices, featuring a professional design and clear navigation. Analytics are implemented via Google Analytics and Google Tag Manager, with appropriate privacy and cookie policies in place, indicating a good level of digital maturity. From a security perspective, the site enforces HTTPS and follows several best practices, though explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly set. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data due to privacy protection is typical for non-profit organizations and does not detract from the site's legitimacy. Overall, the security posture is solid but could be improved with additional headers and a vulnerability disclosure policy. The overall risk assessment is low, with the site demonstrating professionalism, compliance with privacy regulations, and a clear mission. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer contact information to improve trust and transparency.

M

Panenky Malunka

malunka.cz

43

Panenky Malunka is a small artisan retail business based in the Czech Republic specializing in handcrafted dolls made from natural materials. The website showcases various doll categories, including flower dolls, traditional dolls, and small figurines, with a focus on custom orders and personalized craftsmanship. The business targets consumers seeking unique, handcrafted gifts and collectibles. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and is hosted with Amazon Cloudfront CDN, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

E

eclair design s.r.o.

pagebuilder.cz

53

Pagebuilder.cz is a Czech-based technology company offering a proprietary content management system designed for easy website creation and management. The company positions itself as a small, customer-focused provider delivering cloud-hosted, modern CMS solutions that are simpler and more secure than traditional platforms like Wordpress or Joomla. The website is professionally designed, mobile-optimized, and integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel. However, it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is generally good with HTTPS and cloud hosting, but missing security headers and incident response information are areas for improvement. WHOIS data is unavailable, which reduces transparency but the site content and contact details support legitimacy.

E

Ekonews

ekonews.cz

61

Ekonews is a Czech Republic-based media platform focused on sustainability, business, and ESG topics. The website provides news, interviews, reports, and inspirational stories aimed at both businesses and households interested in sustainable practices. The platform positions itself as a niche media outlet with a professional and consistent brand presence. Technically, the site is built on WordPress using the Avada theme and incorporates modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and Matomo. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No WHOIS data was found, which reduces domain transparency and trustworthiness, though the website content and social media presence support legitimacy. Privacy and terms policies are not clearly linked, but a cookie consent mechanism is present. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

V

Virgin Wines

virginwines.co.uk

61

Virgin Wines is a prominent UK-based online retailer specializing in wines, spirits, and gift products, offering next working day delivery. The website demonstrates a professional and consistent brand presence, leveraging modern web technologies and cloud-based hosting to deliver a responsive and user-friendly experience. The integration of marketing and analytics tools such as Google Tag Manager, Trustpilot, and Adobe Marketing Cloud indicates a mature digital marketing strategy. Security-wise, the site enforces HTTPS and includes CSRF protection, though additional security headers could enhance its posture. Privacy compliance is partially addressed with a cookie consent mechanism, but explicit privacy and terms of service pages were not detected in the provided content. Overall, Virgin Wines presents a trustworthy and well-established e-commerce platform catering to mature audiences interested in alcoholic beverages.

R

Rhätische Bahn AG

rhb.ch

49

Rhätische Bahn AG is a well-established Swiss railway company specializing in scenic and regional rail travel in the Graubünden region. The company offers a variety of services including ticket sales, panoramic train experiences such as the Bernina and Glacier Express, and leisure travel options. Their website reflects a strong market position with comprehensive content targeting tourists and railway enthusiasts. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and leverages CDN services for performance. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, the website enforces HTTPS, includes important security headers, and uses consent management tools for privacy compliance. However, explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

R

Rehabilitační pomůcky

rehabilitacnipomucky.cz

57

Rehabilitacnipomucky.cz is a Czech e-commerce platform specializing in the sale of rehabilitation and orthopedic aids from well-known global brands. The website offers a broad product range including orthoses, bandages, compensatory aids, taping products, and exercise equipment, targeting individuals requiring rehabilitation products, healthcare providers, and sports professionals. The platform demonstrates a solid market position supported by a high volume of positive customer reviews and a comprehensive product offering. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent management. The absence of WHOIS data limits domain legitimacy verification, but the website's content and business signals indicate a legitimate operation. Overall, the site presents a professional and trustworthy e-commerce presence in the healthcare sector.

J

JPJ Forest, s.r.o.

jpjforest.cz

48

JPJ Forest, s.r.o. is a Czech company specializing in the import, manufacture, and sale of professional forestry, agricultural, and municipal machinery since 2009. The company offers a wide range of high-quality products including forestry trailers, hydraulic cranes, wood splitting machines, and hydraulic components. It serves a diverse clientele including private forest owners, agricultural businesses, and municipal service providers primarily in the Czech Republic and Slovakia. The website reflects a mature digital presence with comprehensive product information, customer references, and support services including financing and subsidies. Technically, the site is built on WordPress with modern web technologies and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security posture is solid with HTTPS enforced and GDPR-compliant privacy and cookie policies, although some security headers and explicit incident response information are missing. The absence of WHOIS data limits domain trust verification, but the overall business credibility and professional web presence suggest legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance.

L

Lípa Musica

lipamusica.cz

46

Lípa Musica is an established international music festival based in the Czech Republic, focusing on classical and contemporary music performances. The website presents a professional and content-rich platform showcasing event programs, news, and partner collaborations. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies and CDN services to deliver content efficiently. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a notable gap that impacts domain trustworthiness and should be investigated further. Overall, the site is well-positioned as a cultural event platform with good privacy compliance and user experience.

N

E-VÝSTAVY archiv NdB

ndbrno-evystavy.cz

57

The website www.ndbrno-evystavy.cz serves as a digital archival platform showcasing scenography of Shakespearean productions at the National Theatre Brno from 1918 to 1988. It targets cultural enthusiasts and researchers interested in theatrical history. The site offers digital exhibitions with scheduled dates and archival content, positioning itself as a niche cultural resource. Technically, the site is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery, and uses modern web technologies including HTML5, CSS3, and JavaScript. The site is mobile-optimized and provides a cookie consent mechanism, but lacks visible privacy and terms of service pages. Security posture is moderate with HTTPS enforced but missing security headers and no visible incident response or security policy information. WHOIS data is unavailable, likely due to privacy protection, which is common for small cultural sites but slightly reduces trust. Overall, the site is functional, professionally designed, and serves its cultural archival purpose effectively.

C

Centrum dopravního výzkumu, v. v. i.

cdvgis.cz

58

Centrum dopravního výzkumu, v. v. i. is a Czech public research institution specializing in transport research and infrastructure diagnostics under the Ministry of Transport. The organization offers a broad range of services including laboratory testing, transport safety analysis, smart city solutions, and professional training. The website reflects a well-structured and professional digital presence with clear navigation, comprehensive content, and active social media engagement. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook Pixel for tracking, and is hosted with CDN support for performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response disclosures are absent. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the official nature of the institution and consistent branding mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.