Security Directory

F

Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej

ippez.pl

55

The Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej is a Polish non-profit organization dedicated to enhancing patient rights awareness, promoting health education, and supporting patient organizations across Poland. The website reflects a mature presence with comprehensive content about their campaigns, projects, and educational initiatives. Their market position is that of a reputable healthcare advocacy entity with strong ties to patient communities and healthcare stakeholders. Technically, the website is built on WordPress using modern frameworks like Bootstrap and Divi Builder, with SEO and accessibility considerations in place. Security posture is good with HTTPS enforced and consent management implemented, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

F

Fundacja Onkocafe - Razem Lepiej

onkocafe.pl

58

Fundacja Onkocafe - Razem Lepiej is a Polish non-profit foundation established in 2013, focused on supporting patients with breast and prostate cancer through education, psychological support, and advocacy. The website is professionally designed using WordPress and integrates modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for form security. The foundation maintains an active social media presence across Facebook, Instagram, Twitter, YouTube, and LinkedIn, enhancing its outreach and engagement with its target audience. The domain registration data aligns well with the organization's profile, indicating legitimacy and stability. Technically, the website is well-structured with good mobile optimization and SEO practices. However, there is room for improvement in security posture, as no security headers were detected, and DNSSEC is not enabled for the domain. Privacy compliance is partial; while cookie consent is implemented, a dedicated privacy policy page is missing, which is a compliance gap. Contact information is clearly presented, including a phone number and contact page link, but no verified company email addresses were found in the HTML content. Overall, the security posture is moderate with good HTTPS implementation and use of security tools like reCAPTCHA. The absence of a vulnerability disclosure policy and security.txt file suggests limited incident response transparency. The website content is safe, targeted at a general audience interested in cancer patient support, with no adult or questionable content detected.

C

Cyklus Trails

cyklustrails.com

42

Cyklus Trails is a small, specialized travel agency offering self-guided and guided cycling tours primarily in the Czech Republic and neighboring countries. Established in 2002, it targets active travelers seeking authentic outdoor adventure experiences along well-known bike paths and cultural sites. The website is built on Drupal 7 and incorporates common web technologies such as jQuery, Google Analytics, and Facebook SDK for social integration and tracking. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance with GDPR and other privacy regulations. Security measures include the use of Google reCAPTCHA on contact forms, but the absence of security headers and use of outdated libraries present potential vulnerabilities. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy, although the website content and contact details appear genuine. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.

T

Tourism Office Pula

pulainfo.hr

43

Tourism Office Pula operates as the official tourism promotion entity for the city of Pula, Croatia, providing comprehensive information on local attractions, events, accommodation, and visitor services. The website is well-structured, multilingual, and designed to serve tourists and visitors seeking travel-related information. The business model is government-oriented, focusing on tourism promotion and visitor engagement. The site demonstrates a good level of digital maturity with modern WordPress infrastructure, SEO optimization, and accessibility features. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

F

Fokus Praha

fokus-praha.cz

51

Fokus Praha is a well-established non-profit organization based in the Czech Republic, dedicated to providing social and health support to individuals facing serious mental health challenges. The organization holds a strong market position as the largest NGO in the country focused on mental health. Their website reflects a professional and consistent brand image, with clear descriptions of their mission and services targeted at affected individuals and stakeholders. Technically, the site is built on WordPress using modern themes and plugins, including Astra and Yoast SEO, ensuring good SEO and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism, although explicit privacy and security policies are not present on the homepage. Overall, the site is accessible, trustworthy, and demonstrates a moderate to good security posture.

A

Awen Amenca z.s.

awenamenca.cz

55

Awen Amenca is a small non-profit organization based in the Czech Republic focused on reducing school segregation by empowering Roma parents, advocating for equal access to education, and organizing community leadership. Their website clearly communicates their mission, activities, and impact, targeting Roma communities, parents, schools, and municipalities. The organization operates campaigns to enroll Romani children in quality mainstream schools and supports legal advocacy against discrimination. Technically, the website is built on the Webnode CMS platform, uses AWS Cloudfront CDN for hosting, and integrates Google Analytics and ShareThis for tracking and social sharing. The site is mobile optimized with good design and navigation, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published policies. WHOIS data is unavailable, which limits domain trust assessment. No privacy or cookie policies are found, indicating compliance gaps. Overall, the website is functional and professional but could improve transparency and security compliance.

C

Chefstidningen

chefstidningen.se

46

Chefstidningen is a Swedish media company specializing in leadership and HR content targeted at academics and professionals. The website offers a mix of free and premium subscription content, including articles, newsletters, and a printed magazine. It is owned by Individ & Samhälle Sverige AB, affiliated with Akademikerförbundet SSR, indicating a strong institutional backing. The site is well-branded and consistent with its niche market positioning. Technically, the website is built on WordPress with WooCommerce for subscription management, leveraging modern web technologies such as Bootstrap and jQuery. It integrates multiple third-party analytics and advertising services, including Google Analytics, Google Tag Manager, and LinkedIn Insight. The site is mobile-optimized and SEO-friendly, though performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. There is no visible security policy or incident response information, and no cookie consent mechanism was detected, which may pose GDPR compliance risks. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Chefstidningen presents a professional and credible online presence with room for improvement in privacy compliance and security hardening to better protect user data and enhance trust.

P

Plantredo

lala-plants.com

65

Plantredo is a Swedish e-commerce retailer specializing in plants, seeds, and gardening accessories sourced from selected growers. The website is built on the Shopify platform and integrates multiple marketing and analytics tools such as Trustpilot, Klaviyo, Google Analytics, and Facebook Pixel, indicating a mature digital marketing approach. The site is professionally designed with good navigation and mobile optimization, targeting consumers interested in indoor and outdoor plants in Sweden. However, the WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy. The website lacks visible privacy and terms of service pages and does not provide direct contact information, which impacts trust and compliance perception. Security posture is generally good with HTTPS and standard Shopify protections, but security headers could be improved. Overall, the site appears functional and professional but would benefit from enhanced transparency and compliance documentation.

Corniche Watches is a niche luxury watch e-commerce brand founded in 2013, focusing on combining traditional watchmaking art with modern design inspired by the Côte d’Azur. The website presents a professional and consistent brand image, targeting fashion-conscious consumers and watch enthusiasts. The business model centers on direct online sales of watches, bracelets, and straps, supported by marketing efforts such as newsletters and social media engagement. Technically, the site is built on WordPress with WooCommerce, leveraging modern frameworks and third-party services for analytics, marketing, and customer support. The website is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain registration secured, though some security headers are missing and no explicit security policies are published. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and professionally managed, with room for improvement in security transparency and direct contact information availability.

W

Wolters Kluwer ČR, a. s.

rizeniskoly.cz

64

Řízení školy is a Czech educational platform operated by Wolters Kluwer ČR, a. s., providing comprehensive resources, legal guidance, and management tools for school directors and educational staff. The website offers subscription-based access to magazines, articles, calendars, and training events tailored to the Czech education sector. The platform is well-positioned as a trusted mentor for school administration, supported by a professional design and consistent branding. Technically, the site leverages modern web technologies including React and Cream CMS, with integrations for Google Tag Manager and consent management to ensure privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected. The absence of WHOIS domain registration data limits domain legitimacy verification, but the website's content and affiliation with Wolters Kluwer indicate a credible business. Overall, the site provides a safe, professional, and user-friendly experience for its target audience.

K

Květiny family flowers

kvetinyfamilyflowers.cz

58

Květiny Family Flowers is a Czech Republic-based small retail business specializing in flower sales and floral services including bouquets, wedding arrangements, plants, and funeral floral products. The company emphasizes a long-standing tradition of 44 years and offers delivery services with video recording for customer assurance. The website is built on the Shoptet e-commerce platform and integrates standard marketing and analytics tools such as Google Analytics and Facebook Pixel. The digital infrastructure is moderately modern with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers could be improved and the jQuery library is outdated. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site presents a professional and trustworthy online presence for a local flower retailer.

L

Livesport Company

livesport.eu

68

Livesport Company is a Czech technology firm specializing in delivering instant sports information to a global audience of approximately 100 million fans. The website reflects a mature digital presence with a modern technical infrastructure based on Nuxt.js and integration of Google Tag Manager for analytics and marketing. The company positions itself as a significant player in the sports information technology sector, targeting sports enthusiasts worldwide. The website design is professional and consistent, optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, there is room for improvement in security headers and transparency regarding privacy and incident response policies. Overall, the site is safe, trustworthy, and well-maintained, though it lacks explicit privacy and terms of service documentation.

S

Sport Schreiner Tischtennis

sport-schreiner-tischtennis.de

53

Sport Schreiner Tischtennis operates a specialized e-commerce platform focused on table tennis equipment and apparel, targeting German-speaking customers. The website offers a broad range of products including blades, rubbers, tables, clothing, and accessories, positioning itself as a niche retailer within the sports retail sector. The business model is primarily online retail with a focus on quality and trusted brands. Technically, the site is built on the Shopware platform, leveraging modern web technologies and integrating analytics tools such as Matomo and Google Tag Manager. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and privacy-conscious analytics configurations, but lacks explicit security headers and visible privacy or cookie policies. Contact information is limited to a service hotline phone number, with no email or physical address found in the analyzed content. Overall, the website is functional, professional, and trustworthy but could improve transparency and compliance aspects.

J

JAKO AG

jako.com

69

JAKO AG operates a professional e-commerce platform specializing in sportswear and equipment for men, women, and children, primarily targeting sports teams and individual consumers in Germany and surrounding regions. The website presents a well-structured, content-rich shopping experience with clear navigation and product categorization. The company leverages modern technologies such as Algolia for search, Google Tag Manager, and analytics tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent-based cookie management, though some security headers could be improved. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Despite the absence of WHOIS registration details, the site shows strong trust indicators including a high Trusted Shops rating and consistent branding. Overall, the site is professional, secure, and user-friendly, supporting JAKO's position as a reputable sportswear retailer.

F

Fer Projekt d.o.o.

fer-projekt.com

54

Fer Projekt d.o.o. is a Croatian-based technology company specializing in professional custom web design, development, SEO optimization, and digital solutions using their proprietary Fer+ CMS system. The company targets businesses primarily in Croatia, offering comprehensive digital services including hosting and branding. Their market position is supported by over 600 completed projects and positive client testimonials, reflecting a strong regional presence. Technically, the website employs a modern technology stack including jQuery, Google Analytics (Universal and GA4), Google Tag Manager, Microsoft Clarity, and Cookiebot for privacy compliance. The use of a proprietary CMS indicates a tailored approach to client needs. The site is mobile optimized and uses structured data to enhance SEO and user experience. From a security perspective, the site enforces HTTPS, integrates Google reCAPTCHA for form protection, and uses cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no dedicated security or incident response policies are publicly available. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.

S

Studio4Web

studio4web.com

52

Studio4Web is a Croatian-based web hosting provider established in 2004, offering a range of hosting services including shared hosting, VPS hosting, reseller hosting, and domain registration. The company targets businesses and individuals seeking reliable and fast web hosting solutions with 24/7 support and advanced security features. Their market position is supported by over 5000 customers and local server infrastructure in Zagreb. Technically, the website is built on a modern SvelteKit framework, uses FontAwesome for icons, and integrates popular analytics and tracking tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel. Cookie consent is managed via Cookiebot, indicating GDPR compliance efforts. Security posture is good with HTTPS enabled and SSL certificates used, but lacks published security policies and advanced security headers. Overall, the website is professional, well-structured, and trustworthy, though it would benefit from publishing privacy and terms of service documents and enhancing security transparency.

B

BGV Badische Versicherungen

bgv.de

72

BGV Badische Versicherungen is a regional German insurance provider specializing in family and private insurance solutions. The website targets families and private customers, offering tailored insurance products with benefits and discounts. The company positions itself as a trusted family insurer with a professional online presence. Technically, the website is built using JavaServer Faces with OmniFaces and PrimeFaces frameworks, integrating modern marketing and analytics tools such as Google Analytics, Google Ads, Facebook Pixel, and Cookiebot for consent management. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security-wise, the site enforces HTTPS and a strict Content-Security-Policy, with no detected vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, secure, and compliant with GDPR, but could improve transparency by publishing terms of service and security policies.

D

die neue welle

die-neue-welle.de

55

Die neue welle is a regional German radio station focused on delivering a diverse music mix spanning several decades. It targets listeners primarily in Baden-Württemberg and the Südpfalz region, offering broadcasts via traditional FM, digital DAB+, and online streaming platforms including apps and smart speakers. The website reflects a professional digital presence with good design and user experience, supporting the station's market position as a trusted regional media outlet. Technically, the site employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, hosted on 1&1 IONOS infrastructure. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the site is safe, trustworthy, and well-structured but would benefit from enhanced transparency and security practices.

B

Badische Neueste Nachrichten

bnn.de

61

Badische Neueste Nachrichten (BNN) is a well-established regional daily newspaper serving Karlsruhe and its surrounding regions in Germany. The website provides comprehensive local news coverage, subscription services, and digital ePaper access, positioning itself as a leading regional media outlet. The business model focuses on subscription revenue, classified ads, and digital content delivery, targeting regional readers interested in local news and events. The company operates under Badendruck GmbH, with a consistent and professional brand presence across its digital platforms. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Chartbeat analytics, alongside a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and DNS are managed via nodesecure.com servers, indicating professional infrastructure. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, though explicit security headers are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and comprehensive, supporting regulatory compliance. The absence of direct contact emails or phone numbers in the HTML suggests contact is managed through dedicated service portals. Overall, BNN.de demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic improvements could include enhanced security header implementation and publishing explicit incident response contacts to further strengthen trust and security posture.

H

Hobby media

doma.sk

58

Doma.sk is an online Slovak lifestyle and home living magazine operated by Hobby media. The website serves as a digital extension of the print magazine Pekné bývanie, targeting general audiences interested in home decoration, construction, gardening, and DIY inspiration. It holds a regional media position with a focus on quality content and advertising revenue through subscriptions and ad placements. Technically, the site is built on WordPress, leveraging modern JavaScript libraries such as Swiper.js and jQuery, and integrates Google Tag Manager and advanced ad networks for monetization. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses GDPR-compliant consent management, but lacks visible privacy policy and incident response contact details. Overall, the domain registration and business information align well, indicating a legitimate and trustworthy media outlet.

K

Specialisté na dmychadla – Kubíček VHS

kubicekvhs.cz

41

The website kubicekvhs.cz appears to be a small-scale, Czech Republic based site likely related to education or a personal business, given the domain age and hosting details. The site uses common web technologies such as Google Analytics, Google Tag Manager, and Font Awesome icons, hosted on websupport.cz servers. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which limits its compliance and trustworthiness. The content quality is basic with minimal SEO and accessibility features, indicating a modest digital maturity level. Security posture is weak due to missing security headers and lack of disclosed security policies or incident response mechanisms. Overall, the site is accessible with no blocking or WAF detected, but improvements in privacy compliance, security best practices, and business transparency are recommended to enhance trust and professionalism.

Dormer Pramet is a well-established manufacturer and supplier of high-performance cutting tools, serving primarily the manufacturing and machining industries. The company operates a professional and modern website that showcases its product offerings such as turning, milling, threading, and holemaking tools. The website targets industrial clients and professionals seeking advanced machining solutions. Technically, the site leverages modern web technologies including Angular framework, Google Tag Manager, and Microsoft Clarity for analytics, hosted likely on corporate infrastructure associated with Sandvik. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit privacy and terms documentation. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and credible online presence.

Z

Záhrada.sk

zahrada.sk

62

Záhrada.sk is a Slovak media platform dedicated to gardening enthusiasts, offering a rich collection of articles, a user forum, a marketplace, photoblogs, and a directory of garden professionals. The website targets Slovak gardeners and hobbyists, positioning itself as a community-driven resource with active user engagement. Technically, the site is built on WordPress with modern integrations such as Google Analytics, Facebook SDK, and consent management platforms to comply with GDPR. The site demonstrates good SEO practices and mobile optimization, although accessibility could be improved. Security posture is strong with HTTPS and security headers in place, but the absence of explicit privacy and terms of service pages is a notable compliance gap. Overall, the site is trustworthy, professional, and well-maintained, serving a medium-sized audience in the Slovak gardening niche.

4

4networks SK&CZ, s.r.o.

modrastrecha.cz

64

Modrastrecha.cz is a well-established online platform operated by 4networks SK&CZ, s.r.o., targeting individuals interested in housing, construction, renovation, household, and gardening topics primarily in the Czech Republic and Slovakia. The platform offers a rich ecosystem including forums, photo blogs, a marketplace, professional catalogs, and magazine content, positioning itself as a comprehensive community and content hub in its niche. The business model leverages advertising and professional service listings to generate revenue. Technically, the website employs modern web technologies such as StimulusJS, Turbo (Hotwire), and integrates multiple analytics and advertising services including Google Tag Manager, Gemius, and Plausible Analytics. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with asynchronous loading of scripts and a clean, professional design. From a security perspective, the site enforces HTTPS and uses a consent management platform for GDPR compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present, and there is no public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with clear privacy and cookie policies and user consent mechanisms. Overall, the site presents a low-risk profile with good business credibility and technical maturity. The main concern is the lack of WHOIS data, which reduces domain trustworthiness and should be investigated further. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility compliance.

L

Lightning Source LLC

ingramspark.com

64

IngramSpark, operated by Lightning Source LLC under the Ingram Content Group umbrella, is a leading online self-publishing platform offering print-on-demand, ebook publishing, global distribution, and book marketing services. The company targets authors and independent publishers seeking professional quality and wide reach. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it leverages HubSpot CMS, Bootstrap, and multiple marketing and analytics tools, ensuring a modern and responsive user experience. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security policies and incident response details are absent. WHOIS data is unavailable publicly, slightly reducing transparency but not detracting significantly from overall legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure info, and providing direct contact channels for security and support.

T

telc

telc.net

62

telc.net is a professional website dedicated to language examinations, certifications, and learning materials primarily targeting language learners, educational institutions, and professionals. The site positions itself as a reputable provider of language certificates across multiple proficiency levels (A1 to C2), serving a broad audience in Germany and internationally. The business model centers on delivering language testing and training services, supported by a medium-sized organizational structure. The website content is well-structured, professionally designed, and consistent with the brand identity, reflecting a strong market presence in the education sector. Technically, the website leverages TYPO3 CMS with Bootstrap and FontAwesome for frontend design, integrating advanced analytics and marketing tools such as Matomo, Google Analytics, Google Tag Manager, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly disclosed. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs essential security cookies like XSRF-TOKEN to prevent cross-site request forgery. Cookie consent mechanisms are robust and GDPR compliant. However, explicit security headers are not detected, and no published security or incident response policies are found, indicating areas for improvement. The WHOIS data is incomplete or privacy protected, which slightly reduces trust but is not uncommon for organizations in this sector. Overall, telc.net presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic enhancements in security transparency and contact information availability would further strengthen its risk profile and user trust.

3

300.codes

300.codes

66

300.codes is a Polish software house specializing in web and mobile development using technologies such as PHP, Vue, React, Python, WordPress, and Webflow. The company positions itself as a boutique-quality software delivery provider focused on achieving marketing and sales goals for its clients. The website is professionally designed with good SEO and mobile optimization, leveraging modern frameworks and tools including Astro, Yoast SEO, Google Tag Manager, and Cookiebot for consent management. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its business domain.

W

wapteka.pl

wapteka.pl

66

Wapteka.pl operates as an online pharmacy based in Poland, offering a broad range of healthcare products including supplements, vitamins, cosmetics, over-the-counter medicines, dermocosmetics, and medical equipment. The website targets a general audience including adults and children, positioning itself as a convenient e-commerce platform for pharmaceutical and wellness products. The business model focuses on retail sales through an online storefront, leveraging digital marketing and social media to reach customers. The company maintains a consistent brand presence and provides clear contact information, enhancing customer trust.

N

Nutrimed Promedica

nutrimed.pl

72

Nutrimed Promedica operates as a specialized healthcare provider focusing on home-based nutritional care for patients unable to feed orally, primarily due to neurological, oncological, or other medical conditions. Established in 2007, the company serves a broad patient base across Poland, leveraging NFZ funding to deliver free enteral nutrition services. The website reflects a mature digital presence with clear service descriptions, patient support resources, and accessible contact options. Technically, the site is built on WordPress with modern plugins and accessibility features, ensuring good performance and SEO compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the domain registration and hosting align with the business profile, supporting legitimacy and trustworthiness.

O

Owasco Careers

owascocareers.ca

51

Owasco Careers operates a professional, family-owned automotive dealership group in Canada, focusing on recruitment and career opportunities within their dealerships. The website presents a clear business description emphasizing culture and growth, targeting job seekers interested in automotive retail careers. The technical infrastructure is based on WordPress with modern analytics and monitoring tools such as Google Analytics, Microsoft Clarity, and New Relic, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with reCAPTCHA for form security, reflecting a good security posture. However, the absence of publicly available WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and privacy compliance. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security headers to improve trust and compliance.

O

Owasco RV Rentals

owascorvrentals.com

59

Owasco RV Rentals is a small Canadian business specializing in recreational vehicle rentals, including vans, motorhomes, and trailers. The company targets both Canadian and international customers, offering various rental options, specials, and loyalty programs. The website is professionally designed with clear navigation and comprehensive service information, supporting a positive user experience. Technically, the site uses a combination of legacy and modern web technologies, including jQuery, Bootstrap, and multiple analytics and tag management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. Overall, the website presents a credible business front with room for security and transparency improvements.

A

ARKANCE USA

caddmicrosystems.com

10

ARKANCE USA is a technology solutions and consulting company specializing in the Architecture, Engineering, and Construction (AEC) industry. They provide a comprehensive suite of services including software solutions (notably Autodesk, Bluebeam, and Egnyte), training, consulting, BIM services, and support contracts. Positioned as a trusted Autodesk Platinum Partner, ARKANCE serves a broad audience including architects, engineers, contractors, government agencies, and facility managers. Their market presence is supported by detailed customer success stories, active event participation, and a strong digital footprint. Technically, the website leverages modern web technologies such as React and Next.js, integrates marketing and analytics tools like Marketo, Google Tag Manager, and LinkedIn Insight, and is hosted with a CMS backend likely powered by Strapi. The site is well-optimized for mobile and SEO, with good accessibility features and fast performance. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in cookie consent mechanisms and publishing formal security policies. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of business. No security challenges or WAF blocks were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, trustworthy, and mature digital presence aligned with its business objectives. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

P

PLAION

primematter.gg

10

PLAION Support is a dedicated customer support portal for PLAION's gaming and digital entertainment products. The website provides assistance for games and services, targeting gamers and customers seeking help with their PLAION accounts and products. The portal is well-branded and consistent with PLAION's corporate identity, offering a search function and contact options primarily through support forms. The site leverages modern web technologies including Nuxt.js, Tailwind CSS, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure.

F

Frank Bold

budfrankbold.cz

10

Frank Bold is a purpose-driven organization based in the Czech Republic, operating for over 12 years with a focus on legal services, consulting, and public benefit projects. The company is structured into multiple divisions including legal advisory, consulting, societal projects, core organizational functions, and student internships. Their market position is solid within the Czech and broader European context, targeting professionals and students interested in impactful legal and consulting careers. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on the Webflow platform, utilizing modern analytics tools such as Google Analytics, Matomo, Microsoft Clarity, and Facebook Pixel, all integrated with user consent mechanisms. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, there is room for improvement in security headers and formal security policies. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration trust insights, but the professional presentation and structured data support legitimacy. Overall, Frank Bold's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance their security posture and trustworthiness further.

F

Frank Bold Advisory

frankboldadvisory.cz

10

Frank Bold Advisory is a professional consulting firm specializing in ESG reporting, energy management, and strategic communication with a focus on sustainability and compliance with European standards such as CSRD and EU taxonomy. The company positions itself as a leader in ESG advisory with direct involvement in European ESG standard development and a decade of experience. Their services target businesses seeking to improve sustainability reporting and energy efficiency. Technically, the website is built on modern platforms like Webflow, uses multiple analytics tools including Google Analytics and Matomo, and implements cookie consent mechanisms, reflecting a mature digital presence. Security posture is generally good with HTTPS and consent management, but lacks visible security headers and published security policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the professional content and branding suggest a legitimate business. Overall, the website is well-designed, content-rich, and trustworthy, with recommendations to enhance security transparency and verify domain registration details.

C

Cambra de Comerç de Terrassa

cambraterrassa.org

10

Cambra de Comerç de Terrassa is a regional chamber of commerce focused on supporting economic development and business growth in the Terrassa region of Spain. The website presents a professional and consistent brand image, offering business support services and entrepreneurial development initiatives. The target audience primarily includes local businesses and entrepreneurs seeking economic development assistance. The business model revolves around providing services and support to foster regional economic growth. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by WooCommerce for e-commerce capabilities. It integrates several analytics and marketing tools including Matomo, Google Tag Manager, Hotjar, and LinkedIn Insight. The site is hosted by Entorno Digital, S.A., with a domain registered since 2005, indicating a mature and stable online presence. Performance and mobile optimization are good, with basic accessibility and SEO optimizations in place. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The main risks relate to the absence of explicit security policies and limited contact information. Strategic recommendations include enhancing security headers, publishing a security and privacy policy, and providing clear contact channels for security incidents to improve trust and compliance.

C

Cambra de Comerç de Barcelona

cambrabcn.org

10

Cambra de Comerç de Barcelona is a well-established chamber of commerce serving the business community in Barcelona and Catalonia. Founded in 2001, it operates as a non-profit organization providing business support, training, networking, and advocacy services. The website reflects a professional and consistent brand image targeting local businesses and entrepreneurs. The organization maintains a strong market position as a key regional business entity. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by Nominalia Internet SL, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security transparency and DNS security. The domain registration data supports the legitimacy and long-standing presence of the organization.

B

Barberco

barberco.cz

10

Barberco.cz is a Czech-based e-commerce retailer specializing in men's grooming products, barber supplies, and professional hairdressing equipment. Established in 2017, the company targets gentlemen, barbers, and hairdressers primarily in the Czech and Slovak markets. The website offers a broad product catalog with detailed categories, a loyalty program, and a wholesale partner program for professionals. The business positions itself as a trusted supplier with a focus on quality and professional collaboration.

D

Demo verze stránek

zelenlanger.cz

10

Zahradnické služby Langer is a small family-owned gardening and landscaping service provider based in the Czech Republic, operating since 1997. The company offers a broad range of services including garden creation, park revitalization, maintenance, green roofs, and natural ponds. The website is professionally designed using WordPress and Elementor, featuring clear navigation and localized content in Czech. Technical infrastructure includes modern web technologies and integration with Google Analytics and Tag Manager for visitor tracking. Privacy compliance is well addressed with GDPR-compliant cookie consent and privacy policies. Security posture is adequate with HTTPS enabled and basic security practices, though additional security headers and policies could enhance protection. No WHOIS data is publicly available, likely due to privacy protection, which is common for small businesses. Overall, the website presents a trustworthy and professional digital presence for a regional gardening service business.

S

Saxana Group

saxanagroup.cz

8

Saxana Group is a Czech-based company specializing in cleaning services and building management, positioning itself as one of the largest providers in its region. The website content is professionally presented in Czech, targeting both businesses and households. The company offers comprehensive cleaning and facility management services, reflecting a medium-sized enterprise with a consistent brand presence. Technically, the website is built on the ANT CMS platform and incorporates common analytics tools such as Google Analytics and Seznam.cz tracking. While the site is mobile-optimized and well-structured, it lacks visible privacy and cookie policies, which impacts its compliance posture. Security-wise, the absence of security headers and detailed WHOIS data reduces the overall security confidence, although no immediate vulnerabilities are evident from the provided data. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security hardening.

P

Pneu Drnec

pneudrnec.cz

7

Pneu Drnec is a local automotive service provider specializing in tire and auto repair services in Plzeň, Czech Republic. The business focuses on servicing personal vehicle tires, motorcycle tires, off-road tires, and light truck tires, with a specialization in high-speed large-dimension tires. The website presents a professional and consistent brand image targeting vehicle owners in the local area. However, the absence of WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and compliance. Technically, the site uses modern JavaScript and CSS technologies, integrates Facebook SDK and Google Tag Manager, but lacks proper analytics setup and security headers. The security posture is moderate but could be improved with better SSL configuration and security best practices. Overall, the site is functional and informative but requires enhancements in privacy compliance and security to improve trustworthiness.

S

Spoutible

spoutible.com

7

Spoutible.com appears to be a relatively new online platform, likely a social media or communication service given the site title and some UI hints. The domain was registered in late 2022 and is hosted behind Cloudflare DNS services. The website uses common Google services such as Google Tag Manager, Google Adsense, and Google reCAPTCHA, indicating some level of digital maturity. However, the site lacks critical compliance documents such as privacy policies, cookie policies, and terms of service, which are essential for user trust and regulatory compliance. The absence of contact information and security headers further reduces the security posture and business credibility. Overall, the site presents a basic web presence with moderate technical implementation but requires significant improvements in privacy, security, and business transparency to enhance trustworthiness and compliance.

S

Skybound Game Studios, Inc.

invinciblevs.com

10

Invincible VS is a newly launched video game project by Skybound Game Studios, Inc., focusing on a brutal 3v3 tag fighting game set in the Invincible universe. The website serves as a promotional and community engagement platform, offering detailed character profiles, game highlights, and closed alpha registration. The business targets gamers and fans of the Invincible franchise, positioning itself within the niche superhero fighting game market. Technically, the site is built on WordPress with modern plugins and integrates Cloudflare DNS and Google Tag Manager for performance and analytics. Security posture is solid with HTTPS, CAPTCHA on forms, and an age gate for mature content, although some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and mature-content appropriate, with a domain registration consistent with the business timeline.

B

berry2b

berry2b.com

10

berry2b is an educational technology platform focused on providing students with digital tools to manage their school life, including schedules, homework, and grades, while also preparing them for career entry. The platform also offers recruiting tools for companies to find apprentices and trainees, positioning itself as a bridge between education and employment in Germany. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics technologies, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, though improvements are needed in security headers and visible privacy policies. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the main domain. Overall, berry2b presents a credible and functional online presence with room for enhanced transparency and security practices.

S

Saint-Gobain España

saint-gobain.es

55

Saint-Gobain España operates as the Spanish branch of the global Saint-Gobain group, specializing in manufacturing and distributing construction materials and sustainable building solutions. The website reflects a mature enterprise with a strong focus on sustainability, innovation, and market leadership in Spain. The digital presence is professional, well-structured, and optimized for multiple devices, targeting construction professionals and stakeholders interested in sustainable construction. Technically, the website is built on Drupal 10, leveraging modern analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site employs HTTPS and cookie consent mechanisms, indicating compliance with privacy regulations like GDPR. However, explicit security headers and a published security policy are absent, representing an area for improvement. Security posture is solid with no evident vulnerabilities or exposed sensitive data, but the lack of incident response contact information and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. Overall, the website is trustworthy, with strong brand consistency and multiple trust signals including official social media accounts and comprehensive privacy policies. Recommendations include adding security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

The website www.british-gypsum.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification before granting access. This challenge page blocks direct content retrieval, resulting in no visible business information, metadata, or contact details. The WHOIS lookup for the domain returned no registration data, indicating either the domain is unregistered, privacy protected, or there is an issue with the WHOIS server response. The site uses Google Tag Manager and OneTrust cookie consent scripts, suggesting some level of digital maturity in tracking and privacy management, but no further technical or business details are accessible. The security posture cannot be fully assessed due to the lack of accessible content and headers. Overall, the site presents a low trust profile due to the absence of public WHOIS data and blocked content.

The website www.fr.weber is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page, which blocks direct access to the site's content. This prevents extraction of meaningful business, contact, or policy information. The site uses Google Tag Manager for analytics and a cookie consent mechanism via OneTrust, indicating some level of privacy compliance. WHOIS data is unavailable due to a malformed request or privacy protection, limiting domain trust assessment. The presence of multiple related domains linked to the Saint-Gobain group suggests the site is part of a larger corporate ecosystem. However, without access to the actual site content, a full evaluation of business operations, security posture, and compliance cannot be performed.

Saint-Gobain is a global leader in manufacturing building materials and construction solutions, with a local presence in Finland represented by the www.saint-gobain.fi domain. The website is currently inaccessible due to a Cloudflare security challenge, preventing direct content analysis. The site employs modern analytics tools such as Google Tag Manager and GA4, and uses OneTrust for cookie consent management, indicating a baseline level of privacy compliance. However, no privacy policy, terms of service, or contact information is accessible, limiting the ability to assess compliance and user engagement fully. The domain is protected by privacy services but aligns with the Saint-Gobain brand, suggesting legitimacy.

The website www.saint-gobain.my represents Saint-Gobain Malaysia Sdn. Bhd., a subsidiary of the global Saint-Gobain group specializing in building materials and construction solutions. The domain registration data confirms the legitimacy and consistency of the business presence in Malaysia since 2018. However, the website content is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge, which blocks direct content access and prevents detailed content and policy analysis. The site employs advanced analytics tools including multiple Google Tag Manager containers and Google Analytics 4, indicating a mature digital marketing infrastructure. Due to the WAF blocking, no privacy, cookie, or terms of service policies are visible, nor is any contact information or business description accessible. The security posture is difficult to assess fully, but the presence of Cloudflare WAF suggests a proactive security approach. Overall, the site appears to be a legitimate corporate presence but requires content accessibility for full evaluation.

The website www.quartzolit.weber currently presents a Cloudflare security challenge page, blocking direct access to its content. This domain appears to be part of a larger corporate ecosystem related to Saint-Gobain and its Weber brand, as indicated by multiple related domains in the analytics mapping. Due to the WAF challenge, no direct business content, contact information, or policies are accessible, limiting the ability to assess the company's market position or services in detail. Technically, the site uses Cloudflare for protection and Google Tag Manager for analytics, indicating a modern approach to traffic management and data collection. However, the lack of visible content and policies reduces transparency and trustworthiness. Security-wise, the presence of Cloudflare's Turnstile captcha is a positive mitigation against automated threats, but the absence of visible security headers or SSL details in the provided data prevents a full security posture evaluation. Overall, the site is protected but inaccessible for detailed analysis, resulting in a low AI score and recommendations to improve transparency and policy disclosures once access is granted.