Security Directory

U

Ultimate Fighting Championship

ufc.com

67

The Ultimate Fighting Championship (UFC) operates a comprehensive and professionally designed website serving as the official hub for MMA fans worldwide. The site offers extensive content including event details, athlete profiles, rankings, news, video highlights, and merchandise sales. It targets combat sports enthusiasts and leverages a strong brand presence with consistent and high-quality media content. The business model centers on media content distribution, event promotion, and e-commerce related to UFC-branded products and services. Technically, the website is built on Drupal 10 CMS and integrates modern technologies such as Google Tag Manager, YouTube API, Facebook SDK, and AMP story player, indicating a mature digital infrastructure. The site is mobile optimized, accessible, and SEO-friendly, providing a good user experience across devices. From a security perspective, the site enforces HTTPS and uses asynchronous loading of scripts to enhance performance and security. However, explicit security headers and privacy policies are not clearly visible in the provided content, suggesting room for improvement in transparency and compliance. The absence of WHOIS data limits domain registration trust analysis, but the strong brand and professional presentation mitigate concerns. Overall, the UFC website demonstrates a high level of professionalism and digital maturity with moderate security posture and basic privacy compliance. Strategic enhancements in privacy disclosures, security headers, and incident response information would further strengthen trust and compliance.

H

Hyperfocus Oy

mikseri.net

64

Mikseri.net is a well-established Finnish music community platform operated by Hyperfocus Oy, founded in 2000. It serves as a hub for Finnish artists and fans to share, listen to, and download free MP3 music, as well as participate in forums and showcases. The platform leverages advertising and community engagement as its primary business model, positioning itself as the largest Finnish music community. Technically, the site uses a custom CMS with a tech stack including jQuery, Google Analytics, Google Tag Manager, Facebook SDK, and multiple advertising networks. While the site is functional and moderately optimized for mobile, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS and domain protection statuses, but lacks DNSSEC and security headers. Privacy compliance is strong with a consent management platform and clear privacy and cookie policies. Overall, the site is trustworthy and professional, though it could benefit from enhanced security policies and incident response transparency.

M

Meteli

meteli.net

54

Meteli.net is a Finnish online platform specializing in listing concerts and music events across Finland. It provides users with comprehensive event information, including dates, locations, genres, and artists, along with ticketing links. The site targets Finnish music fans and concert-goers, positioning itself as a key media player in the Finnish live music event space. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Prebid.js for advertising, and Google Maps API for location services. It is hosted on AWS Cloudfront CDN, ensuring reasonable performance and availability. The site is mobile-optimized and features good navigation and SEO practices. Security-wise, the site enforces HTTPS and uses several security best practices but lacks some HTTP security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. However, no explicit security policy or incident response information is publicly available. WHOIS data is unavailable or protected, which slightly reduces transparency but is common for media websites. Overall, Meteli.net presents a professional, trustworthy, and user-friendly platform for Finnish concert information.

F

FC Slovan Liberec

slovanliberec.cz

45

FC Slovan Liberec operates as a professional football club based in the Czech Republic, providing comprehensive information about its teams, matches, fan engagement, and merchandising through its official website. The site targets football fans and local community members, offering news, schedules, player statistics, and multimedia content. The club holds a notable position in Czech football with historical league and cup victories, supported by multiple commercial partners and sponsors. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and social media connectivity. The site is mobile-optimized and features a cookie consent mechanism indicating awareness of privacy regulations. However, the absence of a visible privacy policy and WHOIS data limits full trust verification. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response contacts. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

R

Rohnson

rohnson.cz

57

Rohnson.cz is a Czech e-commerce retailer specializing in household appliances designed to simplify everyday life. The company positions itself as a direct importer offering reliable products at competitive prices, supported by fast delivery and expert customer service. The website is professionally designed, with clear navigation and a focus on user experience for Czech-speaking consumers. Technically, the site uses the Shoptet CMS platform, integrates modern marketing and analytics tools such as Google Analytics and Facebook SDK, and enforces HTTPS with appropriate security headers. Privacy compliance is addressed through a comprehensive privacy policy and cookie consent mechanism, reflecting GDPR awareness. However, the absence of WHOIS data due to privacy protection limits transparency about domain ownership. Security posture is solid but could be improved by publishing explicit security policies and incident response contacts. Overall, the site is trustworthy and well-positioned in its market segment.

T

Tehden Oy

avoinna24.fi

65

Avoinna24 is a Finnish online platform operated by Tehden Oy, established in 2011, that facilitates searching and booking appointments for various services such as haircuts, wellness treatments, and fitness activities. The platform targets Finnish consumers seeking convenient online booking options for local service providers. The website is built using modern web technologies including Angular and integrates analytics and marketing tools like Google Analytics and Facebook SDK. Privacy and cookie policies are clearly presented, indicating compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities in the publicly accessible content. Overall, the platform demonstrates a mature digital presence suitable for its business model.

D

DLC Websites

pointlesssites.com

59

PointlessSites.com is a niche entertainment portal that curates and lists amusing, pointless, and family-friendly websites for users seeking light-hearted fun. The site has been operating since at least 1999 according to meta data, offering daily new site recommendations and a voting system to engage users. The business model appears to rely on advertising revenue, primarily through Google Adsense, and partnerships with other niche sites. Technically, the site uses standard HTML, CSS, and JavaScript with integrations for social media and analytics. While the site is accessible and functional, it lacks modern security headers and a clear privacy policy, which impacts its compliance posture. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the site provides a moderate user experience with basic mobile optimization and SEO.

C

CombinationLock.co.uk

combinationlock.co.uk

57

CombinationLock.co.uk is a niche educational website offering free math and logic games centered around a combination lock puzzle theme. The site targets a general audience interested in number puzzles and logic challenges, providing practice and multiplayer modes along with leaderboards. The business model relies on advertising revenue, integrating multiple ad networks and tracking vendors. Technically, the site uses standard web technologies including JavaScript, Google Fonts, and social media SDKs, with a basic but functional design and moderate performance. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and no visible incident response or vulnerability disclosure information. Privacy compliance is supported by an embedded consent management platform, though no standalone privacy policy or terms of service pages are found. WHOIS data is unavailable due to domain registration errors, which raises some legitimacy concerns, but the site content and longevity since 1999 suggest a legitimate operation. Overall, the site is functional and safe but would benefit from improved transparency, security hardening, and clearer business contact information.

K

Kisko Labs

wodconnect.com

62

WODconnect is a specialized SaaS platform developed by Kisko Labs that provides workout tracking, coaching, and gym management solutions primarily targeting athletes, coaches, and gym owners involved in functional training and CrossFit. The platform offers a comprehensive set of features including workout logging, coaching tools, gym billing, booking, and training programs accessible via web and mobile apps. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience. Technically, it leverages Ruby on Rails, integrates Google Fonts, Facebook SDK, Google reCAPTCHA, and tracking tools such as Google Tag Manager and Facebook Pixel, indicating a modern and mature digital infrastructure. Security posture is solid with HTTPS, CSRF protection, and CAPTCHA on forms, though it lacks some advanced security headers and published security policies. Privacy compliance is partially met with a clear privacy policy and terms of service, but no cookie consent mechanism is present. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the active and professional web presence. Overall, WODconnect presents a credible and functional platform with room for improvement in transparency and security disclosures.

R

RockTape Suomi

rocktape.fi

52

RockTape Suomi operates as a specialized healthcare business focused on providing kinesiology tapes, related therapeutic products, and professional training courses primarily targeting healthcare professionals in Finland. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is supported by consistent branding and relevant content but lacks explicit contact details and certifications. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

S

Silike Keramika s.r.o.

samotky.cz

58

šamotky.cz is a Czech e-commerce website specializing in the sale of high-quality refractory chamotte products such as bricks, plates, and wedges for stoves, fireplaces, and ovens. The business operates as a direct manufacturer, Silike Keramika s.r.o., with production facilities located in Děčín, Czech Republic. The website targets both professional and home users seeking durable and heat-resistant materials. The platform is built on the Shoptet e-commerce system and integrates common web technologies including jQuery, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. The site demonstrates compliance with GDPR through a comprehensive privacy policy and cookie consent mechanism.

DENAS COLOR a.s. is a Czech Republic based manufacturer specializing in water-based coatings, paints, varnishes, adhesives, and fillers. The company serves both industrial and retail customers, offering products and surface treatment services including an industrial coating facility (lakovna). The website is professionally designed using Joomla CMS with Bootstrap and jQuery, providing multi-language support and clear navigation. Contact information is comprehensive, including multiple phone numbers, emails, and physical addresses, enhancing business credibility. However, the absence of WHOIS data limits domain trust verification. Cookie consent is implemented via Cookiebot, but no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information.

K

Kankaanpään kaupunki

kankaanpaa.fi

67

Kankaanpään kaupunki operates as the official municipal government website for the city of Kankaanpää, Finland. It provides comprehensive information and services related to city administration, social and health services, education, culture, environment, and public participation. The website targets residents, visitors, and stakeholders interested in municipal services and local governance. As a public sector entity, it maintains a professional and consistent online presence with clear navigation and relevant content.

W

Webovky123, s.r.o.

webovky123.cz

38

Webovky123, s.r.o. is a Czech Republic-based small technology company specializing in custom web development and internet marketing services. The company offers bespoke websites, e-shops, and digital marketing solutions including SEO and PPC management, targeting businesses seeking professional online presence. Their website demonstrates a professional design with clear navigation and client testimonials, indicating a solid market position within their niche. Technically, the site uses a proprietary CMS built on the Nette Framework, enhanced with jQuery and standard tracking tools like Google Analytics and Facebook SDK. While the site is accessible and functional, it lacks visible privacy and cookie policies, which impacts compliance posture. Security-wise, the site uses HTTPS and avoids exposed sensitive data but lacks advanced security headers and formal incident response contacts. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, which should be addressed to improve overall credibility.

P

People for the Ethical Treatment of Animals (PETA)

peta.org.uk

65

People for the Ethical Treatment of Animals (PETA) UK is a well-established non-profit organization dedicated to animal rights advocacy and protection in the United Kingdom. The website serves as a comprehensive platform for news, campaigns, activist resources, and investigations related to ethical treatment of animals. The organization targets animal rights supporters and the general public, providing educational content and calls to action. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence.

S

SataKylät ry

satakylat.fi

45

SataKylät ry is a Finnish regional non-profit association founded in 1999, dedicated to supporting and developing rural communities in the Satakunta region. The organization acts as an advocate and facilitator for local village and resident associations, promoting self-sufficiency and vitality in the area. Their key activities include organizing the annual 'Vuoden Kylä' (Village of the Year) competition, coordinating the 'Avoimet Kylät' (Open Villages) day, and providing information and support to local communities. The website reflects an active and engaged organization with regular news updates, social media presence, and community outreach.

R

Rapumylly

rapumylly.fi

43

Rapumylly is a small Finnish company specializing in the sale of domestic signal crayfish, primarily sourced from the clean waters of Säkylä Pyhäjärvi. The company offers cooked and live crayfish products along with related traditional accompaniments such as crayfish beer. The website serves as a digital storefront and information hub for customers interested in purchasing these niche seafood products. The business has a strong local market position with a clear focus on quality and tradition. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MetaSlider, integrating social media and analytics tools like Facebook SDK and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No vulnerability disclosures or incident response information are provided, indicating a potential gap in security transparency. No signs of WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, Rapumylly's website is a trustworthy and professional representation of a niche local business but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

R

Registrants of tuiskula.info (1API GmbH registrar)

tuiskula.info

46

Tuiskulan kylä website serves as a community and cultural hub for the village of Tuiskula in Finland, promoting local events such as summer theater, concerts, and village activities. The site provides historical context, community contact information, and promotes local book sales related to the village's heritage. The business model is community-focused, relying on volunteer efforts and local engagement. Technically, the website is built on WordPress with common plugins like Yoast SEO and Jetpack, and uses Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and trustworthy with a long history. Recommendations include adding privacy and cookie policies, enabling DNSSEC, and improving security headers to enhance trust and compliance.

L

Lundan kyläyhdistys r.y.

lunda.fi

46

Lundan kyläyhdistys r.y. is a Finnish non-profit village association established in 1983, serving 11 villages in the Masku region. The organization focuses on community engagement, local events, and maintaining village vitality. Their website, built on WordPress, provides information about the association, events, and contact details, targeting local residents. The site integrates social media via Facebook and uses common plugins for SEO and contact forms. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and privacy compliance pages. Overall, the domain registration is consistent with the organization's identity, indicating legitimacy and stability.

Häme Events is a regional event listing platform operated by Hämeen Maakuntaliitto, a Finnish regional government entity. The website provides a searchable calendar of events in the Kanta-Häme region and offers an open API for integrating event data into other services. The platform targets residents and visitors interested in local events, supporting community engagement and regional promotion. The business model centers on providing free access to event information and facilitating event submissions. Technically, the website uses a custom-built platform with modern JavaScript libraries such as jQuery, Semantic UI, and various UI enhancement plugins. It integrates multiple analytics services including Google Analytics, Matomo, and Facebook SDK. Hosting appears to be on Amazon AWS infrastructure, indicated by the AWS nameservers. The site is mobile optimized and has basic SEO and accessibility features, though content quality is minimal and mostly functional. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, and does not provide privacy or cookie policies, which impacts GDPR compliance. No contact emails or phone numbers are visible on the site, limiting user support and incident response transparency. The WHOIS data confirms the domain is registered to the regional government organization, with consistent registration details and no privacy protection, supporting legitimacy. Overall, the website is a functional regional event platform with moderate technical maturity and a solid legitimacy profile. Security and privacy compliance can be improved by adding policies, security headers, and contact information. Enhancing content richness and user engagement features would also increase value and trust.

T

Tutmonda Esperantista Vegetarana Asocio

vegetarismo.info

55

The Tutmonda Esperantista Vegetarana Asocio (TEVA) is a small, international non-profit organization dedicated to promoting Esperanto among vegetarians and vegetarianism among Esperanto speakers. Founded in 1908 and currently hosted on WordPress.com, the website serves as an informational and community hub, offering resources such as bulletins, event information, and membership details. The technical infrastructure leverages WordPress.com hosting, Jetpack plugins, and integrates common advertising and analytics tools like Amazon Ads and Google Analytics. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy compliance is basic, with no explicit privacy or cookie policy pages found, but a cookie consent mechanism is present. Contact information is available primarily via email and social media channels. Overall, the website is professional, content-rich, and trustworthy, serving a niche community effectively.

H

HMP - Mestska policie hl. m. Prahy

mppraha.info

42

The website mppraha.info is the official online presence of the Municipal Police of Prague, Czech Republic. It serves as an information portal for residents and visitors, providing details about police units, contact information, news updates, recruitment, and public safety services. The site is well-branded with official logos and consistent municipal police identity, targeting a general audience interested in public safety and municipal services in Prague. The business model is government public service with a large organizational size and established presence since 2014. Technically, the site is built on Joomla CMS with modern web technologies including jQuery, Leaflet for interactive maps, and Revolution Slider for visual content. It integrates social media platforms such as Facebook, Twitter, YouTube, and Instagram, and uses Google Analytics for visitor tracking. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Cookie consent is implemented, indicating some level of privacy compliance, but no explicit privacy policy or terms of service were found on the homepage. No incident response or vulnerability disclosure information is provided. Suspicious hidden links to adult content domains were detected in hidden HTML elements, likely spam injections, but these are not visible to users. Overall, the website is trustworthy and professional, with a strong business credibility score. Recommendations include enabling DNSSEC, adding security headers, publishing a privacy policy, and monitoring third-party scripts for vulnerabilities to improve security posture and compliance.

S

Suomen Tykistö-, Pioneeri- ja Viestimuseoyhdistys ry

museomilitaria.fi

57

Museo Militaria is a Finnish non-profit organization operating one of the largest war and military history museums in Finland, located in Hämeenlinna. The museum offers diverse exhibitions, educational programs, guided tours, and a retail e-commerce platform targeting families, history enthusiasts, and school groups. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap, integrates multiple analytics and marketing tools, and employs secure payment processing via Paytrail. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a dedicated security policy page. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

T

Tabernas 21, s.r.o.

citybee.cz

58

CityBee.cz is a Czech online media platform focused on providing curated event listings, venue recommendations, and cultural tips primarily for Prague residents and visitors. The website operates under the company Tabernas 21, s.r.o., established around 2012, and positions itself as a trusted local guide with editorial content and advertising services. The platform integrates advertising partnerships and offers business registration services for local venues. Technically, the site uses legacy JavaScript libraries like jQuery 1.8.3, Google Tag Manager, and Facebook SDK, with a moderate performance profile and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses outdated libraries, which could pose risks. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for media businesses. Overall, the site is professional, content-rich, and safe for general audiences.

S

StavbaWeb

stavbaweb.cz

51

StavbaWeb is a Czech-language online platform dedicated to sharing information about construction products, architectural projects, and companies in the architecture and construction sectors. It serves as a niche media outlet providing news, project showcases, and industry insights primarily targeting architects, construction professionals, and related stakeholders in the Czech Republic. The website features a modern WordPress-based infrastructure with various plugins supporting GDPR compliance and user engagement. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. Security posture is moderate with HTTPS enforced and some security plugins in place, but lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust assessment, though the site appears professional and well-maintained. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy page found. Overall, the site is a credible resource within its industry niche but would benefit from enhanced transparency and security documentation.

S

SNCB-NMBS International

b-europe.com

62

SNCB-NMBS International operates a professional online platform for booking international train travel across Europe, including services for Eurostar, TGV INOUI, ICE, and other major train operators. The website targets European travelers seeking convenient ticket purchasing and travel planning, offering additional services such as Interrail passes and special tickets for bikes and dogs. The platform is built on a modern technology stack including C#, JavaScript, and Sitecore CMS, with integration of Google and Facebook APIs and a robust consent management system for GDPR compliance. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are lacking. The absence of WHOIS domain registration data is a notable concern, potentially indicating a subdomain usage or incomplete WHOIS information. Overall, the website presents a trustworthy and user-friendly experience for its target audience, but would benefit from enhanced transparency in domain registration and security disclosures.

I

International Anti-Fur Coalition

antifurcoalition.org

56

The International Anti-Fur Coalition (IAFC) operates as a global non-profit animal rights advocacy group focused on ending the fur trade through activism, education, and legislative efforts. Founded in 2006, it unites over 50 organizations worldwide to organize campaigns and promote anti-fur legislation. The website serves as an informational and campaign platform, targeting animal rights supporters and the general public concerned with ethical fashion. Technically, the website is built on the Shopify platform, leveraging standard web technologies such as jQuery, Facebook SDK, and embedded YouTube content. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Analytics and tracking are implemented via Shopify Analytics and Facebook Pixel, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and uses hCaptcha for form protection, but lacks explicit security headers and detailed privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. No critical vulnerabilities or malicious content were detected. Overall, the website presents a moderate risk profile with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

I

Information Week

informationweek.com

73

InformationWeek is a well-established technology news and analysis media brand founded in 1979 and currently owned by Informa PLC. The website serves IT professionals and business leaders by providing in-depth coverage of IT management, artificial intelligence, cybersecurity, cloud computing, and data privacy. It holds a strong market position as a trusted source of technology insights. Technically, the website employs a modern technology stack including JavaScript frameworks, New Relic monitoring, and various analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, though the lack of publicly available WHOIS data slightly impacts trust scores.

N

Nuit du Sport

nuitdusport.lu

55

Nuit du Sport is a government-backed initiative in Luxembourg aimed at promoting sports activities among youth and the general population by organizing annual sports events across various communes. The website serves as an informational and promotional platform, providing program details, partner information, and news updates. It is supported by official government bodies such as the Service National de la Jeunesse and the Ministère des Sports, indicating a strong institutional backing. Technically, the website employs modern web technologies including jQuery, lazy loading for images, and tracking via Matomo analytics. The site is mobile-optimized and accessible, with good SEO practices and a consistent branding strategy. No CMS or hosting provider details are explicitly identified from the content. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and there is no public security or incident response policy. Privacy compliance is indicated by the presence of a legal aspects page covering privacy and cookie policies, with GDPR compliance implied. Overall, the website presents a low-risk profile with a solid business credibility due to government affiliation, though the lack of WHOIS data and explicit security policies slightly reduce trust scores. Strategic improvements could focus on enhancing security headers, publishing incident response contacts, and providing clearer contact information.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

P

Planet Zemlja

planet-zemlja.hr

39

Planet Zemlja is a Croatian non-profit organization dedicated to environmental awareness, personal ecology, and ecological news dissemination. The website serves as a community platform offering news articles, event announcements, photo and video galleries, and educational content related to ecology. The target audience is the general public interested in environmental issues within Croatia. The business model is informational and community-driven without evident commercial transactions. Technically, the site uses a custom PHP-based CMS with jQuery and various plugins for RSS feeds, weather, and media galleries. External integrations include Google Analytics and Facebook SDK for tracking and social media engagement. However, the site lacks HTTPS on its main URLs, which is a significant security concern. Security headers are absent, and no advanced security or privacy compliance mechanisms are evident. Contact information is limited to forms without explicit emails or phone numbers. Overall, the site is functional but requires modernization and security improvements.

P

Pro Háčkování s.r.o.

prohackovani.cz

56

ProHackovani.cz is a Czech Republic-based e-commerce retailer specializing in crafting supplies, particularly for knitting, crocheting, sewing, and creative hobbies. The website offers over 21,000 products and has an established market presence with an 8-year tradition. It provides both online sales and a physical store in Kostelec nad Labem, supported by customer service via phone, email, and chat. The business model focuses on retail sales to hobbyists and creative individuals, maintaining a strong customer service orientation and product availability.

P

Pejskovice

pejskovice.cz

54

Pejskovice.cz is an e-commerce website specializing in pet supplies targeted primarily at Czech pet owners. The site offers a variety of products for dogs, cats, and rabbits, positioning itself as a local online retailer with a focus on pet care. The website is built on the Shoptet platform, leveraging common web technologies such as JavaScript, jQuery, and integrates analytics tools including Google Analytics and Smartlook for user behavior tracking. While the site is accessible and uses HTTPS, it lacks visible privacy and terms of service pages, which are important for compliance and user trust. The absence of WHOIS data and registrant information reduces the domain's trustworthiness, although the website content and structure appear professional and consistent with a legitimate retail business. Security posture is moderate, with HTTPS enabled but missing important security headers. Overall, the site is functional and serves its business purpose but would benefit from enhanced transparency and security practices.

C

Croatian Climate Change Panel

solarniklaster.org

45

The Croatian Climate Change Panel operates the solarniklaster.org website as a specialized platform focused on renewable energy, sustainable technologies, and climate change awareness primarily targeting Croatian and regional audiences. The site offers news, expert articles, multimedia content, and educational resources to support green energy transition efforts. Technically, the website uses a standard modern tech stack including Bootstrap, jQuery, and analytics tools, hosted on a domain registered since 2015 with privacy protection. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with policies present but no explicit cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is a credible, niche informational resource with room for security and privacy improvements.

Otok Krk energija d.o.o. is a Croatian limited liability company focused on producing and supplying renewable energy, primarily solar, to achieve energy independence for the island of Krk. The company is relatively new, founded in 2019, and is owned by the local municipality of Baška with plans to include other local government units as co-owners. Their business model centers on local investment and sustainable energy production, positioning themselves as a key player in the regional green energy market. The website reflects this mission with content in Croatian and some English, targeting local residents, investors, and governmental bodies interested in renewable energy projects. Technically, the website uses common web technologies such as Bootstrap, jQuery, and popular carousel libraries, with integration of Google Analytics and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is moderate; HTTPS is used but no explicit security headers or incident response policies are published. Privacy and cookie policies exist but lack active consent mechanisms. Overall, the website is professional and trustworthy but could improve in security and privacy compliance. Recommendations include implementing security headers, adding cookie consent, publishing incident response information, and enhancing contact transparency.

A

Aittakoodi Oy

pikavuorot.fi

47

Pikavuorot.fi is a Finnish transportation price comparison website operated by Aittakoodi Oy, founded in 2015. The platform aggregates and compares prices and schedules for bus and train travel across multiple Finnish transportation providers, including major companies such as VR, Matkahuolto, Onnibus, and airlines like Finnair and Norwegian. It serves a general audience seeking convenient travel planning and ticket purchasing options within Finland. The website enjoys a moderate market position as a leading price comparison tool in its niche. Technically, the site employs a modern but somewhat dated technology stack including Bootstrap 3, jQuery, DataTables, and Socket.io for real-time data updates. It integrates multiple third-party services for fonts, advertising, and analytics, including Google Adsense and Facebook SDK. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, HTTPS is used, but explicit security headers are not detected in the provided data. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is basic, with a cookie consent banner and a privacy policy page present, but no detailed security or incident response policies are published. Contact information is limited to an email address, with no phone or physical address provided. Overall, Pikavuorot.fi presents a trustworthy and functional service with room for improvement in security hardening, privacy transparency, and expanded contact options. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive policies, and improving user trust signals.

The website umdpl.info represents a Ukrainian human rights non-profit association named Асоціація УМДПЛ, also branded as “ФРІРАЙТС”. It focuses on digital rights, penitentiary oversight, legal education, criminal justice, and activist protection. The organization targets activists, government bodies, and the general Ukrainian public, providing educational resources, reports, and special projects. The domain is well-established since 2008, supporting the organization's credibility and longevity. Technically, the site runs on an outdated WordPress 4.4.2 CMS with older jQuery libraries, which introduces security risks. The site uses Google Analytics and Facebook SDK for tracking and social media integration. Mobile optimization and accessibility are basic, with moderate performance. No advanced SEO or modern frameworks are detected. Security posture is moderate but with notable gaps: HTTPS is enabled, but no DNSSEC, no security headers, and no cookie consent mechanisms are present. The outdated CMS and libraries increase vulnerability exposure. No explicit privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Overall, the site is functional and credible for its non-profit mission but requires technical and security modernization. Strategic improvements in security headers, CMS updates, privacy compliance, and user experience would enhance trust and reduce risk.

S

Centrum.cz: Fandíme dobrému obsahu

stdout.cz

49

Centrum.cz is a prominent Czech internet portal providing a variety of services including email, current news, weather updates, and search functionalities. It serves a broad Czech audience seeking reliable and timely information. The website leverages modern web technologies such as React and Next.js, ensuring a responsive and user-friendly experience. The presence of multiple reputable news sources and professional design indicates a mature digital presence. Security-wise, the site enforces HTTPS and includes essential security headers, reflecting a good security posture. However, the absence of explicit privacy and cookie policies, as well as contact information, suggests areas for compliance and transparency improvement. Overall, Centrum.cz appears to be a trustworthy and well-established media portal with room to enhance privacy compliance and user trust through clearer policy disclosures.

C

Centrum.cz

xsd.cz

57

Centrum.cz is a well-established Czech internet portal providing a variety of online services including email, news, and weather updates. The website targets Czech-speaking users seeking reliable and diverse content. Technically, the site is built on modern frameworks such as Next.js and React, leveraging multiple third-party analytics and advertising platforms to monetize and analyze user engagement. Security posture is strong with HTTPS enforced and appropriate security headers, although privacy compliance could be improved by publishing clear privacy and cookie policies. The absence of WHOIS data is likely due to privacy protection, which is common for media portals. Overall, the site presents a professional and trustworthy online presence with room for enhancement in privacy transparency and contact accessibility.

G

Galaksija

galaksija.hr

42

Galaksija.hr is a Croatian online magazine focused on popularizing science across various disciplines including natural sciences, technology, social sciences, ecology, and medicine. The website offers news articles, blogs, multimedia galleries, and videos targeting a general audience interested in science and education. The business model appears to be content publishing supported by advertising and partnerships with related portals. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Flexslider, and integrates analytics tools like Google Analytics, Histats, and Mixpanel. The site is accessible via HTTPS and includes a login form for registered users, but lacks advanced security headers and explicit GDPR cookie consent mechanisms. No incident response or security contact information is provided, which could be improved to enhance trust and compliance. Overall, the website is professionally designed with good content quality and moderate technical implementation, suitable for its niche media role.

I

Istra Bike

istria-bike.com

44

Istra Bike is an official regional cycling tourism portal for the Istria region in Croatia, providing comprehensive information on bike trails, accommodation, events, and related services. The website targets cycling tourists and outdoor enthusiasts, positioning itself as a key resource for promoting cycling tourism in the area. The platform offers detailed trail information, event calendars, multimedia content, and service listings such as bike rentals and transport. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, Slick Carousel, and Lightbox2, ensuring a responsive and user-friendly experience. The site is served over HTTPS and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, some security best practices such as explicit security headers and detailed security policies are missing. From a security perspective, the site maintains a good baseline with HTTPS and cookie consent but lacks advanced security headers and incident response information. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and partner affiliations suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professionally designed and functional, with good content quality and user experience. The main risk lies in the missing WHOIS registration data, which slightly reduces trustworthiness. Strategic improvements in security headers, transparency policies, and domain registration clarity are recommended to enhance trust and compliance.

Istra Trails is an official regional tourism website focused on promoting cycling trails, accommodation, and events in the Istrian peninsula, Croatia. The site targets tourists and outdoor enthusiasts seeking detailed trail information and related services. It maintains a consistent brand presence with partner tourism companies and active social media channels. Technically, the website uses a mix of legacy and modern technologies including jQuery, Google Analytics, Facebook SDK, and Google Maps API v2, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and uses deprecated APIs. Privacy compliance is addressed with a privacy policy and cookie consent banner, though terms of service and incident response policies are absent. Overall, the site is trustworthy and professionally maintained but could improve security and compliance aspects.

T

Ticketportal

ticketportal.sk

53

Ticketportal.sk is a well-established Slovak ticket sales platform specializing in entertainment events such as theatre, music concerts, festivals, musicals, and sports. The website targets a general audience in Slovakia and positions itself as a leading ticketing service provider in the region. The platform leverages modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and reCAPTCHA to provide a secure and user-friendly experience. Consent management is implemented to comply with GDPR requirements, although explicit privacy and terms of service documents were not found in the provided content. Security posture is strong with HTTPS enforced and anti-bot measures in place, but could be improved by adding security headers and publishing a security policy. Overall, the website is professional, trustworthy, and technically sound, serving a large user base with extensive event ticketing services.

I

Istria Tourist Board

istra.hr

54

The website www.istra.hr serves as the official tourist website for the Istria Tourist Board, promoting the Istria region in Croatia. It provides comprehensive tourism information including accommodation, events, heritage, and nature activities targeting tourists and visitors interested in the Mediterranean region. The business operates as a regional tourism board with a medium-sized presence and has been established since 2012, consistent with the domain registration data. The website demonstrates a good level of digital maturity with modern web technologies, accessibility features, and SEO optimization. It uses a Laravel-based CMS inferred from session cookies and integrates multiple third-party services such as Facebook SDK, Google Tag Manager, Cookiebot for cookie consent, and MailerLite for marketing automation. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, although explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through Cookiebot's consent management and links to a comprehensive privacy policy. However, no explicit terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

T

TZ Poreč

myporec.com

54

The website www.myporec.com serves as the official tourism portal for the City of Poreč in Istria, Croatia. It provides comprehensive information on local accommodations, events, gastronomy, and travel planning, targeting tourists and visitors interested in the region. The site is well-branded under the TZ Poreč identity and offers multilingual support, rich multimedia content, and accessibility features, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries, Google Analytics, and Facebook SDK for tracking and engagement, alongside cookie consent and accessibility compliance tools. Security posture is good with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, reducing trust slightly, but the overall content and presentation suggest a legitimate and professional operation. Strategic recommendations include enhancing security headers, clarifying incident response policies, and investigating the WHOIS inconsistency to improve business credibility and trust.

J

JJ68

jj68byjagr.com

61

JJ68 by Jaromír Jágr is a Czech e-commerce business specializing in premium CBD products, including oils, protein drinks, and supplements, targeting sports enthusiasts and wellness consumers. The website is professionally designed, localized in Czech, and offers a clear navigation structure with multiple product categories. The business model combines online retail with a physical store presence in Prague. Technically, the site uses the Shoptet e-commerce platform, integrates multiple analytics and marketing tools, and is hosted via Amazon Cloudfront CDN. Security posture is moderate with HTTPS enforced and CSRF protections, but the use of an outdated jQuery version and lack of explicit security headers are notable weaknesses. Privacy compliance is good, with a comprehensive privacy policy and cookie consent mechanism in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is functional and trustworthy but should address technical and registration transparency issues to enhance credibility.

L

Lokálny trh

lokalnytrh.sk

56

Lokálny trh is an established Slovak online platform founded in 2014 that maps and catalogs local food and beverage producers, providing consumers with an interactive map and search tools to discover regional producers. The platform also supports producers, retailers, and event organizers by offering free online profiles and promotional tools. The website demonstrates a good level of digital maturity with modern technologies such as Algolia search, Google Analytics, Facebook SDK, and responsive design. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the platform serves a niche retail market in Slovakia with a focus on local and regional products, maintaining a trustworthy and professional online presence.

I

Intergovernmental Panel on Climate Change

ipcc.ch

63

The Intergovernmental Panel on Climate Change (IPCC) is a globally recognized United Nations body established in 1988 to provide policymakers with scientific assessments on climate change, its impacts, and mitigation strategies. The organization operates with 195 member countries and produces comprehensive reports that are key inputs for international climate negotiations. The website reflects a mature digital presence with extensive content, including reports, working group information, and activities, targeting policymakers, researchers, and the public interested in climate science. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and various UI libraries. It is well-optimized for mobile and accessibility, though performance is moderate. Security posture is strong with HTTPS enforced and no exposed sensitive data, but could be improved by adding explicit security headers and a cookie consent mechanism to enhance GDPR compliance. Overall, the IPCC website demonstrates high professionalism, trustworthiness, and content quality. However, it lacks explicit contact emails or phone numbers on the homepage and does not display a cookie consent banner, which are areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access for analysis.

H

HC Benátky nad Jizerou

hokejbenatky.cz

46

HC Benátky nad Jizerou is a Czech ice hockey club with a well-established online presence since at least 2002. The website serves as an information hub for the club's activities, including team rosters, match schedules, news updates, and youth hockey programs. It targets local fans, players, and the community, providing comprehensive sports-related content and partner promotions. The site is hosted likely by REG-ZONER, a Czech hosting provider, and uses a technology stack including Bootstrap, jQuery, and Slick Carousel. While the site is functional and mobile-optimized, it uses some outdated JavaScript libraries and analytics scripts, which pose potential security risks. The security posture is moderate, with cookie consent implemented but lacking visible security headers and modern analytics. No explicit privacy policy or terms of service pages were found, which may impact compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Strategic improvements in security and privacy compliance are recommended to enhance trust and protect user data.

B

Bauer CZ

bauerhockey.cz

36

Bauer CZ operates a professional e-commerce website specializing in hockey equipment and apparel targeted primarily at hockey players and enthusiasts in the Czech Republic. The company offers a wide range of products including hockey sticks, skates, helmets, gloves, protective gear, training equipment, and clothing. The website demonstrates a consistent brand presence and good content quality, supporting its position as a recognized retailer in the hockey sports sector. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Cookiebot for cookie consent, and Facebook SDK for social media integration. The site is HTTPS secured and uses structured data (JSON-LD) to enhance SEO and provide clear business information. Mobile optimization and user experience are good, with a clear navigation structure and search autocomplete features. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages in the provided content. Overall, Bauer CZ presents a trustworthy and professional online retail platform with moderate to good security posture and technical implementation. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and trustworthiness.