Security Directory

L

Lightning Source LLC

ingramspark.com

64

IngramSpark, operated by Lightning Source LLC under the Ingram Content Group umbrella, is a leading online self-publishing platform offering print-on-demand, ebook publishing, global distribution, and book marketing services. The company targets authors and independent publishers seeking professional quality and wide reach. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, it leverages HubSpot CMS, Bootstrap, and multiple marketing and analytics tools, ensuring a modern and responsive user experience. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security policies and incident response details are absent. WHOIS data is unavailable publicly, slightly reducing transparency but not detracting significantly from overall legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure info, and providing direct contact channels for security and support.

T

telc

telc.net

62

telc.net is a professional website dedicated to language examinations, certifications, and learning materials primarily targeting language learners, educational institutions, and professionals. The site positions itself as a reputable provider of language certificates across multiple proficiency levels (A1 to C2), serving a broad audience in Germany and internationally. The business model centers on delivering language testing and training services, supported by a medium-sized organizational structure. The website content is well-structured, professionally designed, and consistent with the brand identity, reflecting a strong market presence in the education sector. Technically, the website leverages TYPO3 CMS with Bootstrap and FontAwesome for frontend design, integrating advanced analytics and marketing tools such as Matomo, Google Analytics, Google Tag Manager, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly disclosed. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs essential security cookies like XSRF-TOKEN to prevent cross-site request forgery. Cookie consent mechanisms are robust and GDPR compliant. However, explicit security headers are not detected, and no published security or incident response policies are found, indicating areas for improvement. The WHOIS data is incomplete or privacy protected, which slightly reduces trust but is not uncommon for organizations in this sector. Overall, telc.net presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic enhancements in security transparency and contact information availability would further strengthen its risk profile and user trust.

3

300.codes

300.codes

66

300.codes is a Polish software house specializing in web and mobile development using technologies such as PHP, Vue, React, Python, WordPress, and Webflow. The company positions itself as a boutique-quality software delivery provider focused on achieving marketing and sales goals for its clients. The website is professionally designed with good SEO and mobile optimization, leveraging modern frameworks and tools including Astro, Yoast SEO, Google Tag Manager, and Cookiebot for consent management. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its business domain.

W

wapteka.pl

wapteka.pl

66

Wapteka.pl operates as an online pharmacy based in Poland, offering a broad range of healthcare products including supplements, vitamins, cosmetics, over-the-counter medicines, dermocosmetics, and medical equipment. The website targets a general audience including adults and children, positioning itself as a convenient e-commerce platform for pharmaceutical and wellness products. The business model focuses on retail sales through an online storefront, leveraging digital marketing and social media to reach customers. The company maintains a consistent brand presence and provides clear contact information, enhancing customer trust.

N

Nutrimed Promedica

nutrimed.pl

72

Nutrimed Promedica operates as a specialized healthcare provider focusing on home-based nutritional care for patients unable to feed orally, primarily due to neurological, oncological, or other medical conditions. Established in 2007, the company serves a broad patient base across Poland, leveraging NFZ funding to deliver free enteral nutrition services. The website reflects a mature digital presence with clear service descriptions, patient support resources, and accessible contact options. Technically, the site is built on WordPress with modern plugins and accessibility features, ensuring good performance and SEO compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the domain registration and hosting align with the business profile, supporting legitimacy and trustworthiness.

O

Owasco Careers

owascocareers.ca

51

Owasco Careers operates a professional, family-owned automotive dealership group in Canada, focusing on recruitment and career opportunities within their dealerships. The website presents a clear business description emphasizing culture and growth, targeting job seekers interested in automotive retail careers. The technical infrastructure is based on WordPress with modern analytics and monitoring tools such as Google Analytics, Microsoft Clarity, and New Relic, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with reCAPTCHA for form security, reflecting a good security posture. However, the absence of publicly available WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and privacy compliance. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security headers to improve trust and compliance.

O

Owasco RV Rentals

owascorvrentals.com

59

Owasco RV Rentals is a small Canadian business specializing in recreational vehicle rentals, including vans, motorhomes, and trailers. The company targets both Canadian and international customers, offering various rental options, specials, and loyalty programs. The website is professionally designed with clear navigation and comprehensive service information, supporting a positive user experience. Technically, the site uses a combination of legacy and modern web technologies, including jQuery, Bootstrap, and multiple analytics and tag management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. Overall, the website presents a credible business front with room for security and transparency improvements.

A

ARKANCE USA

caddmicrosystems.com

10

ARKANCE USA is a technology solutions and consulting company specializing in the Architecture, Engineering, and Construction (AEC) industry. They provide a comprehensive suite of services including software solutions (notably Autodesk, Bluebeam, and Egnyte), training, consulting, BIM services, and support contracts. Positioned as a trusted Autodesk Platinum Partner, ARKANCE serves a broad audience including architects, engineers, contractors, government agencies, and facility managers. Their market presence is supported by detailed customer success stories, active event participation, and a strong digital footprint. Technically, the website leverages modern web technologies such as React and Next.js, integrates marketing and analytics tools like Marketo, Google Tag Manager, and LinkedIn Insight, and is hosted with a CMS backend likely powered by Strapi. The site is well-optimized for mobile and SEO, with good accessibility features and fast performance. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in cookie consent mechanisms and publishing formal security policies. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of business. No security challenges or WAF blocks were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, trustworthy, and mature digital presence aligned with its business objectives. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

P

PLAION

primematter.gg

10

PLAION Support is a dedicated customer support portal for PLAION's gaming and digital entertainment products. The website provides assistance for games and services, targeting gamers and customers seeking help with their PLAION accounts and products. The portal is well-branded and consistent with PLAION's corporate identity, offering a search function and contact options primarily through support forms. The site leverages modern web technologies including Nuxt.js, Tailwind CSS, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure.

F

Frank Bold

budfrankbold.cz

10

Frank Bold is a purpose-driven organization based in the Czech Republic, operating for over 12 years with a focus on legal services, consulting, and public benefit projects. The company is structured into multiple divisions including legal advisory, consulting, societal projects, core organizational functions, and student internships. Their market position is solid within the Czech and broader European context, targeting professionals and students interested in impactful legal and consulting careers. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on the Webflow platform, utilizing modern analytics tools such as Google Analytics, Matomo, Microsoft Clarity, and Facebook Pixel, all integrated with user consent mechanisms. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, there is room for improvement in security headers and formal security policies. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration trust insights, but the professional presentation and structured data support legitimacy. Overall, Frank Bold's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance their security posture and trustworthiness further.

F

Frank Bold Advisory

frankboldadvisory.cz

10

Frank Bold Advisory is a professional consulting firm specializing in ESG reporting, energy management, and strategic communication with a focus on sustainability and compliance with European standards such as CSRD and EU taxonomy. The company positions itself as a leader in ESG advisory with direct involvement in European ESG standard development and a decade of experience. Their services target businesses seeking to improve sustainability reporting and energy efficiency. Technically, the website is built on modern platforms like Webflow, uses multiple analytics tools including Google Analytics and Matomo, and implements cookie consent mechanisms, reflecting a mature digital presence. Security posture is generally good with HTTPS and consent management, but lacks visible security headers and published security policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the professional content and branding suggest a legitimate business. Overall, the website is well-designed, content-rich, and trustworthy, with recommendations to enhance security transparency and verify domain registration details.

C

Cambra de Comerç de Terrassa

cambraterrassa.org

10

Cambra de Comerç de Terrassa is a regional chamber of commerce focused on supporting economic development and business growth in the Terrassa region of Spain. The website presents a professional and consistent brand image, offering business support services and entrepreneurial development initiatives. The target audience primarily includes local businesses and entrepreneurs seeking economic development assistance. The business model revolves around providing services and support to foster regional economic growth. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by WooCommerce for e-commerce capabilities. It integrates several analytics and marketing tools including Matomo, Google Tag Manager, Hotjar, and LinkedIn Insight. The site is hosted by Entorno Digital, S.A., with a domain registered since 2005, indicating a mature and stable online presence. Performance and mobile optimization are good, with basic accessibility and SEO optimizations in place. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, alongside a GDPR-compliant cookie consent mechanism. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit privacy policy or terms of service found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The main risks relate to the absence of explicit security policies and limited contact information. Strategic recommendations include enhancing security headers, publishing a security and privacy policy, and providing clear contact channels for security incidents to improve trust and compliance.

C

Cambra de Comerç de Barcelona

cambrabcn.org

10

Cambra de Comerç de Barcelona is a well-established chamber of commerce serving the business community in Barcelona and Catalonia. Founded in 2001, it operates as a non-profit organization providing business support, training, networking, and advocacy services. The website reflects a professional and consistent brand image targeting local businesses and entrepreneurs. The organization maintains a strong market position as a key regional business entity. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, WooCommerce, and Yoast SEO, indicating a mature digital infrastructure. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by Nominalia Internet SL, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security transparency and DNS security. The domain registration data supports the legitimacy and long-standing presence of the organization.

B

Barberco

barberco.cz

10

Barberco.cz is a Czech-based e-commerce retailer specializing in men's grooming products, barber supplies, and professional hairdressing equipment. Established in 2017, the company targets gentlemen, barbers, and hairdressers primarily in the Czech and Slovak markets. The website offers a broad product catalog with detailed categories, a loyalty program, and a wholesale partner program for professionals. The business positions itself as a trusted supplier with a focus on quality and professional collaboration.

D

Demo verze stránek

zelenlanger.cz

10

Zahradnické služby Langer is a small family-owned gardening and landscaping service provider based in the Czech Republic, operating since 1997. The company offers a broad range of services including garden creation, park revitalization, maintenance, green roofs, and natural ponds. The website is professionally designed using WordPress and Elementor, featuring clear navigation and localized content in Czech. Technical infrastructure includes modern web technologies and integration with Google Analytics and Tag Manager for visitor tracking. Privacy compliance is well addressed with GDPR-compliant cookie consent and privacy policies. Security posture is adequate with HTTPS enabled and basic security practices, though additional security headers and policies could enhance protection. No WHOIS data is publicly available, likely due to privacy protection, which is common for small businesses. Overall, the website presents a trustworthy and professional digital presence for a regional gardening service business.

S

Saxana Group

saxanagroup.cz

8

Saxana Group is a Czech-based company specializing in cleaning services and building management, positioning itself as one of the largest providers in its region. The website content is professionally presented in Czech, targeting both businesses and households. The company offers comprehensive cleaning and facility management services, reflecting a medium-sized enterprise with a consistent brand presence. Technically, the website is built on the ANT CMS platform and incorporates common analytics tools such as Google Analytics and Seznam.cz tracking. While the site is mobile-optimized and well-structured, it lacks visible privacy and cookie policies, which impacts its compliance posture. Security-wise, the absence of security headers and detailed WHOIS data reduces the overall security confidence, although no immediate vulnerabilities are evident from the provided data. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security hardening.

P

Pneu Drnec

pneudrnec.cz

7

Pneu Drnec is a local automotive service provider specializing in tire and auto repair services in Plzeň, Czech Republic. The business focuses on servicing personal vehicle tires, motorcycle tires, off-road tires, and light truck tires, with a specialization in high-speed large-dimension tires. The website presents a professional and consistent brand image targeting vehicle owners in the local area. However, the absence of WHOIS data and lack of privacy and cookie policies indicate gaps in transparency and compliance. Technically, the site uses modern JavaScript and CSS technologies, integrates Facebook SDK and Google Tag Manager, but lacks proper analytics setup and security headers. The security posture is moderate but could be improved with better SSL configuration and security best practices. Overall, the site is functional and informative but requires enhancements in privacy compliance and security to improve trustworthiness.

S

Spoutible

spoutible.com

7

Spoutible.com appears to be a relatively new online platform, likely a social media or communication service given the site title and some UI hints. The domain was registered in late 2022 and is hosted behind Cloudflare DNS services. The website uses common Google services such as Google Tag Manager, Google Adsense, and Google reCAPTCHA, indicating some level of digital maturity. However, the site lacks critical compliance documents such as privacy policies, cookie policies, and terms of service, which are essential for user trust and regulatory compliance. The absence of contact information and security headers further reduces the security posture and business credibility. Overall, the site presents a basic web presence with moderate technical implementation but requires significant improvements in privacy, security, and business transparency to enhance trustworthiness and compliance.

S

Skybound Game Studios, Inc.

invinciblevs.com

10

Invincible VS is a newly launched video game project by Skybound Game Studios, Inc., focusing on a brutal 3v3 tag fighting game set in the Invincible universe. The website serves as a promotional and community engagement platform, offering detailed character profiles, game highlights, and closed alpha registration. The business targets gamers and fans of the Invincible franchise, positioning itself within the niche superhero fighting game market. Technically, the site is built on WordPress with modern plugins and integrates Cloudflare DNS and Google Tag Manager for performance and analytics. Security posture is solid with HTTPS, CAPTCHA on forms, and an age gate for mature content, although some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and mature-content appropriate, with a domain registration consistent with the business timeline.

B

berry2b

berry2b.com

10

berry2b is an educational technology platform focused on providing students with digital tools to manage their school life, including schedules, homework, and grades, while also preparing them for career entry. The platform also offers recruiting tools for companies to find apprentices and trainees, positioning itself as a bridge between education and employment in Germany. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics technologies, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, though improvements are needed in security headers and visible privacy policies. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the main domain. Overall, berry2b presents a credible and functional online presence with room for enhanced transparency and security practices.

S

Saint-Gobain España

saint-gobain.es

55

Saint-Gobain España operates as the Spanish branch of the global Saint-Gobain group, specializing in manufacturing and distributing construction materials and sustainable building solutions. The website reflects a mature enterprise with a strong focus on sustainability, innovation, and market leadership in Spain. The digital presence is professional, well-structured, and optimized for multiple devices, targeting construction professionals and stakeholders interested in sustainable construction. Technically, the website is built on Drupal 10, leveraging modern analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site employs HTTPS and cookie consent mechanisms, indicating compliance with privacy regulations like GDPR. However, explicit security headers and a published security policy are absent, representing an area for improvement. Security posture is solid with no evident vulnerabilities or exposed sensitive data, but the lack of incident response contact information and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. Overall, the website is trustworthy, with strong brand consistency and multiple trust signals including official social media accounts and comprehensive privacy policies. Recommendations include adding security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

The website www.british-gypsum.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification before granting access. This challenge page blocks direct content retrieval, resulting in no visible business information, metadata, or contact details. The WHOIS lookup for the domain returned no registration data, indicating either the domain is unregistered, privacy protected, or there is an issue with the WHOIS server response. The site uses Google Tag Manager and OneTrust cookie consent scripts, suggesting some level of digital maturity in tracking and privacy management, but no further technical or business details are accessible. The security posture cannot be fully assessed due to the lack of accessible content and headers. Overall, the site presents a low trust profile due to the absence of public WHOIS data and blocked content.

The website www.fr.weber is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page, which blocks direct access to the site's content. This prevents extraction of meaningful business, contact, or policy information. The site uses Google Tag Manager for analytics and a cookie consent mechanism via OneTrust, indicating some level of privacy compliance. WHOIS data is unavailable due to a malformed request or privacy protection, limiting domain trust assessment. The presence of multiple related domains linked to the Saint-Gobain group suggests the site is part of a larger corporate ecosystem. However, without access to the actual site content, a full evaluation of business operations, security posture, and compliance cannot be performed.

Saint-Gobain is a global leader in manufacturing building materials and construction solutions, with a local presence in Finland represented by the www.saint-gobain.fi domain. The website is currently inaccessible due to a Cloudflare security challenge, preventing direct content analysis. The site employs modern analytics tools such as Google Tag Manager and GA4, and uses OneTrust for cookie consent management, indicating a baseline level of privacy compliance. However, no privacy policy, terms of service, or contact information is accessible, limiting the ability to assess compliance and user engagement fully. The domain is protected by privacy services but aligns with the Saint-Gobain brand, suggesting legitimacy.

The website www.saint-gobain.my represents Saint-Gobain Malaysia Sdn. Bhd., a subsidiary of the global Saint-Gobain group specializing in building materials and construction solutions. The domain registration data confirms the legitimacy and consistency of the business presence in Malaysia since 2018. However, the website content is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge, which blocks direct content access and prevents detailed content and policy analysis. The site employs advanced analytics tools including multiple Google Tag Manager containers and Google Analytics 4, indicating a mature digital marketing infrastructure. Due to the WAF blocking, no privacy, cookie, or terms of service policies are visible, nor is any contact information or business description accessible. The security posture is difficult to assess fully, but the presence of Cloudflare WAF suggests a proactive security approach. Overall, the site appears to be a legitimate corporate presence but requires content accessibility for full evaluation.

The website www.quartzolit.weber currently presents a Cloudflare security challenge page, blocking direct access to its content. This domain appears to be part of a larger corporate ecosystem related to Saint-Gobain and its Weber brand, as indicated by multiple related domains in the analytics mapping. Due to the WAF challenge, no direct business content, contact information, or policies are accessible, limiting the ability to assess the company's market position or services in detail. Technically, the site uses Cloudflare for protection and Google Tag Manager for analytics, indicating a modern approach to traffic management and data collection. However, the lack of visible content and policies reduces transparency and trustworthiness. Security-wise, the presence of Cloudflare's Turnstile captcha is a positive mitigation against automated threats, but the absence of visible security headers or SSL details in the provided data prevents a full security posture evaluation. Overall, the site is protected but inaccessible for detailed analysis, resulting in a low AI score and recommendations to improve transparency and policy disclosures once access is granted.

Saint-Gobain Glass is a major player in the manufacturing sector specializing in glass products, operating as part of the global Saint-Gobain group. The company targets industrial clients and construction sectors with a B2B business model. The website is currently inaccessible due to a Cloudflare security challenge, limiting direct content analysis. The domain registration data supports the legitimacy and long-standing presence of the company in the market. The technical infrastructure includes modern analytics tools like Google Tag Manager and Google Analytics 4, hosted behind Cloudflare for security and performance. However, the lack of visible privacy policies, contact information, and security headers on the landing page indicates areas for improvement in transparency and compliance. Overall, the website's security posture is difficult to assess fully due to access restrictions, but domain data and hosting choices suggest a mature enterprise environment.

Saint-Gobain Glass is a major industrial manufacturer specializing in glass products, operating under the global Saint-Gobain group. The website is currently inaccessible due to a Cloudflare security challenge page, which prevents direct content access and limits visibility into detailed business and security information. The technical infrastructure includes modern analytics and cookie consent tools, but lacks visible security headers and explicit privacy or contact information on the landing page. The absence of WHOIS data reduces transparency, although the domain is associated with a reputable multinational company. Overall, the site’s security posture is difficult to assess fully due to access restrictions, but improvements in transparency and direct content availability are recommended.

The website www.plaka.com.mx is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification before granting access. This security measure blocks automated access and obscures the actual website content, preventing a full analysis of the business, services, and compliance posture. The domain WHOIS data is unavailable or invalid, which raises concerns about the transparency and legitimacy of the domain registration. The site uses Google Tag Manager for analytics and Cloudflare Turnstile captcha for bot mitigation, indicating some level of security awareness. However, the lack of visible privacy policies, contact information, and business details on the landing page limits trust and credibility assessment. Overall, the site appears to be protected by strong security controls but lacks accessible content for evaluation.

R

Rigips GmbH

rigips.de

62

Rigips GmbH is a leading German manufacturer specializing in sustainable drywall and building materials for walls, ceilings, floors, and facades. As part of the Saint-Gobain group, it holds a strong market position with a comprehensive product portfolio and a focus on environmentally friendly construction solutions. The website targets construction professionals, architects, and distributors, providing product information, technical downloads, and a dealer locator. Technically, the site is built on Drupal 10, employs modern tracking and consent tools, and is hosted on reliable infrastructure. Security posture is strong with HTTPS, security headers, and no exposed vulnerabilities detected. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site demonstrates good digital maturity, professional design, and trustworthy business representation.

Weber Vietnam is a subsidiary of the global Saint-Gobain group, specializing in manufacturing and distributing tile adhesives, grouts, waterproofing products, and silicone sealants. The company holds a leading market position in Vietnam and globally, serving construction professionals and consumers with a comprehensive product range and technical support. The website is professionally designed, content-rich, and well-branded, reflecting the company's strong market presence and parent company association. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. The site is mobile-optimized and accessible, with good SEO practices. However, some security headers are missing, and there is no explicit cookie consent mechanism despite cookie policy presence. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by consistent branding and structured data linking to Saint-Gobain. No signs of phishing or malware were detected. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic improvements could focus on enhancing security headers, implementing explicit cookie consent, and publishing a dedicated security policy or incident response page.

The website www.isover-technical-insulation.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires browser verification via Turnstile captcha. This prevents direct access to any substantive website content, including business information, contact details, or policies. The WHOIS lookup for the domain returned no registration data, indicating the domain may be unregistered, expired, or protected by privacy services, which raises concerns about the legitimacy and operational status of the website. The presence of modern analytics and cookie consent scripts suggests some level of digital maturity, but without accessible content, a full assessment is not possible. Security posture benefits from Cloudflare protection but lacks visible security headers or policies. Overall, the site scores low on content quality, business credibility, and privacy compliance due to lack of accessible information.

The website www.it.weber is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification via Turnstile CAPTCHA. This prevents access to any substantive content, including business descriptions, contact information, or policy documents. The site employs Google Tag Manager and Google Analytics 4 for tracking, alongside OneTrust for cookie consent management, indicating some level of privacy compliance infrastructure. However, the lack of accessible content and WHOIS data severely limits the ability to assess the company's market position, services, or legitimacy. The domain's WHOIS information is unavailable or malformed, which raises concerns about transparency and trustworthiness. Overall, the site appears to be part of a larger network of related domains using shared analytics configurations, but no direct business or contact details are visible.

The website www.carriere-de-gypse-sogyma.fr is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that requires browser verification via Turnstile captcha. This prevents direct access to the site's content, limiting the ability to analyze business details or user-facing information. The domain's WHOIS data is unavailable, indicating privacy protection or lack of public registration data, which further reduces transparency and trust. The site uses Google Tag Manager and Google Analytics 4 for tracking, and OneTrust for cookie consent management, showing some level of compliance with privacy regulations. However, no privacy policy, terms of service, or contact information is visible on the challenge page. The hosting appears to be behind Cloudflare, providing security and performance benefits but also obscuring direct server details. Overall, the website's digital maturity is low due to content inaccessibility and lack of visible business information.

M

Můj Caravan

mujcaravan.cz

53

Můj Caravan is a Czech Republic-based e-commerce retailer specializing in accessories and equipment for caravans, motorhomes, camping, and outdoor activities. The website offers a wide range of products including awnings, furniture, grills, kitchenware, toilets, and outdoor gear, targeting caravan and camping enthusiasts primarily in the Czech market. The business positions itself as a niche market leader with a comprehensive product catalog and customer trust signals such as the Heuréka certification and active social media presence. Technically, the website is built on a proprietary e-commerce platform (Golemos) and leverages modern web technologies including JavaScript frameworks, Google Tag Manager, Facebook SDK, and Matomo analytics. The site is mobile-optimized with good SEO and accessibility basics, providing a professional user experience. The presence of multiple tracking and marketing tools is managed with user consent, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure login forms. While some security headers are not explicitly detected, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the website demonstrates a high level of professionalism and trustworthiness, with no signs of content blocking or WAF interference. The lack of public WHOIS data due to privacy protection is common for retail businesses and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security headers and continuing regular audits of third-party scripts to maintain security and compliance.

F

Frank Bold Advokáti

fbadvokati.cz

55

Frank Bold Advokáti is a professional law firm specializing in a broad range of legal services excluding criminal law, with a strong presence in the Czech Republic and offices in multiple cities including Brno, Prague, Ostrava, Krakow, and Brussels. The firm offers comprehensive legal support in areas such as commercial and labor law, energy law, public administration law, real estate transactions, and environmental law. Their website demonstrates a mature digital presence with well-structured content, case studies, an online legal academy, and client engagement through newsletters and social media. Technically, the site uses modern tools including Pimcore CMS, Google Tag Manager, and Matomo analytics, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical and justified for legal firms. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

A

Adresář Farmářů

adresarfarmaru.cz

60

Adresář Farmářů operates as an online directory and map-based platform focused on connecting consumers with farmers and related shopping and services primarily in the Czech Republic. The website leverages modern web technologies including Angular and integrates third-party analytics and social media SDKs to enhance user engagement and tracking. The platform appears to serve a niche market, providing localized listings and user contributed content to facilitate discovery of farming-related services. Despite the lack of WHOIS registration data, the website presents a professional and consistent brand image with a clear target audience of consumers seeking local farm products and services. Technical infrastructure is modern but could benefit from enhanced security headers and explicit privacy and terms of service documentation. The security posture is moderate with HTTPS in use but missing some best practice headers and policies. Overall, the site is accessible, safe, and functional, but improvements in compliance and transparency would strengthen trust and credibility.

S

Sedmá generace

sedmagenerace.cz

54

Sedmá generace is a Czech socio-ecological magazine established in 1991, focusing on social and environmental issues such as nature protection, renewable energy, alternative economy, and human and animal rights. The website serves as a digital platform for publishing articles, news, and podcasts, supporting subscriptions and donations. It maintains a consistent brand presence and targets a general audience interested in ecological and societal topics. Technically, the site is built on WordPress with WooCommerce, employing modern web technologies and integrating Google Analytics and Tag Manager for tracking. The site demonstrates good SEO practices and mobile optimization. Security-wise, the site uses HTTPS and cookie consent mechanisms compliant with GDPR, though it lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

D

Dogfish

dogfish.cz

42

Dogfish is a Czech digital agency specializing in web design, web applications, graphic design, video production, and e-commerce solutions. The company positions itself as a professional and experienced provider with a strong portfolio and client testimonials, targeting businesses seeking digital transformation and marketing support. The website is built on WordPress and incorporates modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, Dogfish demonstrates a solid digital presence with good business credibility and technical implementation.

C

CODERS.BAY

codersbay.at

60

CODERS.BAY is a technology-focused company specializing in software development and IT solutions, positioned as an award-winning and recognized player in its industry. The website is built on WordPress using a professional commercial theme and incorporates modern JavaScript libraries to enhance user experience. The technical infrastructure shows moderate digital maturity with good mobile optimization and SEO practices, including structured data and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and cookie consent blocking tracking scripts until user approval; however, the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices to strengthen compliance and user trust.

SLV GmbH operates a professional e-commerce platform specializing in high-quality lighting products for both residential and commercial customers, emphasizing German engineering and product reliability. The website is well-structured, multilingual, and targets a broad European market with a focus on Germany. The technical infrastructure leverages modern technologies including Spryker Commerce OS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and trust signals mitigate this concern. Strategic recommendations include publishing detailed security and incident response policies, providing direct contact information, and verifying domain registration details to enhance trust.

S

StudentPoint.cz

studentpoint.cz

53

StudentPoint.cz is a Czech online media portal primarily targeting students and young adults interested in lifestyle, travel, and product reviews. The site offers a broad range of articles covering student life, pop culture, and adult-oriented content such as erotic products and dating site reviews. Its business model relies heavily on affiliate marketing, especially for adult and dating services. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, with performance optimizations and tracking tools like Google Analytics and Sentry integrated. Security posture is adequate with HTTPS enabled and some monitoring in place, but lacks comprehensive security headers and explicit privacy or cookie policies. The absence of WHOIS registrant data reduces domain trustworthiness, though the professional presentation and consistent branding support legitimacy. Overall, the site serves a niche adult audience with a focus on content and affiliate revenue.

F

Farstad & Co

farstad.co

59

Farstad & Co is a specialty coffee roastery and coffee bar located in Skien, Norway, with a rich history dating back to 1955. The company operates a physical coffee bar, an online store offering specialty single-origin coffees, subscription services, and corporate coffee solutions. Positioned as Skiens eneste kaffebrenneri, Farstad & Co emphasizes quality, origin transparency, and a passion for the coffee experience. The website reflects a modern digital presence built on Next.js and Crystallize, integrating analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers, though cookie consent mechanisms are absent. Contact information is clearly presented, enhancing business credibility. The domain registration aligns well with the business claims, supporting legitimacy.

N

Nomono

nomono.co

63

Nomono is a Norway-based technology company specializing in AI-powered spoken audio platforms and wireless recording devices. Their business model combines hardware sales with cloud-based SaaS subscription services, targeting creators such as podcasters and storytellers who require high-quality audio production tools. The website presents a professional and modern digital presence, leveraging advanced web technologies including Next.js, React, and integrations with HubSpot and Segment for marketing and analytics. The site is well-optimized for performance and mobile use, with clear navigation and strong branding consistency. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are not publicly linked. Overall, Nomono demonstrates a mature technical infrastructure and a credible market position within the audio technology niche.

S

Snowball Digital AS

snowball.digital

67

Snowball Digital AS is a Norwegian-based design and technology agency specializing in digital product strategy, UX/UI design, branding, development, and growth marketing. The company targets growth-focused businesses seeking innovative digital solutions and seamless end-to-end experiences. Their market position is that of a specialized boutique agency with a focus on digital transformation and product innovation. Technically, the website is built on modern frameworks such as React and Next.js, leveraging a headless CMS (Crystallize) and integrating analytics tools like Google Analytics and Hotjar. The site is mobile-optimized and presents a professional, consistent brand image. Security-wise, the website uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and a cookie consent mechanism, which are recommended for improved compliance and security posture. Overall, the domain WHOIS data is privacy protected, which is typical for small agencies, and the website content and contact information support the legitimacy of the business.

O

Okay

okaythis.com

63

Okay is a Norway-based company founded in 2018 that provides advanced, modular authentication solutions tailored for fintechs, banks, and enterprises. Their platform focuses on balancing security, compliance, and user experience by offering identity verification, strong customer authentication, passwordless access, and compliance management services. The company positions itself as a trusted partner in the financial technology sector, emphasizing rapid deployment and regulatory adherence such as PSD2 and GDPR. Technically, the website is built using modern frameworks like Next.js and React, hosted on Vercel, and integrates analytics and consent management tools to ensure performance and privacy compliance. Security posture is strong with HTTPS enforcement and clientTransferProhibited domain status, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, well-structured, and trustworthy, with comprehensive content and clear business focus.

N

New Normal Group

newnormalgroup.com

62

New Normal Group is an entrepreneurial software group focused on incubating and building technology companies that redefine industry norms through intelligent API-driven solutions. Their portfolio includes subsidiaries specializing in e-commerce, IoT, cybersecurity, AI, digital services, and financial services, positioning them as a versatile player in the technology sector. The company targets forward-looking enterprises and high-growth ventures, leveraging over 20 years of entrepreneurial experience. Technically, the website is built on modern frameworks such as Next.js and integrates analytics and user behavior tools like Google Analytics and Hotjar, indicating a mature digital infrastructure. However, there are gaps in privacy compliance and explicit security policies. Security posture is generally good with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Overall, the website is professional, trustworthy, and well-branded, though improvements in privacy and security transparency are recommended.

S

Sucht Schweiz

suchtschweiz.ch

62

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a clear mission focused on research, prevention, information dissemination, and advocacy. The website reflects a mature digital presence with multilingual support, professional design, and modern web technologies including WordPress, Yoast SEO, and Usercentrics for cookie consent. It prominently features donation options and provides extensive content on addiction-related topics, targeting both the general public and professionals in the field. Technically, the site is well-implemented with good SEO, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially met with a cookie consent mechanism but no visible privacy or terms of service pages. Contact information is not explicitly provided in the HTML content, which could be improved for transparency. Overall, the website is trustworthy and professional, with a strong alignment between WHOIS data and business claims, indicating legitimacy. The content is safe for a mature audience, focusing on health and addiction prevention without any explicit or NSFW material.

N

Naughty Harbor s.r.o.

naughtyharbor.cz

58

Naughty Harbor s.r.o. operates a Czech Republic-based adult e-commerce website specializing in the sale of realistic silicone sex dolls and related accessories, alongside a sex doll private rental service in Prague. The website targets an adult audience exclusively, offering a broad catalog of products categorized by appearance, size, and brand. The business positions itself as a niche market leader in the Czech adult toy and service sector, emphasizing quality and customer experience through reviews and detailed product information. Technically, the website is built on the Shoptet e-commerce platform, utilizing a mix of legacy and modern web technologies including jQuery 1.11.3, Google Tag Manager, Google Analytics (GA4), Hotjar, and Mouseflow for analytics and user behavior tracking. The site is HTTPS secured and implements cookie consent mechanisms, though it lacks visible security headers and up-to-date privacy documentation. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but it does not publish a privacy policy or terms of service in the analyzed content, nor does it provide a security.txt or vulnerability disclosure mechanism. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. Overall, the website presents a professional and functional adult e-commerce platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and regulatory adherence.

A

Ateliér ŠUM

kurzyuzuzy.cz

47

Ateliér ŠUM is a small art education business based in Prague 1, offering a wide range of creative courses including drawing, painting, ceramics, jewelry making, and online lessons. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Google Analytics integration, providing a good user experience and clear navigation. Contact information including phone, email, and physical address is prominently displayed, supporting business credibility. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. The WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy of the site based on content and contact details. Security posture is good with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and a vulnerability disclosure policy.