Security Directory

T

Toka

tokagroup.com

69

Toka is a specialized cybersecurity and digital forensics company focused on providing advanced lawful digital forensics, intelligence, and force protection solutions primarily to government, law enforcement, and security agencies. Their offerings include forensic investigations, targeted intelligence, covert operations, and national-level cyber capacity building services. The company positions itself as a trusted partner in homeland security and cyber defense, with recognition from entities such as the World Bank and StateUp. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery and Glide.js for UI components, and integrates Google Analytics and Google Tag Manager for analytics and marketing. The site is mobile optimized with good design quality and clear navigation, though accessibility features are basic. Performance is moderate, typical of Webflow-hosted sites. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML. However, it lacks visible security headers and does not provide public security policies or incident response contacts. The absence of privacy and cookie policies is a compliance gap, especially for GDPR. The WHOIS data is missing or indicates the domain may not be registered, which is a significant trust concern. Overall, while the business and technical presentation is professional and targeted, the lack of WHOIS transparency and privacy compliance documentation reduces trustworthiness. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance credibility and compliance.

L

Liquid Instruments

liquidinstruments.com

68

Liquid Instruments is a technology company specializing in innovative software-reconfigurable hardware platforms designed for scientists, engineers, students, and professionals in test and measurement fields. Their flagship product, Moku, offers multi-instrument modes and cloud compilation services, positioning them as a niche leader in scientific instrumentation. The website reflects a professional and modern digital presence, leveraging WordPress with advanced marketing and analytics integrations such as HubSpot, Google Analytics, and Hotjar. The technical infrastructure is robust, hosted on DreamHost with a secure HTTPS configuration and a consistent branding approach. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and no detected vulnerabilities, although some security headers could be enhanced. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website demonstrates a mature digital footprint with good business credibility and technical implementation.

P

Propine

propine.com

72

Propine is a Singapore-based enterprise-grade digital asset custodian specializing in custody, tokenization, trading, and DeFi solutions for institutional clients. The company holds a Capital Markets Services (CMS) license from the Monetary Authority of Singapore (MAS), positioning it as a trusted and regulated player in the digital asset custody market in Asia. Their platform targets banks, family offices, asset managers, corporates, exchanges, and protocol foundations, offering services such as Digital Custody ProTect™, Tokenization DASH™, and white label custody solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on institutional clientele. Technically, the website is built on WordPress using Elementor and several modern plugins like Yoast SEO and WP Rocket, hosted on AWS infrastructure. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, there is room for improvement in accessibility and security headers. The domain is mature, registered since 2001, and shows consistency with the business claims, enhancing trustworthiness. Security posture is solid with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security policies or incident response information. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is primarily via forms, with no direct emails or phone numbers publicly listed. Overall, Propine presents as a credible and professional digital asset custody provider with a strong market position in Asia. Enhancing privacy compliance, security transparency, and adding direct contact channels would further strengthen trust and regulatory adherence.

J

JustPaid

justpaid.ai

69

JustPaid is a technology-driven SaaS company specializing in AI-powered revenue operations and billing automation. Their platform streamlines invoicing, payment collections, and customer communications, targeting financial experts, entrepreneurs, and accountants. The company is positioned as an innovative player in the finance technology sector, supported by Y Combinator backing, which enhances its market credibility. The website demonstrates a high level of professionalism, with comprehensive content and clear navigation, reflecting a mature digital presence. Technically, JustPaid leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot, Hotjar, and various tracking and marketing tools. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Hosting is provided by Webflow, a reputable platform for SaaS startups. From a security perspective, the site enforces HTTPS and employs standard marketing and analytics scripts. However, explicit security headers are not detected, and there is no public incident response or vulnerability disclosure information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The lack of exposed sensitive data and professional content supports a positive security posture. Overall, the risk assessment indicates a legitimate and trustworthy business with minor recommendations to enhance security headers and incident response transparency. The domain WHOIS data is privacy protected, which is typical for startups and does not raise immediate concerns. Strategic recommendations include improving security policy visibility, adding vulnerability disclosure, and enhancing trust signals through certifications or security frameworks.

Q

Qupital

qupital.com

56

Qupital is a fintech company founded in 2016, specializing in providing data-driven funding solutions for e-commerce businesses, particularly in the cross-border market. The platform offers financing services to e-commerce sellers and an investment platform for investors seeking alternative investment opportunities. The website is multilingual, targeting primarily Hong Kong and broader Chinese-speaking markets, with English support. The business model leverages big data to optimize financing and investment decisions, positioning Qupital as a niche player in fintech for e-commerce.

S

SPRX

sprx.tax

57

SPRX is a technology-driven company specializing in AI-powered software solutions for corporate tax incentives, specifically R&D tax credits, 179D deductions, and cost segregation. Their platform integrates with popular enterprise software to streamline data collection and uses AI to accelerate and improve the accuracy of tax credit claims. The company positions itself as a modern alternative to traditional tax firms by offering faster turnaround times and audit-ready reports, targeting medium-sized corporate clients primarily in the finance and technology sectors. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including jQuery, Google Fonts, and Amazon Cloudfront CDN for performance optimization. The site is mobile responsive and well-structured with good SEO practices, though accessibility features are basic. No major technical issues or vulnerabilities were detected in the front-end code. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and published security policies. There is no evidence of privacy or cookie policies, which is a compliance gap especially for GDPR. The absence of WHOIS data limits domain trust verification, though the professional presentation and client testimonials provide positive trust signals. Overall, SPRX demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

Nasdaq Baltic operates as the regional stock exchange platform for the Baltic countries of Estonia, Latvia, and Lithuania, providing trading services for shares, bonds, and funds. The website serves investors, companies, brokers, and advisers by offering real-time market data, news, and capital raising facilitation. It is part of the larger Nasdaq Inc. corporate group, reflecting a strong market position in the finance sector. The site is professionally designed with consistent branding and clear navigation, targeting financial market participants and stakeholders in the Baltic region. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, jQuery, Swiper.js, and Highstock for data visualization. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile optimized and SEO friendly, with structured data enhancing search engine understanding. Hosting and domain registration are managed by reputable providers, ensuring stable infrastructure. From a security perspective, the site enforces HTTPS and employs domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Overall, Nasdaq Baltic's website demonstrates a mature digital presence with strong business credibility and good security hygiene. Strategic improvements could focus on enhancing DNS security, publishing formal security policies, and expanding incident response transparency to further strengthen trust and compliance.

W

WebActive s.r.o.

vivus.cz

64

The website www.vivus.cz represents a real estate business focused on selling new apartments in Prague, Czech Republic. The company behind the site is WebActive s.r.o., which appears as the developer and author of the website. The site showcases multiple ongoing and sold residential projects across various Prague districts, targeting individuals seeking affordable new housing. The business model centers on real estate development and sales, with a medium-sized market presence in the Prague region. Technically, the website is built on WebJET CMS and uses common web technologies such as jQuery and Bootstrap for responsive design. The site is well-structured with good SEO practices and mobile optimization. Cookie consent mechanisms are implemented, indicating some level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site uses HTTPS (implied by canonical URLs) but lacks visible security headers and advanced security policies. No WHOIS data was retrievable for the domain, which raises concerns about domain registration legitimacy and trustworthiness. No incident response or security contact information is provided. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk assessment suggests the website is functional and professional but has gaps in domain legitimacy verification and privacy compliance. Strategic recommendations include publishing privacy and terms policies, improving security headers, and clarifying domain registration details to enhance trust and compliance.

M

Město Krásná Lípa

krasnalipa.cz

57

Město Krásná Lípa operates an official municipal website serving residents, tourists, and local stakeholders by providing comprehensive information about the town, its administration, cultural events, and public services. The website reflects a well-established local government entity with a domain registered since 1999, consistent with its long-standing municipal role. The content is rich, relevant, and professionally presented, targeting local citizens and visitors interested in the region. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and integrates an AI chatbot for enhanced user interaction. The site is mobile-optimized with good navigation and content structure, though it lacks some advanced accessibility features and cookie consent mechanisms. Hosting appears to be managed by a Czech registrar and hosting provider, ensuring regional consistency. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security or incident response policies. No vulnerability disclosure or security.txt files are present. Privacy compliance is partially addressed with a GDPR page but no cookie consent banner. Contact information is clearly provided, enhancing trustworthiness. Overall, the website presents a moderate to good security posture with room for improvement in privacy compliance and security best practices. The domain WHOIS data aligns well with the website content, indicating high legitimacy and trust. Strategic recommendations include implementing cookie consent, security headers, and publishing security policies to enhance compliance and user trust.

D

Dráha národního parku

drahanp.cz

44

Dráha národního parku operates as a specialized regional tourism and transportation information platform focused on the Czech and Saxon Switzerland national parks and surrounding protected areas. The website provides comprehensive travel information including railway routes, bus connections, trip recommendations, ticketing, and timetables, targeting tourists and visitors interested in exploring these natural regions. The business model centers on promoting sustainable travel experiences by train and bus, supported by partnerships with regional transport and tourism organizations. Technically, the website is built on WordPress with common plugins such as LayerSlider, Contact Form 7, and Yoast SEO, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy and incident response policies are absent. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy documentation and security best practices to improve compliance and user trust.

L

Lappset GmbH

lappset.de

57

Lappset GmbH operates as a manufacturer and supplier of innovative playground and sports equipment, targeting organizations and communities interested in promoting active play and social interaction. The website presents a professional and consistent brand image with good content quality and user experience, primarily in German. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for consent management and analytics. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the provided content. Overall, the website is trustworthy and well-maintained, with room for improvement in transparency and security best practices.

The website 'Spordin puhtalt!' is an Estonian e-learning platform dedicated to educating amateur athletes about antidoping rules, prohibited substances, and healthy sports practices. It is operated by SA Eesti Antidoping and supported by notable Estonian sports figures and international partners such as UNESCO. The platform offers educational content, exercises, videos, and testimonials to promote clean sports. Technically, the site is built on WordPress with common plugins and uses HTTPS with a moderate performance profile. However, it lacks visible privacy and cookie policies and security headers, which are areas for improvement. The absence of explicit contact emails or phone numbers limits direct communication channels, though a contact form is present. Overall, the site is trustworthy and professionally presented but could enhance its privacy compliance and security posture.

E

Ettevõtja infovärav Aktiva

aktiva.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages, including startups, operating companies, and those expanding internationally. The platform offers practical guidance, resources, and insights to help businesses succeed, with content tailored to the Estonian market and language. The website is positioned as a trusted resource for business knowledge and development in Estonia, with a clear focus on entrepreneurship and business growth.

F

FCI Levadia

fcilevadia.ee

31

FCI Levadia is an Estonian football club with an online presence primarily focused on providing football-related content and engaging with local sports fans. The website is built on WordPress and utilizes common plugins such as Yoast SEO and WP Rocket to enhance SEO and performance. The technical infrastructure is moderate, hosted by Zone Media OÜ, a known Estonian registrar and hosting provider. The site is accessible without any WAF or security challenge blocking content. However, the website lacks critical privacy and cookie policies, contact information, and published security or incident response policies, which are important for compliance and trust. Security posture is basic with no advanced headers or vulnerability disclosures evident. Overall, the site is functional but would benefit from improvements in privacy compliance, security best practices, and business transparency.

C

Citadele pank

citadeleleasing.ee

46

Citadele pank is a well-established financial institution in Estonia offering leasing services primarily focused on vehicle financing. The website provides detailed leasing options, including a calculator and a dedicated leasing portal for customers to manage their contracts and applications. The business targets private individuals seeking flexible leasing solutions with personalized interest rates and competitive terms. The company is part of the larger Citadele Group, indicating a strong market position in the Baltic financial sector. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, with a CMS likely being October CMS. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS, uses security headers, and implements cookie consent mechanisms, though explicit security and incident response policies are not publicly available. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the website reflects a professional and trustworthy financial service provider with room for improvement in transparency around security policies and incident response.

C

Citadele

xrewards.ee

68

The website www.xrewards.ee represents the C REWARDS loyalty and discount program affiliated with Citadele bank, targeting C card holders primarily in Estonia and the Baltic region. The platform offers users the ability to earn points on purchases and redeem them for discounts and prizes, integrating banking services with retail loyalty. The website is built on Magento CMS with modern frontend technologies including RequireJS and jQuery, and is monitored using New Relic and Google Tag Manager. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the site demonstrates a mature digital infrastructure aligned with the business goals of Citadele bank's loyalty program.

S

Sustinere

sustinere.eu

60

Sustinere is a medium-sized advisory firm specializing in ESG and sustainability transformation services primarily in the Baltic region. Founded in 2016, the company offers a blend of expert consulting and digital solutions to help clients navigate ESG regulations, develop sustainability strategies, and assess climate impact. Their market position is supported by a team of over 25 experts and a client base spanning 11 sectors, including energy, banking, manufacturing, and retail. The website reflects a professional and consistent brand image with good content quality and clear navigation.

S

Schoox

bniuniversity.com

54

Schoox operates a sophisticated learning management system platform designed to empower organizations in training, engaging, and developing their workforce. The website analyzed is the login portal for the Schoox LMS, featuring a professional design and integration with Google OAuth for authentication. The platform targets organizational clients seeking scalable LMS solutions and positions itself as an established player in the education technology sector. Technically, the site leverages modern frameworks such as Angular and includes device fingerprinting for security and analytics purposes. The security posture is strong with HTTPS enforced and CSRF protections in place, though there is room for improvement in security headers and cookie consent mechanisms. Privacy policies and terms of service are clearly linked and appear comprehensive, supporting GDPR compliance. Overall, the site presents a moderate to high level of trustworthiness and professionalism, suitable for enterprise use.

B

BNI

bnipodcast.com

64

The Official BNI Podcast website serves as a professional content platform delivering weekly audio discussions led by Dr. Ivan Misner, founder of BNI, the world's largest business networking organization. The site targets business professionals seeking networking education and referral strategies, positioning itself as an authoritative media outlet within the business networking niche. The business model revolves around content publishing, podcast distribution, and educational sponsorships, supported by partnerships with related training and audio program providers. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and various social sharing and marketing plugins. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. Security posture is solid with HTTPS enforced and some security best practices observed, but lacks advanced security headers and a formal vulnerability disclosure mechanism. From a security and compliance perspective, the site includes a cookie consent mechanism indicating GDPR awareness, but lacks a clearly linked privacy policy and terms of service pages. Contact information is limited to forms and subscription emails, with no explicit company emails or phone numbers found. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating domain registration issues or privacy protection, which impacts trustworthiness. Overall, the website is professionally maintained with high-quality content and strong brand association with BNI. However, the missing WHOIS data and incomplete privacy documentation suggest areas for improvement in transparency and compliance. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, verifying domain registration legitimacy, and improving accessibility features to strengthen trust and compliance.

S

Schoox

bnibusinessbuilder.com

64

Schoox operates a professional learning management system platform designed to empower organizations with innovative LMS solutions for employee training, engagement, and development. The website analyzed is a login portal for the Schoox LMS, featuring integration with Google Sign-In and mobile app download links, targeting organizational users. The platform positions itself as a SaaS provider in the education technology sector with a medium-sized market presence. Technically, the site employs modern JavaScript frameworks such as AngularJS and libraries like jQuery and MomentJS, alongside device fingerprinting and Google APIs. The site demonstrates moderate performance and basic mobile optimization. The presence of CSRF tokens and reCAPTCHA integration indicates attention to security, although no explicit security headers were detected in the HTML content. From a security perspective, the site uses HTTPS (implied by the URL), secure form practices, and spam prevention mechanisms. However, the absence of visible security headers and cookie consent mechanisms suggests room for improvement in security hardening and privacy compliance. No direct contact emails or phone numbers were found, but a help widget provides a contact form. The WHOIS data for the subdomain is unavailable, which is typical for subdomains, but the main domain schoox.com is a known legitimate LMS provider. Overall, the website presents a trustworthy and professional LMS login portal with good technical implementation and business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the security posture and user trust.

M

Miltton

miltton.com

53

Miltton is a well-established consultancy agency founded in 2007, specializing in business, communications, and design services aimed at enabling impactful change for organizations. The company operates across multiple European markets with subsidiaries and regional sites, positioning itself as a strategic partner for business transformation, branding, and communications. The website reflects a mature digital presence with rich content including case studies, insights, and news updates, targeting businesses and organizations seeking consultancy and creative solutions. Technically, the site is built on WordPress with modern technologies such as Tailwind CSS, jQuery, and integrates advanced SEO and analytics tools like Yoast SEO, Matomo, and Google Tag Manager. Mobile optimization and accessibility are well addressed, providing a seamless user experience across devices. Security posture is good with HTTPS enforced and privacy compliance supported by Cookiebot for consent management, although some security headers and DNSSEC are missing. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the site demonstrates high professionalism and trustworthiness with minor areas for security enhancement.

R

Rollmer OÜ

rollmer.ee

41

Rollmer OÜ is an established Estonian company specializing in the sale of industrial accessories including bearings, seals, and power transmission products. The company operates both retail and wholesale channels with physical stores located in Tallinn and Tartu, targeting industrial, agricultural, forestry, service, and retail businesses. The website reflects a professional presence with clear product categories and consistent branding, supporting its market position as a regional supplier. Technically, the site is built on WordPress using the Enfold theme and Yoast SEO plugin, indicating moderate digital maturity. However, the absence of HTTPS enforcement and security headers represents a significant security gap. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. The site lacks active analytics tracking despite plugin presence, suggesting limited user data collection. Overall, the security posture is moderate but requires improvements to meet modern standards. Strategic recommendations include implementing HTTPS, adding security headers, establishing privacy and cookie policies, and enhancing incident response capabilities to strengthen trust and compliance.

I

International Table Tennis Federation

ittf.com

62

The International Table Tennis Federation (ITTF) operates as the global governing body for the sport of table tennis, providing comprehensive event management, rankings, anti-doping enforcement, and governance services. The website serves as the official platform for news, event calendars, and educational resources targeting players, officials, fans, and stakeholders worldwide. The organization maintains a professional digital presence with consistent branding and structured data to enhance search visibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for social media integration and video embedding. The site is mobile optimized and demonstrates good SEO practices, though performance is moderate. Analytics and marketing tools such as Google Analytics and AddThis are used for user tracking and engagement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks some security headers and explicit incident response contacts. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism, which may affect GDPR compliance. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for such organizations. Overall, the ITTF website is a credible, well-maintained platform with good content quality and technical implementation. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and trustworthiness.

T

TIBHAR

tibhar.info

52

TIBHAR is a well-established German company specializing in the design and production of high-quality table tennis equipment since 1969. The website serves as a retail and promotional platform targeting ambitious table tennis players worldwide. It features multilingual support and integrates modern web technologies such as WordPress, WooCommerce, and Elementor, reflecting a mature digital infrastructure. The site includes embedded video content and social media integration, enhancing user engagement and brand presence. From a security perspective, the website employs HTTPS and domain transfer protections but lacks DNSSEC and visible security headers, indicating room for improvement in hardening its security posture. Privacy compliance is well addressed with GDPR cookie consent mechanisms and a comprehensive privacy policy. Overall, the website demonstrates good professionalism, trustworthiness, and technical implementation, supporting the company's market position in the sports retail sector.

E

Eesti Antidopingu ja Spordieetika Sihtasutus

eadse.ee

43

Eesti Antidopingu ja Spordieetika Sihtasutus is a government-affiliated non-profit organization dedicated to promoting fair play, anti-doping measures, and ethical conduct in sports within Estonia. The organization provides education, prevention, and regulatory oversight services to athletes, sports organizations, and the public. The website serves as an informational and educational platform with resources, news, and training offerings related to sports ethics and anti-doping. Technically, the website is built on WordPress using the Avada theme and integrates modern plugins such as Yoast SEO and Revolution Slider. It employs Google Analytics for visitor tracking but lacks visible cookie consent mechanisms and privacy policy disclosures, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but security headers and incident response information are absent. Overall, the website is professional, well-branded, and trustworthy, though it would benefit from enhanced privacy compliance and explicit contact details.

P

PD Instore

neoinstore.com

43

NEO Retail Displayware is a specialized retail merchandising company offering innovative pegboard hardware and signage solutions under the patented neoPEGS™ brand. Their products target retail businesses seeking modern, customizable, and cost-effective displayware. The website is built on WordPress using WPBakery Page Builder and includes standard web technologies such as jQuery and FontAwesome. The technical infrastructure is moderate in performance with good mobile optimization but basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.

R

Restaurace Mincovna

restauracemincovna.cz

45

Restaurace Mincovna is a well-established restaurant located in the prestigious Staroměstské náměstí in Prague, offering traditional Czech cuisine with a modern twist and a selection of wines and Pilsner tank beer. The business targets both tourists and local patrons, leveraging its historic ambiance and prime location to maintain a strong market position in the hospitality sector. The website reflects a professional digital presence with clear branding and comprehensive business information. Technically, the website is built on WordPress with modern analytics and marketing tools integrated, including Google Analytics 4 and Google Tag Manager. The site implements a robust cookie consent mechanism aligned with GDPR requirements, enhancing privacy compliance. Performance and mobile optimization are good, though accessibility features are basic. No significant technical vulnerabilities were detected, but security headers could be improved. From a security perspective, the site uses HTTPS and employs cookie consent management, but lacks visible security headers and a public security or incident response policy. The absence of WHOIS data limits domain trust verification, though the website content and business details appear legitimate. Overall, the site demonstrates a moderate to good security posture with room for enhancement in transparency and technical security controls. Strategically, the business should focus on improving security headers, publishing incident response and vulnerability disclosure policies, and obtaining verifiable WHOIS data to enhance trust. Continued investment in privacy compliance and user experience will support sustained market credibility and customer trust.

V

VeKaPa s.r.o.

utelleru.cz

48

Restaurant U Tellerů is a small hospitality business located in Prague, Czech Republic, specializing in modern Czech cuisine and charcoal-grilled steaks. The restaurant emphasizes quality dining experiences with a focus on local specialties and beverages such as Pilsner Urquell beer. The website supports reservations and offers gift vouchers, targeting local and tourist diners seeking authentic Czech culinary experiences. The business maintains an active presence on social media platforms including Facebook, Instagram, Pinterest, and TripAdvisor, enhancing its market visibility and customer engagement. Technically, the website is built on WordPress CMS, utilizing common plugins for analytics, cookie consent, and responsive design. It integrates Google Analytics 4, Facebook Pixel, and Google Tag Manager for marketing and tracking purposes, with a compliant cookie consent mechanism in place. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in features, reflecting a good privacy posture. However, the absence of security headers and a published privacy policy or incident response information indicates areas for enhancement. The WHOIS data is unavailable, which raises concerns about domain registration transparency but does not directly impact the website's operational legitimacy. Overall, the website presents a professional and trustworthy front for the restaurant business, with recommendations to improve security practices, publish comprehensive privacy and security policies, and verify domain registration details to strengthen trust and compliance.

B

Bloom Robbins HU

bloomrobbins.hu

55

Bloom Robbins HU operates as a specialized e-commerce platform focused on selling hair vitamin supplements to the Hungarian market. The website presents a clear business focus on hair health products, leveraging a Shopify-based infrastructure that supports a modern and responsive user experience. The company targets consumers seeking nutritional support for healthy and long hair, positioning itself within a niche segment of the health and beauty industry. The site is well-branded and consistent, with a professional design and good content relevance.

B

Bloom Robbins PL

bloomrobbins.pl

64

Bloom Robbins PL operates as a regional e-commerce retailer specializing in online sales through a Shopify platform, targeting primarily the Polish market with localized content and dedicated country-specific stores for other European countries. The website demonstrates a mature digital infrastructure with integration of modern marketing and analytics tools such as Google Tag Manager, Klaviyo, and Facebook Pixel, supporting effective customer engagement and data-driven marketing strategies. The site is well-optimized for mobile devices and incorporates GDPR-compliant cookie consent mechanisms, reflecting a commitment to privacy and regulatory adherence. Security posture is strong with HTTPS enforced and appropriate security headers, although the absence of explicit Terms of Service and security policy pages suggests room for improvement in transparency and customer trust. The lack of WHOIS data from the Polish registry limits domain trust assessment but does not detract significantly from the overall professional presentation and operational maturity of the website.

T

TESCO

tesco.cz

39

TESCO.cz is a Czech-based technology business specializing in servers and workstations, primarily offering Intel platform servers, server components, custom configurations, and maintenance services. The website presents a straightforward informational portal targeting businesses requiring reliable IT infrastructure hardware. The domain has a long history dating back to 1997, supporting the company's established market presence. Technically, the website uses jQuery and Google Analytics but lacks modern CMS or advanced frameworks. The site is basic in design and functionality, with limited mobile optimization and accessibility features. Security posture is moderate but lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, but no forms or social media links are available. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and technical modernization.

The website 'jarwoadmin.com' operates as a niche Indonesian platform providing RTP slot game tips and patterns, targeting slot game players and gamblers in Indonesia. The business model revolves around sharing RTP percentages and slot game 'gacor' (hot) hours to attract users interested in online slot gambling. The site is relatively new, with domain registration dating back to March 2023, aligning with the recent launch and content focus. Technically, the website employs Bootstrap and jQuery for its frontend, hosted behind Cloudflare DNS, ensuring basic performance and security. However, the site lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. From a security and compliance perspective, the website does not provide privacy, cookie, or terms of service policies, nor does it offer contact or incident response information, which are critical for trust and regulatory compliance. Overall, the site is accessible without WAF or security challenges but scores low on privacy compliance and business credibility due to missing essential policies and contact details.

The website plaquenilhcl.com operates as a small-scale WordPress blog focused on providing news and tips related to online gambling, specifically Togel and slot games, targeting Indonesian-speaking audiences. The site leverages common WordPress technologies and plugins such as Yoast SEO, Bootstrap, and jQuery, hosted behind Cloudflare DNS with domain registration via Dynadot Inc. The technical infrastructure is standard for a content blog, with moderate performance and good mobile optimization but lacks advanced security configurations such as DNSSEC and security headers. From a security perspective, the site uses HTTPS but does not implement additional security headers or DNSSEC, which could improve its security posture. There are no visible privacy, cookie, or terms of service policies, nor any contact or incident response information, which indicates low privacy compliance and limited business credibility. The absence of contact emails and phone numbers further reduces trustworthiness. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents basic content quality and technical implementation suitable for a small niche blog but falls short in privacy compliance and security best practices. Strategic improvements in policy transparency, security headers, and contact information would enhance trust and compliance.

The website awaunipa.org operates as a niche content platform focused on Indonesian online gambling, specifically togel (lottery) and slot games. It provides informational articles, tips, and predictions aimed at Indonesian players interested in these gambling activities. The business model appears to be content-driven with potential affiliate marketing links to gambling sites. The domain is registered in the US with Dynadot since 2020, which aligns with the site's operational timeline but shows some mismatch with the target Indonesian audience. Technically, the site is built on WordPress with common plugins like Yoast SEO and jQuery, hosted behind Cloudflare DNS but without advanced security headers or DNSSEC enabled. The site is accessible with no WAF or blocking detected, and it shows moderate SEO optimization and mobile responsiveness. However, it lacks critical privacy, cookie, and terms of service policies, as well as contact or incident response information, which impacts its trustworthiness and compliance posture. The external links include many IP-based domains related to gambling, some of which may be suspicious. Overall, the site scores moderately on content quality and technical implementation but poorly on privacy compliance and business credibility.

The website galewooduniversity.com operates as a small-scale Indonesian content site focused on providing information and predictions related to online togel (lottery) gambling and slot games. It targets Indonesian-speaking users interested in online gambling. The site is built on WordPress, leveraging common web technologies such as jQuery and Font Awesome, and is hosted behind Cloudflare DNS with a domain registered since 2020. The content quality is basic, primarily consisting of blog posts about gambling topics, with limited professional branding or trust signals. Technically, the site is functional with moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate due to HTTPS usage but lacks important security headers and policies. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which impacts compliance and trust. Overall, the site is accessible without WAF or blocking mechanisms but exhibits several gaps in security and privacy best practices.

A

admin

pgn-u23.com

50

The website pgn-u23.com operates as an Indonesian online gambling content platform primarily focused on togel (lottery) and slot games. It provides articles, tips, and guides related to online gambling, targeting Indonesian players interested in these games. The business model appears to be content-driven with potential affiliate marketing links to gambling services. The site is relatively small and was founded in 2021, with content in the Indonesian language and a moderate level of content quality and branding consistency. Technically, the site is built on WordPress with common libraries such as jQuery and FontAwesome, and uses Yoast SEO for optimization. Hosting is supported by Cloudflare DNS and the domain is registered via NameCheap. The site is moderately performant and mobile-optimized but lacks advanced accessibility features. SEO is adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which lowers its security posture. There are no visible privacy or cookie policies, incident response plans, or vulnerability disclosure mechanisms, which raises compliance and trust concerns. Contact information is minimal, limited to a phone number and a search form, with no verified company emails or physical addresses. The domain registration is transparent and consistent with the website's business focus, but the overall trustworthiness is reduced by the lack of security and privacy best practices. Overall, the site is functional and content-rich for its niche but requires significant improvements in privacy compliance, security hardening, and business credibility to enhance user trust and regulatory adherence.

A

admin

danzat.org

52

The website danzat.org operates as a small-scale Indonesian language blog focused on providing tips, tricks, and information related to online gambling, specifically togel and slot games. It targets Indonesian online gambling enthusiasts and functions primarily as a content publishing platform with affiliate marketing elements. The site is built on WordPress, utilizing common plugins such as Yoast SEO and jQuery, hosted behind Cloudflare DNS with domain registration via NameCheap using privacy protection services. The technical infrastructure is moderate in performance and mobile optimization, with basic accessibility and SEO implementations. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, and no visible incident response or security policies. Privacy compliance is poor, with no privacy or cookie policies found, which is a significant gap given the gambling-related content. Overall, the site presents as a niche content provider with moderate technical maturity but with notable gaps in security and privacy compliance.

A

admin

dtp-avariya.net

51

The website www.dtp-avariya.net is a WordPress-based blog primarily focused on Indonesian online gambling content, specifically togel and slot games. It provides articles, tips, and affiliate links targeting Indonesian players interested in online gambling. The site uses common web technologies including WordPress 6.8.1, jQuery, Bootstrap, and Yoast SEO for content optimization. The technical infrastructure is moderate with basic mobile optimization and SEO practices in place. Security posture is weak due to lack of security headers and absence of privacy or cookie policies, although HTTPS is enabled. The WHOIS data is missing, which raises concerns about domain legitimacy and transparency. Overall, the site appears functional but lacks critical compliance and security features, posing risks to user trust and regulatory adherence.

The website princegeorges.org is a small-scale online gambling content platform primarily focused on providing tips, promotions, and information related to togel and slot games. The site targets Indonesian-speaking audiences interested in online gambling. It operates on a WordPress CMS with common plugins such as Yoast SEO and uses Cloudflare for DNS. The technical infrastructure is moderate with basic mobile optimization and SEO practices. Security posture is average with HTTPS enabled but lacks advanced security headers and DNSSEC. The domain is privacy protected, which is common in gambling sites but reduces transparency and trust. No privacy or cookie policies are present, and contact information is limited to a phone number and search forms. Overall, the site shows basic professionalism but lacks comprehensive compliance and security maturity.

A

admin

svenskapen.org

51

The website svenskapen.org is a small-scale WordPress-based blog focused on Indonesian online gambling, specifically togel and slot games. It provides content such as tips, strategies, and affiliate recommendations targeting Indonesian-speaking gambling enthusiasts. The site uses common WordPress plugins including Yoast SEO and EasyMega, and is hosted behind Cloudflare DNS services. The technical infrastructure is moderate with basic mobile optimization and SEO practices but lacks advanced security configurations such as DNSSEC and security headers. The security posture is basic with HTTPS enabled but no visible incident response or privacy policies, which limits trust and compliance. The domain is privacy protected with registrant information withheld, which is common in gambling niches but reduces transparency. Overall, the site presents basic content quality and limited business credibility, with no direct contact or compliance information.

A

admin

fiorellayabar.com

51

Fiorellayabar.com is a small Indonesian online gambling information blog primarily focused on togel and slot games. It provides articles, tips, and guides for players interested in online gambling. The website is built on WordPress with Yoast SEO plugin, uses Cloudflare DNS, and is registered via NameCheap since 2021. The technical infrastructure is modern and mobile-optimized, but performance is moderate. Security posture is basic with HTTPS enabled but lacks security headers and DNSSEC. No privacy, cookie, or terms policies are published, and no contact or incident response information is provided, which reduces trustworthiness. The site links to many external gambling-related domains, some of which appear suspicious due to IP-based URLs. Overall, the site is accessible and functional but lacks critical compliance and security features.

A

admin

hljyjmlt.com

50

The website 'Cara Menang Main Judi Online' is a small-scale Indonesian language blog focused on online gambling, particularly togel and slot games. It provides content related to gambling tips and strategies, targeting Indonesian online gamblers. The business model appears to be content-driven, likely monetized through affiliate links or advertising, although no explicit monetization is visible. Technically, the site is built on WordPress with common plugins and libraries such as Yoast SEO, jQuery, and Bootstrap, hosted behind Cloudflare DNS but without DNSSEC enabled. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but no security headers or DNSSEC, and no visible privacy or cookie policies, which is a compliance concern. No contact or business verification information is provided, reducing trustworthiness. The domain is aged since 2010, registered via GoDaddy, which supports legitimacy, but lack of registrant transparency and suspicious external links reduce confidence. Overall, the site is functional but lacks professionalism, security best practices, and compliance measures.

A

admin

dumbo-dna.org

53

The website dumbo-dna.org is a small-scale Indonesian online gambling information blog focused primarily on togel and slot games. It provides articles, promotions, and links related to online gambling, targeting Indonesian players interested in these games. The site is built on WordPress with common plugins like Yoast SEO and uses Cloudflare DNS services. The technical infrastructure is basic but functional, with HTTPS enabled and moderate performance. However, the site lacks critical privacy and security policies, contact information, and security headers, which lowers its trustworthiness and compliance posture. The domain is privacy protected, which is common in gambling-related sites, but no direct registrant information is available to verify legitimacy fully. Overall, the site is functional but has significant gaps in privacy, security, and business transparency.

A

admin

theconfinesofexcess.com

52

The website 'Permainan Judi Togel Online - Togel Online Indonesia' is a small-scale WordPress blog focused on providing content related to Indonesian online gambling, specifically Togel and slot games. It offers blog articles, gambling site links, and predictions targeting Indonesian gambling enthusiasts. The site uses a standard WordPress infrastructure with Yoast SEO plugin and Cloudflare DNS but lacks advanced technical frameworks or hosting details. Security posture is moderate with HTTPS enabled but missing critical security headers and DNSSEC. No privacy, cookie, or terms policies are present, and no contact information is provided, which impacts trust and compliance. The site links to multiple external domains, some of which appear suspicious or IP-based gambling-related sites, raising potential risk concerns. Overall, the site is functional but basic in content quality, technical implementation, and security, with room for significant improvements in privacy compliance and business credibility.

L

LINANTO LLC

control-webpanel.com

63

Control Web Panel (CWP) is a technology company specializing in providing a free and professional Linux web hosting control panel targeted at system administrators and web hosting providers. Founded in 2016 and operated by LINANTO LLC based in Georgia, the company offers both a free version and a paid PRO version with premium support options. The website serves as a comprehensive platform for product information, support, and community engagement, positioning CWP as a competitive alternative to paid control panels with a strong emphasis on security and usability. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced functionality. The site demonstrates good mobile optimization, clear navigation, and moderate performance. Analytics tools such as Google Analytics and Google Tag Manager are employed for user tracking, with basic privacy and cookie policies in place. From a security perspective, the site uses HTTPS and some security best practices but lacks comprehensive security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, supporting the legitimacy of the website. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance trust and compliance.

S

Sport in place

sport-in-place.com

48

Sport in place is a French-language website focused on fitness, musculation, dance, yoga, and overall well-being lifestyle content. It targets French-speaking fitness enthusiasts seeking advice and methods to improve their sports lifestyle. The site uses WordPress with the Elegant Themes Extra theme and integrates plugins for multilingual support and email subscriptions. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness, which impacts the overall risk profile. Strategic recommendations include improving privacy compliance, adding security headers, and verifying domain registration details to enhance trust.

S

SecurityNet.cz s.r.o.

securitynet.cz

65

SecurityNet.cz s.r.o. is a Czech Republic-based small IT service company specializing in comprehensive internet services including custom website and e-shop development, SEO optimization, custom software development, and hosting solutions. The company targets businesses and individuals requiring tailored IT and hosting services, positioning itself as a reliable provider with a portfolio of reputable clients such as KIKA, Gorenje, and T-Mobile. Their business model focuses on service delivery with an emphasis on quality and client satisfaction. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. The site is mobile optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. Hosting details are not explicitly disclosed, but the presence of a partner hosting domain (hukot.net) suggests collaboration with a specialized hosting provider. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a visible privacy policy, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in their security posture. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced privacy compliance, security header implementation, and improved transparency regarding domain registration and security policies.

SPWeb s.r.o. is a well-established Czech technology company specializing in custom web development, e-commerce solutions, SEO, PPC marketing, and IT infrastructure services primarily serving the Brno region. The company has a strong market position supported by over a decade of experience, positive client testimonials, and Google Partner certification. Their website reflects a professional and modern digital presence with comprehensive service offerings and clear contact information. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Fonts, and multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Smartlook. The site is mobile-optimized, fast-loading, and SEO-friendly, demonstrating a mature digital infrastructure. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended to enhance its security posture. No vulnerabilities or exposed sensitive data were detected, indicating a generally secure environment. Overall, SPWeb s.r.o. presents a credible, trustworthy, and professional business with a strong online presence. The website scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable partner for clients seeking web and IT services.

S

Say Hey

sayhey.be

57

Say Hey is a well-established full-service communication agency based in Belgium, specializing in branding, marketing, content creation, and web development. With over 20 years of experience and a portfolio of more than 300 clients, the company positions itself as a strategic and creative partner for businesses seeking impactful communication solutions. The website reflects a professional and modern digital presence, leveraging advanced JavaScript libraries and a CMS platform (DNN) to deliver a rich user experience. The site is fully accessible without any WAF or security blocking, indicating good operational stability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. However, the WHOIS data for the domain is restricted, limiting transparency about domain registration details. Overall, the website demonstrates high professionalism and trustworthiness, with room for improvement in explicit security and incident response disclosures.

M

Medline

medline.eu

73

Medline Europe operates as a significant healthcare supplier supporting clinicians, patients, and communities. The website presents a professional and consistent brand image with a focus on medical supplies and healthcare services. The company targets healthcare professionals and institutions across Europe, positioning itself as a trusted business partner in the healthcare sector. The digital presence is built on a Magento e-commerce platform, leveraging modern web technologies and third-party services such as Algolia for search and Cookiebot for privacy compliance. The technical infrastructure is mature, with good mobile optimization and SEO practices, although some improvements in accessibility and security headers could enhance the overall quality. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the website is trustworthy and professionally maintained, though WHOIS data is privacy protected, limiting domain age and registrant verification.