N/a security reports

G

GETBTN

getbtn.com

45

GETBTN is a technology-focused company providing customizable widget buttons for websites to integrate popular messaging platforms such as VK, Telegram, Whatsapp, Line Messenger, Skype, and Viber. The service is free and targets website owners and developers seeking to enhance user communication capabilities. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Fonts, with Yandex Metrika for analytics. Hosting and domain registration are consistent and transparent, with the domain registered since 2017 and no privacy protection applied. From a security perspective, the website uses HTTPS but lacks DNSSEC and security headers, which are recommended to improve security posture. No privacy or cookie policies are published, indicating gaps in privacy compliance. No contact information or incident response channels are provided, limiting user trust and support options. The site is not blocked by any WAF or security challenge, allowing full content access and analysis. Overall, GETBTN presents a functional and professional service with moderate security and privacy compliance. Strategic improvements in security headers, privacy policies, and contact transparency would enhance trust and compliance. The domain registration and technical infrastructure support legitimacy, but privacy compliance and security best practices require attention.

W

Before you continue to YouTube

wfaa.com

65

The analyzed domain consent.youtube.com is a subdomain of youtube.com, owned by Google, serving as a consent management interface likely related to GDPR or privacy compliance. The page content is minimal and primarily technical, designed to manage user consent for data processing before accessing YouTube services. The domain is hosted on Google infrastructure and uses modern JavaScript frameworks and Material Design components for UI rendering. Due to the nature of the page, it acts as a gate or checkpoint, limiting access to full content and thus restricting comprehensive analysis. No explicit privacy policies, cookie policies, or contact information are directly accessible from this page. Security headers and best practices are not evident in the provided data, though the domain is secured under Google's enterprise domain management. Overall, the page is safe for general audiences and does not contain adult or explicit content.

W

Wunderkind

bounceexchange.com

66

Wunderkind is a technology company specializing in personalized marketing solutions that leverage data and AI to drive revenue growth for brands. The website demonstrates a modern technical infrastructure using React and Gatsby frameworks, with integration of marketing tools such as Marketo. The site is well-designed and mobile-optimized, providing a good user experience. However, the security posture is limited due to the absence of visible security headers, privacy policies, and incident response information. No contact details or compliance policies are explicitly presented, which may impact trust and regulatory compliance. Overall, the site appears legitimate and professional but would benefit from enhanced security and privacy transparency.

The domain bullwhip.cloud is registered with IONOS SE since October 2022 and is set to expire in 2026. However, the website content is currently inaccessible, returning a 404 Not Found error with no metadata, structured data, or meaningful content. There are no visible contact details, privacy policies, or security information on the site. The domain registration is transparent and consistent with a new business or project, but the lack of operational website content significantly limits the ability to assess the business or its services. Technically, the site appears to be hosted with Google Cloud DNS, but no further technology stack or CMS information is available. Security posture cannot be evaluated due to missing HTTPS and security headers. Overall, the website is non-functional and lacks essential trust and compliance indicators.

The website cafuil.it currently serves a 403 Forbidden error page, indicating that access to its content is blocked or restricted. There is no accessible business information, contact details, or privacy-related policies available on the site. The domain is long-established since 2001 with DNSSEC enabled, suggesting a legitimate registration, but the lack of accessible content and business data limits the ability to assess the company's operations or market position. Technically, the site uses minimal external resources and lacks modern SEO or accessibility features. Security posture is moderate due to DNSSEC and HTTPS implied by domain status, but no security headers or policies are visible. Overall, the site is not currently functional for end users or analysis purposes.

D

DatoCMS

datocms.com

69

DatoCMS is a technology company offering a headless CMS platform designed to be user-friendly and performant, targeting web developers, digital marketers, content creators, and enterprises. Their platform supports GraphQL APIs, structured text editing, localization, and modular content management, positioning them as a competitive SaaS provider in the content management space. The website reflects a professional and modern digital presence with excellent design and user experience, optimized for mobile and SEO. However, the absence of WHOIS domain registration data and lack of visible privacy, cookie, and terms of service policies indicate areas for improvement in transparency and compliance. Security posture is moderate due to missing security headers and unclear SSL configuration. Overall, the site is trustworthy and well-branded but would benefit from enhanced privacy and security disclosures.

The website unicreditlife.it is currently inaccessible due to a security or WAF blocking mechanism, as evidenced by the 'Access Denied' error page served via Akamai's edgesuite.net. This prevents any meaningful content or metadata extraction, severely limiting the ability to analyze the business or technical infrastructure. The WHOIS data is suspicious, showing a domain creation date in the future (January 27, 2025), which undermines trust and legitimacy. DNSSEC is enabled, which is a positive security indicator. Overall, the website appears to be related to the finance sector but lacks accessible information to confirm business details or services. The security posture is limited to DNSSEC and HTTPS, with no visible security headers or policies. Due to the blocking, the AI score is low, reflecting the inability to perform a full assessment.

Unilever PLC is a global leader in consumer goods, specializing in nutrition, hygiene, and personal care products. The company operates a large portfolio of well-known brands aimed at improving everyday life for consumers worldwide. The website reflects a mature digital presence with comprehensive content on corporate strategy, sustainability, and investor relations, targeting a broad audience including consumers, investors, suppliers, and partners. Technically, the website employs modern web technologies such as the Astro framework, optimized for performance and mobile responsiveness. It uses HTTPS with strong security headers and implements structured data for SEO enhancement. The site integrates standard analytics tools like Google Analytics and Tag Manager, with clear cookie and privacy policies indicating GDPR compliance. From a security perspective, the site demonstrates good practices including HTTPS enforcement, content security policies, and no visible vulnerabilities or exposed sensitive data. However, explicit incident response contacts and a security.txt file are not found, which could improve transparency and vulnerability management. Overall, the website is professional, secure, and compliant with privacy regulations, supporting Unilever's reputation as a trustworthy multinational corporation. The WHOIS data is not publicly available, likely due to privacy protection, which is justified for a company of this scale. Strategic recommendations include enhancing incident response visibility and maintaining regular security audits.

The website bobrobotics.com is currently inaccessible to the public, returning a 403 Forbidden error page that blocks access to any substantive content. The domain is newly registered in May 2023 and hosted on SiteGround servers. Due to the lack of accessible content, no business description, contact information, or policies are available for review. The site does not present any metadata, structured data, or external business links. Technically, the site lacks DNSSEC and security headers, and no analytics or tracking scripts are detected. The security posture is weak due to the absence of standard security headers and the presence of a 403 error, which may indicate misconfiguration or intentional access restrictions. Overall, the website cannot be fully analyzed due to access restrictions, resulting in a low AI score and limited trustworthiness.

The website soggiornosicuro.it is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. Due to this, no business information, contact details, or policies are available for analysis. The domain is registered since 2018 and is active until 2026, indicating a legitimate registration period but no further business details are disclosed on the site. Technically, the site lacks visible security headers, privacy policies, or analytics scripts, and no CMS or technology stack can be identified from the provided HTML. The absence of content and contact information severely limits the ability to assess the business model or market position. Security posture is weak due to lack of HTTPS confirmation and missing security best practices. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.

T

Telegram.im

telegram.im

57

Telegram.im operates as an unofficial service providing Telegram button widgets and logo generation tools for website owners and developers. The service aims to facilitate Telegram integration on websites, promoting Telegram channels, bots, and enabling user contact via Telegram's web or app platforms. The business model is free and niche-focused, targeting webmasters seeking Telegram-related widgets. The website is small-scale with moderate branding consistency and good content quality. Technically, the site uses a common open-source stack including Bootstrap, jQuery, Font Awesome, and Mobirise CSS. Hosting is via Name.com nameservers, indicating a standard hosting provider. The site is moderately optimized for mobile and SEO, with basic accessibility features. Performance is moderate with no critical technical flaws detected. Security posture is average; HTTPS is implied but no explicit security headers were detected in the provided data. The site implements cookie consent and a privacy policy, though the latter is basic and lacks GDPR compliance indicators. No terms of service or vulnerability disclosure policies are present. Incident response contact is limited to a link for reporting illegal content. Overall, the site is safe with no adult or questionable content, but lacks some professional security and compliance features. The domain registration is consistent and legitimate, supporting ongoing service operation. Strategic improvements in security headers, compliance documentation, and contact transparency would enhance trust and security posture.

T

The Verge

theverge.com

77

The Verge is a prominent technology and science news website founded in 2011 and owned by Vox Media. It provides a wide range of content including breaking news, reviews, features, videos, podcasts, and newsletters targeting technology enthusiasts and the general public interested in tech. The site maintains a strong market position as a leading modern media company dedicated to high-quality journalism in the technology sector. Technically, The Verge employs a modern web stack including React and Next.js frameworks, integrates multiple advertising and analytics services such as Google Analytics, Amazon Publisher Services, and DoubleClick, and uses advanced content delivery and tracking technologies. The website is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and implements cookie consent mechanisms indicating GDPR compliance. While explicit security policies and incident response contacts are not published, the site demonstrates good security hygiene with no obvious vulnerabilities or exposed sensitive data. The absence of WHOIS data is noted but likely due to privacy protection or registry data unavailability rather than malicious intent. Overall, The Verge presents a low-risk profile with strong business credibility, excellent content quality, and a robust technical and security posture. Strategic recommendations include publishing explicit security and incident response policies, enhancing transparency on data retention, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

H

hPage Ltd.

hpage.com

52

hPage Ltd. operates a leading website creation platform offering a free and easy-to-use website builder with over 300 professional templates. The platform targets a broad audience including small and medium businesses, freelancers, photographers, bloggers, and cafes/restaurants. The business model is based on providing freemium services with options for custom domains and professional email addresses. The company claims a strong market position with over 2 million websites created since its founding in 2007. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and FontAwesome, ensuring a responsive and user-friendly experience. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and no vulnerability disclosure or security policy pages are present. Privacy compliance is partial with a comprehensive privacy policy but lacking cookie consent mechanisms. The WHOIS data is missing or unregistered, which raises concerns about domain legitimacy and reduces trustworthiness. Overall, the website is professional and functional but would benefit from improved security practices, enhanced privacy compliance, and clarification of domain registration status to strengthen trust and credibility.

G

Google Tag Manager for WordPress

gtm4wp.com

64

Google Tag Manager for WordPress is a specialized software provider offering a WordPress plugin that facilitates advanced Google Tag Manager integration without requiring users to code. The company targets WordPress website owners and developers seeking enhanced tag management capabilities. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Cloudflare CDN, and SEO optimization via Rank Math. The technical infrastructure supports fast performance and mobile responsiveness, reflecting a well-maintained platform. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance protection. Overall, the site is trustworthy and professionally presented, with consistent branding and clear business focus.

W

Sign in - Matomo

webstats1.de

48

The website webstats1.de serves as a login portal for the Matomo open-source web analytics platform. It provides a free/libre analytics service primarily targeted at website administrators and analytics users. The platform is designed to offer privacy-focused analytics without reliance on third-party services. The site’s content is minimal, focusing on user authentication and configuration of the analytics platform. The business model revolves around providing an open-source analytics solution, likely supported by community contributions or enterprise services. The market position is not explicitly stated but aligns with privacy-conscious analytics providers.

T

TrekkSoft AG

trekksoft.com

67

TrekkSoft AG operates a leading online booking platform tailored for day tour companies and tour operators. Their SaaS solution centralizes booking management by integrating online and offline sales channels, simplifying backend operations. The company positions itself as a market leader in the tour operator booking software niche, targeting travel businesses seeking streamlined booking solutions. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and LinkedIn Insight Tag. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the professional website presence and use of reputable platforms mitigate some risk. Overall, the site is functional, professional, and safe for general audiences, but would benefit from enhanced transparency in privacy, contact, and security disclosures.

M

Mr Suricate

mrsuricate.com

50

Mr Suricate is a technology company specializing in SaaS-based no-code automated testing solutions designed to detect bugs efficiently. Positioned as a leader in the no-code test automation market, the company targets software developers, QA teams, and businesses seeking streamlined testing tools. The website reflects a professional and consistent brand image with clear messaging about its turnkey SaaS offering. Technically, the site is built on WordPress using Elementor and Yoast SEO, integrating multiple marketing and analytics tools such as Matomo, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing approach. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of privacy policy and security headers suggests room for improvement. The WHOIS data is notably missing, which raises questions about domain registration legitimacy despite the active and professional website presence. Overall, the site is safe, well-designed, and business-focused but should address compliance and transparency gaps to enhance trust and security.

The website www.essonne.fr currently presents a security challenge page indicating anti-DDoS flood protection and firewall measures are active. This prevents access to the actual website content, limiting the ability to analyze business operations or services. The page is minimalistic, with no visible contact information, privacy policies, or business details. The WHOIS data is unavailable, with no registrar, creation, or registrant information, which raises concerns about transparency and legitimacy. Technically, the site uses obfuscated JavaScript for bot detection and relies on Google Fonts for styling. No analytics or tracking technologies are detected, and no forms or user input fields are present. Overall, the site appears to be in a protective mode, blocking access to normal users and bots alike.

A

Domain Default page

araoo.tech

44

The website araoo.tech currently hosts a default placeholder page generated by Plesk, a popular web hosting control panel. The content is informational about Plesk services and related tools but does not represent an active business or service offering. The domain is registered with OVH since 2016, indicating a legitimate registration, but the website itself is not yet developed or customized. Technically, the site uses standard HTML5, CSS3, and JavaScript with Plesk branding assets. It is hosted on OVH infrastructure and shows moderate performance and good mobile optimization. However, there are no advanced frameworks or CMS detected, and no analytics or tracking scripts are present. The site lacks security headers and DNSSEC is not enabled, which are areas for improvement. From a security perspective, the site uses HTTPS (implied by the URL scheme), but no additional security headers or policies are implemented. There are no privacy, cookie, or terms of service policies, and no contact or incident response information is provided. No vulnerabilities or suspicious content were detected, but the lack of security best practices and compliance documentation lowers the security posture. Overall, the site is a basic placeholder with minimal content and low business credibility. It is safe for general audiences but lacks any meaningful business or security features. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing contact information to improve trust and compliance.

Fillout is a technology company providing a comprehensive SaaS platform for creating forms, surveys, quizzes, scheduling, payments, workflows, and signatures. The website positions itself as a trusted solution used by over 100,000 organizations, emphasizing ease of use and powerful integrations. The technical infrastructure is modern, leveraging React, Next.js, and Vercel hosting, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not evident, which is a compliance gap. The absence of WHOIS data is a concern for domain legitimacy but the website content and branding are professional and trustworthy. Overall, Fillout presents as a credible and mature SaaS provider with room to improve transparency and compliance documentation.

archive.is is a web archiving service established in 2012 that allows users to capture and preserve snapshots of web pages permanently. The service targets general internet users who require a reliable method to archive web content. The website is currently protected by a CAPTCHA security check, indicating the presence of a Web Application Firewall or similar security mechanism to mitigate automated access and abuse. This security layer restricts direct access to the site's content, limiting the ability to fully analyze the website's features and policies. Technically, the site uses standard web technologies including HTML5 and JavaScript, with Google reCAPTCHA integrated for bot protection. The domain is hosted by Hetzner Online GmbH and uses HTTPS, but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present on the landing page, and no contact or business information is disclosed, which impacts the site's transparency and compliance posture.

A

American Film Market

americanfilmmarket.com

50

American Film Market (AFM) operates as a premier global event and marketplace for film and TV professionals, facilitating networking, pitching, financing, and content acquisition. The website reflects a mature digital presence with a professional design, modern WordPress infrastructure, and SEO optimization. However, it lacks visible privacy and terms of service policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS and domain transfer protections, but could be enhanced with DNSSEC and security headers. Advertising and analytics tools are standard, supporting marketing efforts but requiring transparent privacy practices. Overall, the site is credible and well-positioned in the media event sector but should improve compliance documentation and security transparency.

H

HappierLeads

happierleads.com

66

HappierLeads is a B2B SaaS company specializing in identifying, qualifying, and engaging anonymous website visitors to generate high-quality leads. The platform targets sales, growth, and marketing teams, offering a proprietary identification method that surpasses traditional reverse IP lookup technologies. The company operates a subscription model with a free 30-day trial and a monthly fee thereafter. Technically, the website is built on Webflow and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity. The site is hosted with Cloudflare DNS but lacks DNSSEC and security headers, which are recommended for enhanced security. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional, well-branded, and content-rich, though it could improve transparency and compliance documentation.

E

Esri

arcgisonline.com

64

Esri's ArcGIS Online platform provides a comprehensive SaaS solution for geographic information system (GIS) services, enabling users to connect people, locations, and data through interactive maps and spatial analysis tools. The website reflects a mature enterprise-level service with a clear focus on GIS professionals and organizations requiring mapping and data visualization capabilities. The platform is positioned as a leading geospatial technology provider with a strong brand presence and consistent messaging. Technically, the website employs a mature JavaScript stack including the Dojo Toolkit and Esri's own JS API, alongside modern Calcite components for UI. While the technology is somewhat dated, it remains functional and optimized for web and mobile use. The site demonstrates good SEO and basic accessibility features, though there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in the HTML. However, explicit security headers are not evident in the provided data, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is strong with comprehensive policies linked, though no cookie consent mechanism is detected. The absence of direct contact emails or phone numbers on the main page suggests a controlled communication approach via official Esri channels. Overall, the website is trustworthy and professional, with a solid business credibility score. The missing WHOIS data is a notable anomaly but likely due to registry privacy or restrictions rather than malicious intent. Strategic recommendations include enhancing security headers, publishing incident response details, improving accessibility, and implementing cookie consent mechanisms to further strengthen compliance and user trust.

I

IPCamLive Inc.

ipcamlive.com

65

IPCamLive Inc. operates a cloud-based video broadcasting platform specializing in embedding live IP camera streams into web pages and generating time-lapse videos. The company targets IP camera users, developers, and businesses seeking easy integration of live video content across multiple platforms including PC, Mac, iOS, and Android. Their business model is subscription-based SaaS with a free trial offering, positioning them as a niche provider in the IP camera streaming market. Technically, the website employs modern JavaScript libraries such as jQuery, Google Analytics, Facebook Pixel, and Google Tag Manager, supporting responsive design and multi-platform compatibility. The infrastructure supports direct IP camera streaming without additional software, unlimited viewers, and privacy features like AI-based face blurring and stream access controls. Security posture is moderate with HTTPS enforced and privacy controls implemented, but lacks explicit security headers and published incident response policies. The absence of WHOIS data for the domain raises some trust concerns, although the website content and business presence appear legitimate. Privacy compliance is basic with cookie consent and privacy policy present but no explicit GDPR confirmation. Overall, the website is professionally designed and functional with good user experience and relevant content. Strategic improvements in security policies, WHOIS transparency, and compliance documentation would enhance trust and security posture.

H

Hostinger

hostinger.in

71

Hostinger is a globally recognized web hosting provider offering a wide range of services including shared hosting, VPS, cloud hosting, domain registration, and AI-powered website building tools. The company targets individuals, small to medium businesses, and agencies seeking reliable and scalable online presence solutions. Their website demonstrates a mature digital infrastructure with modern frameworks such as Vue.js and Nuxt.js, and integrates advanced analytics and marketing tools like Google Tag Manager and Amplitude. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is noted but likely due to registry restrictions or privacy measures common among large hosting providers. Overall, Hostinger's website reflects a professional, trustworthy, and technically sound platform suitable for its market segment.

B

BIC

bic.com

66

BIC is a globally recognized manufacturer of stationery, lighters, and shavers. The eu.bic.com website serves as a regional portal targeting European English-speaking customers, providing product information and brand presence. The site uses modern web technologies such as Vue.js and Nuxt.js, integrating marketing and tracking tools like Google Tag Manager and Facebook Pixel. While the site is professionally designed and mobile-optimized, explicit privacy and cookie policies were not detected in the provided content, indicating room for improvement in compliance transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and detailed security policies. Overall, the site is trustworthy and aligns with the brand's global reputation, but enhancing privacy disclosures and security headers would strengthen compliance and security.

AVC Music is an e-commerce business focused on music products, offering a multilingual online shop experience. The website is relatively basic, featuring outdated Flash content and minimal interactive or modern web features. The domain has been registered since 2004, indicating a longstanding presence, but the lack of detailed business contact information and policies reduces its perceived professionalism and trustworthiness. Technically, the site lacks modern security practices such as HTTPS enforcement and security headers, and it does not provide privacy or cookie policies, which are critical for compliance and user trust. Overall, the website's digital maturity is low, with significant room for modernization and security improvements.

The website poiseddevelopers.com is currently a default placeholder page hosted by Hostinger, indicating that the domain is registered and the hosting account is active but no custom website content has been uploaded. The business behind the domain is not identifiable from the content, and no contact or policy information is provided. The technical infrastructure uses common web libraries such as Bootstrap, jQuery, and Font Awesome, and includes Google Analytics for visitor tracking. The hosting provider is Hostinger, consistent with the WHOIS registration data. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and no DNSSEC enabled on the domain. Privacy and cookie policies are missing, indicating non-compliance with GDPR and other privacy regulations. Overall, the website is not professionally developed or maintained at this time, limiting trust and business credibility.

F

403 - Forbidden

fondazione-experience.com

38

The website fondazione-experience.com currently serves a 403 Forbidden error page, indicating that access to the content is restricted or blocked. There is no visible business information, contact details, or policy documents available on the site. The domain is relatively new, registered in November 2022 via GoDaddy.com, LLC, and hosted on SiteGround servers. The technical infrastructure is minimal, with basic HTML and CSS and no advanced frameworks or CMS detected. Security configurations are basic, with no DNSSEC enabled and no security headers observed. The lack of accessible content and contact information significantly limits the ability to assess the business or security posture comprehensively.

The website euricse.eu currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and primarily consists of a redirect countdown and a browser integrity check script. The site references outdated CMS technologies such as Joomla 1.5 and WordPress 2.5, which are no longer supported and pose security risks. No business, contact, or compliance-related information is available on the accessible page, limiting the ability to assess the organization's market position or services. The hosting registrar is GoDaddy.com, LLC, a reputable provider, but no further registrant details are available to confirm legitimacy. Overall, the site lacks transparency and modern web practices, resulting in a low trust and security posture score.

C

Confédération Européenne de Volleyball (CEV)

cev.eu

64

The European Volleyball Confederation (CEV) operates as the governing body for volleyball disciplines across Europe, including indoor volleyball, beach volleyball, and snow volleyball. The organization manages major competitions such as the Champions League and EuroVolley, providing rich media content and live streaming services to a broad audience of sports enthusiasts, athletes, and federations. The website reflects a professional and consistent brand presence with strong social media engagement and official partnerships. Technically, the site leverages modern web technologies including Blazor and jQuery, with embedded video content and responsive design for mobile users. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. The lack of exposed WHOIS data is due to EURid privacy protection, which is typical and justified for such an organization. Overall, the site is trustworthy, well-maintained, and serves as a credible digital platform for European volleyball.

I

Iberian Lawyer

thelatinamericanlawyer.com

64

The Latinamerican Lawyer is a specialized legal media publication operated by 10dencehispahard, S.L., focusing on the Latin American legal market. It provides news, analysis, and magazine publications targeted at legal professionals and in-house counsel in the region. The website is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a mature digital infrastructure. It integrates a comprehensive cookie consent mechanism compliant with GDPR, reflecting good privacy practices. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though DNSSEC is not enabled and no explicit security policies are published. The domain registration is consistent with the business profile, supporting legitimacy. Overall, the site presents a professional and trustworthy presence in the legal publishing niche.

I

Iberian Lawyer

iberianlawyer.com

61

Iberian Lawyer is a specialized media company under LC Publishing Group, focused on delivering legal news, magazines, awards, and events primarily targeting the Iberian legal market. Established in 2004, it holds a solid market position as a niche legal media brand offering professional content and industry insights. The website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The presence of structured data and social media integration reflects digital maturity. Security posture is generally good with HTTPS enabled and cookie consent implemented, though DNSSEC is not enabled and security headers are absent. No explicit privacy policy or terms of service were found, which is a compliance gap. Overall, the site is professional, content-rich, and trustworthy but could improve privacy and security disclosures.

L

LegalcommunityMENA

legalcommunitymena.com

63

Legalcommunity MENA is a specialized media publishing group focused on delivering legal news, insights, and event information for the MENA region. The website serves legal professionals, in-house counsel, law firms, and corporate clients by providing sector-specific legal content and updates. The business operates under LC Publishing Group and maintains a consistent brand presence with partner sites across various regions. Technically, the website is built on WordPress using Elementor and Yoast SEO, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a comprehensive cookie policy and GDPR-aligned consent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

E

ECPAT International

ecpat.org

53

ECPAT International is a well-established global non-profit organization dedicated to ending the sexual exploitation and abuse of children worldwide. With a domain registered since 1998 and a presence in over 100 countries, it operates as a network coordinating research, advocacy, and collaborative efforts with governments, law enforcement, and private sectors. The website reflects a professional and consistent brand image with clear calls to action such as donations and signing the Bill of Rights. Technically, the site is built on WordPress, hosted on Linode, and uses modern web technologies including jQuery, Google Tag Manager, and Cloudflare Turnstile for form security. SEO and mobile optimization are well implemented, though accessibility could be improved. Security posture is good with HTTPS and captcha protections, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies. Overall, the site is trustworthy, safe, and professionally maintained, serving a global audience focused on child protection advocacy.

Z

Zemtu OG

zemtu.com

7

Zemtu OG operates a website offering an all-in-one shared mobility software solution designed to manage cars, bikes, and scooters within a single app. The platform targets businesses and organizations aiming to implement ambitious mobility concepts, providing vehicle access control, journey documentation, and data analytics for statistics and accounting. The website is professionally designed using modern web technologies such as Nuxt.js and BootstrapVue, and integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with no visible security headers or policies, and privacy compliance is poor due to missing privacy and cookie policies. Contact information and incident response details are not provided, limiting transparency and user trust.

The website ww38.siements.com is a parked domain with no active business content. It primarily serves as a landing page indicating the domain is for sale, with affiliate links to domain marketplaces. The domain name is a misspelling of a well-known brand, which raises suspicion of typo-squatting or phishing intent. The technical infrastructure is minimal, relying on basic HTML, JavaScript, and iframes loading external content from potentially suspicious domains. No privacy, cookie, or terms of service policies are present, and no contact or business information is provided. Security posture is weak, with no HTTPS enforcement or security headers detected. WHOIS data is unavailable, indicating the domain is either unregistered or privacy-protected, further reducing trustworthiness.

T

tonies

tonies.com

66

Tonies is a well-established company specializing in screen-free audio players and educational toys for children, primarily targeting ages 1-9. Their flagship product, the Toniebox 2, is positioned as a market leader in this niche, offering innovative audio storytelling experiences through physical audio characters called Tonies. The website reflects a mature e-commerce platform with a focus on user experience, modern technology, and compliance with privacy regulations through consent management. Technically, the site leverages modern frameworks such as Next.js and is hosted on AWS infrastructure, ensuring scalability and reliability. Security posture is strong with HTTPS enforcement, AWS WAF integration, and domain registration protections, although DNSSEC is not enabled. Privacy compliance is partially addressed with cookie consent but lacks visible privacy policy and terms of service links in the analyzed content. Overall, the site is professional, trustworthy, and safe for its target audience.

C

Caritas Europa

caritas.eu

67

Caritas Europa is a large non-profit network organization comprising 49 member organizations across 46 European countries. The organization focuses on promoting social justice, fighting poverty, and addressing social exclusion. Their website reflects a professional and consistent brand image, targeting social actors, NGOs, volunteers, and policy makers interested in humanitarian and social development causes. Technically, the website is built on WordPress with modern plugins and themes, optimized for mobile and accessibility, and includes SEO best practices. Security posture is strong with HTTPS and bot management cookies, though explicit security headers and incident response information are lacking. Privacy compliance is partially implemented with a cookie consent mechanism but lacks a clear privacy policy page. Overall, the website is trustworthy and well-positioned in the non-profit sector, though improvements in transparency and contact information would enhance credibility.

C

Caritas

caritas.org

61

Caritas is a globally recognized confederation of over 160 Catholic relief and development agencies dedicated to ending poverty, promoting justice, and restoring dignity. The organization operates worldwide, providing humanitarian aid, disaster relief, development programs, and advocacy. Their website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. The donation system is integrated securely using Stripe, ensuring safe financial transactions. The site is built on WordPress with popular plugins for SEO, content management, and user engagement, indicating a modern and maintainable technical infrastructure. Security posture is strong with HTTPS enforced and secure payment processing, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. The WHOIS data is privacy protected, which is typical for large NGOs, and does not raise immediate concerns. Overall, Caritas demonstrates a trustworthy and professional online presence aligned with its humanitarian mission.

CineRegio operates as a network of 53 regional film funds, primarily serving the European film industry by facilitating cooperation, co-production, and resource sharing among its members. The website serves as an informational portal highlighting its members, publications, subgroups, and press resources. The business model focuses on networking and supporting regional film funding initiatives rather than direct commercial activities. Technically, the website uses older JavaScript libraries such as MooTools 1.2 and SWFObject, and is built on the Kontent CMS platform. The site lacks modern security features such as HTTPS and security headers, and does not provide privacy or cookie policies, indicating gaps in compliance with current data protection regulations. Security posture is weak, with outdated technology and no visible incident response or vulnerability disclosure mechanisms. Overall, the site is functional but basic, with moderate trustworthiness based on content consistency and contact information provided.

T

The Location Guide

thelocationguide.com

72

The Location Guide operates as a specialized online directory and information center catering to the global screen entertainment industry, including film, TV, advertising, and digital production sectors. It provides a comprehensive directory of production services and locations worldwide, alongside industry news and event promotion such as FOCUS 2025. The website targets production professionals seeking reliable contacts and resources for filming globally. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and FontAwesome, with good mobile optimization and moderate performance. However, the absence of WHOIS data and lack of explicit privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and policies. Overall, the site presents professional content and user experience but would benefit from enhanced security and privacy measures to improve trust and compliance.

The website lavorodignitoso.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2010 with Tucows Domains Inc. and uses SiteGround as its hosting provider. Due to the lack of accessible content, no business description, contact information, or policies are available for analysis. The technical infrastructure appears minimal with no detectable scripts or analytics. Security posture cannot be fully assessed due to the blocked content, but the domain registration shows some good practices such as clientTransferProhibited status. Overall, the site is not currently usable for visitors, which severely limits trust and business credibility.

F

Plesk Obsidian 18.0.72

fondonegri.it

61

The website is a login portal for Plesk Obsidian 18.0.72, a commercial web hosting control panel software widely used by hosting providers and administrators. The page is designed primarily for authenticated users to access hosting management features. The business behind the software is positioned as a technology provider in the web hosting industry, targeting hosting service providers and web administrators. The site content is minimal, focusing on login functionality with cookie consent mechanisms in place, but lacks visible privacy policies or contact information on this page. Technically, the site uses the Plesk UI library, JavaScript frameworks like Prototype.js and RequireJS, and standard web technologies. The page is moderately optimized for mobile and accessibility but lacks advanced SEO features. Security-wise, the site uses HTTPS (implied by URL), includes CSRF protection tokens, and password input controls, but no explicit security headers were detected in the HTML content. DNSSEC is not enabled for the domain, which is a recommended improvement. The domain is well-established, created in 2000, indicating legitimacy. Overall, the security posture is moderate with room for improvement in security headers and explicit privacy/security policies. The site is safe with no adult or questionable content. No WAF or blocking mechanisms were detected, allowing full content access. The lack of visible business contact details and privacy policy on this page limits privacy compliance scoring. Strategic recommendations include enabling DNSSEC, adding security headers, and providing clear privacy and security policies linked from the login page.

The website fasdac.it currently returns a standard HTTP 404 Not Found error page, indicating that the site content is inaccessible or missing. No metadata, structured data, or business-related content is available to analyze. The domain itself is well-established, having been registered since 2000 and valid until 2026, which suggests a legitimate registration history. However, the absence of any accessible website content severely limits the ability to assess the company's business operations, services, or market position. Technically, the site lacks modern security configurations such as DNSSEC and security headers, and no privacy or cookie policies are present, indicating low digital maturity and compliance readiness. The security posture is minimal, with only basic SSL configuration inferred from WHOIS data, but no further security best practices observed. Overall, the website is non-functional from a user perspective, resulting in a low trust and credibility score. Strategic recommendations include restoring website content, implementing comprehensive security and privacy policies, and improving technical infrastructure to meet modern standards.

S

Shopper Approved

shopperapproved.com

65

Shopper Approved is a professional ecommerce SaaS platform specializing in growth tools that enhance traffic, sales, and conversions through trust signals, user-generated content, and social proof. The company holds a strong market position as a highly rated review platform and is one of the few Google and Bing review partners worldwide. Their key services include store and product ratings, video reviews, reputation management, Q&A software, and website security solutions tailored for ecommerce businesses. Technically, the website is built on modern frameworks such as Bootstrap and integrates with HubSpot for forms and marketing automation. It employs Google Tag Manager and tracking pixels for analytics and retargeting, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a high-quality user experience. From a security perspective, the site uses HTTPS and secure form handling but lacks explicit security headers and a public vulnerability disclosure policy. No WHOIS data was found, which is unusual and slightly reduces trust, but the overall professionalism and trust indicators on the site mitigate this concern. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Shopper Approved presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data visibility would further enhance trust and compliance.

R

Raiffeisenverband Südtirol

rvsportal.it

71

The website is a Microsoft Azure Active Directory login portal customized for Raiffeisenverband Südtirol, a regional cooperative banking association. It serves as an authentication gateway for users accessing SharePoint and other Microsoft services. The site leverages Microsoft's secure OAuth2 authorization code flow and integrates branding elements specific to Raiffeisenverband Südtirol, indicating a trusted business relationship. The technical infrastructure is robust, utilizing modern web technologies, Microsoft cloud hosting, and strong security controls including HTTPS, CSRF tokens, and nonce-based script loading. Privacy and terms of service are linked to official Microsoft pages, reflecting compliance with GDPR and other regulations. However, the site lacks explicit cookie consent mechanisms and direct contact information for security incidents, which could be improved. Overall, the site demonstrates a mature security posture appropriate for its function as an enterprise authentication portal.

S

Kickstart your TYPO3 template development - get.typo3.org

sitepackagebuilder.com

56

The website get.typo3.org/sitepackage serves as a resource hub for TYPO3 CMS template development, providing starter sitepackage templates and related resources primarily targeting TYPO3 developers and integrators. It operates within the open source software ecosystem, focusing on facilitating template creation for TYPO3 CMS users. The site demonstrates a moderate level of digital maturity, utilizing modern web technologies such as Web Components and integrating Usercentrics for consent management, indicating awareness of privacy requirements though lacking explicit policy pages. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of contact information and WHOIS registrant data reduces the overall business credibility and trustworthiness. No vulnerabilities or exposed sensitive data were detected in the provided content, but improvements in security best practices and transparency are recommended. Overall, the site is functional and well-targeted for its niche audience but would benefit from enhanced privacy compliance, clearer business information, and improved security configurations to strengthen trust and compliance posture.

T

Transparency International

transparency.org

75

Transparency International is a globally recognized non-profit organization dedicated to combating corruption and promoting integrity and accountability worldwide. The website serves as a comprehensive platform for advocacy, research, and public engagement on anti-corruption issues. It targets a broad audience including policymakers, civil society, and the general public. The organization maintains a strong market position as a leading authority in corruption research and policy influence. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Plausible Analytics, and Cookiebot for consent management. The site is well-optimized for mobile devices, has good SEO practices, and uses HTTPS with strong security headers, indicating a mature digital infrastructure. Performance is moderate with room for optimization. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and security headers. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. The lack of WHOIS data is due to privacy protection, which is justified for this type of organization. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to enhance transparency and security posture.