N/a security reports

A

Acceptable Ads

acceptableads.com

53

Acceptable Ads is a technology-focused organization established in 2011 by the creators of AdBlock Plus, aiming to promote a sustainable and user-friendly online advertising ecosystem. The website serves as a platform to engage publishers, advertisers, and ad-filtering users by offering a standard for light and nonintrusive advertising. The business is positioned as a trusted intermediary in the online advertising space, with recognition from major media outlets and a clear focus on improving user experience. Technically, the website is built on WordPress using modern frameworks such as Elementor and Astra theme, with integration of Google Analytics for visitor insights. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though there is room for improvement in security headers and explicit incident response documentation. No critical vulnerabilities or suspicious content were detected. The domain registration is consistent with the business history and geographic location, enhancing trustworthiness. However, the absence of explicit contact emails and phone numbers, as well as missing terms of service and security policy pages, slightly reduce the overall credibility. Strategically, Acceptable Ads should focus on enhancing transparency by publishing detailed security and incident response policies, enabling DNSSEC, and providing clear contact channels for security and abuse reporting. These steps will strengthen trust and compliance posture, supporting their role as a leader in ethical online advertising.

Z

Access to this page has been denied

zazzle.com

56

The website zazzle.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) challenge page that blocks content access. This prevents a full analysis of the website's content, policies, and contact information. The domain is well-established, registered since 1999 through MarkMonitor Inc., indicating a legitimate and mature e-commerce business. The visible technical infrastructure includes PerimeterX security services, which suggests a focus on bot mitigation and security. However, due to the content block, no privacy, cookie, or terms of service policies are accessible, and no contact or incident response information is available for review. The security posture cannot be fully assessed, but the domain registration and use of security services indicate a baseline of security awareness.

Kliken is a small business marketing platform that enables owners to easily manage advertising campaigns across Google Ads, Google Shopping, Facebook, and retargeting channels. The company integrates with popular ecommerce and website building platforms such as Ecwid by Lightspeed and WordPress, positioning itself as a niche SaaS provider focused on simplifying digital marketing for small businesses. The website is hosted on the Weebly platform and employs modern marketing and analytics technologies including Google Analytics, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and outdated jQuery version present areas for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, which should be addressed to enhance trust. Overall, Kliken presents a professional and functional online presence tailored to small business marketing needs.

E

Přístup odepřen

egd.cz

50

The website www.egd.cz is currently inaccessible and displays an access denied message in Czech, indicating that the visitor's network has been flagged for suspicious activity or is outside the supported region. The site lacks any meaningful content, metadata, or business information, and no WHOIS data is available for the domain, suggesting possible suspension or privacy protection. Due to these factors, a comprehensive analysis of the business, technical infrastructure, and security posture is not feasible. The absence of HTTPS, security headers, privacy policies, and contact information further limits trust and credibility assessment.

H

Heidelberg Materials

heidelbergcement.com

77

Heidelberg Materials is a global leader in the building materials industry, specializing in cement, aggregates, ready-mixed concrete, and asphalt. The company operates in approximately 50 countries and emphasizes sustainability, digital innovation, and business transformation to maintain its market leadership. The website reflects a mature digital presence with comprehensive corporate, investor, sustainability, and career information. Technically, the site is built on Drupal 11 with modern frontend technologies and includes analytics and cookie consent mechanisms. Security posture is strong with HTTPS and bot management cookies, though explicit security headers and incident response contacts are not clearly published. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site content and branding. Overall, the site is well-designed, accessible, and trustworthy, targeting industry professionals, investors, and job seekers.

W

World Standards Day

worldstandardsday.org

54

World Standards Day is an annual global event promoting awareness of the importance of international standardization to foster sustainable development and global partnerships. The website serves as an informational and advocacy platform supported by major standards organizations IEC, ISO, and ITU. It provides resources, event details, and community engagement opportunities to a broad international audience interested in standards and sustainable development goals. Technically, the site uses modern web technologies including a CMS (Jahia), Google Fonts, Usercentrics for cookie consent, and Vimeo for video content, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response contacts are missing. Overall, the site is trustworthy, professionally maintained, and aligned with its mission, though WHOIS data is privacy protected and unavailable for detailed domain registration analysis.

I

International Gas Union

igrc2027.com

64

The website www.igrc2027.com serves as the official platform for the International Gas Union's IGRC2027 event, focusing on the global gas industry's role in building sustainable and secure societies. The site targets industry professionals and stakeholders, providing event information and promoting the gas sector's importance. The business model centers on industry association and event hosting, positioning itself as a key global player in the energy sector. Technically, the site is built on a modern React and Next.js framework, hosted on Vercel, and integrates Cookiebot for GDPR-compliant cookie management and Google Analytics for traffic analysis. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain suggests either a new registration or privacy protection, which slightly impacts trust but is mitigated by the professional and consistent branding aligned with the International Gas Union. Overall, the site is trustworthy, compliant, and professionally maintained, with recommendations to enhance transparency around security policies and domain registration details.

W

WP Debug Toolkit

wpdebugtoolkit.com

52

WP Debug Toolkit is a specialized WordPress debugging tool provider offering a plugin and an independent Viewer App that enables developers and site owners to view and filter WordPress error logs in real time without requiring SSH or FTP access. The company targets WordPress developers and site owners seeking efficient debugging solutions and offers lifetime deals to its customers. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence for a company founded in 2025. Technically, the site leverages WordPress with popular plugins such as Easy Digital Downloads and Yoast SEO, and uses Oxygen Builder for design. It integrates Google Ads and tracking tools but lacks a cookie consent mechanism, which is a privacy compliance gap. Security posture is good with HTTPS and domain transfer protection, but DNSSEC is not enabled and security headers are missing. No direct contact emails or phone numbers are provided, and no explicit security or incident response policies are published. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

W

WPCodeBox

wpcodebox.com

58

WPCodeBox is a specialized WordPress plugin and cloud service that enables developers and agencies to efficiently manage, share, and deploy code snippets across multiple WordPress sites. The company positions itself as a leading solution in the WordPress developer tools market, emphasizing performance, organization, and ease of use. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site leverages modern web technologies including React for UI, WordPress CMS, and integrates multiple analytics and advertising platforms such as Google Analytics, Facebook Pixel, and Paddle for payments. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms despite extensive tracking. Overall, WPCodeBox demonstrates a strong market presence with good technical and security foundations but could improve transparency and compliance aspects.

B

Business Europe

businesseurope.eu

76

Business Europe is a prominent non-profit business association representing enterprises across the European Union and neighboring countries. It focuses on advocacy, policy analysis, and representing business interests at the EU level. The website reflects a professional and consistent brand image, targeting European businesses and policymakers. Technically, the site is built on WordPress with modern themes and plugins, including Divi and Slider Revolution, and uses Matomo analytics with a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the site is trustworthy and well-maintained, but could improve transparency by publishing privacy and security policies and providing clear contact information.

A

addaiplatform

addaiplatform.com

61

The website id.addai.cz is a login portal for the addaiplatform service, utilizing Keycloak for authentication and OpenID Connect protocols with PKCE for secure user login. The site is minimalistic, focusing solely on user authentication without public-facing business or marketing content. The technical infrastructure leverages modern frameworks such as React and PatternFly for UI styling, indicating a contemporary but basic web application. Security practices include standard OAuth2 flows, but lack visible security headers and privacy policies, which are critical for user trust and compliance. The absence of WHOIS data limits the ability to verify domain legitimacy and ownership, which impacts overall trustworthiness. No advertising, analytics, or tracking technologies are detected, suggesting a privacy-conscious or minimalistic approach. Overall, the site serves its purpose as an authentication gateway but lacks transparency and comprehensive security and privacy disclosures.

P

Penta Investments

pentainvestments.com

71

Penta Investments is a well-established investment group with over 30 years of experience, focusing on long-term value investments across multiple sectors including retail, healthcare, real estate, financial services, manufacturing, and media. The company employs over 50,000 people and emphasizes responsible business practices and social responsibility. The website reflects a professional and consistent brand image targeting investors and business partners. Technically, the site is built on WordPress using modern frameworks like Bootstrap and jQuery, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. The absence of WHOIS data is a concern but the overall digital presence and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details.

L

LightWidget

lightwidget.com

61

LightWidget is a specialized technology company offering responsive Instagram widgets for embedding Instagram feeds on websites, blogs, and online stores. Founded in 2016, it serves a niche market of website owners and businesses seeking customizable Instagram feed solutions. The company operates a SaaS business model with free and paid add-ons, maintaining a strong market position supported by positive user ratings and a clean, ad-free product offering. Technically, the website is well-built using modern web standards, hosted via Cloudflare CDN, and optimized for performance and mobile responsiveness. The use of the official Instagram Graph API enhances service reliability and trust. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though improvements such as enabling DNSSEC and publishing security policies could enhance trust further. Privacy compliance is good with clear privacy and cookie policies, though no explicit consent mechanism for cookies is present. Overall, the website is professional, trustworthy, and well-maintained, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

The website at https://mgaru.dev/lander is minimalistic and primarily serves as a placeholder or landing page with no substantive business content, contact information, or policies. It uses modern JavaScript technologies such as React and is hosted behind Cloudflare, with Google Adsense and Cloudflare Insights scripts included. The lack of privacy, cookie, or terms of service policies, combined with no visible contact or business information, results in a low trust and credibility profile. Security posture is basic with no detected security headers or advanced protections visible in the provided data. Overall, the site appears to be either under development or a parked domain with limited business activity or user engagement.

E

European Unified ID

euid.eu

63

European Unified ID (EUID) is an open-source identity solution designed for the European digital advertising ecosystem. It leverages encrypted email and phone number data to provide a privacy-conscious, secure, and accurate identity standard. The website positions itself as a key player enabling personalization, targeting, and measurement for advertisers, publishers, DSPs, and data providers. The presence of major partners such as Adobe, Google, and Salesforce underscores its industry relevance and collaborative approach. Technically, the site is built using modern frameworks like Docusaurus and integrates tools such as Algolia for search and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response information, which could be improved to enhance trust and compliance. Overall, the website is professional and well-structured, though it would benefit from publishing comprehensive privacy and terms of service documents to strengthen privacy compliance and user trust.

HugeDomains.com operates as a reputable domain marketplace specializing in premium domain name sales, including UberMenu.com. The platform offers flexible purchasing options such as outright buy and payment plans, supported by a 30-day money back guarantee and secure transaction methods including PayPal and Escrow.com. The website is professionally designed, mobile-optimized, and provides comprehensive customer support and FAQs, targeting entrepreneurs and businesses seeking valuable domain assets. Technically, the site employs modern JavaScript libraries, Google Analytics, and cookie consent mechanisms, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS and SSL encryption, though explicit security headers could be improved. WHOIS data for the domain is unavailable, limiting full trust verification, but the marketplace itself is established and trustworthy.

The website allegro.cz is currently inaccessible due to an active security challenge implemented via captcha-delivery.com, which acts as a WAF or bot protection mechanism. This prevents access to any meaningful content, including business information, policies, or contact details. The domain is registered since 2017 with name servers linked to allegro.pl, suggesting it is a regional extension of the Allegro brand, a known e-commerce platform in Poland. However, due to the content block, no direct business or marketing information could be extracted. From a technical perspective, the site employs third-party bot mitigation services but lacks visible metadata, structured data, or security headers in the provided HTML snippet. The absence of accessible content limits the ability to assess SEO, accessibility, or performance. No forms or user input fields are present in the accessible content. Security posture cannot be fully evaluated due to the content block, but the presence of a WAF indicates some level of security awareness. No privacy or cookie policies were detected, which may be present on the actual site but are inaccessible. The WHOIS data shows a domain age consistent with a legitimate business presence, with name servers pointing to the Allegro Polish infrastructure. Overall, the site’s risk assessment is limited by the lack of accessible content. The domain appears legitimate but the inability to analyze content or policies reduces confidence. Strategic recommendations include enabling access for security assessments, publishing clear privacy and cookie policies, and ensuring transparency of contact and business information.

S

Slab

quilljs.com

59

Quill is a mature, open source rich text editor project founded in 2014 and maintained by Slab. It targets developers and businesses needing a customizable WYSIWYG editor with a modular architecture and expressive API. The website demonstrates a professional and modern design, leveraging Next.js and various JavaScript libraries to deliver a fast, accessible, and mobile-optimized experience. The project enjoys strong market presence and trust, evidenced by its large GitHub community and adoption by major companies such as LinkedIn, Figma, and Calendly. Security posture is solid with HTTPS and domain transfer protections, though it lacks explicit security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is trustworthy and technically sound but could improve transparency and compliance documentation.

Z

Sport Šumava | Půjčovna, servis, biková škola

zadov.cz

57

The website www.sportsumava.cz appears to be a sports or outdoor activity related site hosted on the Wix platform. The site uses Wix's Thunderbolt framework and includes third-party tracking scripts such as Facebook Pixel and Smartlook for analytics and user behavior tracking. However, the site lacks visible business information, contact details, and privacy or cookie policies, which limits its transparency and trustworthiness. The WHOIS data is unavailable, suggesting privacy protection or domain registration issues, which further impacts the legitimacy assessment. Technically, the site is moderately optimized for mobile devices but lacks important security headers and comprehensive privacy compliance features. Overall, the site presents a basic digital presence with significant room for improvement in security, privacy, and business credibility.

Gjirafa Tech operates the VP platform, an end-to-end OTT video and audio solution designed to empower content creators and media companies with tools for content management, monetization, and user engagement. The platform offers advanced features including AI recommendations, subscription management, and ad integration, positioning it as a competitive player in the OTT technology market. The website demonstrates a modern technical infrastructure leveraging popular frameworks such as Bootstrap and Vue.js (Nuxt.js), with integrations for analytics and cookie consent, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit privacy policies, terms of service, and security incident response documentation indicates areas for improvement. Overall, the site is professional and trustworthy, but enhancing transparency around privacy and security policies would strengthen user confidence and compliance standing.

The website at nmds.pro is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. There is no visible business information, contact details, or compliance documentation available on the site. The WHOIS data is minimal and does not provide creation or expiry dates, with the registrar identified as Identity Digital Inc., a known privacy service provider. Due to the lack of accessible content and transparency, the website's business purpose and legitimacy cannot be determined. Technically, the site uses Google Fonts but lacks any detectable CMS, frameworks, or security headers. The absence of HTTPS information and security policies indicates a poor security posture. Overall, the site is effectively blocked from analysis, resulting in a low trust and credibility score.

C

Client Zone

client-zone.eu

63

Client Zone is a technology platform providing a secure login portal for its users, leveraging the Keycloak authentication framework and styled with the PatternFly CSS library. The website is designed primarily for client access and authentication, with minimal public-facing content. The technical infrastructure indicates a modern approach to user authentication but lacks visible security headers and privacy policies on the login page. The absence of WHOIS data due to EURid privacy restrictions limits domain trust analysis, but the domain appears legitimate and consistent with a business portal. Security posture is moderate with room for improvement in headers and compliance documentation. Overall, the site is functional but basic in content and security transparency.

The website welcome.wppmedia.com serves as a simple redirect page to the main domain www.wppmedia.com, signaling a rebranding or strategic shift towards AI. The page contains minimal content, primarily a message inviting visitors to check out the new site. There is no detailed business description or contact information provided on this page. Technically, the site uses modern CSS features and custom fonts, and it is mobile responsive, but lacks advanced SEO and accessibility features. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. No WHOIS data is available for the subdomain, which is typical, but limits trust verification. Overall, the site functions as a placeholder redirect with limited business or security information.

The website nova.cz is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. As a result, no actual business content, metadata, or contact information is available for analysis. The domain is registered since 1998 with a reputable registrar and uses Cloudflare DNS services, indicating a legitimate and established entity. However, the lack of accessible content prevents a full assessment of the business model, services, or compliance posture. The technical infrastructure leverages Cloudflare's security and performance services, but no further details on CMS, frameworks, or hosting are available. Security posture is difficult to evaluate fully due to the blocked content, but the use of Cloudflare indicates a baseline of security best practices. Overall, the site is currently not analyzable beyond the WAF detection, and further access is needed for comprehensive evaluation.

The analyzed domain www.sas.com currently serves minimal content consisting solely of a JavaScript-based geolocation redirect script. No substantive website content, metadata, or business information is accessible from the provided HTML. The WHOIS query returned no match, indicating the domain may be protected by privacy services, unregistered under the queried name, or otherwise obscured. This limits the ability to assess the company's business profile or digital presence. Technically, the site uses basic JavaScript for geolocation-based redirection but lacks visible security headers, metadata, or analytics. The security posture cannot be fully evaluated due to lack of accessible content and WHOIS data. Overall, the domain appears to be either a placeholder or protected, resulting in a low trust and legitimacy score. Strategic recommendations include ensuring proper domain registration visibility, providing accessible website content, implementing security best practices, and publishing clear privacy and contact information to improve trust and compliance.

I

IPG Mediabrands

ipgmediabrands.com

68

IPG Mediabrands is a global media and marketing agency network focused on delivering innovative advertising and media solutions to clients worldwide. The company positions itself as a forward-thinking organization that adapts to fast-moving consumer behaviors, offering award-winning agencies and services that drive growth. The website reflects a mature enterprise with a strong digital presence, including comprehensive privacy and cookie policies aligned with GDPR requirements. Technically, the site is built on WordPress with modern plugins and libraries such as Yoast SEO, Vimeo Player API, and Swiper.js, hosted likely on WPEngine, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and explicit incident response policies. The absence of WHOIS data is a notable gap, possibly due to privacy protection, but the overall digital footprint and branding consistency support the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and improving direct contact availability to strengthen trust and compliance.

The website doublclick.net presents itself as an informational platform about the DoubleClick digital advertising service, emphasizing its capabilities in targeted advertising, machine learning, and real-time bidding. The site content is professionally presented with a clear focus on marketing professionals and advertisers seeking digital advertising solutions. However, the site lacks critical compliance and security features such as privacy policies, cookie consent mechanisms, and contact information, which limits its credibility and user trust. Technically, the website is a simple static HTML/CSS/JavaScript site without advanced frameworks or CMS detected. It includes external analytics scripts from stats.computer.com but lacks modern security configurations such as DNSSEC and security headers. Mobile optimization and design quality are good, but accessibility and SEO optimizations are basic. From a security perspective, the site does not implement key best practices such as HTTPS enforcement (not verifiable from provided data), security headers, or incident response contact details. The domain is registered with a reputable registrar since 2000, indicating legitimacy, but the absence of DNSSEC and minimal security posture reduce overall trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the site scores moderately on content and technical implementation but poorly on security and privacy compliance. Strategic improvements in security policies, privacy compliance, and contact transparency are recommended to enhance trust and compliance.

The website mobilnirozhlas.cz is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This indicates that the site is either restricted by server permissions or protected by a firewall, preventing any meaningful content or business information from being retrieved. Due to this, no details about the company's services, market position, or target audience can be determined. The lack of accessible content also prevents assessment of the technical infrastructure or digital maturity of the site. From a security perspective, the absence of accessible content and metadata means no security headers, SSL/TLS configuration, or compliance policies can be evaluated. This represents a significant risk as users and stakeholders cannot verify the legitimacy or security posture of the website. The WHOIS data is privacy protected, which is common but combined with the blocked content, lowers trust and legitimacy scores. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. The primary risk is the complete lack of accessible information, which hinders trust and usability. Strategic recommendations include resolving access restrictions, implementing standard security headers and HTTPS, and publishing clear privacy and contact information to improve transparency and compliance.

2142.net appears to be a small web design service provider with a long claimed history since 1978. The website content is minimal, consisting mainly of a brief tagline and basic contact information. The domain is well aged, registered since 2003, which supports the legitimacy of a longstanding business. However, the website lacks critical business and compliance pages such as privacy policy, cookie policy, and terms of service, which limits its professionalism and compliance posture. Technically, the site shows no evidence of modern frameworks, CMS, or analytics tools, and no security headers or HTTPS status were detected, indicating a weak security posture. The absence of forms or external links further suggests a simple informational landing page rather than a fully developed business website.

Phasieland.com is a niche website offering original children's fairy tales in multiple languages, distributed as PDFs and audio MP3s. The site targets parents and children interested in educational and imaginative content. The business model includes direct content distribution, affiliate marketing through Amazon, and merchandise sales via Zazzle. The website has a consistent brand presence with multilingual support and social media engagement, positioning it as a small but established player in the children's literature niche. Technically, the website uses standard HTML5, CSS3, and JavaScript, with integrations for Yandex Metrika analytics and Gumroad for digital sales. Hosting is provided by HostGator, and the domain is registered with Launchpad.com Inc. The site shows moderate performance and basic mobile optimization but lacks advanced CMS or frameworks. SEO and accessibility are basic but functional. From a security perspective, the site lacks critical security headers and DNSSEC is not enabled, which are areas for improvement. No HTTPS status was explicitly detected in the HTML content, but the domain uses reputable hosting. No forms or user input fields reduce attack surface, but privacy and cookie policies are missing, indicating compliance gaps. No incident response or security policies are published. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. The main risks relate to privacy compliance and security hardening. Strategic improvements in security headers, privacy disclosures, and HTTPS enforcement would enhance trust and compliance.

Reactdatepicker.com is a specialized website offering a simple and reusable datepicker component for React developers. The site is branded and crafted by HackerOne, a reputable company known for security and open source contributions. The website provides extensive code examples, documentation, and badges indicating active maintenance and testing. The target audience is primarily developers seeking UI components for React applications. The business model revolves around open source software distribution and community engagement. Technically, the site uses modern frontend technologies including React, TypeScript, Font Awesome, and Google Fonts, delivering a fast and mobile-optimized experience with good accessibility and SEO basics. Security posture is moderate; while the domain is secured with transfer and update prohibitions and uses HackerOne name servers, DNSSEC is not enabled and no security headers were detected in the provided data. Privacy compliance is low due to absence of privacy and cookie policies. No contact information or incident response details are published on the site. Overall, the domain registration is consistent with the website content and company branding, indicating high legitimacy and trustworthiness.

V

Vercel

nextjs.org

71

Next.js by Vercel is a leading full-stack React framework designed for building high-quality web applications. The website reflects a mature and professional technology company with a strong market position supported by Vercel. The platform offers a comprehensive set of features including built-in optimizations, advanced routing, server actions, and dynamic HTML streaming, targeting web developers and enterprises. The technical infrastructure is modern, leveraging React and Next.js frameworks, hosted on Vercel's platform, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though there is room to improve by publishing explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is trustworthy, professional, and well-aligned with the business claims.

T

Toyota European Union

toyota-europe.com

74

Toyota Motor Europe operates a comprehensive and professionally designed website serving as the primary digital presence for Toyota's automotive business across Europe. The site emphasizes Toyota's mission of delivering mobility and happiness through its products and services. It targets a broad European audience including consumers and business clients interested in Toyota vehicles, dealer locations, and financing options. The website is part of a larger ecosystem of localized Toyota sites across multiple European countries, reinforcing Toyota's strong market position in the transportation sector. Technically, the site leverages modern enterprise-grade technologies such as Adobe Experience Manager, Adobe Launch, and Datadog RUM for performance monitoring and analytics, ensuring a robust and scalable infrastructure. The use of privacy-conscious analytics and consent mechanisms indicates a mature approach to data privacy and compliance.

E

EthicalAds

ethicalads.io

65

EthicalAds is a specialized advertising network focused on software developers, leveraging AI-powered contextual targeting to deliver relevant ads while prioritizing user privacy. The company operates under the parent organization Read the Docs, which adds credibility and stability to its market presence. EthicalAds emphasizes transparency, privacy compliance, and a developer-centric approach, distinguishing itself in the ad network space by avoiding third-party tracking and cookie usage. The website content is professional, well-structured, and optimized for both desktop and mobile users, reflecting a mature digital presence. From a technical perspective, EthicalAds employs modern web technologies including Pelican as a static site generator, Bootstrap for responsive design, and privacy-friendly analytics via Plausible. The site is fast, accessible, and SEO-optimized, with no detected security vulnerabilities or exposed sensitive data. However, explicit security headers are not evident, and there is no public security policy or vulnerability disclosure mechanism, which could be improved to enhance trust and security posture. Security-wise, the site enforces HTTPS and avoids third-party tracking scripts, aligning well with privacy regulations such as GDPR. The absence of cookie banners is justified by the lack of cookies or tracking pixels. WHOIS data is unavailable due to privacy protection, which is common for businesses valuing registrant confidentiality. Overall, EthicalAds demonstrates a strong security and privacy posture appropriate for its business model. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security and compliance. EthicalAds is well-positioned as a trustworthy, privacy-conscious ad network serving the developer community.

S

SIMPLO s.r.o.

easycookie.io

53

EasyCookie is a small technology company (SIMPLO s.r.o.) providing GDPR cookie consent management solutions primarily targeting website owners and digital agencies. Their SaaS platform offers features such as automatic cookie scanning, customizable consent banners, multi-language support, and integration with Google Consent Mode v2 to help clients maintain compliance with privacy regulations. The website is professionally designed with clear navigation, responsive layout, and transparent pricing plans including a free tier to attract new users. Technically, the site uses modern web technologies including Google Tag Manager, JavaScript, and Laravel backend inferred from cookies. The site is served over HTTPS with a good SSL configuration, though some security headers are missing. The cookie consent mechanism is implemented with detailed cookie categorization and user consent options. Analytics tools like Google Analytics and Hotjar are used for user behavior tracking, with moderate user tracking levels. From a security perspective, the site demonstrates good practices such as CSRF protection and HTTPS enforcement. However, the absence of a published privacy policy, terms of service, and incident response contacts are notable gaps. The WHOIS data is not publicly available due to privacy protection, which is common for small SaaS providers but slightly reduces transparency. No signs of malware or phishing were detected, and the content is safe for general audiences. Overall, EasyCookie presents a trustworthy and functional GDPR compliance solution with room for improvement in privacy transparency and security header implementation. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen trust and compliance posture.

P

Placed

placed.com

70

Placed is a technology company specializing in location intelligence and online to offline attribution services, providing businesses with insights into consumer location data and ad intelligence. The company was acquired by Foursquare in 2019, which is reflected in the website content and linked legal documents. The website is professionally designed, mobile optimized, and uses modern analytics and marketing tools such as Google Tag Manager and Marketo. Privacy and terms of service are linked to Foursquare's legal pages, indicating integration with the parent company's compliance framework. However, the lack of WHOIS data and absence of direct contact information slightly reduce trustworthiness. Security posture is generally good with HTTPS and CSRF tokens, but could be improved by adding explicit security headers and a cookie consent mechanism.

F

Foursquare

swarmapp.com

62

Swarm by Foursquare is a well-established location-based social networking service that enables users to check in and track places. The company has a strong market presence with a mobile app available on iOS and Android platforms. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and Yoast SEO. Privacy and terms of service pages are present and comprehensive, indicating good compliance with data protection regulations such as GDPR. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. No incident response or vulnerability disclosure policies are publicly available. Overall, the website is trustworthy, safe, and provides a good user experience.

T

Trakkr

trakkr.ai

67

Trakkr is a technology startup offering a SaaS platform that provides real-time monitoring and visibility of brand mentions across major AI language models such as ChatGPT, Claude, and Gemini. The platform targets businesses and marketing teams seeking to optimize their AI search presence and gain competitive intelligence. The website is built on the Bubble.io platform, leveraging Cloudflare for DNS and CDN services, and integrates PostHog for analytics tracking. The design and content quality are good, with clear messaging and modern UI elements, although no explicit privacy or cookie policies are present on the main page. Security posture is solid with HTTPS enforced and domain transfer locked, but DNSSEC is not enabled, and no security.txt or incident response contacts are published. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility, suitable for a small tech startup.

A

Alive Platform

aliveplatform.com

69

Alive Platform is a technology company offering a suite of integrated business applications focused on card management, insurance, marketing, and portal services. The platform targets organizations requiring specialized management tools and provides access to multiple applications via a centralized portal. The company appears to have been established around 2010, indicating a mature presence in its niche market. Technically, the website is built with standard HTML and CSS, utilizing Google Fonts for typography. Hosting is likely on Amazon AWS infrastructure, inferred from DNS nameservers. The site is functional but basic, with minimal content on the landing page primarily serving as a navigation hub to subdomains hosting individual applications. Mobile optimization and accessibility are basic, and no advanced frameworks or CMS are detected. From a security perspective, the site uses HTTPS and has a domain status of OK, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are published, and no contact or incident response information is provided, which limits transparency and compliance with privacy regulations. No analytics or advertising scripts are detected, indicating minimal user tracking. Overall, the website is moderately trustworthy and functional but would benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and regulatory adherence.

I

International University Sports Federation

fisu.net

52

The International University Sports Federation (FISU) operates a comprehensive and professionally designed website serving as the official portal for university sports worldwide. The site provides news, event calendars, results, educational programs, and support resources targeting universities, sports federations, media, and event organizers. Recognized by the International Olympic Committee, FISU holds a strong market position as a global leader in university sports. The website demonstrates a mature digital infrastructure built on WordPress with modern technologies such as Yoast SEO, Swiper.js, Google reCAPTCHA, and Google Tag Manager, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though explicit security headers and a published security policy are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data reduces transparency but is common for such organizations. Overall, the website is trustworthy, professional, and well-maintained, supporting FISU's mission effectively.

The website at www.arisf.sport is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The site lacks any visible business information, contact details, or user-facing content, which severely limits the ability to assess its business operations or market positioning. The WHOIS data is unavailable due to privacy protection or non-registration, further complicating legitimacy verification. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern frameworks or CMS indications. Security posture is weak due to the absence of security headers and no visible SSL configuration details. Overall, the site appears either under maintenance, misconfigured, or intentionally restricted, resulting in a low trust and credibility score.

E

EQS Group GmbH

reveal.sport

64

The website ita.whistleblowernetwork.net serves as a secure and anonymous whistleblower platform named REVEAL, focused on supporting investigations into anti-doping rule violations and criminal behavior in sports. It is branded and operated under EQS Group GmbH, a recognized compliance service provider. The platform targets individuals who wish to report sensitive information confidentially to help maintain integrity in sports. Technically, the site is built using Angular framework with Material Design components, delivering a modern and responsive user experience. However, SEO and accessibility features are basic, and no advanced analytics or tracking scripts are detected. Security posture is moderate with HTTPS implied but no explicit security headers visible in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Contact information and incident response details are not provided on the main page, which could be improved for transparency and trust. Overall, the domain is a subdomain with no direct WHOIS registration data, which is typical and not suspicious given the parent domain and branding alignment. The website is safe, professional, and serves a niche compliance function with moderate trustworthiness.

The website dataskimo.org serves as an informational portal for the International Ski Mountaineering Federation (ISMF), providing competition results, rankings, event calendars, and championship details primarily targeting athletes, coaches, officials, and fans within the ski mountaineering community. The site is relatively new, with the domain registered in October 2023, aligning with the fresh content and niche sports focus. The business model centers on disseminating sports competition data rather than commercial transactions. From a technical perspective, the website employs basic HTML and CSS without advanced frameworks or CMS platforms. Hosting is provided by OVH sas, a reputable provider, but the site lacks modern optimizations such as mobile responsiveness and accessibility features. No analytics or tracking technologies are detected, indicating minimal user data collection. Security posture is limited; no HTTPS enforcement or security headers are evident, and no privacy or cookie policies are present, which may expose the site to trust and compliance issues. The absence of contact information and incident response channels further reduces the site's security maturity. However, no signs of malicious activity or vulnerabilities are detected. Overall, the site is functional for its informational purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

T

The Blue Shield International

theblueshield.org

60

The Blue Shield International is a non-profit organization dedicated to protecting cultural heritage worldwide. Their website presents a professional and well-structured platform that highlights their governance, international missions, training programs, and national committee activities. The organization targets cultural heritage professionals, governments, and NGOs, positioning itself as a key player in the cultural heritage protection sector. The website leverages WordPress with Elementor and several plugins to deliver content effectively, including event calendars and document libraries. Technically, the site is modern and mobile-optimized, though performance is moderate and accessibility is basic. Security measures include HTTPS, a firewall plugin, and cookie consent mechanisms, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the site is trustworthy, with transparent WHOIS data consistent with the organization's history and no signs of suspicious activity or adult content.

The website at eblida.org is currently inaccessible, returning a 403 Forbidden error page which blocks access to any substantive content. This prevents extraction of business, contact, or policy information from the site. The domain is registered with Gandi SAS since 1998, indicating a long-standing registration, but the lack of accessible content limits the ability to assess the organization's market position or services. Technically, the site lacks DNSSEC and security headers, and no analytics or tracking scripts are present in the HTML. The security posture is minimal due to the absence of visible security best practices, though the domain registration status provides some trust. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and limited transparency.

The International Federation of Library Associations and Institutions (IFLA) operates as a globally recognized non-profit organization dedicated to supporting libraries and information professionals worldwide. Their website serves as a comprehensive platform for advocacy, professional development, events, and resources, positioning IFLA as a leading voice in the library sector. The organization targets library associations, institutions, and professionals, offering membership benefits and fostering global collaboration. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Slick Carousel, Google Tag Manager, and Hotjar for analytics and user experience enhancement. Hosting and CDN services appear to be provided by Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs best practices such as asynchronous loading of analytics scripts. However, there is room for improvement in implementing comprehensive security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data due to privacy protection is typical for organizations of this nature and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving transparency around incident response.

Oxy.host is a WordPress-based website showcasing design sets and templates built with the Oxygen builder plugin. The site targets web designers and developers who use WordPress and Oxygen builder, offering importable page sections and full site templates to enhance their design workflow. The business model revolves around promoting the Oxygen builder product and providing design assets to its user base. Technically, the site runs on WordPress 6.8.3 with Oxygen Builder plugin version 3.8.1, uses jQuery and Adobe Typekit fonts, and leverages Cloudflare DNS services. The site performance and mobile optimization are basic but functional. Security posture is moderate with domain transfer protection and Cloudflare DNS, but lacks DNSSEC, security headers, and visible HTTPS enforcement. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, including a support email and phone number, along with active social media links. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy compliance measures.

O

Oxygen Builder

oxygenbuilder.com

60

Oxygen Builder is a technology company specializing in a powerful WordPress visual website builder aimed primarily at developers and designers seeking pixel-perfect control and performance. Founded in 2017, the company has established a solid market position within the WordPress ecosystem, offering a feature-rich product that integrates design flexibility, dynamic data, and reusable components. The website demonstrates excellent content quality, professional design, and strong SEO practices, supported by structured data and social proof from a sizable user base. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though some security headers and explicit policies could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, Oxygen Builder presents a credible and professional online presence with room for enhanced transparency in privacy and security disclosures.

M

Marcogaz

marcogaz.org

53

Marcogaz is a technical association representing the European gas industry, focusing on advancing technical knowledge and supporting policy development related to gas quality, methane emissions, safety, and decarbonization technologies such as hydrogen and biomethane. The website is professionally designed using WordPress, incorporating modern web technologies and plugins to provide a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of visible contact emails or phone numbers suggests a preference for controlled communication channels, typical for industry associations. WHOIS data is unavailable due to privacy or query failure, but the website's professional appearance and partner affiliations indicate legitimacy. Overall, the site demonstrates a mature digital presence suitable for its sector, with moderate tracking and compliance mechanisms in place.

I

International Gas Union

igu.org

64

The International Gas Union (IGU) operates as a leading global organization dedicated to the gas industry, focusing on advocacy, research, and event organization to promote sustainable and innovative gas technologies worldwide. Their website reflects a mature digital presence with comprehensive content including industry reports, event information, and membership details. The technical infrastructure leverages modern web technologies such as Next.js and React, hosted on Vercel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with cookie consent mechanisms present but lacking explicit privacy and terms of service pages. Overall, the site projects high professionalism and trustworthiness, supporting IGU's position as an essential entity in the energy sector.