Security Directory

F

Fortressa

fortressa.com

55

Fortressa is a technology company providing an app store platform for open-source applications, enabling organizations to replace costly per-seat SaaS products with self-hosted, privacy-focused alternatives. The website presents a clear business model centered on cost savings, data ownership, and customization for businesses seeking control over their software stack. The company appears to be established, with a domain registered since 2004 and a consistent brand presence. Technically, the website uses modern front-end technologies such as Tailwind CSS, Alpine.js, and HTMX, delivering a responsive and user-friendly experience. The site is hosted securely with HTTPS, though some security best practices like DNSSEC and security headers are not fully implemented. Analytics are handled via Shynet, a privacy-conscious alternative, indicating a commitment to user privacy. Security posture is moderate; while HTTPS is enforced and forms include basic anti-bot challenges, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Contact options include email forms and social media, but no phone or physical address is provided. Overall, Fortressa presents a trustworthy and professional online presence with a niche focus on open-source SaaS alternatives. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance their security posture and regulatory alignment.

Eyrie Solutions is a small technology company specializing in software licensing and professional services related to the Tcl/Tk IronTcl binary distribution and the Eagle project. Their offerings include licensing, commercial licenses for open-source and proprietary plugins, as well as consulting and support services tailored to native Tcl/Tk and Eagle integration. The website presents a focused business model targeting developers and organizations requiring these niche software solutions. Technically, the website is built with standard HTML and CSS, utilizing Google Fonts for typography. The site is basic in design and mobile optimization but provides clear navigation and relevant content. Security posture is limited based on the provided data, with no visible HTTPS confirmation or security headers, and no privacy or cookie policies, indicating compliance gaps. No WHOIS data is available due to TLD limitations, which reduces transparency but does not necessarily indicate illegitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures and compliance documentation.

E

Eclipse Foundation AISBL

eclipse.foundation

73

The Eclipse Foundation AISBL is a well-established international non-profit organization based in Brussels, Belgium, dedicated to fostering open source software collaboration and innovation. It supports a large global community with over 410 open source projects and more than 360 members worldwide. The foundation provides a vendor-neutral environment that promotes industry-ready open source innovation across multiple technology sectors including cloud, automotive, IoT, and AI. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built using modern technologies such as the Hugo static site generator, Google Tag Manager for analytics, and FontAwesome for icons. It demonstrates good performance, mobile optimization, and accessibility. SEO best practices are followed with proper meta tags and structured navigation. The site uses HTTPS exclusively, ensuring secure communications. From a security perspective, the site implements cookie consent mechanisms and maintains privacy and legal policies that indicate GDPR compliance. However, explicit security headers are not detected in the HTML content, and no security.txt file is published for vulnerability disclosure. No exposed sensitive data or vulnerabilities are apparent. The WHOIS data is privacy protected, which is appropriate for a non-profit of this scale, though it limits direct verification of domain registration details. Overall, the Eclipse Foundation website presents a trustworthy, professional, and secure platform for its community and stakeholders. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to further strengthen security posture and transparency.

M

Mirek Beneš

mirekbenes.cz

43

Mirek Beneš operates as a freelance frontend developer based in the Czech Republic, offering specialized services in HTML template coding, JavaScript programming, WordPress development, graphic design, and email newsletter coding. The website serves as a professional portfolio showcasing client references and detailed service offerings, targeting businesses and clients across the Czech Republic seeking quality frontend development and web design solutions. The business model is focused on external collaboration and contract work, with a clear emphasis on usability and modern web standards. Technically, the website is well-constructed using modern web technologies including HTML5, CSS3, SVG graphics, and JavaScript libraries such as Swiper.js for carousels. The site is mobile-optimized, fast-loading, and SEO-friendly, with minimal but privacy-conscious analytics implemented via Plausible Analytics. However, there is no detected CMS or hosting provider information, and no advanced frameworks are identified. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture and transparency. Overall, the website presents a professional and trustworthy image for a small freelance business but would benefit from improved privacy compliance and security best practices. The absence of WHOIS data reduces domain trustworthiness slightly, but the content quality and business transparency mitigate this concern. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to strengthen compliance and security.

B

The 20 best boutique hotels in Madrid

boutiquehotels-madrid.com

52

The website boutiquehotels-madrid.com is a specialized online platform focused on showcasing and facilitating bookings for boutique hotels in Madrid. It offers curated hotel listings with detailed descriptions, ratings, and booking links, targeting travelers seeking unique and stylish accommodations. The site also provides guidance on local dining and nightlife, enhancing the visitor experience. Technically, the site employs modern web technologies and is hosted with Cloudflare DNS services, ensuring reasonable performance and availability. However, it lacks some advanced security measures such as DNSSEC and security headers, and does not publish privacy or cookie policies, which are important for compliance and user trust. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

B

The 20 best boutique hotels in New York

boutiquehotels-newyork.com

51

The website boutiquehotels-newyork.com is a niche online travel guide focused on boutique hotels in New York City. It provides curated hotel listings with descriptions, ratings, and booking links, targeting travelers seeking unique and stylish accommodations. The business model appears to be referral-based, linking users to hotel booking platforms. The domain is well-established since 2014, with professional domain management via Gandi SAS and Cloudflare DNS services. Technically, the site uses modern web standards, Google Fonts, and is mobile optimized, offering a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, contact information, and security policy disclosures, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled and some security headers are missing. Overall, the site is legitimate and professionally presented but would benefit from enhanced privacy compliance and transparency.

B

The 20 best boutique hotels in Paris

boutiquehotels-paris.com

50

The website boutiquehotels-paris.com is a specialized online platform dedicated to showcasing the 20 best boutique hotels in Paris. It provides detailed hotel listings, including descriptions, ratings, room counts, and booking links, targeting travelers seeking unique and stylish accommodations in Paris. The business operates as a travel guide and booking referral service, with a focus on boutique hospitality in the French capital. The domain is well-established since 2014, indicating a mature presence in the niche market. Technically, the site employs modern web standards with HTTPS and Cloudflare DNS, ensuring secure and reliable access. However, it lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR regulations. No direct contact or incident response information is provided, limiting transparency and user trust. Overall, the site offers a good user experience with professional design and relevant content but requires improvements in privacy, security, and contact disclosures to elevate its trustworthiness and compliance posture.

B

The 20 best boutique hotels in Berlin

boutiquehotels-berlin.com

51

The website boutiquehotels-berlin.com serves as a specialized online guide for boutique hotels in Berlin, offering curated hotel listings, descriptions, ratings, and booking links. It targets travelers seeking unique and stylish accommodations in Berlin, positioning itself as a niche player in the hospitality travel sector. The business model revolves around providing information and facilitating bookings through affiliate or partner links. Technically, the site employs modern web standards with HTTPS, Cloudflare DNS, and responsive design, though it lacks advanced security headers and DNSSEC. The absence of privacy and cookie policies, as well as contact and incident response details, indicates gaps in compliance and transparency. Security posture is moderate with room for improvement in headers and policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

Read the Docs, Inc

rtfd.org

58

Read the Docs, Inc operates a documentation building and hosting platform aimed at developers, providing versioned documentation, integrated search, and pull request previews. The website content is professional and targeted towards a technical audience, positioning itself as an established player in the documentation hosting market. The technical infrastructure is based on the Pelican static site generator and uses modern web technologies including Font Awesome icons. The site demonstrates good design quality and mobile optimization but lacks visible security headers and explicit privacy or cookie policies. No blocking or WAF mechanisms were detected, and the site is accessible without restrictions. The WHOIS data for the subdomain is not available, which is typical for subdomains, and does not raise immediate concerns. Overall, the site presents a moderate risk profile with room for improvement in security and privacy compliance.

S

Sursiendo

sursiendo.org

10

Sursiendo is a small non-profit organization focused on digital rights and digital culture, primarily serving Spanish-speaking communities in Latin America, particularly Argentina. The organization has been active since 2011 and provides advocacy, research, community accompaniment, and educational materials to promote collective digital rights and open, collaborative digital environments. Their website reflects a clear mission and thematic focus, targeting activists, researchers, and community members interested in digital culture and rights. Technically, the website is built on WordPress using the Understrap theme framework and employs jQuery. The site is mobile-optimized with good SEO practices and a moderate performance profile. Hosting details are not explicit, but the domain is registered with Gandi SAS, a reputable registrar. The website uses HTTPS but lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. From a security perspective, the site demonstrates basic good practices such as HTTPS and clientTransferProhibited domain status but lacks cookie consent mechanisms and security headers like CSP or HSTS. No direct contact emails or phone numbers are provided, only a contact form. There is no visible security policy or incident response information. The domain WHOIS data is transparent and consistent with the organization's claims, supporting legitimacy. Overall, the website is professional, trustworthy, and content-rich but could improve privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to strengthen trust and compliance.

D

Duurzaam in Staal

duurzaaminstaal.nl

40

Duurzaam in Staal is a specialized information platform focused on promoting steel as a sustainable building material in the Netherlands. The website provides comprehensive content on sustainability themes such as energy use, light construction, recycling, and reuse, targeting professionals and stakeholders in the construction and steel industries. It maintains a niche authoritative position by offering access to publications, events, and tools related to sustainable steel construction. Technically, the site uses a traditional web stack including Bootstrap, jQuery, and common CSS/JS libraries, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance mechanisms such as cookie consent. Contact information is clearly presented, including phone and physical address, and social media presence is established on LinkedIn and Twitter. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Q

Quotev

quotev.com

65

Quotev is an interactive media platform that enables users to read and write stories, take quizzes, and participate in surveys and polls. The platform targets a general audience interested in creative and social content, positioning itself as a niche community for interactive storytelling and entertainment. The website demonstrates a good level of content quality and user experience, with a consistent brand presentation and clear navigation. Technically, the site uses modern web technologies including asynchronous JavaScript loading and responsive design, providing a moderate performance and good mobile optimization. However, the absence of WHOIS domain registration data raises questions about domain legitimacy and ownership transparency. Security-wise, the site employs cookie consent mechanisms and privacy policies compliant with GDPR, but lacks visible security headers and explicit incident response information, indicating room for improvement in security posture. Overall, the site is functional and trustworthy for general users but would benefit from enhanced security practices and clearer business transparency.

5

5mods

gta5-mods.com

65

GTA5-Mods.com is a well-established community platform dedicated to providing a comprehensive repository of mods for the Grand Theft Auto V PC game. It serves a global audience of gamers and modders by offering a wide variety of downloadable content including vehicles, scripts, player skins, and tools. The platform operates primarily on a user-generated content model supported by advertising revenue and community engagement through social media and Discord. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, and Prebid.js for advertising and analytics, ensuring a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and includes CSRF tokens, with a consent management system for GDPR compliance, though it lacks explicit security policy disclosures or incident response information. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the site's legitimacy given its active community and professional presentation. Overall, the site demonstrates a mature digital infrastructure with room for improvement in security transparency and domain registration clarity.

A

ActiveState Software Inc.

komodoide.com

60

ActiveState Software Inc. operates the Komodo 12 Documentation website, providing comprehensive resources for their cross-platform, multi-language IDE integrated with the ActiveState Platform and State Tool. The company targets developers and software engineers seeking advanced development tools. The website is professionally designed with good navigation and content relevance, supporting a medium-sized technology business model with a strong market presence in developer tools. Technically, the site uses modern web technologies including Hugo static site generator, Google Analytics, and highlight.js for code syntax highlighting. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy, safe, and professional, with no signs of malicious content or blocking mechanisms.

B

BMW Loyalty

bmwlive.be

56

BMW Loyalty is a premium loyalty program platform targeting BMW vehicle owners in Belgium and Luxembourg. It offers exclusive membership clubs and unique experiences designed to enhance customer engagement and brand loyalty. The platform is well-branded, consistent with BMW Group standards, and provides clear navigation and content relevant to its target audience. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and integrates video content via Vimeo. The site is mobile-optimized and accessible, with a cookie consent mechanism supporting GDPR compliance. Security posture is adequate with HTTPS implied, secure login and registration forms, but lacks visible security headers and explicit incident response contacts. WHOIS data is restricted by the registry, but domain legitimacy is supported by branding and domain structure. Overall, the site is professional, trustworthy, and aligned with BMW's premium market positioning.

B

BMW Loyalty

bmwmleague.be

57

BMW Loyalty Belgium operates a premium loyalty program targeting BMW vehicle owners in Belgium, offering exclusive clubs and lifestyle experiences such as the BMW Excellence Club and BMW M League. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its target audience. The technical infrastructure uses modern web standards and includes video integration via Vimeo. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though additional security headers could enhance protection. WHOIS data is privacy protected as per .be registry policies, which is typical and justified for this business type. Overall, the site reflects a mature digital presence aligned with BMW's brand standards.

B

BMW Loyalty

bmw-pure-emotions.be

56

BMW Loyalty is a premium loyalty program platform targeting BMW vehicle owners and enthusiasts in Belgium. It offers exclusive membership clubs and curated experiences that emphasize luxury, performance, and lifestyle events. The website is well-branded, professionally designed, and provides clear navigation to various loyalty offerings. Technically, the site uses modern web standards with responsive design and integrates multimedia content via Vimeo. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers are not evident and could be improved. The WHOIS data is restricted, which limits domain ownership transparency but the site’s branding and content strongly support legitimacy. Overall, the site presents a trustworthy and professional digital presence aligned with BMW’s premium brand.

B

BMW Loyalty

bmwexcellenceclub.be

57

BMW Loyalty is a premium loyalty program platform targeting BMW vehicle owners in Belgium, offering exclusive clubs and lifestyle experiences such as the BMW Excellence Club and BMW M League. The website is professionally designed with clear navigation and content relevant to its target audience. Technically, it uses modern web standards, including HTTPS and cookie consent mechanisms, ensuring a good user experience and privacy compliance. Security posture is adequate but could be improved by adding HTTP security headers and publishing security policies. WHOIS data is restricted due to DNS Belgium policies, but the domain's subdomain relationship to bmw.be supports legitimacy. Overall, the site is trustworthy and well-positioned within the BMW brand ecosystem.

S

squeak-smalltalk

squeakfoundation.org

60

The website is a GitHub-hosted open source repository named 'squeak-object-memory' under the organization 'squeak-smalltalk'. It focuses on issues and assets related to the Squeak object memory, targeting developers and users interested in Smalltalk technology. The project has been active since 2007, indicating a mature and stable presence in its niche. The platform leverages GitHub's infrastructure, providing source code hosting, issue tracking, and collaboration features. The website design is professional and optimized for both desktop and mobile users, with good accessibility and SEO practices. Security is robust with HTTPS enforced and domain protections in place, although DNSSEC is not enabled. Privacy and cookie policies are absent, which is a compliance gap. No direct contact or incident response information is provided, limiting transparency in these areas. Overall, the website is trustworthy and technically sound but could improve privacy compliance and security transparency.

F

Fantaisie Software

purebasic.com

48

PureBasic.com is the official website for PureBasic, a modern BASIC programming language developed by Fantaisie Software since 1998. The site provides comprehensive information about the language's features, supported platforms, and related products such as SpiderBasic. The business targets both beginner and expert programmers seeking a fast, portable, and easy-to-use BASIC compiler and IDE. The website is professionally designed with clear navigation and relevant content, supporting multiple languages and offering user login functionality. Technically, the site uses a modern tech stack including HTML5, CSS3, JavaScript libraries like jQuery, Modernizr, and Google Analytics for tracking. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. No CMS or hosting provider details are evident. Performance is moderate with no blocking or WAF detected. Security posture is moderate; the site uses HTTPS but lacks visible security headers and published security policies. Forms use POST methods but no explicit cookie consent or GDPR compliance mechanisms are present. WHOIS data is missing, which reduces trustworthiness but the site content and business information appear legitimate. No vulnerabilities or exposed sensitive data were detected. Overall, PureBasic.com is a trustworthy and professional site for a niche programming language product. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance.

T

The R Foundation

r-project.org

45

The R Project for Statistical Computing is an established open source initiative providing a free software environment for statistical computing and graphics. Supported by The R Foundation, it serves a global audience of statisticians, data scientists, and researchers. The website reflects a mature project with comprehensive documentation, community engagement, and regular updates. Technically, the site uses standard web technologies such as Bootstrap and jQuery, delivering a responsive and navigable user experience. However, some modern security practices like security headers and privacy policies are missing, which could be improved to enhance compliance and trust. The WHOIS data is unavailable due to privacy restrictions, which is common for open source foundations and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the technology sector.

Fantom.org is the official website for the Fantom programming language, a portable language designed to run on the JVM and modern web browsers. The site provides resources such as documentation, downloads, community forums, and a library repository called Eggbox. The target audience is developers interested in JVM and web programming. The business operates as an open source project with community contributions and maintains a niche position in the programming language market. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Custom Search and Cloudflare DNS services. The site is moderately optimized for performance and mobile devices, with basic accessibility and good SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact information or incident response details are provided, limiting user trust and support avenues. Overall, the domain registration is consistent and legitimate, supporting the website's credibility.

D

D Language Foundation

dlang.org

42

The D Language Foundation operates the official website for the D programming language, a general-purpose, statically typed language with systems-level access and C-like syntax. The foundation supports the language's development, community engagement, and ecosystem growth. The website serves as a comprehensive resource hub offering documentation, tutorials, community forums, package management, and downloadable compiler binaries. It targets software developers and technology enthusiasts interested in efficient and modern programming languages. The foundation is a non-profit entity coordinating volunteer efforts and sponsorships to sustain the language's evolution. Technically, the website is well-structured, leveraging modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and CodeMirror for interactive code examples. It uses Cloudflare for DNS and likely CDN services, ensuring fast performance and good mobile optimization. The site is accessible, SEO-friendly, and provides a rich user experience with clear navigation and relevant content. However, it lacks some modern security headers and DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. There are no forms collecting sensitive personal data, reducing attack surface. However, the absence of a privacy policy, cookie consent mechanism, security policy, and incident response contact information represents compliance and transparency gaps. No vulnerability disclosure or security.txt files were found, which could hinder responsible vulnerability reporting. Overall, the website is professional, trustworthy, and technically sound but could improve privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear security and incident response information to enhance user trust and regulatory compliance.

6d Sports Nutrition operates a multilingual website focused on sports nutrition products, targeting consumers interested in health and fitness. The business model is primarily e-commerce retail, with a niche market position in sports nutrition. The website serves as a landing page directing users to language-specific subdomains for detailed content. Technically, the site uses basic HTML, CSS, and JavaScript with Google Fonts integration, hosted under a domain registered via Dynadot, LLC. The site shows moderate performance and basic mobile optimization but lacks advanced technical frameworks or CMS platforms. Security posture is minimal with no visible security headers or policies, and privacy compliance is lacking due to absence of privacy or cookie policies. No contact or incident response information is provided, limiting trust and transparency. Overall, the site is safe with no adult or explicit content detected, but improvements in security, privacy, and business information disclosure are recommended.

J

Jan Gregor

jgregor.cz

52

Jan Gregor is a certified Webflow Premium Partner specializing in custom Webflow web development solutions primarily targeting businesses and agencies seeking high-quality, scalable, and SEO-optimized websites. The company has established a strong market position in the Czech Republic with a portfolio of notable clients and projects, emphasizing technical SEO, localization, and lead automation. The website demonstrates a modern technical infrastructure leveraging Webflow CMS, GSAP animations, and secure AJAX form submissions, reflecting a mature digital presence. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

H

Hosting Ukraine LLC

redvid.io

60

RedVid.io is a small technology company providing a free online utility service that allows users to download videos, audio, GIFs, and images from Reddit. The service is positioned as a fast, easy-to-use tool with no registration required, targeting Reddit users who want to save content offline. The business model relies on advertising revenue, primarily through Google Adsense. The website is professionally designed with good content relevance and clear navigation, optimized for mobile devices and multiple languages. Technically, the site uses modern web technologies including Google Fonts, Google Tag Manager, and Cloudflare DNS, hosted by Hosting Ukraine LLC in Ukraine. Security posture is good with HTTPS enabled and CSRF tokens in forms, though some security headers could be improved and DNSSEC is not enabled. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit security or incident response policies are found. WHOIS data is consistent with the website's business profile and domain age is appropriate for a recently launched service. Overall, RedVid.io presents a trustworthy and functional online tool with room for security and compliance enhancements.

Pragolab s.r.o. is a well-established Czech company specializing in the supply and servicing of laboratory instruments and equipment, primarily serving analytical chemistry and physical measurement sectors. Founded in 1998, it holds a strong market position as one of the leaders in laboratory equipment within the Czech Republic. The company targets scientific institutions and laboratories, offering a range of products and services including sales, maintenance, and application support. The website reflects a professional and consistent brand image with clear business focus and relevant content.

P

Play Puls

playpuls.pl

60

Play Puls is a Polish media service delivering enhanced terrestrial digital TV viewing experiences via HbbTV technology. It allows users with internet-connected TVs to pause, rewind, and watch programs from Puls and Puls 2 channels live or on demand for free. The website is professionally designed with modern frontend technologies such as Tailwind CSS and Font Awesome, hosted by OVH SAS, and uses Cloudflare Insights for analytics. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide contact or security incident response information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, supporting a stable business presence.

The website ublg.cz represents the Ústav biologie a lékařské genetiky 2. LF UK a FN Motol, an academic and healthcare institute affiliated with Charles University and the Motol University Hospital in the Czech Republic. It serves as an informational and service portal for patients, students, and laboratory service applicants, providing access to satisfaction surveys, genetic counseling information, educational videos, and event registration. The site is modest in size and scope, targeting a specialized audience in healthcare and education sectors. Technically, the website employs modern web technologies such as Bootstrap 5 for responsive design and is structured with clean HTML5 markup. However, it lacks advanced SEO and accessibility features and does not appear to use a CMS or advanced analytics tools. Performance is moderate with good mobile optimization but basic accessibility. From a security perspective, the site is accessible over HTTPS (assumed from domain context though SSL details not provided), but lacks visible security headers and published security or privacy policies. No contact information or incident response channels are provided, which limits transparency and user trust. The WHOIS data is consistent and supports the legitimacy of the domain, which has been active since 2011. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and policy disclosures to improve trust and regulatory adherence.

The website iua2026.com serves primarily as a landing page embedding an external event registration platform via an iframe. It targets attendees or registrants for an event named 'iua2026', providing language options for Spanish and English, though the language selection buttons are currently commented out. The site itself contains minimal content and no direct business or contact information, relying on the embedded third-party platform for user interaction and data collection. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without any detected frameworks or CMS. The domain is registered through GoDaddy but shows suspicious WHOIS data with a future creation date, which undermines trust. No DNSSEC or security headers are enabled, and no privacy or cookie policies are present, indicating a weak security and compliance posture. The site does not appear to use analytics or advertising technologies, resulting in minimal user tracking. Security-wise, the absence of security headers and DNSSEC, combined with questionable WHOIS data, lowers the overall security score. The embedded iframe uses HTTPS, but the main domain's SSL configuration is unknown. No forms or sensitive data are directly handled on the main site, reducing exposure but also limiting business credibility. There are no signs of adult or questionable content, making the site safe for general audiences. Overall, the website's risk profile is moderate due to minimal content and weak security controls. Strategic improvements should focus on correcting WHOIS data, implementing security best practices, and adding privacy and cookie policies to enhance compliance and trustworthiness.

S

Sbírka Bílá pastelka

bilapastelka.cz

57

The website bilapastelka.cz represents a well-established charitable campaign focused on supporting people with visual impairments in the Czech Republic. It operates as a non-profit initiative, encouraging donations and volunteer participation to fund training programs, guide dog services, and employment opportunities for the visually impaired. The site is professionally designed, with clear navigation and integration of donation widgets, social media links, and volunteer statistics, reflecting a mature digital presence. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including HTTPS, CDN delivery via Amazon Cloudfront, and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good mobile optimization and basic accessibility features, although there is room for improvement in security headers and explicit privacy documentation. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism with granular user options, aligning with GDPR requirements. However, the absence of explicit privacy policies, terms of service, and security.txt files indicates gaps in compliance and vulnerability disclosure practices. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional front for its charitable mission, but the lack of WHOIS data and formal privacy documentation slightly reduces its trust score. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance its security posture and compliance standing.

E

erixx GmbH

erixx.de

56

erixx GmbH is a regional passenger rail service provider operating in Niedersachsen and northern Germany, focusing on routes through Harz, Heide, and Wendland. The company is positioned as a trusted regional transportation operator with a clear business model centered on passenger rail services. The website provides comprehensive travel information, live schedules, ticketing options, and customer support, targeting regional train passengers. The parent company is Netinera, a known transportation group, which adds to erixx's market credibility. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates a Progressive Web App manifest for enhanced user experience. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with embedded third-party widgets for timetable and route planning. From a security perspective, the website enforces HTTPS and follows several best practices, though explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible in the HTML. No vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact limits transparency in security governance. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies. The risk profile is low with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing explicit incident response contacts to improve security posture and trust.

B

Boecker Stahl-Service GmbH

boecker-stahl-service.de

51

Boecker Stahl-Service GmbH is a medium-sized steel service center based in Germany, specializing in cold-rolled, surface-finished flat steel products such as coils, sheets, and slit strips. The company operates with approximately 25 employees and is part of the larger Niedax Group, a global player in electrical installation products and services. The website reflects a professional and consistent brand presence with detailed business descriptions and news updates, targeting industrial and manufacturing clients. Technically, the site is built on Joomla CMS with Uikit framework, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protections, though security headers and cookie consent mechanisms are lacking. Overall, the site is trustworthy and well-positioned in its market niche.

B

benevol Thurgau

benevol-thurgau.ch

56

benevol Thurgau is a regional non-profit organization specializing in volunteer work facilitation within the canton of Thurgau, Switzerland. The organization focuses on promoting volunteerism, providing advisory services, offering training, and supporting local organizations. Their market position is that of a trusted regional specialist with strong community ties and partnerships. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and a cookie consent management system, ensuring compliance with privacy regulations. The use of Cloudflare Turnstile captcha enhances security against automated abuse. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers are missing and no explicit security policy is published. Overall, the site is well-structured, accessible, and trustworthy, with moderate tracking consistent with its service nature.

B

benevol St. Gallen

benevol-sg.ch

58

benevol St.Gallen is a well-established non-profit organization serving as the primary contact point for volunteer organizations, associations, and individuals interested in volunteering in the St.Gallen region of Switzerland. The website effectively communicates its mission, services, and community engagement through a professional and well-structured digital presence. It offers a variety of services including consulting, job boards, training, and rental spaces, supported by a network of over 300 partners. The organization maintains a strong market position as a regional leader in volunteer facilitation. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, and CookieYes for consent management, alongside Cloudflare's Turnstile captcha for security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive cookie consent mechanisms and GDPR-aligned privacy policies. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, making it a reliable resource for its target audience.

B

benevol Graubünden

benevol-gr.ch

56

benevol Graubünden is a Swiss non-profit organization dedicated to promoting and facilitating volunteer work within the canton of Graubünden. The organization provides advisory services, volunteer placement, and training courses for both volunteers and organizations. It holds a strong regional presence and is supported by various local partners. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, and a cookie consent management system (CookieYes). Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile captcha. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. Contact information and social media presence enhance business credibility. No critical security or compliance issues were detected.

B

benevol Kanton Bern

benevol-be.ch

57

benevol Kanton Bern is a well-established non-profit organization focused on facilitating and supporting volunteer engagement within the Kanton Bern region of Switzerland. The organization provides consulting, networking, training, and digital tools to volunteers, organizations, and municipalities. Their market position is strong regionally, supported by a professional website, clear contact information, and active social media presence. The website demonstrates a high level of digital maturity with modern technologies such as Google Analytics, Google Tag Manager, and Cloudflare Turnstile captcha integrated for security and analytics purposes. Privacy compliance is robust, featuring a detailed cookie consent mechanism and a comprehensive privacy policy in German. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

B

benevol Baselland

benevol-baselland.ch

57

benevol Baselland is a regional non-profit organization serving as the competence center for volunteer work in the Basel-Landschaft canton of Switzerland. The organization supports volunteers, associations, and municipalities through consulting, mediation, networking, and digital platforms such as benevol-jobs.ch. Their website reflects a professional and consistent brand image, targeting local community stakeholders and volunteers. The business model focuses on fostering voluntary engagement and providing resources and recognition for volunteer efforts. The organization is well-positioned regionally with partnerships and sponsorships from reputable local entities.

B

benevol Aargau

benevol-aargau.ch

52

benevol Aargau is a specialized non-profit organization dedicated to promoting and supporting volunteer work within the canton of Aargau, Switzerland. The organization provides advisory services, networking opportunities, and training for volunteers, non-profit organizations, and municipalities. Their website reflects a strong regional focus with clear communication and professional presentation, supported by a network of reputable partners and supporters. The site also promotes a dedicated volunteer job platform, enhancing engagement opportunities. Technically, the website employs modern web technologies including Laravel Livewire, Google Tag Manager, and Cloudflare's Turnstile CAPTCHA, ensuring a secure and responsive user experience. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though some security headers could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its non-profit mission.

P

PIKA SERVIS d.o.o.

mojsvet.com

46

PIKA SERVIS d.o.o. is a small Slovenian technology company specializing in computer hardware sales, repair services, web hosting, domain registration, and website development. Established in 2002, it serves local businesses, individual consumers, and educational institutions primarily in Murska Sobota. The company emphasizes customer satisfaction and offers integrated web solutions including AI-assisted site building. Technically, the website uses modern web technologies and is mobile optimized, though it lacks some advanced security headers. The site is served over HTTPS with a valid SSL certificate and includes a cookie consent mechanism, indicating basic privacy compliance. However, the domain is a subdomain without public WHOIS registration, which introduces some legitimacy concerns. Overall, the business appears credible with moderate trustworthiness but would benefit from improved security practices and clearer domain registration transparency.

I

Indonez

indonez.com

55

Indonez is a small technology business specializing in the design and sale of premium HTML templates, primarily distributed via the Themeforest marketplace. With over 15 years of domain age and experience, the company targets web developers and businesses seeking high-quality, customizable templates built with modern front-end frameworks such as UIkit 3 and Bootstrap 5. The website is professionally designed, mobile optimized, and SEO friendly, providing a good user experience and clear navigation. Technically, the site uses modern web technologies and is hosted by HOSTINGER operations, UAB, with HTTPS enabled and a valid SSL certificate. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. Privacy compliance is weak due to the lack of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is trustworthy and credible but would benefit from enhanced security and privacy practices.

K

Kmetijsko gozdarska zbornica Slovenije

kgzs.si

58

Kmetijsko gozdarska zbornica Slovenije (KGZS) is a Slovenian national chamber representing the public interest and stakeholders in agriculture, forestry, and rural development. The organization focuses on promoting sustainable agriculture, forestry, healthy environments, and safe food for the population. The website reflects a medium-sized, government-related entity with a clear mission and target audience within Slovenia's agricultural and forestry sectors. Technically, the website employs modern web technologies including Google Tag Manager, Google Fonts, Font Awesome, and reCAPTCHA for form security. The site is hosted by Webtasy, a Slovenian hosting provider, and uses HTTPS, indicating a secure connection. However, explicit privacy and cookie policies are not found in the provided HTML content, which is a compliance gap. Security posture is generally good with HTTPS and form protections but lacks visible security headers and incident response contacts. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

M

migrolino

migrolino.ch

70

Migrolino operates as a well-established retail convenience store chain in Switzerland, providing quick and convenient shopping options for daily needs. The website serves primarily as a shop finder and promotional platform, targeting the general Swiss public with localized language options in German, French, and Italian. The business model focuses on retail convenience with a strong physical presence across Switzerland, supported by an interactive map of store locations. Technically, the website leverages modern web technologies including Google Maps API, Google Fonts, and Google Analytics, ensuring a functional and user-friendly experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic privacy controls such as cookie consent, though explicit privacy policies and security headers could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business entity. Strategic recommendations include enhancing privacy compliance, publishing clear policies, and strengthening security headers to improve trust and compliance.

J

Javni štipendijski, razvojni, invalidski in preživninski sklad Republike Slovenije

srips-rs.si

54

The website represents a Slovenian government institution dedicated to scholarships, workforce development, rights of workers, employment support for disabled persons, child support compensation, and recovery. It serves a broad audience including students, workers, employers, and educational institutions. The site is well-structured with clear navigation and relevant content, reflecting a mature digital presence. Technically, it uses modern web standards, includes cookie consent, and integrates Google Tag Manager and Analytics for tracking. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is partial due to missing privacy and terms pages. Overall, the domain registration and hosting align with the institutional nature, indicating legitimacy and trustworthiness.

S

Swisscare

swisscare.ch

69

Swisscare is an established insurance provider specializing in international health and travel insurance for students, interns, au pairs, travelers, and expatriates primarily in Europe and Switzerland. The company offers a digital-first experience with instant online insurance certificates and a customer account portal. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site uses modern web standards, Cloudflare DNS, and privacy-respecting analytics, though DNSSEC is not enabled. Security posture is good with HTTPS and CSRF tokens, but lacks explicit security policies and some security headers. Privacy compliance is strong with GDPR and FADP policies and cookie consent mechanisms. Overall, the domain and website content align well, indicating a legitimate and trustworthy business with a solid market position in niche insurance services.

R

RVK

rvk.ch

52

RVK is an independent and leading service provider in the Swiss healthcare market, offering specialized services including risk and performance management, insurance medicine consulting, and education through its RVK Academy. The company targets insurers, pension funds, and enterprises, providing tailored insurance and educational solutions. The website is professionally designed, consistent in branding, and provides clear contact information and trust signals such as client testimonials and SQS-Audit certification. Technically, the site uses modern web technologies like Swiper.js and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Garanto

garanto.ch

50

Garanto is a Swiss trade union established in 2001 representing customs and border personnel. The organization provides legal protection, member services, and advocacy for its members within the customs administration sector. The website is professionally designed, multilingual (German, French, Italian), and provides clear navigation and relevant content for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper, and Fancybox, with a custom or unknown CMS. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. No critical vulnerabilities or blocking mechanisms were detected. Contact information is clearly presented, including phone and email, and a member login area is available. Overall, the site demonstrates a solid digital presence for a government-related non-profit entity.

F

Forum Schlossplatz

forumschlossplatz.ch

48

Forum Schlossplatz is a cultural institution based in Aarau, Switzerland, established in 1994. It serves as a vibrant venue for cultural and societal reflection through exhibitions, events, educational projects, and a podcast. The website reflects a well-structured and professionally presented digital presence targeting a general audience interested in arts and culture. The business model focuses on community engagement and cultural education rather than commercial sales. Technically, the website uses modern web technologies including lazy loading, JavaScript libraries for UI effects, and structured data for SEO. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

D

DB Fernverkehr AG

der-kleine-ice.de

54

Der kleine ICE is a child-focused online platform operated by DB Fernverkehr AG, a subsidiary of Deutsche Bahn AG, providing educational and entertaining content such as games, stories, comics, and audio plays centered around train characters. The website serves as a brand engagement tool targeting children and families, enhancing Deutsche Bahn's market presence in the transportation sector through family-friendly digital content. Technically, the site is built on WordPress with modern web technologies including jQuery and CSS3, hosted via EuroDNS nameservers. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit cookie consent mechanisms. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though cookie consent is missing. Overall, the site is professional, trustworthy, and safe for its target audience.

C

cyber-Wear Heidelberg GmbH

bahnshop.de

53

bahnshop.de is the official merchandise e-commerce platform for Deutsche Bahn, operated by cyber-Wear Heidelberg GmbH. The website offers a wide range of branded products including collectibles, travel accessories, family and kids items, and other merchandise targeted at Bahn fans, travelers, and families. It holds a strong market position as the official shop for Deutsche Bahn merchandise, leveraging the brand's reputation and customer base. The business model focuses on online retail with customer account management and a comprehensive product catalog. The site is well-branded, consistent, and professionally maintained with a medium-sized operational scale and a founding date around 2014. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies such as JavaScript, CSS3, and HTML5. It integrates Google Tag Manager and Google Analytics for marketing and analytics purposes, and PayPal Unified for payment processing. Hosting is managed via EuroDNS nameservers, indicating a stable and professional hosting environment. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance. From a security perspective, the site enforces HTTPS, uses CSRF tokens on forms, and implements cookie consent mechanisms compliant with GDPR. Security headers are present but could be enhanced with additional policies like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the site lacks a published security.txt or explicit incident response contact information, which could improve transparency and security posture. Overall, bahnshop.de presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contacts to further strengthen trust and security readiness.