Security Directory

B

Bidoun

bidoun.org

61

Bidoun is a niche media publication established in 2004, focusing on arts and culture coverage of the Middle East. It has positioned itself as an intelligent and original voice in this domain, targeting a general audience interested in cultural discourse. The website offers a variety of content including articles, collections, projects, and a shop, supported by active social media channels. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, with hosting infrastructure leveraging Cloudflare DNS. The site is mobile-optimized and well-designed, providing an excellent user experience. Security posture is solid with HTTPS and secure forms, but lacks some advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

9

9292

9292.nl

69

9292.nl is a well-established Dutch public transport journey planning website founded in 2006. It offers comprehensive services including journey planning across multiple transport modes such as trains, buses, trams, metro, ferries, and shared transport options. The website targets a broad audience including daily commuters, students, travelers with disabilities, and international visitors. The platform is a leading service in the Netherlands for public transport information and ticketing. Technically, the website leverages modern web technologies including the Astro framework, Usercentrics for consent management, and Google Tag Manager for analytics. The site is mobile-optimized, fast-loading, and accessible, with a professional and consistent design. However, some security best practices such as enabling DNSSEC and publishing security headers could be improved. From a security perspective, the site uses HTTPS and consent management effectively but lacks explicit security headers and a published vulnerability disclosure policy. No contact information for incident response or data protection officers is found, which could be enhanced to improve trust and compliance. The domain registration data is consistent with the business, indicating legitimacy. Overall, 9292.nl presents a strong digital presence with good technical maturity and business credibility but could improve privacy compliance and security transparency to further strengthen its posture.

T

Typesense

typesense.org

59

Typesense.org is the official website for Typesense, an open-source, fast, and typo-tolerant search engine designed for instant search-as-you-type experiences. Positioned as an easier-to-use alternative to Algolia, Pinecone, and Elasticsearch, Typesense targets developers and businesses seeking performant and developer-friendly search solutions. The website showcases strong branding, significant community engagement (e.g., GitHub stars, Docker pulls), and notable endorsements from recognized companies and events, indicating a solid market position. Technically, the website is built using modern web technologies including Nuxt.js, Tailwind CSS, and Docker for deployment. It is hosted on AWS infrastructure, ensuring scalability and reliability. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO metadata and structured content. From a security perspective, the site uses HTTPS and enforces domain transfer protections. However, it lacks DNSSEC and does not publicly disclose privacy, cookie, or security policies, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, Typesense.org presents a professional, trustworthy, and technically mature web presence. Strategic improvements in privacy compliance and security transparency would further strengthen its risk profile and user confidence.

G

Google

angular.io

60

Angular.dev is the official website for the Angular web development framework, maintained by Google LLC. It serves a global audience of web developers and software engineers by providing comprehensive documentation, tutorials, and tools to build modern web applications. The site reflects a mature, enterprise-level product with strong branding and a large community presence. Technically, the site uses Angular 20.1.3, modern web fonts, SVG graphics, and is optimized for performance and mobile devices. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. Privacy compliance is basic with a clear cookie policy and license information but lacks detailed privacy or security policies. Overall, the site is professional, trustworthy, and well-positioned in the technology sector.

J

Josh W. Comeau

css-for-js.dev

62

CSS for JavaScript Developers is a specialized online educational platform offering a comprehensive self-paced course designed to help JavaScript developers master CSS fundamentals and advanced concepts. The course is authored and taught by Josh W. Comeau, a seasoned developer and educator with experience at notable organizations. The platform targets developers using modern JS frameworks like React and Vue, providing interactive lessons, workshops, and community support. The business model is based on tiered paid packages, including team licenses and bundled offerings. The website demonstrates excellent content quality, professional design, and strong trust signals including testimonials from industry experts and endorsements from major tech companies.

F

Founders

founders.as

54

Founders is a small technology-focused company specializing in investing in and building software companies. The website serves as a professional landing page presenting the company's core business description and branding. The technical infrastructure is based on Webflow CMS with CDN hosting and uses jQuery for client-side scripting, indicating a modern but simple web presence. The site is mobile optimized with good design quality but lacks comprehensive content and detailed business information. Security posture is minimal with no detected security headers or policies, and no HTTPS configuration details are available from the provided data. Privacy and cookie policies are absent, which impacts compliance and trust. Overall, the website is functional but basic, with room for improvement in security, privacy, and contact transparency.

S

Squiz

funnelback.com

63

Squiz is a technology company specializing in AI-powered enterprise search and digital experience platforms. Their flagship product, Funnelback Search, leverages over 25 years of search innovation and 70+ ranking signals to deliver highly accurate and relevant search results across multiple content sources. The company targets enterprise clients in sectors such as Higher Education, Government, and Professional Services, offering a comprehensive suite of tools including content management, personalization, conversational AI, and analytics. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, HubSpot integration for forms, and extensive use of analytics and tracking tools. Security posture is strong with HTTPS enforced and privacy policies in place, although explicit security headers are not clearly visible in the HTML. The absence of WHOIS domain registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and trust indicators on the site. Overall, Squiz presents as a credible and established player in the enterprise search market with a well-implemented digital presence.

P

Private by Design, LLC

unseen.ninja

57

The website unseen.ninja is a personal portfolio site representing an individual or small entity focused on design and coding services. The site presents a modern, clean design with SVG-based branding and uses Vue.js framework for frontend interactivity. The content is minimal but relevant, targeting a general audience interested in design and code. The domain is newly registered in early 2024, consistent with the site's apparent purpose as a personal portfolio. Technically, the site employs modern web technologies including ES modules, web fonts, and SVG graphics. It is hosted under a reputable registrar Porkbun LLC, though the hosting provider is not explicitly identified. The site is mobile optimized and has basic accessibility features. SEO is basic but includes proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No forms or data collection mechanisms are present, reducing attack surface but also limiting user interaction. No privacy or cookie policies are provided, which is a compliance gap. The WHOIS data is consistent and transparent, with no privacy protection, appropriate for this type of site. Overall, the site is low risk with moderate trustworthiness but would benefit from improved security headers, privacy compliance, and contact transparency to enhance credibility and user trust.

H

Hellomouse Ltd.

hellomouse.net

61

Hellomouse Ltd. is a small international technology company specializing in networking, software development, and telecommunications security. The company operates an overlay network with multiple Points of Presence (PoPs) worldwide, targeting professionals and enthusiasts in networking and telecommunications. The website presents a professional and consistent brand image with clear references to their AS number and GitHub presence, indicating active engagement in the technology community. Technically, the website uses modern web technologies such as Bootstrap 5 and SVG graphics, providing a responsive and visually appealing user experience. Hosting appears to be managed via custom name servers, though the exact hosting provider is not identified. Performance and mobile optimization are good, but SEO and accessibility features are basic. No CMS or analytics tools are detected, indicating a lightweight and privacy-conscious approach. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections like clientDeleteProhibited and clientTransferProhibited statuses. However, DNSSEC is not enabled, and no security headers are present, which could be improved. The absence of privacy, cookie, and terms of service policies, as well as lack of incident response or vulnerability disclosure information, indicates gaps in compliance and transparency. Overall, the website is safe and trustworthy with no adult or questionable content. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site's security posture and user trust.

I

Inpart

inpart.io

62

Inpart is a specialized platform focused on facilitating science partnering within the biopharma, scientific, and academic sectors. The company positions itself as a trusted partner offering an end-to-end platform that enables connection, networking, and execution of deals among scientific decision-makers and research entities. The website demonstrates a professional and modern digital presence, leveraging advanced web technologies such as SvelteKit and integrating analytics tools like Google Tag Manager and Google Analytics. Structured data is well implemented to enhance SEO and business visibility. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies, which could be improved to strengthen trust and compliance. Privacy compliance indicators such as privacy and cookie policies are not found in the provided content, representing an area for enhancement. Overall, the website is well designed, accessible, and trustworthy, with a moderate to high security posture and a clear business focus on healthcare and technology sectors.

F

Fastmail Pty Ltd

fastmail.com

71

Fastmail Pty Ltd operates a professional email and calendar hosting service focused on privacy, security, and productivity for individuals and businesses. The company positions itself as an independent alternative to major providers like Gmail and iCloud, emphasizing no ads, no data mining, and strong user control. The website is well-designed, mobile-optimized, and rich in content that clearly communicates the business value and service features. Technical infrastructure leverages modern web technologies with fast performance and good accessibility, although explicit security headers are not evident in the HTML source. The security posture is strong with HTTPS enforced, a bug bounty program, and clear incident response channels, but could be improved by publishing a security.txt file and adding more visible certifications. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR adherence. WHOIS data for the domain is unavailable from the provided raw output, which is unusual and reduces transparency, but the website content and external presence strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional service provider.

D

Dimension

dimension.dev

66

Dimension is a modern SaaS collaboration platform designed for engineering teams, offering integrated chat, code exploration, deployments, issue tracking, and AI-accelerated workflows. The website positions Dimension as a new standard for collaboration, targeting software developers and engineering teams seeking an all-in-one developer experience. The platform integrates with popular tools and emphasizes productivity and seamless teamwork. Technically, the website is built using the Qwik framework and hosted on Vercel, leveraging modern web technologies such as lazy loading, SVG graphics, and responsive design. Performance and mobile optimization are strong, with a professional and consistent branding approach. Analytics are implemented via Vercel Analytics, with minimal user tracking. From a security perspective, the site uses HTTPS and shows no exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers, published security policies, and incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No vulnerability disclosure or security.txt files are present. Overall, Dimension presents a professional and trustworthy online presence with excellent content and technical implementation but should improve privacy compliance and security transparency to enhance trust and regulatory adherence.

D

dyne.org foundation

dyne.org

52

Dyne.org foundation is a well-established non-profit digital community and free software foundry based in the Netherlands, active since 2000. The organization focuses on empowering artists, creatives, and citizens through free and open-source software, digital rights advocacy, and environmental sustainability. Their website reflects a strong community orientation with multiple projects and partnerships in the free software ecosystem. Technically, the site is built using modern static site generation (Astro) and employs script offloading techniques (Partytown) to optimize performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, Dyne.org demonstrates a credible and trustworthy presence with room for improvement in formal privacy and security disclosures.

The website ssi.fyi represents a small technology-focused entity branded as SERVER SCANNING INC, registered under Private by Design, LLC in the US. The site is minimalistic, primarily serving as a portal linking to community and code repositories such as Discord, GitHub, and Forgejo. The domain is relatively new, created in 2023, consistent with a startup or new project in the technology sector. The business model and detailed service offerings are not explicitly described on the site, limiting comprehensive business insights. Technically, the site uses basic web technologies including SVG for branding, CSS for styling, and JavaScript for minimal interactivity. Hosting and DNS services are provided by Cloudflare, a reputable provider, but DNSSEC is not enabled. The site lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies, indicating room for improvement in security posture and regulatory adherence. Security-wise, no immediate vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of security headers and privacy policies reduces the overall security maturity. No incident response or vulnerability disclosure information is provided, which could impact trust and compliance. The site is accessible without WAF or security challenges, and no adult or explicit content is present, making it safe for general audiences. Overall, the website scores moderately on content quality, technical implementation, and business credibility but scores low on privacy compliance and security best practices. Strategic improvements in privacy policy publication, security header implementation, and contact transparency would enhance trust and compliance.

C

Catppuccin

catppuccin.com

59

Catppuccin is a community-driven project offering a soothing pastel theme and color schemes primarily targeted at developers, designers, and creative professionals. The website showcases a well-structured platform with rich SVG graphics and interactive elements, emphasizing its open-source nature and vibrant community engagement. The project is relatively young, founded in 2022, and maintains a strong presence on multiple social media platforms and community channels. Technically, the site is built using modern frameworks such as Astro and Svelte, ensuring fast performance and excellent mobile optimization. Security-wise, the domain registration is transparent and legitimate, with HTTPS enforced and domain status protections in place. However, the site lacks explicit security headers, cookie consent mechanisms, and detailed privacy or security policies, which are areas for improvement. Overall, Catppuccin presents a professional and trustworthy digital presence with room to enhance privacy compliance and security posture.

P

Private by Design, LLC

estela.moe

68

The website estela.moe is a personal portfolio and blog site maintained by an individual known as estela ad astra. It focuses on personal interests such as computer science, linguistics, photography, and cultural reflections. The site is small-scale, non-commercial, and targets a general audience interested in these niche topics. The business entity behind the domain registration is Private by Design, LLC, a privacy-focused registrar, which aligns with the personal and privacy-conscious nature of the site. The website uses the Hugo static site generator and is hosted with DNS services provided by Cloudflare, ensuring good performance and reliability. The site is well-designed with good navigation and mobile optimization but intentionally limits SEO visibility via robots meta tags.

C

coolmathgam.es

coolmathgam.es

68

coolmathgam.es operates as a parody Mastodon instance within the fediverse, providing a niche social networking platform that mimics Mastodon but is explicitly unaffiliated with the well-known Cool Math Games site. The platform offers basic Mastodon features such as user profiles, public timelines, and trending feeds, targeting general users interested in decentralized social media. The site is small in scale with minimal active users and clear disclaimers about its parody nature. Technically, the website is built on a modern tech stack including Mastodon version 4.4.0-nightly and React, leveraging Cloudflare for hosting and analytics. The site uses HTTPS with script integrity checks, indicating a reasonable level of technical maturity. However, some standard security headers are missing, and privacy compliance mechanisms such as cookie consent banners are absent. From a security perspective, the site benefits from HTTPS and no visible vulnerabilities or exposed sensitive data. The use of privacy protection in domain registration is typical for small or parody sites, though it limits transparency. The absence of contact information, terms of service, and security policies reduces trust and compliance posture. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk is low given the site's parody and small scale nature, but strategic improvements in privacy compliance, security headers, and transparency would enhance trustworthiness and user confidence.

V

Volpeon

volpeon.ink

65

Volpeon.ink is a personal website operated by an individual known as Volpeon, who identifies as a software developer and hobby vector artist. The site serves as a portfolio showcasing vector art projects, custom emojis, and personal writings. It targets a general audience interested in creative digital art and personal content, with a niche presence in the Fediverse and related social platforms. The business model is primarily personal branding and content sharing without commercial transactions. The website is well designed with excellent content quality and consistent branding.

F

Framasoft

joinpeertube.org

60

JoinPeerTube.org is the official website for PeerTube, a decentralized, open-source video hosting platform developed by the French non-profit organization Framasoft. The platform offers an alternative to centralized Big Tech video services by enabling users to create independent video hosting sites interconnected via a federated network using ActivityPub. The website clearly targets users and content creators interested in privacy-respecting, ad-free, and community-driven video hosting solutions. Technically, the site is built with modern web technologies including Vue.js, WebRTC, and ActivityPub protocols, and is hosted by Gandi SAS. The site is well optimized for mobile and desktop, with excellent design and user experience. Security posture is good with HTTPS enforced and minimal tracking, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Overall, the domain registration and WHOIS data align well with the organization’s identity, supporting high legitimacy and trustworthiness.

The website meli-email.org represents a small technology project operated by 1337 Services LLC, focused on delivering a terminal-based email client named meli. The project targets terminal users and developers seeking a modern, extensible mail client with support for various email protocols and storage formats. The business model revolves around open source software distribution with downloadable binaries and source code repositories. The website is hosted on privacy-conscious infrastructure (Njalla) and provides clear navigation and relevant technical content, including installation instructions and screenshots. From a technical perspective, the site uses modern web technologies such as Rust for the client software, WebAssembly for an online demo, and standard HTML5 and CSS for the website. The site supports multiple Unix-like platforms and provides source code access via a dedicated git repository. Performance and mobile optimization are moderate, with basic accessibility and SEO features. Security posture is limited; the site lacks published privacy, cookie, or security policies, and no security headers were detected. The domain uses HTTPS but DNSSEC is not enabled. No contact information or incident response channels are provided, limiting transparency and trust. WHOIS data is public and consistent with the project timeline, indicating legitimacy but no strong business presence. Overall, the website is functional and informative for its niche audience but lacks formal privacy and security compliance measures. Strategic improvements in policy publication, security headers, and contact transparency would enhance trust and compliance.

S

SpaceX

spacex.com

68

SpaceX is a leading aerospace company specializing in the design, manufacture, and launch of advanced rockets and spacecraft. Founded in 2002, the company aims to revolutionize space technology and enable human life on other planets. The website reflects a mature and professional digital presence with clear branding and comprehensive information about its services including launches, human spaceflight, rideshare, Starlink satellite internet, and Starshield defense services. The target audience includes aerospace industry stakeholders, enthusiasts, customers, and investors. Technically, the website is built using modern frameworks such as Angular 13, with a clean and responsive design optimized for mobile devices. The site loads quickly and provides a good user experience with clear navigation and relevant metadata for SEO. However, some security best practices such as explicit security headers and cookie consent mechanisms are not evident in the provided data. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries in the HTML content. The absence of visible security policies, incident response contacts, or vulnerability disclosure pages suggests room for improvement in transparency and security communication. The WHOIS data is unavailable or protected, which is common for high-profile companies but limits domain registration verification. Overall, the website is professional, trustworthy, and well-maintained with minor gaps in privacy compliance and security transparency. Strategic recommendations include adding explicit cookie consent, publishing security policies, and implementing security headers to enhance trust and compliance.

B

Baseten

baseten.co

62

Baseten is a technology company specializing in providing a platform for deploying AI models in production. Their services focus on performant model runtimes, cross-cloud availability, and developer-friendly workflows, targeting engineering and machine learning teams. The company positions itself as a reliable and scalable solution for serving open-source, custom, and fine-tuned AI models with options for cloud or self-hosted deployments. Technically, the website is built on a modern stack including Next.js and hosted on Vercel, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and certifications like SOC 2 Type II and HIPAA compliance, although some improvements are recommended in privacy consent and security policy transparency. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

Chainguard is a technology company specializing in secure container images and open source software supply chain security. Their website presents a professional and comprehensive overview of their offerings, including hardened containers, libraries, and virtual machines rebuilt daily to ensure security and compliance. The company targets developers, security teams, and enterprises seeking to reduce vulnerabilities and accelerate compliance with standards such as FedRAMP and PCI DSS. The site features strong branding, customer testimonials, and partner logos, positioning Chainguard as a trusted leader in container security. Technically, the website is built on modern frameworks like Next.js and React, with optimized performance and excellent mobile responsiveness. The use of Google Tag Manager indicates moderate analytics and tracking capabilities. However, the site lacks explicit privacy and cookie policies, which is a notable compliance gap. Security-wise, HTTPS is enforced, but security headers and vulnerability disclosure mechanisms are absent, suggesting room for improvement in security posture. Overall, the website is trustworthy and professional, with a strong business credibility score. The absence of direct contact emails or phone numbers limits immediate contact options, relying primarily on contact forms. The WHOIS data aligns well with the business claims, showing consistent registrant information and domain age appropriate for the company's market presence. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, adding vulnerability disclosure and incident response information, and providing direct contact channels for security concerns to enhance trust and compliance.

M

Mistral AI

mistral.ai

70

Mistral AI is a French technology company founded in 2019 specializing in providing a frontier AI platform for enterprises. Their offerings include configurable AI assistants, autonomous agents, multimodal AI, and developer tools such as AI coding assistants and builder APIs. The company positions itself as a leader in open-source AI models and enterprise-grade AI deployments, targeting developers and businesses seeking customizable AI solutions. Technically, the website is built on a modern stack using Next.js and Cloudflare services, delivering fast and mobile-optimized experiences. Security posture is strong with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and privacy compliance documentation is lacking. Overall, the website is professional and trustworthy, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

AskGamblers is a well-established online platform providing comprehensive information, reviews, and news related to online gambling, including casinos, sports betting, and bonuses. The website positions itself as a trusted and award-winning source for gamblers worldwide, offering expert ratings, player reviews, and complaint resolution services. The target audience is adult online gamblers seeking reliable and unbiased gambling information. Technically, the website employs modern web technologies such as Google Tag Manager, YouTube APIs, and LiveChat tracking, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and explicit security policies are not evident. Privacy and cookie policies are not clearly found in the provided HTML, indicating room for compliance improvement. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website's content and branding suggest legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving a large audience in the gambling sector.

M

MIA „Rossiya Segodnya“

sputnik.by

54

Sputnik.by is a Belarus-focused news portal operated by MIA „Rossiya Segodnya“, providing up-to-date news, photos, videos, and multimedia content primarily in Russian. The site targets a general audience interested in Belarusian and regional news, politics, economy, and sports. It maintains a consistent brand presence with integration across multiple social media platforms and offers content in multiple languages. Technically, the website uses modern web technologies including responsive images, SVG icons, and asynchronous JavaScript loading, with monetization via Yandex Ads and Google Tag Manager. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data confirms legitimacy with consistent registrant information and appropriate domain age. Overall, the site is a credible media outlet with room for improvement in privacy and security transparency.

A

Austria Wirtschaftsservice

aws.at

73

Austria Wirtschaftsservice (aws) is a key Austrian government funding agency dedicated to supporting innovation, business growth, and internationalization. The website provides comprehensive information on federal funding programs, special initiatives related to energy costs and the Ukraine crisis, and digital tools to facilitate funding applications. The site is well-positioned as a trusted government resource with a professional design and clear navigation tailored to Austrian entrepreneurs and companies. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements modern web standards with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. WHOIS data confirms the domain's legitimacy and consistent registration with Austrian government entities. Overall, the site is a reliable, secure, and professional platform for business funding services in Austria.

R

Rightmove

rightmove.co.uk

62

Rightmove is the UK's leading online property portal, offering a comprehensive platform for buying, renting, and valuing properties. The website provides extensive listings including residential, commercial, and overseas properties, supported by property news and guides. It targets UK property buyers, renters, investors, and estate agents, positioning itself as a market leader in the real estate sector. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and OneTrust for cookie consent management. The site is well optimized for both desktop and mobile users, featuring responsive design and accessibility considerations. Performance appears fast with efficient content delivery. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. The absence of WHOIS data due to domain naming rules error is unusual but does not detract significantly from the site's legitimacy given its market presence and content quality. Overall, Rightmove demonstrates a mature digital presence with strong business credibility and user experience. However, improvements in transparency around privacy policies, security disclosures, and WHOIS data would enhance trust and compliance posture.

F

Freiwilligenakademie Niedersachsen

freiwilligenakademie.de

56

Freiwilligenakademie Niedersachsen is a non-profit organization dedicated to promoting and supporting volunteer engagement across the German state of Niedersachsen. It offers a broad range of educational and training programs for volunteers and coordinators, supported by state funding. The website is professionally designed using TYPO3 CMS, featuring responsive design and clear navigation, targeting volunteers, associations, and local government entities. Technically, the site uses modern web technologies and is well optimized for mobile devices, though some security headers and cookie consent mechanisms could be improved. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies or incident response information. Overall, the domain and website content are consistent and trustworthy for a small-sized non-profit entity.

E

Elektromarken. Starke Partner. e.V.

elektromarken.de

58

Elektromarken. Starke Partner. e.V. is a German association uniting 16 leading electrical brands to promote quality, innovation, and partnerships within the German electrical industry. The organization supports apprentices and master craftsmen through scholarships and recognizes outstanding electrical craft businesses with the ELMAR award. The website is professionally designed using HubSpot CMS, featuring modern technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and the site uses HubSpot analytics and marketing tools for user engagement. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the domain registration and DNS setup are consistent with the business claims, indicating a legitimate and trustworthy entity.

S

Specto, Informacijske tehnologije d.o.o.

specto.si

40

Specto, Informacijske tehnologije d.o.o. is a Slovenian IT development company founded in 2008, specializing in web and mobile application development as well as advanced IT solutions. The company targets businesses seeking custom software solutions to enhance their digital presence and operational efficiency. Their website reflects a professional and consistent brand image with modern design elements and clear service offerings. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, GSAP, and SVG graphics, supported by Google Analytics and Tag Manager for user tracking. However, explicit HTTPS usage is not confirmed in the HTML content, and no security headers or privacy policies are present, indicating room for improvement in security and compliance. The domain registration data is consistent with the company's location and business claims, supporting legitimacy. Overall, the website is well-structured and user-friendly but would benefit from enhanced security practices and privacy compliance documentation.

E

Experian

experian.co.uk

63

Experian UK is a leading credit reference agency and credit comparison service provider, offering consumers free credit scores, reports, and access to credit product comparisons including credit cards, loans, mortgages, and car finance. The website targets UK consumers and small businesses, providing trusted financial services and identity fraud monitoring. The digital infrastructure is built on modern web technologies including Bootstrap and SVG graphics, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforcement, security headers, and secure login mechanisms. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity.

G

Gebr. Schwarz GmbH

schwarz-gmbh.de

58

Gebr. Schwarz GmbH is a medium-sized, internationally active technology company specializing in plastics and toolmaking, with approximately 200 employees. The company positions itself as a system supplier offering comprehensive solutions in plastic injection molding, tool technology, and assembly of components. Their website reflects a professional and consistent brand image, targeting industrial clients in the manufacturing sector primarily in Germany. Technically, the website is built on TYPO3 CMS and employs modern web technologies including SVG graphics and HTML5 video, with a cookie consent mechanism implemented via Cookiebot. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security-wise, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

H

Henke Sass Wolf

henkesasswolf.de

51

Henke Sass Wolf is a leading OEM manufacturer specializing in medical endoscopy, veterinary products, and human and dental syringes. The company targets healthcare professionals and OEM partners, positioning itself as a key player in the healthcare manufacturing sector in Germany. The website reflects a professional and consistent brand image, leveraging TYPO3 CMS for content management and providing detailed product line information. Technically, the site is hosted on Strato servers, uses HTTPS, and integrates Google reCAPTCHA for form security, indicating a moderate level of digital maturity. However, the absence of explicit privacy policies, terms of service, and direct contact information limits transparency and user trust. Security posture is adequate but could be improved by implementing security headers and publishing incident response policies. Overall, the site is accessible, well-structured, and safe for general audiences, with room for enhancements in privacy compliance and security best practices.

K

Kompetenzzentrum Inklusive Bildung Sachsen-Anhalt

kib-sachsenanhalt.de

66

The Kompetenzzentrum Inklusive Bildung Sachsen-Anhalt is a small, government-funded educational project focused on qualifying people with disabilities as educational professionals and sensitizing academic and leadership staff on inclusion. The website is professionally designed using TYPO3 CMS, with responsive and accessible features, and provides clear contact information and relevant content in German with language alternatives. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. The domain registration is consistent with the business claims, and the site holds reputable awards and certifications enhancing trust. Overall, the site is a credible and well-maintained digital presence for a niche educational initiative.

A

ASV Köln e.V.

asv-koeln.de

53

ASV Köln e.V. is a well-established sports club based in Cologne, Germany, with a history spanning over 90 years. The organization offers a broad range of sports and fitness activities, including fitness courses, children's sports, various sports disciplines, and community events. The club targets a diverse audience including families, seniors, and sports enthusiasts, positioning itself as a central hub for active living in the Cologne region. The business model is primarily membership-based, supported by partnerships and sponsorships from local companies. The website reflects a professional and community-focused brand with strong trust indicators such as testimonials and partner logos. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics, with AJAX-enabled forms and a responsive design optimized for mobile devices. Hosting appears to be managed via your-server.de, and the site uses HTTPS with a valid SSL configuration. While no explicit CMS or major frameworks are detected, the site demonstrates good SEO and accessibility practices, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and provides a cookie consent mechanism compliant with GDPR. However, no dedicated security policy or incident response contact information is found, and security headers are not evident in the provided data. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies, and user data collection is limited to necessary contact and newsletter forms. Overall, ASV Köln's website is a secure, professional, and user-friendly platform that effectively supports its community sports mission. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

F

Fraport AG

frankfurt-airport.com

60

Fraport AG operates the Frankfurt Airport, one of the largest and busiest airports in Europe. The website provides comprehensive travel-related information including flight data, parking options, check-in services, and airline details. It targets travelers, visitors, and business partners with a professional and user-friendly digital presence. The site is well-structured, mobile-optimized, and integrates modern web technologies and consent management tools to ensure privacy compliance. Despite the lack of WHOIS data, the website's branding, social media presence, and content quality strongly support its legitimacy. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy policies and cookie consent mechanisms are implemented in line with GDPR requirements.

X

xStocks

xstocks.com

64

xStocks is a fintech company specializing in providing tokenized U.S. stocks and ETFs accessible worldwide 24/7 via blockchain and DeFi platforms. The company positions itself as an industry standard for tokenized equities, offering fully collateralized and compliant products that integrate with major exchanges such as Kraken, ByBit, and Solana DeFi infrastructure. Their business model focuses on democratizing investing by removing traditional barriers like market hours, commissions, and broker limitations. The website reflects a modern, professional digital presence with clear product offerings and strong partnership ecosystems. Technically, xStocks employs a modern web stack built on Next.js and React, hosted likely behind Cloudflare DNS services. The site is optimized for performance, mobile responsiveness, and SEO, with structured data enhancing search visibility. The integration with blockchain platforms and DeFi protocols indicates a high level of digital maturity and technical sophistication. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and a public security policy or incident response page, which are recommended for enhanced trust and compliance. Privacy compliance is well addressed with clear privacy and terms of service documents, and contact information is readily available. Overall, xStocks presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements in security transparency and incident response readiness would further strengthen their posture.

C

creativestyle GmbH

creativestyle.com

59

creativestyle GmbH is a large European e-commerce and digital experience agency with offices in Krakow, Munich, and Hamburg. The company employs approximately 2000 experts and specializes in creating tailored digital products, focusing on e-commerce solutions such as B2C and B2B commerce, UX/UI design, and platforms like Magento and Adobe Commerce. Their market position is strong within the European digital agency sector, targeting businesses seeking comprehensive digital transformation and e-commerce services. Technically, the website leverages modern web technologies including React and Next.js, with a well-implemented cookie consent mechanism via Usercentrics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses a content security policy. However, there is no publicly available security policy or incident response contact information, which could be improved. The absence of WHOIS data for the domain is unusual and may indicate privacy protection or registration issues, warranting further investigation. Overall, the website presents a professional and trustworthy front with strong content and technical implementation. The main risk lies in the domain registration opacity and lack of explicit security governance disclosures. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

C

creativestyle GmbH

creativestyle.pl

58

creativestyle GmbH is a large European digital agency specializing in e-commerce and digital experience solutions, with offices in Kraków, Munich, and Hamburg. The company offers a broad range of services including UX/UI design, B2B and B2C e-commerce implementations, ERP integrations, content production, cloud hosting, and performance marketing. Their target audience primarily consists of businesses seeking tailored digital commerce and experience solutions. The website reflects a professional and consistent brand image with a clear focus on their service offerings and market positioning. Technically, the website is built using modern frontend technologies such as React and Next.js, incorporating multimedia elements and a consent management platform (Usercentrics) for privacy compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Performance is moderate with room for improvement in loading speed and technical SEO. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers and visible privacy or terms of service pages. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and external signals support a moderate trust level. Overall, the website presents a solid digital presence with good business credibility and technical implementation. Strategic improvements in privacy transparency, security headers, and accessibility would enhance trust and compliance, reducing risk and strengthening their market position.

R

Rain.fi

rain.fi

58

Rain.fi is a decentralized finance platform specializing in effortless token and NFT lending on the Solana blockchain. It offers peer-to-peer borrowing, lending, and earning opportunities without price-based liquidations, positioning itself as a fast, low-fee, and scalable lending protocol. The platform targets DeFi users, NFT holders, and crypto traders seeking flexible financing solutions. The domain has been registered since 2017, indicating a mature presence in the blockchain finance space. Technically, the website leverages modern web technologies including React and Next.js, hosted with OVH SAS and utilizing Cloudflare for DNS and likely CDN services. The site demonstrates excellent mobile optimization, good SEO, and accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, though some compliance documents like privacy and cookie policies are missing. Security-wise, the platform follows best practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. However, the absence of formal privacy, cookie, and incident response policies represents compliance gaps, especially relevant for GDPR and other data protection regulations. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, Rain.fi presents a professional and trustworthy DeFi lending service with solid technical infrastructure and security. Strategic improvements in privacy compliance and transparency would enhance trust and regulatory adherence.

R

Relewise

relewise.com

57

Relewise is a Denmark-based e-commerce personalization platform targeting both B2B and B2C markets. The company offers a suite of personalization services including personalized search, recommendations, merchandising, triggers, and retail media solutions. Their platform is designed to enhance user engagement and sales by delivering tailored content and product discovery experiences. The website demonstrates a professional and consistent brand presence with a strong focus on customer success, showcasing notable clients and award-winning case studies. Technically, the website is built on the HubSpot CMS platform and integrates Google Analytics 4 and Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, with modern design elements and rich multimedia content. However, there is no visible implementation of security headers or explicit privacy and cookie policies, which are important for compliance and security assurance. From a security perspective, the site uses HTTPS but lacks published security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the professional website and business operations suggest the domain is active and legitimate. Overall, the security posture is moderate but could be improved with better transparency and technical controls. Strategically, Relewise should focus on publishing comprehensive privacy and cookie policies, implementing security headers, and clarifying domain registration details to enhance trust. These steps will improve compliance, security posture, and customer confidence.

V

VELTINS

veltins-gastroportal.de

57

The VELTINS Gastroportal is a German-language platform dedicated to supporting gastronomy professionals with digital solutions, personnel resources, business success strategies, beer care, equipment, and exclusive content under the Gastro+ section. The website presents a professional and consistent brand image, targeting a mature audience within the hospitality sector. Technically, the site leverages modern frontend technologies such as Nuxt.js and Tailwind CSS, ensuring good mobile optimization and user experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. Overall, the site is trustworthy and well-positioned within its niche but could improve transparency and security practices.

I

igus

igus.vn

63

igus® Việt Nam operates as a localized branch of the international igus GmbH brand, specializing in motion plastics solutions that require no lubrication. The website targets industrial and manufacturing sectors in Vietnam, offering a comprehensive online catalog and technical support services. The brand is well-established globally and maintains consistent branding and localized content for the Vietnamese market. Technically, the website is built on modern frameworks such as Next.js and React, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

I

igus

igus.com.br

64

igus is a specialist manufacturer and direct retailer of motion plastics, offering products such as cable carriers, self-lubricating bushings, and linear technology components. The company targets industrial and manufacturing sectors, providing innovative plastic solutions for motion applications. The website demonstrates a strong global presence with multiple international domains and localized content. Technically, the site is built on modern frameworks like Next.js, integrates advanced analytics (Piwik PRO, Google Tag Manager), and uses Salesforce Live Agent for customer interaction, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, serving its industrial audience effectively.

I

igus

igus.de

66

igus is a well-established manufacturer specializing in technical plastics for motion, including products such as energy chains, plain bearings, and linear technology. The company targets industrial and manufacturing sectors with a direct sales business model and maintains a strong market position as an expert in its field. The website reflects a professional and comprehensive digital presence with multi-language support and structured navigation tailored to industrial customers. Technically, the site is built on modern frameworks like Next.js, ensuring good mobile optimization and SEO practices. However, some security best practices such as explicit security headers and published security policies are not evident. Privacy compliance indicators like privacy and cookie policies are missing or not detected in the provided content. Overall, the website is trustworthy and professionally maintained but could improve transparency and security posture by adding explicit policies and security disclosures.

H

Hanser automotive

hanser-automotive.de

55

Hanser automotive is a specialized German media portal focused on automotive electronics, providing industry news, product information, technical articles, and event details targeted at professionals in the automotive sector. The website is well-branded and professionally designed, reflecting a medium-sized business likely operated under the Carl Hanser Verlag publishing group. Technically, the site uses modern web technologies including Next.js, Google Tag Manager, and Cloudinary for optimized content delivery. Analytics are implemented with privacy-conscious consent defaults denying storage until user consent. Security posture is good with HTTPS enforced, though some security headers and explicit policies are missing. No blocking or WAF mechanisms interfere with content access. Overall, the site is trustworthy and serves as a credible information source for its niche audience.

H

Hanse Haus

hanse-haus.ch

77

Hanse Haus is a well-established German prefabricated house provider with a strong presence in Switzerland, offering individually planned turnkey and shell houses. The company emphasizes customer satisfaction, quality, and personalized service, supported by a large workforce and a history dating back to 1929. Their website is professionally designed, multilingual, and optimized for user experience and accessibility. Technically, the site uses TYPO3 CMS and integrates modern analytics and cookie consent tools, ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site reflects a mature digital infrastructure with good privacy and security practices, supporting the company's credible market position.

Q

QUACERT Gesellschaft zur Zertifizierung von Qualitätsmanagementsystemen mbH

quacert.de

58

QUACERT is a German certification company specializing in accredited certifications for quality, environmental, energy, and education management systems, as well as waste management compliance. With approximately 30 years of experience and DAkkS accreditation, it holds a strong market position serving companies seeking recognized certifications. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. Technically, the site uses modern JavaScript components and consent management tools, hosted by a reputable provider. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers and incident response disclosures could be improved. Overall, the site is trustworthy, compliant with GDPR, and free of vulnerabilities or suspicious elements.

P

Phobs

phobs.net

69

Phobs is a technology company specializing in revenue-generating IT solutions for the hospitality industry, including hotels and campsites. Their offerings include booking engines, channel management, yield management, and reservation applications, supported by a dedicated consulting and support team. The website presents a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrates marketing and analytics tools like HubSpot, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is limited due to the absence of visible privacy and cookie policies. The lack of WHOIS data and domain registration information is a significant concern, impacting trust and legitimacy assessments.