Security Directory

C

cron IT GmbH

cron.eu

58

cron IT GmbH is a small German technology company specializing in TYPO3 CMS web agency services, including web project development, hosting, and support. The company operates primarily in Stuttgart and Schwäbisch Hall, offering end-to-end web solutions with a focus on TYPO3 CMS and managed hosting services. Their market position is that of an established regional agency with a professional online presence and client references. Technically, the website is built with modern web standards including HTML5, CSS3, JavaScript, and PHP, and integrates Google Analytics for user tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement. Overall, the website is trustworthy and professional, with clear contact information and social media presence, but could enhance compliance and security transparency.

The website represents a small Czech law office, Advokátní kancelář Mgr. Matouše Hrabala, providing legal consultancy and advocacy services. The domain is consistent with the business age and location, registered since 2013. The site content is minimal, primarily showcasing the law office name and logo, with no detailed business descriptions or contact information. The target audience is clients seeking legal services in the Czech Republic. Technically, the website runs on WordPress with Bootstrap and jQuery, but uses outdated versions which pose security risks. The site is accessible without any WAF or blocking mechanisms and does not contain any adult or questionable content.

K

Kliniken des Landkreises Lörrach GmbH

klinloe.de

46

Kliniken des Landkreises Lörrach GmbH operates as a regional healthcare provider in Germany, offering a wide range of medical services across multiple hospital locations including Lörrach and Schopfheim. The website presents comprehensive information about their 24 specialized medical departments and ambulatory care services, targeting patients, visitors, and healthcare professionals. The organization holds membership in the CLINOTEL hospital network and partners with regional health initiatives, reinforcing its credibility and integration in the healthcare sector. Technically, the website is built on the Contao CMS platform, hosted by hosting.de, and demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are not evident. Privacy compliance is strong with a detailed privacy policy and GDPR-aligned cookie management. Overall, the site is professional, trustworthy, and well-suited for its audience.

R

Rems Murr Kreis

rems-murr-kreis.de

65

The Rems-Murr-Kreis website serves as the official digital presence of the Rems-Murr district government in Germany, providing comprehensive information and services to residents, businesses, and visitors. The site covers a broad range of public services including administration, social welfare, environment, transport, education, and public safety. It is positioned as a regional government authority portal with a medium organizational size and a clear focus on public service delivery. The website is built on the TYPO3 CMS platform, leveraging Matomo analytics for privacy-conscious user tracking. The technical infrastructure is modern and well-optimized for mobile and accessibility standards, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be enhanced. Privacy compliance is robust, with detailed policies and a visible data protection officer contact. Overall, the site demonstrates high trustworthiness and professionalism, suitable for its government function.

L

Listen Money Matters LLC

getlasso.co

63

Lasso, operated by Listen Money Matters LLC, is a specialized SaaS platform offering affiliate marketing tools primarily targeting Amazon sellers and content creators across platforms like WordPress, YouTube, Instagram, and general websites. The company positions itself as a growth enabler for affiliate marketers by providing tools that increase conversions, optimize affiliate links, and boost commissions. With over 8,000 creators using their services, Lasso has established a credible market presence with a comprehensive suite of features including product displays, link shortening, click tracking, and mobile deep linking. The website is professionally designed, SEO optimized, and mobile responsive, reflecting a mature digital infrastructure. Technically, it leverages WordPress, Bootstrap, Google Tag Manager, and Visual Website Optimizer among other modern technologies, hosted under Cloudflare's infrastructure. Security posture is solid with HTTPS enforced and domain registration consistent with business claims, though there is room for improvement in DNSSEC adoption and security header implementation. Privacy compliance is currently lacking as no privacy or cookie policies are found, representing a compliance risk. Overall, the website is trustworthy and professional but should address privacy and security policy disclosures to enhance compliance and user trust.

T

TREFFPUNKT DEUTSCHLAND Reisemagazin Reiseführer

treffpunktdeutschland.de

55

Treffpunkt Deutschland operates as a German-language travel magazine and guide platform focusing on domestic tourism within Germany. The website offers extensive travel guides, regional news, event listings, and advertising opportunities targeting German travelers interested in exploring their homeland. The business model centers on content provision and advertising revenue within the travel media sector. Technically, the site is built on the Sitejet CMS platform, leveraging modern web technologies and hosted via inter-cdn.com, providing moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage and some script blocking mechanisms, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the site is professional and content-rich but would benefit from enhanced security and privacy practices to improve trust and compliance.

KennisplatformOost is a regional knowledge platform focused on supporting the leisure economy and tourism sector in Overijssel, Netherlands. It operates in partnership with MarketingOost and Gastvrij Overijssel, providing data collection, analysis, and practical tools to regional governments, entrepreneurs, and stakeholders. The website offers research insights, news, and trend updates relevant to the regional tourism market. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and Google Analytics, hosted likely by Touristserver.nl. The site is mobile optimized with good navigation and professional content presentation. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the platform is credible and trustworthy but should improve privacy compliance and security best practices.

The website videodelivery.net is a domain owned and operated by Cloudflare, Inc., serving as a video delivery platform for Cloudflare customers through their Cloudflare Stream product. The site content is minimal, primarily providing ownership information, abuse reporting instructions, and links to Cloudflare's main product pages. The business is positioned as a technology enterprise specializing in internet security and performance services, with a focus on video streaming infrastructure. The domain age and registration details align well with Cloudflare's corporate profile, indicating legitimacy and consistency. Technically, the site is simple, using basic HTML and CSS with no detected CMS or advanced frameworks. Hosting and DNS are managed by Cloudflare, ensuring fast performance and reliability. However, the site lacks advanced SEO, accessibility features, and security headers, which could be improved to enhance security posture and compliance. No forms or tracking scripts are present, indicating minimal data collection and user tracking. From a security perspective, the domain benefits from strong domain registration protections and a clear abuse reporting channel. However, the absence of published privacy and cookie policies, as well as missing security headers, suggests room for improvement in compliance and security best practices. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, the site scores moderately well on content quality, technical implementation, and business credibility but scores low on privacy compliance due to missing policies. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and enhancing incident response transparency to improve trust and compliance.

D

Disney

disney.com

63

The website www.disney.fi is the official Finnish portal for Disney, providing comprehensive information about Disney movies, shows, vacations, and theme parks. It serves as a localized gateway to Disney's global entertainment offerings, including Disney+ streaming, merchandise via Disney Store, and Disneyland Paris vacation packages. The site targets a general audience, especially families and Disney fans in Finland, and is part of the enterprise-level media and entertainment sector under The Walt Disney Company umbrella. The content is professionally curated, well-branded, and consistent with Disney's global identity.

RegioBoard by DataCharts is a specialized service offering regional economic data analysis and benchmarking tools primarily targeting regional economic development agencies and stakeholders in Germany. The business operates a subscription-based model with tiered offerings and personalized support, leveraging partnerships with research and IT organizations. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted on a German provider 1blu.de. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate with HTTPS assumed but lacking advanced security headers and explicit incident response policies. Privacy compliance is basic but present with a privacy policy and cookie policy, though no active consent mechanism is detected. Overall, the site is trustworthy and professionally maintained with good business credibility and client testimonials.

P

Photonic

photonic.wtf

51

Photonic.wtf is a newly registered website (January 2024) with minimal content focused on design, clothing, and websites. The site presents a simple branded landing page with no detailed business information, contact details, or interactive features. The domain is privacy protected, which is common for new or small businesses but reduces transparency. The technical infrastructure is basic, using standard HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be via NS1 DNS services, but no further hosting details are available. Security posture is minimal with no security headers or policies detected, and no HTTPS enforcement details available. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the website appears to be in an early stage of development or a placeholder with limited business credibility and low trust indicators.

D

Deutschlandfunk Nova

deutschlandfunknova.de

59

Deutschlandfunk Nova is a German public radio broadcaster targeting younger audiences with a mix of news, podcasts, and pop culture content. It operates under the Deutschlandradio umbrella, providing a trusted and established media service. The website is professionally designed, mobile-optimized, and rich in multimedia content, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and popular media player libraries, hosted on reputable infrastructure providers. Security posture is solid with HTTPS enforced, though some security headers are not visibly implemented. Privacy compliance is partially met with a comprehensive privacy policy but lacks explicit cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness as a public media entity.

R

Romper

romper.com

63

Romper is a media website focused on lifestyle, parenting, and family-related content, operating under the Bustle Digital Group umbrella. The site offers articles and media content aimed at a general audience interested in family and lifestyle topics. The website demonstrates a professional design with consistent branding and moderate content quality. Technically, the site uses modern web technologies including React and CDN services, with moderate performance and good mobile optimization. However, the absence of visible privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data indicate gaps in security posture and compliance. These factors reduce the overall trustworthiness and raise concerns about domain legitimacy. Strategic improvements in security practices, privacy compliance, and domain transparency are recommended to enhance trust and compliance.

T

The Zoe Report

thezoereport.com

68

The Zoe Report is a well-established media brand focused on fashion, beauty, and lifestyle content targeted primarily at women interested in personal style. Founded by Rachel Zoe in 2009 and operating under the Bustle Digital Group umbrella, it offers trend reports, beauty advice, and lifestyle articles. The website demonstrates a professional and consistent brand presence with high-quality content and a modern, responsive design. Technically, the site leverages modern web technologies including React-based JavaScript bundles, advanced CSS, and integrates multiple third-party advertising and analytics services such as Google DoubleClick, InMobi, and DoubleVerify. The presence of a consent management platform indicates awareness of privacy regulations, although explicit privacy and terms of service pages were not found in the provided content. Security posture is strong with HTTPS enforced and security headers implied, but the absence of explicit security contact information and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the brand's market presence and content quality mitigate some risk. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

W

W Magazine

wmagazine.com

70

W Magazine is a prominent media brand specializing in fashion, culture, film, and entertainment content. It operates a highly professional and visually rich website that serves a broad audience interested in these sectors. The business model is primarily advertising and subscription-based, supported by a strong digital presence and multimedia content including videos and articles. The website is owned by W Media, a large media entity with a consistent brand identity and market leadership in its niche. Technically, the website employs modern web technologies including React, video streaming, and advanced CSS styling. It leverages multiple third-party services for advertising, analytics, and consent management, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and implements security best practices including consent management and secure form handling. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website presents a low risk profile with high trustworthiness and professionalism. Strategic recommendations include publishing detailed security and incident response policies, implementing a security.txt file for vulnerability disclosures, and enhancing accessibility features to further improve compliance and user experience.

A

Autoriteit Consument & Markt (ACM)

consuwijzer.nl

71

ACM ConsuWijzer is the official Dutch government consumer rights advisory portal operated under the Ministry of Economic Affairs. It provides practical advice, example letters, and step-by-step guides to help consumers understand and exercise their rights. The website targets consumers in the Netherlands and serves as a trusted source of government-backed consumer information. The business model is informational and advisory, with no commercial transactions. The site is well positioned as a primary government resource in the consumer protection sector. Technically, the website is built on Drupal CMS, employing modern web standards including responsive design, SVG icons, and accessibility features. The site is mobile-optimized and offers good SEO practices. Analytics are implemented via Siteimprove, with minimal user tracking and GDPR-compliant cookie consent mechanisms. From a security perspective, the site uses HTTPS and cookie consent banners, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms the domain is registered to the official government entity, reinforcing legitimacy. Overall, ACM ConsuWijzer presents a professional, trustworthy, and secure platform for consumer advice. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

O

Ortsgemeinde Asbach

ortsgemeinde-asbach.de

58

Ortsgemeinde Asbach operates as a local government portal serving the community of Asbach in the Westerwald region of Germany. The website provides residents and visitors with comprehensive information about local events, community services, administrative contacts, and cultural highlights. It positions itself as a family-friendly, lively, and welcoming municipal site, emphasizing community engagement and local identity. Technically, the website is built on modern web technologies including Bootstrap 5, jQuery, FontAwesome, and the Bolt CMS platform. It is mobile-optimized and features a clear navigation structure with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure data transmission. Analytics are handled via Plausible, a privacy-focused service, indicating a moderate approach to user tracking. From a security perspective, the site enforces HTTPS but lacks explicit security headers and published security policies or incident response contacts. No cookie consent mechanism was detected, which is a gap in GDPR compliance. No vulnerabilities or suspicious content were found, and the WHOIS data aligns well with the website's governmental nature, indicating legitimacy and trustworthiness. Overall, the website is a well-maintained municipal portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security policy transparency would enhance its security posture and regulatory adherence.

EWAS-Institut GbR is a small German economic research and applied statistics institute specializing in regional economic development, strategy consulting, and educational projects. Their flagship product, the RegioBoard interactive dashboard, has received an innovation award and is developed in partnership with other recognized institutions. The website is professionally designed, content-rich, and targets regional economic development stakeholders such as municipalities, chambers of commerce, and universities. Technically, the site uses standard web technologies like HTML5, CSS3, and jQuery, with moderate performance and good mobile optimization. Security posture is moderate with no visible security headers or advanced policies, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. WHOIS data aligns well with the business profile, showing consistent domain registration and DNS setup. Overall, the website is trustworthy and professional but could benefit from enhanced security and privacy features.

B

Bleecker Street

bleeckerstreetmedia.com

61

Bleecker Street is an independent film production and distribution company established in 2014. The company focuses on bringing a curated selection of films to audiences, as reflected in their website content highlighting various film titles. The website is professionally designed with consistent branding and targets a general audience interested in movies and film trailers. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and is likely built on Craft CMS. The site is mobile optimized and performs moderately well. Security-wise, the site uses HTTPS and has domain transfer protections, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy and cookie policies are not found, indicating a gap in compliance with GDPR and other privacy regulations. Overall, the website is credible and trustworthy but would benefit from improved privacy disclosures and security hardening.

Kamali is an online financial service provider specializing in fast, fair microloans primarily targeting Czech residents aged 18 and above. The company offers quick loan approval and disbursement, with the first loan up to 15,000 CZK free if repaid within 14 days. Recognized by the reputable Czech organization Člověk v tísni for responsible lending, Kamali positions itself as a market leader in the Czech microloan sector. The website is professionally designed, mobile-optimized using AMP technology, and includes a mobile app for loan management, enhancing user convenience. Technically, the website employs modern web technologies including AMP, Google Tag Manager for analytics, and OneTrust for cookie consent management, reflecting a mature digital infrastructure. The site demonstrates good SEO and accessibility practices, with fast loading times and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data limits the ability to fully verify domain legitimacy and ownership transparency, which slightly impacts trust assessment. However, the overall business credibility is supported by clear contact information, professional content, and recognized trust indicators. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, Kamali presents a trustworthy and user-friendly platform for microloans in the Czech Republic, with recommendations to enhance security headers and publish a vulnerability disclosure policy to further strengthen security posture and transparency.

P

Proformat

proformat.pl

61

Proformat is a professional interactive agency based in Wrocław, Poland, specializing in custom web design, e-commerce solutions, SEO, branding, and bespoke software development. The company targets businesses of all sizes across Poland and internationally, offering comprehensive digital services with a strong emphasis on quality and client collaboration. Their market position is supported by a portfolio of over 500 projects and a consistent brand presence. Technically, the website is built on WordPress with modern technologies such as Bootstrap, PHP7, and integrates Google Analytics and Tag Manager for marketing insights. The site is well-optimized for mobile devices and SEO, featuring a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and secure forms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a concern for domain transparency but does not detract significantly from the overall trustworthiness given the professional web presence and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details.

Fandango operates as a prominent online movie ticketing platform primarily serving the United States market. The website content analyzed is a geographic restriction notice indicating that the service is not available outside the US. The domain WHOIS data is unavailable or missing from the VeriSign database, which is unusual for a well-known brand and raises some concerns about domain registration transparency. The website itself is minimalistic, with no forms, contact information, or privacy policies presented on this page, indicating this is likely a specialized error or restriction page rather than a full site representation. Technically, the site uses standard HTML5 and CSS3 with embedded SVG logos and icons. There is no evidence of advanced frameworks or third-party libraries in the provided content. The page is moderately optimized for mobile but lacks accessibility and SEO enhancements. Security headers and HTTPS status could not be verified from the provided data, but the absence of security policies and contact details suggests room for improvement in security posture. From a security perspective, the lack of WHOIS data and absence of privacy and cookie policies are notable gaps. No forms or data collection mechanisms are present, reducing immediate data exposure risks. The site does not show signs of WAF or security challenge blocking, and the content is safe with no adult or explicit material. Overall, the site scores low to moderate on AI-based quality and security metrics due to missing policies and WHOIS transparency. Strategically, it is recommended that Fandango ensure WHOIS data is properly published and accessible, provide clear privacy and cookie policies, and include contact and security information to enhance trust and compliance. Improving technical SEO, accessibility, and security headers would also strengthen the website's overall posture.

P

Proxy Protection LLC

cssdb.org

53

CSS Database is a specialized online resource providing detailed information about CSS features and their progression through standardization stages. It targets web developers and front-end engineers seeking up-to-date, authoritative data on CSS specifications, browser support, and polyfills. The site is well-structured, with comprehensive content linking to official documentation and community tools, positioning it as a niche but valuable technical reference in the web development ecosystem. Technically, the website employs modern web standards, uses Google Fonts and Cloudfront CDN for performance, and is hosted by DreamHost. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Security posture is moderate; while HTTPS is implied, no explicit security headers or policies are detected, and domain registration uses privacy protection, which is common for small technical sites. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is trustworthy and professional but could improve transparency and security practices.

The domain monacobeatles.com currently serves a 404 Not Found error page with embedded information indicating it is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. The website lacks any substantive business content, contact information, or navigation, limiting the ability to assess the business comprehensively. Technically, the site is hosted on Google Cloud Platform with HTTPS enabled and uses basic HTML, CSS, and JavaScript. Security practices include frequent certificate rotation and no hosting of executable files, but DNSSEC is not enabled and security headers are absent. Privacy compliance is indicated through embedded text stating no third-party cookies and GDPR adherence, though no explicit cookie consent mechanism is implemented. Overall, the site is safe with no adult or malicious content detected, but the lack of accessible business content and minimal technical implementation results in a low overall maturity and trust score.

V

Verbandsgemeinde Asbach

vg-asbach.de

65

Verbandsgemeinde Asbach operates as a local government authority in Germany, providing administrative, social, educational, cultural, and environmental services to residents and visitors of the Asbach region and its associated local communities. The website serves as an official portal offering comprehensive information and online services relevant to the municipality's governance and community engagement. Technically, the site is built on the ionas4 CMS platform, utilizing modern web technologies including AngularJS and SystemJS, and incorporates Matomo analytics for user tracking with privacy considerations. Security posture is solid with HTTPS enforcement and script integrity checks, though explicit privacy and security policies are not clearly published. Overall, the site is professional, trustworthy, and well-structured, serving its public sector role effectively.

T

Trent Walton

trentwalton.com

52

Trent Walton's website serves as a professional portfolio showcasing his expertise as a designer, consultant, and music producer. The business operates primarily as a small, independent service provider focusing on design projects including branding, web, application, and product design, alongside music production. The site reflects a personal brand with a clear market position targeting clients seeking creative and consulting services. Technically, the website is built with standard HTML and CSS, uses Google Fonts, and hosts images and assets locally. The domain is well-established since 2004, registered with GoDaddy, and protected with domain status locks, though DNSSEC is not enabled. Security posture is moderate with no detected security headers or explicit security policies, and no privacy or cookie policies are present, indicating room for compliance improvements. Social media integration is strong, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

S

Steffen Knoeller

steffen-knoeller.de

48

The website steffen-knoeller.de is a personal portfolio site belonging to Steffen Knoeller, showcasing CSS Zen Garden entries and 10K Apart coding challenges. The site focuses on demonstrating responsive design and CSS animations, targeting web developers and design enthusiasts. The business model is a personal showcase without commercial services or products. Technically, the site uses HTML5, CSS3, JavaScript, and jQuery 1.10.2, with some SVG usage for responsive graphics. The site is moderately optimized for mobile devices and has a basic accessibility level. Security posture is weak due to lack of HTTPS, security headers, and privacy policies. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the site is functional but lacks modern security and privacy compliance features.

Andrew Lohman's website is a minimal personal portfolio showcasing his role as a web and brand designer based in Austin, Texas. The site is simple, with limited content and no interactive features or contact information. It links externally to PCPartPicker, indicating a current principal designer role. The technical infrastructure is basic, relying on standard HTML and CSS without advanced frameworks or CMS. There is no evidence of HTTPS or security headers, which impacts the site's security posture negatively. Privacy and cookie policies are absent, and no contact details or social media links are provided, limiting user engagement and trust signals. Overall, the site appears functional but lacks modern security and compliance features.

R

RELIANCE CAPITAL

reliance-capital.eu

53

Reliance Capital is a Poland-registered financial services company offering a range of products including business loans, guarantees, debt financing, factoring, and prepaid MasterCard® cards. The company targets private and corporate clients, especially small and medium businesses, operating across Europe, the Baltic countries, and Asia. The website presents a professional image with clear service descriptions and contact information, positioning the company as experienced and customer-focused in the financial sector. Technically, the website is built on the Tilda CMS platform, leveraging Tilda's CDN and form services, with moderate performance and good mobile optimization. Security is adequate with HTTPS and secure form handling, but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. Overall, the site is safe, trustworthy, and functional but would benefit from enhanced privacy compliance and security policies.

R

Romantischer Rhein Tourismus GmbH

romantischer-rhein.de

68

Romantischer Rhein Tourismus GmbH operates a professional tourism promotion website focused on the Romantic Rhine region in Germany, targeting tourists and visitors interested in cultural and natural attractions. The website provides comprehensive information about regional offers, events, and accommodations, positioning itself as a key regional marketing organization. The technical infrastructure leverages modern web technologies including Google Maps API, Cookiebot for consent management, and Google Analytics for visitor tracking, indicating a mature digital presence. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the website is trustworthy, compliant with GDPR, and well-optimized for user experience and mobile devices, making it a reliable source for regional tourism information.

V

Verbandsgemeinde Rengsdorf-Waldbreitbach

rengsdorf-waldbreitbach.de

65

The Verbandsgemeinde Rengsdorf-Waldbreitbach website serves as the official digital presence for a local government association in Germany, providing residents and visitors with access to municipal services, public announcements, and community information. The site is well-structured with comprehensive navigation covering key areas such as citizen services, infrastructure, education, and tourism. Technically, the website employs modern web technologies including AngularJS and the Ionas4 CMS platform, with HTTPS enforced and resource integrity checks in place, reflecting a moderate to good level of digital maturity. Security posture is generally sound, though the absence of explicit security headers and a formal security policy suggests room for improvement. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service, which are important for full GDPR adherence. Overall, the site is trustworthy and professional, consistent with its government entity status, but could enhance transparency and security by publishing more detailed policies and contact information.

The website www.bvcd.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which prevents direct access to any meaningful content or business information. The domain WHOIS data is unavailable or protected, providing no registrar, creation, expiry, or registrant details. Consequently, no privacy policies, contact information, or security policies are detectable. The technical infrastructure is limited to Cloudflare's security services with no visible CMS or analytics tools. This lack of accessible content and metadata severely limits the ability to assess the business, technical, or security posture of the entity behind the domain. The site appears to be protected by Cloudflare but is effectively blocked for analysis purposes.

P

Provincie Drenthe

drentscheaa.nl

70

Nationaal Park Drentsche Aa is a government-affiliated nature conservation entity in the Netherlands, focused on preserving and promoting one of the country's most pristine stream valley landscapes. The website serves as an informational and engagement platform for visitors, locals, and nature enthusiasts, offering details on activities, events, and park features. The site is well-branded, consistent with official provincial government identity, and targets a broad audience interested in nature and outdoor recreation. Technically, the site uses a modern CMS (iprox), implements HTTPS, and integrates Google Analytics 4 for visitor insights. Accessibility and mobile responsiveness are well addressed, contributing to a positive user experience. Security posture is solid with encrypted connections and secure form handling, though formal security policies and incident response contacts are absent. Privacy compliance is strong with clear cookie consent and privacy policy links. Overall, the site is trustworthy, professional, and aligned with its governmental mission.

D

DontPayFull: Coupon Codes, Coupons, Promo Codes, Free Shipping and Discounts

dontpayfull.com

72

DontPayFull.com is an online coupon and promo code aggregator providing users with thousands of discount offers and free shipping deals updated daily. The website targets online shoppers seeking savings across various e-commerce platforms. It operates primarily as an affiliate marketing business, driving traffic and conversions to partner retailers through coupon codes and deals. The site presents a modern, mobile-optimized design with a clear focus on user experience and content relevance. Technically, it employs common web technologies including Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance, although no CMS or hosting provider details are evident. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service documentation. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced compliance and security disclosures.

C

CM.com

cxcompany.com

74

CM.com is a large technology company specializing in conversational AI cloud platforms that enable businesses to build AI chatbots without coding. Their market position is strong within the AI and telecommunications sectors, offering multi-channel chatbot deployment and customer support automation services. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Microsoft Clarity, indicating a high level of digital maturity and performance optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not published. Overall, the website and business demonstrate legitimacy and professionalism, with privacy protection applied to WHOIS data, which is common for enterprises of this scale.

K

Kontomatik

kontomatik.com

79

Kontomatik is a fintech company specializing in open banking solutions primarily serving the Central and Eastern European region. Their platform enables businesses to access and analyze financial data through a unified API, supporting services such as identity verification, risk analysis, transaction labeling, and PDF document analysis. The company positions itself as a trusted partner for financial institutions and businesses seeking data-driven decision-making capabilities. Technically, the website is built on modern web technologies including Webflow CMS, Cookiebot for consent management, and integrates Google Analytics and Google Ads for marketing and analytics. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is typical for fintech firms. Overall, the website reflects a professional and trustworthy business with a solid digital presence.

The website luckycasino.ca appears to be an online casino platform operated by Glitnor Marketing Ltd., a company registered in Gibraltar since 2019. The site is currently inaccessible due to a Cloudflare Turnstile captcha security challenge, preventing direct content analysis. The domain registration data is consistent and legitimate, matching the business type and location. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or legal information limit the ability to fully assess the website's compliance and professionalism. The technical infrastructure relies on Cloudflare for security and hosting, but no further technology stack or CMS details are available due to content blocking. Security posture cannot be fully evaluated, but the presence of a WAF challenge indicates some level of protection. Overall, the site scores low on content quality and privacy compliance due to inaccessibility and missing policies, resulting in a low AI overall score.

L

Landgoedhotel Woodbrooke

woodbrookebarchem.nl

62

Landgoedhotel Woodbrooke is a medium-sized hospitality business located in the Netherlands, offering hotel accommodations, conference facilities, and event hosting services. The company positions itself as a leading meeting and event hotel in East Netherlands, with a focus on regional and organic products and outdoor activities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers and integrates with third-party booking and marketing platforms. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit security policies. Overall, the website is trustworthy and well-maintained, supporting the business's market position effectively.

Hampshire Hotel 's Gravenhof Zutphen is a small hospitality business located in the historic city center of Zutphen, Netherlands. The hotel offers accommodation, dining, and event services, targeting tourists and visitors seeking a culturally rich experience. The website is professionally designed with multilingual support and clear navigation, facilitating direct bookings and showcasing promotional packages. The technical infrastructure includes modern JavaScript integrations, Google Tag Manager, Facebook Pixel, and a third-party PMS booking system, indicating a mature digital presence. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is basic with visible privacy and cookie policies but lacks an explicit consent mechanism. Overall, the website reflects a trustworthy and credible business with good user experience and marketing practices.

H

Herberg de Gouden Leeuw

herbergdegoudenleeuw.com

63

Herberg de Gouden Leeuw is a small boutique hotel and restaurant located in Bronkhorst, the smallest city in the Netherlands. The business offers accommodation, dining, event hosting, and related hospitality services. The website is professionally designed with clear navigation, multilingual support, and integrated booking engines from Hoteliers and Smarthotel, indicating a mature digital presence. The technical infrastructure leverages modern JavaScript libraries, a PWA service worker, and is hosted on the Duda platform with CDN support, providing good performance and mobile optimization. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding are consistent with a legitimate hospitality business. Overall, the site is suitable for general audiences with no adult content and provides clear contact information and social media presence.

S

Snap Inc.

bitmoji.com

67

Bitmoji is a digital avatar creation platform owned by Snap Inc., offering users personalized cartoon emojis and stickers for use in messaging and social media. The website presents a professional and consistent brand image with clear calls to action for downloading the app on iOS and Android platforms, as well as integration with Snapchat and other messaging apps. The business model is freemium, leveraging app downloads and integrations to drive user engagement. The site targets a broad general audience interested in personalized digital expression. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with mobile optimization and app store integration. While no advanced frameworks or CMS are detected, the site is well-structured and SEO optimized. Performance is moderate with good mobile responsiveness. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS (implied by app store links and modern web standards), but no explicit security headers were detected in the provided data. No forms or sensitive data collection points are present on the main page, reducing attack surface. Privacy compliance is strong with clear links to comprehensive privacy and cookie policies, though no active cookie consent mechanism is visible. The WHOIS data is missing or unavailable, which is unusual but likely due to registry or query limitations rather than malicious intent. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. The main risk is the lack of visible security headers and incomplete WHOIS data, which should be addressed to improve transparency and security posture.

The analyzed domain currently serves a Chrome internal error page indicating that the actual website content is inaccessible or blocked. The page contains embedded scripts related to the Chrome offline T-Rex runner game, which is a default browser feature when no internet connection is available or the site cannot be reached. There is no business or contact information, no privacy or cookie policies, and no security or compliance documentation present. The lack of accessible content and metadata prevents meaningful assessment of the business or its market position. Technically, the page uses standard HTML, CSS, and JavaScript with Chromium-specific scripts but lacks modern SEO, accessibility, or security features. The security posture is weak due to missing HTTPS and security headers. Overall, the domain appears inactive or misconfigured, and the trustworthiness is low.

D

Dr. Radut

radut.eu

60

The website radut.eu serves as a minimal content delivery network (CDN) branded as Dr. Radut, linking to the main radut.com site. It provides limited business information and no direct services or detailed descriptions on this page. The technical infrastructure includes basic HTML5 and CSS3 with Cloudflare Insights for analytics, indicating a moderate level of digital maturity but lacking advanced frameworks or CMS platforms. Security posture is basic, with no detected security headers or privacy policies, and no contact or incident response information provided. Overall, the site is accessible without WAF blocking but lacks comprehensive security and privacy compliance features, resulting in a moderate risk profile.

P

Privacy Coalitie

privacycoalitie.org

51

Privacy Coalitie is a Dutch non-profit coalition advocating for enhanced digital privacy and privacy-friendly alternatives in the Netherlands. Founded in 2022, it brings together multiple organizations and individuals to promote awareness, responsible data use, and societal dialogue on digital privacy. The coalition positions itself as a thought leader aiming to influence both policy and public behavior towards a more privacy-respecting digital society. The website serves as an informational and advocacy platform, providing a manifesto, member lists, and contact points for engagement. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery 3.6.0, hosted by Combell NV. The site is mobile responsive with good navigation and content structure. However, no CMS or advanced backend technologies are detected. Performance is moderate with basic accessibility and SEO optimizations in place. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and has clientTransferProhibited domain status, but lacks DNSSEC and security headers, which are recommended for improved security posture. No privacy or cookie policies are published, representing a compliance gap with GDPR best practices. Contact is provided solely via email, with no forms or phone numbers. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website is trustworthy and professional for its advocacy purpose but would benefit from enhanced privacy compliance documentation and improved security hardening. The domain registration is consistent and legitimate, supporting the coalition's credibility.

Y

Yellowgrape and Hipex

ecookie.nl

52

Ecookie.nl is a Dutch website offering a free, easy-to-install cookie banner solution designed to help e-commerce businesses comply with the GDPR (AVG) regulations. Developed collaboratively by the e-commerce agency Yellowgrape and Magento hosting specialist Hipex, the service targets webshops seeking to manage cookie consent efficiently and in their own branding style. The website provides a registration form for users to create accounts and download a whitepaper on privacy laws for webshops. The site is well-structured, mobile-optimized, and presents a professional image consistent with its niche market position. From a technical perspective, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Symfony PHP framework for user registration. Hosting is likely provided by Hipex, a Magento hosting specialist, indicating a reliable infrastructure. The site performs moderately well with good mobile responsiveness and basic accessibility features. However, explicit security headers are not detected, and no detailed privacy or security policies are published, which are areas for improvement. Security posture is adequate with HTTPS usage and secure form handling including CSRF tokens and mandatory consent checkboxes. No vulnerabilities or exposed sensitive data were identified in the provided content. The absence of published privacy and cookie policies reduces privacy compliance confidence. No incident response or vulnerability disclosure information is available, limiting transparency in security management. Overall, ecookie.nl presents a trustworthy and professional service for GDPR cookie compliance in the Dutch e-commerce sector. Strategic improvements in publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts would strengthen its security posture and compliance standing.

C

Counter

counter.dev

60

Counter.dev is a small technology company offering a privacy-friendly, open source web analytics platform designed to track unique visitors, referrals, and geographical data without compromising user privacy. The business model is based on voluntary payments with a 'pay when ready' approach, targeting website owners and developers who prioritize privacy and simplicity. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site employs modern JavaScript libraries such as jQuery and OwlCarousel, and integrates PayPal SDK for payment processing. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating good accessibility. However, some security best practices like security headers and cookie consent mechanisms are missing. The site is mobile optimized and SEO friendly but could improve accessibility features. From a security perspective, the site demonstrates a strong privacy stance by avoiding cookies and IP fingerprinting, minimizing data collection, and using HTTPS. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement. Overall, the site maintains a good security posture but could enhance transparency and compliance. The overall risk assessment is low with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing security headers, publishing security and incident response policies, adding cookie consent if applicable, and improving accessibility. These steps will strengthen trust, compliance, and security culture while supporting the company’s privacy-focused brand.

Bénévalibre is a French non-profit initiative providing free open-source software to assist very small associations in managing and valorizing volunteer work. The project is supported by CRAJEP Bourgogne-Franche-Comté and several financial and expert partners. The website serves as an informational portal and access point to the web application. Technically, the site is built on WordPress with standard plugins and modern web technologies, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of cookie consent and detailed GDPR policies. Overall, the domain registration and website content align well, indicating a legitimate and focused non-profit project.

T

Toys for Bob

toysforbob.com

57

Toys for Bob is an independent game development studio with a long-standing history since 1989, known for crafting epic adventures featuring iconic characters such as Crash Bandicoot and Spyro. The company operates primarily in the technology sector, focusing on game development across multiple platforms. Their website reflects a professional and consistent brand image, leveraging Squarespace CMS for content delivery. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security-wise, the site benefits from HTTPS and HSTS but could improve by adding additional security headers and formal security policies. Overall, the website presents a trustworthy and professional front but should enhance privacy compliance and contact transparency to improve user confidence and regulatory adherence.

T

The Calyx Institute

calyxinstitute.org

66

The Calyx Institute is a US-based non-profit organization established in 2010, dedicated to advancing digital privacy and internet freedom through education, tool development, and community support. Their offerings include membership programs providing mobile internet access via Wi-Fi hotspots and privacy-enhanced smartphones running CalyxOS. The organization maintains a strong community presence and actively supports open-source privacy projects through grantmaking initiatives. Technically, the website is built on a Ruby on Rails backend with Bootstrap frontend components, delivering a responsive and content-rich experience. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC, security headers, and vulnerability disclosure transparency. Overall, the site is professional, trustworthy, and well-aligned with its mission, serving a privacy-conscious audience effectively.

H

Holiday Media

holidaymedia.nl

60

Holiday Media is a specialized internet service provider focused on the Dutch recreation and travel sector, delivering website design, maintenance, and online booking integration to over 250 clients. Their market position is strong within this niche, supported by a professional website, client testimonials, and active social media presence. Technically, the website employs modern web technologies including Google Analytics and Tag Manager, custom fonts, and responsive design, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and secure login forms, though lacking in explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-targeted to its audience, but could improve in privacy and security transparency.